This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

HiJack This Log

59 min read

This thread's last reply is from April 2, 2008, 5:30 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

furrowed
March 25, 2008, 2:19 PM UTC last edited March 30, 2008, 9:29 AM UTC (Added HijackThis log into the post. Please post all logs directly into the thread. Do not make them as attachments unless your helpfer specifically asks you to do so.)
Hello,
I'm having quite a bit of trouble removing some sort of virus.
Neither Spybot, Symatec, or BitDefender has worked.

This particular malware keeps trying to popup ads through IE.

Here is my HiJack this log.

Any help would be much appreciated! Thanks!


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:18:25 AM, on 25/03/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Symantec AntiVirus\VPTray.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Launchy\Launchy.exe
C:\Program Files\KatMouse\KatMouse.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\System32\rundll32.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Windows\system32\UI0Detect.exe
C:\Program Files\Symantec AntiVirus\SavUI.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7A5565EF-A594-46E4-AF56-FE71AEAFD7D5} - (no file)
O2 - BHO: {618b6c6a-e9e3-4cfb-e994-e155c04629ea} - {ae92640c-551e-499e-bfc4-3e9ea6c6b816} - (no file)
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe (User 'Default user')
O4 - Startup: KatMouse.lnk = C:\Program Files\KatMouse\KatMouse.exe
O4 - Startup: WimpWall.lnk = C:\Program Files\Wimpwall\WimpWall.exe
O4 - Global Startup: Launchy.lnk = C:\Program Files\Launchy\Launchy.exe
O4 - Global Startup: Nokia Nseries PC Suite.lnk = C:\Program Files\Nokia\NNPCS\RunLauncher.exe
O8 - Extra context menu item: &Download Directly to iTunes - res://C:\Program Files\itunes\Tunestor\Tunestor.dll/GoRSDN.dll.htm
O8 - Extra context menu item: &Tunestory.com Hit List - res://C:\Program Files\itunes\Tunestor\Tunestor.dll/Tunestory.dll.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: tunestory.com - {D104757D-9536-4a1b-9FA8-4DD5B44AC981} - http://www.tunestor.com/redirect.php (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = campus.mcgill.ca
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = campus.mcgill.ca
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = campus.mcgill.ca
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Avast4\ashMaiSv.exe (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Avast4\ashWebSv.exe (file missing)
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - SOFTWIN S.R.L. - C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Window Net Dns (MyDNS) - Unknown owner - C:\Program Files\Outlook Express\svchost.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: PDExchange - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDExchange.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) - Syntek America Inc. - C:\Windows\System32\StkCSrv.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Program Files\Softwin\BitDefender10\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - SOFTWIN S.R.L - C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe

--
End of file - 9338 bytes

Attachments:

chryssi2001
April 1, 2008, 7:19 AM UTC
Hello furrowed :) ,

I apologise for the delay.

I will be assisting you with your malware issues.
  • Whatever repairs we make, are for fixing your computer problems only and by no means should be used on another computer.
  • Continue to respond to this thread until I give you the All Clean! If you have any question or you're stuck in there please reply it to me. I will try my best to help you!
  • Please bookmark or favourite this page. In case you need it as reference or etc.

IMPORTANT NOTE:
If you are using Windows Vista you must right click on the desktop icon and choose Run as Administrator all tools.
----------------------------------------------
Remove two of your Anti Virus programs.
You are operating your computer with multiple Anti Virus programs running in memory at once:

Symantec
BitDefender
Avast


Anti-virus programs take up an enormous amount of your computer's resources when they are actively scanning your computer. Having two or three anti-virus programs running at the same time can cause your computer to run very slow, become unstable and even, in rare cases, crash.

Please remove/uninstall two of them.
----------------------------------------------
Upload a File to Jotti
Please visit http://virusscan.jotti.org/

Copy/paste this file and path into the white box at the top:
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe

Press Submit - this will submit the file for testing.
Please wait for all the scanners to finish then copy and paste the results in your next response.

Do the same for this file too:
C:\Program Files\Wimpwall\WimpWall.exe
----------------------------------------------
Post back:
Jotti results
A new HijackThis log.
furrowed
April 1, 2008, 12:54 PM UTC
Hi, thanks for the help.

the results for NokiaMserver.exe:

Scan taken on 01 Apr 2008 12:51:46 (GMT)
A-Squared
Found nothing
AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
CPsecure
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found nothing
Fortinet
Found nothing
Ikarus
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
Panda Antivirus
Found nothing
Rising Antivirus
Found nothing
Sophos Antivirus
Found nothing
VirusBuster
Found nothing
VBA32
Found nothing

Results for wimpwall
furrowed
April 1, 2008, 12:56 PM UTC
Results for Wimpwall

Scan taken on 01 Apr 2008 12:54:43 (GMT)
A-Squared
Found nothing
AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found nothing
CPsecure
Found nothing
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found nothing
Fortinet
Found nothing
Ikarus
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found nothing
Norman Virus Control
Found nothing
Panda Antivirus
Found nothing
Rising Antivirus
Found nothing
Sophos Antivirus
Found nothing
VirusBuster
Found nothing
VBA32
Found nothing
furrowed
April 1, 2008, 12:59 PM UTC
I have since taken off all 3 of my antivirus programs and installed kaspersky. It seemed to have detected something Trojan with the svchost(?) in my outlook express folder (I don't use outlook).

Kaspersky did some cryptic thing with it; and hasn't notified me of any problems since... is there a way by which I can zero in on the folder and verify that everything is ok?

Thanks again!
chryssi2001
April 1, 2008, 2:06 PM UTC
Hi, thanks for the Jotti results.

installed kaspersky. It seemed to have detected something Trojan with the svchost(?) in my outlook express folder

I agree with Kaspersky :P

If still there we are going to remove it. ;)

Post back:
Jotti results
A new HijackThis log.


As i previously posted can i have a new HijackThis log? It seems you missed posting it.
Please post it normal and not as attachment.
furrowed
April 1, 2008, 2:20 PM UTC
sorry--missed that bit of the instructions.
here it is--thanks.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:19:47 AM, on 01/04/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files\Kaspersky Internet Security 7.0\avp.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Launchy\Launchy.exe
C:\Program Files\KatMouse\KatMouse.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\taskeng.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7A5565EF-A594-46E4-AF56-FE71AEAFD7D5} - (no file)
O2 - BHO: {618b6c6a-e9e3-4cfb-e994-e155c04629ea} - {ae92640c-551e-499e-bfc4-3e9ea6c6b816} - (no file)
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe (User 'Default user')
O4 - Startup: KatMouse.lnk = C:\Program Files\KatMouse\KatMouse.exe
O4 - Startup: WimpWall.lnk = C:\Program Files\Wimpwall\WimpWall.exe
O4 - Global Startup: Launchy.lnk = C:\Program Files\Launchy\Launchy.exe
O4 - Global Startup: Nokia Nseries PC Suite.lnk = C:\Program Files\Nokia\NNPCS\RunLauncher.exe
O8 - Extra context menu item: &Download Directly to iTunes - res://C:\Program Files\itunes\Tunestor\Tunestor.dll/GoRSDN.dll.htm
O8 - Extra context menu item: &Tunestory.com Hit List - res://C:\Program Files\itunes\Tunestor\Tunestor.dll/Tunestory.dll.htm
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: tunestory.com - {D104757D-9536-4a1b-9FA8-4DD5B44AC981} - http://www.tunestor.com/redirect.php (file missing)
O13 - Gopher Prefix:
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = campus.mcgill.ca
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = campus.mcgill.ca
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = campus.mcgill.ca
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1.0\r3hook.dll,C:\PROGRA~1\KASPER~1.0\adialhk.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Avast4\ashMaiSv.exe (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Avast4\ashWebSv.exe (file missing)
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: PDExchange - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDExchange.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) - Syntek America Inc. - C:\Windows\System32\StkCSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

--
End of file - 7533 bytes
furrowed
April 1, 2008, 3:05 PM UTC
PS, this is Kaspersky's log:

deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Windows\Temp\47EF9651.qef
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Windows\Temp\47EF9654.qef
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Windows\Temp\47EF9652.qef
deleted: Trojan program Trojan.Win32.Delf.bhp File: c:\program files\outlook express\svchost.exe
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Windows\Temp\47EF98FD.qef
deleted: Trojan program Trojan.Win32.Delf.bhp Running module: C:\Program Files\Outlook Express\svchost.exe
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Windows\Temp\47EF9B92.qef
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\03D40000.VBN//CryptZ
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\03D40001.VBN//CryptZ
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\03D40003.VBN//CryptZ
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0000.VBN//CryptZ
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0001.VBN//CryptZ
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0002.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0003.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0004.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0005.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0006.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0007.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0008.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0009.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C000A.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C000B.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C000C.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C000D.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C000E.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C000F.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0010.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0011.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0012.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0013.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0014.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0015.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0016.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0017.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0018.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0019.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C001A.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C001B.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C001C.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C001D.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C001E.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C001F.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0020.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0021.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0022.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0023.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0024.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0025.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0026.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0027.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0028.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0029.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C002A.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C002B.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C002C.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C002D.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C002E.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C002F.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0030.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0031.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0032.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0033.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0034.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0035.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0036.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0037.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0038.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0039.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C003A.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C003B.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C003C.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C003D.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C003E.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C003F.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0040.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0041.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0042.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0043.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0044.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0045.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0046.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0047.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0048.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0049.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C004A.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C004B.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C004C.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C004D.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C004E.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C004F.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0050.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0051.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0052.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0053.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0054.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0055.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0056.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0057.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0058.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C0059.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C005A.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C005B.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C005C.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C005D.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C005E.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\093C005F.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0BC40000.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C1C0000.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C1C0001.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600000.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600001.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600002.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600003.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600004.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600005.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600006.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600007.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600008.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600009.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60000A.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60000B.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60000C.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60000D.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60000E.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60000F.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600010.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600011.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600012.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600013.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600014.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600015.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600016.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600017.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600018.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600019.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60001A.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60001B.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60001C.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60001D.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60001E.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60001F.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600020.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600021.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600022.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600023.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600024.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600025.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600026.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600027.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600028.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600029.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60002A.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60002B.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60002C.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60002D.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60002E.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60002F.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600030.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600031.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600032.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600033.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600034.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600035.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600036.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600037.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600038.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600039.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60003A.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60003B.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60003C.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60003D.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60003E.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60003F.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600040.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600041.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C600042.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C60006A.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0C6000B5.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0D4C0002.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0D4C0035.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0D5C0014.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0D5C0054.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0D5C00B9.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0DDC000D.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\0DDC0039.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\105C0013.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\105C0088.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\105C00F6.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\105C0150.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\105C0233.VBN//CryptZ
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\$RECYCLE.BIN\S-1-5-21-3648451822-4262861102-3947894163-1003\$RRW7CC3\105C02F5.VBN//CryptZ
detected: Trojan program Trojan-Clicker.HTML.IFrame.jx URL: http://mscracks.com/cracks/K1.php//K1
detected: Trojan program Trojan-Clicker.HTML.Agent.a URL: http://85.17.52.45/pay/enter.php?id=2
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1009.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1018.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1033.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1047.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1096.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH10C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH10D3.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH115C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH11AA.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH11AE.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH121B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH122B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1279.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH12A4.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH12B7.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH12C3.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH12C7.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH12D6.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH12F6.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1330.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH135F.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH138E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1392.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH13A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH142A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH145C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH149B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH14CA.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH14D9.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1537.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1546.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH15A3.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1631.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH167B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH169E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH16BC.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH16BD.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH16E8.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH16EB.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH173A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1749.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1759.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH178.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH18EE.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH190A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH193D.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH197B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH19B9.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1A13.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1AD2.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1AF1.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1AF2.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1B5F.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1B7A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1B9D.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1BBD.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1BEB.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1BFA.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1C39.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1C77.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1C97.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1D3E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1D6.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1DCE.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1DE9.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1DEE.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1E1C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1E6.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1EA9.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1F70.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1FA2.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1FA3.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1FB3.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH1FD1.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH201F.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH207D.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH20DB.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH20EA.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2182.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH21D4.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH22.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2212.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH224.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2251.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH225C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH228F.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2290.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH22AB.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH232C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2366.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH236A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2394.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH23C7.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH23C8.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH23F7.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2421.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2425.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2482.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH248E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH24A1.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH24C0.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2500.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH251E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH252.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH25B7.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH25DA.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH25E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH25F8.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH263.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2637.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2694.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH26A5.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH26B0.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2722.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2740.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2760.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH277B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH278E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH279A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH27D8.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH27D9.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH27F8.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH281.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2875.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2943.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2962.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2982.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2992.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2A7C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2A96.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2AD5.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2AE8.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2AE9.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2B17.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2B36.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2B46.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2B65.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2B94.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2C20.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2C5F.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2C7E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2D54.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2D97.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2DC6.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2DE5.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2E80.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2F0D.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2F8B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2F9A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2FA5.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH2FE8.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH30A3.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH30D2.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH30E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH30ED.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH30F1.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH31.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3111.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH31FA.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH320A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3234.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH32D4.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH32FF.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3323.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3351.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH339F.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH33BE.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH33E9.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH33EE.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH340C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH340D.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH342B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3437.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH344B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH34D.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3535.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3574.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH363E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH366C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH366D.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH368C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH36D6.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH36DA.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH36DB.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH36F9.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3729.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3738.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3753.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH37B5.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH37D0.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3822.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3851.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH387F.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH38AE.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH38FC.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3908.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH390B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH394A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3979.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3994.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3A11.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3A15.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3A43.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3B1D.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3B2A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3B7C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3B9B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3BAA.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3BD5.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3BD9.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3C33.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3C43.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3CD3.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3CDF.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3D8E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3DEB.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3DEC.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3E1B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3EA3.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3EF5.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3F20.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3F3F.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3F71.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3F72.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3F91.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3FA0.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH3FEE.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH400A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH40F7.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4155.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH41CE.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4201.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH427E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH42BC.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH430A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4329.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4345.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4396.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH43C6.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4404.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4461.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4471.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH44A0.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH44EE.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH451C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH458A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH459A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4617.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4644.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4665.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH469E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH474.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH476D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH477D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4788.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4829.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4838.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4867.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4872.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4876.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH48C0.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4951.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4960.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH49BA.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH49BE.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH49ED.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4A6A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4AB8.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4B06.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4B25.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4B34.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4BB1.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4BEC.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4BFB.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4C0F.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4C4D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4CA7.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4CCA.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4CDA.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4CFA.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4D28.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4D85.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4DB0.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4E21.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4E4C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4EAE.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4EDC.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4F84.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4F98.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4FC6.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH4FE2.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH50.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5005.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5011.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5024.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5052.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH508D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH50C0.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH50EB.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5158.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH516B.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH51D9.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH521.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5237.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5255.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5265.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5266.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5321.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH535E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH53AD.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH53DB.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH53FB.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5439.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5483.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH54B7.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH54C6.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH556D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5571.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH55E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5657.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH565C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH56F7.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5746.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5764.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH579F.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH57D2.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH57F1.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5810.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH584F.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH58CC.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH58DB.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH58EB.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5939.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5967.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH59C5.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5A04.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5A23.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5A42.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5A80.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5A9.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5B7A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5BD7.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5BE7.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5BF2.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5BF7.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5C06.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5C60.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5C93.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5CD1.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5CFF.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5D2A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5D8D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5D98.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5DDA.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5E47.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5EB.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5EB5.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5ED0.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5F51.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5F7B.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5F9E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5FCD.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5FD9.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH5FDD.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH60.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6037.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH606A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6088.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6094.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6125.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6164.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6182.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6192.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH61EF.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH624D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH624E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6258.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH628C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH62A7.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6304.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6327.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6395.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH63F2.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6431.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH643C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6440.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH644F.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6450.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH645F.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH646B.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH64BD.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH64E8.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6565.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH65A3.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH65A7.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH65D6.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6633.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH66A0.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH66CF.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH66FF.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6719.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH673C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH675C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH679A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH67B9.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH67E8.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6832.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6865.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH687.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH68AF.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6901.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6930.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH697.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6A97.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6AE1.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6C3C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6C7A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6C7B.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6C9A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6CF8.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6D1.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6D26.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6D84.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6DC2.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6DE1.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6E2F.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6E5.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6E5A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6E5D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6E8D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6EAC.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6EDA.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6F19.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH6FD4.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH704.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7051.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH705D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7090.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH711C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH714.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7169.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7179.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH717A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH71B4.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH71B8.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7250.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7254.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7292.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH72C1.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH72F.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH72F0.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH733A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH733E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH735D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7397.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7405.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7427.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7428.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7433.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7472.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7475.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH74A5.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7512.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH751D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH759E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH75CE.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7698.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH76D6.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH76E2.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7705.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7733.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH774F.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7752.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH77EE.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH781E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH782D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH785C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7887.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH78BA.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH78D5.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH78D9.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH78F4.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7923.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7933.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7936.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH79B0.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH79DE.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7A30.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7A40.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7A5F.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7A7E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7B39.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7B96.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7BA7.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7BE5.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7BF4.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7CA0.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7D1D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7D7B.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7DB9.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7DE.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7DF.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7E07.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7EE2.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7F01.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7F2F.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH7F5A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8068.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8097.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH80D1.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH80E4.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8104.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8122.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8123.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8133.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH819F.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH81CE.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH81DE.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH81FD.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8218.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH822C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH82A8.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH82C8.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH82E3.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8336.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8364.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8383.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH83C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH843E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH849B.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8505.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8509.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8534.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8586.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH85A1.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH85B5.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH85E3.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH86BE.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH86FC.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH872B.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8788.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8789.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8794.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8805.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8840.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8843.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8853.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH888E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH88C1.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH88EF.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH890E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH893A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH894D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8978.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8987.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8A38.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8B11.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8B21.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8B7A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8BDC.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8C07.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8C49.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8C87.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8CB7.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8CC2.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8DB0.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8DBF.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8DDB.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8E0A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8E2D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8E3D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8E4C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8E68.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8EBA.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8EC9.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8F27.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8F66.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8F75.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH8FF1.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9010.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9030.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH905E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH905F.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH907.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH90FA.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9139.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH913A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9148.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9168.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9178.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH91C5.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH91C6.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9204.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9242.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH933C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH93C4.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH93E8.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9474.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH94B2.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH94B3.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH94C1.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH94C2.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH952B.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH955.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH95C7.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH95CB.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH95FA.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9663.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9677.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH96E4.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9722.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9732.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH975D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH978F.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH97AF.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH97BF.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH97CD.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9973.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9992.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH999E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH99D1.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH99F0.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH99FC.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9A2.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9A2A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9A2E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9A5D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9A88.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9B2.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9B95.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9BFE.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9C02.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9C0E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9C6F.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9C7B.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9C7F.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9C8E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9C9E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9CD9.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9CEC.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9D0C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9D36.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9D69.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9D79.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9DC3.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9DE2.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9E2.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9E54.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9EA1.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9ED.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9ED1.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9F39.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9F6C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9F9B.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWH9FCA.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA090.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA0A3.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA11D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA13C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA19E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA1CD.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA21A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA249.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA284.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA2F5.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA324.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA342.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA3B0.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA41D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA43C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA44B.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA48A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA499.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA4AA.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA4C9.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA508.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA584.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA5A3.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA5B2.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA5D2.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA5F1.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA66E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA67E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA6DC.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA6EB.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA706.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA716.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA786.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA81F.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA8EE.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA90C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA91D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA92C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA93C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA995.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA9A5.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHA9C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAA25.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAAEC.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAB0B.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAB1F.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAB8C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHABC7.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHABF9.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAC09.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAC37.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAC48.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAC7.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAD22.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAD5C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHADBE.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHADCA.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHADD9.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHADFC.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAE27.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAE4B.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAE56.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAE5A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAE79.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAE88.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAEA7.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAEB.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAED7.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAF54.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAFA.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHAFD1.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB059.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB068.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB07B.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB0AA.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB0BA.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB0F8.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB108.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB166.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB175.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB1B4.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB1D3.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB202.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB260.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB28A.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB369.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB374.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB38.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB39.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB398.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB3E6.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB444.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB49.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB4BF.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB50E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB51D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB587.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB59B.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB5A6.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB5BA.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB5E9.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB5F4.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB613.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB63.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB646.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB6C2.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB76.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB79D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB7AC.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB7EB.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB7FB.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB826.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB87.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB887.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB8A6.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB8D5.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB914.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB923.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB943.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB952.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB953.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHB9DE.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBA0E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBA1C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBA1D.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBA5.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBAF7.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBB07.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBB17.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBB5.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBB8F.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBBB3.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBBCE.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBC1C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBC5.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBC5E.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBC89.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBD28.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBD5.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBD77.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBD96.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBE41.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBE70.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBE7C.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBF3B.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHBF85.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC021.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC035.tmp
not found: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC073.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC082.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC0E1.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC0F0.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC18C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC1C6.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC1CA.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC205.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC209.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC218.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC237.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC262.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC272.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC275.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC2B0.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC2D4.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC2E3.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC2F2.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC2F3.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC302.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC31E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC3AF.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC3C9.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC3FC.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC41B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC4C6.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC4E2.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC4F5.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC501.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC543.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC552.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC582.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC592.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC5B1.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC5D.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC5F0.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC61E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC62E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC66C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC802.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC840.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC88E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC8CC.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC92A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHC9F5.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCA04.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCA10.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCA71.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCA9C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCB2C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCBC9.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCC17.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCC26.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCC65.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCC93.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCCF1.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCD00.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCD4F.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCD7E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCD99.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCD9C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCDAD.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCDDB.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCE39.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCE68.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCE77.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCEFF.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCF42.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHCF81.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD037.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD066.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD08A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD0A8.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD0C7.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD0D4.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD106.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD131.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD154.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD193.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD20F.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD27.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD27D.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD28C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD2CB.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD2D6.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD328.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD367.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD3B1.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD3FF.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD46C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD48B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD4FC.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD52B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD54B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD5A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD615.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD630.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD634.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD65F.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD66.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD663.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD67E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD683.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD6A2.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD6E0.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD6EB.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD6EC.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD6EF.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD71E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD72E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD75D.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD78B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD7EA.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD809.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD885.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD886.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD895.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD8E3.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD8F2.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD94C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD94F.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD95F.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD96B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD98F.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD9AD.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHD9DC.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHDA2B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHDA3A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHDA4A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHDA9.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHDC7.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHDC9B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHDCC9.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHDD36.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHDE30.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHDE8A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHDE8E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHDE9D.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHDEDC.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHDF87.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHDF88.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHDF93.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE043.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE06.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE071.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE0EA.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE0FD.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE11C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE11D.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE15.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE15B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE17B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE186.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE1A5.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE1F7.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE216.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE217.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE226.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE255.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE265.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE28F.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE2D1.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE2D2.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE35E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE38D.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE3FA.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE4B1.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE4EF.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE50.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE531.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE532.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE541.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE5AB.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE5ED.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE60C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE6A8.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE6A9.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE6D7.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE6F7.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE706.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE725.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE760.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE83A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE84A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE87C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE888.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE8EA.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE914.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE966.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHE9B0.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEA32.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEA70.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEA80.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEA8B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEA8F.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEABE.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEAC9.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEADD.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEAE8.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEB17.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEB2B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEB4A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEB65.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEBB7.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEBE6.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEC05.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEC34.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEC54.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEC8E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHECE0.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHED3D.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHED68.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHED6C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHED7C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHED97.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHED9B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEDAA.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEDC9.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEDD5.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEDF9.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEE07.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEE37.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEE76.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHEEC3.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF00A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF0A7.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF0B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF0F.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF10.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF104.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF124.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF162.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF1BF.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF1DF.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF24C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF28A.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF2B9.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF2BA.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF2D4.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF2E8.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF375.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF3C2.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF3E2.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF4EB.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF558.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF567.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF5B6.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF651.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF690.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF691.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF6B0.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF73B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF74B.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF776.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF7B8.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF7C.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF7D.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF884.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF8DD.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF8FC.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF92E.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF96D.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHF9BB.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFA15.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFA34.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFA43.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFAA6.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFAB.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFAD4.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFB22.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFB32.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFB41.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFB60.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFB80.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFB8F.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFB9F.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFBBA.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFC08.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFC88.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFC95.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFD11.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFD21.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFD54.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFD73.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFD92.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFDCC.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFDE0.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFDEC.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFDF0.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFE0F.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFEAB.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFEBB.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFEE5.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFEEA.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFF05.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFF33.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFF37.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFF91.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Users\Remi.Remi-PC\AppData\Local\Temp\DWHFFE2.tmp
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Windows\Temp\47EC325D.qef
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Windows\Temp\qsp2386.tmp//CryptFF
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Windows\Temp\qsp2C5B.tmp//CryptFF
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Windows\Temp\qsp4BD5.tmp//CryptFF
deleted: Trojan program Backdoor.Win32.Agent.buy File: C:\Windows\Temp\qspDA0F.tmp//CryptFF
chryssi2001
April 1, 2008, 3:26 PM UTC
Hello furrowed,

Thanks for the Kaspersky report. It did a great job. We still have some more work to do here.

I know you are trying to be helpfull, but please do not post or run other tools unless i ask you too, because i am based each time on your previous reports to create a fix, and some parts of my fix may not work.
----------------------------------------------
IMPORTANT NOTE:
If you are using Windows Vista you must right click on the desktop icon and choose Run as Administrator all tools.
----------------------------------------------
I have since taken off all 3 of my antivirus programs and installed kaspersky.

So be sure Symantec or Norton, Avast and BitDefender are not in your programs any more.

I can still see some Symantec and Avast excistence in your report.
We'll remove Avast remainants too but use the link below to see if that will remove the remainants of Symantec.

REMOVE NORTON

ONLY if you don't have an active subscription, use below link to uninstall, and install a free AV from my links below.

Please click HERE and follow the instructions to download and run the norton removal tool for your own version.
----------------------------------------------
Please download the OTMoveIt2 by OldTimer and Save it to your Desktop.

Do not use it yet!
----------------------------------------------
DELETE SERVICES IN VISTA
  • Open a new notepad window (Start>All Programs>Accessories>Notepad)
  • Copy & paste the contents of the following codebox into the notepad window

sc stop aswUpdSv

sc delete aswUpdSv

sc stop "avast! Antivirus"

sc delete "avast! Antivirus"

sc stop "avast! Mail Scanner"

sc delete "avast! Mail Scanner"

sc stop "avast! Web Scanner"

sc delete "avast! Web Scanner"

sc stop CLTNetCnService

sc delete CLTNetCnService

  • Click File > Save as
  • In the box labelled File name copy and paste FixServices.bat
  • Change Save as type to All Files
  • Save it to your desktop
  • Close the notepad window
  • Right click on FixServices.bat and click Run as administrator
  • If windows tells you that it needs your permission to continue, click Continue
  • A DOS window will come up briefly and then disappear, this is normal

----------------------------------------------
FIX HIJACKTHIS ENTRIES

Open up Hijackthis.
Click on do a system scan only.
Place a checkmark next to these lines(if still present).

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: (no name) - {7A5565EF-A594-46E4-AF56-FE71AEAFD7D5} - (no file)
O2 - BHO: {618b6c6a-e9e3-4cfb-e994-e155c04629ea} - {ae92640c-551e-499e-bfc4-3e9ea6c6b816} - (no file)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Avast4\ashMaiSv.exe (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Avast4\ashWebSv.exe (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)

Then close all windows except Hijackthis and click Fix Checked
Close HijackThis.
----------------------------------------------
OTMoveIt2

  • Please double-click OTMoveIt2.exe to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
  • Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

    C:\Program Files\Avast4 
    
C:\Program Files\Common Files\Symantec Shared

  • Return to OTMoveIt2, right click in the "Paste Standard List of Files/Folders to Move" window (under the light blue bar) and choose Paste.
  • Click the red Moveit! button.
  • Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
  • Close OTMoveIt2

Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post.
----------------------------------------------
Malwarebytes' Anti-Malware

Please download Malwarebytes' Anti-Malware to your desktop.

  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform full scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected.
  • When completed, a log will open in Notepad. Please save it to a convenient location.
  • The log can also be found here:
    C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt
  • Post that log back here.

----------------------------------------------
Post back:
OTMoveIt2 report.
Malwarebytes' Anti-Malware
A new HijackThis log.
Tell me if the pc is running better now. ;)
furrowed
April 1, 2008, 5:31 PM UTC
Thanks again. Here are my logs.
Things seem fine...no more porn popups at least.
Do you notice anything?

OTMoveIt2 Log:
C:\Program Files\Avast4\ENGLISH moved successfully.
C:\Program Files\Avast4\DATA\skin moved successfully.
C:\Program Files\Avast4\DATA\report moved successfully.
C:\Program Files\Avast4\DATA\moved moved successfully.
C:\Program Files\Avast4\DATA\log moved successfully.
C:\Program Files\Avast4\DATA\journal moved successfully.
C:\Program Files\Avast4\DATA\integ moved successfully.
C:\Program Files\Avast4\DATA\chest moved successfully.
C:\Program Files\Avast4\DATA\backup moved successfully.
C:\Program Files\Avast4\DATA moved successfully.
C:\Program Files\Avast4 moved successfully.
C:\Program Files\Common Files\Symantec Shared\CCPD-LC moved successfully.
C:\Program Files\Common Files\Symantec Shared moved successfully.

OTMoveIt2 by OldTimer - Version 1.0.21 log created on 04012008_122957
______________________________________________________

Malwarebytes' Anti-Malware 1.09
Database version: 578

Scan type: Full Scan (C:\|D:\|F:\|G:\|)
Objects scanned: 190328
Time elapsed: 46 minute(s), 57 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 3

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\jkwslist (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
G:\My Archived Docs\MA1\MUHL184\MUHL184 Listening Quiz 3 Morning.doc (Trojan.Clicker) -> Quarantined and deleted successfully.
G:\My Archived Docs\MA1\MUHL184\MUHL184 Listening Quiz 4 Morning.doc (Trojan.Clicker) -> Quarantined and deleted successfully.
G:\My Archived Docs\M


____________________
HiJackThis Log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:29:29 PM, on 01/04/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files\Kaspersky Internet Security 7.0\avp.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Launchy\Launchy.exe
C:\Program Files\KatMouse\KatMouse.exe
C:\Windows\System32\rundll32.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Microsoft Office\Office12\WINWORD.EXE
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe (User 'Default user')
O4 - Startup: KatMouse.lnk = C:\Program Files\KatMouse\KatMouse.exe
O4 - Startup: WimpWall.lnk = C:\Program Files\Wimpwall\WimpWall.exe
O4 - Global Startup: Launchy.lnk = C:\Program Files\Launchy\Launchy.exe
O4 - Global Startup: Nokia Nseries PC Suite.lnk = C:\Program Files\Nokia\NNPCS\RunLauncher.exe
O8 - Extra context menu item: &Download Directly to iTunes - res://C:\Program Files\itunes\Tunestor\Tunestor.dll/GoRSDN.dll.htm
O8 - Extra context menu item: &Tunestory.com Hit List - res://C:\Program Files\itunes\Tunestor\Tunestor.dll/Tunestory.dll.htm
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: tunestory.com - {D104757D-9536-4a1b-9FA8-4DD5B44AC981} - http://www.tunestor.com/redirect.php (file missing)
O13 - Gopher Prefix:
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = campus.mcgill.ca
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = campus.mcgill.ca
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = campus.mcgill.ca
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1.0\r3hook.dll,C:\PROGRA~1\KASPER~1.0\adialhk.dll,
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: PDExchange - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDExchange.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) - Syntek America Inc. - C:\Windows\System32\StkCSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

--
End of file - 6638 bytes
chryssi2001
April 1, 2008, 6:42 PM UTC
Hello furrowed,

Everything looks fine. Normally i would ask for a Kaspersky online scan, but since you scan with your Kaspersky and removed all the infections we won't go for another scan.
----------------------------------------------
Please download ATF cleaner
Make sure that all browser windows are closed.
    Double-click ATF-Cleaner.exe to run the program.
    Under Main choose: Select All
    Click the Empty Selected button.
If you use Firefox browser
    Click Firefox at the top and choose: Select All
    Click the Empty Selected button.
    NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browser
    Click Opera at the top and choose: Select All
    Click the Empty Selected button.
    NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
----------------------------------------------
Update Java Runtime:

You are using an old version of Java. Sun's Java is sometimes updated in order to eliminate the exploitation of vulnerabilities in an existing version. For this reason, it's extremely important that you keep the program up to date, and also remove the older more vulnerable versions from your system. The most current version of Sun Java is: Java Runtime Environment Version 6 Update 5.
  • Go to http://java.sun.com/javase/downloads/index.jsp
  • Go to Java Runtime Environment (JRE) 6 Update 5 and click on Download button.
  • In Platform box choose Windows.
  • Check the box to Accept License Agreement and click Continue.
  • Click on Windows Offline Installation, click on the link under it which says "jre-6u5-windows-i586-p.exe" and save the downloaded file to your desktop.
  • Go to Start => Control Panel => Add or Remove Programs
  • Uninstall all old versions of Java (Java 3 Runtime Environment, JRE or JSE)
  • Reboot your computer
  • Delete the folder C:\Program Files\Java if present
  • Install the new version by running the newly-downloaded file with the java icon which will be at your desktop, and follow the on-screen instructions.
  • Reboot your computer

----------------------------------------------
Please check compatibility with Vista before installation.

I can't see any firewall in your HijackThis log, so i assume you use windows firewall.

FIREWALL
Without a firewall your computer is susceptible to being hacked and taken over. If you use the Windows Firewall you might think that's sufficient but it only controls one way of the traffic (inbound). Simply using a Firewall in its default configuration can lower your risk greatly. It's preferable to install one of the suggested firewalls.

FREE FIREWALLS

Tutorial about Firewalls can be found here
----------------------------------------------
Let's clear out the programs we've been using to clean up your computer, they are not suitable for general malware removal and could cause damage if used inappropriately.

OTMoveIt2
  • Double-click OTMoveIt2.exe.
  • Click the CleanUp! button.
  • Select Yes when the "Begin cleanup Process?" prompt appears.
  • If you are prompted to Reboot during the cleanup, select Yes.
  • The tool will delete itself once it finishes, if not delete it by yourself.

----------------------------------------------
Congratulations you are clean! :)
Now that you are clean, please follow these simple steps in order to keep your computer clean and secure:

Disable and Enable System Restore. - If you are using Windows XP or Vista then you should disable and re-enable system restore to make sure there are no infected files found in a restore point.

You can find instructions on how to enable and re-enable system restore here:

Windows XP System Restore Guide

or

Windows Vista System Restore Guide

Re-enable system restore with instructions from tutorial above.

Here are some free programs I recommend that could help you improve your computer's security.
(Vista users must ensure that any programs are Vista compatible BEFORE installing)

Spybot Search and Destroy 1.5.2
Download it from here. Just choose a mirror and off you go.
Find here the tutorial on how to use Spybot properly here
Find here changes from older version 1.4 here

Install SpyWare Blaster 4.0
Download it from here
Find here the tutorial on how to use Spyware Blaster here

Install WinPatrol
Download it from here
Here you can find information about how WinPatrol works here

Install FireTrust SiteHound
You can find information and download it from here

Install MVPS Hosts File from here
The MVPS Hosts file replaces your current HOSTS file with one containing well know ad sites etc. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer.
Find Tutorial here : http://www.mvps.org/winhelp2002/hosts.htm

Update your Antivirus programs and other security products regularly to avoid new threats that could infect your system.
You can use one of these sites to check if any updates are needed for your pc.
Secunia Software Inspector
F-secure Health Check

Visit Microsoft often to get the latest updates for your computer.
http://www.update.microsoft.com

Please check out Tony Klein's article "How did I get infected in the first place?"

Read some information here how to prevent Malware.

Happy safe surfing!
furrowed
April 1, 2008, 10:29 PM UTC
Things seem to be working fine.
Thanks a bundle!
chryssi2001
April 2, 2008, 4:55 AM UTC
You are welcome :)
Elrond
April 2, 2008, 5:30 AM UTC
This topic is now closed. If you wish it reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.