Avast ne veut plus se lancer problème win 32
Résolu
levalou
Messages postés
12
Statut
Membre
-
Destrio5 Messages postés 99820 Date d'inscription Statut Modérateur Dernière intervention -
Destrio5 Messages postés 99820 Date d'inscription Statut Modérateur Dernière intervention -
Bonjour,
j'ai un problème avast ne veut plus se lancer un message s'affiche:c:\progam files\alwilsoftware\avast4\ashavast.exe n'est pas une application win 32 valide
merci
j'ai un problème avast ne veut plus se lancer un message s'affiche:c:\progam files\alwilsoftware\avast4\ashavast.exe n'est pas une application win 32 valide
merci
A voir également:
- Avast ne veut plus se lancer problème win 32
- Windows ne se lance pas - Guide
- 32 bits - Guide
- Power iso 32 bit - Télécharger - Gravure
- Désinstaller avast - Télécharger - Antivirus & Antimalwares
- Win rar - Télécharger - Compression & Décompression
10 réponses
Salut,
Tu es infecté par Bagle.
--> Désactive l'UAC le temps de la désinfection.
--> Télécharge FindyKill (par Chiquitine29) sur ton Bureau.
--> Lance l'installation avec les paramètres par défaut.
--> Clique droit sur le raccourci FindyKill sur ton Bureau et choisis Exécuter en tant qu'administrateur.
--> Au menu principal, choisis l'option 1 (Recherche).
--> Poste le rapport FindyKill.txt
Note : le rapport FindyKill.txt est sauvegardé à la racine du disque.
Tu es infecté par Bagle.
--> Désactive l'UAC le temps de la désinfection.
--> Télécharge FindyKill (par Chiquitine29) sur ton Bureau.
--> Lance l'installation avec les paramètres par défaut.
--> Clique droit sur le raccourci FindyKill sur ton Bureau et choisis Exécuter en tant qu'administrateur.
--> Au menu principal, choisis l'option 1 (Recherche).
--> Poste le rapport FindyKill.txt
Note : le rapport FindyKill.txt est sauvegardé à la racine du disque.
je l'ai fait mais sa me mai sa:
############################## [ FindyKill V4.721 ]
# User : les enfants (Administrateurs) # PC-DE-REMY
# Update on 29/03/09 by Chiquitine29
# Start at: 18:56:08 | 30/03/2009
# Website : http://pagesperso-orange.fr/FindyKill.Ad.Remover/
# Intel(R) Celeron(R) CPU E1200 @ 1.60GHz
# Microsoft® Windows Vista™ Édition Familiale Basique (6.0.6001 32-bit) # Service Pack 1
# Internet Explorer 7.0.6001.18000
# Windows Firewall Status : Disabled
# C:\ # Disque fixe local # 223,02 Go (146,48 Go free) [COMPAQ] # NTFS
# D:\ # Disque fixe local # 9,86 Go (1,33 Go free) [FACTORY_IMAGE] # NTFS
# E:\ # Disque CD-ROM # 144,36 Mo (0 Mo free) [FOOT DE RUE 3] # CDFS
# F:\ # Disque amovible
# G:\ # Disque amovible
# H:\ # Disque amovible
# I:\ # Disque amovible
############################## [ Processus actifs ]
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\WINDOWS\RtHDVCpl.exe
C:\hp\support\hpsysdrv.exe
C:\WINDOWS\System32\igfxpers.exe
C:\Program Files\Orange\Systray\SystrayApp.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Windows\system32\svchost.exe
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Orange\Launcher\Launcher.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Orange\connectivity\connectivitymanager.exe
C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
C:\Program Files\Orange\browser\browser.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wbem\wmiprvse.exe
################## [ Fichiers / Dossiers infectieux C:\ ]
################## [ C:\Windows & C:\Windows\Prefetch ]
Found ! - C:\Windows\prefetch\AUTORUN.EXE-D28490C2.pf
Found ! - C:\Windows\prefetch\AUTORUN.EXE-E55C266C.pf
################## [ C:\Windows\system32 ]
Found ! - C:\Windows\system32\mdelk.exe
Found ! - C:\Windows\system32\wintems.exe
Found ! - C:\Windows\system32\ban_list.txt
################## [ C:\Windows\system32\drivers ]
Found ! - "C:\Windows\system32\drivers\down"
################## [ C:\.. Application Data ... ]
Found ! - "C:\Users\valentin\AppData\Roaming\m\flec006.exe"
Found ! - "C:\Users\valentin\AppData\Roaming\m\list.oct"
Found ! - "C:\Users\valentin\AppData\Roaming\m\data.oct"
Found ! - "C:\Users\valentin\AppData\Roaming\m\srvlist.oct"
Found ! - "C:\Users\valentin\AppData\Roaming\m\shared"
Found ! - "C:\Users\valentin\AppData\Roaming\m"
Found ! - "C:\Users\valentin\AppData\Roaming\drivers"
Found ! - "C:\Users\valentin\AppData\Roaming\drivers\srosa2.sys"
Found ! - "C:\Users\valentin\AppData\Roaming\drivers\wfsintwq.sys"
Found ! - "C:\Users\valentin\AppData\Roaming\drivers\winupgro.exe"
Found ! - "C:\Users\valentin\AppData\Roaming\drivers\downld"
################## [ C:\Users...\Temp Files... ]
################## [ Registre / Clés infectieuses ]
Found ! - HKEY_USERS\S-1-5-21-3909905151-846740782-1175491010-1003\Software\FirtR
Found ! - HKEY_USERS\S-1-5-21-3909905151-846740782-1175491010-1003\Software\MuleAppData
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_CURRENT_USER\Software\FirtR
Found ! - HKEY_CURRENT_USER\Software\MuleAppData
# HKLM\SYSTEM\...\Services\srosa -> Start = 0x1
# HKLM\SYSTEM\...\Services\sK9Ou0s -> Start = 0x1
################## [ Recherche dans supports amovibles]
# Contenu de l'autorun : E:\autorun.inf
[AUTORUN]
OPEN=K_Foot2Rue_vcd03.exe
# Présence des fichiers :
Found ! [31/03/2007 19:18][-r-h-----] - E:\autorun.inf
################## [ Registre / Mountpoint2 ]
# -> Not found !
################## [ ! Fin du rapport # FindyKill V4.721 ! ]
merci quand même
############################## [ FindyKill V4.721 ]
# User : les enfants (Administrateurs) # PC-DE-REMY
# Update on 29/03/09 by Chiquitine29
# Start at: 18:56:08 | 30/03/2009
# Website : http://pagesperso-orange.fr/FindyKill.Ad.Remover/
# Intel(R) Celeron(R) CPU E1200 @ 1.60GHz
# Microsoft® Windows Vista™ Édition Familiale Basique (6.0.6001 32-bit) # Service Pack 1
# Internet Explorer 7.0.6001.18000
# Windows Firewall Status : Disabled
# C:\ # Disque fixe local # 223,02 Go (146,48 Go free) [COMPAQ] # NTFS
# D:\ # Disque fixe local # 9,86 Go (1,33 Go free) [FACTORY_IMAGE] # NTFS
# E:\ # Disque CD-ROM # 144,36 Mo (0 Mo free) [FOOT DE RUE 3] # CDFS
# F:\ # Disque amovible
# G:\ # Disque amovible
# H:\ # Disque amovible
# I:\ # Disque amovible
############################## [ Processus actifs ]
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\WINDOWS\RtHDVCpl.exe
C:\hp\support\hpsysdrv.exe
C:\WINDOWS\System32\igfxpers.exe
C:\Program Files\Orange\Systray\SystrayApp.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Windows\system32\svchost.exe
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Orange\Launcher\Launcher.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Orange\connectivity\connectivitymanager.exe
C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
C:\Program Files\Orange\browser\browser.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wbem\wmiprvse.exe
################## [ Fichiers / Dossiers infectieux C:\ ]
################## [ C:\Windows & C:\Windows\Prefetch ]
Found ! - C:\Windows\prefetch\AUTORUN.EXE-D28490C2.pf
Found ! - C:\Windows\prefetch\AUTORUN.EXE-E55C266C.pf
################## [ C:\Windows\system32 ]
Found ! - C:\Windows\system32\mdelk.exe
Found ! - C:\Windows\system32\wintems.exe
Found ! - C:\Windows\system32\ban_list.txt
################## [ C:\Windows\system32\drivers ]
Found ! - "C:\Windows\system32\drivers\down"
################## [ C:\.. Application Data ... ]
Found ! - "C:\Users\valentin\AppData\Roaming\m\flec006.exe"
Found ! - "C:\Users\valentin\AppData\Roaming\m\list.oct"
Found ! - "C:\Users\valentin\AppData\Roaming\m\data.oct"
Found ! - "C:\Users\valentin\AppData\Roaming\m\srvlist.oct"
Found ! - "C:\Users\valentin\AppData\Roaming\m\shared"
Found ! - "C:\Users\valentin\AppData\Roaming\m"
Found ! - "C:\Users\valentin\AppData\Roaming\drivers"
Found ! - "C:\Users\valentin\AppData\Roaming\drivers\srosa2.sys"
Found ! - "C:\Users\valentin\AppData\Roaming\drivers\wfsintwq.sys"
Found ! - "C:\Users\valentin\AppData\Roaming\drivers\winupgro.exe"
Found ! - "C:\Users\valentin\AppData\Roaming\drivers\downld"
################## [ C:\Users...\Temp Files... ]
################## [ Registre / Clés infectieuses ]
Found ! - HKEY_USERS\S-1-5-21-3909905151-846740782-1175491010-1003\Software\FirtR
Found ! - HKEY_USERS\S-1-5-21-3909905151-846740782-1175491010-1003\Software\MuleAppData
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_CURRENT_USER\Software\FirtR
Found ! - HKEY_CURRENT_USER\Software\MuleAppData
# HKLM\SYSTEM\...\Services\srosa -> Start = 0x1
# HKLM\SYSTEM\...\Services\sK9Ou0s -> Start = 0x1
################## [ Recherche dans supports amovibles]
# Contenu de l'autorun : E:\autorun.inf
[AUTORUN]
OPEN=K_Foot2Rue_vcd03.exe
# Présence des fichiers :
Found ! [31/03/2007 19:18][-r-h-----] - E:\autorun.inf
################## [ Registre / Mountpoint2 ]
# -> Not found !
################## [ ! Fin du rapport # FindyKill V4.721 ! ]
merci quand même
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
On voit bien l'infection;
--> Supprime le fichier qui t'a infecté (Crack par exemple).
--> Branche tes disques amovibles à ton PC (clefs USB, disque dur externe, etc...) sans les ouvrir.
--> Clique droit sur le raccourci FindyKill sur ton Bureau et choisis Exécuter en tant qu'administrateur.
--> Au menu principal, choisis l'option 2 (Suppression).
/!\ Il y aura un redémarrage, laisse travailler l'outil jusqu'à l'apparition du message "nettoyage effectué" /!\
--> Ensuite, poste le rapport FindyKill.txt
Note : le rapport FindyKill.txt est sauvegardé à la racine du disque.
--> Supprime le fichier qui t'a infecté (Crack par exemple).
--> Branche tes disques amovibles à ton PC (clefs USB, disque dur externe, etc...) sans les ouvrir.
--> Clique droit sur le raccourci FindyKill sur ton Bureau et choisis Exécuter en tant qu'administrateur.
--> Au menu principal, choisis l'option 2 (Suppression).
/!\ Il y aura un redémarrage, laisse travailler l'outil jusqu'à l'apparition du message "nettoyage effectué" /!\
--> Ensuite, poste le rapport FindyKill.txt
Note : le rapport FindyKill.txt est sauvegardé à la racine du disque.
c' est fait voila ce que sa a donne:
############################## [ FindyKill V4.721 ]
# User : valentin (Administrateurs) # PC-DE-REMY
# Update on 29/03/09 by Chiquitine29
# Start at: 20:17:44 | 30/03/2009
# Website : http://pagesperso-orange.fr/FindyKill.Ad.Remover/
# Intel(R) Celeron(R) CPU E1200 @ 1.60GHz
# Microsoft® Windows Vista™ Édition Familiale Basique (6.0.6001 32-bit) # Service Pack 1
# Internet Explorer 7.0.6001.18000
# Windows Firewall Status : Disabled
# C:\ # Disque fixe local # 223,02 Go (146,66 Go free) [COMPAQ] # NTFS
# D:\ # Disque fixe local # 9,86 Go (1,33 Go free) [FACTORY_IMAGE] # NTFS
# E:\ # Disque CD-ROM # 144,36 Mo (0 Mo free) [FOOT DE RUE 3] # CDFS
# F:\ # Disque amovible
# G:\ # Disque amovible
# H:\ # Disque amovible
# I:\ # Disque amovible
############################## [ Active Processes ]
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Windows\system32\svchost.exe
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\wbem\wmiprvse.exe
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\WINDOWS\RtHDVCpl.exe
C:\hp\support\hpsysdrv.exe
C:\WINDOWS\System32\igfxpers.exe
C:\Program Files\Orange\Systray\SystrayApp.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Orange\Launcher\Launcher.exe
C:\Users\valentin\AppData\Local\wimeeue.exe
C:\Users\valentin\AppData\Roaming\drivers\winupgro.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Orange\connectivity\connectivitymanager.exe
C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Users\valentin\AppData\Roaming\m\flec006.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wintems.exe
C:\Program Files\Orange\browser\browser.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Internet Explorer\IEUser.exe
################## [ Infected processes stopped ]
"C:\Users\valentin\AppData\Roaming\drivers\winupgro.exe" (5296)
"C:\Users\valentin\AppData\Roaming\m\flec006.exe" (2064)
"C:\Windows\system32\wintems.exe" (6072)
################## [ Infected Files / Folders C:\ ]
################## [ C:\Windows & C:\Windows\prefetch ]
Deleted ! - C:\Windows\prefetch\AUTORUN.EXE-D28490C2.pf
Deleted ! - C:\Windows\prefetch\AUTORUN.EXE-E55C266C.pf
Deleted ! - C:\Windows\prefetch\WINUPGRO.EXE-FAD0B5FF.pf
################## [ C:\Windows\System32 ]
Deleted ! - C:\Windows\system32\mdelk.exe
Deleted ! - C:\Windows\system32\wintems.exe
Deleted ! - C:\Windows\system32\ban_list.txt
################## [ C:\Windows\System32\drivers ]
Deleted ! - "C:\Windows\system32\drivers\down"
################## [ C:\.. Application Data ... ]
Deleted ! - "C:\Users\valentin\AppData\Roaming\m\flec006.exe"
Deleted ! - "C:\Users\valentin\AppData\Roaming\m\list.oct"
Deleted ! - "C:\Users\valentin\AppData\Roaming\m\data.oct"
Deleted ! - "C:\Users\valentin\AppData\Roaming\m\srvlist.oct"
Deleted ! - "C:\Users\valentin\AppData\Roaming\m\shared"
Deleted ! - "C:\Users\valentin\AppData\Roaming\m"
Deleted ! - "C:\Users\valentin\AppData\Roaming\drivers\srosa2.sys"
Deleted ! - "C:\Users\valentin\AppData\Roaming\drivers\wfsintwq.sys"
Deleted ! - "C:\Users\valentin\AppData\Roaming\drivers\winupgro.exe"
Deleted ! - "C:\Users\valentin\AppData\Roaming\drivers\downld"
Deleted ! - "C:\Users\valentin\AppData\Roaming\drivers"
################## [ C:\Users\valentin\.....\Temp Files... ]
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\640AHMRF\b64[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\640AHMRF\b64_1[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\640AHMRF\b64_2[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\640AHMRF\b64_6[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\640AHMRF\b64_6[2].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\640AHMRF\file[1].txt
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\8IE98KOZ\b64[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\8IE98KOZ\b64_2[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\8IE98KOZ\b64_2[2].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\8IE98KOZ\b64_3[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\G5M0GDZ4\b64_3[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\G5M0GDZ4\b64_3[2].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\G5M0GDZ4\b64_3[3].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\MSLETZ0O\b64[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\MSLETZ0O\b64_1[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\MSLETZ0O\b64_1[2].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\MSLETZ0O\b64_3[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\MSLETZ0O\b64_6[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\MSLETZ0O\file[1].txt
Deleted ! - C:\Users\valentin\AppData\Local\Temp\Temp1_Grand Theft Auto GTA IV 4 Crack NoCD - Activation Multilanguage - certified -.zip\Grand Theft Auto IV 4\Crack\crack.exe
Deleted ! - C:\Users\valentin\AppData\Local\Temp\{03BCED44-D8D0-440E-9183-D11DFA5B04F3}\{5A0B7BA5-4682-4273-81C2-69B17E649103}\redist\DirectX\DXSETUP.exe
################## [ Registry / Infected keys ]
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sK9Ou0s
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SK9OU0S
Deleted ! - HKEY_CURRENT_USER\Software\bisoft
Deleted ! - HKEY_CURRENT_USER\Software\DateTime4
Deleted ! - HKEY_CURRENT_USER\Software\FirtR
Deleted ! - HKEY_CURRENT_USER\Software\MuleAppData
Deleted ! - HKEY_CURRENT_USER\Software\FFC
Deleted ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro
Deleted ! - HKEY_USERS\S-1-5-21-3909905151-846740782-1175491010-1001\Software\FFC
Deleted ! - HKEY_USERS\S-1-5-21-3909905151-846740782-1175491010-1001\Software\MuleAppData
Deleted ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\"drvsyskit"
Deleted ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\"german.exe"
Deleted ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\"mule_st_key"
################## [ Cleaning Removable drives ]
# Deleting Files :
Not deleted !! - E:\autorun.inf
################## [ Registry / Mountpoint2 ]
# -> Not found !
################## [ States / Restarting of services ]
# Services : [ Auto=2 / Request=3 / Disable=4 ]
# Ndisuio -> # Type of startup =3
# EapHost -> # Type of startup =2
# Wlansvc -> # Type of startup =2
# SharedAccess -> # Type of startup =2
# wuauserv -> # Type of startup =2
# wscsvc -> # Type of startup =2
# WinDefend -> # Type of startup =2
# -> UAC is Enable.
################## [ Searching Other Infections ]
# Références de comparaison Bagle MD5 :
File ... : C:\Users\valentin\AppData\Roaming\drivers\winupgro.exe
CRC32 .. : 81a9c578
MD5 .... : 82ae11cfe98177043f9a02b140a88897
Deleted ! : C:\$Recycle.Bin\S-1-5-21-3909905151-846740782-1175491010-1001\$RL96TLL\install.exe
# Taille : 860160 # MD5 : 82AE11CFE98177043F9A02B140A88897
Deleted ! : C:\$Recycle.Bin\S-1-5-21-3909905151-846740782-1175491010-1001\$RQT7SIX\install.exe
# Taille : 860160 # MD5 : 82AE11CFE98177043F9A02B140A88897
Deleted ! : C:\Users\valentin\AppData\Local\Temp\Temp1_Grand Theft Auto San Andreas official trailer.zip\install.exe
# Taille : 860160 # MD5 : 82AE11CFE98177043F9A02B140A88897
Deleted ! : C:\Users\valentin\AppData\Local\Temp\Temp2_Grand Theft Auto San Andreas official trailer.zip\install.exe
# Taille : 860160 # MD5 : 82AE11CFE98177043F9A02B140A88897
Deleted ! : C:\Users\valentin\AppData\Local\Temp\Temp3_Grand Theft Auto San Andreas official trailer.zip\install.exe
# Taille : 860160 # MD5 : 82AE11CFE98177043F9A02B140A88897
Deleted ! : C:\Users\valentin\Nouveau dossier\install.exe
# Taille : 860160 # MD5 : 82AE11CFE98177043F9A02B140A88897
################## [ PEH Corrupted ]
C:\coktel\Adibou et l'Ombre Verte\launch.EXE
C:\Program Files\Alwil Software\Avast4\ashAvast.exe
C:\Program Files\Alwil Software\Avast4\ashChest.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Alwil Software\Avast4\ashLogV.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashPopWz.exe
C:\Program Files\Alwil Software\Avast4\ashQuick.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Alwil Software\Avast4\ashSimp2.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Program Files\Alwil Software\Avast4\ashSkPcc.exe
C:\Program Files\Alwil Software\Avast4\ashSkPck.exe
C:\Program Files\Alwil Software\Avast4\ashUpd.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\aswRegSvr.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\sched.exe
C:\Program Files\Alwil Software\Avast4\VisthLic.exe
C:\Program Files\Alwil Software\Avast4\VisthUpd.exe
################## [ ! End of Report # FindyKill V4.721 ! ]
############################## [ FindyKill V4.721 ]
# User : valentin (Administrateurs) # PC-DE-REMY
# Update on 29/03/09 by Chiquitine29
# Start at: 20:17:44 | 30/03/2009
# Website : http://pagesperso-orange.fr/FindyKill.Ad.Remover/
# Intel(R) Celeron(R) CPU E1200 @ 1.60GHz
# Microsoft® Windows Vista™ Édition Familiale Basique (6.0.6001 32-bit) # Service Pack 1
# Internet Explorer 7.0.6001.18000
# Windows Firewall Status : Disabled
# C:\ # Disque fixe local # 223,02 Go (146,66 Go free) [COMPAQ] # NTFS
# D:\ # Disque fixe local # 9,86 Go (1,33 Go free) [FACTORY_IMAGE] # NTFS
# E:\ # Disque CD-ROM # 144,36 Mo (0 Mo free) [FOOT DE RUE 3] # CDFS
# F:\ # Disque amovible
# G:\ # Disque amovible
# H:\ # Disque amovible
# I:\ # Disque amovible
############################## [ Active Processes ]
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Windows\system32\svchost.exe
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\wbem\wmiprvse.exe
c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\WINDOWS\RtHDVCpl.exe
C:\hp\support\hpsysdrv.exe
C:\WINDOWS\System32\igfxpers.exe
C:\Program Files\Orange\Systray\SystrayApp.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Orange\Launcher\Launcher.exe
C:\Users\valentin\AppData\Local\wimeeue.exe
C:\Users\valentin\AppData\Roaming\drivers\winupgro.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Orange\connectivity\connectivitymanager.exe
C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Users\valentin\AppData\Roaming\m\flec006.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wintems.exe
C:\Program Files\Orange\browser\browser.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Internet Explorer\IEUser.exe
################## [ Infected processes stopped ]
"C:\Users\valentin\AppData\Roaming\drivers\winupgro.exe" (5296)
"C:\Users\valentin\AppData\Roaming\m\flec006.exe" (2064)
"C:\Windows\system32\wintems.exe" (6072)
################## [ Infected Files / Folders C:\ ]
################## [ C:\Windows & C:\Windows\prefetch ]
Deleted ! - C:\Windows\prefetch\AUTORUN.EXE-D28490C2.pf
Deleted ! - C:\Windows\prefetch\AUTORUN.EXE-E55C266C.pf
Deleted ! - C:\Windows\prefetch\WINUPGRO.EXE-FAD0B5FF.pf
################## [ C:\Windows\System32 ]
Deleted ! - C:\Windows\system32\mdelk.exe
Deleted ! - C:\Windows\system32\wintems.exe
Deleted ! - C:\Windows\system32\ban_list.txt
################## [ C:\Windows\System32\drivers ]
Deleted ! - "C:\Windows\system32\drivers\down"
################## [ C:\.. Application Data ... ]
Deleted ! - "C:\Users\valentin\AppData\Roaming\m\flec006.exe"
Deleted ! - "C:\Users\valentin\AppData\Roaming\m\list.oct"
Deleted ! - "C:\Users\valentin\AppData\Roaming\m\data.oct"
Deleted ! - "C:\Users\valentin\AppData\Roaming\m\srvlist.oct"
Deleted ! - "C:\Users\valentin\AppData\Roaming\m\shared"
Deleted ! - "C:\Users\valentin\AppData\Roaming\m"
Deleted ! - "C:\Users\valentin\AppData\Roaming\drivers\srosa2.sys"
Deleted ! - "C:\Users\valentin\AppData\Roaming\drivers\wfsintwq.sys"
Deleted ! - "C:\Users\valentin\AppData\Roaming\drivers\winupgro.exe"
Deleted ! - "C:\Users\valentin\AppData\Roaming\drivers\downld"
Deleted ! - "C:\Users\valentin\AppData\Roaming\drivers"
################## [ C:\Users\valentin\.....\Temp Files... ]
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\640AHMRF\b64[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\640AHMRF\b64_1[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\640AHMRF\b64_2[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\640AHMRF\b64_6[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\640AHMRF\b64_6[2].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\640AHMRF\file[1].txt
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\8IE98KOZ\b64[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\8IE98KOZ\b64_2[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\8IE98KOZ\b64_2[2].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\8IE98KOZ\b64_3[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\G5M0GDZ4\b64_3[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\G5M0GDZ4\b64_3[2].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\G5M0GDZ4\b64_3[3].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\MSLETZ0O\b64[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\MSLETZ0O\b64_1[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\MSLETZ0O\b64_1[2].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\MSLETZ0O\b64_3[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\MSLETZ0O\b64_6[1].jpg
Deleted ! - C:\Users\valentin\Local Settings\Temporary Internet Files\Content.IE5\MSLETZ0O\file[1].txt
Deleted ! - C:\Users\valentin\AppData\Local\Temp\Temp1_Grand Theft Auto GTA IV 4 Crack NoCD - Activation Multilanguage - certified -.zip\Grand Theft Auto IV 4\Crack\crack.exe
Deleted ! - C:\Users\valentin\AppData\Local\Temp\{03BCED44-D8D0-440E-9183-D11DFA5B04F3}\{5A0B7BA5-4682-4273-81C2-69B17E649103}\redist\DirectX\DXSETUP.exe
################## [ Registry / Infected keys ]
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sK9Ou0s
Deleted ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SK9OU0S
Deleted ! - HKEY_CURRENT_USER\Software\bisoft
Deleted ! - HKEY_CURRENT_USER\Software\DateTime4
Deleted ! - HKEY_CURRENT_USER\Software\FirtR
Deleted ! - HKEY_CURRENT_USER\Software\MuleAppData
Deleted ! - HKEY_CURRENT_USER\Software\FFC
Deleted ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro
Deleted ! - HKEY_USERS\S-1-5-21-3909905151-846740782-1175491010-1001\Software\FFC
Deleted ! - HKEY_USERS\S-1-5-21-3909905151-846740782-1175491010-1001\Software\MuleAppData
Deleted ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\"drvsyskit"
Deleted ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\"german.exe"
Deleted ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\"mule_st_key"
################## [ Cleaning Removable drives ]
# Deleting Files :
Not deleted !! - E:\autorun.inf
################## [ Registry / Mountpoint2 ]
# -> Not found !
################## [ States / Restarting of services ]
# Services : [ Auto=2 / Request=3 / Disable=4 ]
# Ndisuio -> # Type of startup =3
# EapHost -> # Type of startup =2
# Wlansvc -> # Type of startup =2
# SharedAccess -> # Type of startup =2
# wuauserv -> # Type of startup =2
# wscsvc -> # Type of startup =2
# WinDefend -> # Type of startup =2
# -> UAC is Enable.
################## [ Searching Other Infections ]
# Références de comparaison Bagle MD5 :
File ... : C:\Users\valentin\AppData\Roaming\drivers\winupgro.exe
CRC32 .. : 81a9c578
MD5 .... : 82ae11cfe98177043f9a02b140a88897
Deleted ! : C:\$Recycle.Bin\S-1-5-21-3909905151-846740782-1175491010-1001\$RL96TLL\install.exe
# Taille : 860160 # MD5 : 82AE11CFE98177043F9A02B140A88897
Deleted ! : C:\$Recycle.Bin\S-1-5-21-3909905151-846740782-1175491010-1001\$RQT7SIX\install.exe
# Taille : 860160 # MD5 : 82AE11CFE98177043F9A02B140A88897
Deleted ! : C:\Users\valentin\AppData\Local\Temp\Temp1_Grand Theft Auto San Andreas official trailer.zip\install.exe
# Taille : 860160 # MD5 : 82AE11CFE98177043F9A02B140A88897
Deleted ! : C:\Users\valentin\AppData\Local\Temp\Temp2_Grand Theft Auto San Andreas official trailer.zip\install.exe
# Taille : 860160 # MD5 : 82AE11CFE98177043F9A02B140A88897
Deleted ! : C:\Users\valentin\AppData\Local\Temp\Temp3_Grand Theft Auto San Andreas official trailer.zip\install.exe
# Taille : 860160 # MD5 : 82AE11CFE98177043F9A02B140A88897
Deleted ! : C:\Users\valentin\Nouveau dossier\install.exe
# Taille : 860160 # MD5 : 82AE11CFE98177043F9A02B140A88897
################## [ PEH Corrupted ]
C:\coktel\Adibou et l'Ombre Verte\launch.EXE
C:\Program Files\Alwil Software\Avast4\ashAvast.exe
C:\Program Files\Alwil Software\Avast4\ashChest.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Alwil Software\Avast4\ashLogV.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashPopWz.exe
C:\Program Files\Alwil Software\Avast4\ashQuick.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Alwil Software\Avast4\ashSimp2.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Program Files\Alwil Software\Avast4\ashSkPcc.exe
C:\Program Files\Alwil Software\Avast4\ashSkPck.exe
C:\Program Files\Alwil Software\Avast4\ashUpd.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\aswRegSvr.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\sched.exe
C:\Program Files\Alwil Software\Avast4\VisthLic.exe
C:\Program Files\Alwil Software\Avast4\VisthUpd.exe
################## [ ! End of Report # FindyKill V4.721 ! ]
--> Désinstalle Avast.
--> Installe Antivir et mets-le à jour.
--> Double-clique sur l'icône d'Antivir (Parapluie) dans la barre des tâches.
--> Dans Antivir, choisis Outils puis Configuration.
--> Coche Mode Expert et coche Rech. Rootkit au dém. de la recherche à droite dans Autres réglages.
--> Fais un scan complet et poste le rapport.
Tutoriel sur Antivir
--> Installe Antivir et mets-le à jour.
--> Double-clique sur l'icône d'Antivir (Parapluie) dans la barre des tâches.
--> Dans Antivir, choisis Outils puis Configuration.
--> Coche Mode Expert et coche Rech. Rootkit au dém. de la recherche à droite dans Autres réglages.
--> Fais un scan complet et poste le rapport.
Tutoriel sur Antivir
Essaie la version 9 :
http://dlce.antivir.com/package/wks_avira/win32/en/pecl/avira_antivir_personal_en.exe
http://dlce.antivir.com/package/wks_avira/win32/en/pecl/avira_antivir_personal_en.exe