Winupgro

KAT -  
Bonjour,
j'ai chopé le virus winupgro.
comment m'en débarasser..?
est ce à cause de lui que je n'ai plus de son..?
merci
Configuration: Windows XP
Internet Explorer 7.0

2 réponses

  • Votes
  • Date
  • Date décroissante
  1. crapoulou Modérateur
    Salut,
    Télécharge FindyKill (Merci à Chiquitine29 !!)
    = = = = >>> En cliquant ici <<< = = = =

    Fais un clic droit sur le lien, Enregistrer la cible sous (Internet Explorer) ou Enregistrer la cible du lien sous (Firefox) …
    Choisis d’enregistrer le fichier sur le bureau.

    Double clique sur FindyKill.exe
    Choisis l’option 1 (Recherche)
    Un rapport va s’ouvrir, poste le dans ta prochaine réponse.

    Note :
    Le rapport FindyKill.txt est sauvegardé à la racine du disque (C:\FindyKill.txt)
    1. KAT
      voilà le rapport.
      merci

      ----------------- FindyKill V4.711 ------------------

      * User : kat - KAT-LOQ1XM5AGZF
      * Emplacement : C:\Program Files\FindyKill
      * Outils Mis a jours le 05/01/09 par Chiquitine29
      * Recherche effectuée à 20:34:57 le 12/01/2009
      * Windows XP - Internet Explorer 7.0.5730.13

      ((((((((((((((((( *** Recherche *** ))))))))))))))))))

      --------------- [ Processus actifs ] ----------------

      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\rundll32.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE
      C:\Documents and Settings\kat\Application Data\drivers\winupgro.exe
      C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Windows Live\Messenger\usnsvc.exe

      --------------- [ Processus infectieux stoppés ] ----------------

      "C:\Documents and Settings\kat\Application Data\drivers\winupgro.exe" (1584)

      --------------- [ Fichiers/Dossiers infectieux ] ----------------

      »»»» Presence des fichiers dans C:

      »»»» Presence des fichiers dans C:\WINDOWS

      »»»» Presence des fichiers dans C:\WINDOWS\Prefetch

      Found ! - C:\WINDOWS\prefetch\149234.EXE-14B0A66B.pf
      Found ! - C:\WINDOWS\prefetch\185453.EXE-149BA829.pf
      Found ! - C:\WINDOWS\prefetch\265890.EXE-216CAEEC.pf
      Found ! - C:\WINDOWS\prefetch\269296.EXE-2B84C6A9.pf
      Found ! - C:\WINDOWS\prefetch\284859.EXE-20B2D5E6.pf
      Found ! - C:\WINDOWS\prefetch\340000.EXE-0266386D.pf
      Found ! - C:\WINDOWS\prefetch\374156.EXE-17673661.pf
      Found ! - C:\WINDOWS\prefetch\474984.EXE-0A757197.pf
      Found ! - C:\WINDOWS\prefetch\624500.EXE-37AE8149.pf
      Found ! - C:\WINDOWS\prefetch\893656.EXE-2D6B42DE.pf
      Found ! - C:\WINDOWS\prefetch\FLEC006.EXE-1ACBF2A8.pf
      Found ! - C:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf
      Found ! - C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf
      Found ! - C:\WINDOWS\prefetch\WINUPGRO.EXE-101AF362.pf
      Found ! - C:\WINDOWS\Prefetch\INSTALL_PATCH.EXE-241B4894.pf

      »»»» Presence des fichiers dans C:\WINDOWS\system32

      Found ! [12/01/2009 18:10] - C:\WINDOWS\system32\mdelk.exe
      Found ! [12/01/2009 18:10] - C:\WINDOWS\system32\wintems.exe
      Found ! [12/01/2009 20:01] - C:\WINDOWS\system32\ban_list.txt

      »»»» Presence des fichiers dans C:\WINDOWS\system32\drivers

      »»»» Presence des fichiers dans C:\Documents and Settings\kat\Application Data

      Found ! [12/01/2009 18:12] - "C:\Documents and Settings\kat\Application Data\m\flec006.exe"
      Found ! [12/01/2009 18:12] - "C:\Documents and Settings\kat\Application Data\m\list.oct"
      Found ! [12/01/2009 18:13] - "C:\Documents and Settings\kat\Application Data\m\data.oct"
      Found ! [12/01/2009 18:13] - "C:\Documents and Settings\kat\Application Data\m\srvlist.oct"
      Found ! [12/01/2009 19:05] - "C:\Documents and Settings\kat\Application Data\m\shared"
      Found ! [11/01/2009 14:41] - "C:\Documents and Settings\kat\Application Data\m"
      Found ! [11/01/2009 14:27] - "C:\Documents and Settings\kat\Application Data\drivers"
      Found ! [12/01/2009 18:59] - "C:\Documents and Settings\kat\Application Data\drivers\srosa.sys"
      Found ! [12/01/2009 18:59] - "C:\Documents and Settings\kat\Application Data\drivers\srosa2.sys"
      Found ! [02/10/2004 05:04] - "C:\Documents and Settings\kat\Application Data\drivers\winupgro.exe"
      Found ! [12/01/2009 19:51] - "C:\Documents and Settings\kat\Application Data\drivers\downld"

      »»»» Presence des fichiers dans C:\DOCUME~1\kat\LOCALS~1\Temp

      »»»» Presence des fichiers dans C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5

      Found ! [11/01/2009 19:06] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64[1].jpg
      Found ! [11/01/2009 20:07] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64[2].jpg
      Found ! [11/01/2009 20:20] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64[3].jpg
      Found ! [11/01/2009 14:40] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64_1[1].jpg
      Found ! [11/01/2009 15:01] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64_1[2].jpg
      Found ! [11/01/2009 19:09] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64_1[3].jpg
      Found ! [12/01/2009 18:50] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64_1[4].jpg
      Found ! [12/01/2009 19:07] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64_1[5].jpg
      Found ! [11/01/2009 15:04] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64_2[1].jpg
      Found ! [11/01/2009 14:38] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64_3[1].jpg
      Found ! [11/01/2009 14:56] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64_3[2].jpg
      Found ! [11/01/2009 19:07] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\file[1].txt
      Found ! [12/01/2009 18:13] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\servernames[1].htm
      Found ! [12/01/2009 11:46] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\H5QUC2HR\b64_1[1].jpg
      Found ! [12/01/2009 11:48] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\H5QUC2HR\b64_1[2].jpg
      Found ! [11/01/2009 19:05] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\H5QUC2HR\b64_3[1].jpg
      Found ! [11/01/2009 14:39] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\H5QUC2HR\file[1].txt
      Found ! [11/01/2009 19:09] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\H5QUC2HR\servernames[1].htm
      Found ! [11/01/2009 15:01] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\b64[1].jpg
      Found ! [12/01/2009 11:46] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\b64[2].jpg
      Found ! [11/01/2009 14:34] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\b64_1[1].jpg
      Found ! [11/01/2009 14:46] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\b64_1[2].jpg
      Found ! [11/01/2009 20:07] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\b64_1[3].jpg
      Found ! [11/01/2009 20:22] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\b64_1[4].jpg
      Found ! [12/01/2009 18:15] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\b64_1[5].jpg
      Found ! [11/01/2009 19:09] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\b64_2[1].jpg
      Found ! [12/01/2009 19:49] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\b64_2[2].jpg
      Found ! [11/01/2009 20:18] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\b64_3[1].jpg
      Found ! [12/01/2009 20:01] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\file[1].txt
      Found ! [11/01/2009 14:34] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64[1].jpg
      Found ! [11/01/2009 14:41] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64[2].jpg
      Found ! [12/01/2009 18:12] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64[3].jpg
      Found ! [12/01/2009 19:07] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64[4].jpg
      Found ! [11/01/2009 15:04] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64_1[1].jpg
      Found ! [11/01/2009 20:20] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64_1[2].jpg
      Found ! [12/01/2009 19:48] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64_1[3].jpg
      Found ! [11/01/2009 14:50] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64_2[1].jpg
      Found ! [11/01/2009 20:10] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64_2[2].jpg
      Found ! [12/01/2009 11:49] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64_2[3].jpg
      Found ! [12/01/2009 18:16] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64_2[4].jpg
      Found ! [12/01/2009 11:45] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64_3[1].jpg
      Found ! [12/01/2009 18:10] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64_3[2].jpg
      Found ! [11/01/2009 14:32] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64_5[1].jpg
      Found ! [11/01/2009 14:56] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\file[1].txt
      Found ! [12/01/2009 18:13] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\mxd[1].jpg
      Found ! [11/01/2009 14:41] - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\servernames[1].htm
      Found ! [26/01/2001 10:23] - C:\Documents and Settings\kat\Mes documents\office 2003\FILES\OSP\1033\FILES\WINDOWS\HELP\PSS10.TXT
      Found ! [22/02/1999 18:29] - C:\Documents and Settings\kat\Mes documents\office 2003\FILES\PFILES\MSOFFICE\OFFICE10\1033\FILTERS.TXT

      --------------- [ Registre / Startup ] ----------------

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
      CTFMON.EXE=C:\WINDOWS\system32\ctfmon.exe
      EPSON Stylus DX4400 Series=C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE /FU "C:\WINDOWS\TEMP\E_S9A.tmp" /EF "HKCU"
      swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      Netlog Music Tool="C:\Program Files\Netlog Music Tool\NetlogMusicTool.exe"
      BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}="C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
      geiko="c:\documents and settings\kat\local settings\application data\geiko.exe" geiko
      98206738360933301361063565652608=C:\Program Files\Antivirus 2009\av2009.exe

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
      SunJavaUpdateSched="C:\Program Files\Java\jre6\bin\jusched.exe"
      Adobe Reader Speed Launcher="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
      NWEReboot=
      NeroFilterCheck=C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
      KMConfig="C:\Program Files\Multimedia Mouse Driver\V5\StartAutorun.exe" KMConfig.exe
      ac4b1d28=rundll32.exe "C:\WINDOWS\system32\liopdekn.dll",b
      avast!=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
      <NO NAME>=
      HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
      Installed=1
      <NO NAME>=
      HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
      Installed=1
      NoChange=1
      <NO NAME>=
      HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
      Installed=1
      <NO NAME>=

      [HKEY_CURRENT_USER\software\local appwizard-generated applications\GoogleToolbarNotifier]
      [HKEY_CURRENT_USER\software\local appwizard-generated applications\install_patch]
      [HKEY_CURRENT_USER\software\local appwizard-generated applications\winupgro]

      --------------- [ Registre / Clés infectieuses ] ----------------

      Found ! - HKEY_USERS\S-1-5-21-1454471165-1580818891-1417001333-1004\Software\Local AppWizard-Generated Applications\install_patch
      Found ! - HKEY_USERS\S-1-5-21-1454471165-1580818891-1417001333-1004\Software\Local AppWizard-Generated Applications\winupgro
      Found ! - HKEY_USERS\S-1-5-21-1454471165-1580818891-1417001333-1004\Software\bisoft
      Found ! - HKEY_USERS\S-1-5-21-1454471165-1580818891-1417001333-1004\Software\DateTime4
      Found ! - HKEY_USERS\S-1-5-21-1454471165-1580818891-1417001333-1004\Software\FFC
      Found ! - HKEY_USERS\S-1-5-21-1454471165-1580818891-1417001333-1004\Software\FirtR
      Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\install_patch
      Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro
      Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa
      Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa
      Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa
      Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
      Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA
      Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA
      Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
      Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SK9OU0S
      Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SK9OU0S
      Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s
      Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sK9Ou0s
      Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sK9Ou0s
      Found ! - HKEY_CURRENT_USER\Software\bisoft
      Found ! - HKEY_CURRENT_USER\Software\DateTime4
      Found ! - HKEY_CURRENT_USER\Software\FirtR

      /!\ Infection active : HKLM\SYSTEM\...\Services\srosa -> Start = 0x1
      /!\ Infection active : HKLM\SYSTEM\...\Services\sK9Ou0s -> Start = 0x1

      --------------- [ Etat / Services ] ----------------

      Clé manquante : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot

      /!\ Mode sans echec non fonctionnel !!

      Clé manquante : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal

      /!\ Mode sans echec non fonctionnel !!

      Clé manquante : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network

      /!\ Mode sans echec non fonctionnel !!

      +- Services : [ Auto=2 / Demande=3 / Désactivé=4 ]

      /!\ Ndisuio - Type de démarrage = 4

      EapHost - Type de démarrage = 3

      /!\ Ip6Fw - Type de démarrage = 4

      /!\ SharedAccess - Type de démarrage = 4

      /!\ wuauserv - Type de démarrage = 4

      /!\ wscsvc - Type de démarrage = 4

      --------------- [ Recherche dans supports amovibles] ----------------

      +- Informations :

      C: - Lecteur fixe

      +- presence des fichiers :

      --------------- [ Registre / Mountpoint2 ] ----------------

      -> Not found !

      ------------------- ! Fin du rapport ! --------------------
  2. crapoulou Modérateur
    Nettoyage :

    --> Double clic sur le raccourci FindyKill sur ton bureau
    --> Au menu principal, choisis l’option 2 (Suppression)

    /!\ Il y aura deux redémarrages, laisse travailler l’outil jusqu’à l’apparition du message "nettoyage effectué" /!\

    /!\ Ne te sert pas du pc durant la suppression, ton bureau ne sera pas accessible, c’est normal ! /!\

    Ensuite poste le rapport FindyKill.txt

    Notes :
    * Le rapport FindyKill.txt est sauvegardé à la racine du disque (C:\ FindyKill.txt)
    * Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr, Onglet "Fichier", "Nouvelle tâche", tape explorer.exe et valide
    1. Utilisateur anonyme
      Réponse supprimée
      0
      1. KAT
        ----------------- FindyKill V4.711 ------------------

        * User : kat - KAT-LOQ1XM5AGZF
        * executed from : C:\Program Files\FindyKill
        * Update on 05/01/09 par Chiquitine29
        * Start at 20:51:48 the 12/01/2009
        * Windows XP - Internet Explorer 7.0.5730.13

        ((((((((((((((( *** deleting *** ))))))))))))))))))

        --------------- [ Active Processes ] ----------------

        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\csrss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\logonui.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE
        C:\Program Files\Java\jre6\bin\jqs.exe
        C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
        C:\WINDOWS\system32\userinit.exe

        --------------- [ Infected files / folders ] ----------------

        »»»» Supression files in C:

        »»»» Supression files in C:\WINDOWS

        »»»» Supression files in C:\WINDOWS\Prefetch

        Deleted ! - C:\WINDOWS\prefetch\149234.EXE-14B0A66B.pf
        Deleted ! - C:\WINDOWS\prefetch\185453.EXE-149BA829.pf
        Deleted ! - C:\WINDOWS\prefetch\265890.EXE-216CAEEC.pf
        Deleted ! - C:\WINDOWS\prefetch\269296.EXE-2B84C6A9.pf
        Deleted ! - C:\WINDOWS\prefetch\284859.EXE-20B2D5E6.pf
        Deleted ! - C:\WINDOWS\prefetch\340000.EXE-0266386D.pf
        Deleted ! - C:\WINDOWS\prefetch\374156.EXE-17673661.pf
        Deleted ! - C:\WINDOWS\prefetch\474984.EXE-0A757197.pf
        Deleted ! - C:\WINDOWS\prefetch\624500.EXE-37AE8149.pf
        Deleted ! - C:\WINDOWS\prefetch\893656.EXE-2D6B42DE.pf
        Deleted ! - C:\WINDOWS\prefetch\FLEC006.EXE-1ACBF2A8.pf
        Deleted ! - C:\WINDOWS\prefetch\INSTALL_PATCH.EXE-241B4894.pf
        Deleted ! - C:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf
        Deleted ! - C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf
        Deleted ! - C:\WINDOWS\prefetch\WINUPGRO.EXE-101AF362.pf

        »»»» Supression files in C:\WINDOWS\system32

        Deleted ! - C:\WINDOWS\system32\mdelk.exe
        Deleted ! - C:\WINDOWS\system32\wintems.exe
        Deleted ! - C:\WINDOWS\system32\ban_list.txt

        »»»» Supression files in C:\WINDOWS\system32\drivers

        »»»» Supression files in C:\Documents and Settings\kat\Application Data

        Deleted ! - "C:\Documents and Settings\kat\Application Data\m\flec006.exe"
        Deleted ! - "C:\Documents and Settings\kat\Application Data\m\list.oct"
        Deleted ! - "C:\Documents and Settings\kat\Application Data\m\data.oct"
        Deleted ! - "C:\Documents and Settings\kat\Application Data\m\srvlist.oct"
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\!Nod32.2.50.25.PL.+.crack.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\1st Choice Zip 4.71671.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\360Pano-Unwrapper 1.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\5star Mobile Video v1.5.6.223 Bilingual crack(1).zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Active Table Editor 3.1.5.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\AD File Transmitter 1.5.1.50.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\ADG Panorama Tools 5.3.0.44.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Aimersoft Nokia Media Converter 1.0.1.17.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Alive Address Book 1.8.2.152.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\All Sound Editor XP 1.1.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Alparysoft Deinterlace filter 2.0 Build 343.061116.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\AnetTest 1.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Antivir.Pe.Premium.Hbedv.Key.Lizenz.6.30.Deutsch.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\AntiVir.Personal.Edition.Premium.7.-.Setup.&.Key.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\APU 1.04.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\ArcSoft PhotoBase Deluxe 4.5.9.83.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Astrology 1.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Attribute Changer 6.10a.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Audio Video Screensaver 1.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Aurigma Graphics Mill 2.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Avalinks 1.0.3.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Backcountry Christmas 1.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Batmobiles 1.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\BetBug 2.2.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\BREAKTRU Percent 4.7.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\BrowserSecurityCheck 1.0.0.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Calenz 1.3.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\CamControl (Mobotix) 1.001.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Charmed Screensaver.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Cheap Ink Font 1.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\ClubControl 4.1.31704.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\ColorZilla 2.0.1.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Cool Free All Video to AVI DIVX Converter 6.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\DigiGenius Sound Recorder 3.6.6.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Digigenius Video to PSP Converter 3.6.4.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\DJ2000 1.6.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Dog Training Pro 1.34.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Downloader 4.0.0.1.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\DTMF Dial 1.0.0.14.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\e-PDF To HTML Converter 2.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\EasySpeech 2.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\ELVIS6 SUPERSCOPES 3D.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Estate Guardian 10 6.3.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Everest Dictionary with databases 3.10.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\existence screensaver 01.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\EZ-DepositSlip 2.1.1.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\F1History 1.15.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Fast DVD Cloner 6.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\FileRecovery for MemoryStick 2.1.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Folder Encryption Dog Premium 2.8.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Forest Vistas Screensaver.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Free GIF2SWF Converter 1.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Functions 3D 1.3.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Google Maps Opera Widget 1.2.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\GPRSim.net 1.0.6.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Hotspot Builder 1.3.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Hummer Various Screensaver 3.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\IE1Window 0.9.5 Beta.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Image Clip Hunter 8.10.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\ImagesResizeTool 1.6.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\iMiniMe 3.01.01.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Instant Scientific Calculator Spreadsheet 1.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Irrep.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\JavaPK for Desktop 2.1.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\K-3D 0.7.9.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\KaKa Folder Protector 5.34.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Kaspersky.Anti-Virus.Personal.Pro.5.0.12.german.by.Reddy.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\KeeCryptLib 1.0.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Law of Attraction Notebook 1.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\LockLizard Protector 2.01.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\LoneMail Scanner 1.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\MailSend 7.30.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Mammoth Icons.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Marbles+ - The Cross Puzzle 1.1.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Mcafee.Memokit.v3.1.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Mcafeeve-v10.0.(Mcafee.Viruscan.10.0).zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Memory Cleaner 1.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\MIDI-TO-MP3 1.2.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\monitorApp 1.02.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\MP3 Filename Formatter 5.112.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Multi Currency Converter 1.5.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\MyJAL MediaPal 3.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\New Life SoftLock.net 1.2.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Nic's XviD Codec 1.1.0 b2 Build 6.04.2005.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\NoCache 1.52.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\OEMLogo 1.00.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Panda.Platinum.2006.Internet.Security.Final.WinAll.Crack.Keygen GEAR.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Photo-Essence PhotoStudio 2.1.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\phpEditorIDE 5.3.3.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Pop DVD Ripper 1.1.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Porsche 908 Screensaver 1.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Portable Drive Speed Checker 1.5.5.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Portable DVD Identifier 5.0.1.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\PPT To Flash Studio Standard 1.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Preggers 1.01.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\PSP Video Express 1.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Qedoc Author 1.02.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\RED CIRCLE 1.5.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Regjump 1.01.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\SAT Words College 1.2.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Sega Wonderboy v1.0 (240x320) Nokia N92 N93 N73 E61 N71 E50_adapted.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\SEOUL 1.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Simnor Metronome 1.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Softcode Analog Clock 1.3b.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Source+ 2000 1.2.0.1923.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\SpamSource 4.0.5.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\SpiceCharts 3D Vertical Bar Chart 1.6.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\StartupList 2.02.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Symantec.Enterprise.VPN.Client.8.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Symantec.Norton.AntiVirus.2007.Full.Retail.CD.by.yariku44.[English].zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Talking Calculator 1.2.2.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\teu_FRTK_TeaM_Antivir_2006.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\TheLaptopLock 0.9.4.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\todo 1.3.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Total Audio Tags 1.2.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Transcreen 1.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Video Converter 2007 1.1.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Visual TCPIP Router 1.00.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Weather Underground Vista Gadget 1.1.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Webmail Retriever for Hotmail 6.0.0.6.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\WebRainbow 1.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Westend Theatre Booking Management System 1.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Wonsz 2.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\Wordz Toolbar for Internet Explorer 1.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\WorldCup Beauties Screensaver 1.0.zip
        Deleted ! - C:\Documents and Settings\kat\Application Data\m\shared\XLDS 1.zip
        Deleted ! - "C:\Documents and Settings\kat\Application Data\m\shared"
        Deleted ! - "C:\Documents and Settings\kat\Application Data\m"
        Deleted ! - "C:\Documents and Settings\kat\Application Data\drivers\srosa.sys"
        Deleted ! - "C:\Documents and Settings\kat\Application Data\drivers\srosa2.sys"
        Deleted ! - "C:\Documents and Settings\kat\Application Data\drivers\winupgro.exe"
        Deleted ! - "C:\Documents and Settings\kat\Application Data\drivers\downld"
        Deleted ! - "C:\Documents and Settings\kat\Application Data\drivers"

        »»»» Supression files in C:\DOCUME~1\kat\LOCALS~1\Temp

        »»»» Supression files in C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5

        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64[1].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64[2].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64[3].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64_1[1].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64_1[2].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64_1[3].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64_1[4].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64_1[5].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64_2[1].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64_3[1].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\b64_3[2].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\file[1].txt
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\90UYFLWV\servernames[1].htm
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\H5QUC2HR\b64_1[1].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\H5QUC2HR\b64_1[2].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\H5QUC2HR\b64_3[1].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\H5QUC2HR\file[1].txt
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\H5QUC2HR\servernames[1].htm
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\b64[1].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\b64[2].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\b64_1[1].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\b64_1[2].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\b64_1[3].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\b64_1[4].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\b64_1[5].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\b64_2[1].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\b64_2[2].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\b64_3[1].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\Q4U4PO47\file[1].txt
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64[1].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64[2].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64[3].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64[4].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64_1[1].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64_1[2].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64_1[3].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64_2[1].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64_2[2].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64_2[3].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64_2[4].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64_3[1].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64_3[2].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\b64_5[1].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\file[1].txt
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\mxd[1].jpg
        Deleted ! - C:\Documents and Settings\kat\Local Settings\Temporary Internet Files\Content.IE5\UNP43JX3\servernames[1].htm

        --------------- [ Registry / Infected keys ] ----------------

        Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa
        Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA
        Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
        Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SK9OU0S
        Deleted ! - HKEY_CURRENT_USER\Software\bisoft
        Deleted ! - HKEY_CURRENT_USER\Software\DateTime4
        Deleted ! - HKEY_CURRENT_USER\Software\FirtR
        Deleted ! - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mdelk.exe
        Deleted ! - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wintems.exe
        Deleted ! - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\flec006.exe
        Deleted ! - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\hldrrr.exe
        Deleted ! - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winfilse.exe
        Deleted ! - HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winupgro.exe
        Deleted ! - HKEY_USERS\S-1-5-21-1454471165-1580818891-1417001333-1004\Software\Local AppWizard-Generated Applications\install_patch
        Deleted ! - HKEY_USERS\S-1-5-21-1454471165-1580818891-1417001333-1004\Software\Local AppWizard-Generated Applications\winupgro
        Deleted ! - HKEY_USERS\S-1-5-21-1454471165-1580818891-1417001333-1004\Software\FFC

        --------------- [ States / Restarting of services ] ----------------

        +- Safe boot mode restored !

        +- Services : [ Auto=2 / Request=3 / Disable=4 ]

        Ndisuio - Type of startup = 3

        EapHost - Type of startup = 2

        Ip6Fw - Type of startup = 2

        SharedAccess - Type of startup = 2

        wuauserv - Type of startup = 2

        wscsvc - Type of startup = 2

        --------------- [ Cleaning removable drives ] ----------------

        +- Informations :

        C: - Lecteur fixe

        +- deleting files :

        --------------- [ Registry / Mountpoint2 ] ----------------

        -> Not found !

        --------------- [ Searching Other Infections ] ----------------

        Références de comparaison Bagle MD5 :

        113ac36b77630a2f67dd6cb7844406a4 C:\WINDOWS\system32\mdelk.exe
        113ac36b77630a2f67dd6cb7844406a4 C:\WINDOWS\system32\wintems.exe
        ebe38e2fcd97bfaf184cd5386100b529 C:\Documents and Settings\kat\Application Data\drivers\winupgro.exe

        Suspect ! - ebe38e2fcd97bfaf184cd5386100b529 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

        --------------- [ Searching Cracks / Keygen ] ----------------

        C:\Documents and Settings\kat\Mes documents\Keygen
        C:\Documents and Settings\kat\Mes documents\ad aware\Lavasoft Ad-Aware 2007 Professional Edition v7.0.1.3 Incl-Crack.Eng-Ita-Deu- French -Esp Par Nac Nacer Du 69 Lyon xcellent pour Windows vista [Found Via]
        C:\Documents and Settings\kat\Mes documents\ad aware\Lavasoft Ad-Aware 2007 Professional Edition v7.0.1.3 Incl-Crack.Eng-Ita-Deu- French -Esp Par Nac Nacer Du 69 Lyon xcellent pour Windows vista [Found Via]\aaw2007.exe
        C:\Documents and Settings\kat\Mes documents\ad aware\Lavasoft Ad-Aware 2007 Professional Edition v7.0.1.3 Incl-Crack.Eng-Ita-Deu- French -Esp Par Nac Nacer Du 69 Lyon xcellent pour Windows vista [Found Via]\Crack
        C:\Documents and Settings\kat\Mes documents\ad aware\Lavasoft Ad-Aware 2007 Professional Edition v7.0.1.3 Incl-Crack.Eng-Ita-Deu- French -Esp Par Nac Nacer Du 69 Lyon xcellent pour Windows vista [Found Via]\Crack\Ad-Aware2007.exe
        C:\Documents and Settings\kat\Mes documents\ad aware\Lavasoft Ad-Aware 2007 Professional Edition v7.0.1.3 Incl-Crack.Eng-Ita-Deu- French -Esp Par Nac Nacer Du 69 Lyon xcellent pour Windows vista [Found Via]\Crack\Ad-Watch2007.exe
        C:\Documents and Settings\kat\Mes documents\ad aware\Lavasoft Ad-Aware 2007 Professional Edition v7.0.1.3 Incl-Crack.Eng-Ita-Deu- French -Esp Par Nac Nacer Du 69 Lyon xcellent pour Windows vista [Found Via]\Crack\Help
        C:\Documents and Settings\kat\Mes documents\ad aware\Lavasoft Ad-Aware 2007 Professional Edition v7.0.1.3 Incl-Crack.Eng-Ita-Deu- French -Esp Par Nac Nacer Du 69 Lyon xcellent pour Windows vista [Found Via]\Crack\HostFileEditor.exe
        C:\Documents and Settings\kat\Mes documents\ad aware\Lavasoft Ad-Aware 2007 Professional Edition v7.0.1.3 Incl-Crack.Eng-Ita-Deu- French -Esp Par Nac Nacer Du 69 Lyon xcellent pour Windows vista [Found Via]\Crack\LSUpdateManager.exe
        C:\Documents and Settings\kat\Mes documents\ad aware\Lavasoft Ad-Aware 2007 Professional Edition v7.0.1.3 Incl-Crack.Eng-Ita-Deu- French -Esp Par Nac Nacer Du 69 Lyon xcellent pour Windows vista [Found Via]\Crack\ProcessWatch.exe
        C:\Documents and Settings\kat\Mes documents\ad aware\Lavasoft Ad-Aware 2007 Professional Edition v7.0.1.3 Incl-Crack.Eng-Ita-Deu- French -Esp Par Nac Nacer Du 69 Lyon xcellent pour Windows vista [Found Via]\Crack\Skin
        C:\Documents and Settings\kat\Mes documents\ad aware\Lavasoft Ad-Aware 2007 Professional Edition v7.0.1.3 Incl-Crack.Eng-Ita-Deu- French -Esp Par Nac Nacer Du 69 Lyon xcellent pour Windows vista [Found Via]\Crack\update-cracked.exe
        C:\Documents and Settings\kat\Mes documents\ad aware\Lavasoft Ad-Aware 2007 Professional Edition v7.0.1.3 Incl-Crack.Eng-Ita-Deu- French -Esp Par Nac Nacer Du 69 Lyon xcellent pour Windows vista [Found Via]\Crack\Help\Ad-Aware2007manual.chm
        C:\Documents and Settings\kat\Mes documents\ad aware\Lavasoft Ad-Aware 2007 Professional Edition v7.0.1.3 Incl-Crack.Eng-Ita-Deu- French -Esp Par Nac Nacer Du 69 Lyon xcellent pour Windows vista [Found Via]\Crack\Skin\Ad-Aware 2007 Pro Default.LGFF
        C:\Documents and Settings\kat\Mes documents\ad aware\Lavasoft Ad-Aware 2007 Professional Edition v7.0.1.3 Incl-Crack.Eng-Ita-Deu- French -Esp Par Nac Nacer Du 69 Lyon xcellent pour Windows vista [Found Via]\Crack\Skin\Sedona.LGFF
        C:\Documents and Settings\kat\Mes documents\Nouveau dossier\clips\mike patton\Mike Patton - Firecracker Interview.wmv
        C:\Documents and Settings\kat\Mes documents\Nouveau dossier\miouzik\ALBUMS\Faith No More - Discography\Angel Dust\11-Crack Hitler.mp3
        C:\Documents and Settings\kat\Mes documents\Nouveau dossier\miouzik\ALBUMS\Mr Bungle\Mr Bungle Old Snap, Crackle, Pop!.mp3

        ---------------- ! End of report ! ------------------

    Discussions similaires

    Virus bloque tous les exe window et antivirus
    airquest

    20 réponses
    rapport Hijackthis
    kawito33

    87 réponses
    Probleme Anti Virus
    Utilisateur anonyme

    28 réponses
    keygen.exe
    tonio44

    43 réponses