/!\ Pb Winupgro - Findykill

Salut à tous

J'ai choppé le virus winupgro.exe, j'ai donc tout naturellement suivi le tuto de telecharger.com qui explique comment utiliser findykill.exe

Cependant au moment de supprimer les outils malveillants j'ai un message d'erreur vista:
"Impossible de trouver le moteur de script "VBScript" pour le script "C:\Program Files\FindyKill\Tools\Averts.vbs"

Si j'outrepasse le message d'erreur et que je continue sur findykill pour supprimer les méchants outils j'ai un écran bleu dont voici le rapport:

Signature du problème :
Nom d’événement de problème: BlueScreen
Version du système: 6.0.6001.2.1.0.768.3
Identificateur de paramètres régionaux: 1036

Informations supplémentaires sur le problème :
BCCode: ce
BCP1: 8EB7ECC0
BCP2: 00000008
BCP3: 8EB7ECC0
BCP4: 00000000
OS Version: 6_0_6001
Service Pack: 1_0
Product: 768_1

Fichiers aidant à décrire le problème :
C:\Windows\Minidump\Mini010809-01.dmp
C:\Users\Chris\AppData\Local\Temp\WER-41605-0.sysdata.xml
C:\Users\Chris\AppData\Local\Temp\WERFD61.tmp.version.txt

Je précise que je possède vista 32 bits, que findykill v. 4.711 est installé dans son répertoire par défaut, et que je n'aime pas du tout ce winupgro.exe!

Je poste également le rapport findykill:

----------------- FindyKill V4.711 ------------------

* User : Chris - PC-DE-CHRIS
* Emplacement : C:\Program Files\FindyKill
* Outils Mis a jours le 05/01/09 par Chiquitine29
* Recherche effectuée à 16:34:43 le 08/01/2009
* Windows Vista - Internet Explorer 7.0.6001.18000

((((((((((((((((( *** Recherche *** ))))))))))))))))))

--------------- [ Processus actifs ] ----------------

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
C:\Program Files\DU Meter\DUMeterSvc.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\IoctlSvc.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\DU Meter\DUMeter.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\conime.exe
C:\Program Files\Internet Explorer\iexplore.exe

--------------- [ Fichiers/Dossiers infectieux ] ----------------

»»»» Presence des fichiers dans C:

»»»» Presence des fichiers dans C:\Windows

»»»» Presence des fichiers dans C:\Windows\Prefetch

»»»» Presence des fichiers dans C:\Windows\system32

Found ! [08/01/2009 16:11] - C:\Windows\system32\mdelk.exe
Found ! [08/01/2009 16:11] - C:\Windows\system32\wintems.exe
Found ! [08/01/2009 16:11] - C:\Windows\system32\ban_list.txt

»»»» Presence des fichiers dans C:\Windows\system32\drivers

»»»» Presence des fichiers dans C:\Users\Chris\AppData\Roaming

Found ! [08/01/2009 15:38] - "C:\Users\Chris\AppData\Roaming\m\flec006.exe"
Found ! [08/01/2009 15:38] - "C:\Users\Chris\AppData\Roaming\m\list.oct"
Found ! [08/01/2009 15:39] - "C:\Users\Chris\AppData\Roaming\m\data.oct"
Found ! [08/01/2009 15:39] - "C:\Users\Chris\AppData\Roaming\m\srvlist.oct"
Found ! [08/01/2009 16:12] - "C:\Users\Chris\AppData\Roaming\m\shared"
Found ! [30/12/2008 14:55] - "C:\Users\Chris\AppData\Roaming\m"
Found ! [29/12/2008 21:04] - "C:\Users\Chris\AppData\Roaming\drivers"
Found ! [08/01/2009 16:11] - "C:\Users\Chris\AppData\Roaming\drivers\srosa.sys"
Found ! [08/01/2009 16:11] - "C:\Users\Chris\AppData\Roaming\drivers\srosa2.sys"
Found ! [09/06/2004 04:04] - "C:\Users\Chris\AppData\Roaming\drivers\winupgro.exe"
Found ! [08/01/2009 16:12] - "C:\Users\Chris\AppData\Roaming\drivers\downld"

»»»» Presence des fichiers dans C:\Users\Chris\AppData\Local\Temp

»»»» Presence des fichiers dans C:\Users\Chris\Local Settings\Temporary Internet Files\Content.IE5

Found ! [30/12/2008 14:56] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\55MYKLEI\b64_1[1].jpg
Found ! [07/01/2009 10:02] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BCR4S8WR\b64[2].jpg
Found ! [08/01/2009 15:38] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BCR4S8WR\b64_1[1].jpg
Found ! [08/01/2009 16:02] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BCR4S8WR\b64_3[1].jpg
Found ! [08/01/2009 16:11] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BCR4S8WR\b64_3[2].jpg
Found ! [08/01/2009 15:37] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BCR4S8WR\file[1].txt
Found ! [30/12/2008 19:03] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DBFL35HD\b64_1[1].jpg
Found ! [30/12/2008 10:51] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DBFL35HD\b64_2[1].jpg
Found ! [30/12/2008 10:45] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DBFL35HD\b64_3[1].jpg
Found ! [08/01/2009 15:38] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NMMKHGRZ\b64[1].jpg
Found ! [08/01/2009 16:03] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NMMKHGRZ\file[1].txt
Found ! [08/01/2009 16:11] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NMMKHGRZ\file[2].txt
Found ! [30/12/2008 23:07] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P5M22ZM2\b64[1].jpg
Found ! [31/12/2008 03:18] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P5M22ZM2\b64_2[1].jpg
Found ! [31/12/2008 07:24] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P5M22ZM2\b64_2[2].jpg
Found ! [30/12/2008 18:57] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P5M22ZM2\b64_3[1].jpg
Found ! [31/12/2008 03:11] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P5M22ZM2\b64_3[2].jpg
Found ! [31/12/2008 07:18] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P5M22ZM2\b64_3[3].jpg
Found ! [07/01/2009 10:02] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U0B8R0NU\b64_1[1].jpg
Found ! [08/01/2009 15:41] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U0B8R0NU\b64_1[2].jpg
Found ! [07/01/2009 10:03] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U0B8R0NU\b64_1[3].jpg
Found ! [08/01/2009 16:04] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U0B8R0NU\b64_1[4].jpg
Found ! [07/01/2009 10:04] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U0B8R0NU\b64_2[1].jpg
Found ! [08/01/2009 15:42] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U0B8R0NU\b64_2[2].jpg
Found ! [07/01/2009 10:00] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U0B8R0NU\b64_3[1].jpg
Found ! [08/01/2009 15:37] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U0B8R0NU\b64_3[2].jpg
Found ! [30/12/2008 14:54] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XJNTUDK1\b64[1].jpg
Found ! [30/12/2008 19:01] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XJNTUDK1\b64[2].jpg
Found ! [31/12/2008 07:19] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XJNTUDK1\b64[3].jpg
Found ! [30/12/2008 23:10] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XJNTUDK1\b64_1[1].jpg
Found ! [30/12/2008 23:11] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XJNTUDK1\b64_2[1].jpg
Found ! [30/12/2008 23:05] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XJNTUDK1\b64_3[1].jpg
Found ! [31/12/2008 08:08] - C:\Users\Chris\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XJNTUDK1\file[1].txt

--------------- [ Registre / Startup ] ----------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
SmpcSys=C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
DAEMON Tools Lite="C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
DU Meter=C:\Program Files\DU Meter\DUMeter.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
Windows Defender=%ProgramFiles%\Windows Defender\MSASCui.exe -hide
StartCCC="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
RtHDVCpl=RtHDVCpl.exe
SynTPEnh=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
toolbar_eula_launcher=C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
Adobe Reader Speed Launcher="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
QuickTime Task="C:\Program Files\QuickTime\QTTask.exe" -atboottime
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
<NO NAME>=

[HKEY_CURRENT_USER\software\local appwizard-generated applications\key_gen]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\SmpSys]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\winupgro]

--------------- [ Registre / Clés infectieuses ] ----------------

Found ! - HKEY_USERS\S-1-5-21-629213380-849445679-3234197376-1000\Software\Local AppWizard-Generated Applications\winupgro
Found ! - HKEY_USERS\S-1-5-21-629213380-849445679-3234197376-1000\Software\bisoft
Found ! - HKEY_USERS\S-1-5-21-629213380-849445679-3234197376-1000\Software\DateTime4
Found ! - HKEY_USERS\S-1-5-21-629213380-849445679-3234197376-1000\Software\FFC
Found ! - HKEY_USERS\S-1-5-21-629213380-849445679-3234197376-1000\Software\FirtR
Found ! - HKEY_USERS\S-1-5-21-629213380-849445679-3234197376-1000\Software\MuleAppData
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sK9Ou0s
Found ! - HKEY_CURRENT_USER\Software\bisoft
Found ! - HKEY_CURRENT_USER\Software\DateTime4
Found ! - HKEY_CURRENT_USER\Software\FirtR
Found ! - HKEY_CURRENT_USER\Software\MuleAppData
Found ! - HKEY_CURRENT_USER\Software\FFC

/!\ Infection active : HKLM\SYSTEM\...\Services\srosa -> Start = 0x1
/!\ Infection active : HKLM\SYSTEM\...\Services\sK9Ou0s -> Start = 0x1

--------------- [ Etat / Services ] ----------------

+- Services : [ Auto=2 / Demande=3 / Désactivé=4 ]

/!\ Ndisuio - Type de démarrage = 4

EapHost - Type de démarrage = 3

Wlansvc - Type de démarrage = 2

/!\ SharedAccess - Type de démarrage = 4

/!\ wuauserv - Type de démarrage = 4

/!\ wscsvc - Type de démarrage = 4

/!\ WinDefend - Type de démarrage = 4

/!\ UAC is Disable

--------------- [ Recherche dans supports amovibles] ----------------

+- Informations :

C: - Lecteur fixe
D: - Lecteur de CD-ROM
O: - Lecteur fixe

+- Contenu de l'autorun : D:\autorun.inf

[autorun]
Label=PCSuite
open=Start.exe
icon=CDBrowser\images\CD_Browser_ICN.ico

+- presence des fichiers :

Found ! [12/03/2007 10:55][-r-------] - D:\autorun.inf

--------------- [ Registre / Mountpoint2 ] ----------------

-> Not found !

------------------- ! Fin du rapport ! --------------------

Merci à tous pour votre aide et meilleurs vœux 2009!