[trojan] je comprends rien

Résolu
jan ive -  
bonjour
J'ai attrapé un trojan.horse y a quelques jours et apres avoir lu et suivi toutes les indications données a d'autres sur le site,j'ai pu telecharger un programme qui me l'a enlevé (The Cleaner).seulement voilà je comprends pas pourquoi mon computer il continue a planter tout le temps,a peine j'ouvre deux fenetres et hop!il va plus.et il est devenu tres tres lent.j'ai fait plusieurs scan et je trouve plus aucun virus.Qu'est ce qui va pas?merci
je rappelle que j'ai un Windows xp et une connexion ADSL

37 réponses

Résumé de la discussion

Un utilisateur confronté à un Trojan horse sur Windows XP constate des plantages fréquents et une lenteur accrue, même après avoir été informé de la suppression du malware. Plusieurs réponses proposent une procédure complexe combinant CCleaner, Brute Force Uninstaller et Navipromo, avec des manipulations côté sécurité IE et la suppression de fichiers temporaires. D'autres interventions soulignent des difficultés pratiques (mode sans échec, sauvegarde de rapports, gestion des liens de téléchargement) et recommandent des scans en ligne ou des méthodes sans garantie de résultat. En cas d’initiative, le fil montre des échanges répétitifs sur des liens à télécharger et des commandes batch, sans conclusion ferme sur l’amélioration du système.

Bobot (l’IA à votre service)
  1. philae83 Contributeur sécurité
    re

    je ne sais pas si tu as fini de poster, mais y a navipromo, on va déjà soigné ca, je verrais le reste ensuite

    ces manips sont à faire dans l'ordre stp, imprime car il te faudra les faire en mode sans échec

    * Télécharge CCleaner

    http://www.filehippo.com/download_ccleaner.html

    ("Download Latest Version", sur la droite).

    Ce logiciel va permettre de supprimer tous les fichiers temporaires. Avant de cliquer sur le bouton "installer", décoche toutes les "options supplémentaires". Par la suite, laisse-le avec ses réglages par défaut. C'est tout.

    aide en image pour la suite (ne pas tenir compte des noms, c'est juste à titre indicatif)
    ICI
    https://forum.pcastuces.com/default.asp

    à la lettre N ) Installer Brute Force Uninstaller

    * télécharge Brute Force Uninstaller

    http://www.merijn.org/files/bfu.zip

    * FAIS UN CLIC-DROIT sur le lien ci dessous

    http://metallica.geekstogo.com/EGDACCESS.bfu

    et choisis "Enregistrer sous" (dans IE c'est "Enregistrer le lien sous..")

    afin de télécharger EGDACCESS.bfu, Type "Tous les fichiers".

    Sauvegarde dans le dossier créé (c:\BFU)

    * FAIS UN CLIC-DROIT sur le lien ci dessous

    http://www.alt-shift-return.org/Info/Fichiers/Winsoftware.bfu

    et choisis "Enregistrer sous" (dans IE c'est "Enregistrer le lien sous..")

    afin de télécharger Winsoftware.bfu, Type "Tous les fichiers".

    Sauvegarde dans le dossier créé (c:\BFU)

    * télécharge Navipromo.zip (par lazzzy)

    http://www.alt-shift-return.org/Info/Fichiers/Navipromo07H.zip

    et décompresse-le sur ton bureau

    * Copie la suite des instructions dans un fichier texte, sur ton bureau. et redémarre en mode sans échec comme indiqué ici

    https://forum.pcastuces.com/default.asp#haut

    à la lettre C

    Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou autre.

    * lance le fichier Navipromo.bat qui se trouve dans le dossier Navipromo, sur ton bureau.
    * Sélectionne l'option "Recherche et suppression automatique". Patiente.
    S'il trouve quelque chose, tu verras défiler des lignes dans la fenêtre de commande et au bout de quelques instants, il faudra que tu appuies sur une touche pour que le nettoyage soit lancé. Lorsqu'il a terminé, ferme le rapport qui s'est ouvert

    * Relance l'outil, Sélectionne l'option "Suppression Heuristique", et patiente quelques minutes.
    Lorsqu'il a terminé, ferme le rapport qui s'est ouvert

    * Démarre le "Brute Force Uninstaller" en double-cliquant sur BFU.exe.
    Clique sur le petit dossier jaune, à la droite de la boîte "Scriptline to execute", et double-clique sur : EGDACCESS.bfu
    - Dans la boîte "Scriptline to execute", tu devrais maintenant voir ceci : C:\BFU\EGDACCESS.bfu
    Clique sur "Execute" et laisse-le faire son travail.
    Attendre que "Complete script execution" apparaîsse et clique sur OK.
    Clique exit pour fermer le programme BFU.
    Recommence encore une fois.

    * Démarre encore le "Brute Force Uninstaller" en double-cliquant sur BFU.exe.
    * Clique sur le petit dossier jaune, à la droite de la boîte "Scriptline to execute", et double-clique sur : Winsoftware.bfu
    - Dans la boîte "Scriptline to execute", tu devrais maintenant voir ceci : C:\BFU\Winsoftware.bfu
    * Clique sur "Execute" et laisse-le faire son travail.
    Attendre que "Complete script execution" apparaîsse et clique sur OK.
    * Clique exit pour fermer le programme BFU.
    Recommence encore une fois

    * Démarrer -> panneau de configuration -> options internet

    Clique sur l'onglet "Contenu" puis onglet "Certificats" et si tu trouves ceci, en particulier dans "éditeurs approuvés" :

    electronic-group - egroup - Montorgueil - VIP - "Sunny Day Design Ltd"

    => Supprime-les tous

    * lance Ccleaner pour un nettoyage complet.

    * redémarre normalement et poste le contenu du fichier Navipromo.txt qui se trouve dans Poste de travail > disque C:\

    Précise les difficultés que tu as eu (ce que tu n'as pas pu faire...) ainsi que l'évolution de la situation.
    2. jan ive Auteur
      En fait quand je clic sur le lien y a une fenetre qui s'ouvre sur laquelle je dois soit : OUVRIR-SAUVEGARDER-ANNULER.Quand je clic sur Ouvrir je passe a une autre fenetre WinRar (evaluation copy) qui a un dossier et une application BFU.exe A partir de là je comprends plus comment je dois continuer parce que en cliquant 2x sur BFU.exe s'ouvre une autre fenetre et franchement je vois pas ou est ce que je dois aller pour telecharger ce programme.C'est une fenetre comme celle de la lettre N) où il est ecrit THE BRUTE FORCE UNINSTALLER.A partir de là je suis bloqué.
      et puis au lieu de ccleaner j'ai telechargé "complete Cleanup"
    3. titi13
      Rapport Navipromo.bat 0.71 effectué depuis C:\Documents and Settings\sebastien\Bureau le 05/01/2008 à 20:58:40,57
      -- Le programme n'est pas lancé en mode sans échec par conséquent les résultats seront probablement faussés

      ** Recherche...

      1/ bgcjnz trouvé, recherche de bgcjnz*
      C:\WINDOWS\system32\bgcjnz.dat
      C:\WINDOWS\system32\bgcjnz.exe
      C:\WINDOWS\system32\bgcjnz_nav.dat
      C:\WINDOWS\system32\bgcjnz_navps.dat

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      bgcjnz REG_SZ c:\windows\system32\bgcjnz.exe bgcjnz

      ------------------
      Fin du rapport de recherche
      Adware Navipromo trouvé 1 fois avec cette méthode

      ################################################

      ** Nettoyage...

      1/ Déplacement de bgcjnz* vers C:\Navipromo\Backups...
      C:\WINDOWS\System32\bgcjnz* déplacé avec succès !

      ------------------
      * Suppression clés et valeurs de registre
      1 entrées de registre netttoyées

      * Backups :

      C:\Navipromo\Backups\ARPCache.reg
      C:\Navipromo\Backups\bgcjnz.dat
      C:\Navipromo\Backups\bgcjnz.exe
      C:\Navipromo\Backups\bgcjnz_nav.dat
      C:\Navipromo\Backups\bgcjnz_navps.dat
      C:\Navipromo\Backups\HKCURun.reg
      C:\Navipromo\Backups\HKLMRun.reg
      C:\Navipromo\Backups\pack.epk
      C:\Navipromo\Backups\Uninstall.reg

      Ajout d'extension .off aux backups

      ## Fin du rapport de Suppression

      -------------

      Rapport Navipromo.bat 0.72 effectué depuis C:\Documents and Settings\sebastien\Bureau le 05/01/2008 à 20:59:47,53
      Le programme n'est pas lancé en mode sans échec par conséquent les résultats seront probablement faussés

      ## Suppression Heuristique

      * Backups :

      C:\Navipromo\Backups\Heuristic\bgcjnz.dat
      C:\Navipromo\Backups\Heuristic\jlpgkfwcy.exe
      C:\Navipromo\Backups\Heuristic\suejtdapcm.exe
      C:\Navipromo\Backups\Heuristic\vbmjpndyt.exe
      C:\Navipromo\Backups\Heuristic\xgcemzraf.exe
      C:\Navipromo\Backups\Heuristic\xsyabf.exe

      Ajout d'extension .off aux backups
      Backups exe renommés avec succès
      Backups dat renommés avec succès

      ## Fin du rapport Heuristique
    4. invente
      j'aimerai savoir pour hacker un compte STEAM (ou counter strike source )

      PS: DSL pour le double post
    5. ^^Marie^^
      @inventeBonjour

      j'aimerai savoir pour hacker ► comme ça

  2. philae83 Contributeur sécurité
    bonsoir,

    * Télécharge HijackThis et poste le rapport stp

    http://pchelpbordeaux.free.fr/logiciels.html
    Tutorial
    http://pchelpbordeaux.free.fr/tuto.html
    Démo en image
    http://pageperso.aol.fr/balltrap34/demohijack.htm
    1. jan ive Auteur
      Salut Philae83.A peine j'essaye de telecharger hijackthis qu'il se ferme automatiquement.je sais pas pourquoi,j'y comprends rien!
      1. philae83 Contributeur sécurité
        ça s'annonce mal

        essaye un scan antivirus en ligne
        https://www.bitdefender.fr/
        et copie colle le résultat ici
        * En bas, à gauche de la fenêtre, clique sur BitDefender SCAN ONLINE
        * Dans la nouvelle fenêtre, clique sur I agree
        * La fenêtre change encore, clique sur Click here to scan
        * Les signatures se chargent, etc.

        tuto en image

        http://pageperso.aol.fr/rginformatique/mapage/defender.htm

        je verrais le rapport demain
        2. jan ive Auteur
          voici le rapport de l'analyse
          BitDefender Online Scanner

          Rapport d'analyse généré à: Sun, Apr 15, 2007 - 06:23:38

          Voie d'analyse: C:\;D:\;E:\;

          Statistiques

          Temps
          04:35:16

          Fichiers
          530532

          Directoires
          9257

          Secteurs de boot
          5

          Archives
          2037

          Paquets programmes
          61906

          Résultats

          Virus identifiés
          8

          Fichiers infectés
          32

          Fichiers suspects
          0

          Avertissements
          0

          Désinfectés
          0

          Fichiers effacés
          32

          Info sur les moteurs

          Définition virus
          485981

          Version des moteurs
          AVCORE v1.0 (build 2397) (i386) (Feb 8 2007 14:24:08)

          Analyse des plugins
          14

          Archive des plugins
          38

          Unpack des plugins
          6

          E-mail plugins
          6

          Système plugins
          1

          Paramètres d'analyse

          Première action
          Désinfecté

          Seconde Action
          Supprimé

          Heuristique
          Oui

          Acceptez les avertissements
          Oui

          Extensions analysées
          *;

          Excludez les extensions

          Analyse d'emails
          Oui

          Analyse des Archives
          Oui

          Analyser paquets programmes
          Oui

          Analyse des fichiers
          Oui

          Analyse de boot
          Oui

          Fichier analysé
          Statut

          C:\Documents and Settings\Proprietario\Dati applicazioni\ScaricaMP3[1].exe
          Infecté par: Generic.Malware.Sdldsp.68550586

          C:\Documents and Settings\Proprietario\Dati applicazioni\ScaricaMP3[1].exe
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\ScaricaMP3[1].exe
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\SessoXXX[1].exe
          Infecté par: Generic.Malware.Sdldsp.E1FF06F6

          C:\Documents and Settings\Proprietario\Dati applicazioni\SessoXXX[1].exe
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\SessoXXX[1].exe
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip=>BaaaaBaa.class
          Infecté par: Java.Trojan.Exploit.Bytverify

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip=>BaaaaBaa.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip=>BaaaaBaa.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip=>VaaaaaaaBaa.class
          Infecté par: Trojan.Java.ClassLoader.D

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip=>VaaaaaaaBaa.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip=>VaaaaaaaBaa.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip=>Dvnny.class
          Infecté par: Java.Trojan.Exploit.Bytverify

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip=>Dvnny.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip=>Dvnny.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip=>Baaaaa.class
          Infecté par: Java.Trojan.Exploit.Bytverify.I

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip=>Baaaaa.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip=>Baaaaa.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip=>Dix.class
          Infecté par: Trojan.Java.ClassLoader.D

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip=>Dix.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip=>Dix.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip=>Dux.class
          Infecté par: Trojan.Java.ClassLoader.D

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip=>Dux.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip=>Dux.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-6148173-7a115072.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip=>BaaaaBaa.class
          Infecté par: Java.Trojan.Exploit.Bytverify

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip=>BaaaaBaa.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip=>BaaaaBaa.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip=>VaaaaaaaBaa.class
          Infecté par: Trojan.Java.ClassLoader.D

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip=>VaaaaaaaBaa.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip=>VaaaaaaaBaa.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip=>Dvnny.class
          Infecté par: Java.Trojan.Exploit.Bytverify

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip=>Dvnny.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip=>Dvnny.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip=>Baaaaa.class
          Infecté par: Java.Trojan.Exploit.Bytverify.I

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip=>Baaaaa.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip=>Baaaaa.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip=>Dix.class
          Infecté par: Trojan.Java.ClassLoader.D

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip=>Dix.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip=>Dix.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip=>Dux.class
          Infecté par: Trojan.Java.ClassLoader.D

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip=>Dux.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip=>Dux.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\crtdcghcn.jar-64ce9bf6-2587a21e.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip=>BaaaaBaa.class
          Infecté par: Java.Trojan.Exploit.Bytverify

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip=>BaaaaBaa.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip=>BaaaaBaa.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip=>VaaaaaaaBaa.class
          Infecté par: Trojan.Java.ClassLoader.D

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip=>VaaaaaaaBaa.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip=>VaaaaaaaBaa.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip=>Dvnny.class
          Infecté par: Java.Trojan.Exploit.Bytverify

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip=>Dvnny.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip=>Dvnny.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip=>Baaaaa.class
          Infecté par: Java.Trojan.Exploit.Bytverify.I

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip=>Baaaaa.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip=>Baaaaa.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip=>Dix.class
          Infecté par: Trojan.Java.ClassLoader.D

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip=>Dix.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip=>Dix.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip=>Dux.class
          Infecté par: Trojan.Java.ClassLoader.D

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip=>Dux.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip=>Dux.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ms-counter.jar-4535331c-4583bf58.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.idx
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>META-INF/MANIFEST.MF
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>BaaaaBaa.class
          Infecté par: Java.Trojan.Exploit.Bytverify

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>BaaaaBaa.class
          Infecté par: Java.Trojan.Exploit.Bytverify

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>BaaaaBaa.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>BaaaaBaa.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>BaaaaBaa.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>BaaaaBaa.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>VaaaaaaaBaa.class
          Infecté par: Trojan.Java.ClassLoader.D

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>VaaaaaaaBaa.class
          Infecté par: Trojan.Java.ClassLoader.D

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>VaaaaaaaBaa.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>VaaaaaaaBaa.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>VaaaaaaaBaa.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>VaaaaaaaBaa.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Dvnny.class
          Infecté par: Java.Trojan.Exploit.Bytverify

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Dvnny.class
          Infecté par: Java.Trojan.Exploit.Bytverify

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Dvnny.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Dvnny.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Dvnny.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Dvnny.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Baaaaa.class
          Infecté par: Java.Trojan.Exploit.Bytverify.I

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Baaaaa.class
          Infecté par: Java.Trojan.Exploit.Bytverify.I

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Baaaaa.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Baaaaa.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Baaaaa.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Baaaaa.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Dex.class
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Dix.class
          Infecté par: Trojan.Java.ClassLoader.D

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Dix.class
          Infecté par: Trojan.Java.ClassLoader.D

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Dix.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Dix.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Dix.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Dix.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Dux.class
          Infecté par: Trojan.Java.ClassLoader.D

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Dux.class
          Infecté par: Trojan.Java.ClassLoader.D

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Dux.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Dux.class
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Dux.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip=>Dux.class
          Supprimé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\statistic.jar-4be98b6c-6759c92d.zip
          Mis à jour

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ticker.jar-296387ca-3b462595.idx
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ticker.jar-296387ca-3b462595.zip
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ticker.jar-296387ca-3b462595.zip=>META-INF/MANIFEST.MF
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\ticker.jar-296387ca-3b462595.zip=>it/imteam/ticker/Ticker.class
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\deployment.properties
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Sun\Java\Deployment\log\plugin150_05.trace
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Symantec\Shared\MyProfile.UserProfile
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Symantec\Shared\Sessions\20061206115604875.liveReg
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Talkback\MozillaOrg\Firefox2\Win32\2006101023\manifest.ini
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Talkback\MozillaOrg\Firefox2\Win32\2006101023\permdata.box
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Template\Normal.wpt
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\vlc\cache\CACHEDIR.TAG
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\vlc\cache\plugins-04041e.dat
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\vlc\vlcrc
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\VoipBuster\History_poku90.dat
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\VoipBuster\VoiceEngine.xml
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Wings3D\Preferences.txt
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\wklnhst.dat
          Nettoyé

          C:\Documents and Settings\Proprietario\Dati applicazioni\Yahoo!\Mail\attach\IMG_0640.jpg
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0000
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0001
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0002
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0003
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0004
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0005
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0006
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0007
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0008
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0009
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0010
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0011
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0012
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0013
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0014
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0015
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0016
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0017
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0018
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0019
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0020
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0021
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0022
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0023
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0024
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0025
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0026
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0027
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0028
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0029
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0030
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0031
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0032
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0033
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0034
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0035
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0036
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0037
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0038
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0039
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0040
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0041
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0042
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0043
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0044
          Nettoyé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0045
          Infecté par: Generic.Malware.SFN!prng.DB9D959D

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0045
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)=>zlib_nsis0045
          Supprimé

          C:\Documents and Settings\Proprietario\Desktop\ares.exe=>(NSIS o)
          Echec de la mise à jour

          C:\Documents and Settings\Proprietario\Desktop\Ares.lnk=>C:\Programmi\Ares\Ares.exe
          Infecté par: Generic.Malware.SFN!prng.DB9D959D

          C:\Documents and Settings\Proprietario\Desktop\Ares.lnk=>C:\Programmi\Ares\Ares.exe
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Desktop\Ares.lnk=>C:\Programmi\Ares\Ares.exe
          Supprimé

          C:\Documents and Settings\Proprietario\Desktop\Ares.lnk
          Echec de la mise à jour

          C:\Documents and Settings\Proprietario\Documenti\Daniele Viganò\Kazzate & skerzi\Wordpad.exe
          Détecté avec: Application.Joke.IWPad

          C:\Documents and Settings\Proprietario\Documenti\Daniele Viganò\Kazzate & skerzi\Wordpad.exe
          Echec de la désinfection

          C:\Documents and Settings\Proprietario\Documenti\Daniele Viganò\Kazzate & skerzi\Wordpad.exe
          Supprimé

          C:\Programmi\HbTools\HBTV\uninstaller.exe=>(NSIS o)=>zlib_nsis0001
          Infecté par: Trojan.Hotbar.A

          C:\Programmi\HbTools\HBTV\uninstaller.exe=>(NSIS o)=>zlib_nsis0001
          Echec de la désinfection

          C:\Programmi\HbTools\HBTV\uninstaller.exe=>(NSIS o)=>zlib_nsis0001
          Supprimé

          C:\Programmi\HbTools\HBTV\uninstaller.exe=>(NSIS o)
          Echec de la mise à jour

          C:\WINDOWS\system32\xdlpgfex.exe=>(NSIS o)=>lzma_nsis0017=>(NSIS o)=>zlib_nsis0001
          Infecté par: Trojan.Hotbar.A

          C:\WINDOWS\system32\xdlpgfex.exe=>(NSIS o)=>lzma_nsis0017=>(NSIS o)=>zlib_nsis0001
          Echec de la désinfection

          C:\WINDOWS\system32\xdlpgfex.exe=>(NSIS o)=>lzma_nsis0017=>(NSIS o)=>zlib_nsis0001
          Supprimé

          C:\WINDOWS\system32\xdlpgfex.exe=>(NSIS o)=>lzma_nsis0017=>(NSIS o)
          Echec de la mise à jour

          C:\WINDOWS\system32\xdlpgfex.exe=>(NSIS o)=>lzma_nsis0017=>(NSIS o)=>zlib_nsis0006=>(NSIS g)=>zlib_nsis0001
          Infecté par: Trojan.Hotbar.A

          C:\WINDOWS\system32\xdlpgfex.exe=>(NSIS o)=>lzma_nsis0017=>(NSIS o)=>zlib_nsis0006=>(NSIS g)=>zlib_nsis0001
          Echec de la désinfection

          C:\WINDOWS\system32\xdlpgfex.exe=>(NSIS o)=>lzma_nsis0017=>(NSIS o)=>zlib_nsis0006=>(NSIS g)=>zlib_nsis0001
          Supprimé

          C:\WINDOWS\system32\xdlpgfex.exe=>(NSIS o)=>lzma_nsis0017=>(NSIS o)=>zlib_nsis0006=>(NSIS g)
          Echec de la mise à jour
          1. philae83 Contributeur sécurité
            bonjour,

            peux tu maintenant télécharger Hijackthis ou non ?
            1. jan ive Auteur
              bonjour philae83
              tu me croiras peut etre pas mais j'arrive toujours pas a le telecharger.A peine je commence a le faire que la page se ferme immediatement.J'essaye depuis plus d'une heure maintenant.Et puis c'est tres tres lennnntttttt!mais je continue toujours a essayer
              2. jan ive Auteur
                ca doit etre plus grave que je ne le pense alors,puisque meme avec celui là il s'ouvre pas.Je l'ai sauvegardé sur le desktop et quand j'essaye de l'ouvrir...eh bien il s'ouvre pas!il passe immediatement a "signalisation des erreurs" je suis desemparé.J'ai meme ajouté a la liste des exceptions pour le firewall START->PANNEAU DE CONTROLE->WINDOWS FIREWALL->EXCPTION mais il va toujours pas.Est-ce le seul programme dont j'ai besoin?n'y a-t-il pas un autre?
                1. philae83 Contributeur sécurité
                  re
                  en est il pareil de tout ce que tu télécharges ?

                  1. jan ive Auteur
                    non c'est le seul qui s'ouvre pas,tout ce que j'ai essayé de telecharger a fonctioné normalement,mais celui-ci,non.Je comprends vraiment pas pourquoi.
                    1. philae83 Contributeur sécurité
                      moi non +
                      avais tu essayé en MSE ?

                      on va faire autre chose pour l'instant

                      Étape 1:

                      Télécharge eScan Antivirus Toolkit ici. Sauvegarde-le sur ton Bureau.

                      Avant de lancer le programme, il faut le mettre à jour tel qu'indiqué à l'étape 2.

                      Étape 2:

                      Voici comment mettre l'outil à jour :

                      1.) Double-clique le fichier mwav.exe qui se trouve sur le Bureau ; dézippe les fichiers dans le nouveau dossier suggéré (C:\Kaspersky). Le programme va se lancer, et tu dois le quitter (clique sur "Exit" puis "Exit").

                      2.) Double-clique sur le Poste de travail puis double-clique sur le lecteur principal (habituellement C:\), double-clique sur le dossier Kaspersky ; ensuite, double-clique sur le fichier kavupd.exe. Tu verras maintenant une fenêtre DOS apparaître, et la mise à jour se complètera en quelques minutes.

                      3.) Lorsque la mise à jour sera complétée, tu verras "Press any key to continue" ; tape sur une touche pour continuer. Deux nouveaux répertoires (dossiers) ont été créés lors de la mise à jour (C:\Bases et C:\Downloads).

                      4.) Sélectionne/copie tous les fichiers présents dans le dossier C:\Downloads, puis colle-les dans le dossier C:\Kaspersky. Accepte à l'invite de remplacer les fichiers existants.

                      Ne pas lancer le scan tout de suite !

                      Étape 3:

                      Imprime ceci.

                      Redémarre en mode Sans Échec :

                      1) Redémarre ton PC.

                      2) Tapote la touche F8 (ou F5) immédiatement, juste après le "Bip"

                      3) Tu verras un écran avec options de démarrage apparaître

                      4) Choisi la première option : Sans Échec, et valide avec "Entrée"

                      5) Choisis ton compte régulier, et non Administrateur.

                      Étape 4:

                      Du mode Sans Échec, voici comment utiliser le programme :

                      1.) Pour lancer "eScan Antivirus Toolkit", trouve le fichier mwavscan.com situé dans le dossier C:\Kaspersky.

                      2.) Double-clique sur mwavscan.com ; l'interface d'eScan va apparaître à l'écran.

                      3.) Il est très important de bien cocher ces boîtes sous Scan Option : Memory, Registry, Startup Folders, System Folders, Services.

                      4.) Coche la boîte Drive, ce qui donne accès à une nouvelle boîte Drive (bouton rond) juste dessous ; coche ce bouton "Drive" (très important..), et tu verras une nouvelle boîte de navigation apparaître à la droite. Clique sur la petite flèche de cette boîte et choisi la lettre de ton disque dur, habituellement C:\.

                      5.) Juste au-dessous, assure-toi que Scan All Files est coché, et non Program Files.

                      6.) Clique sur Scan Clean et laisse l'outil vérifier tout le disque dur (ça peut être long..). Lorsque terminé, tu verras Scan Completed. Ne pas quitter tout de suite !

                      7.) Ouvre un nouveau fichier Bloc notes (clique sur "Démarrer" >> "Programmes" >>"Accessoires" >> "Bloc notes"), puis copie/colle tout le contenu de la fenêtre [b]Virus Log Information[/b] (la deuxième, au bas) dans le fichier texte, et sauvegarde le. eScan génère également un rapport complet dans le dossier C:\Kaspersky (nommé mwav.log), mais il est trop lourd pour poster sur le forum.

                      Ferme le programme. Redémarre ton PC en mode Normal. Poste (copie/colle) le rapport que tu as sauvegardé dans ta prochaine réponse.
                      1. jan ive Auteur
                        j'ai suivi tous tes conseils et j'ai fait le rapport.mais il est tres pesant et n'arrive pas a etre copié.je reessayerai pour toute la soirée
                        2. jan ive Auteur
                          Sun Apr 15 18:35:30 2007 => **********************************************************
                          Sun Apr 15 18:35:30 2007 => eScan AntiVirus Toolkit Utility.
                          Sun Apr 15 18:35:30 2007 => Copyright © 2003-2004, MicroWorld Technologies Inc.
                          Sun Apr 15 18:35:30 2007 => **********************************************************
                          Sun Apr 15 18:35:30 2007 => Version 4.4.7
                          Sun Apr 15 18:35:30 2007 => Log File: C:\KASPER~1\mwav.log
                          Sun Apr 15 18:35:30 2007 => Latest Date of files inside MWAV: 29 Mar 2007 12:29:52.
                          Sun Apr 15 18:35:32 2007 => AV Library Loaded...
                          Sun Apr 15 18:35:32 2007 => Scanning File C:\KASPER~1\kavss.exe
                          Sun Apr 15 18:35:32 2007 => Scanning File C:\KASPER~1\Getvlist.exe
                          Sun Apr 15 18:35:32 2007 => Scanning File C:\KASPER~1\kavss.dll
                          Sun Apr 15 18:35:32 2007 => Scanning File C:\KASPER~1\kavssdi.dll
                          Sun Apr 15 18:35:32 2007 => Scanning File C:\KASPER~1\kavssi.dll
                          Sun Apr 15 18:35:32 2007 => Scanning File C:\KASPER~1\kavvlg.dll
                          Sun Apr 15 18:35:32 2007 => Scanning File C:\KASPER~1\msvlclnt.dll
                          Sun Apr 15 18:35:33 2007 => Scanning File C:\KASPER~1\ipc.dll
                          Sun Apr 15 18:35:33 2007 => Scanning File C:\KASPER~1\main.avi
                          Sun Apr 15 18:35:33 2007 => Scanning File C:\KASPER~1\virus.avi
                          Sun Apr 15 18:35:33 2007 => Virus Database Date: 2007/03/29
                          Sun Apr 15 18:35:33 2007 => Virus Database Count: 288412
                          Sun Apr 15 19:20:29 2007 => **********************************************************
                          Sun Apr 15 19:20:29 2007 => eScan AntiVirus Toolkit Utility.
                          Sun Apr 15 19:20:29 2007 => Copyright © 2003-2004, MicroWorld Technologies Inc.
                          Sun Apr 15 19:20:29 2007 => **********************************************************
                          Sun Apr 15 19:20:29 2007 => Version 4.4.7
                          Sun Apr 15 19:20:29 2007 => Log File: C:\KASPER~1\mwav.log
                          Sun Apr 15 19:20:30 2007 => Latest Date of files inside MWAV: 29 Mar 2007 12:29:52.
                          Sun Apr 15 19:20:32 2007 => AV Library Loaded...
                          Sun Apr 15 19:20:32 2007 => Scanning File C:\KASPER~1\kavss.exe
                          Sun Apr 15 19:20:32 2007 => Scanning File C:\KASPER~1\Getvlist.exe
                          Sun Apr 15 19:20:32 2007 => Scanning File C:\KASPER~1\kavss.dll
                          Sun Apr 15 19:20:32 2007 => Scanning File C:\KASPER~1\kavssdi.dll
                          Sun Apr 15 19:20:32 2007 => Scanning File C:\KASPER~1\kavssi.dll
                          Sun Apr 15 19:20:32 2007 => Scanning File C:\KASPER~1\kavvlg.dll
                          Sun Apr 15 19:20:32 2007 => Scanning File C:\KASPER~1\msvlclnt.dll
                          Sun Apr 15 19:20:32 2007 => Scanning File C:\KASPER~1\ipc.dll
                          Sun Apr 15 19:20:32 2007 => Scanning File C:\KASPER~1\main.avi
                          Sun Apr 15 19:20:32 2007 => Scanning File C:\KASPER~1\virus.avi
                          Sun Apr 15 19:20:33 2007 => Virus Database Date: 2007/03/29
                          Sun Apr 15 19:20:33 2007 => Virus Database Count: 288412
                          Sun Apr 15 19:21:41 2007 => AV Library Unloaded (3)...
                          1. jan ive Auteur
                            Sun Apr 15 19:23:25 2007 => eScan AntiVirus Toolkit Utility.
                            Sun Apr 15 19:23:25 2007 => Copyright © 2003-2004, MicroWorld Technologies Inc.
                            Sun Apr 15 19:23:25 2007 => **********************************************************
                            Sun Apr 15 19:23:25 2007 => Version 4.4.7
                            Sun Apr 15 19:23:25 2007 => Log File: C:\KASPER~1\mwav.log
                            Sun Apr 15 19:23:25 2007 => Latest Date of files inside MWAV: 29 Mar 2007 12:29:52.
                            Sun Apr 15 19:23:27 2007 => AV Library Loaded...
                            Sun Apr 15 19:23:27 2007 => Scanning File C:\KASPER~1\kavss.exe
                            Sun Apr 15 19:23:27 2007 => Scanning File C:\KASPER~1\Getvlist.exe
                            Sun Apr 15 19:23:27 2007 => Scanning File C:\KASPER~1\kavss.dll
                            Sun Apr 15 19:23:27 2007 => Scanning File C:\KASPER~1\kavssdi.dll
                            Sun Apr 15 19:23:27 2007 => Scanning File C:\KASPER~1\kavssi.dll
                            Sun Apr 15 19:23:27 2007 => Scanning File C:\KASPER~1\kavvlg.dll
                            Sun Apr 15 19:23:27 2007 => Scanning File C:\KASPER~1\msvlclnt.dll
                            Sun Apr 15 19:23:27 2007 => Scanning File C:\KASPER~1\ipc.dll
                            Sun Apr 15 19:23:27 2007 => Scanning File C:\KASPER~1\main.avi
                            Sun Apr 15 19:23:27 2007 => Scanning File C:\KASPER~1\virus.avi
                            Sun Apr 15 19:23:27 2007 => Virus Database Date: 2007/03/29
                            Sun Apr 15 19:23:27 2007 => Virus Database Count: 288412

                            Sun Apr 15 19:24:21 2007 => **********************************************************
                            Sun Apr 15 19:24:21 2007 => eScan AntiVirus Toolkit Utility.
                            Sun Apr 15 19:24:21 2007 => Copyright © 2003-2004, MicroWorld Technologies Inc.
                            Sun Apr 15 19:24:21 2007 =>
                            Sun Apr 15 19:24:21 2007 => Support: support@mwti.net
                            Sun Apr 15 19:24:21 2007 => Web: https://www.escanav.com/en/index.asp
                            Sun Apr 15 19:24:21 2007 => **********************************************************
                            Sun Apr 15 19:24:21 2007 => Version 4.4.7
                            Sun Apr 15 19:24:21 2007 => Log File: C:\KASPER~1\mwav.log
                            Sun Apr 15 19:24:21 2007 => Latest Date of files inside MWAV: 29 Mar 2007 12:29:52.

                            Sun Apr 15 19:24:21 2007 => Options Selected by User:
                            Sun Apr 15 19:24:21 2007 => Memory Check: Enabled
                            Sun Apr 15 19:24:21 2007 => Registry Check: Enabled
                            Sun Apr 15 19:24:21 2007 => StartUp Folder Check: Enabled
                            Sun Apr 15 19:24:21 2007 => System Folder Check: Enabled
                            Sun Apr 15 19:24:21 2007 => System Area Check: Disabled
                            Sun Apr 15 19:24:21 2007 => Services Check: Enabled
                            Sun Apr 15 19:24:21 2007 => Drive Check: Disabled
                            Sun Apr 15 19:24:21 2007 => All Drive Check :Enabled
                            Sun Apr 15 19:24:21 2007 => Scanning Type: Scan And Clean
                            1. jan ive Auteur
                              Sun Apr 15 19:24:21 2007 => Folder Check: Disabled

                              Sun Apr 15 19:24:21 2007 => ***** Scanning Memory Files *****
                              Sun Apr 15 19:24:21 2007 => Scanning File C:\WINDOWS\system32\services.exe
                              Sun Apr 15 19:24:21 2007 => Scanning File C:\WINDOWS\system32\lsass.exe
                              Sun Apr 15 19:24:21 2007 => Scanning File C:\WINDOWS\system32\Ati2evxx.exe
                              Sun Apr 15 19:24:21 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                              Sun Apr 15 19:24:21 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                              Sun Apr 15 19:24:21 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
                              Sun Apr 15 19:24:21 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                              Sun Apr 15 19:24:21 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                              Sun Apr 15 19:24:21 2007 => Scanning File C:\WINDOWS\system32\spoolsv.exe
                              Sun Apr 15 19:24:21 2007 => Scanning File C:\WINDOWS\system32\Ati2evxx.exe
                              Sun Apr 15 19:24:22 2007 => Scanning File C:\WINDOWS\Explorer.EXE
                              Sun Apr 15 19:24:22 2007 => Scanning File C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
                              Sun Apr 15 19:24:22 2007 => Scanning File C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
                              Sun Apr 15 19:24:22 2007 => Scanning File C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
                              Sun Apr 15 19:24:22 2007 => Scanning File C:\PROGRA~1\WIDCOMM\SOFTWA~1\bin\btwdins.exe
                              Sun Apr 15 19:24:22 2007 => Scanning File C:\PROGRA~1\hpq\HPWIRE~1\HPWIRE~1.EXE
                              Sun Apr 15 19:24:23 2007 => Scanning File C:\PROGRA~1\FILECO~1\SYMANT~1\SECURI~1\SymWSC.exe
                              Sun Apr 15 19:24:23 2007 => Scanning File C:\Programmi\ICQLite\ICQLite.exe
                              Sun Apr 15 19:24:23 2007 => Scanning File C:\WINDOWS\system32\wbem\wmiprvse.exe
                              Sun Apr 15 19:24:23 2007 => Scanning File C:\PROGRA~1\FILECO~1\Real\UPDATE~1\REALSC~1.EXE
                              Sun Apr 15 19:24:23 2007 => Scanning File C:\DOCUME~1\PROPRI~1\IMPOST~1\Temp\53925937.exe
                              Sun Apr 15 19:24:23 2007 => Scanning File C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
                              Sun Apr 15 19:24:23 2007 => Scanning File C:\PROGRA~1\THECLE~1\tca.exe
                              Sun Apr 15 19:24:24 2007 => Scanning File C:\PROGRA~1\THECLE~1\tcm.exe
                              Sun Apr 15 19:24:24 2007 => Scanning File C:\WINDOWS\system32\ctfmon.exe
                              Sun Apr 15 19:24:24 2007 => Scanning File C:\WINDOWS\system32\prodsrvs.exe
                              Sun Apr 15 19:24:25 2007 => File C:\WINDOWS\system32\prodsrvs.exe tagged as not-a-virus:Porn-Dialer.Win32.InstantAccess.ao. No Action Taken.

                              Sun Apr 15 19:24:25 2007 => Scanning File C:\Programmi\Skype\Phone\Skype.exe
                              Sun Apr 15 19:24:28 2007 => Scanning File C:\PROGRA~1\MSNMES~1\MsnMsgr.Exe
                              Sun Apr 15 19:24:28 2007 => Scanning File C:\PROGRA~1\WIDCOMM\SOFTWA~1\BTTray.exe
                              Sun Apr 15 19:24:28 2007 => Scanning File C:\PROGRA~1\Yahoo!\YAHOO!~1\ymetray.exe
                              Sun Apr 15 19:24:28 2007 => Scanning File C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
                              Sun Apr 15 19:24:28 2007 => Scanning File C:\Programmi\HPQ\shared\hpqwmi.exe
                              Sun Apr 15 19:24:28 2007 => Scanning File C:\WINDOWS\System32\alg.exe
                              Sun Apr 15 19:24:28 2007 => Scanning File C:\PROGRA~1\WIDCOMM\SOFTWA~1\BTSTAC~1.EXE
                              1. jan ive Auteur
                                Sun Apr 15 19:24:28 2007 => Scanning File C:\PROGRA~1\WIDCOMM\SOFTWA~1\BTSTAC~1.EXE
                                Sun Apr 15 19:24:30 2007 => Scanning File C:\PROGRA~1\FILECO~1\MICROS~1\WINDOW~1\WLLOGI~1.EXE
                                Sun Apr 15 19:24:30 2007 => Scanning File C:\PROGRA~1\INTERN~1\IEXPLORE.EXE
                                Sun Apr 15 19:24:30 2007 => Scanning File C:\Kaspersky\mwavscan.com
                                Sun Apr 15 19:24:30 2007 => Scanning File C:\Kaspersky\kavss.exe

                                Sun Apr 15 19:24:30 2007 => ***** Scanning Registry Files *****

                                Sun Apr 15 19:24:30 2007 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
                                Sun Apr 15 19:24:30 2007 => *** File C:\WINDOWS\system32\SHELL32.dll having Size Restriction ***
                                Sun Apr 15 19:24:30 2007 => Scanning File C:\WINDOWS\system32\SHELL32.dll [**]
                                Sun Apr 15 19:24:30 2007 => *** File C:\WINDOWS\system32\SHELL32.dll having Size Restriction ***
                                Sun Apr 15 19:24:30 2007 => Scanning File C:\WINDOWS\system32\SHELL32.dll [**]
                                Sun Apr 15 19:24:30 2007 => Scanning File C:\WINDOWS\system32\webcheck.dll
                                Sun Apr 15 19:24:30 2007 => Scanning File C:\WINDOWS\system32\stobject.dll
                                Sun Apr 15 19:24:30 2007 => Scanning File C:\WINDOWS\system32\WPDShServiceObj.dll

                                Sun Apr 15 19:24:30 2007 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects
                                Sun Apr 15 19:24:30 2007 => {02478D38-C3F9-4EFB-9B51-7695ECA05670} = C:\Programmi\Yahoo!\Companion\Installs\cpn0\yt.dll
                                Sun Apr 15 19:24:30 2007 => Scanning File C:\Programmi\Yahoo!\Companion\Installs\cpn0\yt.dll
                                Sun Apr 15 19:24:30 2007 => {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} = C:\Programmi\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
                                Sun Apr 15 19:24:30 2007 => Scanning File C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\ActiveX\ACROIE~1.DLL
                                Sun Apr 15 19:24:30 2007 => {100EB1FD-D03E-47FD-81F3-EE91287F9465} = C:\Programmi\ShoppingReport\Bin\2.0.21\ShoppingReport.dll
                                Sun Apr 15 19:24:30 2007 => Scanning File C:\Programmi\ShoppingReport\Bin\2.0.21\ShoppingReport.dll
                                Sun Apr 15 19:24:30 2007 => {22BF413B-C6D2-4d91-82A9-A0F997BA588C} = C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
                                Sun Apr 15 19:24:30 2007 => Scanning File C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
                                Sun Apr 15 19:24:31 2007 => {7E853D72-626A-48EC-A868-BA8D5E23E045} = NULL
                                Sun Apr 15 19:24:31 2007 => {9030D464-4C02-4ABF-8ECC-5164760863C6} = C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                Sun Apr 15 19:24:31 2007 => Scanning File C:\PROGRA~1\FILECO~1\MICROS~1\WINDOW~1\WINDOW~1.DLL
                                Sun Apr 15 19:24:31 2007 => {AA58ED58-01DD-4d91-8333-CF10577473F7} = c:\programmi\google\googletoolbar3.dll
                                Sun Apr 15 19:24:31 2007 => Scanning File c:\programmi\google\googletoolbar3.dll
                                Sun Apr 15 19:24:32 2007 => {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} = C:\Programmi\Windows Live Toolbar\msntb.dll
                                Sun Apr 15 19:24:32 2007 => Scanning File C:\PROGRA~1\WINDOW~4\msntb.dll
                                Sun Apr 15 19:24:32 2007 => NoExplorer = NULL
                                Sun Apr 15 19:24:32 2007 => {F97DA966-F09D-4cab-BF29-75A0026986EA} = C:\PROGRA~1\BEARSH~2\BEARSH~2\MediaBar.dll
                                Sun Apr 15 19:24:32 2007 => Scanning File C:\PROGRA~1\BEARSH~2\BEARSH~2\MediaBar.dll
                                Sun Apr 15 19:24:32 2007 => File C:\PROGRA~1\BEARSH~2\BEARSH~2\MediaBar.dll tagged as not-a-virus:AdWare.Win32.Softomate.aa. No Action Taken.

                                Sun Apr 15 19:24:32 2007 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
                                1. jan ive Auteur
                                  Sun Apr 15 19:24:32 2007 => Scanning File C:\WINDOWS\Explorer.exe
                                  Sun Apr 15 19:24:32 2007 => Scanning File C:\WINDOWS\system32\userinit.exe

                                  Sun Apr 15 19:24:32 2007 => Scanning HKCU\Control Panel\Desktop

                                  Sun Apr 15 19:24:32 2007 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
                                  Sun Apr 15 19:24:32 2007 => ERROR!!! Invalid Entry eabconfg.cpl = C:\Programmi\HPQ\Quick Launch Buttons\EabServr.exe /Start. Removing it.
                                  Sun Apr 15 19:24:32 2007 => ERROR!!! Invalid Entry ISUSScheduler = "C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe" -start. Removing it.
                                  Sun Apr 15 19:24:32 2007 => ERROR!!! Invalid Entry iTunesHelper = "C:\Programmi\iTunes\iTunesHelper.exe". Removing it.
                                  Sun Apr 15 19:24:32 2007 => ERROR!!! Invalid Entry svckhgea = "c:\windows\system32\svckhgea.exe". Removing it.
                                  Sun Apr 15 19:24:32 2007 => Scanning File C:\DOCUME~1\PROPRI~1\IMPOST~1\Temp\53925937.exe
                                  Sun Apr 15 19:24:32 2007 => Scanning File C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
                                  Sun Apr 15 19:24:32 2007 => Scanning File C:\PROGRA~1\THECLE~1\tca.exe
                                  Sun Apr 15 19:24:33 2007 => Scanning File C:\PROGRA~1\THECLE~1\tcm.exe

                                  Sun Apr 15 19:24:33 2007 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

                                  Sun Apr 15 19:24:33 2007 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx

                                  Sun Apr 15 19:24:33 2007 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

                                  Sun Apr 15 19:24:33 2007 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
                                  Sun Apr 15 19:24:33 2007 => Scanning File C:\WINDOWS\system32\ctfmon.exe
                                  Sun Apr 15 19:24:33 2007 => Scanning File C:\WINDOWS\system32\prodsrvs.exe
                                  Sun Apr 15 19:24:33 2007 => File C:\WINDOWS\system32\prodsrvs.exe tagged as not-a-virus:Porn-Dialer.Win32.InstantAccess.ao. No Action Taken.

                                  Sun Apr 15 19:24:33 2007 => *** File C:\Programmi\Skype\Phone\Skype.exe having Size Restriction ***
                                  Sun Apr 15 19:24:33 2007 => Scanning File C:\Programmi\Skype\Phone\Skype.exe [**]
                                  Sun Apr 15 19:24:33 2007 => *** File C:\PROGRA~1\MSNMES~1\MsnMsgr.Exe having Size Restriction ***
                                  Sun Apr 15 19:24:33 2007 => Scanning File C:\PROGRA~1\MSNMES~1\MsnMsgr.Exe [**]
                                  Sun Apr 15 19:24:33 2007 => Scanning File C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE
                                  Sun Apr 15 19:24:34 2007 => ERROR!!! Invalid Entry VoipBuster = "C:\Programmi\VoipBuster.com\VoipBuster\VoipBuster.exe" -nosplash -minimized. Removing it.

                                  Sun Apr 15 19:24:34 2007 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
                                  Sun Apr 15 19:24:34 2007 => Scanning File C:\Programmi\ICQLite\ICQLite.exe

                                  Sun Apr 15 19:24:34 2007 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx

                                  Sun Apr 15 19:24:34 2007 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

                                  Sun Apr 15 19:24:34 2007 => Scanning HKCR\txtfile\shell\open\command

                                  Sun Apr 15 19:24:34 2007 => Scanning HKCR\comfile\shell\open\command

                                  Sun Apr 15 19:24:34 2007 => Scanning HKCR\exefile\shell\open\command

                                  Sun Apr 15 19:24:34 2007 => Scanning HKCR\dllfile\shell\open\command

                                  Sun Apr 15 19:24:34 2007 => Scanning HKCR\batfile\shell\open\command

                                  Sun Apr 15 19:24:34 2007 => Scanning HKCR\piffile\shell\open\command

                                  Sun Apr 15 19:24:34 2007 => Scanning HKCR\scrfile\shell\open\command

                                  Sun Apr 15 19:24:34 2007 => Scanning HKCR\scrfile\shell\config\command

                                  Sun Apr 15 19:24:34 2007 => Scanning HKCR\regfile\shell\open\command

                                  Sun Apr 15 19:24:34 2007 => ***** Scanning StartUp Folders *****

                                  Sun Apr 15 19:24:34 2007 => ***** Scanning C:\Documents and Settings\Proprietario\Menu Avvio\Programmi\Esecuzione automatica Folder *****
                                  Sun Apr 15 19:24:34 2007 => Scanning Folder: C:\Documents and Settings\Proprietario\Menu Avvio\Programmi\Esecuzione automatica\*.*
                                  Sun Apr 15 19:24:34 2007 => Scanning File C:\Documents and Settings\Proprietario\Menu Avvio\Programmi\Esecuzione automatica\desktop.ini

                                  Sun Apr 15 19:24:34 2007 => ***** Scanning C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica Folder *****
                                  Sun Apr 15 19:24:34 2007 => Scanning Folder: C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\*.*
                                  Sun Apr 15 19:24:34 2007 => Scanning File C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\BTTray.lnk
                                  Sun Apr 15 19:24:34 2007 => Scanning File C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\desktop.ini
                                  Sun Apr 15 19:24:34 2007 => Scanning File C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\ymetray.lnk

                                  Sun Apr 15 19:24:34 2007 => ***** Scanning Service Files *****
                                  Sun Apr 15 19:24:34 2007 => Scanning HKLM\SYSTEM\CurrentControlSet\Services
                                  Sun Apr 15 19:24:34 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\ACPI.sys
                                  Sun Apr 15 19:24:34 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
                                  Sun Apr 15 19:24:34 2007 => Scanning File C:\WINDOWS\system32\drivers\aec.sys
                                  Sun Apr 15 19:24:34 2007 => Scanning File C:\WINDOWS\System32\drivers\afd.sys
                                  Sun Apr 15 19:24:34 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                  Sun Apr 15 19:24:34 2007 => Scanning File C:\WINDOWS\System32\alg.exe
                                  Sun Apr 15 19:24:34 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\AmdK8.sys
                                  Sun Apr 15 19:24:34 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                  Sun Apr 15 19:24:34 2007 => Scanning File C:\Programmi\Ares\chatServer.exe
                                  Sun Apr 15 19:24:35 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\arp1394.sys
                                  Sun Apr 15 19:24:35 2007 => Scanning File C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
                                  Sun Apr 15 19:24:35 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\asyncmac.sys
                                  Sun Apr 15 19:24:35 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\atapi.sys
                                  Sun Apr 15 19:24:35 2007 => Scanning File C:\WINDOWS\system32\Ati2evxx.exe
                                  Sun Apr 15 19:24:35 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
                                  Sun Apr 15 19:24:35 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\atmarpc.sys
                                  Sun Apr 15 19:24:35 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
                                  Sun Apr 15 19:24:35 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\audstub.sys
                                  Sun Apr 15 19:24:35 2007 => Scanning File C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
                                  Sun Apr 15 19:24:35 2007 => Scanning File C:\WINDOWS\System32\Drivers\avg7core.sys
                                  Sun Apr 15 19:24:35 2007 => Scanning File C:\WINDOWS\System32\Drivers\avg7rsw.sys
                                  Sun Apr 15 19:24:36 2007 => Scanning File C:\WINDOWS\System32\Drivers\avg7rsxp.sys
                                  Sun Apr 15 19:24:36 2007 => Scanning File C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
                                  Sun Apr 15 19:24:36 2007 => Scanning File C:\WINDOWS\System32\Drivers\avgclean.sys
                                  Sun Apr 15 19:24:36 2007 => Scanning File C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
                                  Sun Apr 15 19:24:36 2007 => Scanning File C:\WINDOWS\System32\Drivers\avgtdi.sys
                                  Sun Apr 15 19:24:36 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\bcmwl5.sys
                                  Sun Apr 15 19:24:36 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                  Sun Apr 15 19:24:36 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                  Sun Apr 15 19:24:36 2007 => Scanning File C:\WINDOWS\system32\drivers\btaudio.sys
                                  Sun Apr 15 19:24:36 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\btport.sys
                                  Sun Apr 15 19:24:36 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\btkrnl.sys
                                  Sun Apr 15 19:24:36 2007 => Scanning File C:\PROGRA~1\WIDCOMM\SOFTWA~1\bin\btwdins.exe
                                  Sun Apr 15 19:24:36 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\btwdndis.sys
                                  Sun Apr 15 19:24:36 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\btwmodem.sys
                                  Sun Apr 15 19:24:36 2007 => Scanning File C:\WINDOWS\system32\Drivers\btwusb.sys
                                  Sun Apr 15 19:24:36 2007 => Scanning File C:\WINDOWS\system32\drivers\camc6aud.sys
                                  Sun Apr 15 19:24:36 2007 => Scanning File C:\WINDOWS\system32\drivers\camc6hal.sys
                                  Sun Apr 15 19:24:36 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\cdrom.sys
                                  Sun Apr 15 19:24:37 2007 => Scanning File C:\WINDOWS\system32\cisvc.exe
                                  Sun Apr 15 19:24:37 2007 => Scanning File C:\WINDOWS\system32\clipsrv.exe
                                  Sun Apr 15 19:24:37 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\CmBatt.sys
                                  Sun Apr 15 19:24:37 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\compbatt.sys
                                  Sun Apr 15 19:24:37 2007 => Scanning File C:\WINDOWS\system32\dllhost.exe
                                  Sun Apr 15 19:24:37 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                  Sun Apr 15 19:24:37 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                  Sun Apr 15 19:24:37 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                  Sun Apr 15 19:24:37 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\disk.sys
                                  Sun Apr 15 19:24:37 2007 => Scanning File C:\WINDOWS\System32\dmadmin.exe
                                  Sun Apr 15 19:24:37 2007 => Scanning File C:\WINDOWS\system32\drivers\dmboot.sys
                                  Sun Apr 15 19:24:37 2007 => Scanning File C:\WINDOWS\system32\drivers\dmio.sys
                                  Sun Apr 15 19:24:38 2007 => Scanning File C:\WINDOWS\system32\drivers\dmload.sys
                                  Sun Apr 15 19:24:38 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
                                  Sun Apr 15 19:24:38 2007 => Scanning File C:\WINDOWS\system32\drivers\DMusic.sys
                                  Sun Apr 15 19:24:38 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                  Sun Apr 15 19:24:38 2007 => Scanning File C:\WINDOWS\system32\drivers\drmkaud.sys
                                  Sun Apr 15 19:24:38 2007 => Scanning File C:\WINDOWS\SYSTEM32\DRIVERS\EABFILTR.SYS
                                  Sun Apr 15 19:24:38 2007 => Scanning File C:\WINDOWS\SYSTEM32\DRIVERS\EABUSB.SYS
                                  Sun Apr 15 19:24:38 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
                                  Sun Apr 15 19:24:38 2007 => Scanning File C:\WINDOWS\system32\services.exe
                                  Sun Apr 15 19:24:38 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                  Sun Apr 15 19:24:38 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
                                  Sun Apr 15 19:24:38 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\fltMgr.sys
                                  Sun Apr 15 19:24:38 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\ftdisk.sys
                                  Sun Apr 15 19:24:38 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
                                  Sun Apr 15 19:24:38 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\msgpc.sys
                                  Sun Apr 15 19:24:38 2007 => Scanning File C:\PROGRA~1\Google\Common\GOOGLE~1\GOOGLE~1.EXE
                                  Sun Apr 15 19:24:38 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
                                  Sun Apr 15 19:24:38 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
                                  Sun Apr 15 19:24:39 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\hidusb.sys
                                  Sun Apr 15 19:24:39 2007 => Scanning File C:\Programmi\HPQ\shared\hpqwmi.exe
                                  Sun Apr 15 19:24:39 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\HSFHWATI.sys
                                  Sun Apr 15 19:24:39 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\HSF_DP.sys
                                  Sun Apr 15 19:24:40 2007 => Scanning File C:\WINDOWS\system32\Drivers\HTTP.sys
                                  Sun Apr 15 19:24:40 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
                                  Sun Apr 15 19:24:40 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\i8042prt.sys
                                  Sun Apr 15 19:24:40 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\imapi.sys
                                  Sun Apr 15 19:24:40 2007 => Scanning File C:\WINDOWS\system32\imapi.exe
                                  Sun Apr 15 19:24:40 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
                                  Sun Apr 15 19:24:40 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
                                  Sun Apr 15 19:24:40 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\ipinip.sys
                                  Sun Apr 15 19:24:40 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\ipnat.sys
                                  Sun Apr 15 19:24:40 2007 => Scanning File C:\Programmi\iPod\bin\iPodService.exe
                                  Sun Apr 15 19:24:40 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\ipsec.sys
                                  Sun Apr 15 19:24:40 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\irenum.sys
                                  Sun Apr 15 19:24:40 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\isapnp.sys
                                  Sun Apr 15 19:24:41 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\kbdclass.sys
                                  Sun Apr 15 19:24:41 2007 => Scanning File C:\WINDOWS\system32\drivers\kmixer.sys
                                  Sun Apr 15 19:24:41 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                  Sun Apr 15 19:24:41 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                  Sun Apr 15 19:24:41 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                  Sun Apr 15 19:24:41 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
                                  Sun Apr 15 19:24:41 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                  Sun Apr 15 19:24:41 2007 => Scanning File C:\WINDOWS\system32\mnmsrvc.exe
                                  Sun Apr 15 19:24:41 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\mouclass.sys
                                  Sun Apr 15 19:24:41 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\mouhid.sys
                                  Sun Apr 15 19:24:41 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\mrxdav.sys
                                  Sun Apr 15 19:24:41 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
                                  Sun Apr 15 19:24:41 2007 => Scanning File C:\WINDOWS\system32\msdtc.exe
                                  Sun Apr 15 19:24:41 2007 => Scanning File C:\WINDOWS\system32\msiexec.exe
                                  Sun Apr 15 19:24:41 2007 => Scanning File C:\WINDOWS\system32\drivers\MSKSSRV.sys
                                  Sun Apr 15 19:24:42 2007 => Scanning File C:\WINDOWS\system32\drivers\MSPCLOCK.sys
                                  Sun Apr 15 19:24:42 2007 => Scanning File C:\WINDOWS\system32\drivers\MSPQM.sys
                                  Sun Apr 15 19:24:42 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\mssmbios.sys
                                  Sun Apr 15 19:24:42 2007 => Scanning File C:\WINDOWS\system32\DRIV
                                  1. jan ive Auteur
                                    Sun Apr 15 19:24:42 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\ndisuio.sys
                                    Sun Apr 15 19:24:42 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\ndiswan.sys
                                    Sun Apr 15 19:24:42 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\netbios.sys
                                    Sun Apr 15 19:24:42 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\netbt.sys
                                    Sun Apr 15 19:24:42 2007 => Scanning File C:\WINDOWS\system32\netdde.exe
                                    Sun Apr 15 19:24:42 2007 => Scanning File C:\WINDOWS\system32\netdde.exe
                                    Sun Apr 15 19:24:42 2007 => Scanning File C:\WINDOWS\system32\lsass.exe
                                    Sun Apr 15 19:24:42 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
                                    Sun Apr 15 19:24:42 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\nic1394.sys
                                    Sun Apr 15 19:24:42 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                    Sun Apr 15 19:24:42 2007 => Scanning File C:\WINDOWS\system32\lsass.exe
                                    Sun Apr 15 19:24:42 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                    Sun Apr 15 19:24:42 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
                                    Sun Apr 15 19:24:42 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
                                    Sun Apr 15 19:24:42 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\ohci1394.sys
                                    Sun Apr 15 19:24:42 2007 => Scanning File C:\PROGRA~1\FILECO~1\MICROS~1\SOURCE~1\OSE.EXE
                                    Sun Apr 15 19:24:43 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\pci.sys
                                    Sun Apr 15 19:24:43 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\pciide.sys
                                    Sun Apr 15 19:24:43 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\pcmcia.sys
                                    Sun Apr 15 19:24:43 2007 => Scanning File C:\WINDOWS\system32\services.exe
                                    Sun Apr 15 19:24:43 2007 => Scanning File C:\WINDOWS\system32\lsass.exe
                                    Sun Apr 15 19:24:43 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\raspptp.sys
                                    Sun Apr 15 19:24:43 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\processr.sys
                                    Sun Apr 15 19:24:43 2007 => Scanning File C:\WINDOWS\system32\lsass.exe
                                    Sun Apr 15 19:24:43 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\psched.sys
                                    Sun Apr 15 19:24:43 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\ptilink.sys
                                    Sun Apr 15 19:24:43 2007 => Scanning File C:\WINDOWS\system32\Drivers\PxHelp20.sys
                                    Sun Apr 15 19:24:43 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\rasacd.sys
                                    Sun Apr 15 19:24:43 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                    Sun Apr 15 19:24:43 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
                                    Sun Apr 15 19:24:43 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                    Sun Apr 15 19:24:43 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\raspppoe.sys
                                    Sun Apr 15 19:24:43 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\raspti.sys
                                    Sun Apr 15 19:24:43 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\rdbss.sys
                                    Sun Apr 15 19:24:43 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
                                    Sun Apr 15 19:24:44 2007 => Scanning File C:\WINDOWS\system32\sessmgr.exe
                                    Sun Apr 15 19:24:44 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\redbook.sys
                                    Sun Apr 15 19:24:44 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                    Sun Apr 15 19:24:44 2007 => Scanning File C:\WINDOWS\system32\locator.exe
                                    Sun Apr 15 19:24:44 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                    Sun Apr 15 19:24:44 2007 => Scanning File C:\WINDOWS\system32\rsvp.exe
                                    Sun Apr 15 19:24:44 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys
                                    Sun Apr 15 19:24:44 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
                                    Sun Apr 15 19:24:44 2007 => Scanning File C:\WINDOWS\system32\lsass.exe
                                    Sun Apr 15 19:24:44 2007 => Scanning File C:\WINDOWS\System32\SCardSvr.exe
                                    Sun Apr 15 19:24:44 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
                                    Sun Apr 15 19:24:44 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\sdbus.sys
                                    Sun Apr 15 19:24:44 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\secdrv.sys
                                    Sun Apr 15 19:24:44 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
                                    Sun Apr 15 19:24:44 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                    Sun Apr 15 19:24:44 2007 => Scanning File C:\WINDOWS\system32\drivers\sfdrv01.sys
                                    Sun Apr 15 19:24:44 2007 => Scanning File C:\WINDOWS\system32\drivers\sfhlp02.sys
                                    Sun Apr 15 19:24:45 2007 => Scanning File C:\WINDOWS\system32\drivers\sfvfs02.sys
                                    Sun Apr 15 19:24:45 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                    Sun Apr 15 19:24:45 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
                                    Sun Apr 15 19:24:45 2007 => Scanning File C:\WINDOWS\system32\drivers\splitter.sys
                                    Sun Apr 15 19:24:45 2007 => Scanning File C:\WINDOWS\system32\spoolsv.exe
                                    Sun Apr 15 19:24:45 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\sr.sys
                                    Sun Apr 15 19:24:45 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                    Sun Apr 15 19:24:45 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\srv.sys
                                    Sun Apr 15 19:24:45 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                    Sun Apr 15 19:24:45 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                    Sun Apr 15 19:24:45 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\swenum.sys
                                    Sun Apr 15 19:24:45 2007 => Scanning File C:\WINDOWS\system32\drivers\swmidi.sys
                                    Sun Apr 15 19:24:45 2007 => Scanning File C:\WINDOWS\system32\dllhost.exe
                                    Sun Apr 15 19:24:45 2007 => Scanning File C:\PROGRA~1\FILECO~1\SYMANT~1\SECURI~1\SymWSC.exe
                                    Sun Apr 15 19:24:45 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\SynTP.sys
                                    Sun Apr 15 19:24:45 2007 => Scanning File C:\WINDOWS\system32\drivers\sysaudio.sys
                                    Sun Apr 15 19:24:45 2007 => Scanning File C:\WINDOWS\system32\smlogsvc.exe
                                    Sun Apr 15 19:24:45 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
                                    Sun Apr 15 19:24:45 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\tcpip.sys
                                    Sun Apr 15 19:24:46 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\termdd.sys
                                    Sun Apr 15 19:24:46 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
                                    Sun Apr 15 19:24:46 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
                                    Sun Apr 15 19:24:46 2007 => Scanning File C:\WINDOWS\system32\drivers\tifm21.sys
                                    Sun Apr 15 19:24:46 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                    Sun Apr 15 19:24:46 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\update.sys
                                    Sun Apr 15 19:24:46 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                    Sun Apr 15 19:24:46 2007 => Scanning File C:\WINDOWS\System32\ups.exe
                                    Sun Apr 15 19:24:46 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\usbehci.sys
                                    Sun Apr 15 19:24:46 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\usbhub.sys
                                    Sun Apr 15 19:24:46 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\usbohci.sys
                                    Sun Apr 15 19:24:46 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
                                    Sun Apr 15 19:24:46 2007 => Scanning File C:\PROGRA~1\MSNMES~1\usnsvc.exe
                                    Sun Apr 15 19:24:46 2007 => Scanning File C:\WINDOWS\System32\drivers\vga.sys
                                    Sun Apr 15 19:24:46 2007 => Scanning File C:\WINDOWS\System32\vssvc.exe
                                    Sun Apr 15 19:24:46 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
                                    Sun Apr 15 19:24:46 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\wanarp.sys
                                    Sun Apr 15 19:24:47 2007 => Scanning File C:\WINDOWS\system32\drivers\wdmaud.sys
                                    Sun Apr 15 19:24:47 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                    Sun Apr 15 19:24:47 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
                                    Sun Apr 15 19:24:47 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                    Sun Apr 15 19:24:47 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
                                    Sun Apr 15 19:24:47 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
                                    Sun Apr 15 19:24:47 2007 => Scanning File C:\WINDOWS\system32\wbem\wmiapsrv.exe
                                    Sun Apr 15 19:24:47 2007 => Scanning File C:\PROGRA~1\WINDOW~2\WMPNetwk.exe
                                    Sun Apr 15 19:24:47 2007 => Scanning File C:\WINDOWS\System32\drivers\ws2ifsl.sys
                                    Sun Apr 15 19:24:47 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
                                    Sun Apr 15 19:24:47 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                    Sun Apr 15 19:24:47 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\WudfPf.sys
                                    Sun Apr 15 19:24:47 2007 => Scanning File C:\WINDOWS\system32\DRIVERS\wudfrd.sys
                                    Sun Apr 15 19:24:47 2007 => Scanning File C:\WINDOWS\system32\svchost.exe
                                    Sun Apr 15 19:24:48 2007 => Scanning File C:\WINDOWS\System32\svchost.exe
                                    Sun Apr 15 19:24:48 2007 => Scanning File C:\WINDOWS\System32\svchost.exe

                                    Sun Apr 15 19:24:48 2007 => ***** Scanning System32 Folders *****
                                    Sun Apr 15 19:24:48 2007 => Scanning C:\WINDOWS Directory
                                    Sun Apr 15 19:24:48 2007 => Scanning Folder: C:\WINDOWS\*.*
                                    Sun Apr 15 19:24:48 2007 => Scanning File C:\WINDOWS\0.log [**]
                                    Sun Apr 15 19:24:48 2007 => Scanning File C:\WINDOWS\ActiveSkin.INI
                                    Sun Apr 15 19:24:48 2007 => Scanning File C:\WINDOWS\bdoscandel.exe
                                    Sun Apr 15 19:24:48 2007 => Scanning File C:\WINDOWS\bdoscandellang.ini
                                    Sun Apr 15 19:24:48 2007 => *** File C:\WINDOWS\Blue Sonic.bmp having Size Restriction ***
                                    Sun Apr 15 19:24:48 2007 => Scanning File C:\WINDOWS\Blue Sonic.bmp [**]
                                    Sun Apr 15 19:24:48 2007 => Scanning File C:\WINDOWS\Bolle di sapone.bmp
                                    Sun Apr 15 19:24:48 2007 => Scanning File C:\WINDOWS\bootstat.dat
                                    Sun Apr 15 19:24:48 2007 => Scanning File C:\WINDOWS\Caffè.bmp
                                    Sun Apr 15 19:24:48 2007 => Scanning File C:\WINDOWS\cdplayer.ini
                                    Sun Apr 15 19:24:48 2007 => Scanning File C:\WINDOWS\clock.avi
                                    Sun Apr 15 19:24:48 2007 => Scanning File C:\WINDOWS\cmsetacl.log
                                    Sun Apr 15 19:24:48 2007 => Scanning File C:\WINDOWS\COM+.log
                                    Sun Apr 15 19:24:48 2007 => Scanning File C:\WINDOWS\comsetup.log
                                    Sun Apr 15 19:24:49 2007 => Scanning File C:\WINDOWS\control.ini [**]
                                    Sun Apr 15 19:24:49 2007 => *** File C:\WINDOWS\Crystal Rush.bmp having Size Restriction ***
                                    Sun Apr 15 19:24:49 2007 => Scanning File C:\WINDOWS\Crystal Rush.bmp [**]
                                    Sun Apr 15 19:24:49 2007 => Scanning File C:\WINDOWS\desktop.ini
                                    Sun Apr 15 19:24:49 2007 => Scanning File C:\WINDOWS\dial-messenger.ini
                                    Sun Apr 15 19:24:49 2007 => Scanning File C:\WINDOWS\discwriter.log
                                    Sun Apr 15 19:24:49 2007 => Scanning File C:\WINDOWS\DPINST.LOG
                                    Sun Apr 15 19:24:49 2007 => Scanning File C:\WINDOWS\DtcInstall.log
                                    Sun Apr 15 19:24:49 2007 => Scanning File C:\WINDOWS\explorer.exe
                                    Sun Apr 15 19:24:49 2007 => Scanning File C:\WINDOWS\explorer.scf
                                    Sun Apr 15 19:24:49 2007 => Scanning File C:\WINDOWS\FaxSetup.log
                                    Sun Apr 15 19:24:49 2007 => *** File C:\WINDOWS\Fractal Blue.bmp having Size Restriction ***
                                    Sun Apr 15 19:24:49 2007 => Scanning File C:\WINDOWS\Fractal Blue.bmp [**]
                                    Sun Apr 15 19:24:49 2007 => Scanning File C:\WINDOWS\GEARInstall.log
                                    Sun Apr 15 19:24:49 2007 => Scanning File C:\WINDOWS\hh.exe
                                    Sun Apr 15 19:24:49 2007 => Scanning File C:\WINDOWS\IE4 Error Log.txt
                                    Sun Apr 15 19:24:49 2007 => Scanning File C:\WINDOWS\iis6.log
                                    Sun Apr 15 19:24:49 2007 => Scanning File C:\WINDOWS\imsins.BAK
                                    Sun Apr 15 19:24:49 2007 => Scanning File C:\WINDOWS\imsins.log
                                    Sun Apr 15 19:24:49 2007 => Scanning File C:\WINDOWS\Intonaco spagnolo.bmp
                                    Sun Apr 15 19:24:50 2007 => Scanning File C:\WINDOWS\KB835221.log
                                    Sun Apr 15 19:24:50 2007 => Scanning File C:\WINDOWS\KB873333.log
                                    Sun Apr 15 19:24:50 2007 => Scanning File C:\WINDOWS\KB873339.log
                                    Sun Apr 15 19:24:50 2007 => Scanning File C:\WINDOWS\KB883667.log
                                    Sun Apr 15 19:24:50 2007 => Scanning File C:\WINDOWS\KB883939.log
                                    Sun Apr 15 19:24:50 2007 => Scanning File C:\WINDOWS\KB884575.log
                                    Sun Apr 15 19:24:50 2007 => Scanning File C:\WINDOWS\KB885250.log
                                    Sun Apr 15 19:24:50 2007 => Scanning File C:\WINDOWS\KB885464.log
                                    Sun Apr 15 19:24:50 2007 => Scanning File C:\WINDOWS\KB885835.log
                                    Sun Apr 15 19:24:50 2007 => Scanning File C:\WINDOWS\KB885836.log
                                    Sun Apr 15 19:24:50 2007 => Scanning File C:\WINDOWS\KB885855.log
                                    Sun Apr 15 19:24:50 2007 => Scanning File C:\WINDOWS\KB885884.log
                                    Sun Apr 15 19:24:50 2007 => Scanning File C:\WINDOWS\KB886185.log
                                    Sun Apr 15 19:24:50 2007 => Scanning File C:\WINDOWS\KB887472.log
                                    Sun Apr 15 19:24:51 2007 => Scanning File C:\WINDOWS\KB888113.log
                                    Sun Apr 15 19:24:51 2007 => Scanning File C:\WINDOWS\KB888239.log
                                    Sun Apr 15 19:24:51 2007 => Scanning File C:\WINDOWS\KB888302.log
                                    Sun Apr 15 19:24:51 2007 => Scanning File C:\WINDOWS\KB888401.log
                                    Sun Apr 15 19:24:51 2007 => Scanning File C:\WINDOWS\KB888402.log
                                    Sun Apr 15 19:24:51 2007 => Scanning File C:\WINDOWS\KB889673.log
                                    Sun Apr 15 19:24:51 2007 => Scanning File C:\WINDOWS\KB890859.log
                                    Sun Apr 15 19:24:51 2007 => Scanning File C:\WINDOWS\KB891122.log
                                    Sun Apr 15 19:24:51 2007 => Scanning File C:\WINDOWS\KB891781.log
                                    Sun Apr 15 19:24:51 2007 => Scanning File C:\WINDOWS\KB892559.log
                                    Sun Apr 15 19:24:51 2007 => Scanning File C:\WINDOWS\KB893066.log
                                    Sun Apr 15 19:24:51 2007 => Scanning File C:\WINDOWS\KB893756.log
                                    Sun Apr 15 19:24:51 2007 => Scanning File C:\WINDOWS\KB893803v2.log
                                    Sun Apr 15 19:24:51 2007 => Scanning File C:\WINDOWS\KB894391.log
                                    Sun Apr 15 19:24:52 2007 => Scanning File C:\WINDOWS\KB896256.log
                                    Sun Apr 15 19:24:52 2007 => Scanning File C:\WINDOWS\KB896358.log
                                    Sun Apr 15 19:24:52 2007 => Scanning File C:\WINDOWS\KB896422.log
                                    Sun Apr 15 19:24:52 2007 => Scanning File C:\WINDOWS\KB896423.log
                                    Sun Apr 15 19:24:52 2007 => Scanning File C:\WINDOWS\KB896424.log
                                    Sun Apr 15 19:24:52 2007 => Scanning File C:\WINDOWS\KB896428.log
                                    Sun Apr 15 19:24:52 2007 => Scanning File C:\WINDOWS\KB898461.log
                                    Sun Apr 15 19:24:52 2007 => Scanning File C:\WINDOWS\KB899587.log
                                    Sun Apr 15 19:24:52 2007 => Scanning File C:\WINDOWS\KB899591.log
                                    Sun Apr 15 19:24:53 2007 => Scanning File C:\WINDOWS\KB900485.log
                                    Sun Apr 15 19:24:53 2007 => Scanning File C:\WINDOWS\KB900725.log
                                    Sun Apr 15 19:24:53 2007 => Scanning File C:\WINDOWS\KB901017.log
                                    Sun Apr 15 19:24:53 2007 => Scanning File C:\WINDOWS\KB901214.log
                                    Sun Apr 15 19:24:53 2007 => Scanning File C:\WINDOWS\KB902344.log
                                    Sun Apr 15 19:24:53 2007 => Scanning File C:\WINDOWS\KB902400.log
                                    Sun Apr 15 19:24:53 2007 => Scanning File C:\WINDOWS\KB904706.log
                                    Sun Apr 15 19:24:53 2007 => Scanning File C:\WINDOWS\KB905414.log
                                    Sun Apr 15 19:24:54 2007 => Scanning File C:\WINDOWS\KB905749.log
                                    Sun Apr 15 19:24:54 2007 => Scanning File C:\WINDOWS\KB908519.log
                                    Sun Apr 15 19:24:54 2007 => Scanning File C:\WINDOWS\KB908531.log
                                    Sun Apr 15 19:24:54 2007 => Scanning File C:\WINDOWS\KB910437.log
                                    Sun Apr 15 19:24:54 2007 => Scanning File C:\WINDOWS\KB910998.log
                                    Sun Apr 15 19:24:54 2007 => Scanning File C:\WINDOWS\KB911280.log
                                    Sun Apr 15 19:24:54 2007 => Scanning File C:\WINDOWS\KB911562.log
                                    Sun Apr 15 19:24:54 2007 => Scanning File C:\WINDOWS\KB911564.log
                                    Sun Apr 15 19:24:54 2007 => Scanning File C:\WINDOWS\KB911927.log
                                    Sun Apr 15 19:24:55 2007 => Scanning File C:\WINDOWS\KB912919.log
                                    Sun Apr 15 19:24:55 2007 => Scanning File C:\WINDOWS\KB913580.log
                                    Sun Apr 15 19:24:55 2007 => Scanning File C:\WINDOWS\KB914388.log
                                    Sun Apr 15 19:24:55 2007 => Scanning File C:\WINDOWS\KB914389.log
                                    Sun Apr 15 19:24:55 2007 => Scanning File C:\WINDOWS\KB916595.log
                                    Sun Apr 15 19:24:55 2007 => Scanning File C:\WINDOWS\KB917344.log
                                    Sun Apr 15 19:24:55 2007 => Scanning File C:\WINDOWS\KB917422.log
                                    Sun Apr 15 19:24:56 2007 => Scanning File C:\WINDOWS\KB917734.log
                                    Sun Apr 15 19:24:56 2007 => Scanning File C:\WINDOWS\KB917953.log
                                    Sun Apr 15 19:24:56 2007 => Scanning File C:\WINDOWS\KB918118.log
                                    Sun Apr 15 19:24:56 2007 => Scanning File C:\WINDOWS\KB918439.log
                                    Sun Apr 15 19:24:56 2007 => Scanning File C:\WINDOWS\KB919007.log
                                    Sun Apr 15 19:24:56 2007 => Scanning File C:\WINDOWS\KB920213.log
                                    Sun Apr 15 19:24:56 2007 => Scanning File C:\WINDOWS\KB920670.log
                                    Sun Apr 15 19:24:56 2007 => Scanning File C:\WINDOWS\KB920683.log
                                    Sun Apr 15 19:24:57 2007 => Scanning File C:\WINDOWS\KB920685.log
                                    Sun Apr 15 19:24:57 2007 => Scanning File C:\WINDOWS\KB920872.log
                                    Sun Apr 15 19:24:57 2007 => Scanning File C:\WINDOWS\KB922582.log
                                    Sun Apr 15 19:24:57 2007 => Scanning File C:\WINDOWS\KB922819.log
                                    Sun Apr 15 19:24:57 2007 => Scanning File C:\WINDOWS\KB923191.log
                                    Sun Apr 15 19:24:57 2007 => Scanning File C:\WINDOWS\KB923414.log
                                    Sun Apr 15 19:24:57 2007 => Scanning File C:\WINDOWS\KB923689.log
                                    Sun Apr 15 19:24:57 2007 => Scanning File C:\WINDOWS\KB923694.log
                                    Sun Apr 15 19:24:58 2007 => Scanning File C:\WINDOWS\KB923980.log
                                    Sun Apr 15 19:24:58 2007 => Scanning File C:\WINDOWS\KB924191.log
                                    Sun Apr 15 19:24:58 2007 => Scanning File C:\WINDOWS\KB924270.log
                                    Sun Apr 15 19:24:58 2007 => Scanning File C:\WINDOWS\KB924496.log
                                    Sun Apr 15 19:24:58 2007 => Scanning File C:\WINDOWS\KB924667.log
                                    Sun Apr 15 19:24:58 2007 => Scanning File C:\WINDOWS\KB925398.log
                                    Sun Apr 15 19:24:58 2007 => Scanning File C:\WINDOWS\KB925902.log
                                    Sun Apr 15 19:24:58 2007 => Scanning File C:\WINDOWS\KB926239.log
                                    Sun Apr 15 19:24:59 2007 => Scanning File C:\WINDOWS\KB926255.log
                                    Sun Apr 15 19:24:59 2007 => Scanning File C:\WINDOWS\KB926436.log
                                    Sun Apr 15 19:24:59 2007 => Scanning File C:\WINDOWS\KB927779.log
                                    Sun Apr 15 19:24:59 2007 => Scanning File C:\WINDOWS\KB927802.log
                                    Sun Apr 15 19:24:59 2007 => Scanning File C:\WINDOWS\KB928090.log
                                    Sun Apr 15 19:24:59 2007 => Scanning File C:\WINDOWS\KB928255.log
                                    Sun Apr 15 19:24:59 2007 => Scanning File C:\WINDOWS\KB928843.log
                                    Sun Apr 15 19:25:00 2007 => Scanning File C:\WINDOWS\KB929338.log
                                    Sun Apr 15 19:25:00 2007 => Scanning File C:\WINDOWS\KB929399.log
                                    Sun Apr 15 19:25:00 2007 => Scanning File C:\WINDOWS\KB929969.log
                                    Sun Apr 15 19:25:00 2007 => Scanning File C:\WINDOWS\KB930178.log
                                    Sun Apr 15 19:25:00 2007 => Scanning File C:\WINDOWS\KB931261.log
                                    Sun Apr 15 19:25:00 2007 => Scanning File C:\WINDOWS\KB931784.log
                                    Sun Apr 15 19:25:00 2007 => Scanning File C:\WINDOWS\KB931836.log
                                    Sun Apr 15 19:25:00 2007 => Scanning File C:\WINDOWS\KB932168.log
                                    Sun Apr 15 19:25:01 2007 => Scanning File C:\WINDOWS\ModemLog_AC97 Soft Data Fax Modem with SmartCP.txt
                                    Sun Apr 15 19:25:01 2007 => Scanning File C:\WINDOWS\ModemLog_Modem Bluetooth.txt
                                    Sun Apr 15 19:25:01 2007 => Scanning File C:\WINDOWS\mozver.dat
                                    Sun Apr 15 19:25:01 2007 => Scanning File C:\WINDOWS\MSCompPackV1.log
                                    Sun Apr 15 19:25:01 2007 => Scanning File C:\WINDOWS\msdfmap.ini
                                    Sun Apr 15 19:25:01 2007 => Scanning File C:\WINDOWS\msgsocm.log
                                    Sun Apr 15 19:25:01 2007 => Scanning File C:\WINDOWS\NOTEPAD.EXE
                                    Sun Apr 15 19:25:01 2007 => Scanning File C:\WINDOWS\nsreg.dat [**]
                                    Sun Apr 15 19:25:01 2007 => Scanning File C:\WINDOWS\nsw.log
                                    Sun Apr 15 19:25:01 2007 => Scanning File C:\WINDOWS\ntdtcsetup.log
                                    Sun Apr 15 19:25:01 2007 => Scanning File C:\WINDOWS\ocgen.log
                                    Sun Apr 15 19:25:02 2007 => Scanning File C:\WINDOWS\ocmsn.log
                                    Sun Apr 15 19:25:02 2007 => Scanning File C:\WINDOWS\ODBCINST.INI
                                    Sun Apr 15 19:25:02 2007 => Scanning File C:\WINDOWS\OEWABLog.txt
                                    Sun Apr 15 19:25:02 2007 => Scanning File C:\WINDOWS\off-road-uninst.exe
                                    Sun Apr 15 19:25:02 2007 => Scanning File C:\WINDOWS\OrangeBurn.log [**]
                                    Sun Apr 15 19:25:02 2007 => Scanning File C:\WINDOWS\PACK.EPK.ren
                                    Sun Apr 15 19:25:02 2007 => Scanning File C:\WINDOWS\PCEssentials.ico
                                    Sun Apr 15 19:25:02 2007 => Scanning File C:\WINDOWS\Pesca.bmp
                                    Sun Apr 15 19:25:02 2007 => Scanning File C:\WINDOWS\Pietra verde.bmp
                                    Sun Apr 15 19:25:02 2007 => Scanning File C:\WINDOWS\Piume.bmp
                                    Sun Apr 15 19:25:02 2007 => Scanning File C:\WINDOWS\Prateria.bmp
                                    Sun Apr 15 19:25:03 2007 => Scanning File C:\WINDOWS\regedit.exe
                                    Sun Apr 15 19:25:03 2007 => Scanning File C:\WINDOWS\REGLOCS.OLD
                                    Sun Apr 15 19:25:03 2007 => Scanning File C:\WINDOWS\regopt.log
                                    Sun Apr 15 19:25:03 2007 => Scanning File C:\WINDOWS\Ricamo (16 colori).bmp
                                    Sun Apr 15 19:25:03 2007 => Scanning File C:\WINDOWS\Rododendro.bmp
                                    Sun Apr 15 19:25:03 2007 => Scanning File C:\WINDOWS\SchedLgU.Txt
                                    Sun Apr 15 19:25:03 2007 => Scanning File C:\WINDOWS\sessmgr.setup.log
                                    Sun Apr 15 19:25:03 2007 => Scanning File C:\WINDOWS\SET3.tmp
                                    Sun Apr 15 19:25:03 2007 => Scanning File C:\WINDOWS\SET4.tmp
                                    Sun Apr 15 19:25:03 2007 => Scanning File C:\WINDOWS\SET8.tmp
                                    Sun Apr 15 19:25:03 2007 => Scanning File C:\WINDOWS\setupact.log
                                    Sun Apr 15 19:25:03 2007 => Scanning File C:\WINDOWS\setupapi.log
                                    Sun Apr 15 19:25:03 2007 => Scanning File C:\WINDOWS\setuperr.log [**]
                                    Sun Apr 15 19:25:03 2007 => Scanning File C:\WINDOWS\setuplog.txt
                                    Sun Apr 15 19:25:03 2007 => Scanning File C:\WINDOWS\spupdsvc.log
                                    Sun Apr 15 19:25:04 2007 => Scanning File C:\WINDOWS\SpywareDoctor5Install.log
                                    Sun Apr 15 19:25:04 2007 => Scanning File C:\WINDOWS\SpywareDoctor5Uninstall.log
                                    Sun Apr 15 19:25:04 2007 => Scanning File C:\WINDOWS\Sti_Trace.log [**]
                                    Sun Apr 15 19:25:04 2007 => Scanning File C:\WINDOWS\SynInst.log
                                    Sun Apr 15 19:25:04 2007 => Scanning File C:\WINDOWS\system.ini
                                    Sun Apr 15 19:25:04 2007 => Scanning File C:\WINDOWS\TASKMAN.EXE
                                    Sun Apr 15 19:25:04 2007 => Scanning File C:\WINDOWS\tmlpcert2007
                                    Sun Apr 15 19:25:04 2007 => Scanning File C:\WINDOWS\tsoc.log
                                    Sun Apr 15 19:25:04 2007 => Scanning File C:\WINDOWS\twain.dll
                                    Sun Apr 15 19:25:04 2007 => Scanning File C:\WINDOWS\twain_32.dll
                                    Sun Apr 15 19:25:04 2007 => Scanning File C:\WINDOWS\twunk_16.exe
                                    Sun Apr 15 19:25:04 2007 => Scanning File C:\WINDOWS\twunk_32.exe
                                    Sun Apr 15 19:25:04 2007 => Scanning File C:\WINDOWS\updspapi.log
                                    Sun Apr 15 19:25:04 2007 => Scanning File C:\WINDOWS\vb.ini
                                    Sun Apr 15 19:25:04 2007 => Scanning File C:\WINDOWS\vbaddin.ini
                                    Sun Apr 15 19:25:04 2007 => Scanning File C:\WINDOWS\Ventagli.bmp
                                    Sun Apr 15 19:25:04 2007 => Scanning File C:\WINDOWS\vmmreg32.dll
                                    Sun Apr 15 19:25:05 2007 => Scanning File C:\WINDOWS\wacam.ini
                                    Sun Apr 15 19:25:05 2007 => Scanning File C:\WINDOWS\Warranty.ico
                                    Sun Apr 15 19:25:05 2007 => Scanning File C:\WINDOWS\WgaNotify.log
                                    Sun Apr 15 19:25:05 2007 => Scanning File C:\WINDOWS\wiadebug.log
                                    Sun Apr 15 19:25:05 2007 => Scanning File C:\WINDOWS\wiaservc.log
                                    Sun Apr 15 19:25:05 2007 => Scanning File C:\WINDOWS\win.ini
                                    Sun Apr 15 19:25:05 2007 => Scanning File C:\WINDOWS\winamp.ini
                                    Sun Apr 15 19:25:05 2007 => Scanning File C:\WINDOWS\WindowsShell.Manifest
                                    Sun Apr 15 19:25:05 2007 => Scanning File C:\WINDOWS\WindowsUpdate.log
                                    Sun Apr 15 19:25:05 2007 => ERROR!!! ScanFile fails for C:\WINDOWS\WindowsUpdate.log
                                    Sun Apr 15 19:25:05 2007 => Scanning File C:\WINDOWS\winhelp.exe
                                    Sun Apr 15 19:25:05 2007 => Scanning File C:\WINDOWS\winhlp32.exe
                                    Sun Apr 15 19:25:05 2007 => Scanning File C:\WINDOWS\winnt.bmp
                                    Sun Apr 15 19:25:05 2007 => Scanning File C:\WINDOWS\winnt256.bmp
                                    Sun Apr 15 19:25:05 2007 => Scanning File C:\WINDOWS\WMFDist11.log
                                    Sun Apr 15 19:25:05 2007 => Scanning File C:\WINDOWS\WMFDist11Uninst.log
                                    Sun Apr 15 19:25:06 2007 => Scanning File C:\WINDOWS\wmp11.log
                                    Sun Apr 15 19:25:06 2007 => Scanning File C:\WINDOWS\wmp11Uninst.log
                                    Sun Apr 15 19:25:06 2007 => Scanning File C:\WINDOWS\wmprfITA.prx
                                    Sun Apr 15 19:25:06 2007 => Scanning File C:\WINDOWS\wmsetup.log
                                    Sun Apr 15 19:25:06 2007 => Scanning File C:\WINDOWS\wmsetup10.log
                                    Sun Apr 15 19:25:06 2007 => Scanning File C:\WINDOWS\WMSysPr9.prx
                                    Sun Apr 15 19:25:06 2007 => Scanning File C:\WINDOWS\Wudf01000Inst.log
                                    Sun Apr 15 19:25:06 2007 => Scanning File C:\WINDOWS\xpsp1hfm.log
                                    Sun Apr 15 19:25:06 2007 => Scanning File C:\WINDOWS\Zapotec.bmp
                                    Sun Apr 15 19:25:06 2007 => Scanning File C:\WINDOWS\_default.pif
                                    Sun Apr 15 19:25:06 2007 => Scanning C:\WINDOWS\system32 Directory
                                    Sun Apr 15 19:25:06 2007 => Scanning Folder: C:\WINDOWS\system32\*.*
                                    Sun Apr 15 19:25:06 2007 => Scanning File C:\WINDOWS\system32\$winnt$.inf
                                    Sun Apr 15 19:25:06 2007 => Scanning File C:\WINDOWS\system32\12520437.cpx
                                    Sun Apr 15 19:25:07 2007 => Scanning File C:\WINDOWS\system32\12520850.cpx
                                    Sun Apr 15 19:25:07 2007 => Scanning File C:\WINDOWS\system32\6to4svc.dll
                                    Sun Apr 15 19:25:07 2007 => Scanning File C:\WINDOWS\system32\810429tv3-test.jun
                                    Sun Apr 15 19:25:07 2007 => Scanning File C:\WINDOWS\system32\aaaamon.dll
                                    Sun Apr 15 19:25:07 2007 => Scanning File C:\WINDOWS\system32\access.cpl
                                    Sun Apr 15 19:25:07 2007 => Scanning File C:\WINDOWS\system32\acctres.dll
                                    Sun Apr 15 19:25:07 2007 => Scanning File C:\WINDOWS\system32\accwiz.exe
                                    Sun Apr 15 19:25:07 2007 => Scanning File C:\WINDOWS\system32\acelpdec.ax
                                    Sun Apr 15 19:25:07 2007 => Scanning File C:\WINDOWS\system32\acledit.dll
                                    Sun Apr 15 19:25:07 2007 => Scanning File C:\WINDOWS\system32\aclui.dll
                                    Sun Apr 15 19:25:07 2007 => Scanning File C:\WINDOWS\system32\activeds.dll
                                    Sun Apr 15 19:25:07 2007 => Scanning File C:\WINDOWS\system32\activeds.tlb
                                    Sun Apr 15 19:25:07 2007 => Scanning File C:\WINDOWS\system32\ActiveSkin.ocx
                                    Sun Apr 15 19:25:08 2007 => Scanning File C:\WINDOWS\system32\actmovie.exe
                                    Sun Apr 15 19:25:08 2007 => Scanning File C:\WINDOWS\system32\actskn45.ocx
                                    Sun Apr 15 19:25:08 2007 => Scanning File C:\WINDOWS\system32\actxprxy.dll
                                    Sun Apr 15 19:25:08 2007 => Scanning File C:\WINDOWS\system32\admparse.dll
                                    Sun Apr 15 19:25:08 2007 => Scanning File C:\WINDOWS\system32\adptif.dll
                                    Sun Apr 15 19:25:08 2007 => Scanning File C:\WINDOWS\system32\adsldp.dll
                                    Sun Apr 15 19:25:08 2007 => Scanning File C:\WINDOWS\system32\adsldpc.dll
                                    Sun Apr 15 19:25:08 2007 => Scanning File C:\WINDOWS\system32\adsmsext.dll
                                    Sun Apr 15 19:25:09 2007 => Scanning File C:\WINDOWS\system32\adsnt.dll
                                    Sun Apr 15 19:25:09 2007 => Scanning File C:\WINDOWS\system32\advapi32.dll
                                    Sun Apr 15 19:25:09 2007 => Scanning File C:\WINDOWS\system32\advpack.dll
                                    Sun Apr 15 19:25:09 2007 => Scanning File C:\WINDOWS\system32\ahui.exe
                                    Sun Apr 15 19:25:09 2007 => Scanning File C:\WINDOWS\system32\alg.exe
                                    Sun Apr 15 19:25:09 2007 => Scanning File C:\WINDOWS\system32\alrsvc.dll
                                    Sun Apr 15 19:25:09 2007 => Scanning File C:\WINDOWS\system32\amcompat.tlb
                                    Sun Apr 15 19:25:09 2007 => Scanning File C:\WINDOWS\system32\amstream.dll
                                    Sun Apr 15 19:25:09 2007 => Scanning File C:\WINDOWS\system32\ansi.sys
                                    Sun Apr 15 19:25:09 2007 => Scanning File C:\WINDOWS\system32\apcups.dll
                                    Sun Apr 15 19:25:09 2007 => Scanning File C:\WINDOWS\system32\append.exe
                                    Sun Apr 15 19:25:09 2007 => Scanning File C:\WINDOWS\system32\apphelp.dll
                                    Sun Apr 15 19:25:09 2007 => Scanning File C:\WINDOWS\system32\appwiz.cpl
                                    Sun Apr 15 19:25:10 2007 => Scanning File C:\WINDOWS\system32\arp.exe
                                    Sun Apr 15 19:25:10 2007 => Scanning File C:\WINDOWS\system32\AS-IFce1.ocx
                                    Sun Apr 15 19:25:10 2007 => Scanning File C:\WINDOWS\system32\asctrls.ocx
                                    Sun Apr 15 19:25:10 2007 => Scanning File C:\WINDOWS\system32\asferror.dll
                                    Sun Apr 15 19:25:10 2007 => Scanning File C:\WINDOWS\system32\asycfilt.dll
                                    Sun Apr 15 19:25:10 2007 => Scanning File C:\WINDOWS\system32\at.exe
                                    Sun Apr 15 19:25:10 2007 => Scanning File C:\WINDOWS\system32\ati2cqag.dll
                                    Sun Apr 15 19:25:10 2007 => Scanning File C:\WINDOWS\system32\ati2dvag.dll
                                    Sun Apr 15 19:25:11 2007 => Scanning File C:\WINDOWS\system32\ati2edxx.dll
                                    Sun Apr 15 19:25:11 2007 => Scanning File C:\WINDOWS\system32\ati2evxx.dll
                                    Sun Apr 15 19:25:11 2007 => Scanning File C:\WINDOWS\system32\ati2evxx.exe
                                    Sun Apr 15 19:25:11 2007 => Scanning File C:\WINDOWS\system32\Ati2mdxx.exe
                                    Sun Apr 15 19:25:11 2007 => Scanning File C:\WINDOWS\system32\ati3duag.dll
                                    Sun Apr 15 19:25:11 2007 => Scanning File C:\WINDOWS\system32\ATIDEMGR.dll
                                    Sun Apr 15 19:25:11 2007 => Scanning File C:\WINDOWS\system32\atifglpf.xml
                                    Sun Apr 15 19:25:11 2007 => Scanning File C:\WINDOWS\system32\atiicdxx.dat
                                    Sun Apr 15 19:25:11 2007 => Scanning File C:\WINDOWS\system32\atiiiexx.dll
                                    Sun Apr 15 19:25:11 2007 => Scanning File C:\WINDOWS\system32\atikvmag.dll
                                    Sun Apr 15 19:25:11 2007 => *** File C:\WINDOWS\system32\atioglx1.dll having Size Restriction ***
                                    Sun Apr 15 19:25:11 2007 => Scanning File C:\WINDOWS\system32\atioglx1.dll [**]
                                    Sun Apr 15 19:25:11 2007 => Scanning File C:\WINDOWS\system32\atioglxx.dll
                                    Sun Apr 15 19:25:12 2007 => Scanning File C:\WINDOWS\system32\atitvo32.dll
                                    Sun Apr 15 19:25:12 2007 => Scanning File C:\WINDOWS\system32\ativvaxx.dll
                                    Sun Apr 15 19:25:12 2007 => Scanning File C:\WINDOWS\system32\atkctrs.dll
                                    Sun Apr 15 19:25:12 2007 => Scanning File C:\WINDOWS\system32\atl.dll
                                    Sun Apr 15 19:25:12 2007 => Scanning File C:\WINDOWS\system32\atl71.
                                    • 1
                                    • 2

                                    Discussions similaires

                                    Aide pour un virus
                                    cerise92700

                                    41 réponses
                                    Trojan impossible à supprimer!
                                    Gridouu

                                    12 réponses
                                    Comment supprimer le virus Trojan
                                    vitsou

                                    18 réponses
                                    Cheval de Troie- e.tre456.worm.windows
                                    Ninou037

                                    13 réponses
                                    trojan-spy.win32@mx
                                    caramel79

                                    3 réponses