Infection virus, rapport avira Fermé

Question

Bonjour, Suite à une infection par divers virus dont le célèbre bagle, j'ai réussi à tout désinfecté, réinstaller antivirus, et divers programmes. J'ai pu alors tout analyser et supprimer, et tout remarchait comme avant. Mais alors que hier je lance une analyse avec avira, oh surprise quand je vois que 22 fichiers suspects ont été détectés. Je vous colle ici le rapport et attends de savoir ce que je peux faire en +. Merci d'avance Avira AntiVir Personal Report file date: vendredi 1 mai 2009 22:03 Scanning for 1369743 virus strains and unwanted programs. Licensee : Avira AntiVir Personal - FREE Antivirus Serial number : 0000149996-ADJIE-0000001 Platform : Windows XP Windows version : (Service Pack 2) [5.1.2600] Boot mode : Normally booted Username : SYSTEM Computer name : TOSHIBA Version information: BUILD.DAT : 9.0.0.394 17962 Bytes 17/04/2009 11:20:00 AVSCAN.EXE : 9.0.3.5 466689 Bytes 27/04/2009 23:36:50 AVSCAN.DLL : 9.0.3.0 40705 Bytes 27/02/2009 08:58:24 LUKE.DLL : 9.0.3.2 209665 Bytes 20/02/2009 09:35:49 LUKERES.DLL : 9.0.2.0 12033 Bytes 27/02/2009 08:58:52 ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 10:30:36 ANTIVIR1.VDF : 7.1.2.12 3336192 Bytes 11/02/2009 18:33:26 ANTIVIR2.VDF : 7.1.3.63 1588224 Bytes 16/04/2009 23:36:49 ANTIVIR3.VDF : 7.1.3.124 211456 Bytes 28/04/2009 22:26:34 Engineversion : 8.2.0.156 AEVDF.DLL : 8.1.1.0 106868 Bytes 27/01/2009 15:36:42 AESCRIPT.DLL : 8.1.1.77 381306 Bytes 27/04/2009 23:36:50 AESCN.DLL : 8.1.1.10 127348 Bytes 27/04/2009 23:36:50 AERDL.DLL : 8.1.1.3 438645 Bytes 29/10/2008 16:24:41 AEPACK.DLL : 8.1.3.14 397685 Bytes 27/04/2009 23:36:50 AEOFFICE.DLL : 8.1.0.36 196987 Bytes 26/02/2009 18:01:56 AEHEUR.DLL : 8.1.0.122 1737080 Bytes 27/04/2009 23:36:50 AEHELP.DLL : 8.1.2.2 119158 Bytes 26/02/2009 18:01:56 AEGEN.DLL : 8.1.1.39 348532 Bytes 27/04/2009 23:36:49 AEEMU.DLL : 8.1.0.9 393588 Bytes 09/10/2008 12:32:40 AECORE.DLL : 8.1.6.9 176500 Bytes 27/04/2009 23:36:49 AEBB.DLL : 8.1.0.3 53618 Bytes 09/10/2008 12:32:40 AVWINLL.DLL : 9.0.0.3 18177 Bytes 12/12/2008 06:47:59 AVPREF.DLL : 9.0.0.1 43777 Bytes 05/12/2008 08:32:15 AVREP.DLL : 8.0.0.3 155905 Bytes 20/01/2009 12:34:28 AVREG.DLL : 9.0.0.0 36609 Bytes 05/12/2008 08:32:09 AVARKT.DLL : 9.0.0.3 292609 Bytes 27/04/2009 23:36:50 AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 30/01/2009 08:37:08 SQLITE3.DLL : 3.6.1.0 326401 Bytes 28/01/2009 13:03:49 SMTPLIB.DLL : 9.2.0.25 28417 Bytes 02/02/2009 06:21:33 NETNT.DLL : 9.0.0.0 11521 Bytes 05/12/2008 08:32:10 RCIMAGE.DLL : 9.0.0.21 2438401 Bytes 09/02/2009 09:45:45 RCTEXT.DLL : 9.0.37.0 86785 Bytes 27/04/2009 23:36:49 Configuration settings for the scan: Jobname.............................: Complete system scan Configuration file..................: c:\program files\avira\antivir desktop\sysscan.avp Logging.............................: low Primary action......................: interactive Secondary action....................: ignore Scan master boot sector.............: on Scan boot sector....................: on Boot sectors........................: C:, D:, E:, J:, K:, Process scan........................: on Scan registry.......................: on Search for rootkits.................: on Integrity checking of system files..: off Scan all files......................: All files Scan archives.......................: on Recursion depth.....................: 20 Smart extensions....................: on Macro heuristic.....................: on File heuristic......................: medium Start of the scan: vendredi 1 mai 2009 22:03 Starting search for hidden objects. '67305' objects were checked, '0' hidden objects were found. The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'vlc.exe' - '1' Module(s) have been scanned Scan process 'SubliSoft.exe' - '1' Module(s) have been scanned Scan process 'PhotoshopServer.exe' - '1' Module(s) have been scanned Scan process 'FNPLicensingService.exe' - '1' Module(s) have been scanned Scan process 'Adobe Premiere Pro.exe' - '1' Module(s) have been scanned Scan process 'wuauclt.exe' - '1' Module(s) have been scanned Scan process 'firefox.exe' - '1' Module(s) have been scanned Scan process 'alg.exe' - '1' Module(s) have been scanned Scan process 'MessengerDiscovery Live.exe' - '1' Module(s) have been scanned Scan process 'wmiapsrv.exe' - '1' Module(s) have been scanned Scan process 'Mise-a-jour-LiveSearch.exe' - '1' Module(s) have been scanned Scan process 'Notification-LiveSearch.exe' - '1' Module(s) have been scanned Scan process 'QuickDCF2.exe' - '1' Module(s) have been scanned Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned Scan process 'ctfmon.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'QTTask.exe' - '1' Module(s) have been scanned Scan process 'daemon.exe' - '1' Module(s) have been scanned Scan process 'MaxMenuMgrBasics.exe' - '1' Module(s) have been scanned Scan process 'LVCOMSX.EXE' - '1' Module(s) have been scanned Scan process 'jusched.exe' - '1' Module(s) have been scanned Scan process 'realsched.exe' - '1' Module(s) have been scanned Scan process 'ULCDRSvr.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned Scan process 'NBService.exe' - '1' Module(s) have been scanned Scan process 'jqs.exe' - '1' Module(s) have been scanned Scan process 'mDNSResponder.exe' - '1' Module(s) have been scanned Scan process 'SyncServicesBasics.exe' - '1' Module(s) have been scanned Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'GoogleUpdate.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'LexBceS.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 50 processes with 50 modules were scanned Starting master boot sector scan: Master boot sector HD0 [INFO] No virus was found! Master boot sector HD1 [INFO] No virus was found! Master boot sector HD2 [INFO] No virus was found! Start scanning boot sectors: Boot sector 'C:\' [INFO] No virus was found! Boot sector 'D:\' [INFO] No virus was found! Boot sector 'E:\' [INFO] No virus was found! Boot sector 'J:\' [INFO] No virus was found! Boot sector 'K:\' [INFO] No virus was found! Starting to scan executable files (registry). The registry was scanned ( '58' files ). Starting the file scan: Begin scan in 'C:\' C:\pagefile.sys [WARNING] The file could not be opened! [NOTE] This file is a Windows system file. [NOTE] This file cannot be opened for scanning. C:\Program Files\Apowersoft\Video Download Capture\VideoDownloadCapture.exe [DETECTION] Is the TR/Dropper.Gen Trojan C:\System Volume Information\_restore{5052ABC5-76B0-4432-885C-AFD0540442E3}\RP1052\A0083753.sys [DETECTION] Is the TR/Rootkit.Gen Trojan C:\System Volume Information\_restore{5052ABC5-76B0-4432-885C-AFD0540442E3}\RP1053\A0083775.sys [DETECTION] Is the TR/Rootkit.Gen Trojan C:\System Volume Information\_restore{5052ABC5-76B0-4432-885C-AFD0540442E3}\RP1053\A0083783.exe [DETECTION] Is the TR/Dldr.Bagle.ary Trojan C:\System Volume Information\_restore{5052ABC5-76B0-4432-885C-AFD0540442E3}\RP1053\A0083822.exe [DETECTION] Is the TR/Crypt.TPM.Gen Trojan C:\System Volume Information\_restore{5052ABC5-76B0-4432-885C-AFD0540442E3}\RP1053\A0083990.exe [DETECTION] Is the TR/Crypt.TPM.Gen Trojan C:\System Volume Information\_restore{5052ABC5-76B0-4432-885C-AFD0540442E3}\RP1053\A0084012.exe [DETECTION] Is the TR/Dldr.Bagle.ary Trojan Begin scan in 'D:\' Begin scan in 'E:\' E:\Divers\Divers\msnspace - Packs_Gros_Emoticons.rar [0] Archive type: RAR --> Big Emoticons - Baddies Pack.exe [DETECTION] Is the TR/Dropper.Gen Trojan --> Big Emoticons - Emoticons Pack.exe [DETECTION] Is the TR/Dropper.Gen Trojan --> Big Emoticons - Everyday Pack.exe [DETECTION] Is the TR/Dropper.Gen Trojan --> Big Emoticons - Hero Pack.exe [DETECTION] Is the TR/Dropper.Gen Trojan --> Big Emoticons - Hip Pack.exe [DETECTION] Is the TR/Dropper.Gen Trojan --> Big Emoticons - Hobbies Pack.exe [DETECTION] Is the TR/Dropper.Gen Trojan --> Big Emoticons - Holiday Pack.exe [DETECTION] Is the TR/Dropper.Gen Trojan --> Big Emoticons - Humor Pack.exe [DETECTION] Is the TR/Dropper.Gen Trojan --> Big Emoticons - International Pack.exe [DETECTION] Is the TR/Dropper.Gen Trojan --> Big Emoticons - Love Pack.exe [DETECTION] Is the TR/Dropper.Gen Trojan --> Big Emoticons - Sports Pack.exe [DETECTION] Is the TR/Dropper.Gen Trojan --> Big Emoticons - Work Pack.exe [DETECTION] Is the TR/Dropper.Gen Trojan E:\Téléchargements\Adobe After Effects Cs3 Professional Multilanguage keygen.rar [0] Archive type: RAR --> Keygen After Effects CS3.exe [DETECTION] Contains a recognition pattern of the (harmful) BDS/Pcclient.584 back-door program E:\Téléchargements\Adobe.Photoshop.CS2.v9.0.1.FR.Incl-Crack.et.Keygen.rar [0] Archive type: RAR --> Crack et Keygen\KeyGen Adobe.PhotoShop.CS2.exe [DETECTION] Contains recognition pattern of the WORM/Autorun.cxl worm Begin scan in 'J:\' Begin scan in 'K:\' K:\sims\Los Sims 2 Crack NOCD + Serial + Modo Construir.rar [0] Archive type: RAR --> Crack, Serials y Trucos\keygen.exe [DETECTION] Is the TR/Agent.6905.A Trojan Beginning disinfection: C:\Program Files\Apowersoft\Video Download Capture\VideoDownloadCapture.exe [DETECTION] Is the TR/Dropper.Gen Trojan [NOTE] The file was moved to '4a601125.qua'! C:\System Volume Information\_restore{5052ABC5-76B0-4432-885C-AFD0540442E3}\RP1052\A0083753.sys [DETECTION] Is the TR/Rootkit.Gen Trojan [NOTE] The file was moved to '4a2c10ec.qua'! C:\System Volume Information\_restore{5052ABC5-76B0-4432-885C-AFD0540442E3}\RP1053\A0083775.sys [DETECTION] Is the TR/Rootkit.Gen Trojan [NOTE] The file was moved to '4a2c10ed.qua'! C:\System Volume Information\_restore{5052ABC5-76B0-4432-885C-AFD0540442E3}\RP1053\A0083783.exe [DETECTION] Is the TR/Dldr.Bagle.ary Trojan [NOTE] The file was moved to '4b989f16.qua'! C:\System Volume Information\_restore{5052ABC5-76B0-4432-885C-AFD0540442E3}\RP1053\A0083822.exe [DETECTION] Is the TR/Crypt.TPM.Gen Trojan [NOTE] The file was moved to '4b99872e.qua'! C:\System Volume Information\_restore{5052ABC5-76B0-4432-885C-AFD0540442E3}\RP1053\A0083990.exe [DETECTION] Is the TR/Crypt.TPM.Gen Trojan [NOTE] The file was moved to '4b9a8f66.qua'! C:\System Volume Information\_restore{5052ABC5-76B0-4432-885C-AFD0540442E3}\RP1053\A0084012.exe [DETECTION] Is the TR/Dldr.Bagle.ary Trojan [NOTE] The file was moved to '4b9bb7be.qua'! E:\Divers\Divers\msnspace - Packs_Gros_Emoticons.rar [NOTE] The file was moved to '4a6a1130.qua'! E:\Téléchargements\Adobe After Effects Cs3 Professional Multilanguage keygen.rar [WARNING] An error has occurred and the file was not deleted. ErrorID: 26001 [WARNING] Failed! [NOTE] Attempting to perform action using the ARK library. [NOTE] The file was moved to '4a6b1124.qua'! E:\Téléchargements\Adobe.Photoshop.CS2.v9.0.1.FR.Incl-Crack.et.Keygen.rar [WARNING] An error has occurred and the file was not deleted. ErrorID: 26001 [WARNING] Failed! [NOTE] Attempting to perform action using the ARK library. [NOTE] The file was moved to '4a6b11c5.qua'! K:\sims\Los Sims 2 Crack NOCD + Serial + Modo Construir.rar [NOTE] The file was moved to '4a6f1213.qua'! End of the scan: samedi 2 mai 2009 11:25 Used time: 4:27:03 Hour(s) The scan has been done completely. 11244 Scanned directories 625440 Files were scanned 22 Viruses and/or unwanted programs were found 0 Files were classified as suspicious 0 files were deleted 0 Viruses and unwanted programs were repaired 11 Files were moved to quarantine 0 Files were renamed 1 Files cannot be scanned 625417 Files not concerned 4875 Archives were scanned 3 Warnings 12 Notes 67305 Objects were scanned with rootkit scan 0 Hidden objects were found

pimprenelle27 · Answer

FindyKill XP : recherche

&#x25B6; Telecharge FindyKill sur ton bureau :

&#x25B6; tutoriel installation

&#x25B6; tutoriel recherche

/!\ Ne fait pas le nettoyage tout dessuite /!\

&#x25B6; Lance l installation avec les parametres par default

&#x25B6; Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir

&#x25B6; Double clic sur le raccourci FindyKill sur ton bureau

&#x25B6; Au menu principal,choisi l option 1 (Recherche)

&#x25B6; Post le rapport FindyKill.txt

 * Note : le rapport FindyKill.txt est sauvegardé a la racine du disque

glougaski · Answer

Je l'ai déjà faite cette opération voici le rapport : 


############################## [ FindyKill V4.727 ]

# User : Anthony (Administrateurs) # TOSHIBA
# Update on 27/04/09 by Chiquitine29
# Start at: 00:00:14 | 28/04/2009
# Website : http://pagesperso-orange.fr/FindyKill.Ad.Remover/

# Intel(R) Core(TM)2 CPU         T5500  @ 1.66GHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 2
# Internet Explorer 7.0.5730.13
# Windows Firewall Status : Enabled

# C:\ # Disque fixe local # 19,53 Go (2,78 Go free) # NTFS
# D:\ # Disque fixe local # 48,83 Go (2,39 Go free) [Musique] # NTFS
# E:\ # Disque fixe local # 80,68 Go (1,83 Go free) [Divers] # NTFS
# F:\ # Disque CD-ROM # 506,57 Mo (0 Mo free) [Kit Freebox 4.1] # CDFS
# G:\ # Disque CD-ROM # 622,96 Mo (0 Mo free) [VIDEOSTUDIO] # CDFS
# H:\ # Disque amovible # 1,88 Go (769,16 Mo free) [PHILIPS] # FAT32
# I:\ # Disque CD-ROM
# J:\ # Disque fixe local # 465,76 Go (211,9 Go free) # NTFS
# K:\ # Disque fixe local # 465,76 Go (144,55 Go free) [FreeAgent Drive] # NTFS

############################## [ Active Processes ] 

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Seagate\Basics\Service\SyncServicesBasics.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\System32
vsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

################## [ Infected Files \ Folders ]

Deleted ! C:\WINDOWS\Prefetch\15177765.EXE-3AD61D27.pf  
Deleted ! C:\WINDOWS\Prefetch\385625.EXE-2A34267C.pf  
Deleted ! C:\WINDOWS\Prefetch\WINUPGRO.EXE-17681AA8.pf  
Deleted ! "C:\Documents and Settings\Anthony\Application Data\drivers\srosa2.sys"  
Deleted ! "C:\Documents and Settings\Anthony\Application Data\drivers\wfsintwq.sys"  
Deleted ! "C:\Documents and Settings\Anthony\Application Data\drivers\winupgro.exe"  
Deleted ! "C:\Documents and Settings\Anthony\Application Data\drivers\downld"  
Deleted ! "C:\Documents and Settings\Anthony\Application Data\drivers"  

################## [ Infected Temp Files ]

Deleted ! C:\Documents and Settings\Anthony\Local Settings\Temporary Internet Files\Content.IE5\3N75PQLE\b64_1[1].jpg  
Deleted ! C:\Documents and Settings\Anthony\Local Settings\Temporary Internet Files\Content.IE5\P6T4MAOR\b64_1[1].jpg  

################## [ Registry / Infected keys ] 

Deleted ! HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa   
Deleted ! HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA   
Deleted ! HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sK9Ou0s   
Deleted ! HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SK9OU0S   
Deleted ! HKEY_CURRENT_USER\Software\bisoft   
Deleted ! HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\patch   
Deleted ! HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro   
Deleted ! HKEY_USERS\S-1-5-21-1614895754-412668190-725345543-1003\Software\FFC   
Deleted ! HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\"drvsyskit"  

################## [ Cleaning Removable drives ] 

(!) Not deleted ! F:\autorun.inf 
(!) Not deleted ! G:\autorun.inf 
Deleted ! J:\autorun.inf  
Deleted ! K:\autorun.inf  

################## [ Registry / Mountpoint2 ]

# -> Not found !  

################## [ States / Restarting of services ]  

# Services : [ Auto=2 / Request=3 / Disable=4 ]

# Ndisuio -> # Type of startup =3  
# Ip6Fw -> # Type of startup =2  
# SharedAccess -> # Type of startup =2  
# wuauserv -> # Type of startup =2  
# wscsvc -> # Type of startup =2  
# Safe boot mode restored !  

################## [ Searching Other Infections ]

# Références de comparaison Bagle MD5 :

File ... : C:\Documents and Settings\Anthony\Application Data\drivers\winupgro.exe
CRC32 .. : 2156a8f7
MD5 .... : 4c247679ce876a4818163a56981157fe 
 
Deleted ! : C:\Program Files\Fichiers communs\Nero\Lib\NMBgMonitor.exe
# Taille : 897024 # MD5 : 4C247679CE876A4818163A56981157FE

 
################## [ Corrupted files # Re-Installation required ] 
 
C:\Documents and Settings\Anthony\Bureau\HiJackThis.exe
C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\Update.exe
C:\Program Files\Mozilla Firefox\uninstall\helper.exe
C:\Program Files\MSN\MSNCoreFiles\update.exe
C:\WINDOWS\$hf_mig$\KB873339\update\update.exe
C:\WINDOWS\$hf_mig$\KB885835\update\update.exe
C:\WINDOWS\$hf_mig$\KB885836\update\update.exe
C:\WINDOWS\$hf_mig$\KB886185\update\update.exe
C:\WINDOWS\$hf_mig$\KB887472\update\update.exe
C:\WINDOWS\$hf_mig$\KB888302\update\update.exe
C:\WINDOWS\$hf_mig$\KB890046\update\update.exe
C:\WINDOWS\$hf_mig$\KB890859\update\update.exe
C:\WINDOWS\$hf_mig$\KB891781\update\update.exe
C:\WINDOWS\$hf_mig$\KB893756\update\update.exe
C:\WINDOWS\$hf_mig$\KB896358\update\update.exe
C:\WINDOWS\$hf_mig$\KB896423\update\update.exe
C:\WINDOWS\$hf_mig$\KB896424\update\update.exe
C:\WINDOWS\$hf_mig$\KB896428\update\update.exe
C:\WINDOWS\$hf_mig$\KB898461\update\update.exe
C:\WINDOWS\$hf_mig$\KB899587\update\update.exe
C:\WINDOWS\$hf_mig$\KB899589\update\update.exe
C:\WINDOWS\$hf_mig$\KB899591\update\update.exe
C:\WINDOWS\$hf_mig$\KB900485\update\update.exe
C:\WINDOWS\$hf_mig$\KB900725\update\update.exe
C:\WINDOWS\$hf_mig$\KB901017\update\update.exe
C:\WINDOWS\$hf_mig$\KB901214\update\update.exe
C:\WINDOWS\$hf_mig$\KB902400\update\update.exe
C:\WINDOWS\$hf_mig$\KB904706\update\update.exe
C:\WINDOWS\$hf_mig$\KB904942\update\update.exe
C:\WINDOWS\$hf_mig$\KB905414\update\update.exe
C:\WINDOWS\$hf_mig$\KB905749\update\update.exe
C:\WINDOWS\$hf_mig$\KB908519\update\update.exe
C:\WINDOWS\$hf_mig$\KB908531\update\update.exe
C:\WINDOWS\$hf_mig$\KB910437\update\update.exe
C:\WINDOWS\$hf_mig$\KB911280\update\update.exe
C:\WINDOWS\$hf_mig$\KB911562\update\update.exe
C:\WINDOWS\$hf_mig$\KB911927\update\update.exe
C:\WINDOWS\$hf_mig$\KB912919\update\update.exe
C:\WINDOWS\$hf_mig$\KB913580\update\update.exe
C:\WINDOWS\$hf_mig$\KB914388\update\update.exe
C:\WINDOWS\$hf_mig$\KB914389\update\update.exe
C:\WINDOWS\$hf_mig$\KB915865\update\update.exe
C:\WINDOWS\$hf_mig$\KB916595\update\update.exe
C:\WINDOWS\$hf_mig$\KB917344\update\update.exe
C:\WINDOWS\$hf_mig$\KB917422\update\update.exe
C:\WINDOWS\$hf_mig$\KB917953\update\update.exe
C:\WINDOWS\$hf_mig$\KB918118\update\update.exe
C:\WINDOWS\$hf_mig$\KB919007\update\update.exe
C:\WINDOWS\$hf_mig$\KB920213\update\update.exe
C:\WINDOWS\$hf_mig$\KB920670\update\update.exe
C:\WINDOWS\$hf_mig$\KB920683\update\update.exe
C:\WINDOWS\$hf_mig$\KB920685\update\update.exe
C:\WINDOWS\$hf_mig$\KB920872\update\update.exe
C:\WINDOWS\$hf_mig$\KB921398\update\update.exe
C:\WINDOWS\$hf_mig$\KB921503\update\update.exe
C:\WINDOWS\$hf_mig$\KB921883\update\update.exe
C:\WINDOWS\$hf_mig$\KB922582\update\update.exe
C:\WINDOWS\$hf_mig$\KB922616\update\update.exe
C:\WINDOWS\$hf_mig$\KB922819\update\update.exe
C:\WINDOWS\$hf_mig$\KB923191\update\update.exe
C:\WINDOWS\$hf_mig$\KB923414\update\update.exe
C:\WINDOWS\$hf_mig$\KB923561\update\update.exe
C:\WINDOWS\$hf_mig$\KB923980\update\update.exe
C:\WINDOWS\$hf_mig$\KB924191\update\update.exe
C:\WINDOWS\$hf_mig$\KB924270\update\update.exe
C:\WINDOWS\$hf_mig$\KB924496\update\update.exe
C:\WINDOWS\$hf_mig$\KB925902\update\update.exe
C:\WINDOWS\$hf_mig$\KB926255\update\update.exe
C:\WINDOWS\$hf_mig$\KB926436\update\update.exe
C:\WINDOWS\$hf_mig$\KB927779\update\update.exe
C:\WINDOWS\$hf_mig$\KB927802\update\update.exe
C:\WINDOWS\$hf_mig$\KB927891\update\update.exe
C:\WINDOWS\$hf_mig$\KB928255\update\update.exe
C:\WINDOWS\$hf_mig$\KB928843\update\update.exe
C:\WINDOWS\$hf_mig$\KB929123\update\update.exe
C:\WINDOWS\$hf_mig$\KB929969\update\update.exe
C:\WINDOWS\$hf_mig$\KB930178\update\update.exe
C:\WINDOWS\$hf_mig$\KB930916\update\update.exe
C:\WINDOWS\$hf_mig$\KB931261\update\update.exe
C:\WINDOWS\$hf_mig$\KB931784\update\update.exe
C:\WINDOWS\$hf_mig$\KB931836\update\update.exe
C:\WINDOWS\$hf_mig$\KB932168\update\update.exe
C:\WINDOWS\$hf_mig$\KB932823-v3\update\update.exe
C:\WINDOWS\$hf_mig$\KB933360\update\update.exe
C:\WINDOWS\$hf_mig$\KB933566\update\update.exe
C:\WINDOWS\$hf_mig$\KB933729\update\update.exe
C:\WINDOWS\$hf_mig$\KB935839\update\update.exe
C:\WINDOWS\$hf_mig$\KB935840\update\update.exe
C:\WINDOWS\$hf_mig$\KB936021\update\update.exe
C:\WINDOWS\$hf_mig$\KB936357\update\update.exe
C:\WINDOWS\$hf_mig$\KB937143\update\update.exe
C:\WINDOWS\$hf_mig$\KB937894\update\update.exe
C:\WINDOWS\$hf_mig$\KB938127\update\update.exe
C:\WINDOWS\$hf_mig$\KB938127-IE7\update\update.exe
C:\WINDOWS\$hf_mig$\KB938464\update\update.exe
C:\WINDOWS\$hf_mig$\KB938828\update\update.exe
C:\WINDOWS\$hf_mig$\KB938829\update\update.exe
C:\WINDOWS\$hf_mig$\KB939653\update\update.exe
C:\WINDOWS\$hf_mig$\KB941202\update\update.exe
C:\WINDOWS\$hf_mig$\KB941568\update\update.exe
C:\WINDOWS\$hf_mig$\KB941644\update\update.exe
C:\WINDOWS\$hf_mig$\KB941693\update\update.exe
C:\WINDOWS\$hf_mig$\KB942615\update\update.exe
C:\WINDOWS\$hf_mig$\KB942615-IE7\update\update.exe
C:\WINDOWS\$hf_mig$\KB942763\update\update.exe
C:\WINDOWS\$hf_mig$\KB942840\update\update.exe
C:\WINDOWS\$hf_mig$\KB943055\update\update.exe
C:\WINDOWS\$hf_mig$\KB943460\update\update.exe
C:\WINDOWS\$hf_mig$\KB943485\update\update.exe
C:\WINDOWS\$hf_mig$\KB944533\update\update.exe
C:\WINDOWS\$hf_mig$\KB944533-IE7\update\update.exe
C:\WINDOWS\$hf_mig$\KB944653\update\update.exe
C:\WINDOWS\$hf_mig$\KB945553\update\update.exe
C:\WINDOWS\$hf_mig$\KB946026\update\update.exe
C:\WINDOWS\$hf_mig$\KB946627\update\update.exe
C:\WINDOWS\$hf_mig$\KB946648\update\update.exe
C:\WINDOWS\$hf_mig$\KB947864-IE7\update\update.exe
C:\WINDOWS\$hf_mig$\KB948590\update\update.exe
C:\WINDOWS\$hf_mig$\KB948881\update\update.exe
C:\WINDOWS\$hf_mig$\KB950749\update\update.exe
C:\WINDOWS\$hf_mig$\KB950759-IE7\update\update.exe
C:\WINDOWS\$hf_mig$\KB950760\update\update.exe
C:\WINDOWS\$hf_mig$\KB950762\update\update.exe
C:\WINDOWS\$hf_mig$\KB950974\update\update.exe
C:\WINDOWS\$hf_mig$\KB951066\update\update.exe
C:\WINDOWS\$hf_mig$\KB951072-v2\update\update.exe
C:\WINDOWS\$hf_mig$\KB951376\update\update.exe
C:\WINDOWS\$hf_mig$\KB951376-v2\update\update.exe
C:\WINDOWS\$hf_mig$\KB951698\update\update.exe
C:\WINDOWS\$hf_mig$\KB951748\update\update.exe
C:\WINDOWS\$hf_mig$\KB952004\update\update.exe
C:\WINDOWS\$hf_mig$\KB952287\update\update.exe
C:\WINDOWS\$hf_mig$\KB952954\update\update.exe
C:\WINDOWS\$hf_mig$\KB953838-IE7\update\update.exe
C:\WINDOWS\$hf_mig$\KB953839\update\update.exe
C:\WINDOWS\$hf_mig$\KB954211\update\update.exe
C:\WINDOWS\$hf_mig$\KB954600\update\update.exe
C:\WINDOWS\$hf_mig$\KB955069\update\update.exe
C:\WINDOWS\$hf_mig$\KB955839\update\update.exe
C:\WINDOWS\$hf_mig$\KB956390-IE7\update\update.exe
C:\WINDOWS\$hf_mig$\KB956391\update\update.exe
C:\WINDOWS\$hf_mig$\KB956572\update\update.exe
C:\WINDOWS\$hf_mig$\KB956802\update\update.exe
C:\WINDOWS\$hf_mig$\KB956803\update\update.exe
C:\WINDOWS\$hf_mig$\KB956841\update\update.exe
C:\WINDOWS\$hf_mig$\KB957095\update\update.exe
C:\WINDOWS\$hf_mig$\KB957097\update\update.exe
C:\WINDOWS\$hf_mig$\KB958215-IE7\update\update.exe
C:\WINDOWS\$hf_mig$\KB958644\update\update.exe
C:\WINDOWS\$hf_mig$\KB958687\update\update.exe
C:\WINDOWS\$hf_mig$\KB958690\update\update.exe
C:\WINDOWS\$hf_mig$\KB959426\update\update.exe
C:\WINDOWS\$hf_mig$\KB960225\update\update.exe
C:\WINDOWS\$hf_mig$\KB960714-IE7\update\update.exe
C:\WINDOWS\$hf_mig$\KB960715\update\update.exe
C:\WINDOWS\$hf_mig$\KB960803\update\update.exe
C:\WINDOWS\$hf_mig$\KB961260-IE7\update\update.exe
C:\WINDOWS\$hf_mig$\KB961373\update\update.exe
C:\WINDOWS\$hf_mig$\KB963027-IE7\update\update.exe
C:\WINDOWS\$hf_mig$\KB967715\update\update.exe
C:\WINDOWS\SoftwareDistribution\Download\23ec66f2314a80d718b5483ab6e865af\sysinfo.exe
C:\WINDOWS\SoftwareDistribution\Download\23ec66f2314a80d718b5483ab6e865af\update\update.exe
C:\WINDOWS\SoftwareDistribution\Download\70ccc3de7e94865059fbcf2f809c03b1\update\update.exe
C:\WINDOWS\system32\dllcacheegister.exe
C:\WINDOWS\system32\dllcache\sysinfo.exe

################################### [ Cracks / Keygens / Serials ]

C:\Documents and Settings\Anthony\Bureau\Divers\Patch NoCD + Construction.rar  
C:\Documents and Settings\Anthony\Mes documents\Mes fichiers reçus\keygen_master.rar  

################## [ ! End of Report # FindyKill V4.727 ! ]

pimprenelle27 · Answer

le rapport date du 28/04/2009  moi j'en veux un d'aujourd'hui.

glougaski · Answer

ok, j'envois ça ce soir, là je laisse finir l'analyse bit defender en ligne et malwarebyte

glougaski · Answer

par contre j'ai pas assez de ports usb de disponible pour brancher tous mes appareils externes, je fais comment ?

Infection virus, rapport avira

5 réponses

Discussions similaires