[malware]Look2Me

Résolu
mib34 -  
je pense que je suis infecté par Look2Me ( jai la plupart des logiciel gratuit genre spybot adaware spy sweeper a squared et norton 2004 mis a jour)
voici mon hijackthis

Logfile of HijackThis v1.99.1
Scan saved at 19:38:06, on 13/02/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\System32\S3rv32.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\a-squared\a2guard.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\a-squared\a2start.exe
C:\Program Files\a-squared\a2scan.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\mib\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AdobeReaderPro] S3rv32.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P31 "EPSON Stylus Photo RX420 Series" /O5 "LPT1:" /M "Stylus Photo RX420"
O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series (Copie 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P41 "EPSON Stylus Photo RX420 Series (Copie 1)" /O6 "USB001" /M "Stylus Photo RX420"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [WinDLL (v4mon.dll)] rundll32.exe C:\WINDOWS\System32\v4mon.dll,start
O4 - HKLM\..\RunServices: [AdobeReaderPro] S3rv32.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [a-squared] "C:\Program Files\a-squared\a2guard.exe"
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O14 - IERESET.INF: START_PAGE_URL=http://www.google.fr/
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1139826827328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0AC4A316-7772-4E0A-90B4-5ABC9E470ADE}: NameServer = 80.10.246.130 80.10.246.3
O17 - HKLM\System\CS1\Services\Tcpip\..\{0AC4A316-7772-4E0A-90B4-5ABC9E470ADE}: NameServer = 80.10.246.130 80.10.246.3
O17 - HKLM\System\CS2\Services\Tcpip\..\{0AC4A316-7772-4E0A-90B4-5ABC9E470ADE}: NameServer = 80.10.246.130 80.10.246.3
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: ddabb - ddabb.dll (file missing)
O20 - Winlogon Notify: ddaby - C:\WINDOWS\System32\ddaby.dll (file missing)
O20 - Winlogon Notify: MS-DOS Emulation - C:\WINDOWS\system32\mdmtapi.dll (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe

17 réponses

  1.  incognito02 Contributeur
    Bonsoir Mib34

    telecharge l2mfix ici :

    http://www.downloads.subratam.org/l2mfix.exe

    1. extraire le fichier sur le bureau
    2. désactiver l'antivirus (car process est détecté faussement comme virus malware par certains antivirus)
    3. lancer l2mfix.bat et sélectionner l'option #1 et faire Enter pour faire apparaître le log (cela prend qqs minutes)
    4. Copie le log et colle sur un FORUM

    A+
    1. mib34 Auteur
      voili voila le log ;^)

      L2MFIX find log 010406
      These are the registry keys present
      **********************************************************************************
      Winlogon/notify:
      Windows Registry Editor Version 5.00

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
      "Asynchronous"=dword:00000000
      "Impersonate"=dword:00000000
      "DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\
      6c,00,00,00
      "Logoff"="ChainWlxLogoffEvent"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
      "Asynchronous"=dword:00000000
      "Impersonate"=dword:00000000
      "DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\
      6c,00,6c,00,00,00
      "Logoff"="CryptnetWlxLogoffEvent"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
      "DLLName"="cscdll.dll"
      "Logon"="WinlogonLogonEvent"
      "Logoff"="WinlogonLogoffEvent"
      "ScreenSaver"="WinlogonScreenSaverEvent"
      "Startup"="WinlogonStartupEvent"
      "Shutdown"="WinlogonShutdownEvent"
      "StartShell"="WinlogonStartShellEvent"
      "Impersonate"=dword:00000000
      "Asynchronous"=dword:00000001

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ddabb]
      "Asynchronous"=dword:00000001
      "DllName"="ddabb.dll"
      "Impersonate"=dword:00000000
      "Logon"="Logon"
      "Logoff"="Logoff"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ddaby]
      "Asynchronous"=dword:00000001
      "DllName"="C:\\WINDOWS\\System32\\ddaby.dll"
      "Impersonate"=dword:00000000
      "Startup"="SysLogon"
      "Logoff"="SysLogoff"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MS-DOS Emulation]
      "Asynchronous"=dword:00000000
      "DllName"="C:\\WINDOWS\\system32\\mdmtapi.dll"
      "Impersonate"=dword:00000000
      "Logon"="WinLogon"
      "Logoff"="WinLogoff"
      "Shutdown"="WinShutdown"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
      "DLLName"="wlnotify.dll"
      "Logon"="SCardStartCertProp"
      "Logoff"="SCardStopCertProp"
      "Lock"="SCardSuspendCertProp"
      "Unlock"="SCardResumeCertProp"
      "Enabled"=dword:00000001
      "Impersonate"=dword:00000001
      "Asynchronous"=dword:00000001

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
      "Asynchronous"=dword:00000000
      "DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
      6c,00,6c,00,00,00
      "Impersonate"=dword:00000000
      "StartShell"="SchedStartShell"
      "Logoff"="SchedEventLogOff"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
      "Logoff"="WLEventLogoff"
      "Impersonate"=dword:00000000
      "Asynchronous"=dword:00000001
      "DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\
      6c,00,6c,00,00,00

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
      "DLLName"="WlNotify.dll"
      "Lock"="SensLockEvent"
      "Logon"="SensLogonEvent"
      "Logoff"="SensLogoffEvent"
      "Safe"=dword:00000001
      "MaxWait"=dword:00000258
      "StartScreenSaver"="SensStartScreenSaverEvent"
      "StopScreenSaver"="SensStopScreenSaverEvent"
      "Startup"="SensStartupEvent"
      "Shutdown"="SensShutdownEvent"
      "StartShell"="SensStartShellEvent"
      "PostShell"="SensPostShellEvent"
      "Disconnect"="SensDisconnectEvent"
      "Reconnect"="SensReconnectEvent"
      "Unlock"="SensUnlockEvent"
      "Impersonate"=dword:00000001
      "Asynchronous"=dword:00000001

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
      "Asynchronous"=dword:00000000
      "DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
      6c,00,6c,00,00,00
      "Impersonate"=dword:00000000
      "Logoff"="TSEventLogoff"
      "Logon"="TSEventLogon"
      "PostShell"="TSEventPostShell"
      "Shutdown"="TSEventShutdown"
      "StartShell"="TSEventStartShell"
      "Startup"="TSEventStartup"
      "MaxWait"=dword:00000258
      "Reconnect"="TSEventReconnect"
      "Disconnect"="TSEventDisconnect"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
      "DLLName"="wlnotify.dll"
      "Logon"="RegisterTicketExpiredNotificationEvent"
      "Logoff"="UnregisterTicketExpiredNotificationEvent"
      "Impersonate"=dword:00000001
      "Asynchronous"=dword:00000001

      **********************************************************************************
      useragent:
      Windows Registry Editor Version 5.00

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
      "SV1"=""

      **********************************************************************************
      Shell Extension key:
      Windows Registry Editor Version 5.00

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
      "{00022613-0000-0000-C000-000000000046}"="Feuille de propri‚t‚s du fichier multim‚dia"
      "{176d6597-26d3-11d1-b350-080036a75b03}"="Gestion de scanneur ICM"
      "{1F2E5C40-9550-11CE-99D2-00AA006E086C}"="Page de s‚curit‚ NTFS"
      "{3EA48300-8CF6-101B-84FB-666CCB9BCD32}"="Page des propri‚t‚s de OLE DocFile"
      "{40dd6e20-7c17-11ce-a804-00aa003ca9f6}"="Extensions de l'environnement pour le partage"
      "{41E300E0-78B6-11ce-849B-444553540000}"="PlusPack CPL Extension"
      "{42071712-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Carte du Panneau de configuration"
      "{42071713-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage cran du Panneau de configuration"
      "{42071714-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Panorama du Panneau de configuration"
      "{4E40F770-369C-11d0-8922-00A024AB2DBB}"="Page de s‚curit‚ DS"
      "{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"="Page de compatibilit‚"
      "{56117100-C0CD-101B-81E2-00AA004AE837}"="Gestionnaire de donn‚es endommag‚es de l'environnement"
      "{59099400-57FF-11CE-BD94-0020AF85B590}"="Extension copie de disquette"
      "{59be4990-f85c-11ce-aff7-00aa003ca9f6}"="Extensions de l'environnement pour les objets r‚seau de Microsoft Windows"
      "{5DB2625A-54DF-11D0-B6C4-0800091AA605}"="Gestion d'‚cran ICM"
      "{675F097E-4C4D-11D0-B6C1-0800091AA605}"="Gestion d'imprimante ICM"
      "{764BF0E1-F219-11ce-972D-00AA00A14F56}"="Extensions de l'environnement de compression de fichiers"
      "{77597368-7b15-11d0-a0c2-080036af3f03}"="Extension de l'environnement d'imprimante Web"
      "{7988B573-EC89-11cf-9C00-00AA00A14F56}"="Disk Quota UI"
      "{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA}"="Menu contextuel de cryptage"
      "{85BBD920-42A0-1069-A2E4-08002B30309D}"="Porte-documents"
      "{88895560-9AA2-1069-930E-00AA0030EBC8}"="Extension ic“ne HyperTerminal"
      "{BD84B380-8CA2-1069-AB1D-08000948F534}"="Fonts"
      "{DBCE2480-C732-101B-BE72-BA78E9AD5B27}"="Profil ICC"
      "{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}"="Page de s‚curit‚ des imprimantes"
      "{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"="Extensions de l'environnement pour le partage"
      "{f92e8c40-3d33-11d2-b1aa-080036a75b03}"="Display TroubleShoot CPL Extension"
      "{7444C717-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie PKO"
      "{7444C719-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie Sign"
      "{7007ACC7-3202-11D1-AAD2-00805FC1270E}"="Connexions r‚seau"
      "{992CFFA0-F557-101A-88EC-00DD010CCC48}"="Connexions r‚seau"
      "{E211B736-43FD-11D1-9EFB-0000F8757FCD}"="&Scanneurs et appareils photo"
      "{FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}"="&Scanneurs et appareils photo"
      "{905667aa-acd6-11d2-8080-00805f6596d2}"="&Scanneurs et appareils photo"
      "{3F953603-1008-4f6e-A73A-04AAC7A992F1}"="&Scanneurs et appareils photo"
      "{83bbcbf3-b28a-4919-a5aa-73027445d672}"="&Scanneurs et appareils photo"
      "{F0152790-D56E-4445-850E-4F3117DB740C}"="Remote Sessions CPL Extension"
      "{5F327514-6C5E-4d60-8F16-D07FA08A78ED}"="Auto Update Property Sheet Extension"
      "{60254CA5-953B-11CF-8C96-00AA00B8708C}"="Extensions de l'interpr‚teur de commandes pour l'environnement d'ex‚cution de scripts Windows"
      "{2206CDB2-19C1-11D1-89E0-00C04FD7A829}"="Liaison de donn‚es Microsoft"
      "{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Icon Handler"
      "{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Shell Extension"
      "{D6277990-4C6A-11CF-8D87-00AA0060F5BF}"="Tƒches planifi‚es"
      "{0DF44EAA-FF21-4412-828E-260A8728E7F1}"="Barre des tƒches et menu D‚marrer"
      "{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}"="Rechercher"
      "{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}"="Aide et support"
      "{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}"="Aide et support"
      "{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}"="Ex‚cuter..."
      "{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}"="Internet"
      "{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}"="Courrier ‚lectronique"
      "{D20EA4E1-3957-11d2-A40B-0C5020524152}"="Polices"
      "{D20EA4E1-3957-11d2-A40B-0C5020524153}"="Outils d'administration"
      "{875CB1A1-0F29-45de-A1AE-CFB4950D0B78}"="Audio Media Properties Handler"
      "{40C3D757-D6E4-4b49-BB41-0E5BBEA28817}"="Video Media Properties Handler"
      "{E4B29F9D-D390-480b-92FD-7DDB47101D71}"="Wav Properties Handler"
      "{87D62D94-71B3-4b9a-9489-5FE6850DC73E}"="Avi Properties Handler"
      "{A6FD9E45-6E44-43f9-8644-08598F5A74D9}"="Midi Properties Handler"
      "{c5a40261-cd64-4ccf-84cb-c394da41d590}"="Video Thumbnail Extractor"
      "{5E6AB780-7743-11CF-A12B-00AA004AE837}"="Barre d'outils Internet Microsoft"
      "{22BF0C20-6DA7-11D0-B373-00A0C9034938}"="tat du t‚l‚chargement"
      "{91EA3F8B-C99B-11d0-9815-00C04FD91972}"="Dossier Bureau ‚tendu"
      "{6413BA2C-B461-11d1-A18A-080036B11A03}"="Dossier du shell augment‚"
      "{F61FFEC1-754F-11d0-80CA-00AA005B4383}"="BandProxy"
      "{7BA4C742-9E81-11CF-99D3-00AA004AE837}"="Bande du navigateur Microsoft"
      "{30D02401-6A81-11d0-8274-00C04FD5AE38}"="Bande de recherche"
      "{32683183-48a0-441b-a342-7c2a440a9478}"="Media Band"
      "{169A0691-8DF9-11d1-A1C4-00C04FD75D13}"="Volet int‚gr‚ de recherche"
      "{07798131-AF23-11d1-9111-00A0C98BA67D}"="Recherche Web"
      "{AF4F6510-F982-11d0-8595-00AA004CD6D8}"="Utilitaire des options de l'arborescence du Registre"
      "{01E04581-4EEE-11d0-BFE9-00AA005B4383}"="&Adresse"
      "{A08C11D2-A228-11d0-825B-00AA005B4383}"="BoŒte d'entr‚e de l'adresse"
      "{00BB2763-6A77-11D0-A535-00C04FD7D062}"="Saisie semi-automatique Microsoft"
      "{7376D660-C583-11d0-A3A5-00C04FD706EC}"="TridentImageExtractor"
      "{6756A641-DE71-11d0-831B-00AA005B4383}"="Liste de saisie semi-automatique MRU"
      "{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}"="Liste de saisie semi-automatique personnalis‚e MRU"
      "{7e653215-fa25-46bd-a339-34a2790f3cb7}"="Accessible"
      "{acf35015-526e-4230-9596-becbe19f0ac9}"="Barre de progrŠs auto-ouvrante"
      "{E0E11A09-5CB8-4B6C-8332-E00720A168F2}"="Analyseur de la barre d'adresses"
      "{00BB2764-6A77-11D0-A535-00C04FD7D062}"="Liste de saisie semi-automatique de l'historique Microsoft"
      "{03C036F1-A186-11D0-824A-00AA005B4383}"="Liste de saisie semi-automatique du dossier Shell Microsoft"
      "{00BB2765-6A77-11D0-A535-00C04FD7D062}"="Conteneur de la liste de saisie semi-automatique multiple Microsoft"
      "{ECD4FC4E-521C-11D0-B792-00A0C90312E1}"="Menu Site de bandes"
      "{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}"="Shell DeskBarApp"
      "{ECD4FC4C-521C-11D0-B792-00A0C90312E1}"="Barre du Bureau"
      "{ECD4FC4D-521C-11D0-B792-00A0C90312E1}"="Shell Rebar BandSite"
      "{DD313E04-FEFF-11d1-8ECD-0000F87A470C}"="Assistance utilisateur"
      "{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}"="ParamŠtres du dossier global"
      "{EFA24E61-B078-11d0-89E4-00C04FC9E26E}"="Favorites Band"
      "{0A89A860-D7B1-11CE-8350-444553540000}"="Shell Automation Inproc Service"
      "{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}"="Shell DocObject Viewer"
      "{A5E46E3A-8849-11D1-9D8C-00C04FC99D61}"="Microsoft Browser Architecture"
      "{FBF23B40-E3F0-101B-8488-00AA003E56F8}"="InternetShortcut"
      "{3C374A40-BAE4-11CF-BF7D-00AA006946EE}"="Microsoft Url History Service"
      "{FF393560-C2A7-11CF-BFF4-444553540000}"="Historique"
      "{7BD29E00-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files"
      "{7BD29E01-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files"
      "{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"="Microsoft Url Search Hook"
      "{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}"="Image de d‚marrage de la Suite IE4"
      "{67EA19A0-CCEF-11d0-8024-00C04FD75D13}"="CDF Extension Copy Hook"
      "{131A6951-7F78-11D0-A979-00C04FD705A2}"="ISFBand OC"
      "{9461b922-3c5a-11d2-bf8b-00c04fb93661}"="Search Assistant OC"
      "{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}"="Internet"
      "{871C5380-42A0-1069-A2EA-08002B30309D}"="Internet Name Space"
      "{EFA24E64-B078-11d0-89E4-00C04FC9E26E}"="Explorer Band"
      "{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service"
      "{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service"
      "{88C6C381-2E85-11D0-94DE-444553540000}"="Dossier ActiveX Cache"
      "{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"="WebCheck"
      "{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}"="Subscription Mgr"
      "{F5175861-2688-11d0-9C5E-00AA00A45957}"="Dossier Inscription"
      "{08165EA0-E946-11CF-9C87-00AA005127ED}"="WebCheckWebCrawler"
      "{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}"="WebCheckChannelAgent"
      "{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}"="TrayAgent"
      "{7D559C10-9FE9-11d0-93F7-00AA0059CE02}"="Code Download Agent"
      "{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}"="ConnectionAgent"
      "{D8BD2030-6FC9-11D0-864F-00AA006809D9}"="PostAgent"
      "{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}"="WebCheck SyncMgr Handler"
      "{352EC2B7-8B9A-11D1-B8AE-006008059382}"="Gestionnaire d'applications d'environnement"
      "{0B124F8F-91F0-11D1-B8B5-006008059382}"="num‚rateur d'applications install‚es"
      "{CFCCC7A0-A282-11D1-9082-006008059382}"="Publication d'application Darwin"
      "{e84fda7c-1d6a-45f6-b725-cb260c236066}"="Shell Image Verbs"
      "{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}"="Shell Image Data Factory"
      "{3F30C968-480A-4C6C-862D-EFC0897BB84B}"="Extracteur de miniatures de fichier + GDI"
      "{9DBD2C50-62AD-11d0-B806-00C04FD706EC}"="Gestionnaire de miniatures - Informations de r‚sum‚ (DOCFILES)"
      "{EAB841A0-9550-11cf-8C16-00805F1408F3}"="Extracteur de miniatures HTML"
      "{eb9b1153-3b57-4e68-959a-a3266bc3d7fe}"="Shell Image Property Handler"
      "{CC6EEFFB-43F6-46c5-9619-51D571967F7D}"="Assistant Publication de sites Web"
      "{add36aa8-751a-4579-a266-d66f5202ccbb}"="Commande d'impressions via le Web"
      "{6b33163c-76a5-4b6c-bf21-45de9cd503a1}"="Objet Assistant de publication Shell"
      "{58f1f272-9240-4f51-b6d4-fd63d1618591}"="Assistant Obtenir une identit‚ Passport"
      "{7A9D77BD-5403-11d2-8785-2E0420524153}"="Comptes d'utilisateurs"
      "{BD472F60-27FA-11cf-B8B4-444553540000}"="Compressed (zipped) Folder Right Drag Handler"
      "{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}"="Compressed (zipped) Folder SendTo Target"
      "{f39a0dc0-9cc8-11d0-a599-00c04fd64433}"="Fichier de chaŒne"
      "{f3aa0dc0-9cc8-11d0-a599-00c04fd64434}"="Raccourci de chaŒne"
      "{f3ba0dc0-9cc8-11d0-a599-00c04fd64435}"="Channel Handler Object"
      "{f3da0dc0-9cc8-11d0-a599-00c04fd64437}"="Channel Menu"
      "{f3ea0dc0-9cc8-11d0-a599-00c04fd64438}"="Channel Properties"
      "{63da6ec0-2e98-11cf-8d82-444553540000}"="FTP Folders Webview"
      "{883373C3-BF89-11D1-BE35-080036B11A03}"="Microsoft DocProp Shell Ext"
      "{A9CF0EAE-901A-4739-A481-E35B73E47F6D}"="Microsoft DocProp Inplace Edit Box Control"
      "{8EE97210-FD1F-4B19-91DA-67914005F020}"="Microsoft DocProp Inplace ML Edit Box Control"
      "{0EEA25CC-4362-4A12-850B-86EE61B0D3EB}"="Microsoft DocProp Inplace Droplist Combo Control"
      "{6A205B57-2567-4A2C-B881-F787FAB579A3}"="Microsoft DocProp Inplace Calendar Control"
      "{28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}"="Microsoft DocProp Inplace Time Control"
      "{8A23E65E-31C2-11d0-891C-00A024AB2DBB}"="Directory Query UI"
      "{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}"="Shell properties for a DS object"
      "{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}"="Directory Object Find"
      "{F020E586-5264-11d1-A532-0000F8757D7E}"="Directory Start/Search Find"
      "{0D45D530-764B-11d0-A1CA-00AA00C16E65}"="Directory Property UI"
      "{62AE1F9A-126A-11D0-A14B-0800361B1103}"="Directory Context Menu Verbs"
      "{ECF03A33-103D-11d2-854D-006008059367}"="MyDocs Copy Hook"
      "{ECF03A32-103D-11d2-854D-006008059367}"="MyDocs Drop Target"
      "{4a7ded0a-ad25-11d0-98a8-0800361b1103}"="MyDocs Properties"
      "{750fdf0e-2a26-11d1-a3ea-080036587f03}"="Offline Files Menu"
      "{10CFC467-4392-11d2-8DB4-00C04FA31A66}"="Offline Files Folder Options"
      "{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}"="Dossier Fichiers hors connexion"
      "{143A62C8-C33B-11D1-84FE-00C04FA34A14}"="Microsoft Agent Character Property Sheet Handler"
      "{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}"="DfsShell"
      "{60fd46de-f830-4894-a628-6fa81bc0190d}"="%DESC_PublishDropTarget%"
      "{7A80E4A8-8005-11D2-BCF8-00C04F72C717}"="MMC Icon Handler"
      "{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}"=".CAB file viewer"
      "{32714800-2E5F-11d0-8B85-00AA0044F941}"="Des &personnes..."
      "{8DD448E6-C188-4aed-AF92-44956194EB1F}"="Windows Media Player Play as Playlist Context Menu Handler"
      "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"="Windows Media Player Burn Audio CD Context Menu Handler"
      "{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}"="Windows Media Player Add to Playlist Context Menu Handler"
      "{1CDB2949-8F65-4355-8456-263E7C208A5D}"="Desktop Explorer"
      "{1E9B04FB-F9E5-4718-997B-B8DA88302A47}"="Desktop Explorer Menu"
      "{A70C977A-BF00-412C-90B7-034C51DA2439}"="NvCpl DesktopContext Class"
      "{FFB699E0-306A-11d3-8BD1-00104B6F7516}"="Play on my TV helper"
      "{1E9B04FB-F9E5-4718-997B-B8DA88302A48}"="nView Desktop Context Menu"
      "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"="WinRAR shell extension"
      "{7C9D5882-CB4A-4090-96C8-430BFE8B795B}"="Webroot Spy Sweeper Context Menu Integration"
      "{640167b4-59b0-47a6-b335-a6b3c0695aea}"="Portable Media Devices"
      "{cc86590a-b60a-48e6-996b-41d25ed39a1e}"="Portable Media Devices Menu"
      "{AB77609F-2178-4E6F-9C4B-44AC179D937A}"="aý Context Menu Shell Extension"
      "{1D2680C9-0E2A-469d-B787-065558BC7D43}"="Fusion Cache"

      **********************************************************************************
      HKEY ROOT CLASSIDS:
      **********************************************************************************
      Files Found are not all bad files:

      C:\WINDOWS\SYSTEM32\
      gccoll~1.dll Tue 15 Nov 2005 12:12:08 A.... 126 680 123,71 K
      gcunco~1.dll Tue 15 Nov 2005 12:12:06 A.... 95 448 93,21 K
      gdi32.dll Mon 2 Jan 2006 23:39:04 A.... 260 608 254,50 K
      hashlib.dll Tue 15 Nov 2005 12:12:08 A.... 117 976 115,21 K
      hqghumea.dll Fri 10 Feb 2006 17:11:12 A.... 0 0,00 K
      mshtml.dll Tue 22 Nov 2005 17:39:42 A.... 2 700 288 2,57 M
      msvbvm60.dll Thu 9 Feb 2006 15:53:54 A.... 1 385 744 1,32 M
      nv4_disp.dll Sat 10 Dec 2005 3:06:00 A.... 3 955 456 3,77 M
      nvapi.dll Sat 10 Dec 2005 3:06:00 A.... 110 592 108,00 K
      nvcod.dll Sat 10 Dec 2005 3:06:00 A.... 35 840 35,00 K
      nvcodins.dll Sat 10 Dec 2005 3:06:00 A.... 35 840 35,00 K
      nvcpl.dll Sat 10 Dec 2005 3:06:00 A.... 7 311 360 6,97 M
      nvhwvid.dll Sat 10 Dec 2005 3:06:00 A.... 573 440 560,00 K
      nview.dll Sat 10 Dec 2005 3:06:00 A.... 1 466 368 1,40 M
      nvmccs.dll Sat 10 Dec 2005 3:06:00 A.... 229 376 224,00 K
      nvmccsrs.dll Sat 10 Dec 2005 3:06:00 A.... 45 056 44,00 K
      nvmctray.dll Sat 10 Dec 2005 3:06:00 A.... 86 016 84,00 K
      nvnt4cpl.dll Sat 10 Dec 2005 3:06:00 A.... 286 720 280,00 K
      nvoglnt.dll Sat 10 Dec 2005 3:06:00 A.... 5 402 624 5,15 M
      nvrsar.dll Sat 10 Dec 2005 3:06:00 A.... 319 488 312,00 K
      nvrscs.dll Sat 10 Dec 2005 3:06:00 A.... 241 664 236,00 K
      nvrsda.dll Sat 10 Dec 2005 3:06:00 A.... 245 760 240,00 K
      nvrsde.dll Sat 10 Dec 2005 3:06:00 A.... 270 336 264,00 K
      nvrsel.dll Sat 10 Dec 2005 3:06:00 A.... 274 432 268,00 K
      nvrseng.dll Sat 10 Dec 2005 3:06:00 A.... 241 664 236,00 K
      nvrses.dll Sat 10 Dec 2005 3:06:00 A.... 274 432 268,00 K
      nvrsesm.dll Sat 10 Dec 2005 3:06:00 A.... 266 240 260,00 K
      nvrsfi.dll Sat 10 Dec 2005 3:06:00 A.... 241 664 236,00 K
      nvrsfr.dll Sat 10 Dec 2005 3:06:00 A.... 278 528 272,00 K
      nvrshe.dll Sat 10 Dec 2005 3:06:00 A.... 319 488 312,00 K
      nvrshu.dll Sat 10 Dec 2005 3:06:00 A.... 253 952 248,00 K
      nvrsit.dll Sat 10 Dec 2005 3:06:00 A.... 274 432 268,00 K
      nvrsja.dll Sat 10 Dec 2005 3:06:00 A.... 258 048 252,00 K
      nvrsko.dll Sat 10 Dec 2005 3:06:00 A.... 253 952 248,00 K
      nvrsnl.dll Sat 10 Dec 2005 3:06:00 A.... 266 240 260,00 K
      nvrsno.dll Sat 10 Dec 2005 3:06:00 A.... 249 856 244,00 K
      nvrspl.dll Sat 10 Dec 2005 3:06:00 A.... 249 856 244,00 K
      nvrspt.dll Sat 10 Dec 2005 3:06:00 A.... 266 240 260,00 K
      nvrsptb.dll Sat 10 Dec 2005 3:06:00 A.... 262 144 256,00 K
      nvrsru.dll Sat 10 Dec 2005 3:06:00 A.... 262 144 256,00 K
      nvrssk.dll Sat 10 Dec 2005 3:06:00 A.... 249 856 244,00 K
      nvrssl.dll Sat 10 Dec 2005 3:06:00 A.... 249 856 244,00 K
      nvrssv.dll Sat 10 Dec 2005 3:06:00 A.... 245 760 240,00 K
      nvrstr.dll Sat 10 Dec 2005 3:06:00 A.... 249 856 244,00 K
      nvrszhc.dll Sat 10 Dec 2005 3:06:00 A.... 217 088 212,00 K
      nvrszht.dll Sat 10 Dec 2005 3:06:00 A.... 118 784 116,00 K
      nvshell.dll Sat 10 Dec 2005 3:06:00 A.... 466 944 456,00 K
      nvwddi.dll Sat 10 Dec 2005 3:06:00 A.... 81 920 80,00 K
      nvwdmcpl.dll Sat 10 Dec 2005 3:06:00 A.... 1 662 976 1,59 M
      nvwimg.dll Sat 10 Dec 2005 3:06:00 A.... 1 019 904 996,00 K
      nvwrsar.dll Sat 10 Dec 2005 3:06:00 A.... 282 624 276,00 K
      nvwrscs.dll Sat 10 Dec 2005 3:06:00 A.... 286 720 280,00 K
      nvwrsda.dll Sat 10 Dec 2005 3:06:00 A.... 294 912 288,00 K
      nvwrsde.dll Sat 10 Dec 2005 3:06:00 A.... 311 296 304,00 K
      nvwrsel.dll Sat 10 Dec 2005 3:06:00 A.... 335 872 328,00 K
      nvwrseng.dll Sat 10 Dec 2005 3:06:00 A.... 286 720 280,00 K
      nvwrses.dll Sat 10 Dec 2005 3:06:00 A.... 335 872 328,00 K
      nvwrsesm.dll Sat 10 Dec 2005 3:06:00 A.... 327 680 320,00 K
      nvwrsfi.dll Sat 10 Dec 2005 3:06:00 A.... 303 104 296,00 K
      nvwrsfr.dll Sat 10 Dec 2005 3:06:00 A.... 327 680 320,00 K
      nvwrshe.dll Sat 10 Dec 2005 3:06:00 A.... 278 528 272,00 K
      nvwrshu.dll Sat 10 Dec 2005 3:06:00 A.... 315 392 308,00 K
      nvwrsit.dll Sat 10 Dec 2005 3:06:00 A.... 323 584 316,00 K
      nvwrsja.dll Sat 10 Dec 2005 3:06:00 A.... 212 992 208,00 K
      nvwrsko.dll Sat 10 Dec 2005 3:06:00 A.... 196 608 192,00 K
      nvwrsnl.dll Sat 10 Dec 2005 3:06:00 A.... 319 488 312,00 K
      nvwrsno.dll Sat 10 Dec 2005 3:06:00 A.... 299 008 292,00 K
      nvwrspl.dll Sat 10 Dec 2005 3:06:00 A.... 294 912 288,00 K
      nvwrspt.dll Sat 10 Dec 2005 3:06:00 A.... 323 584 316,00 K
      nvwrsptb.dll Sat 10 Dec 2005 3:06:00 A.... 319 488 312,00 K
      nvwrsru.dll Sat 10 Dec 2005 3:06:00 A.... 315 392 308,00 K
      nvwrssk.dll Sat 10 Dec 2005 3:06:00 A.... 299 008 292,00 K
      nvwrssl.dll Sat 10 Dec 2005 3:06:00 A.... 303 104 296,00 K
      nvwrssv.dll Sat 10 Dec 2005 3:06:00 A.... 294 912 288,00 K
      nvwrstr.dll Sat 10 Dec 2005 3:06:00 A.... 303 104 296,00 K
      nvwrszhc.dll Sat 10 Dec 2005 3:06:00 A.... 163 840 160,00 K
      nvwrszht.dll Sat 10 Dec 2005 3:06:00 A.... 167 936 164,00 K
      s32evnt1.dll Tue 3 Jan 2006 15:31:44 A.... 91 904 89,75 K
      sirenacm.dll Wed 25 Jan 2006 4:34:24 A.... 118 784 116,00 K

      79 items found: 79 files, 0 directories.
      Total of file sizes: 42 392 984 bytes 40,43 M
      Locate .tmp files:

      No matches found.
      **********************************************************************************
      Directory Listing of system files:
      Le volume dans le lecteur C s'appelle Systeme
      Le num‚ro de s‚rie du volume est 5C84-9EFD

      R‚pertoire de C:\WINDOWS\System32

      13/02/2006 20:02 <REP> dllcache
      05/02/2006 14:59 1ÿ725 ybadd.ini
      04/02/2006 19:00 212ÿ992 S3rv32.exe
      04/02/2006 18:48 <REP> Microsoft
      2 fichier(s) 214ÿ717 octets
      2 R‚p(s) 4ÿ953ÿ440ÿ256 octets libres
      1. incognito02 Contributeur
        re,

        ferme tous les programmes parce qu'il va y avoir reboot automatique
        Ouvre le dossier l2mfixpuis double-clic sur L2Mfix.bat
        Ensuite choisis l'option 2 puis Entrée
        Puis appuie sur n'importe quelle touche pour redémarrer l'ordinateur
        Après redémarrage, le bureau et les icônes vont apparaître puis disparaître, c'est normal ! Et un nouveau rapport va apparaître à l'écran.
        >> Si après redémarrage les icônes n'apparaissent/disparaissent pas ou si le rapport n'apparaît pas, alors ouvre le dossier l2mfix et lance second.bat

        Enfin poste ce 2ème rapport avec un nouveau rapport HJT.

        A+

        1. mib34 Auteur
          merci bcp pour ton aide ,
          voila le log de L2Mfix
          L2mfix 010406
          Creating Account.
          La commande s'est termin‚e correctement.

          Adding Administrative privleges.
          Checking for L2MFix account(0=no 1=yes):
          1
          Granting SeDebugPrivilege to L2MFIX ... successful

          Running From:
          C:\WINDOWS\system32

          Killing Processes!

          Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
          Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.org
          Killing PID 628 'smss.exe'

          Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
          Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.org
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          Killing PID 732 'winlogon.exe'
          3. mib34 Auteur
            eu jai du louper un truc le hijackthis est la normalement ^^
            Logfile of HijackThis v1.99.1
            Scan saved at 21:35:04, on 13/02/2006
            Platform: Windows XP SP1 (WinNT 5.01.2600)
            MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\csrss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
            C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
            C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
            C:\WINDOWS\system32\spoolsv.exe
            C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
            C:\WINDOWS\Explorer.EXE
            C:\Program Files\Norton AntiVirus\navapsvc.exe
            C:\WINDOWS\System32\nvsvc32.exe
            C:\Program Files\Norton AntiVirus\SAVScan.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
            C:\WINDOWS\System32\wdfmgr.exe
            C:\WINDOWS\SOUNDMAN.EXE
            C:\WINDOWS\System32\S3rv32.exe
            C:\Program Files\DAEMON Tools\daemon.exe
            C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
            C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE
            C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE
            C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe
            C:\WINDOWS\System32\RUNDLL32.EXE
            C:\Program Files\MSN Messenger\MsnMsgr.Exe
            C:\Program Files\Messenger\msmsgs.exe
            C:\Program Files\a-squared\a2guard.exe
            C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
            C:\Program Files\Mozilla Firefox\firefox.exe
            C:\WINDOWS\System32\wuauclt.exe
            C:\Documents and Settings\mib\Bureau\HijackThis.exe

            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr/
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr/
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
            O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
            O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
            O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
            O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
            O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
            O4 - HKLM\..\Run: [AdobeReaderPro] S3rv32.exe
            O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
            O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
            O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P31 "EPSON Stylus Photo RX420 Series" /O5 "LPT1:" /M "Stylus Photo RX420"
            O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series (Copie 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P41 "EPSON Stylus Photo RX420 Series (Copie 1)" /O6 "USB001" /M "Stylus Photo RX420"
            O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
            O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe
            O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
            O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
            O4 - HKLM\..\Run: [WinDLL (v4mon.dll)] rundll32.exe C:\WINDOWS\System32\v4mon.dll,start
            O4 - HKLM\..\RunServices: [AdobeReaderPro] S3rv32.exe
            O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
            O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
            O4 - HKCU\..\Run: [a-squared] "C:\Program Files\a-squared\a2guard.exe"
            O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
            O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
            O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
            O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
            O14 - IERESET.INF: START_PAGE_URL=http://www.google.fr/
            O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1139826827328
            O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
            O17 - HKLM\System\CCS\Services\Tcpip\..\{0AC4A316-7772-4E0A-90B4-5ABC9E470ADE}: NameServer = 80.10.246.130 80.10.246.3
            O17 - HKLM\System\CS1\Services\Tcpip\..\{0AC4A316-7772-4E0A-90B4-5ABC9E470ADE}: NameServer = 80.10.246.130 80.10.246.3
            O17 - HKLM\System\CS2\Services\Tcpip\..\{0AC4A316-7772-4E0A-90B4-5ABC9E470ADE}: NameServer = 80.10.246.130 80.10.246.3
            O17 - HKLM\System\CS3\Services\Tcpip\..\{0AC4A316-7772-4E0A-90B4-5ABC9E470ADE}: NameServer = 80.10.246.1 80.10.246.132
            O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
            O20 - Winlogon Notify: ddabb - ddabb.dll (file missing)
            O20 - Winlogon Notify: ddaby - C:\WINDOWS\System32\ddaby.dll (file missing)
            O20 - Winlogon Notify: MS-DOS Emulation - C:\WINDOWS\system32\mdmtapi.dll (file missing)
            O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
            O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
            O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
            O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
            O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
            O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
            O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
            O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
            O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
            O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
            O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
            1. incognito02 Contributeur
              re,

              j'ai un doute sur un fichier, donc pour cela, tu va aller sur ce site :
              http://www.virustotal.com/xhtml/virustotal_en.html

              tu clique sur parcourir, tu selectionne ce fichier : C:\WINDOWS\System32\S3rv32.exe
              tu cliques ensuite sur Send.

              si possible colle le rapport de ce test ici.

              On finira le travail ensuite.

              Bon courage.

              A+

              1. mib34 Auteur
                voila le rapport mais la mise en forme est pas super
                his is a report processed by VirusTotal on 02/12/2006 at 21:51:34 (CET) after scanning the file "S3rv32.exe" file.

                Antivirus Version Update Result
                AntiVir 6.33.0.81 02.11.2006 no virus found
                Avast 4.6.695.0 02.10.2006 no virus found
                AVG 718 02.10.2006 no virus found
                Avira 6.33.0.81 02.11.2006 no virus found
                BitDefender 7.2 02.12.2006 Backdoor.Rbot.CJV
                CAT-QuickHeal 8.00 02.11.2006 (Suspicious) - DNAScan
                ClamAV devel-20060126 02.12.2006 no virus found
                DrWeb 4.33 02.12.2006 Win32.HLLW.MyBot
                eTrust-InoculateIT 23.71.74 02.11.2006 no virus found
                eTrust-Vet 12.4.2074 02.10.2006 no virus found
                Ewido 3.5 02.12.2006 Backdoor.Rbot
                Fortinet 2.54.0.0 02.12.2006 W32/RBot!bdr
                F-Prot 3.16c 02.09.2006 security risk named W32/Sdbot.OLK
                Ikarus 0.2.59.0 02.10.2006 no virus found
                Kaspersky 4.0.2.24 02.12.2006 Backdoor.Win32.Rbot.gen
                McAfee 4694 02.10.2006 no virus found
                NOD32v2 1.1404 02.11.2006 probably unknown NewHeur_PE virus
                Norman 5.70.10 02.10.2006 W32/Spybot.AGPE
                Panda 9.0.0.4 02.12.2006 W32/Gaobot.MEM.worm
                Sophos 4.02.0 02.11.2006 no virus found
                Symantec 8.0 02.12.2006 no virus found
                TheHacker 5.9.4.094 02.10.2006 no virus found
                UNA 1.83 02.09.2006 no virus found
                VBA32 3.10.5 02.11.2006 Backdoor.Win32.Rbot.gen
                1. incognito02 Contributeur
                  re,

                  je ne peux pas y acceder, dis moi si il y avait un virus de détecté sur ce fichier ?

                  A+
                  2. mib34 Auteur
                    dsl je me suis emmeler les pinceaux mais apparament il i a un virus détecter :^(
                    2. incognito02 Contributeur
                      re,

                      Affiche tous les fichiers et dossiers :
                      Clique sur démarrer/panneau de configuration/outil/option des dossiers/affichage

                      Coche « afficher les fichiers et dossiers cachés »

                      Décoche la case "Masquer les fichiers protégés du système d'exploitation (recommandé)"

                      Décoche « masquer les extensions dont le type est connu »
                      Puis fais «Ok» pour valider les changements.

                      Et appliquer !
                      ----------------------------------------------------------------------------

                      ¤Relance HijackThis, coche les cases devant ces lignes et ensuite clique sur fix checked :

                      O4 - HKLM\..\Run: [AdobeReaderPro] S3rv32.exe

                      O4 - HKLM\..\RunServices: [AdobeReaderPro] S3rv32.exe

                      O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

                      O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

                      O20 - Winlogon Notify: ddabb - ddabb.dll (file missing)

                      O20 - Winlogon Notify: ddaby - C:\WINDOWS\System32\ddaby.dll (file missing)

                      O20 - Winlogon Notify: MS-DOS Emulation - C:\WINDOWS\system32\mdmtapi.dll (file missing)

                      Recherche et supprime ceci:
                      attention seulement les fichiers (si présents).

                      C:\WINDOWS\System32\S3rv32.exe

                      Vide ta Corbeille.

                      relance ton orid et précise tes soucis, si il en reste.

                      A+

                      1. mib34 Auteur
                        voila ces bon jai fai ce que tu mavais dit de faire
                        et apriori jai aucun autre probleme a signaler (pour une fois).
                        merci pour toute ton aide .
                        A+
                        1. incognito02 Contributeur
                          Re,

                          Pas de quoi.

                          Au plaisir de ..... ne pas te revoir sur ce forum lol !

                          A+

                          Discussions similaires

                          Win64 malware gen
                          jules555

                          1 réponse
                          Win64:Malware-gen
                          ptb35

                          3 réponses
                          supprimer tor.jack android
                          sabinelouisonbruno

                          4 réponses
                          Infection malware sur Android ?
                          ajaax9

                          9 réponses
                          Antimalware service Executable consomme 45% de RAM.
                          KalenShiv

                          8 réponses