Virus urgent
Résolu
Utilisateur anonyme
-
Utilisateur anonyme -
Utilisateur anonyme -
Bonjour,
voila apres avoir telecharger un fchier i ma mit un virus, il a touche mon registre et a modifié des choses je ne sais pas quoi je vien de lançé un scan avec bitdefeder en ligne car il ma bloqer avast s'avait vous comment le suprimé sans formater le disque dur et reettre avast en marche merci beaucoup pouvez vous me répondre vite je sais c'est noel mais bon aider moi help
voila apres avoir telecharger un fchier i ma mit un virus, il a touche mon registre et a modifié des choses je ne sais pas quoi je vien de lançé un scan avec bitdefeder en ligne car il ma bloqer avast s'avait vous comment le suprimé sans formater le disque dur et reettre avast en marche merci beaucoup pouvez vous me répondre vite je sais c'est noel mais bon aider moi help
A voir également:
- Virus urgent
- Virus mcafee - Accueil - Piratage
- Virus facebook demande d'amis - Accueil - Facebook
- Virus informatique - Guide
- Panda anti virus gratuit - Télécharger - Antivirus & Antimalwares
- Undisclosed-recipients virus - Guide
176 réponses
ok mais pour avast il ne peut démarer depuit le virus ça me marqe qu'l n'est pas une app win32 valide
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Re,
Bon passe sa.
FindyKill de Chiquitine29
▶ Fais un clique droit sur le lien et choisis ( "enregistrer la cible sous ...." )( , destination le bureau .
▶ ( Note importante : si tu as le prg Elibagla sur ton PC , supprimes le ( risque de conflit entre les deux outils )( .
▶ Entre dans le dossier " FindyKill "
▶ Double clic sur " FindyKill.bat " (et pas sur autre chose!) pour lancer l'outil .
▶ Choisis ( l'option 1( . Puis laisses travailler ...
▶ Une fois terminé, postes le rapport FindyKill.txt qui est généré ...
( Note : le rapport est sauvegardé à la racine du disque -> C:\FindyKill.txt )
Les-risques-securitaires-du-peer-to-peer
Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
Bon passe sa.
FindyKill de Chiquitine29
▶ Fais un clique droit sur le lien et choisis ( "enregistrer la cible sous ...." )( , destination le bureau .
▶ ( Note importante : si tu as le prg Elibagla sur ton PC , supprimes le ( risque de conflit entre les deux outils )( .
▶ Entre dans le dossier " FindyKill "
▶ Double clic sur " FindyKill.bat " (et pas sur autre chose!) pour lancer l'outil .
▶ Choisis ( l'option 1( . Puis laisses travailler ...
▶ Une fois terminé, postes le rapport FindyKill.txt qui est généré ...
( Note : le rapport est sauvegardé à la racine du disque -> C:\FindyKill.txt )
Les-risques-securitaires-du-peer-to-peer
Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
une question esque ta spybot installer sur ton pc et esque ta eu la modir du registre au demarage de windows
Re,
On va passer cent ans
http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe
Passe sa et fait le choix 1.
On va passer cent ans
http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe
Passe sa et fait le choix 1.
----------------- FindyKill V4.710 ------------------
* User : Jimmy - JIMMY_1
* Emplacement : D:\Program Files\FindyKill
* Outils Mis a jours le 21/12/08 par Chiquitine29
* Recherche effectuée à 2:12:04 le 25/12/2008
* Windows Vista - Internet Explorer 7.0.6001.18000
((((((((((((((((( *** Recherche *** ))))))))))))))))))
--------------- [ Processus actifs ] ----------------
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
C:\Program Files\Cyberlink\Shared files\RichVideo.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\TUProgSt.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe
C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
C:\Program Files\Cyberlink\PowerDVD\PDVDServ.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Windows\System32\wpcumi.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\Jimmy\AppData\Local\acsig.exe
C:\Program Files\RayV\RayV\RayV.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe
C:\Users\Jimmy\AppData\Roaming\drivers\winupgro.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\wbem\unsecapp.exe
D:\Program Files\iPod\bin\iPodService.exe
D:\Program Files\iTunes\iTunes.exe
C:\Windows\system32\DllHost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\distnoted.exe
--------------- [ Processus infectieux stoppés ] ----------------
"C:\Users\Jimmy\AppData\Roaming\drivers\winupgro.exe" (3592)
--------------- [ Fichiers/Dossiers infectieux ] ----------------
»»»» Presence des fichiers dans C:
»»»» Presence des fichiers dans C:\Windows
»»»» Presence des fichiers dans C:\Windows\Prefetch
Found ! - C:\Windows\prefetch\508890.EXE-137BD6D8.pf
Found ! - C:\Windows\Prefetch\KEYGEN.EXE-31342A67.pf
Found ! - C:\Windows\Prefetch\KEYGEN.EXE-73DA0114.pf
Found ! - C:\Windows\Prefetch\SERIAL.EXE-83FD72D9.pf
Found ! - C:\Windows\Prefetch\KEYGEN.EXE-31342A67.pf
Found ! - C:\Windows\Prefetch\KEYGEN.EXE-73DA0114.pf
»»»» Presence des fichiers dans C:\Windows\system32
Found ! [25/12/2008 01:55] - C:\Windows\system32\mdelk.exe
Found ! [25/12/2008 01:55] - C:\Windows\system32\wintems.exe
Found ! [25/12/2008 02:11] - C:\Windows\system32\ban_list.txt
»»»» Presence des fichiers dans C:\Windows\system32\config\systemprofile\AppData\Roaming
»»»» Presence des fichiers dans C:\Windows\system32\drivers
»»»» Presence des fichiers dans C:\Users\Jimmy\AppData\Roaming
Found ! [25/12/2008 00:26] - "C:\Users\Jimmy\AppData\Roaming\m\flec006.exe"
Found ! [25/12/2008 00:26] - "C:\Users\Jimmy\AppData\Roaming\m\list.oct"
Found ! [25/12/2008 00:27] - "C:\Users\Jimmy\AppData\Roaming\m\data.oct"
Found ! [25/12/2008 00:27] - "C:\Users\Jimmy\AppData\Roaming\m\srvlist.oct"
Found ! [25/12/2008 01:56] - "C:\Users\Jimmy\AppData\Roaming\m\shared"
Found ! [25/12/2008 00:27] - "C:\Users\Jimmy\AppData\Roaming\m"
Found ! [25/12/2008 00:20] - "C:\Users\Jimmy\AppData\Roaming\drivers"
Found ! [25/12/2008 01:55] - "C:\Users\Jimmy\AppData\Roaming\drivers\srosa.sys"
Found ! [25/12/2008 01:55] - "C:\Users\Jimmy\AppData\Roaming\drivers\srosa2.sys"
Found ! [04/09/2004 03:06] - "C:\Users\Jimmy\AppData\Roaming\drivers\winupgro.exe"
Found ! [25/12/2008 02:07] - "C:\Users\Jimmy\AppData\Roaming\drivers\downld"
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\106408.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\152834.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\154409.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\154971.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\243969.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\244391.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\244406.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\248618.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\277385.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\278009.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\278024.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\295044.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\295840.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\296433.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\296885.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\297025.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\297478.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\297681.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\298632.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\299116.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\321674.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\402700.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\414697.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\417599.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\435445.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\437005.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\437582.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\438612.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\439579.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\440125.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\466037.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\466926.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\467441.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\476973.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\479640.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\480389.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\539217.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\540527.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\540964.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\741051.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\741956.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\742315.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\755216.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\757509.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\757946.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\792547.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\793311.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\793467.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\94630.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\97500.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\97516.exe
»»»» Presence des fichiers dans C:\Users\Jimmy\AppData\Local\Temp
Found ! - C:\Users\Jimmy\AppData\Local\Temp\Rar$DI03.710\crack.nfo
Found ! - C:\Users\Jimmy\AppData\Local\Temp\Rar$DI04.321\[KEYGEN] - Microsoft Office 2007(1).txt
Found ! - C:\Users\Jimmy\AppData\Local\Temp\Rar$DI05.850\Readme keygen.txt
Found ! - C:\Users\Jimmy\AppData\Local\Temp\Rar$EX00.918\crack.nfo
»»»» Presence des fichiers dans C:\Users\Jimmy\Local Settings\Temporary Internet Files\Content.IE5
Found ! [04/11/2008 10:13] - D:\Users\Jimmy\Documents\iWizz\Thumbnails\09FBBB78-B640-4E6A-BAC8-EC6C7ACFD286.jpg
Found ! [08/11/2008 12:44] - D:\Users\Jimmy\Documents\iWizz\Thumbnails\0FB64222-6AAE-4547-B262-B3DDC8376ED0.jpg
Found ! [04/11/2008 10:10] - D:\Users\Jimmy\Documents\iWizz\Thumbnails\28FDE204-FB64-4965-9903-4445C6EEAF2D.jpg
Found ! [04/11/2008 10:13] - D:\Users\Jimmy\Documents\iWizz\Thumbnails\52F77901-9462-4797-BB5E-0B648F8E9593.jpg
Found ! [08/11/2008 12:43] - D:\Users\Jimmy\Documents\iWizz\Thumbnails\5FC9BA70-5189-4A71-9B64-8F876947844D.jpg
Found ! [04/11/2008 10:12] - D:\Users\Jimmy\Documents\iWizz\Thumbnails\63B64114-7395-4337-9F62-42B17A1280FE.jpg
Found ! [05/11/2008 12:11] - D:\Users\Jimmy\Documents\iWizz\Thumbnails\80DA81AF-3CDE-4732-AC0D-BC9B6409692C.jpg
Found ! [04/11/2008 10:13] - D:\Users\Jimmy\Documents\iWizz\Thumbnails\8680CA5F-AEF4-4096-B64C-1FA9FA38B20B.jpg
Found ! [04/11/2008 10:12] - D:\Users\Jimmy\Documents\iWizz\Thumbnails\9E36B911-A493-4EB8-B64D-7C36F3B26E23.jpg
Found ! [04/11/2008 10:12] - D:\Users\Jimmy\Documents\iWizz\Thumbnails\A06AE301-CE2C-423E-954B-24996A9B647E.jpg
Found ! [12/11/2008 19:03] - D:\Users\Jimmy\iWizz\Thumbnails\09FBBB78-B640-4E6A-BAC8-EC6C7ACFD286.jpg
Found ! [12/11/2008 19:04] - D:\Users\Jimmy\iWizz\Thumbnails\0FB64222-6AAE-4547-B262-B3DDC8376ED0.jpg
Found ! [19/11/2008 13:15] - D:\Users\Jimmy\iWizz\Thumbnails\28D82A01-B1DE-4B64-A179-E2CD3170C8A5.jpg
Found ! [12/11/2008 19:01] - D:\Users\Jimmy\iWizz\Thumbnails\28FDE204-FB64-4965-9903-4445C6EEAF2D.jpg
Found ! [28/11/2008 21:00] - D:\Users\Jimmy\iWizz\Thumbnails\5B1B640C-CF2F-41CD-AD6C-3941AAC5B850.jpg
Found ! [12/11/2008 19:04] - D:\Users\Jimmy\iWizz\Thumbnails\5FC9BA70-5189-4A71-9B64-8F876947844D.jpg
Found ! [12/11/2008 19:03] - D:\Users\Jimmy\iWizz\Thumbnails\63B64114-7395-4337-9F62-42B17A1280FE.jpg
Found ! [19/11/2008 13:15] - D:\Users\Jimmy\iWizz\Thumbnails\83F42472-7B64-4E43-BD35-C4D6C8AE4D6D.jpg
Found ! [12/11/2008 19:03] - D:\Users\Jimmy\iWizz\Thumbnails\8680CA5F-AEF4-4096-B64C-1FA9FA38B20B.jpg
Found ! [19/11/2008 13:15] - D:\Users\Jimmy\iWizz\Thumbnails\93968732-B215-40DD-B641-4C7A6BDFB6A0.jpg
Found ! [12/11/2008 19:04] - D:\Users\Jimmy\iWizz\Thumbnails\9E36B911-A493-4EB8-B64D-7C36F3B26E23.jpg
Found ! [19/11/2008 13:15] - D:\Users\Jimmy\iWizz\Thumbnails\E1D050C4-C610-4CE8-B033-308B641B1F81.jpg
--------------- [ Registre / Startup ] ----------------
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
Sidebar=C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
MsnMsgr="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
acsig="c:\users\jimmy\appdata\local\acsig.exe" acsig
RayV=C:\Program Files\RayV\RayV\RayV.exe /background
AnyDVD=C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe
eMuleAutoStart=C:\Program Files\eMule\emule.exe -AutoStart
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
Windows Defender=%ProgramFiles%\Windows Defender\MSASCui.exe -hide
Acer Empowering Technology Monitor=C:\Program Files\Acer\Empowering Technology\SysMonitor.exe
EmpoweringTechnology=C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe boot
eDataSecurity Loader=C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
RemoteControl="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
RtHDVCpl=RtHDVCpl.exe
WarReg_PopUp=C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe
avast!=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
Windows Mobile-based device management=%windir%\WindowsMobile\wmdc.exe
QuickTime Task="C:\Program Files\QuickTime\QTTask.exe" -atboottime
WPCUMI=C:\Windows\system32\WpcUmi.exe
EPSON Stylus DX4800 Series=C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /F "C:\Windows\TEMP\E_SDFAE.tmp" /EF "HKLM"
AppleSyncNotifier=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
iTunesHelper="D:\Program Files\iTunes\iTunesHelper.exe"
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
NoChange=1
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
Installed=1
<NO NAME>=
[HKEY_CURRENT_USER\software\local appwizard-generated applications\AttachToEmail]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\DocUnins]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\Launch Tool]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\msnmsgr]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\NTI AudioEditor]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\serial]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\Split]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\winupgro]
--------------- [ Registre / Clés infectieuses ] ----------------
Found ! - HKEY_USERS\S-1-5-21-414501896-1195741646-1103707232-1000\Software\Local AppWizard-Generated Applications\msnmsgr
Found ! - HKEY_USERS\S-1-5-21-414501896-1195741646-1103707232-1000\Software\Local AppWizard-Generated Applications\serial
Found ! - HKEY_USERS\S-1-5-21-414501896-1195741646-1103707232-1000\Software\Local AppWizard-Generated Applications\winupgro
Found ! - HKEY_USERS\S-1-5-21-414501896-1195741646-1103707232-1000\Software\bisoft
Found ! - HKEY_USERS\S-1-5-21-414501896-1195741646-1103707232-1000\Software\DateTime4
Found ! - HKEY_USERS\S-1-5-21-414501896-1195741646-1103707232-1000\Software\FirtR
Found ! - HKEY_USERS\S-1-5-21-414501896-1195741646-1103707232-1000\Software\MuleAppData
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\msnmsgr
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\serial
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA
Found ! - HKEY_CURRENT_USER\Software\bisoft
Found ! - HKEY_CURRENT_USER\Software\DateTime4
Found ! - HKEY_CURRENT_USER\Software\FirtR
Found ! - HKEY_CURRENT_USER\Software\MuleAppData
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sK9Ou0s
--------------- [ Etat / Services ] ----------------
+- Services : [ Auto=2 / Demande=3 / Désactivé=4 ]
/!\ Ndisuio - Type de démarrage = 4
EapHost - Type de démarrage = 3
Wlansvc - Type de démarrage = 3
/!\ SharedAccess - Type de démarrage = 4
/!\ wuauserv - Type de démarrage = 4
/!\ wscsvc - Type de démarrage = 4
/!\ WinDefend - Type de démarrage = 4
--------------- [ Recherche dans supports amovibles] ----------------
+- Informations :
C: - Lecteur fixe
D: - Lecteur fixe
J: - Lecteur amovible
K: - Lecteur amovible
L: - Lecteur amovible
Y: - Lecteur r‚seau ou distant
+- presence des fichiers :
--------------- [ Registre / Mountpoint2 ] ----------------
-> Not found !
------------------- ! Fin du rapport ! --------------------
* User : Jimmy - JIMMY_1
* Emplacement : D:\Program Files\FindyKill
* Outils Mis a jours le 21/12/08 par Chiquitine29
* Recherche effectuée à 2:12:04 le 25/12/2008
* Windows Vista - Internet Explorer 7.0.6001.18000
((((((((((((((((( *** Recherche *** ))))))))))))))))))
--------------- [ Processus actifs ] ----------------
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
C:\Program Files\Cyberlink\Shared files\RichVideo.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\TUProgSt.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe
C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe
C:\Program Files\Cyberlink\PowerDVD\PDVDServ.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Windows\System32\wpcumi.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\Jimmy\AppData\Local\acsig.exe
C:\Program Files\RayV\RayV\RayV.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe
C:\Users\Jimmy\AppData\Roaming\drivers\winupgro.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\wbem\unsecapp.exe
D:\Program Files\iPod\bin\iPodService.exe
D:\Program Files\iTunes\iTunes.exe
C:\Windows\system32\DllHost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\distnoted.exe
--------------- [ Processus infectieux stoppés ] ----------------
"C:\Users\Jimmy\AppData\Roaming\drivers\winupgro.exe" (3592)
--------------- [ Fichiers/Dossiers infectieux ] ----------------
»»»» Presence des fichiers dans C:
»»»» Presence des fichiers dans C:\Windows
»»»» Presence des fichiers dans C:\Windows\Prefetch
Found ! - C:\Windows\prefetch\508890.EXE-137BD6D8.pf
Found ! - C:\Windows\Prefetch\KEYGEN.EXE-31342A67.pf
Found ! - C:\Windows\Prefetch\KEYGEN.EXE-73DA0114.pf
Found ! - C:\Windows\Prefetch\SERIAL.EXE-83FD72D9.pf
Found ! - C:\Windows\Prefetch\KEYGEN.EXE-31342A67.pf
Found ! - C:\Windows\Prefetch\KEYGEN.EXE-73DA0114.pf
»»»» Presence des fichiers dans C:\Windows\system32
Found ! [25/12/2008 01:55] - C:\Windows\system32\mdelk.exe
Found ! [25/12/2008 01:55] - C:\Windows\system32\wintems.exe
Found ! [25/12/2008 02:11] - C:\Windows\system32\ban_list.txt
»»»» Presence des fichiers dans C:\Windows\system32\config\systemprofile\AppData\Roaming
»»»» Presence des fichiers dans C:\Windows\system32\drivers
»»»» Presence des fichiers dans C:\Users\Jimmy\AppData\Roaming
Found ! [25/12/2008 00:26] - "C:\Users\Jimmy\AppData\Roaming\m\flec006.exe"
Found ! [25/12/2008 00:26] - "C:\Users\Jimmy\AppData\Roaming\m\list.oct"
Found ! [25/12/2008 00:27] - "C:\Users\Jimmy\AppData\Roaming\m\data.oct"
Found ! [25/12/2008 00:27] - "C:\Users\Jimmy\AppData\Roaming\m\srvlist.oct"
Found ! [25/12/2008 01:56] - "C:\Users\Jimmy\AppData\Roaming\m\shared"
Found ! [25/12/2008 00:27] - "C:\Users\Jimmy\AppData\Roaming\m"
Found ! [25/12/2008 00:20] - "C:\Users\Jimmy\AppData\Roaming\drivers"
Found ! [25/12/2008 01:55] - "C:\Users\Jimmy\AppData\Roaming\drivers\srosa.sys"
Found ! [25/12/2008 01:55] - "C:\Users\Jimmy\AppData\Roaming\drivers\srosa2.sys"
Found ! [04/09/2004 03:06] - "C:\Users\Jimmy\AppData\Roaming\drivers\winupgro.exe"
Found ! [25/12/2008 02:07] - "C:\Users\Jimmy\AppData\Roaming\drivers\downld"
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\106408.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\152834.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\154409.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\154971.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\243969.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\244391.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\244406.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\248618.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\277385.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\278009.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\278024.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\295044.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\295840.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\296433.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\296885.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\297025.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\297478.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\297681.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\298632.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\299116.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\321674.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\402700.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\414697.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\417599.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\435445.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\437005.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\437582.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\438612.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\439579.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\440125.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\466037.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\466926.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\467441.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\476973.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\479640.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\480389.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\539217.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\540527.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\540964.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\741051.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\741956.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\742315.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\755216.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\757509.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\757946.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\792547.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\793311.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\793467.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\94630.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\97500.exe
Found ! [25/12/2008 02:07] - C:\Users\Jimmy\AppData\Roaming\drivers\downld\97516.exe
»»»» Presence des fichiers dans C:\Users\Jimmy\AppData\Local\Temp
Found ! - C:\Users\Jimmy\AppData\Local\Temp\Rar$DI03.710\crack.nfo
Found ! - C:\Users\Jimmy\AppData\Local\Temp\Rar$DI04.321\[KEYGEN] - Microsoft Office 2007(1).txt
Found ! - C:\Users\Jimmy\AppData\Local\Temp\Rar$DI05.850\Readme keygen.txt
Found ! - C:\Users\Jimmy\AppData\Local\Temp\Rar$EX00.918\crack.nfo
»»»» Presence des fichiers dans C:\Users\Jimmy\Local Settings\Temporary Internet Files\Content.IE5
Found ! [04/11/2008 10:13] - D:\Users\Jimmy\Documents\iWizz\Thumbnails\09FBBB78-B640-4E6A-BAC8-EC6C7ACFD286.jpg
Found ! [08/11/2008 12:44] - D:\Users\Jimmy\Documents\iWizz\Thumbnails\0FB64222-6AAE-4547-B262-B3DDC8376ED0.jpg
Found ! [04/11/2008 10:10] - D:\Users\Jimmy\Documents\iWizz\Thumbnails\28FDE204-FB64-4965-9903-4445C6EEAF2D.jpg
Found ! [04/11/2008 10:13] - D:\Users\Jimmy\Documents\iWizz\Thumbnails\52F77901-9462-4797-BB5E-0B648F8E9593.jpg
Found ! [08/11/2008 12:43] - D:\Users\Jimmy\Documents\iWizz\Thumbnails\5FC9BA70-5189-4A71-9B64-8F876947844D.jpg
Found ! [04/11/2008 10:12] - D:\Users\Jimmy\Documents\iWizz\Thumbnails\63B64114-7395-4337-9F62-42B17A1280FE.jpg
Found ! [05/11/2008 12:11] - D:\Users\Jimmy\Documents\iWizz\Thumbnails\80DA81AF-3CDE-4732-AC0D-BC9B6409692C.jpg
Found ! [04/11/2008 10:13] - D:\Users\Jimmy\Documents\iWizz\Thumbnails\8680CA5F-AEF4-4096-B64C-1FA9FA38B20B.jpg
Found ! [04/11/2008 10:12] - D:\Users\Jimmy\Documents\iWizz\Thumbnails\9E36B911-A493-4EB8-B64D-7C36F3B26E23.jpg
Found ! [04/11/2008 10:12] - D:\Users\Jimmy\Documents\iWizz\Thumbnails\A06AE301-CE2C-423E-954B-24996A9B647E.jpg
Found ! [12/11/2008 19:03] - D:\Users\Jimmy\iWizz\Thumbnails\09FBBB78-B640-4E6A-BAC8-EC6C7ACFD286.jpg
Found ! [12/11/2008 19:04] - D:\Users\Jimmy\iWizz\Thumbnails\0FB64222-6AAE-4547-B262-B3DDC8376ED0.jpg
Found ! [19/11/2008 13:15] - D:\Users\Jimmy\iWizz\Thumbnails\28D82A01-B1DE-4B64-A179-E2CD3170C8A5.jpg
Found ! [12/11/2008 19:01] - D:\Users\Jimmy\iWizz\Thumbnails\28FDE204-FB64-4965-9903-4445C6EEAF2D.jpg
Found ! [28/11/2008 21:00] - D:\Users\Jimmy\iWizz\Thumbnails\5B1B640C-CF2F-41CD-AD6C-3941AAC5B850.jpg
Found ! [12/11/2008 19:04] - D:\Users\Jimmy\iWizz\Thumbnails\5FC9BA70-5189-4A71-9B64-8F876947844D.jpg
Found ! [12/11/2008 19:03] - D:\Users\Jimmy\iWizz\Thumbnails\63B64114-7395-4337-9F62-42B17A1280FE.jpg
Found ! [19/11/2008 13:15] - D:\Users\Jimmy\iWizz\Thumbnails\83F42472-7B64-4E43-BD35-C4D6C8AE4D6D.jpg
Found ! [12/11/2008 19:03] - D:\Users\Jimmy\iWizz\Thumbnails\8680CA5F-AEF4-4096-B64C-1FA9FA38B20B.jpg
Found ! [19/11/2008 13:15] - D:\Users\Jimmy\iWizz\Thumbnails\93968732-B215-40DD-B641-4C7A6BDFB6A0.jpg
Found ! [12/11/2008 19:04] - D:\Users\Jimmy\iWizz\Thumbnails\9E36B911-A493-4EB8-B64D-7C36F3B26E23.jpg
Found ! [19/11/2008 13:15] - D:\Users\Jimmy\iWizz\Thumbnails\E1D050C4-C610-4CE8-B033-308B641B1F81.jpg
--------------- [ Registre / Startup ] ----------------
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
Sidebar=C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
MsnMsgr="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
acsig="c:\users\jimmy\appdata\local\acsig.exe" acsig
RayV=C:\Program Files\RayV\RayV\RayV.exe /background
AnyDVD=C:\Program Files\SlySoft\AnyDVD\AnyDVDtray.exe
eMuleAutoStart=C:\Program Files\eMule\emule.exe -AutoStart
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
Windows Defender=%ProgramFiles%\Windows Defender\MSASCui.exe -hide
Acer Empowering Technology Monitor=C:\Program Files\Acer\Empowering Technology\SysMonitor.exe
EmpoweringTechnology=C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe boot
eDataSecurity Loader=C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
RemoteControl="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
RtHDVCpl=RtHDVCpl.exe
WarReg_PopUp=C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe
avast!=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
Windows Mobile-based device management=%windir%\WindowsMobile\wmdc.exe
QuickTime Task="C:\Program Files\QuickTime\QTTask.exe" -atboottime
WPCUMI=C:\Windows\system32\WpcUmi.exe
EPSON Stylus DX4800 Series=C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /F "C:\Windows\TEMP\E_SDFAE.tmp" /EF "HKLM"
AppleSyncNotifier=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
iTunesHelper="D:\Program Files\iTunes\iTunesHelper.exe"
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
NoChange=1
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
Installed=1
<NO NAME>=
[HKEY_CURRENT_USER\software\local appwizard-generated applications\AttachToEmail]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\DocUnins]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\Launch Tool]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\msnmsgr]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\NTI AudioEditor]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\serial]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\Split]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\winupgro]
--------------- [ Registre / Clés infectieuses ] ----------------
Found ! - HKEY_USERS\S-1-5-21-414501896-1195741646-1103707232-1000\Software\Local AppWizard-Generated Applications\msnmsgr
Found ! - HKEY_USERS\S-1-5-21-414501896-1195741646-1103707232-1000\Software\Local AppWizard-Generated Applications\serial
Found ! - HKEY_USERS\S-1-5-21-414501896-1195741646-1103707232-1000\Software\Local AppWizard-Generated Applications\winupgro
Found ! - HKEY_USERS\S-1-5-21-414501896-1195741646-1103707232-1000\Software\bisoft
Found ! - HKEY_USERS\S-1-5-21-414501896-1195741646-1103707232-1000\Software\DateTime4
Found ! - HKEY_USERS\S-1-5-21-414501896-1195741646-1103707232-1000\Software\FirtR
Found ! - HKEY_USERS\S-1-5-21-414501896-1195741646-1103707232-1000\Software\MuleAppData
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\msnmsgr
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\serial
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA
Found ! - HKEY_CURRENT_USER\Software\bisoft
Found ! - HKEY_CURRENT_USER\Software\DateTime4
Found ! - HKEY_CURRENT_USER\Software\FirtR
Found ! - HKEY_CURRENT_USER\Software\MuleAppData
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sK9Ou0s
--------------- [ Etat / Services ] ----------------
+- Services : [ Auto=2 / Demande=3 / Désactivé=4 ]
/!\ Ndisuio - Type de démarrage = 4
EapHost - Type de démarrage = 3
Wlansvc - Type de démarrage = 3
/!\ SharedAccess - Type de démarrage = 4
/!\ wuauserv - Type de démarrage = 4
/!\ wscsvc - Type de démarrage = 4
/!\ WinDefend - Type de démarrage = 4
--------------- [ Recherche dans supports amovibles] ----------------
+- Informations :
C: - Lecteur fixe
D: - Lecteur fixe
J: - Lecteur amovible
K: - Lecteur amovible
L: - Lecteur amovible
Y: - Lecteur r‚seau ou distant
+- presence des fichiers :
--------------- [ Registre / Mountpoint2 ] ----------------
-> Not found !
------------------- ! Fin du rapport ! --------------------