Avis aux experts,virus!!!!!!!

coccimoi -  
Bonjour,
j'ai parcouru plusieur forum ,mais je commence a menbrouiller avec toute les solutions proposés, alors je suis sur d'avoir le virus trojan.vundo.H et un trojan win32?? j'ai effectuer une analyse avec malwarebytes au bout de 10h d'analyse compléte j'avais 70000fichiers inféctés et impossible de suprimmer car trop nombreux apparement! je dispose de l'antivirus avast qui a fait une annalyse j'ai supprimer 30 infections mais virus toujours présents.
voila si un petit génie de l'informatique peut me guider pour me virer cette saloperie sa serait cool
merci d'avence
Aurore
Configuration: Windows XP
Internet Explorer 7.0

64 réponses

Résumé de la discussion

Une infection par trojan Vundo et potentiellement Win32 affecte un ordinateur Windows XP, Malwarebytes détectant des milliers de fichiers infectés et Avast ne parvenant pas à tout supprimer. Des solutions évoquées incluent l'utilisation d'un outil de nettoyage comme DrWeb, des scans externes et le formatage via KillDisk, ou l'emploi de ComboFix pour éliminer les restes. D'autres interventions évoquées suggèrent d'utiliser un CD d'outil, de tester des mesures comme la gestion du BIOS et d'autres utilitaires, tout en restant prudent sur les instructions et les téléchargements. En cas de doute, il est préconisé de sauvegarder les données essentielles avant tout nettoyage et d'évaluer progressivement les mesures disponibles, sans émettre de conclusions sur l'état du système.

Bobot (l’IA à votre service)
  1. Utilisateur anonyme
    Bon ok,
    je vois le genre.

    Coccimoi je te laisse avec Destrio5 qui s'immisce si bien sans rien proposer comme solution et tous les autres personnes qui viennent plussoyer sans rien proposer non plus. Te voila bien encadré.

    Il(s) aura (auront) sans doute la bonne parole, à défaut de la critique.

    PS : http://www.commentcamarche.net/forum/affich 12035074 win32 virtob gen 12 plus de 300virus

    Thx Jal ;)
    1. Utilisateur anonyme
      Bonjour,

      en effet c'est très fort :)

      Peux-tu faire ceci stp ?
      > Télécharge random's system information tool (RSIT) : http://images.malwareremoval.com/random/RSIT.exe
      - Enregistre le programme sur ton bureau.
      - Double clique sur RSIT.exe
      - A l'écran "Disclaimer" choisis "1 months" dans le menu déroulant puis clique sur <continue>.
      - Si HiJackThis n'est pas détecté sur ton PC, RSIT le téléchargera ; accepte alors la licence.
      - Une fois le scanne terminé tu obtiendras un rapport log.txt. Poste le sur le forum.
      NB : Il se peut que tu obtiennes un second rapport nommé info.txt. Dans ce cas poste le aussi mais dans un second message.

      Merci.

      Edit : peux-tu enregistrer le rapport MBAM sur ton bureau et le poster via http://www.ci-joint.fr (poste le lien donné par ci-joint) ?
      1. coccimoi
        voila le rapport log

        Logfile of random's system information tool 1.06 (written by random/random)
        Run by aurore at 2009-04-30 13:24:18
        Microsoft Windows XP Édition familiale Service Pack 3
        System drive C: has 1 GB (1%) free of 110 GB
        Total RAM: 1279 MB (41% free)

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 13:26:11, on 30/04/2009
        Platform: Windows XP SP3 (WinNT 5.01.2600)
        MSIE: Internet Explorer v7.00 (7.00.6000.16791)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        C:\Program Files\Alwil Software\Avast4\ashServ.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\system32\LEXBCES.EXE
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\system32\LEXPPS.EXE
        C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
        C:\apps\ABoard\ABoard.exe
        C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
        C:\Program Files\Creative\Shared Files\CamTray.exe
        C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
        C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
        C:\Program Files\Messenger Plus! 3\MsgPlus.exe
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE
        C:\Program Files\QuickTime\qttask.exe
        C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
        C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        C:\Program Files\Messenger\msmsgs.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Fichiers communs\RTE\RTEGPRS.exe
        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        C:\Program Files\Sony Corporation\Picture Package\Picture Package Menu\SonyTray.exe
        C:\Program Files\Sony Corporation\Picture Package\Picture Package Applications\Residence.exe
        C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
        C:\apps\ABoard\AOSD.exe
        C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
        C:\WINDOWS\system32\slserv.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
        C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Documents and Settings\aurore\Mes documents\VundoFix.exe
        C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
        \?\globalroot\C:\WINDOWS\system32\rundll32.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Documents and Settings\aurore\Mes documents\RSIT.exe
        C:\Program Files\trend micro\aurore.exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS02
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
        R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.couldnotfind.com/search_page.html?&account_id=138770
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = file://C:\APPS\IE\offline\fr.htm
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,First Home Page = C:\Program Files\AOL Toolbar\welcome.html
        R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
        O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
        O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
        O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
        O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
        O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
        O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
        O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
        O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Program Files\Creative\Shared Files\CamTray.exe
        O4 - HKLM\..\Run: [CleanEasyImg] c:\apps\easydvd\cleanall.exe
        O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
        O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
        O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
        O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
        O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
        O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
        O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /O6 "USB002" /M "Stylus DX3800"
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [qoscaw] c:\windows\system32\qoscaw.exe qoscaw
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
        O4 - HKLM\..\Run: [Windows UDP Control Center] iexploore.exe
        O4 - HKLM\..\Run: [Windows Services Control] service.exe
        O4 - HKLM\..\Run: [reader_s] C:\WINDOWS\System32\reader_s.exe
        O4 - HKLM\..\Run: [Framework Windows] frmwrk32.exe
        O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        O4 - HKLM\..\Run: [autochk] rundll32.exe C:\WINDOWS\system32\autochk.dll,_IWMPEvents@16
        O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
        O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [RTEGPRS] "C:\Program Files\Fichiers communs\RTE\RTEGPRS.exe" tray
        O4 - HKCU\..\Run: [Instant Access] C:\WINDOWS\system32\nsinet.exe /res
        O4 - HKCU\..\Run: [MailSkinner] c:\program files\mailskinner\mailskinner.exe
        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        O4 - HKCU\..\Run: [reader_s] C:\Documents and Settings\aurore\reader_s.exe
        O4 - HKCU\..\Run: [Diagnostic Manager] C:\DOCUME~1\aurore\LOCALS~1\Temp\1854182928.exe
        O4 - HKCU\..\Run: [autochk] rundll32.exe C:\DOCUME~1\aurore\protect.dll,_IWMPEvents@16
        O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
        O4 - HKUS\.DEFAULT\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'Default user')
        O4 - HKUS\.DEFAULT\..\Run: [Diagnostic Manager] C:\WINDOWS\TEMP\1882718496.exe (User 'Default user')
        O4 - .DEFAULT Startup: ChkDisk.dll (User 'Default user')
        O4 - .DEFAULT Startup: ChkDisk.lnk = ? (User 'Default user')
        O4 - Startup: ChkDisk.dll
        O4 - Startup: ChkDisk.lnk = ?
        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
        O4 - Global Startup: Picture Package Menu.lnk = ?
        O4 - Global Startup: Picture Package VCD Maker.lnk = ?
        O8 - Extra context menu item: &Recherche AOL Toolbar - c:\program files\aol\aol toolbar 5.0\resources\fr-fr\local\search.html
        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
        O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
        O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
        O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
        O16 - DPF: {01BE5BD7-B2DD-48B3-A759-59265A91E787} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1064_XP.cab
        O16 - DPF: {04CCFF26-7D52-4E42-BF6A-F8ECE0896EB7} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1071_XP.cab
        O16 - DPF: {04F414E9-E352-4BC3-963D-7BFE5A5F31A9} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1064_XP.cab
        O16 - DPF: {0594AF7E-573B-40DF-8165-E47AB2EAEFE8} (EGEGAUTH Class) - http://akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1026_FR_XP.cab
        O16 - DPF: {07C9CFC7-DE33-4A0C-9FFB-CDFBA843B157} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1063_XP.cab
        O16 - DPF: {0878F049-D33E-45E0-A157-C36A6683CF25} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1063_XP.cab
        O16 - DPF: {0D1011B3-89C8-4F8E-8693-BB970E2E81E0} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1069_ASPIV4_XP.cab
        O16 - DPF: {0DA910BC-6919-489E-B584-D9A4AAC7B8DE} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068_ASPIV4_XP.cab
        O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab30149.cab
        O16 - DPF: {1604DF98-D1A5-44FE-844A-98D6FD0518D0} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1060_XP.cab
        O16 - DPF: {17BFC8DA-B4D6-4DB9-AA40-1CD32EDA9845} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1066_ASPIV4_XP.cab
        O16 - DPF: {1CD49DC9-FD88-41FA-B892-47E037267D45} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1059_XP.cab
        O16 - DPF: {201B9B37-848F-40BD-90EA-7B8F0AA89D6A} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1071_em_XP.cab
        O16 - DPF: {26D73573-F1B3-48C9-A989-E6CE071957A1} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1057_XP.cab
        O16 - DPF: {2A3DFC59-8A87-49A1-85D1-42903410911F} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1058_XP.cab
        O16 - DPF: {2AEEAC34-FD74-4142-B891-4B05C0C03C87} - http://akamai.downloadv3.com/binaries/DialHTML/EGCOMSERVICE_1049_pack_XP.cab
        O16 - DPF: {321F38B6-7E5F-470E-B58C-927523B7AF92} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1069_em_XP.cab
        O16 - DPF: {3446598E-00E4-4B5E-99A6-87ECCA8324A2} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1056_XP.cab
        O16 - DPF: {3616F4B5-F6AD-4E67-966A-C218673648A0} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1070_ASPIV4_XP.cab
        O16 - DPF: {3DAD912E-D2B9-4323-B7C9-7F2C5CC0C57B} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1070_XP.cab
        O16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} - http://akamai.downloadv3.com/binaries/IA/nethv32_FR_XP.cab
        O16 - DPF: {5F4D3335-3194-4167-85AE-E7325F2695EF} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1068_em_XP.cab
        O16 - DPF: {5FD9726A-4977-449D-8352-25FDD8A510B5} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1067_em_XP.cab
        O16 - DPF: {624321F1-0581-49D8-99BD-2E952C2DF31B} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1063_ASPIV4_XP.cab
        O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/...
        O16 - DPF: {78F584DF-BBF5-4296-839C-31DE60914DBC} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1071_ASPIV4_XP.cab
        O16 - DPF: {7DBFDA8E-D33B-11D4-9269-00600868E56E} (WWWInstall Class) - http://go.securelive.com/speed/WebInstall.dll
        O16 - DPF: {87C1805D-C5AE-4455-AB39-E245BB516136} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1059_XP.cab
        O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/...
        O16 - DPF: {90D610E8-F6D0-4AD4-93CE-178A46F8C412} (Hamlet Class) - http://htmldialer.parisvoyeur.com/CABSPOLY/cd/1,0,3,8/fr/Ophelie.cab
        O16 - DPF: {95460ABD-946A-46FF-9F56-268718323EEE} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1068_XP.cab
        O16 - DPF: {A1C392A2-B274-46DB-89BE-1FBD476B9C93} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1065_XP.cab
        O16 - DPF: {AA59202C-5E41-48FC-AF7D-324F5FD6A9F1} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1070_em_XP.cab
        O16 - DPF: {AF7410C1-FBA3-415E-800A-4110CED40536} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1060_XP.cab
        O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
        O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab30149.cab
        O16 - DPF: {BFC9677B-8006-4336-9D49-2C797AEFCB9E} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1058_XP.cab
        O16 - DPF: {CB5D474E-A510-40A4-B5A4-838933BCBA64} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1065_XP.cab
        O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
        O16 - DPF: {E114CD5B-17CE-4807-890E-7B1EDF9F2E5E} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1066_XP.cab
        O16 - DPF: {E19AB99F-AEC4-4B40-A5CA-F69D22522D77} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1065_ASPIV4_XP.cab
        O16 - DPF: {E1D20694-74D9-472D-AF03-08C26173A67F} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1063_em_XP.cab
        O16 - DPF: {E24E8472-89B7-479F-8AD8-BBD7206A6A02} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1067_XP.cab
        O16 - DPF: {E3943A24-2F83-4505-9AE5-F705E81B50CB} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1055_XP.cab
        O16 - DPF: {E7AE1661-EBEB-492B-AE0D-860DF24174C6} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1064_ASPIV4_XP.cab
        O16 - DPF: {EC4AFBF3-4540-4306-AF10-4CAC509EA16B} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1074_ASPIV4_XP.cab
        O16 - DPF: {EF4DCD99-D26B-44A4-BA77-CFDCC97E7291} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1062_XP.cab
        O16 - DPF: {EFB23983-5803-4914-ADA3-C0EA2CFBDC37} - http://scripts.downloadv3.com/binaries/EGDAccess/EGDACCESS_1072_XP.cab
        O16 - DPF: {F72BC3F0-6C20-4793-9DDA-258589D8A907} - http://akamai.downloadv3.com/binaries/IA/netslv32_FR_XP.cab
        O16 - DPF: {FA1D6D8F-C6ED-4752-8512-A33283240130} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1066_XP.cab
        O16 - DPF: {FA605711-8E72-46B2-AE49-BED11B2E729D} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1063_ASPIV4_XP.cab
        O16 - DPF: {FA83E942-B796-46DE-9155-1632ECC5473B} - http://akamai.downloadv3.com/binaries/EGDAccess/EGDACCESS_1061_XP.cab
        O16 - DPF: {FBF65A16-C9AB-465E-AECE-D2D9D5AB5E60} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1067_XP.cab
        O17 - HKLM\System\CCS\Services\Tcpip\..\{7B964FC4-3AFB-4F11-A46D-B3714C45EA9B}: NameServer = 217.169.242.2 217.169.242.3
        O23 - Service: avast! iAVS4 Control Service (aswupdsv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
        O23 - Service: avast! Antivirus (avast! antivirus) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
        O23 - Service: avast! Mail Scanner (avast! mail scanner) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        O23 - Service: avast! Web Scanner (avast! web scanner) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        O23 - Service: Service de transfert intelligent en arrière-plan (BITS) - Unknown owner - C:\WINDOWS\
        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
        O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
        O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
        O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
        1. Destrio5 Modérateur
          Bonjour,

          Il faudrait penser à arrêter de faire n'importe quoi sur Internet avec ton PC.

          Tu es infecté par Virut (entre autres) qui est une grosse cochonnerie, ce n'est pas sûr qu'on puisse récupérer ton PC mais on va essayer.
          2. Utilisateur anonyme
            Arfff.

            Ok, ça va être chaud :)

            Bon,
            > Télécharge Dr.Web CureIt sur ton Bureau : ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe ou https://free.drweb.com/cureit/
            - Double clique <drweb-cureit.exe> et ensuite clique sur <Analyse>;
            - Clique <Ok> à l'invite de l'analyse rapide. S'il trouve des processus infectés alors clique le bouton <Oui>.
            Note : une fenêtre s'ouvrira avec options pour "Commander" ou "50% de réduction" : Quitte en cliquant le "X".
            - Lorsque le scan rapide est terminé, clique sur le menu <Options> puis <Changer la configuration> ; Choisis l'onglet <Scanner>, et décoche <Analyse heuristique>. Clique ensuite sur <Ok>.
            - De retour à la fenêtre principale : clique pour activer <Analyse complète>
            - Clique le bouton avec flèche verte sur la droite, et le scan débutera.
            - Clique <Oui> pour tout à l'invite "Désinfecter ?" lorsqu'un fichier est détecté, et ensuite clique "Désinfecter".
            - Lorsque le scan sera complété, regarde si tu peux cliquer sur l' icône, adjacente aux fichiers détectés (plusieurs feuilles l'une sur l'autres). Si oui, alors clique dessus et ensuite clique sur l'icône <Suivant>, au dessous, et choisis <Déplacer en quarantaine l'objet indésirable>.
            - Du menu principal de l'outil, au haut à gauche, clique sur le menu <Fichier> et choisis <Enregistrer le rapport>. Sauvegarde le rapport sur ton Bureau. Ce dernier se nommera DrWeb.csv
            - Ferme Dr.Web Cureit
            - Redémarre ton ordi (important car certains fichiers peuvent être déplacés/réparés au redémarrage).
            - Suite au redémarrage, poste (Copie/Colle) le contenu du rapport de Dr.Web dans ta prochaine réponse.

            Répète cette opération 3 fois de suite stp puis poste les trois rapports dans des messages différents.

            Merci.
            1. coccimoi
              merci dlld analyse en cours je fait au mieu et envoi le rapport

              pour info a destrio 5 etan 5utilisateur sur ce pc difficile de surveiller tous le monde ,un peu de compréhension merci
              1. Utilisateur anonyme
                Ok,
                très bien.
                On a un peu de boulot...

                Bon courage.
            2. Destrio5 Modérateur
              "pour info a destrio 5 etan 5utilisateur sur ce pc difficile de surveiller tous le monde ,un peu de compréhension merci"

              ---> Je te comprends mais ce n'est pas une raison. Si tu savais ce que Virut peut faire avec un PC...
              1. coccimoi
                ce n'est pas le rapport demander mais malwarebytes etait encore en action et ma fourni ce rapport je le poste si sa peut aider

                Malwarebytes' Anti-Malware 1.36
                Version de la base de données: 2059
                Windows 5.1.2600 Service Pack 3

                30/04/2009 14:15:33
                mbam-log-2009-04-30 (14-12-42).txt

                Type de recherche: Examen rapide
                Eléments examinés: 77797
                Temps écoulé: 1 hour(s), 35 minute(s), 47 second(s)

                Processus mémoire infecté(s): 0
                Module(s) mémoire infecté(s): 0
                Clé(s) du Registre infectée(s): 0
                Valeur(s) du Registre infectée(s): 1
                Elément(s) de données du Registre infecté(s): 0
                Dossier(s) infecté(s): 4120
                Fichier(s) infecté(s): 6095

                Processus mémoire infecté(s):
                (Aucun élément nuisible détecté)

                Module(s) mémoire infecté(s):
                (Aucun élément nuisible détecté)

                Clé(s) du Registre infectée(s):
                (Aucun élément nuisible détecté)

                Valeur(s) du Registre infectée(s):
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\autochk (Worm.Autorun) -> Quarantined and deleted successfully.

                Elément(s) de données du Registre infecté(s):
                (Aucun élément nuisible détecté)

                Dossier(s) infecté(s):
                C:\Program Files\Instant Access (Adware.EGDAccess) -> Delete on reboot.
                C:\Program Files\Instant Access\Center (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Center\Icons (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\DesktopIcons (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\DesktopIcons\INSTANT-ACCESS (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer (Adware.EGDAccess) -> Delete on reboot.
                C:\Program Files\Instant Access\Dialer\1000305296 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1000305296\es6-scripts.downloadv3.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1000305296\es6-scripts.downloadv3.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1000305296\es6-scripts.downloadv3.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1000305296\es6-scripts.downloadv3.com\custom\1402 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1000305296\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1000305296\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1000305296\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1000305296\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1000305296\www.17re8px9v1ypc6w7.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1001197872 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1001197872\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1001197872\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1001197872\media.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1001197872\media.rapid-pass.net\fullpages (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1001197872\media.rapid-pass.net\fullpages\ds_v3_chatsexy (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1001197872\media.rapid-pass.net\fullpages\ds_v3_chatsexy\fullpage03 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1001197872\media.rapid-pass.net\fullpages\ds_v3_chatsexy\fullpage03\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1001197872\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1001197872\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1001197872\scripts.dlv4.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1001197872\scripts.dlv4.com\custom\4265 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1001197872\scripts.dlv4.com\custom\4265\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1001197872\scripts.downloadv3.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1001197872\scripts.downloadv3.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1001197872\www.the-best-promos.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\10013990 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\10013990\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\10013990\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\10013990\media.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\10013990\media.rapid-pass.net\fullpages (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\10013990\media.rapid-pass.net\fullpages\vzap_v3 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\10013990\media.rapid-pass.net\fullpages\vzap_v3\fullpage02 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\10013990\media.rapid-pass.net\fullpages\vzap_v3\fullpage02\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\10013990\media.rapid-pass.net\fullpages\vzap_v3\fullpage02\images\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\10013990\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\10013990\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\10013990\scripts.dlv4.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\10013990\scripts.dlv4.com\custom\4259 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\10013990\scripts.dlv4.com\custom\4259\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\10013990\scripts.downloadv3.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\10013990\scripts.downloadv3.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\10013990\www.the-best-promos.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1002062695 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1002062695\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1002062695\ExitTraffic (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1002062695\img (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1002491816 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1002491816\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1002491816\external-api.dlv4.com\hits (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1002491816\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1002491816\fp.pc-on-internet.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1002491816\fp.pc-on-internet.com\50264 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1002491816\fp.pc-on-internet.com\50264\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100299074 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100299074\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100299074\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100299074\media.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100299074\media.rapid-pass.net\fullpages (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100299074\media.rapid-pass.net\fullpages\vz_v3_desktopstrips (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100299074\media.rapid-pass.net\fullpages\vz_v3_desktopstrips\fullpage01 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100299074\media.rapid-pass.net\fullpages\vz_v3_desktopstrips\fullpage01\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100299074\media.rapid-pass.net\fullpages\vz_v3_desktopstrips\fullpage01\images\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100299074\network.vizit.us (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100299074\network.vizit.us\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100299074\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100299074\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100299074\scripts.dlv4.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100299074\scripts.dlv4.com\custom\3560 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100299074\scripts.dlv4.com\custom\3560\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100299074\www.the-best-promos.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100317258 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100317258\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100317258\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100317258\media.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100317258\media.rapid-pass.net\fullpages (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100317258\media.rapid-pass.net\fullpages\crz_v3_world (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100317258\media.rapid-pass.net\fullpages\crz_v3_world\fullpage10 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100317258\media.rapid-pass.net\fullpages\crz_v3_world\fullpage10\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100317258\media.rapid-pass.net\fullpages\crz_v3_world\fullpage10\images\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100317258\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100317258\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100317258\scripts.dlv4.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100317258\scripts.dlv4.com\custom\4258 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100317258\scripts.dlv4.com\custom\4258\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100317258\scripts.downloadv3.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100317258\scripts.downloadv3.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100317258\www.epass-key.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\100317258\www.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1004044282 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1004044282\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1004044282\external-api.dlv4.com\hits (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1004044282\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1004044282\fp.pc-on-internet.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1004044282\fp.pc-on-internet.com\50243 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1004044282\fp.pc-on-internet.com\50243\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1004676889 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1004676889\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1004676889\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1004676889\fp.gad-network.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1004676889\fp.gad-network.com\50000 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1004676889\fp.gad-network.com\50000\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1004676889\fp.gad-network.com\50000\images\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1004676889\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1004676889\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1004676889\scripts.dlv4.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1004676889\scripts.dlv4.com\custom\4285 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1004676889\scripts.dlv4.com\custom\4285\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1004676889\www.0texkax7c6hzuidk.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1004676889\www.0texkax7c6hzuidk.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006008404 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006008404\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006008404\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006008404\media.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006008404\media.rapid-pass.net\fullpages (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006008404\media.rapid-pass.net\fullpages\crz_v3_world (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006008404\media.rapid-pass.net\fullpages\crz_v3_world\fullpage05 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006008404\media.rapid-pass.net\fullpages\crz_v3_world\fullpage05\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006008404\media.rapid-pass.net\fullpages\crz_v3_world\fullpage05\images\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006008404\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006008404\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006008404\scripts.dlv4.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006008404\scripts.dlv4.com\custom\4239 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006008404\scripts.dlv4.com\custom\4239\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006008404\scripts.downloadv3.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006008404\scripts.downloadv3.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006008404\www.epass-key.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006210687 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006210687\es6-scripts.downloadv3.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006210687\es6-scripts.downloadv3.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006210687\es6-scripts.downloadv3.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006210687\es6-scripts.downloadv3.com\custom\30 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006210687\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006210687\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006210687\network.vizit.us (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006210687\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006210687\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006210687\scripts.dlv4.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006210687\scripts.dlv4.com\custom\1 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006210687\www.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006272629 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006272629\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006272629\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006272629\media.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006272629\media.rapid-pass.net\fullpages (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006272629\media.rapid-pass.net\fullpages\crz_v3_world (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006272629\media.rapid-pass.net\fullpages\crz_v3_world\fullpage19 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006272629\media.rapid-pass.net\fullpages\crz_v3_world\fullpage19\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006272629\media.rapid-pass.net\fullpages\crz_v3_world\fullpage19\images\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006272629\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006272629\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006272629\scripts.dlv4.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006272629\scripts.dlv4.com\custom\4279 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006272629\scripts.dlv4.com\custom\4279\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006272629\scripts.downloadv3.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006272629\scripts.downloadv3.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006272629\www.epass-key.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006373963 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006373963\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006373963\external-api.dlv4.com\hits (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006373963\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006373963\fp.pc-on-internet.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006373963\fp.pc-on-internet.com\50264 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1006373963\fp.pc-on-internet.com\50264\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1007920798 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1007920798\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1007920798\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1007920798\media.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1007920798\media.rapid-pass.net\fullpages (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1007920798\media.rapid-pass.net\fullpages\ds_v3_chatsexy (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1007920798\media.rapid-pass.net\fullpages\ds_v3_chatsexy\fullpage01 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1007920798\media.rapid-pass.net\fullpages\ds_v3_chatsexy\fullpage01\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1007920798\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1007920798\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1007920798\scripts.dlv4.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1007920798\scripts.dlv4.com\custom\4252 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1007920798\scripts.dlv4.com\custom\4252\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1007920798\scripts.downloadv3.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1007920798\scripts.downloadv3.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1007920798\www.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1007920798\www.the-best-promos.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008112751 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008112751\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008112751\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008112751\fp.gad-network.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008112751\fp.gad-network.com\50001 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008112751\fp.gad-network.com\50001\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008112751\fp.gad-network.com\50001\images\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008112751\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008112751\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008112751\scripts.dlv4.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008112751\scripts.dlv4.com\custom\4286 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008112751\scripts.dlv4.com\custom\4286\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008112751\www.0texkax7c6hzuidk.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008112751\www.0texkax7c6hzuidk.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008112751\www.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008193520 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008193520\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008193520\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008193520\fr4-scripts.downloadv3.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008193520\fr4-scripts.downloadv3.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008193520\fr4-scripts.downloadv3.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008193520\fr4-scripts.downloadv3.com\custom\2622 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008193520\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008193520\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008852252 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008852252\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008852252\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008852252\media.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008852252\media.rapid-pass.net\fullpages (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008852252\media.rapid-pass.net\fullpages\crz_v3_world (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008852252\media.rapid-pass.net\fullpages\crz_v3_world\fullpage15 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008852252\media.rapid-pass.net\fullpages\crz_v3_world\fullpage15\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008852252\media.rapid-pass.net\fullpages\crz_v3_world\fullpage15\images\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008852252\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008852252\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008852252\scripts.dlv4.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008852252\scripts.dlv4.com\custom\4270 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008852252\scripts.dlv4.com\custom\4270\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008852252\scripts.downloadv3.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008852252\scripts.downloadv3.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008852252\www.epass-key.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1008852252\www.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1010978933 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1010978933\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1010978933\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1010978933\fp.gad-network.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1010978933\fp.gad-network.com\50020 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1010978933\fp.gad-network.com\50020\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1010978933\fp.gad-network.com\50020\images\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1010978933\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1010978933\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1010978933\scripts.dlv4.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1010978933\scripts.dlv4.com\custom\4307 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1010978933\scripts.dlv4.com\custom\4307\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1010978933\www.0texkax7c6hzuidk.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1010978933\www.0texkax7c6hzuidk.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011096098 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011096098\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011096098\external-api.dlv4.com\hits (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011096098\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011096098\fp.pc-on-internet.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011096098\fp.pc-on-internet.com\50265 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011096098\fp.pc-on-internet.com\50265\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011941971 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011941971\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011941971\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011941971\media.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011941971\media.rapid-pass.net\fullpages (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011941971\media.rapid-pass.net\fullpages\crz_v3_world (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011941971\media.rapid-pass.net\fullpages\crz_v3_world\fullpage11 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011941971\media.rapid-pass.net\fullpages\crz_v3_world\fullpage11\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011941971\media.rapid-pass.net\fullpages\crz_v3_world\fullpage11\images\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011941971\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011941971\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011941971\scripts.dlv4.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011941971\scripts.dlv4.com\custom\4261 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011941971\scripts.dlv4.com\custom\4261\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011941971\scripts.downloadv3.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011941971\scripts.downloadv3.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1011941971\www.epass-key.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013244895 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013244895\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013244895\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013244895\media.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013244895\media.rapid-pass.net\fullpages (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013244895\media.rapid-pass.net\fullpages\vzap_v3 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013244895\media.rapid-pass.net\fullpages\vzap_v3\fullpage05 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013244895\media.rapid-pass.net\fullpages\vzap_v3\fullpage05\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013244895\media.rapid-pass.net\fullpages\vzap_v3\fullpage05\images\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013244895\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013244895\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013244895\scripts.dlv4.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013244895\scripts.dlv4.com\custom\4272 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013244895\scripts.dlv4.com\custom\4272\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013244895\scripts.downloadv3.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013244895\scripts.downloadv3.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013244895\www.epass-key.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013815770 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013815770\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013815770\external-api.dlv4.com\hits (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013815770\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013815770\fp.pc-on-internet.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013815770\fp.pc-on-internet.com\50287 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013815770\fp.pc-on-internet.com\50287\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013867552 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013867552\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013867552\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013867552\fp.gad-network.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013867552\fp.gad-network.com\50052 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013867552\fp.gad-network.com\50052\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013867552\fp.gad-network.com\50052\images\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013867552\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013867552\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013867552\scripts.dlv4.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013867552\scripts.dlv4.com\custom\4328 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013867552\scripts.dlv4.com\custom\4328\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013867552\www.0texkax7c6hzuidk.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1013867552\www.0texkax7c6hzuidk.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1014782340 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1014782340\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1014782340\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1014782340\media.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1014782340\media.rapid-pass.net\fullpages (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1014782340\media.rapid-pass.net\fullpages\last_v3_lastvers (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1014782340\media.rapid-pass.net\fullpages\last_v3_lastvers\fullpage02 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1014782340\media.rapid-pass.net\fullpages\last_v3_lastvers\fullpage02\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1014782340\media.rapid-pass.net\fullpages\last_v3_lastvers\fullpage02\images\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1014782340\network.vizit.us (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1014782340\network.vizit.us\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1014782340\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1014782340\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1014782340\scripts.dlv4.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1014782340\scripts.dlv4.com\custom\4241 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1014782340\scripts.dlv4.com\custom\4241\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1014782340\www.epass-key.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1014782340\www.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1015058252 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1015058252\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1015058252\external-api.dlv4.com\hits (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1015058252\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1015058252\fp.pc-on-internet.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1015058252\fp.pc-on-internet.com\50246 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1015058252\fp.pc-on-internet.com\50246\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1015389166 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1015389166\img (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1016037777 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1016037777\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1016037777\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1016037777\fp.gad-network.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1016037777\fp.gad-network.com\50010 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1016037777\fp.gad-network.com\50010\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1016037777\fp.gad-network.com\50010\images\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1016037777\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1016037777\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1016037777\scripts.dlv4.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1016037777\scripts.dlv4.com\custom\4301 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1016037777\scripts.dlv4.com\custom\4301\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1016037777\www.0texkax7c6hzuidk.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1016037777\www.0texkax7c6hzuidk.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1017062788 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1017062788\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1017062788\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1017062788\fp.gad-network.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1017062788\fp.gad-network.com\50020 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1017062788\fp.gad-network.com\50020\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1017062788\fp.gad-network.com\50020\images\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1017062788\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1017062788\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1017062788\scripts.dlv4.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1017062788\scripts.dlv4.com\custom\4307 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1017062788\scripts.dlv4.com\custom\4307\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1017062788\www.0texkax7c6hzuidk.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1017062788\www.0texkax7c6hzuidk.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1017062788\www.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1018162325 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1018162325\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1018162325\external-api.dlv4.com\hits (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1018162325\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1018162325\fp.pc-on-internet.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1018162325\fp.pc-on-internet.com\50255 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1018162325\fp.pc-on-internet.com\50255\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1018180098 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1018180098\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1018180098\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1018180098\fr4-scripts.downloadv3.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1018180098\fr4-scripts.downloadv3.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1018180098\fr4-scripts.downloadv3.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1018180098\fr4-scripts.downloadv3.com\custom\2622 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1018180098\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1018180098\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1018180098\scripts.dlv4.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1018180098\scripts.dlv4.com\custom\1 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1018180098\www.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019294687 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019294687\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019294687\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019294687\media.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019294687\media.rapid-pass.net\fullpages (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019294687\media.rapid-pass.net\fullpages\vzap_v3 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019294687\media.rapid-pass.net\fullpages\vzap_v3\fullpage02 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019294687\media.rapid-pass.net\fullpages\vzap_v3\fullpage02\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019294687\media.rapid-pass.net\fullpages\vzap_v3\fullpage02\images\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019294687\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019294687\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019294687\scripts.dlv4.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019294687\scripts.dlv4.com\custom\4259 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019294687\scripts.dlv4.com\custom\4259\FR (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019294687\scripts.downloadv3.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019294687\scripts.downloadv3.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019294687\www.epass-key.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019294687\www.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019641593 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019641593\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019641593\external-api.dlv4.com\hits (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019641593\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019641593\fp.pc-on-internet.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019641593\fp.pc-on-internet.com\50265 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1019641593\fp.pc-on-internet.com\50265\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1020385046 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1020385046\img (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1020982563 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1020982563\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1020982563\external-api.dlv4.com\hits (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1020982563\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1020982563\fp.pc-on-internet.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1020982563\fp.pc-on-internet.com\50188 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1020982563\fp.pc-on-internet.com\50188\images (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1022484023 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1022484023\external-api.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1022484023\external-api.dlv4.com\js (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1022484023\fr4-scripts.downloadv3.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1022484023\fr4-scripts.downloadv3.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1022484023\fr4-scripts.downloadv3.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1022484023\fr4-scripts.downloadv3.com\custom\30 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1022484023\scripts.dlv4.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1022484023\scripts.dlv4.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1024038797 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1024038797\es6-scripts.downloadv3.com (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1024038797\es6-scripts.downloadv3.com\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1024038797\es6-scripts.downloadv3.com\custom (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1024038797\es6-scripts.downloadv3.com\custom\1 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1024038797\es6-scripts.downloadv3.com\custom\1392 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1024038797\es6-scripts.downloadv3.com\ExitTraffic (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1024038797\www.rapid-pass.net (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1024616808 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1024616808\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1024616808\ExitTraffic (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1024616808\img (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1025798761 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1025798761\Common (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1025798761\ExitTraffic (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1025798761\hits (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1025798761\img (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1026808740 (Adware.EGDAccess) -> Quarantined and deleted successfully.
                C:\Program Files\Instant Access\Dialer\1026808740\external-api.dlv4.
                2. coccimoi
                  voila j'ai déposer le fichier http://www.cijoint.fr/cjlink.php?file=cj200904/cijeS6Hbft.txt
                  dsl d'étre longue mais sa rame vraiment bcp
                  1. Utilisateur anonyme
                    Ok,
                    très bien. Merci pour le rapport MBAM.
                    Bon, normal que ça rame..

                    Poste les rapports DrWeb au fur et à mesure stp.

                    On s'arrêtera surement au second coup pour virer d'autres infections qui ralentissent le PC. Pour ensuite revenir sur ViruT.

                    Bon courage.
                    1. ak210306
                      je passe juste pour dire bonjour à DllD et surtout bon courage car c'est du lourd
                      à coccimoi, tu devrai t'enregistrer sa sera plus facile pour retrouver ton post à chaque fois
                      1. coccimoi
                        l'analyse compléte n'est pas terminée ,je doit partir a quatre heure, une personne va poster le premier raport pour moi , ensuite je ne pourais intervenir a nouveau qu'a partir de dimanche j'éspére que dlld tu pouras revenir m'épauler pour la suite de ce cauchemard,??? je consulterais les messages sur mon pc portable!
                        merci en tout cas méme si rien n'est gagné
                        1. Utilisateur anonyme
                          Ok,
                          pas de souci.
                          Le truc c'est d'utiliser le moins possible PC avant la fin de désinfection ;)
                          1. Destrio5 Modérateur
                            Virut communique sur Internet, il faut l'empêcher.
                            1. Utilisateur anonyme
                              Vi vi..
                              On verra plus tard...
                              Pour l'instant on tape dans le gros.

                              Viens pas compliquer les choses toi ;)
                            2. Destrio5 Modérateur
                              @Utilisateur anonyme"Viens pas compliquer les choses toi ;)"

                              ---> Viens pas lui faire perdre du temps ;)
                            3. Utilisateur anonyme
                              @Destrio5Rien du tout.

                              Ton truc d'internet (merci à Jal au passage ;)) n'est pas pour maintenant. Pour l'instant c'est la réparation des fichiers infectés (un maximum au moins).
                          3. Destrio5 Modérateur
                            Je ne reprends pas le topic car je suis en train de modifier certaines astuces dans la FAQ (fautes, liens morts, etc...).

                            Pas besoin de bouder, j'ai juste donné mon opinion, après, tu en fais ce que tu veux.

                            Bonne continuation.
                            1. Utilisateur anonyme
                              Je ne boude pas : je râle !
                              Nuance :]

                              Bon Coccimoi dès que tu as le rapport DRWeb poste le stp. Suivant son contenu on refera un tour de DrWeb ou on passera un autre fix qui devrait alléger le PC pour la suite des manip.

                              Bon courage.
                            2. lalyla
                              Désolé de m incruster mais on m a laissé tomber aprèes un rapport ad remove HELP
                            3. Destrio5 Modérateur
                              @lalylalalyla ---> Crapoulou a une vie, il te répondra à son retour.
                            4. lalyla
                              @Destrio5je sais pas si je dois laisser tout comme ca ! désolé
                          4. Destrio5 Modérateur
                            Par rapport à Jal :
                            http://ww1.purforum.com

                            "La dernière chose à faire est de connecter cette machine au Net et de tenter de la désinfecter sur un forum d'entraide

                            Votre connexion Internet est la nourrisse de Virut !"

                            Par rapport à AVG :
                            https://www.avg.com/fr-fr/free-antivirus-download

                            "If the infected computer is connected to LAN, disconnect it and re-connect only after all other computers have been checked and cleaned."
                            1. Utilisateur anonyme
                              Rrrrr..
                              Encore toi !-)

                              "La dernière chose à faire est de connecter cette machine au Net et de tenter de la désinfecter sur un forum d'entraide

                              La dernière c'est pas la première. Et puis la dernière dans quelles circonstances ?
                              Là on répare le plus gros des fichiers infectés, avec le web, ok ? Après on passera en mode déconnecté.

                              Aller : au dodo maintenant.
                              Merci pour les liens en tous cas ;)
                              Mais là tu ne fais que créer la zizanie.
                              Bonne nuit.

                              PS : et puis Jal n'est pas la prophétie non plus (il donne de bonnes méthodes élaborées depuis son expérience, pas la moindre, c'est tout).
                            2. Bidochon
                              @Utilisateur anonymebonsoir je né pa une écriture génial pour cose de dyslexie mé je tené a mexprimer.

                              il é for domage ke dlld envoie balader destrio alor quil a de bon argument et quil se senerve pa

                              en outre dlld fé référence à Jal quand sa larrange, une foi Jal a réson, une fois Jal est un nul

                              dapres ce que jai lu sur le net il est obligatoir de retirré le net sur la machine sinon sa ser a rien.

                              pour le programme, mieu vau utiliser le mod sans echec

                              3 foi un scan curit sa sert a rien perte de temps surtout dans lé condition donnés come si dlld voulé se débarasser de l'user

                              si le but été de testé utilise ton PC et pa ceu dé autre

                              en esperant que la phonique soit bone pour aitre un minimum compréansible.

                              +
                          5. Destrio5 Modérateur
                            Le scan Dr.Web CureIt! n'aurait pas été plus efficace en mode sans échec ?
                            1. coccimoi
                              voila le 1 er rapport de dr web
                              chkdisk.dll c:\documents and settings\aurore\menu démarrer\programmes\démarrage Trojan.Alupko.31 Supprimé.
                              protect.dll c:\documents and settings\aurore Trojan.Alupko.31 Supprimé.
                              nissan.exe c:\recycler\s-1-5-21-1956315548-5319813884-554434837-3099 Trojan.Spambot.4433 Supprimé.
                              autochk.dll c:\windows\system32 Trojan.Alupko.31 Supprimé.
                              37abb7e2.sys c:\windows\system32\drivers Trojan.NtRootKit.2795 Supprimé.
                              ovfsthxkllxsivi.sys c:\windows\system32\drivers BackDoor.Tdss.115
                              msb.dll c:\windows\temp Trojan.Alupko.31 Supprimé.
                              asdre.exe\x.exe C:\asdre.exe BackDoor.IRC.Sdbot.3654
                              asdre.exe C:\ L'archive contient des éléments infectés
                              msne.exe\x.exe C:\msne.exe BackDoor.IRC.Sdbot.3654
                              msne.exe C:\ L'archive contient des éléments infectés
                              xdrrt.exe\x.exe C:\xdrrt.exe BackDoor.IRC.Sdbot.3654
                              xdrrt.exe C:\ L'archive contient des éléments infectés
                              ovfsthxakblrnmxty.tmp C:\Documents and Settings\aurore\Local Settings\Temp BackDoor.Tdss.115
                              ovfsthxecepvvxbtn.tmp C:\Documents and Settings\aurore\Local Settings\Temp BackDoor.Tdss.115 Supprimé.
                              lsp[1].exe C:\Documents and Settings\aurore\Local Settings\Temporary Internet Files\Content.IE5\I3YST9UK Trojan.DownLoad.33511 Supprimé.
                              IMG9371478991721141-GIF[1].EXE\pz.exe C:\Documents and Settings\aurore\Local Settings\Temporary Internet Files\Content.IE5\NUTCHSCJ\IMG9371478991721141-GIF[1].EXE BackDoor.IRC.Sdbot.3654
                              IMG9371478991721141-GIF[1].EXE C:\Documents and Settings\aurore\Local Settings\Temporary Internet Files\Content.IE5\NUTCHSCJ L'archive contient des éléments infectés
                              Messenger Plus! - Setup.exe/data007\sponsor.exe C:\Documents and Settings\aurore\Mes documents\Mes fichiers reçus\Messenger Plus! - Setup.exe/data007 Trojan.Swizzor
                              data007 C:\Documents and Settings\aurore\Mes documents\Mes fichiers reçus L'archive contient des éléments infectés
                              Messenger Plus! - Setup.exe C:\Documents and Settings\aurore\Mes documents\Mes fichiers reçus Conteneur comporte des objets infectés
                              black au gros seins adult chick teaches another girl how to fist her (very hot).mpg C:\Documents and Settings\conforama\Bureau\SUPPORT SERVICE RETOUR Trojan.WMALoader Désinfecté.
                              Anti-stress.exe C:\Documents and Settings\conforama\Mes documents\accident1 Joke.Puncher
                              bricolo.exe C:\Documents and Settings\conforama\Mes documents\Mes vidéos\Memorex UFD (G) Joke.Puncher
                              x.exe C:\Documents and Settings\marie-ange\Local Settings\Temp\IXP000.TMP BackDoor.IRC.Sdbot.3654 Supprimé.
                              x.exe C:\Documents and Settings\marie-ange\Local Settings\Temp\IXP001.TMP BackDoor.IRC.Sdbot.3654 Supprimé.
                              x.exe C:\Documents and Settings\marie-ange\Local Settings\Temp\IXP002.TMP BackDoor.IRC.Sdbot.3654 Supprimé.
                              x.exe C:\Documents and Settings\marie-ange\Local Settings\Temp\IXP003.TMP BackDoor.IRC.Sdbot.3654 Supprimé.
                              x.exe C:\Documents and Settings\marie-ange\Local Settings\Temp\IXP004.TMP BackDoor.IRC.Sdbot.3654 Supprimé.
                              x.exe C:\Documents and Settings\marie-ange\Local Settings\Temp\IXP005.TMP BackDoor.IRC.Sdbot.3654 Supprimé.
                              xx[1].exe\x.exe C:\Documents and Settings\marie-ange\Local Settings\Temporary Internet Files\Content.IE5\L9Y2819O\xx[1].exe BackDoor.IRC.Sdbot.3654
                              xx[1].exe C:\Documents and Settings\marie-ange\Local Settings\Temporary Internet Files\Content.IE5\L9Y2819O L'archive contient des éléments infectés
                              x[1].exe\x.exe C:\Documents and Settings\marie-ange\Local Settings\Temporary Internet Files\Content.IE5\Q3K907QF\x[1].exe BackDoor.IRC.Sdbot.3654
                              x[1].exe C:\Documents and Settings\marie-ange\Local Settings\Temporary Internet Files\Content.IE5\Q3K907QF L'archive contient des éléments infectés
                              x[1].exe\x.exe C:\Documents and Settings\marie-ange\Local Settings\Temporary Internet Files\Content.IE5\UO0FA0BN\x[1].exe BackDoor.IRC.Sdbot.3654
                              x[1].exe C:\Documents and Settings\marie-ange\Local Settings\Temporary Internet Files\Content.IE5\UO0FA0BN L'archive contient des éléments infectés
                              POSTOOBE.NEC C:\DRIVERS VBS.Generic.278 Supprimé.
                              A0241663.exe C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP850 BackDoor.IRC.Sdbot.3654 Supprimé.
                              A0241666.exe C:\System Volume Information\_restore{9AEDEF4B-1977-4657-B854-EFDB21259CFF}\RP850 BackDoor.IRC.Sdbot.3654 Supprimé.
                              RESTORE.INS\C:/OEMCUST/TOOLS/WIN32/PSKILL.EXE C:\WINDOWS\RESTORE.INS Tool.Prockill
                              RESTORE.INS C:\WINDOWS L'archive contient des éléments infectés
                              RESTORE.INS\C:/OEMCUST/TOOLS/WIN32/PSKILL.EXE C:\WINDOWS\system\RESTORE.INS Tool.Prockill
                              RESTORE.INS C:\WINDOWS\system L'archive contient des éléments infectés
                              gekujoni.dll.vir C:\WINDOWS\system32 Trojan.Virtumod.1660 Supprimé.
                              gofipina.dll C:\WINDOWS\system32 Trojan.Virtumod.1664 Supprimé.
                              hemudapa.dll C:\WINDOWS\system32 Trojan.Virtumod.1660 Supprimé.
                              lmppcsetup.exe C:\WINDOWS\system32 Trojan.Alupko.31 Supprimé.
                              meyobuha.dll.vir C:\WINDOWS\system32 Trojan.Virtumod.1664 Supprimé.
                              ntdll64.exe C:\WINDOWS\system32 Trojan.DownLoad.33511 Supprimé.
                              ovfsthxeexnkbwe.dll C:\WINDOWS\system32 BackDoor.Tdss.115
                              peyeduli.dll C:\WINDOWS\system32 Trojan.Virtumod.1664 Supprimé.
                              puwisuro.dll C:\WINDOWS\system32 Trojan.Virtumod.1660 Supprimé.
                              qoscaw.exe.xpx C:\WINDOWS\system32 Trojan.Packed.669 Supprimé.
                              tufemivu.dll C:\WINDOWS\system32 Trojan.Virtumod.1664 Supprimé.
                              lsp[1].exe C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\KX0DMPKP Trojan.DownLoad.33511 Supprimé.
                              ChkDisk.dll C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Démarrage Trojan.Alupko.31 Supprimé.
                              37abb7e2.sys C:\WINDOWS\system32\drivers Trojan.NtRootKit.2795 Supprimé.
                              ovfsthxkllxsivi.sys C:\WINDOWS\system32\drivers BackDoor.Tdss.115
                              3.tmp C:\WINDOWS\Temp Trojan.MulDrop.31109 Supprimé.
                              • 1
                              • 2
                              • 3
                              • 4

                              Discussions similaires

                              Softonic,est-ce un virus ?
                              techmel1

                              6 réponses
                              Chrome://newtab
                              Nova

                              14 réponses
                              Désinstaller Softonic
                              Diguimette

                              5 réponses
                              Supprimer New Tab
                              tysaozon

                              8 réponses
                              Bouton pause/break
                              frans003

                              3 réponses