[malware]Look2Me

Résolu
mib34 Messages postés 17 Statut Membre -  
incognito02 Messages postés 3487 Statut Contributeur -
je pense que je suis infecté par Look2Me ( jai la plupart des logiciel gratuit genre spybot adaware spy sweeper a squared et norton 2004 mis a jour)
voici mon hijackthis

Logfile of HijackThis v1.99.1
Scan saved at 19:38:06, on 13/02/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\System32\S3rv32.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\a-squared\a2guard.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\a-squared\a2start.exe
C:\Program Files\a-squared\a2scan.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\mib\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AdobeReaderPro] S3rv32.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P31 "EPSON Stylus Photo RX420 Series" /O5 "LPT1:" /M "Stylus Photo RX420"
O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series (Copie 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P41 "EPSON Stylus Photo RX420 Series (Copie 1)" /O6 "USB001" /M "Stylus Photo RX420"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [WinDLL (v4mon.dll)] rundll32.exe C:\WINDOWS\System32\v4mon.dll,start
O4 - HKLM\..\RunServices: [AdobeReaderPro] S3rv32.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [a-squared] "C:\Program Files\a-squared\a2guard.exe"
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O14 - IERESET.INF: START_PAGE_URL=http://www.google.fr/
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1139826827328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0AC4A316-7772-4E0A-90B4-5ABC9E470ADE}: NameServer = 80.10.246.130 80.10.246.3
O17 - HKLM\System\CS1\Services\Tcpip\..\{0AC4A316-7772-4E0A-90B4-5ABC9E470ADE}: NameServer = 80.10.246.130 80.10.246.3
O17 - HKLM\System\CS2\Services\Tcpip\..\{0AC4A316-7772-4E0A-90B4-5ABC9E470ADE}: NameServer = 80.10.246.130 80.10.246.3
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: ddabb - ddabb.dll (file missing)
O20 - Winlogon Notify: ddaby - C:\WINDOWS\System32\ddaby.dll (file missing)
O20 - Winlogon Notify: MS-DOS Emulation - C:\WINDOWS\system32\mdmtapi.dll (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
A voir également:

17 réponses

incognito02 Messages postés 3487 Statut Contributeur 138
 
Bonsoir Mib34

telecharge l2mfix ici :

http://www.downloads.subratam.org/l2mfix.exe

1. extraire le fichier sur le bureau
2. désactiver l'antivirus (car process est détecté faussement comme virus malware par certains antivirus)
3. lancer l2mfix.bat et sélectionner l'option #1 et faire Enter pour faire apparaître le log (cela prend qqs minutes)
4. Copie le log et colle sur un FORUM

A+
0
mib34 Messages postés 17 Statut Membre
 
voili voila le log ;^)

L2MFIX find log 010406
These are the registry keys present
**********************************************************************************
Winlogon/notify:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\
6c,00,00,00
"Logoff"="ChainWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Logoff"="CryptnetWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
"DLLName"="cscdll.dll"
"Logon"="WinlogonLogonEvent"
"Logoff"="WinlogonLogoffEvent"
"ScreenSaver"="WinlogonScreenSaverEvent"
"Startup"="WinlogonStartupEvent"
"Shutdown"="WinlogonShutdownEvent"
"StartShell"="WinlogonStartShellEvent"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ddabb]
"Asynchronous"=dword:00000001
"DllName"="ddabb.dll"
"Impersonate"=dword:00000000
"Logon"="Logon"
"Logoff"="Logoff"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ddaby]
"Asynchronous"=dword:00000001
"DllName"="C:\\WINDOWS\\System32\\ddaby.dll"
"Impersonate"=dword:00000000
"Startup"="SysLogon"
"Logoff"="SysLogoff"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MS-DOS Emulation]
"Asynchronous"=dword:00000000
"DllName"="C:\\WINDOWS\\system32\\mdmtapi.dll"
"Impersonate"=dword:00000000
"Logon"="WinLogon"
"Logoff"="WinLogoff"
"Shutdown"="WinShutdown"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
"DLLName"="wlnotify.dll"
"Logon"="SCardStartCertProp"
"Logoff"="SCardStopCertProp"
"Lock"="SCardSuspendCertProp"
"Unlock"="SCardResumeCertProp"
"Enabled"=dword:00000001
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"StartShell"="SchedStartShell"
"Logoff"="SchedEventLogOff"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
"Logoff"="WLEventLogoff"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001
"DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
"DLLName"="WlNotify.dll"
"Lock"="SensLockEvent"
"Logon"="SensLogonEvent"
"Logoff"="SensLogoffEvent"
"Safe"=dword:00000001
"MaxWait"=dword:00000258
"StartScreenSaver"="SensStartScreenSaverEvent"
"StopScreenSaver"="SensStopScreenSaverEvent"
"Startup"="SensStartupEvent"
"Shutdown"="SensShutdownEvent"
"StartShell"="SensStartShellEvent"
"PostShell"="SensPostShellEvent"
"Disconnect"="SensDisconnectEvent"
"Reconnect"="SensReconnectEvent"
"Unlock"="SensUnlockEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"Logoff"="TSEventLogoff"
"Logon"="TSEventLogon"
"PostShell"="TSEventPostShell"
"Shutdown"="TSEventShutdown"
"StartShell"="TSEventStartShell"
"Startup"="TSEventStartup"
"MaxWait"=dword:00000258
"Reconnect"="TSEventReconnect"
"Disconnect"="TSEventDisconnect"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
"DLLName"="wlnotify.dll"
"Logon"="RegisterTicketExpiredNotificationEvent"
"Logoff"="UnregisterTicketExpiredNotificationEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

**********************************************************************************
useragent:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]
"SV1"=""

**********************************************************************************
Shell Extension key:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{00022613-0000-0000-C000-000000000046}"="Feuille de propri‚t‚s du fichier multim‚dia"
"{176d6597-26d3-11d1-b350-080036a75b03}"="Gestion de scanneur ICM"
"{1F2E5C40-9550-11CE-99D2-00AA006E086C}"="Page de s‚curit‚ NTFS"
"{3EA48300-8CF6-101B-84FB-666CCB9BCD32}"="Page des propri‚t‚s de OLE DocFile"
"{40dd6e20-7c17-11ce-a804-00aa003ca9f6}"="Extensions de l'environnement pour le partage"
"{41E300E0-78B6-11ce-849B-444553540000}"="PlusPack CPL Extension"
"{42071712-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Carte du Panneau de configuration"
"{42071713-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage cran du Panneau de configuration"
"{42071714-76d4-11d1-8b24-00a0c9068ff3}"="Extension Affichage Panorama du Panneau de configuration"
"{4E40F770-369C-11d0-8922-00A024AB2DBB}"="Page de s‚curit‚ DS"
"{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"="Page de compatibilit‚"
"{56117100-C0CD-101B-81E2-00AA004AE837}"="Gestionnaire de donn‚es endommag‚es de l'environnement"
"{59099400-57FF-11CE-BD94-0020AF85B590}"="Extension copie de disquette"
"{59be4990-f85c-11ce-aff7-00aa003ca9f6}"="Extensions de l'environnement pour les objets r‚seau de Microsoft Windows"
"{5DB2625A-54DF-11D0-B6C4-0800091AA605}"="Gestion d'‚cran ICM"
"{675F097E-4C4D-11D0-B6C1-0800091AA605}"="Gestion d'imprimante ICM"
"{764BF0E1-F219-11ce-972D-00AA00A14F56}"="Extensions de l'environnement de compression de fichiers"
"{77597368-7b15-11d0-a0c2-080036af3f03}"="Extension de l'environnement d'imprimante Web"
"{7988B573-EC89-11cf-9C00-00AA00A14F56}"="Disk Quota UI"
"{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA}"="Menu contextuel de cryptage"
"{85BBD920-42A0-1069-A2E4-08002B30309D}"="Porte-documents"
"{88895560-9AA2-1069-930E-00AA0030EBC8}"="Extension ic“ne HyperTerminal"
"{BD84B380-8CA2-1069-AB1D-08000948F534}"="Fonts"
"{DBCE2480-C732-101B-BE72-BA78E9AD5B27}"="Profil ICC"
"{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}"="Page de s‚curit‚ des imprimantes"
"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"="Extensions de l'environnement pour le partage"
"{f92e8c40-3d33-11d2-b1aa-080036a75b03}"="Display TroubleShoot CPL Extension"
"{7444C717-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie PKO"
"{7444C719-39BF-11D1-8CD9-00C04FC29D45}"="Extension de cryptographie Sign"
"{7007ACC7-3202-11D1-AAD2-00805FC1270E}"="Connexions r‚seau"
"{992CFFA0-F557-101A-88EC-00DD010CCC48}"="Connexions r‚seau"
"{E211B736-43FD-11D1-9EFB-0000F8757FCD}"="&Scanneurs et appareils photo"
"{FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}"="&Scanneurs et appareils photo"
"{905667aa-acd6-11d2-8080-00805f6596d2}"="&Scanneurs et appareils photo"
"{3F953603-1008-4f6e-A73A-04AAC7A992F1}"="&Scanneurs et appareils photo"
"{83bbcbf3-b28a-4919-a5aa-73027445d672}"="&Scanneurs et appareils photo"
"{F0152790-D56E-4445-850E-4F3117DB740C}"="Remote Sessions CPL Extension"
"{5F327514-6C5E-4d60-8F16-D07FA08A78ED}"="Auto Update Property Sheet Extension"
"{60254CA5-953B-11CF-8C96-00AA00B8708C}"="Extensions de l'interpr‚teur de commandes pour l'environnement d'ex‚cution de scripts Windows"
"{2206CDB2-19C1-11D1-89E0-00C04FD7A829}"="Liaison de donn‚es Microsoft"
"{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Icon Handler"
"{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Shell Extension"
"{D6277990-4C6A-11CF-8D87-00AA0060F5BF}"="Tƒches planifi‚es"
"{0DF44EAA-FF21-4412-828E-260A8728E7F1}"="Barre des tƒches et menu D‚marrer"
"{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}"="Rechercher"
"{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}"="Aide et support"
"{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}"="Aide et support"
"{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}"="Ex‚cuter..."
"{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}"="Internet"
"{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}"="Courrier ‚lectronique"
"{D20EA4E1-3957-11d2-A40B-0C5020524152}"="Polices"
"{D20EA4E1-3957-11d2-A40B-0C5020524153}"="Outils d'administration"
"{875CB1A1-0F29-45de-A1AE-CFB4950D0B78}"="Audio Media Properties Handler"
"{40C3D757-D6E4-4b49-BB41-0E5BBEA28817}"="Video Media Properties Handler"
"{E4B29F9D-D390-480b-92FD-7DDB47101D71}"="Wav Properties Handler"
"{87D62D94-71B3-4b9a-9489-5FE6850DC73E}"="Avi Properties Handler"
"{A6FD9E45-6E44-43f9-8644-08598F5A74D9}"="Midi Properties Handler"
"{c5a40261-cd64-4ccf-84cb-c394da41d590}"="Video Thumbnail Extractor"
"{5E6AB780-7743-11CF-A12B-00AA004AE837}"="Barre d'outils Internet Microsoft"
"{22BF0C20-6DA7-11D0-B373-00A0C9034938}"="tat du t‚l‚chargement"
"{91EA3F8B-C99B-11d0-9815-00C04FD91972}"="Dossier Bureau ‚tendu"
"{6413BA2C-B461-11d1-A18A-080036B11A03}"="Dossier du shell augment‚"
"{F61FFEC1-754F-11d0-80CA-00AA005B4383}"="BandProxy"
"{7BA4C742-9E81-11CF-99D3-00AA004AE837}"="Bande du navigateur Microsoft"
"{30D02401-6A81-11d0-8274-00C04FD5AE38}"="Bande de recherche"
"{32683183-48a0-441b-a342-7c2a440a9478}"="Media Band"
"{169A0691-8DF9-11d1-A1C4-00C04FD75D13}"="Volet int‚gr‚ de recherche"
"{07798131-AF23-11d1-9111-00A0C98BA67D}"="Recherche Web"
"{AF4F6510-F982-11d0-8595-00AA004CD6D8}"="Utilitaire des options de l'arborescence du Registre"
"{01E04581-4EEE-11d0-BFE9-00AA005B4383}"="&Adresse"
"{A08C11D2-A228-11d0-825B-00AA005B4383}"="BoŒte d'entr‚e de l'adresse"
"{00BB2763-6A77-11D0-A535-00C04FD7D062}"="Saisie semi-automatique Microsoft"
"{7376D660-C583-11d0-A3A5-00C04FD706EC}"="TridentImageExtractor"
"{6756A641-DE71-11d0-831B-00AA005B4383}"="Liste de saisie semi-automatique MRU"
"{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}"="Liste de saisie semi-automatique personnalis‚e MRU"
"{7e653215-fa25-46bd-a339-34a2790f3cb7}"="Accessible"
"{acf35015-526e-4230-9596-becbe19f0ac9}"="Barre de progrŠs auto-ouvrante"
"{E0E11A09-5CB8-4B6C-8332-E00720A168F2}"="Analyseur de la barre d'adresses"
"{00BB2764-6A77-11D0-A535-00C04FD7D062}"="Liste de saisie semi-automatique de l'historique Microsoft"
"{03C036F1-A186-11D0-824A-00AA005B4383}"="Liste de saisie semi-automatique du dossier Shell Microsoft"
"{00BB2765-6A77-11D0-A535-00C04FD7D062}"="Conteneur de la liste de saisie semi-automatique multiple Microsoft"
"{ECD4FC4E-521C-11D0-B792-00A0C90312E1}"="Menu Site de bandes"
"{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}"="Shell DeskBarApp"
"{ECD4FC4C-521C-11D0-B792-00A0C90312E1}"="Barre du Bureau"
"{ECD4FC4D-521C-11D0-B792-00A0C90312E1}"="Shell Rebar BandSite"
"{DD313E04-FEFF-11d1-8ECD-0000F87A470C}"="Assistance utilisateur"
"{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}"="ParamŠtres du dossier global"
"{EFA24E61-B078-11d0-89E4-00C04FC9E26E}"="Favorites Band"
"{0A89A860-D7B1-11CE-8350-444553540000}"="Shell Automation Inproc Service"
"{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}"="Shell DocObject Viewer"
"{A5E46E3A-8849-11D1-9D8C-00C04FC99D61}"="Microsoft Browser Architecture"
"{FBF23B40-E3F0-101B-8488-00AA003E56F8}"="InternetShortcut"
"{3C374A40-BAE4-11CF-BF7D-00AA006946EE}"="Microsoft Url History Service"
"{FF393560-C2A7-11CF-BFF4-444553540000}"="Historique"
"{7BD29E00-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files"
"{7BD29E01-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files"
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"="Microsoft Url Search Hook"
"{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}"="Image de d‚marrage de la Suite IE4"
"{67EA19A0-CCEF-11d0-8024-00C04FD75D13}"="CDF Extension Copy Hook"
"{131A6951-7F78-11D0-A979-00C04FD705A2}"="ISFBand OC"
"{9461b922-3c5a-11d2-bf8b-00c04fb93661}"="Search Assistant OC"
"{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}"="Internet"
"{871C5380-42A0-1069-A2EA-08002B30309D}"="Internet Name Space"
"{EFA24E64-B078-11d0-89E4-00C04FC9E26E}"="Explorer Band"
"{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service"
"{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service"
"{88C6C381-2E85-11D0-94DE-444553540000}"="Dossier ActiveX Cache"
"{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"="WebCheck"
"{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}"="Subscription Mgr"
"{F5175861-2688-11d0-9C5E-00AA00A45957}"="Dossier Inscription"
"{08165EA0-E946-11CF-9C87-00AA005127ED}"="WebCheckWebCrawler"
"{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}"="WebCheckChannelAgent"
"{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}"="TrayAgent"
"{7D559C10-9FE9-11d0-93F7-00AA0059CE02}"="Code Download Agent"
"{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}"="ConnectionAgent"
"{D8BD2030-6FC9-11D0-864F-00AA006809D9}"="PostAgent"
"{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}"="WebCheck SyncMgr Handler"
"{352EC2B7-8B9A-11D1-B8AE-006008059382}"="Gestionnaire d'applications d'environnement"
"{0B124F8F-91F0-11D1-B8B5-006008059382}"="num‚rateur d'applications install‚es"
"{CFCCC7A0-A282-11D1-9082-006008059382}"="Publication d'application Darwin"
"{e84fda7c-1d6a-45f6-b725-cb260c236066}"="Shell Image Verbs"
"{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}"="Shell Image Data Factory"
"{3F30C968-480A-4C6C-862D-EFC0897BB84B}"="Extracteur de miniatures de fichier + GDI"
"{9DBD2C50-62AD-11d0-B806-00C04FD706EC}"="Gestionnaire de miniatures - Informations de r‚sum‚ (DOCFILES)"
"{EAB841A0-9550-11cf-8C16-00805F1408F3}"="Extracteur de miniatures HTML"
"{eb9b1153-3b57-4e68-959a-a3266bc3d7fe}"="Shell Image Property Handler"
"{CC6EEFFB-43F6-46c5-9619-51D571967F7D}"="Assistant Publication de sites Web"
"{add36aa8-751a-4579-a266-d66f5202ccbb}"="Commande d'impressions via le Web"
"{6b33163c-76a5-4b6c-bf21-45de9cd503a1}"="Objet Assistant de publication Shell"
"{58f1f272-9240-4f51-b6d4-fd63d1618591}"="Assistant Obtenir une identit‚ Passport"
"{7A9D77BD-5403-11d2-8785-2E0420524153}"="Comptes d'utilisateurs"
"{BD472F60-27FA-11cf-B8B4-444553540000}"="Compressed (zipped) Folder Right Drag Handler"
"{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}"="Compressed (zipped) Folder SendTo Target"
"{f39a0dc0-9cc8-11d0-a599-00c04fd64433}"="Fichier de chaŒne"
"{f3aa0dc0-9cc8-11d0-a599-00c04fd64434}"="Raccourci de chaŒne"
"{f3ba0dc0-9cc8-11d0-a599-00c04fd64435}"="Channel Handler Object"
"{f3da0dc0-9cc8-11d0-a599-00c04fd64437}"="Channel Menu"
"{f3ea0dc0-9cc8-11d0-a599-00c04fd64438}"="Channel Properties"
"{63da6ec0-2e98-11cf-8d82-444553540000}"="FTP Folders Webview"
"{883373C3-BF89-11D1-BE35-080036B11A03}"="Microsoft DocProp Shell Ext"
"{A9CF0EAE-901A-4739-A481-E35B73E47F6D}"="Microsoft DocProp Inplace Edit Box Control"
"{8EE97210-FD1F-4B19-91DA-67914005F020}"="Microsoft DocProp Inplace ML Edit Box Control"
"{0EEA25CC-4362-4A12-850B-86EE61B0D3EB}"="Microsoft DocProp Inplace Droplist Combo Control"
"{6A205B57-2567-4A2C-B881-F787FAB579A3}"="Microsoft DocProp Inplace Calendar Control"
"{28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}"="Microsoft DocProp Inplace Time Control"
"{8A23E65E-31C2-11d0-891C-00A024AB2DBB}"="Directory Query UI"
"{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}"="Shell properties for a DS object"
"{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}"="Directory Object Find"
"{F020E586-5264-11d1-A532-0000F8757D7E}"="Directory Start/Search Find"
"{0D45D530-764B-11d0-A1CA-00AA00C16E65}"="Directory Property UI"
"{62AE1F9A-126A-11D0-A14B-0800361B1103}"="Directory Context Menu Verbs"
"{ECF03A33-103D-11d2-854D-006008059367}"="MyDocs Copy Hook"
"{ECF03A32-103D-11d2-854D-006008059367}"="MyDocs Drop Target"
"{4a7ded0a-ad25-11d0-98a8-0800361b1103}"="MyDocs Properties"
"{750fdf0e-2a26-11d1-a3ea-080036587f03}"="Offline Files Menu"
"{10CFC467-4392-11d2-8DB4-00C04FA31A66}"="Offline Files Folder Options"
"{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}"="Dossier Fichiers hors connexion"
"{143A62C8-C33B-11D1-84FE-00C04FA34A14}"="Microsoft Agent Character Property Sheet Handler"
"{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}"="DfsShell"
"{60fd46de-f830-4894-a628-6fa81bc0190d}"="%DESC_PublishDropTarget%"
"{7A80E4A8-8005-11D2-BCF8-00C04F72C717}"="MMC Icon Handler"
"{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}"=".CAB file viewer"
"{32714800-2E5F-11d0-8B85-00AA0044F941}"="Des &personnes..."
"{8DD448E6-C188-4aed-AF92-44956194EB1F}"="Windows Media Player Play as Playlist Context Menu Handler"
"{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"="Windows Media Player Burn Audio CD Context Menu Handler"
"{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}"="Windows Media Player Add to Playlist Context Menu Handler"
"{1CDB2949-8F65-4355-8456-263E7C208A5D}"="Desktop Explorer"
"{1E9B04FB-F9E5-4718-997B-B8DA88302A47}"="Desktop Explorer Menu"
"{A70C977A-BF00-412C-90B7-034C51DA2439}"="NvCpl DesktopContext Class"
"{FFB699E0-306A-11d3-8BD1-00104B6F7516}"="Play on my TV helper"
"{1E9B04FB-F9E5-4718-997B-B8DA88302A48}"="nView Desktop Context Menu"
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}"="WinRAR shell extension"
"{7C9D5882-CB4A-4090-96C8-430BFE8B795B}"="Webroot Spy Sweeper Context Menu Integration"
"{640167b4-59b0-47a6-b335-a6b3c0695aea}"="Portable Media Devices"
"{cc86590a-b60a-48e6-996b-41d25ed39a1e}"="Portable Media Devices Menu"
"{AB77609F-2178-4E6F-9C4B-44AC179D937A}"="aý Context Menu Shell Extension"
"{1D2680C9-0E2A-469d-B787-065558BC7D43}"="Fusion Cache"

**********************************************************************************
HKEY ROOT CLASSIDS:
**********************************************************************************
Files Found are not all bad files:

C:\WINDOWS\SYSTEM32\
gccoll~1.dll Tue 15 Nov 2005 12:12:08 A.... 126 680 123,71 K
gcunco~1.dll Tue 15 Nov 2005 12:12:06 A.... 95 448 93,21 K
gdi32.dll Mon 2 Jan 2006 23:39:04 A.... 260 608 254,50 K
hashlib.dll Tue 15 Nov 2005 12:12:08 A.... 117 976 115,21 K
hqghumea.dll Fri 10 Feb 2006 17:11:12 A.... 0 0,00 K
mshtml.dll Tue 22 Nov 2005 17:39:42 A.... 2 700 288 2,57 M
msvbvm60.dll Thu 9 Feb 2006 15:53:54 A.... 1 385 744 1,32 M
nv4_disp.dll Sat 10 Dec 2005 3:06:00 A.... 3 955 456 3,77 M
nvapi.dll Sat 10 Dec 2005 3:06:00 A.... 110 592 108,00 K
nvcod.dll Sat 10 Dec 2005 3:06:00 A.... 35 840 35,00 K
nvcodins.dll Sat 10 Dec 2005 3:06:00 A.... 35 840 35,00 K
nvcpl.dll Sat 10 Dec 2005 3:06:00 A.... 7 311 360 6,97 M
nvhwvid.dll Sat 10 Dec 2005 3:06:00 A.... 573 440 560,00 K
nview.dll Sat 10 Dec 2005 3:06:00 A.... 1 466 368 1,40 M
nvmccs.dll Sat 10 Dec 2005 3:06:00 A.... 229 376 224,00 K
nvmccsrs.dll Sat 10 Dec 2005 3:06:00 A.... 45 056 44,00 K
nvmctray.dll Sat 10 Dec 2005 3:06:00 A.... 86 016 84,00 K
nvnt4cpl.dll Sat 10 Dec 2005 3:06:00 A.... 286 720 280,00 K
nvoglnt.dll Sat 10 Dec 2005 3:06:00 A.... 5 402 624 5,15 M
nvrsar.dll Sat 10 Dec 2005 3:06:00 A.... 319 488 312,00 K
nvrscs.dll Sat 10 Dec 2005 3:06:00 A.... 241 664 236,00 K
nvrsda.dll Sat 10 Dec 2005 3:06:00 A.... 245 760 240,00 K
nvrsde.dll Sat 10 Dec 2005 3:06:00 A.... 270 336 264,00 K
nvrsel.dll Sat 10 Dec 2005 3:06:00 A.... 274 432 268,00 K
nvrseng.dll Sat 10 Dec 2005 3:06:00 A.... 241 664 236,00 K
nvrses.dll Sat 10 Dec 2005 3:06:00 A.... 274 432 268,00 K
nvrsesm.dll Sat 10 Dec 2005 3:06:00 A.... 266 240 260,00 K
nvrsfi.dll Sat 10 Dec 2005 3:06:00 A.... 241 664 236,00 K
nvrsfr.dll Sat 10 Dec 2005 3:06:00 A.... 278 528 272,00 K
nvrshe.dll Sat 10 Dec 2005 3:06:00 A.... 319 488 312,00 K
nvrshu.dll Sat 10 Dec 2005 3:06:00 A.... 253 952 248,00 K
nvrsit.dll Sat 10 Dec 2005 3:06:00 A.... 274 432 268,00 K
nvrsja.dll Sat 10 Dec 2005 3:06:00 A.... 258 048 252,00 K
nvrsko.dll Sat 10 Dec 2005 3:06:00 A.... 253 952 248,00 K
nvrsnl.dll Sat 10 Dec 2005 3:06:00 A.... 266 240 260,00 K
nvrsno.dll Sat 10 Dec 2005 3:06:00 A.... 249 856 244,00 K
nvrspl.dll Sat 10 Dec 2005 3:06:00 A.... 249 856 244,00 K
nvrspt.dll Sat 10 Dec 2005 3:06:00 A.... 266 240 260,00 K
nvrsptb.dll Sat 10 Dec 2005 3:06:00 A.... 262 144 256,00 K
nvrsru.dll Sat 10 Dec 2005 3:06:00 A.... 262 144 256,00 K
nvrssk.dll Sat 10 Dec 2005 3:06:00 A.... 249 856 244,00 K
nvrssl.dll Sat 10 Dec 2005 3:06:00 A.... 249 856 244,00 K
nvrssv.dll Sat 10 Dec 2005 3:06:00 A.... 245 760 240,00 K
nvrstr.dll Sat 10 Dec 2005 3:06:00 A.... 249 856 244,00 K
nvrszhc.dll Sat 10 Dec 2005 3:06:00 A.... 217 088 212,00 K
nvrszht.dll Sat 10 Dec 2005 3:06:00 A.... 118 784 116,00 K
nvshell.dll Sat 10 Dec 2005 3:06:00 A.... 466 944 456,00 K
nvwddi.dll Sat 10 Dec 2005 3:06:00 A.... 81 920 80,00 K
nvwdmcpl.dll Sat 10 Dec 2005 3:06:00 A.... 1 662 976 1,59 M
nvwimg.dll Sat 10 Dec 2005 3:06:00 A.... 1 019 904 996,00 K
nvwrsar.dll Sat 10 Dec 2005 3:06:00 A.... 282 624 276,00 K
nvwrscs.dll Sat 10 Dec 2005 3:06:00 A.... 286 720 280,00 K
nvwrsda.dll Sat 10 Dec 2005 3:06:00 A.... 294 912 288,00 K
nvwrsde.dll Sat 10 Dec 2005 3:06:00 A.... 311 296 304,00 K
nvwrsel.dll Sat 10 Dec 2005 3:06:00 A.... 335 872 328,00 K
nvwrseng.dll Sat 10 Dec 2005 3:06:00 A.... 286 720 280,00 K
nvwrses.dll Sat 10 Dec 2005 3:06:00 A.... 335 872 328,00 K
nvwrsesm.dll Sat 10 Dec 2005 3:06:00 A.... 327 680 320,00 K
nvwrsfi.dll Sat 10 Dec 2005 3:06:00 A.... 303 104 296,00 K
nvwrsfr.dll Sat 10 Dec 2005 3:06:00 A.... 327 680 320,00 K
nvwrshe.dll Sat 10 Dec 2005 3:06:00 A.... 278 528 272,00 K
nvwrshu.dll Sat 10 Dec 2005 3:06:00 A.... 315 392 308,00 K
nvwrsit.dll Sat 10 Dec 2005 3:06:00 A.... 323 584 316,00 K
nvwrsja.dll Sat 10 Dec 2005 3:06:00 A.... 212 992 208,00 K
nvwrsko.dll Sat 10 Dec 2005 3:06:00 A.... 196 608 192,00 K
nvwrsnl.dll Sat 10 Dec 2005 3:06:00 A.... 319 488 312,00 K
nvwrsno.dll Sat 10 Dec 2005 3:06:00 A.... 299 008 292,00 K
nvwrspl.dll Sat 10 Dec 2005 3:06:00 A.... 294 912 288,00 K
nvwrspt.dll Sat 10 Dec 2005 3:06:00 A.... 323 584 316,00 K
nvwrsptb.dll Sat 10 Dec 2005 3:06:00 A.... 319 488 312,00 K
nvwrsru.dll Sat 10 Dec 2005 3:06:00 A.... 315 392 308,00 K
nvwrssk.dll Sat 10 Dec 2005 3:06:00 A.... 299 008 292,00 K
nvwrssl.dll Sat 10 Dec 2005 3:06:00 A.... 303 104 296,00 K
nvwrssv.dll Sat 10 Dec 2005 3:06:00 A.... 294 912 288,00 K
nvwrstr.dll Sat 10 Dec 2005 3:06:00 A.... 303 104 296,00 K
nvwrszhc.dll Sat 10 Dec 2005 3:06:00 A.... 163 840 160,00 K
nvwrszht.dll Sat 10 Dec 2005 3:06:00 A.... 167 936 164,00 K
s32evnt1.dll Tue 3 Jan 2006 15:31:44 A.... 91 904 89,75 K
sirenacm.dll Wed 25 Jan 2006 4:34:24 A.... 118 784 116,00 K

79 items found: 79 files, 0 directories.
Total of file sizes: 42 392 984 bytes 40,43 M
Locate .tmp files:

No matches found.
**********************************************************************************
Directory Listing of system files:
Le volume dans le lecteur C s'appelle Systeme
Le num‚ro de s‚rie du volume est 5C84-9EFD

R‚pertoire de C:\WINDOWS\System32

13/02/2006 20:02 <REP> dllcache
05/02/2006 14:59 1ÿ725 ybadd.ini
04/02/2006 19:00 212ÿ992 S3rv32.exe
04/02/2006 18:48 <REP> Microsoft
2 fichier(s) 214ÿ717 octets
2 R‚p(s) 4ÿ953ÿ440ÿ256 octets libres
0
incognito02 Messages postés 3487 Statut Contributeur 138
 
re,

ferme tous les programmes parce qu'il va y avoir reboot automatique
Ouvre le dossier l2mfixpuis double-clic sur L2Mfix.bat
Ensuite choisis l'option 2 puis Entrée
Puis appuie sur n'importe quelle touche pour redémarrer l'ordinateur
Après redémarrage, le bureau et les icônes vont apparaître puis disparaître, c'est normal ! Et un nouveau rapport va apparaître à l'écran.
>> Si après redémarrage les icônes n'apparaissent/disparaissent pas ou si le rapport n'apparaît pas, alors ouvre le dossier l2mfix et lance second.bat

Enfin poste ce 2ème rapport avec un nouveau rapport HJT.

A+


0
mib34 Messages postés 17 Statut Membre
 
merci bcp pour ton aide ,
voila le log de L2Mfix
L2mfix 010406
Creating Account.
La commande s'est termin‚e correctement.

Adding Administrative privleges.
Checking for L2MFix account(0=no 1=yes):
1
Granting SeDebugPrivilege to L2MFIX ... successful

Running From:
C:\WINDOWS\system32

Killing Processes!

Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.org
Killing PID 628 'smss.exe'

Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.org
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
Killing PID 732 'winlogon.exe'
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
incognito02 Messages postés 3487 Statut Contributeur 138
 
re,

remet un log hijackthis stp.

A+

0
mib34 Messages postés 17 Statut Membre
 
eu jai du louper un truc le hijackthis est la normalement ^^
Logfile of HijackThis v1.99.1
Scan saved at 21:35:04, on 13/02/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\S3rv32.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE
C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\a-squared\a2guard.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\mib\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AdobeReaderPro] S3rv32.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P31 "EPSON Stylus Photo RX420 Series" /O5 "LPT1:" /M "Stylus Photo RX420"
O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series (Copie 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P41 "EPSON Stylus Photo RX420 Series (Copie 1)" /O6 "USB001" /M "Stylus Photo RX420"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [WinDLL (v4mon.dll)] rundll32.exe C:\WINDOWS\System32\v4mon.dll,start
O4 - HKLM\..\RunServices: [AdobeReaderPro] S3rv32.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [a-squared] "C:\Program Files\a-squared\a2guard.exe"
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O14 - IERESET.INF: START_PAGE_URL=http://www.google.fr/
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1139826827328
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0AC4A316-7772-4E0A-90B4-5ABC9E470ADE}: NameServer = 80.10.246.130 80.10.246.3
O17 - HKLM\System\CS1\Services\Tcpip\..\{0AC4A316-7772-4E0A-90B4-5ABC9E470ADE}: NameServer = 80.10.246.130 80.10.246.3
O17 - HKLM\System\CS2\Services\Tcpip\..\{0AC4A316-7772-4E0A-90B4-5ABC9E470ADE}: NameServer = 80.10.246.130 80.10.246.3
O17 - HKLM\System\CS3\Services\Tcpip\..\{0AC4A316-7772-4E0A-90B4-5ABC9E470ADE}: NameServer = 80.10.246.1 80.10.246.132
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: ddabb - ddabb.dll (file missing)
O20 - Winlogon Notify: ddaby - C:\WINDOWS\System32\ddaby.dll (file missing)
O20 - Winlogon Notify: MS-DOS Emulation - C:\WINDOWS\system32\mdmtapi.dll (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe
0
incognito02 Messages postés 3487 Statut Contributeur 138
 
re,

j'ai un doute sur un fichier, donc pour cela, tu va aller sur ce site :
http://www.virustotal.com/xhtml/virustotal_en.html

tu clique sur parcourir, tu selectionne ce fichier : C:\WINDOWS\System32\S3rv32.exe
tu cliques ensuite sur Send.

si possible colle le rapport de ce test ici.

On finira le travail ensuite.

Bon courage.

A+

0
mib34 Messages postés 17 Statut Membre
 
voila le rapport mais la mise en forme est pas super
his is a report processed by VirusTotal on 02/12/2006 at 21:51:34 (CET) after scanning the file "S3rv32.exe" file.

Antivirus Version Update Result
AntiVir 6.33.0.81 02.11.2006 no virus found
Avast 4.6.695.0 02.10.2006 no virus found
AVG 718 02.10.2006 no virus found
Avira 6.33.0.81 02.11.2006 no virus found
BitDefender 7.2 02.12.2006 Backdoor.Rbot.CJV
CAT-QuickHeal 8.00 02.11.2006 (Suspicious) - DNAScan
ClamAV devel-20060126 02.12.2006 no virus found
DrWeb 4.33 02.12.2006 Win32.HLLW.MyBot
eTrust-InoculateIT 23.71.74 02.11.2006 no virus found
eTrust-Vet 12.4.2074 02.10.2006 no virus found
Ewido 3.5 02.12.2006 Backdoor.Rbot
Fortinet 2.54.0.0 02.12.2006 W32/RBot!bdr
F-Prot 3.16c 02.09.2006 security risk named W32/Sdbot.OLK
Ikarus 0.2.59.0 02.10.2006 no virus found
Kaspersky 4.0.2.24 02.12.2006 Backdoor.Win32.Rbot.gen
McAfee 4694 02.10.2006 no virus found
NOD32v2 1.1404 02.11.2006 probably unknown NewHeur_PE virus
Norman 5.70.10 02.10.2006 W32/Spybot.AGPE
Panda 9.0.0.4 02.12.2006 W32/Gaobot.MEM.worm
Sophos 4.02.0 02.11.2006 no virus found
Symantec 8.0 02.12.2006 no virus found
TheHacker 5.9.4.094 02.10.2006 no virus found
UNA 1.83 02.09.2006 no virus found
VBA32 3.10.5 02.11.2006 Backdoor.Win32.Rbot.gen
0
incognito02 Messages postés 3487 Statut Contributeur 138
 
re,

je ne peux pas y acceder, dis moi si il y avait un virus de détecté sur ce fichier ?

A+
0
incognito02 Messages postés 3487 Statut Contributeur 138
 
ok,

patiente 1 mn je te donne la soluce.

A+

0
mib34 Messages postés 17 Statut Membre
 
dsl je me suis emmeler les pinceaux mais apparament il i a un virus détecter :^(
0
mib34 Messages postés 17 Statut Membre
 
jai tout mon temps t'inquietes
0
incognito02 Messages postés 3487 Statut Contributeur 138
 
re,

Affiche tous les fichiers et dossiers :
Clique sur démarrer/panneau de configuration/outil/option des dossiers/affichage

Coche « afficher les fichiers et dossiers cachés »

Décoche la case "Masquer les fichiers protégés du système d'exploitation (recommandé)"

Décoche « masquer les extensions dont le type est connu »
Puis fais «Ok» pour valider les changements.

Et appliquer !
----------------------------------------------------------------------------

¤Relance HijackThis, coche les cases devant ces lignes et ensuite clique sur fix checked :

O4 - HKLM\..\Run: [AdobeReaderPro] S3rv32.exe

O4 - HKLM\..\RunServices: [AdobeReaderPro] S3rv32.exe

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O20 - Winlogon Notify: ddabb - ddabb.dll (file missing)

O20 - Winlogon Notify: ddaby - C:\WINDOWS\System32\ddaby.dll (file missing)

O20 - Winlogon Notify: MS-DOS Emulation - C:\WINDOWS\system32\mdmtapi.dll (file missing)

Recherche et supprime ceci:
attention seulement les fichiers (si présents).

C:\WINDOWS\System32\S3rv32.exe

Vide ta Corbeille.

relance ton orid et précise tes soucis, si il en reste.

A+


0
mib34 Messages postés 17 Statut Membre
 
voila ces bon jai fai ce que tu mavais dit de faire
et apriori jai aucun autre probleme a signaler (pour une fois).
merci pour toute ton aide .
A+
0
incognito02 Messages postés 3487 Statut Contributeur 138
 
Re,

Pas de quoi.

Au plaisir de ..... ne pas te revoir sur ce forum lol !

A+

0
mib34 Messages postés 17 Statut Membre
 
Je vai essayer d'arreter de faire des conneries ^^
0
incognito02 Messages postés 3487 Statut Contributeur 138
 
Pas grave,

on sera là pour t'aider.

Bonne soirée.

0