PC infecté par plusieurs trojans

[rlgrand]

OUi, c'est tout à fait normal que cela prenne un temps assez long.
L'outil scanne tous les fichiers de ton ordi.

Sois prudent tant que tu ne seras pas sur que ton PC n'est pas complètement propre.
Il est préférable de uniquement te connecter pour continuer la désinfection de ton PC.

1) As-tu installé Antivir et Comodo ?
Si non, fais le.

Puis, mets à jour Antivir et lance un scan complet :
Pour cela, clique sur l'onglet Local Protection puis Scanner
Choisis les éléments à scanner ( local hard disks ).
Lance le scan. Lorsque le scan est terminé, tu as la possibilité de générer un rapport en cliquant sur le bouton report.
Poste le rapport.

2) Poste un nouveau rapport Hijackthis.

A+

[adrian07]

Salut,
est ce que je dois faire le scan en mode sans échec?

[rlgrand]

Oui, c'est préférable si la machine est encore infectée.

A+

[adrian07]

Salut,
Voici le rapport Antivir:

Avira AntiVir Personal
Report file date: mardi 11 novembre 2008 16:42

Scanning for 1024586 virus strains and unwanted programs.

Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Boot mode: Save mode
Username: WINXPPRO
Computer name: WINXP

Version information:
BUILD.DAT : 8.2.0.336 16933 Bytes 30/10/2008 11:40:00
AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/06/2008 09:57:53
AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/05/2008 08:56:40
LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 13:44:19
LUKERES.DLL : 8.1.4.0 12033 Bytes 26/05/2008 08:58:52
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 23:20:53
ANTIVIR1.VDF : 7.1.0.56 411136 Bytes 09/11/2008 12:10:23
ANTIVIR2.VDF : 7.1.0.57 2048 Bytes 09/11/2008 12:10:24
ANTIVIR3.VDF : 7.1.0.65 52736 Bytes 10/11/2008 18:48:38
Engineversion : 8.2.0.29
AEVDF.DLL : 8.1.0.6 102772 Bytes 14/10/2008 11:05:56
AESCRIPT.DLL : 8.1.1.13 332156 Bytes 07/11/2008 23:21:40
AESCN.DLL : 8.1.1.5 123251 Bytes 07/11/2008 23:21:37
AERDL.DLL : 8.1.1.3 438645 Bytes 07/11/2008 23:21:36
AEPACK.DLL : 8.1.3.3 393591 Bytes 07/11/2008 23:21:31
AEOFFICE.DLL : 8.1.0.30 196986 Bytes 07/11/2008 23:21:26
AEHEUR.DLL : 8.1.0.71 1487222 Bytes 07/11/2008 23:21:24
AEHELP.DLL : 8.1.1.3 119157 Bytes 07/11/2008 23:21:12
AEGEN.DLL : 8.1.1.0 319859 Bytes 07/11/2008 23:21:10
AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 11:05:56
AECORE.DLL : 8.1.4.1 172405 Bytes 07/11/2008 23:21:06
AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 11:05:56
AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 09:40:05
AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 10:28:01
AVREP.DLL : 8.0.0.2 98344 Bytes 07/11/2008 23:21:04
AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 12:26:40
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 09:29:23
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 13:27:49
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 18:28:02
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 13:49:40
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 13:05:10
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12/06/2008 14:48:07
RCTEXT.DLL : 8.0.52.0 86273 Bytes 27/06/2008 14:34:37

Configuration settings for the scan:
Jobname..........................: Local Hard Disks
Configuration file...............: d:\program files\avira\antivir personaledition classic\alldiscs.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: on
Scan boot sector.................: on
Boot sectors.....................: C:, D:, G:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: mardi 11 novembre 2008 16:42

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
11 processes with 11 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!
Boot sector 'G:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '49' files ).


Starting the file scan:

Begin scan in 'C:\' <WIN2000 >
C:\Documents and Settings\Administrateur\Local Settings\Temp\_AS49.tmp\motor.cab
[0] Archive type: CAB (Microsoft)
--> asmdat.DLL
[WARNING] No further files can be extracted from this archive. The archive will be closed
C:\Program Files\DAP\Offers\GoogleToolbarInstaller_SPDA_fr_signed.exe
[WARNING] The file could not be opened!
C:\Program Files\DAP\Offers\spo20.1_4_2007.exe
[WARNING] The file could not be opened!
C:\Program Files\DAP\Offers\VA_11_DAPSO.1187_1.exe
[WARNING] The file could not be opened!
C:\Program Files\DAP\Updates\Condition.dll
[WARNING] The file could not be opened!
Begin scan in 'D:\' <WINXP>
D:\pagefile.sys
[WARNING] The file could not be opened!
D:\Documents and Settings\WINXPPRO\Bureau\CHIHEB\De Marwen\CD\Hexabyte (E)\fscommand\SETUPW95.CAB
[0] Archive type: CAB (Microsoft)
--> Setup.lst
[WARNING] No further files can be extracted from this archive. The archive will be closed
D:\Documents and Settings\WINXPPRO\Bureau\CHIHEB\De Marwen\CD\Hexabyte (E)\fscommand\WAB.CAB
[0] Archive type: CAB (Microsoft)
--> wab.chm
[WARNING] No further files can be extracted from this archive. The archive will be closed
D:\Documents and Settings\WINXPPRO\Bureau\CHIHEB\De Marwen\CD\Hexabyte (E)\fscommand\fscommand\SETUPW95.CAB
[0] Archive type: CAB (Microsoft)
--> Setup.lst
[WARNING] No further files can be extracted from this archive. The archive will be closed
D:\Documents and Settings\WINXPPRO\Bureau\CHIHEB\De Marwen\CD\Hexabyte (E)\fscommand\fscommand\WAB.CAB
[0] Archive type: CAB (Microsoft)
--> wab.chm
[WARNING] No further files can be extracted from this archive. The archive will be closed
D:\Documents and Settings\WINXPPRO\Bureau\CHIHEB\parnasse15\gsm\Applications\Application\1\Scalado[1][1][1].PhotoTwister.v1.0.S60.SymbianOS8.incl.Keygen-HSpda\Scalado.PhotoTwister.v1.0.S60.SymbianOS8.incl.Keygen-HSpda\hs-ps220.zip
[0] Archive type: ZIP
--> hs-ps220.rar
[1] Archive type: RAR
--> keygen.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE] The file was deleted!
D:\Documents and Settings\WINXPPRO\Bureau\CHIHEB\WinRAR\Winrar V3.70 FR Final\WinRAR_keygen.exe
[DETECTION] Contains recognition pattern of the W32/Virut.V Windows virus
[NOTE] The file was deleted!
D:\Documents and Settings\WINXPPRO\Bureau\CHIHEB\Winrar V3.70 FR Final\WinRAR_keygen.exe
[DETECTION] Contains recognition pattern of the W32/Virut.V Windows virus
[NOTE] The file was deleted!
D:\Documents and Settings\WINXPPRO\Bureau\miii\Java In A Nutshell, 5th Edition.rar
[0] Archive type: RAR
--> Java In A Nutshell, 5th Edition\Java In A Nutshell, 5th Edition.chm
[1] Archive type: CHM
--> /0596007736/ch14-77531.html
[DETECTION] Contains recognition pattern of the HTML/Dldr.Agent.WS HTML script virus
[NOTE] The file was deleted!
D:\Documents and Settings\WINXPPRO\Bureau\Nouveau dossier\FORMATAGE\Nouveau dossier\COURS\SAMI\cd ASP.NET\ie60sp1(1).exe
[0] Archive type: ZIP SFX (self extracting)
--> IE60SP1/IEMIL_4.CAB
[1] Archive type: CAB (Microsoft)
--> WLDAP32.DLL
[WARNING] No further files can be extracted from this archive. The archive will be closed
D:\Documents and Settings\WINXPPRO\Bureau\Nouveau dossier\FORMATAGE\Nouveau dossier\COURS\SAMI\cd ASP.NET\IE60SP1\axa.cab
[0] Archive type: CAB (Microsoft)
--> axaie4.inf
[WARNING] No further files can be extracted from this archive. The archive will be closed
D:\Documents and Settings\WINXPPRO\Bureau\Nouveau dossier\FORMATAGE\Nouveau dossier\COURS\SAMI\cd ASP.NET\IE60SP1\IEMIL_4.CAB
[0] Archive type: CAB (Microsoft)
--> WLDAP32.DLL
[WARNING] No further files can be extracted from this archive. The archive will be closed
D:\Documents and Settings\WINXPPRO\Bureau\Nouveau dossier\FORMATAGE\RAK\Asp docs\www.w3schools.com\ASP\met_getspecialfolder.asp
[DETECTION] Contains HEUR/HTML.Malware suspicious code
[NOTE] The detection was classified as suspicious.
[NOTE] The file was moved to '498df470.qua'!
D:\Documents and Settings\WINXPPRO\Bureau\R\SmitfraudFix\exit.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Documents and Settings\WINXPPRO\Bureau\R\SmitfraudFix\Policies.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Documents and Settings\WINXPPRO\Bureau\virus\SmitfraudFix\exit.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Documents and Settings\WINXPPRO\Mes documents\Mes images\besm33wm9.gif
[DETECTION] Is the TR/Click.HTML.IFrame.TB.4 Trojan
[NOTE] The file was deleted!
D:\Program Files\Game Accelerator\gamexl.exe
[DETECTION] Contains code of the W32/Virut.Gen Windows virus
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\afm2afm.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\amstex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\arctrl.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\authorindex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\autoinst.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\bdftops.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\bg5+latex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\bg5+pdflatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\bg5latex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\bg5pdflatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\bg5platex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\bg5ppdflatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\bib2xhtml.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\bibhtml.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\birm.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\bplain.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\cef5latex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\cef5pdflatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\ceflatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\cefpdflatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\cefslatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\cefspdflatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\cjklatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\cmap2enc.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\config.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\cont-de.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\cont-en.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\cont-nl.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\cont-uk.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\cslatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\csplain.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\ctxtools.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\dbcontext.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\dblatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\dbmcontext.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was moved to '4987080a.qua'!
D:\Program Files\MiKTeX 2.5\miktex\bin\dbmex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\dbmlatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\dbmmex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\dbmtex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\dbmtexi.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\dbtex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\dbtexi.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\dumphint.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\eps2eps.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was moved to '498d082c.qua'!
D:\Program Files\MiKTeX 2.5\miktex\bin\escontext.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\eslatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\esmex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\estex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\estexi.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\etex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\exatools.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\findtexmf.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\fixmswrd.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\font2afm.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\font2c.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\gbklatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\gbkpdflatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!

[adrian07]

Suite du rapport Antivir:

D:\Program Files\MiKTeX 2.5\miktex\bin\gftodvi.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\gftopk.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\gftype.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\gsbj.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\gsdj.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\gsdj500.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\gslj.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\gslp.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\gsnd.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\gsndt.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\gssetgs.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\gst.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\gstt.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\ht.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\htcontext.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\htlatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\htmex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\httex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\httexi.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\ibyhyph.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\inimf.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\initex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\jadetex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\jh1context.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\jh1latex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\jh1mex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\jh1tex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\jh1texi.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\jhcontext.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\jhlatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\jhmex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\jhtex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\jhtexi.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\jscontext.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\jslatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\jsmex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\jstex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\jstexi.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\kpsewhich.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\latex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\latexdiff-so.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\latexdiff-vc.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\latexdiff.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\latexmk.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\latexrevise.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\lp386.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\lp386r2.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\lpgs.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\lpr2.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\makebase.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\makefmt.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\makemem.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\makemf.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\makempy.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\makepk.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\maketfm.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\merge.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\mex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\mf.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\mft.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\mkfntmap.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\mllatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\mltex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\mm.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\mpstools.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\mptopdf.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\mthelp.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\mzcontext.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\mzlatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\mzmex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\mztex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\mztexi.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\nts.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\oocontext.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\oolatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\oomex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\ootex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\ootexi.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\orderrefs.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\ot2kpx.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pdf2dsc.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pdf2ps.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pdfatfi.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pdfclose.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pdfcrop.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pdfdde.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pdfetex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pdfjadetex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pdflatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pdfmex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pdfopen.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pdfopt.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pdfplatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pdftex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pdftools.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pdftrimwhite.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pdfxmltex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\perltex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pf2afm.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pfbtopfa.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pfm2kpx.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pftogsf.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\platex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\plind.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\pn2pdf.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\ps2ascii.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\ps2epsi.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\ps2pdf.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\ps2pdf12.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\ps2pdf13.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\ps2pdf14.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\ps2pdfxx.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\ps2ps.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\ps2ps2.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\ps2write.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\ps4pdf.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\rcsinfo.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\rlxtools.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\runbat.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\runperl2.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\runtools.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\showglyphs.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\sjislatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\sjispdflatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\teicontext.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\teilatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\teimcontext.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\teimex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\teimlatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\teimmex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\teimtex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\teimtexi.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\teitex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\teitexi.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\tex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\texdoc.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\texexec.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\texfind.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\texfont.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\texify.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\texshow.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\textools.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\texutil.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\thumbpdf.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\tmftools.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\updmap.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\urlbst.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\uxhcontext.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\uxhlatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\uxhmex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\uxhtex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\uxhtexi.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\vftovp.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\virmf.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\virtex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\vptovf.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\wcontext.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\wlatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\wmakebat.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\wmex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\wrfiles.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\wtex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\wtexi.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\xhcontext.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\xhlatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\xhmcontext.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\xhmex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\xhmlatex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\xhmmex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\xhmtex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\xhmtexi.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\xhtex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\xhtexi.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\xmltex.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MiKTeX 2.5\miktex\bin\xmltools.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\MP3 Player Utilities 3.57\RDiskUpdate\DelDrv.exe
[DETECTION] Is the TR/Crypt.FKM.Gen Trojan
[NOTE] The file was deleted!
D:\Program Files\Shareaza\Remote\commonFooter.htm
[DETECTION] Contains recognition pattern of the HTML/Infected.WebPage.Gen HTML script virus
[NOTE] The file was deleted!
D:\Program Files\Symantec AntiVirus\lsb.exe
[DETECTION] Contains HEUR/Crypted suspicious code
[NOTE] The file was deleted!
D:\SDFix\apps\RestartIt!.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
D:\WINDOWS\system32\accessj.dll
[DETECTION] Is the TR/Vundo.Gen Trojan
[NOTE] The file was deleted!
D:\WINDOWS\system32\tmp2A.tmp
[DETECTION] Is the TR/Agent.269035 Trojan
[NOTE] The file was deleted!
D:\_OTMoveIt\MovedFiles\11072008_194955\WINDOWS\system32\acelpdeco.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was deleted!
Begin scan in 'G:\' <Oiseau>
G:\BD\Clone DVD\CloneDVD 2.9.0.9 Keygen.exe
[DETECTION] Contains recognition pattern of the W32/Virut.V Windows virus
[NOTE] The file was deleted!
G:\Samsung E250 Java Game Pack + install\Samsung E250 Game pack\Softick.PPP.v2.21\SoftickPPP221.exe
[DETECTION] Is the TR/Gendal.816509 Trojan
[NOTE] The file was deleted!
G:\System Volume Information\_restore{6796CE20-DD20-4444-9717-E4CA18D353C0}\RP3\A0004182.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE] The file was deleted!
G:\System Volume Information\_restore{6796CE20-DD20-4444-9717-E4CA18D353C0}\RP5\A0005873.exe
[0] Archive type: RSRC
--> Object
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE] The file was deleted!
G:\System Volume Information\_restore{6796CE20-DD20-4444-9717-E4CA18D353C0}\RP5\A0005878.exe
[0] Archive type: RSRC
--> Object
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE] The file was deleted!
G:\System Volume Information\_restore{6796CE20-DD20-4444-9717-E4CA18D353C0}\RP5\A0006483.exe
[DETECTION] Contains recognition pattern of the W32/Virut.V Windows virus
[NOTE] The file was deleted!
G:\System Volume Information\_restore{6796CE20-DD20-4444-9717-E4CA18D353C0}\RP5\A0006484.exe
[DETECTION] Is the TR/Gendal.816509 Trojan
[NOTE] The file was deleted!


End of the scan: mercredi 12 novembre 2008 00:49
Used time: 8:06:47 Hour(s)

The scan has been done completely.

56028 Scanning directories
3274670 Files were scanned
254 viruses and/or unwanted programs were found
2 Files were classified as suspicious:
253 files were deleted
0 files were repaired
3 files were moved to quarantine
0 files were renamed
5 Files cannot be scanned
3274409 Files not concerned
25013 Archives were scanned
13 Warnings
256 Notes

[adrian07]

Finalement, voici le rapport HiJackThis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:06:09, on 12/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
D:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
D:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\MsPMSPSv.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\COMODO\SafeSurf\cssurf.exe
D:\Program Files\COMODO\COMODO Internet Security\cfp.exe
D:\WINDOWS\system32\wscntfy.exe
D:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\Documents and Settings\WINXPPRO\Bureau\DVP.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,
O2 - BHO: IDM Helper - {0055c089-8582-441b-a0bf-17b458c2a3a8} - D:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - D:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - D:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - D:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: P2P Energy Toolbar - {2bae58c2-79f9-45d1-a286-81f911301c3a} - D:\Program Files\P2P_Energy\tbP2P_.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - D:\Program Files\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [COMODO SafeSurf] "D:\Program Files\COMODO\SafeSurf\cssurf.exe" -s
O4 - HKLM\..\Run: [COMODO Internet Security] "D:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [avgnt] "D:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [IDMan] D:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O8 - Extra context menu item: &Clean Traces - D:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - D:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: &Windows Live Search - res://D:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: Download &all with DAP - D:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Edit with &XML Spy - D:\Program Files\Altova\XMLSPY2004\spy.htm
O8 - Extra context menu item: ImTranslator - D:\PROGRA~1\SMARTL~1\IMTRAN~1\startup.html
O8 - Extra context menu item: Liens de téléchargement avec Mega Manager... - D:\Program Files\Megaupload\Mega Manager\mm_file.htm
O8 - Extra context menu item: télécharger avec idm - D:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: télécharger le contenu de video flv avec idm - D:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: télécharger tous les liens avec idm - D:\Program Files\Internet Download Manager\IEGetAll.htm
O9 - Extra button: SmartShopper - Compare product prices - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEBF} - D:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: SmartShopper - Compare travel rates - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - D:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - D:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} (DjVuCtl Class) - http://www.lizardtech.com/download/f...trol_fr_FR.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary...n.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/.../GAME_UNO1.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary...o.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab56907.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab57176.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{D676DC5C-B21D-41F5-AACD-6EF810A645E7}: NameServer = 193.95.66.10
O20 - AppInit_DLLs: D:\WINDOWS\system32\guard32.dll D:\WINDOWS\system32\cssdll32.dll
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - D:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - D:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Kaspersky Anti-Virus 6.0 AVPPolicyAgent (AVPPolicyAgent) - Unknown owner - .exe (file missing)
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - D:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Google Updater Service (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: MATLAB Server (matlabserver) - Unknown owner - G:\MATLAB701\webserver\bin\win32\matlabserver.exe
O23 - Service: MBAMService - Malwarebytes Corporation - D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Machine Debug Manager MDMThemes (MDMThemes) - Unknown owner - .exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe
O23 - Service: OracleHomeFormsClientCache80 - Unknown owner - D:\ORFORMS\BIN\ONRSD80.EXE
O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - D:\WINDOWS\system32\sfrem01.exe
O23 - Service: Détection matériel noyau ShellHWDetectionProtectedStorage (ShellHWDetectionProtectedStorage) - Unknown owner - .exe (file missing)
O23 - Service: WebClient WebClientOracleServiceORCL (WebClientOracleServiceORCL) - Unknown owner - .exe (file missing)

--
End of file - 8520 bytes

[rlgrand]

Tu relances Dr Web CureIT.

Cette fois-ci, tu fais une analyse complète ( après l'analyse rapide qui se fait automatiquement )
Par précaution, mets en quarantaine les éléments qu'il aura détecté.
Enregistre ensuite le rapport.

Salut.

[wemblais]

Bonjour à tous, je viens de faire un scan de mon pc, et je découvre 2 trojans nommés tr/gendal 658896, cependant quand je le recherche sur google, il ny a aucune réponse et personne ne parle de ce trojan.
Quelqu'un d'entre vous le connait-il? Si oui, comment s'en débarasser?
Merci d'avance de vos réponses.

[rlgrand]

Bonjour, wemblais

Ouvre une autre discussion pour poser ta question et dis-nous alors :
- Avec quel antivirus as-tu fait le scan ?
- Les as-tu mis en quarantaine, supprimé ?

Poste également un rapport Hijackthis.
( option Do a system scan and save a logfile )

Salut.