ERROR KFE initialized Failed Fermé

Question

Bonjour,

Hier soir, après avoir dézippé un petit dossier trouvé sur le net, mon antivirus Avast à commencé à s'emballer, ensuite j'ai le pc qui a rebooté et un message d'erreur c'est affiché 

'' ERROR  KFE initialized Failed : Driver not found '' vous aurez compris que mon pare-feu est Kerio ...

Ensuite les application qio se lancent au démarrage commence leur travail, et ...... BIM !!!!! le pc boot, rebelotte, message d'erreur '' ERROR  KFE initialized Failed : Driver not found '', et...... BIM !!!! le pc reboot, rebelotte,
message d'erreur......... etc.... jusqu'au 4 eme boot, le message d'erreur est toujours là mais avast n'est plus là, du moins la petite boule qui doit tourner en bas à gauche....

Bref, je fais un petit scan avec Malwarebytes' qui me trouve 8 erreur du style trojan et virus de spam.

Je supprime le tout, un petit redémarrage demandé par ce même logiciel dont je vous met le rapport ci-dessous, et j'essaie de faire un scan avec Avast et a ma surprise, celui ci n'est apparemment plus installé dans ma machine !!! ou du moins un message apparait me signalant que '' ce n'est pas une application Win 32 valide '' !!

Voici le rapport Malwarebytes' :

Malwarebytes' Anti-Malware 1.31
Version de la base de données: 1459
Windows 5.1.2600 Service Pack 3

04/01/2009 09:58:18
mbam-log-2009-01-04 (09-58-18).txt

Type de recherche: Examen rapide
Eléments examinés: 57681
Temps écoulé: 19 minute(s), 28 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 1
Fichier(s) infecté(s): 6

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\mule_st_key (Trojan.Agent) -> Delete on reboot.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
H:\Documents and Settings\Romain Dos Santos\Application Data\m (Trojan.Agent) -> Delete on reboot.

Fichier(s) infecté(s):
H:\Documents and Settings\Romain Dos Santos\Application Data\m\data.oct (Trojan.Agent) -> Quarantined and deleted successfully.
H:\Documents and Settings\Romain Dos Santos\Application Data\m\list.oct (Trojan.Agent) -> Quarantined and deleted successfully.
H:\Documents and Settings\Romain Dos Santos\Application Data\m\srvlist.oct (Trojan.Agent) -> Quarantined and deleted successfully.
H:\WINDOWS\system32\mdelk.exe (Trojan.Spammer) -> Quarantined and deleted successfully.
H:\WINDOWS\system32\wintems.exe (Trojan.Spammer) -> Delete on reboot.
H:\Documents and Settings\Romain Dos Santos\Application Data\m\flec006.exe (Trojan.Agent) -> Delete on reboot.


Merci d'avance pour votre aide !!

clzeroun · Answer

Bonjour,

Le plus simple est de lancer un point de restauration système. Mais en as-tu fait un ?
@+ ... Claude

Zonzard · Answer

C'est bizarre car j'essaie une restauration hier ou avant hier ( j'ai un point de restauration par jour ) et la machine ne veut pas, j'ai un message qui apparait me signalant '' que la restauration n'est pas possible car il n'y a pas eu de modification depuis cette date ''

Utilisateur anonyme · Answer

Salut,

Infection par un bagle :

1-IMPORTANT :
je rappelle que bagle est amené par un crack et qu'il se relance dès que tu te sers de celui ci; même si tu ne sers pas, il peut se relancer de lui même au démarrage de ton PC . En claire :
Essayes surtout de te rappeler si récemment tu n' as pas clicker sur un "patch" ou un "keygen" pour installer un logiciel, un jeu cracké ou avoir une version complète d'un soft , et qu'il ne se soit rien passé de particulier ... C'est la que les bagles s'infiltrent ! Si tu retrouves ce crack en particulier ,scratch tout ( le crack, le soft ou encore les zip concernés). Si tu ne te rappelles plus trop , je te conseille fortement de supprimer tous les cracks qui sont sur ton PC ... ;)



2- Télécharges FindyKill de Chiquitine29 :

http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe

->Enregistres le sur ton bureau et pas ailleurs !

!! Déconnectes toi et fermes toute applications en cours !!

( Si ton anti-virus s'affolle au moment de l'enregistrement ou de l'utilisation de l'outil , ignore l'alerte ...)

-> Cliques sur "FindyKill.exe" pour lancer l'installe de l'outil . Ne touche surtout pas aux paramètres d'installation.


Notes importantes :
* si tu as le prg Elibagla sur ton PC , supprimes le ( risque de conflit entre les deux outils ) .

--> Double cliques sur le raccourci " FindyKill " qui est sur ton bureau .

-->choisis l'option 1 ( recherche ) . Puis laisses travailler l'outil sans rien toucher ...

Une fois terminé, postes le rapport FindyKill.txt qui est généré ...

( Note : le rapport est sauvegardé à la racine du disque -> C:\FindyKill.txt )

PS : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

Zonzard · Answer

Loicdem,

J'ai viré un éventuel dossier suspect, j'ai procédé au scsan par ton logiciel en étant débranché du web et voici le rapport :
( j'ai eu quelques messages :
'' Windows  pas de disque
Exception Processing Message c0000013 Parameters 75qfbf7c 4 75qfbf7c 75qfbf7c'' 3 4 fois )

Le rapport : 



----------------- FindyKill V4.710 ------------------

* User : Romain Dos Santos - ROMAIN
* Emplacement : H:\Program Files\FindyKill
* Outils Mis a jours le 21/12/08 par Chiquitine29
* Recherche effectuée à 11:21:55 le 04/01/2009
* Windows XP - Internet Explorer 7.0.5730.13
 
((((((((((((((((( *** Recherche *** ))))))))))))))))))  
 
 
--------------- [ Processus actifs ] ----------------  
 

H:\WINDOWS\System32\smss.exe
H:\WINDOWS\system32\csrss.exe
H:\WINDOWS\system32\winlogon.exe
H:\WINDOWS\system32\services.exe
H:\WINDOWS\system32\lsass.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\system32\spoolsv.exe
H:\WINDOWS\Explorer.EXE
h:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
H:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
H:\WINDOWS\system32\PnkBstrA.exe
H:\WINDOWS\system32\PnkBstrB.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\system32\ctfmon.exe
H:\Program Files\ooVoo\oovoo.exe
H:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
H:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
H:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
H:\WINDOWS\system32	askmgr.exe
 
--------------- [ Fichiers/Dossiers infectieux ] ----------------  
 
 
»»»» Presence des fichiers dans H: 
 
 
»»»» Presence des fichiers dans H:\WINDOWS 
 
 
»»»» Presence des fichiers dans H:\WINDOWS\Prefetch 
 
Found ! - H:\WINDOWS\prefetch\14954953.EXE-3587492B.pf 
Found ! - H:\WINDOWS\prefetch\14967140.EXE-1DBB98C3.pf 
Found ! - H:\WINDOWS\prefetch\15066750.EXE-078A73D9.pf 
Found ! - H:\WINDOWS\prefetch\15097531.EXE-302DE9F1.pf 
Found ! - H:\WINDOWS\prefetch\157406.EXE-36DEEA2A.pf 
Found ! - H:\WINDOWS\prefetch\164703.EXE-2C7550A9.pf 
Found ! - H:\WINDOWS\prefetch\169781.EXE-2E4093B2.pf 
Found ! - H:\WINDOWS\prefetch\288718.EXE-0347D64D.pf 
Found ! - H:\WINDOWS\prefetch\29528500.EXE-19DB338A.pf 
Found ! - H:\WINDOWS\prefetch\29562921.EXE-252ABF6E.pf 
Found ! - H:\WINDOWS\prefetch\29580609.EXE-28BFA3C9.pf 
Found ! - H:\WINDOWS\prefetch\29671312.EXE-03B38262.pf 
Found ! - H:\WINDOWS\prefetch\29699593.EXE-061841BC.pf 
Found ! - H:\WINDOWS\prefetch\387531.EXE-135B32D6.pf 
Found ! - H:\WINDOWS\prefetch\416921.EXE-2FE91EEA.pf 
Found ! - H:\WINDOWS\prefetch\423796.EXE-26E3E649.pf 
Found ! - H:\WINDOWS\prefetch\455703.EXE-21D53267.pf 
Found ! - H:\WINDOWS\prefetch\510093.EXE-33FB41CD.pf 
Found ! - H:\WINDOWS\prefetch\646000.EXE-0CCA30AE.pf 
Found ! - H:\WINDOWS\prefetch\FLEC006.EXE-074338CE.pf 
Found ! - H:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf 
Found ! - H:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf 
Found ! - H:\WINDOWS\prefetch\WINUPGRO.EXE-21B77AA8.pf 
 
»»»» Presence des fichiers dans H:\WINDOWS\system32 
 
Found ! [04/01/2009 09:07] - H:\WINDOWS\system32\ban_list.txt 
 
»»»» Presence des fichiers dans H:\WINDOWS\system32\config\systemprofile\AppData\Roaming 
 
 
»»»» Presence des fichiers dans H:\WINDOWS\system32\drivers 
 
 
»»»» Presence des fichiers dans H:\Documents and Settings\Romain Dos Santos\Application Data 
 
Found ! [04/01/2009 10:59] - "H:\Documents and Settings\Romain Dos Santos\Application Data\m\flec006.exe" 
Found ! [04/01/2009 10:59] - "H:\Documents and Settings\Romain Dos Santos\Application Data\m\list.oct" 
Found ! [04/01/2009 10:59] - "H:\Documents and Settings\Romain Dos Santos\Application Data\m\data.oct" 
Found ! [04/01/2009 11:00] - "H:\Documents and Settings\Romain Dos Santos\Application Data\m\srvlist.oct" 
Found ! [04/01/2009 11:00] - "H:\Documents and Settings\Romain Dos Santos\Application Data\m\shared" 
Found ! [04/01/2009 11:00] - "H:\Documents and Settings\Romain Dos Santos\Application Data\m" 
Found ! [04/01/2009 00:24] - "H:\Documents and Settings\Romain Dos Santos\Application Data\drivers" 
Found ! [04/01/2009 10:52] - "H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\srosa.sys" 
Found ! [04/01/2009 10:52] - "H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\srosa2.sys" 
Found ! [24/02/2005 04:06] - "H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\winupgro.exe" 
Found ! [04/01/2009 11:01] - "H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld" 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\127046.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\128390.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\128515.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\141984.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\142734.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\142875.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\143421.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\143468.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\143843.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\14888312.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\14939937.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\14940359.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\14940750.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\14954953.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\14967140.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\14971390.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\14971843.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\14972234.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\15012703.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\15012843.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\15013031.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\15029312.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\15030312.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\15030843.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\15031937.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\15033062.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\15034000.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\15054125.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\15055062.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\15058671.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\15066750.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\15075796.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\15076250.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\15076359.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\15114250.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\15117625.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\15118453.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\152234.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\153281.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\153921.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\157406.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\164703.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\169781.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\288718.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\294671.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29521375.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29521984.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29522109.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29528500.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29545000.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29545421.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29545765.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29562921.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29580609.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29586609.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29587234.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29587578.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29623125.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29623234.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29623375.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29639000.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29640125.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29640890.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29641953.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29642968.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29643515.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\296437.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29665093.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29665484.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29665812.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29671312.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\296781.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29678750.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29678921.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29679015.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29699593.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29715453.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29716296.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\29716937.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\311250.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\312171.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\312484.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\346500.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\347062.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\356515.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\357750.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\357921.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\359687.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\361250.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\361671.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\362375.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\363203.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\364000.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\377218.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\378796.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\379171.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\380015.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\380046.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\380656.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\381203.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\382453.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\383156.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\387531.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\393984.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\395515.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\397687.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\410406.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\411625.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\412296.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\416921.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\423796.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\430875.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\431093.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\431671.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\431765.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\432718.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\433343.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\475968.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\477562.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\478125.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\510093.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\515421.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\516734.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\516906.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\524375.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\525078.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\525625.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\551109.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\552109.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\552250.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\568562.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\569984.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\570843.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\571953.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\573937.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\574390.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\595640.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\596828.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\597687.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\607203.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\619265.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\619625.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\619718.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\64328.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\646000.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\661468.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\663359.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\663984.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\68578.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\68671.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\68796.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\73218.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\73437.exe 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Application Data\drivers\downld\79437.exe 
 
»»»» Presence des fichiers dans H:\DOCUME~1\ROMAIN~1\LOCALS~1\Temp 
 
 
»»»» Presence des fichiers dans H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5 
 
Found ! [23/11/2007 20:51] - H:\Documents and Settings\All Users\Application Data\Skype\Plugins\Local Cache\D3987B641C134048B815DB578D607F42_more.jpg 
Found ! [13/11/2008 18:37] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\0GG3MKR1\D36439BF6AFB645FD2B2F5627D57B[1].jpg 
Found ! [04/01/2009 10:02] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\4STFOJNC\b64_1[1].jpg 
Found ! [04/01/2009 11:01] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\4STFOJNC\b64_2[1].jpg 
Found ! [04/01/2009 09:07] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\4STFOJNC\b64_3[1].jpg 
Found ! [04/01/2009 05:05] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\4STFOJNC\mxd[1].jpg 
Found ! [04/01/2009 10:59] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\4STFOJNC\mxd[2].jpg 
Found ! [04/01/2009 09:08] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\G638U9VT\b64[1].jpg 
Found ! [04/01/2009 01:02] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\G638U9VT\b64_1[1].jpg 
Found ! [04/01/2009 05:04] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\G638U9VT\b64_1[2].jpg 
Found ! [04/01/2009 05:07] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\G638U9VT\b64_2[1].jpg 
Found ! [04/01/2009 09:10] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\G638U9VT\b64_2[2].jpg 
Found ! [04/01/2009 10:06] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\G638U9VT\b64_2[3].jpg 
Found ! [03/12/2008 19:33] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\JV3U6769\465B17821B64D17F71B71A14C5C76[1].jpg 
Found ! [04/01/2009 00:58] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\W9BVXIF3\b64_1[1].jpg 
Found ! [04/01/2009 10:53] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\W9BVXIF3\b64_1[2].jpg 
Found ! [04/01/2009 01:03] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\W9BVXIF3\b64_2[1].jpg 
Found ! [04/01/2009 01:00] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\W9BVXIF3\mxd[1].jpg 
Found ! [04/01/2009 09:08] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\W9BVXIF3\mxd[2].jpg 
Found ! [04/01/2009 01:00] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\WXRDX62G\b64[1].jpg 
Found ! [04/01/2009 10:59] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\WXRDX62G\b64[2].jpg 
Found ! [04/01/2009 05:06] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\WXRDX62G\b64_1[1].jpg 
Found ! [04/01/2009 09:08] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\WXRDX62G\b64_1[2].jpg 
Found ! [04/01/2009 09:10] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\WXRDX62G\b64_1[3].jpg 
Found ! [04/01/2009 10:06] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\WXRDX62G\b64_1[4].jpg 
Found ! [04/01/2009 00:56] - H:\Documents and Settings\Romain Dos Santos\Local Settings\Temporary Internet Files\Content.IE5\WXRDX62G\b64_3[1].jpg 
 
--------------- [ Registre / Startup ] ----------------  
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersionun]
   QuickTime Task="H:\Program Files\QuickTime\qttask.exe" -atboottime
   ctfmon.exe=H:\WINDOWS\system32\ctfmon.exe
   RGSC=H:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
   oovoo.exe=H:\Program Files\ooVoo\oovoo.exe /minimized
   Google Update="H:\Documents and Settings\Romain Dos Santos\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersionun]
   QuickTime Task="H:\Program Files\QuickTime\qttask.exe" -atboottime
   avast!=H:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
   iTunesHelper="H:\Program Files\iTunes\iTunesHelper.exe"
   SunJavaUpdateSched="H:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
   StartCCC="H:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
 
[HKEY_CURRENT_USER\software\local appwizard-generated applications\AOLReger]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\install]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\NKC_CD_Viewer]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\qttask]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\Registrar]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\RtlRack]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\winupgro]
 
--------------- [ Registre / Clés infectieuses ] ----------------  
 
 
Found ! - HKEY_USERS\S-1-5-21-436374069-1417001333-839522115-1003\Software\Local AppWizard-Generated Applications\winupgro 
Found ! - HKEY_USERS\S-1-5-21-436374069-1417001333-839522115-1003\Software\bisoft 
Found ! - HKEY_USERS\S-1-5-21-436374069-1417001333-839522115-1003\Software\DateTime4 
Found ! - HKEY_USERS\S-1-5-21-436374069-1417001333-839522115-1003\Software\FFC 
Found ! - HKEY_USERS\S-1-5-21-436374069-1417001333-839522115-1003\Software\FirtR 
Found ! - HKEY_USERS\S-1-5-21-436374069-1417001333-839522115-1003\Software\MuleAppData 
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro 
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa 
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\srosa 
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA 
Found ! - HKEY_CURRENT_USER\Software\bisoft 
Found ! - HKEY_CURRENT_USER\Software\DateTime4 
Found ! - HKEY_CURRENT_USER\Software\FirtR 
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s 
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S 
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SK9OU0S 
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Enum\Root\LEGACY_SK9OU0S 
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s 
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sK9Ou0s 
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\sK9Ou0s 
 
--------------- [ Etat / Services ] ---------------- 
 
Clé manquante : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot 
 
 - sans echec non fonctionnel !! 
 
Clé manquante : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal 
 
 - sans echec non fonctionnel !! 
 
Clé manquante : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network 
 
 - sans echec non fonctionnel !! 
 


+- Services : [ Auto=2 / Demande=3 / Désactivé=4 ] 

 /!\ Ndisuio - Type de démarrage = 4 
 
 EapHost - Type de démarrage = 3 
 
 /!\ Ip6Fw - Type de démarrage = 4 
 
 /!\ SharedAccess - Type de démarrage = 4 
 
 /!\ wuauserv - Type de démarrage = 4 
 
 /!\ wscsvc - Type de démarrage = 4 
 
 
 
--------------- [ Recherche dans supports amovibles] ----------------  
 
 
+- Informations : 

C: - Lecteur fixe

D: - Lecteur fixe

H: - Lecteur fixe

 
+- presence des fichiers :  

 
 
--------------- [ Registre / Mountpoint2 ] ----------------  
 
Found ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b23e2538-b559-11dc-b2d0-0013d3546f66}\Shell\AutoRun\command   
 
 
------------------- ! Fin du rapport ! --------------------

Utilisateur anonyme · Answer

Relance FindyKill option 2 et montre le rapport

Zonzard · Answer

Je crois que c'est un peu plus compliqué que prevu ...

Dès que je lance l'option 2, ca bug et alors apparait un écran bleu de fermeture de windows ' vidange de la mémoire '
et me dit que le problème vient de srosa.sys, j'ai testé 3fois... et pas moyen.

Ensuite ca redémarre en me disant que le système à récupéré d'une erreur sérieuse et j'ai toujours le message d'erreur de kerio " ERROR KFE initialized Failed : Driver not found ".

Qu'en penses-tu ?

Utilisateur anonyme · Answer

Désactive Kerio et réessaie

Zonzard · Answer

Arf!!! toujours le même problème même avec Kerio désactivé ... :(

Je commence à me faire vraiment du souci.

Dès que je lance l'option 2, l'écran bleu d'erreur windows apparait, je laisse la mémoire se vider et au redémarrage, le message d'erreur de kerio + un message me disant que le système à récupéré d'une erreur sérieuse.

Zonzard · Answer

pas moyen de lancer Ccleaner

Zonzard · Answer

Merci,

je viens de faire la démarche et en attendant j'ai fais un scnan avec un .exe trouvé sur le site CCM, voici le lien :

http://www.commentcamarche.net/faq/sujet 2731 virus kit de desinfection pour eradiquer w32 beagle mm bagle

J'ai utilisé le Symentec, il n'a rien trouvé...

ERROR KFE initialized Failed

10 réponses

Discussions similaires