Infection par Balge "win32.bagle.suq@mm" .... Fermé

Question

Bonjour, mon pc (sous Windows 7) est infecté par un Bagle je suppose. 

BitDefender me bloque constamment des virus de ce genre ainsi que des Trojan, je crois, la plupart se situent dans "C:\Users\MOULEMA\AppData\Roaming\hidires". 
Le pare-feu de BitDefender est bloqué, il ne peut pas s'activer et CCleaner ou tout autre outils de protection ne marche pas ... Je ne sais pas quoi faire, j'ai essayé d'utiliser AntiBagle.exe de BitDefender mais il se bloque à moment dans l'analyse des fichier excutes au démarrage sur le fichier : "C:\Windows\system32\userinit.exe" ... Bref j'ai essayé de chercher sur internet mais je ne comprends parmi toutes ces procédures ce qu'il faut faire pour supprimer ces virus efficacement.

Aidez-moi svp ! Merci beaucoup d'avance ! 

Configuration: Windows 7 / Firefox 3.6.3

Utilisateur anonyme · Answer

bonjour

Téléchargez FindyKill sur le Bureau.

http://pagesperso-orange.fr/NosTools/Chiquitine29/Setup.exe

Mirroir :

http://findykill.changelog.fr/Setup.exe

* Double-cliquez sur FindyKill présent sur le Bureau.

* Choisissez l'option 1 (Recherche).

* Laissez travailler l'outil.

* Ensuite postez le rapport FindyKill.txt qui apparaîtra (si vous avez créé un sujet sur un forum pour vous faire aider).

* Note : Le rapport FindyKill.txt est sauvegardé à la racine du disque (C:\FindyKill.txt).

(CTRL+A pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller)

* Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

* Tuto : http://pagesperso-orange.fr/NosTools/index.html

yves.mou · Answer

Merci pour ton aide, voici le rapport. Peux-tu me dire à quoi cela sert que je le poste ? Merci en tout cas ! :D (le voici en 2 parties sinon il ne passe pas :

PARTIE I :


############################## | FindyKill V5.040 |

# User : MOULEMA (Administrateurs) # MOULEMA-PC
# Update on 23/04/2010 by El Desaparecido
# Start at: 17:30:51 | 28/04/2010
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Contact : FindyKill.Contact@gmail.com

# AMD Athlon(tm) 64 Processor 3500+
# Microsoft Windows 7 Édition Intégrale  (6.1.7600 32-bit) # 
# Internet Explorer 8.0.7600.16385
# Windows Firewall Status : Enabled

# C:\ # Disque fixe local # 74,53 Go (55,76 Go free) [SE7EN] # NTFS
# D:\ # Disque CD-ROM
# F:\ # Disque fixe local # 232,88 Go (124,52 Go free) [DOCUMENTS] # NTFS
# G:\ # Disque amovible
# H:\ # Disque amovible
# J:\ # Disque amovible
# K:\ # Disque amovible
# M:\ # Disque amovible
# N:\ # Disque amovible
# Q:\ # Disque fixe local
 
############################## | Processus infectieux stoppés  | 

"C:\Users\MOULEMA\AppData\Roaming\drivers\winupgro.exe"  (2772)
"C:\Users\MOULEMA\AppData\Roaming\hidires\flec003.exe"  (2992)

################## | Eléments infectieux |

C:\Windows\system32\srosa2.sys  
C:\Users\MOULEMA\AppData\Roaming\drivers  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14740269.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14740862.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14741298.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14741595.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14743841.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14745011.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14748506.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14748942.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14749426.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14749676.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14749956.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14750206.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14750643.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14750908.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14751204.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14751938.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14752624.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14759145.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14761313.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14762265.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14762936.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14763622.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14763887.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14764199.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14764449.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14764808.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14765947.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14766914.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14767210.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14770720.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14771141.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14771625.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14771999.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14772296.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14772577.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14772889.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14774402.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14775962.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14776258.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14776601.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14777225.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14777771.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14778364.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14779097.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14779472.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14779877.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14780221.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14780611.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14780907.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14781266.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14782311.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14783263.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14783543.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14784136.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14784511.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14784901.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14785150.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14785493.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14786585.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14787085.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14787755.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14788239.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14788660.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14789175.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14789596.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14789986.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14790251.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14790595.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14791031.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14791343.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14791593.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14791921.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14792202.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14792592.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14792935.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14793216.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14793465.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14793777.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14794027.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14794354.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14794791.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14795290.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14795758.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14796195.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14796819.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14840063.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14840312.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14840780.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14840983.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14841295.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14841763.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14842262.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14842715.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14843214.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14844056.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14844977.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14845273.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14845601.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14845928.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14846271.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14847145.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14848065.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14848424.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14848877.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14849189.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14850171.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14850437.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14856802.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14857800.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14858564.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14859001.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14859313.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14859563.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14859812.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14861045.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14862340.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14864570.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14867363.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14868034.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14868736.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14869344.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14870218.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14870498.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14870795.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14871076.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14871403.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14871653.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14871965.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14872152.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14872651.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14872901.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14873431.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14876036.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14877706.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14878220.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14878844.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14879234.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14879687.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14880030.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14885131.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14885428.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14885740.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14886754.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14887581.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14888080.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14888579.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14889515.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14890030.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14890560.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14891137.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14891340.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14891605.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14892245.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14892885.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14893181.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14893493.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14893867.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14894507.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14894866.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14895303.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14895537.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14895911.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\downld\14896192.exe  
C:\Users\MOULEMA\AppData\Roaming\drivers\winupgro.exe  
C:\Users\MOULEMA\AppData\Roaming\hidires  
C:\Users\MOULEMA\AppData\Roaming\hidires\config  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\AC_BootstrapIPs.dat  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\AC_SearchStrings.dat  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\AC_ServerMetURLs.dat  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\cancelled.met  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\clients.met  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\clients.met.bak  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\cryptkey.dat  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\emfriends.met  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\key_index.dat  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\known.met  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\known2_64.met  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\load_index.dat  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\nodes.dat  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\preferences.dat  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\preferences.ini  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\preferencesKad.dat  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\server.met  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\server_met.old  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\shareddir.dat  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\src_index.dat  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\statistics.ini  
C:\Users\MOULEMA\AppData\Roaming\hidires\config\StoredSearches.met  
C:\Users\MOULEMA\AppData\Roaming\hidires\downloads.bak  
C:\Users\MOULEMA\AppData\Roaming\hidires\downloads.txt  
C:\Users\MOULEMA\AppData\Roaming\hidires\file.exe  
C:\Users\MOULEMA\AppData\Roaming\hidires\flec003.exe  
C:\Users\MOULEMA\AppData\Roaming\hidires\flec005.exe  
C:\Users\MOULEMA\AppData\Roaming\hidires\Incoming  
C:\Users\MOULEMA\AppData\Roaming\hidires\lang  
C:\Users\MOULEMA\AppData\Roaming\hidires\names.txt  
C:\Users\MOULEMA\AppData\Roaming\hidires\server.txt  
C:\Users\MOULEMA\AppData\Roaming\hidires\skins  
C:\Users\MOULEMA\AppData\Roaming\hidires\Temp  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\185Graph 4.0J.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\2X LoadBalancer for Terminal Services 3.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\AcePlanner 1.1.1.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Advanced RAR Password Recovery 1.53.48.12.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Age of Mythology - Myth Island scenario.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\AMan Pro for Amazon Sellers 3.1 [With Crack].zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Architectural Wonders 1 Screensaver.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Auction Break Even and Fee Cost Analysis 1.1.3.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Auto File Copy 1.6 [Patch].zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Awakening 1.0 [Cracked].zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Bellas Artes Palace Screensaver 1.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\BeyondSync 1.59.0.0 Beta.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Bid-n-Invoice Painter 1.5.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Business Manager 6.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\CD to WAV Ripper 1.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\CDML 1.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Cerberus FTP Server 2.47.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\ChessTeacher 1.2.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Chicory.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Chilkat Crypt C++ Library.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Collision 0.8.2007.0217.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\ColorDabbler 1 [Crack].zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Colourflow Graphics icons.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Complete Mail Server 1.7.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Crossword Express Compiler 7.1b [Key].zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\DigiMode FlashAll 1.00.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\DirSpy 2.8 [Cracked].zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Disk Drive Security 3.1.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\e-Gold Autopay 1.0.2 Crack.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\EDF(+) Compatibility Checker 1.1.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Emailarchitect Email Server 5.1.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Embird Alphabet 1 1.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\EMS Advanced Export Component Suite 3.40.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\ePurse 3.0.2 (KeyGen).zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Evidence Destructor 2.5.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\eXEditors 1.0.1.9.2209 [Crack].zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Ezy Exporter Premium Edition 3.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Fallout Tactics Brotherhood of Steel demo.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\FilePreviewer 1.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\FontLab Studio 5.0.2.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Free Gifts Icons.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\GasDandy 1.3.3e.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Goebel Desktop Search Toolbar 2.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Granot Installer 1.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\GridBagger 1.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\GUITAR COMBOS Ac Box Combo 1.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\HyperText Studio (Professional Edition) 5.0.0.48 [Cracked].zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\IndicBand 0.1 (Cracked).zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Info-Pack.com Unixtime2Date 1.01.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Inhabitants of Wood Screensaver 1.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\IP Helper 3.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\iSofter DVD to YouTube Converter 3.0.2007.205.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Jungle Cats 1.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Just Wallpaper 3.1a.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Konvertor xxx2pdf DLL 1.02 Patch.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\LanTalk XP 2.93.7455 (Patch).zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Lines 2.6.2.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Local Account Manager 2.0.1.1.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\LogStomper 2.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Magenta Systems File Transfer Components 1.8 [With Crack].zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Max Payne 2 The Fall of Max Payne RezzieMod 3.3.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Monitor Computer Usage Software 7.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Multi Pos for Restaurant 3.07.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\My Folder to My Computer 5.00.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\NewsBliss 2.2.10.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\NewsFan 1.3.3.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\NotesXP 1.54.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Numerology Calculator 3.4.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\O&O UnErase 4.1 Build 1419.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\OidView Professional 2.8.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\PbxTools PhoneJournal 1.6.1006.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\pcSongster 1.5.2.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Phosphor 1.2.2.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Pixel Patchwork 1.2.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Pixels 1.5.1.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Portable Sony Playstation DVD Converter 3.2.6.50.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\PractiCount Toolbar Standard for MS Office 1.4 With Crack.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\ProcessWatcher 3.2.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\ProdEx 4U 1.5.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Pseudo Random Number Generator 1.0.0.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Relaxing Ocean 3.02 [Patch].zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Retro Flanger 1208.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Roadkil's Data Byte 1.2.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\RPE Photo 3.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Safe2Net 3.0 With Crack.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Safely Remove 2.2 [Key].zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\SakasaMouse 1.03.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\ScreenMarker 1.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Screenshot Helper 1.1.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Shri Jagannatha Puri Dhama 1.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\ShutDownOne Home 3.02 Key+Serial.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Simple Failover 1.21.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Smoooth Deep Breathing Assistant 3.1.1.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Smtp Scaner 1.5.0 [Key].zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\SoftBurner 3.1.2 Patch.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Sophos.Antivirus.With.On-Access.Scanning.v5.1.0.Bilingual.Linux.Retail-Arn.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Sothink SWF Decompiler-Flash Decompiler 3.7 build 70607 (KeyGen).zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Sound Studio 3.0.3.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Star IP TV 2.1.2.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\SwizzTool 6.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\System Run Lite 2.2 build 30.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\T37FSP 2.0.5.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\The Performance Organiser 2.0.522.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\The Sims - Lieutenant Torres skin.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\TIFFDLL50 & TIFFDLL80 [Key].zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\TIREAL WEBCAM GUARD 1.2 Serial.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Track n Trade High Finance 1.0.4.1.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Universal Play List Editor 1.01.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Unreal Tournament 2003 - Photon map.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\UPS Tracking Tool 1.27 [Key+Serial].zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Video to FLV and SWF Converter 3.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\ViruScape 2006.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Vivid Report for C++ Builder 5 3.0 Std.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Wallpaper Engine 1.0 (Cracked).zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\WatcherForYou 1.2.2006.2011.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\WebExtension toolbar for IE 4.5.132.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\WinLock 2.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Wondershare DVD to BlackBerry Converter 3.2.51.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Wwhois 2.1.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\X360 Ftp Client ActiveX OCX 2.11.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\XMLFox Freeware 2.01.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Yahoo! News - World News 2.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Yaplet Sidebar 0.7.6.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\Your Honey Frame 1.6.0.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\WDIR\[PC.APP.-.ITA].-.NOD32.2.51.26.zip  
C:\Users\MOULEMA\AppData\Roaming\hidires\webserver

Utilisateur anonyme · Answer

bien le rapport sert a savoir ce qui va etre supprimer 

ces important car il ne faut pas qu'il supprime n'importe quoi donc je vérifie

le rapport n'est pas complet 

FindyKill suppression 

! Déconnecte toi et ferme toutes application en cours (navigateur compris ) .

* Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...

* Double clique sur setup.exe présent sur ton bureau pour lancer l'outil.

* Au menu principal choisis l'option " F " pour français et tape sur [entrée] .

* Au second menu choisis l'option 2 (suppression) et tape sur [entrée]

* Le pc va redémarrer automatiquement ...

? le programme va travailler, ne touche à rien ... , ton bureau ne sera pas accessible c est normal !

? Poste le rapport qui apparaît à la fin ( le rapport est sauvegardé aussi sous C:\FindyKill.txt)

Si le Bureau ne réapparaît pas, presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tape explorer.exe et valide

Infection par Balge "win32.bagle.suq@mm" ....

3 réponses

Discussions similaires