Virus
Résolu
tital17
Messages postés
20
Statut
Membre
-
Destrio5 Messages postés 99820 Date d'inscription Statut Modérateur Dernière intervention -
Destrio5 Messages postés 99820 Date d'inscription Statut Modérateur Dernière intervention -
Bonsoir,
ça fait quelques jours que j'essaie de changer mon antivirus mais malheureusement je n'arrive pas à l'installer il semble que je sois infecté par 1 ou plusieurs virus. j'ai vu sur d'autres sites qu'il fallait fournir un rapport de Hijack pour que des personnes compétentes puissent résoudre les problèmes. Est ce que quelqu'un peut m'aider?
Voici le rapport:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:24, on 2008-10-19
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Hercules\WiFi Station\WifiStation.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\MASTER\Bureau\HiJackThis(2).exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.homepageinspect.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {70AB0A8B-8A8A-496F-A339-4CD2F3352991} - C:\WINDOWS\system32\fccayvv.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {96960F5A-628F-4D90-BE08-5E9460671533} - C:\WINDOWS\system32\jkhfd.dll (file missing)
O2 - BHO: (no name) - {A5489C17-02AD-2E52-DD46-2A909AA43BBC} - (no file)
O2 - BHO: (no name) - {C2A1C5CB-C0EF-4689-9436-F62CCA1C5383} - C:\Program Files\NetProject\sbmdl.dll (file missing)
O3 - Toolbar: Web Application - {81705D67-3F73-4983-859B-97D0922E5ABE} - C:\Program Files\NetProject\wamdl.dll (file missing)
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: WiFi Station.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.browsergate.com/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.browsergate.com/redirect.php (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://www.secuser.com
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/
O20 - Winlogon Notify: fccayvv - fccayvv.dll (file missing)
O22 - SharedTaskScheduler: corduroyed - {699fabf8-1087-491f-b57c-80a68929d82b} - (no file)
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
ça fait quelques jours que j'essaie de changer mon antivirus mais malheureusement je n'arrive pas à l'installer il semble que je sois infecté par 1 ou plusieurs virus. j'ai vu sur d'autres sites qu'il fallait fournir un rapport de Hijack pour que des personnes compétentes puissent résoudre les problèmes. Est ce que quelqu'un peut m'aider?
Voici le rapport:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:24, on 2008-10-19
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Hercules\WiFi Station\WifiStation.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\MASTER\Bureau\HiJackThis(2).exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.homepageinspect.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {70AB0A8B-8A8A-496F-A339-4CD2F3352991} - C:\WINDOWS\system32\fccayvv.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {96960F5A-628F-4D90-BE08-5E9460671533} - C:\WINDOWS\system32\jkhfd.dll (file missing)
O2 - BHO: (no name) - {A5489C17-02AD-2E52-DD46-2A909AA43BBC} - (no file)
O2 - BHO: (no name) - {C2A1C5CB-C0EF-4689-9436-F62CCA1C5383} - C:\Program Files\NetProject\sbmdl.dll (file missing)
O3 - Toolbar: Web Application - {81705D67-3F73-4983-859B-97D0922E5ABE} - C:\Program Files\NetProject\wamdl.dll (file missing)
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: WiFi Station.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.browsergate.com/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.browsergate.com/redirect.php (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://www.secuser.com
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/
O20 - Winlogon Notify: fccayvv - fccayvv.dll (file missing)
O22 - SharedTaskScheduler: corduroyed - {699fabf8-1087-491f-b57c-80a68929d82b} - (no file)
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
A voir également:
- Virus
- Virus mcafee - Accueil - Piratage
- Virus facebook demande d'amis - Accueil - Facebook
- Virus informatique - Guide
- Panda anti virus gratuit - Télécharger - Antivirus & Antimalwares
- Undisclosed-recipients virus - Guide
41 réponses
Pour Bagle, je te conseille FindyKill au lieu d'Elibagla.
--> Télécharge FindyKill (par Chiquitine29) sur ton bureau :
http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe
--> Lance l'installation avec les paramètres par defaut
--> Double-clique sur le raccourci FindyKill sur ton bureau
--> Au menu principal, choisis l'option 1 (Recherche)
--> Poste le rapport FindyKill.txt
Note : le rapport FindyKill.txt est sauvegardé à la racine du disque.
--> Télécharge FindyKill (par Chiquitine29) sur ton bureau :
http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe
--> Lance l'installation avec les paramètres par defaut
--> Double-clique sur le raccourci FindyKill sur ton bureau
--> Au menu principal, choisis l'option 1 (Recherche)
--> Poste le rapport FindyKill.txt
Note : le rapport FindyKill.txt est sauvegardé à la racine du disque.
Salut,
Salut,
Commences par ceci :
Télécharges [ http://eric.71.mespages.googlepages.com/ToolBarSD.exeToolBar S&D ( de Eric_71/Team IDN ) ]:
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2
( Tuto : https://sites.google.com/site/toolbarsd/aideenimages )
!! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!
* double-cliques sur l'.exe pour lancer l'installe et laisses toi guider ...
* Une fois fait, cliques sur le raccourci créé sur ton bureau pour lancer l'outil .
* Choisis l'option 1 ( "recherche") et tapes "entrée" .
* Une fois le scan finit , un rapport va apparaître, copie/colles l'intégralité
de son contenu dans ta prochaine réponse ...
( le rapport est en outre sauvegardé ici -> C:\TB.txt )
Salut,
Commences par ceci :
Télécharges [ http://eric.71.mespages.googlepages.com/ToolBarSD.exeToolBar S&D ( de Eric_71/Team IDN ) ]:
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2
( Tuto : https://sites.google.com/site/toolbarsd/aideenimages )
!! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!
* double-cliques sur l'.exe pour lancer l'installe et laisses toi guider ...
* Une fois fait, cliques sur le raccourci créé sur ton bureau pour lancer l'outil .
* Choisis l'option 1 ( "recherche") et tapes "entrée" .
* Une fois le scan finit , un rapport va apparaître, copie/colles l'intégralité
de son contenu dans ta prochaine réponse ...
( le rapport est en outre sauvegardé ici -> C:\TB.txt )
salut destrio,
je te remercie de m'avoir permis de me débarrasser de toutes les saloperies qu'il y avait dans mon ordinateur.
Bonne journée
je te remercie de m'avoir permis de me débarrasser de toutes les saloperies qu'il y avait dans mon ordinateur.
Bonne journée
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
re,
alors fait ceci:
* Téléchargez ELIBAGLA (by SATINFO) en bas de cette page :
http://www.zonavirus.com/datos/archivos/Descargas/Utilidades%20SATINFO/ELIBAGLA.BEA%D8B%D8%D8H.EXE
* Cliquez sur le bouton Descargar Elibagla pour télécharger le fichier, placez le sur votre bureau.
* Double-cliquez dessus pour l'ouvrir
* Assurez-vous que dans le menu déroulant Unidad, vous avez bien C:\ (ou la partition contenant le système d'exploitation)
* Vérifiez aussi que l'option en bas de la fenêtre Eliminar Ficheros Automaticamente est bien cochée
* Cliquez sur le bouton Explorar pour lancer l'analyse, à la fin du scan, un rapport est généré, nommé infosat.txt, il est en outre sauvegardé sous la racine : C:\infosat.txt
alors fait ceci:
* Téléchargez ELIBAGLA (by SATINFO) en bas de cette page :
http://www.zonavirus.com/datos/archivos/Descargas/Utilidades%20SATINFO/ELIBAGLA.BEA%D8B%D8%D8H.EXE
* Cliquez sur le bouton Descargar Elibagla pour télécharger le fichier, placez le sur votre bureau.
* Double-cliquez dessus pour l'ouvrir
* Assurez-vous que dans le menu déroulant Unidad, vous avez bien C:\ (ou la partition contenant le système d'exploitation)
* Vérifiez aussi que l'option en bas de la fenêtre Eliminar Ficheros Automaticamente est bien cochée
* Cliquez sur le bouton Explorar pour lancer l'analyse, à la fin du scan, un rapport est généré, nommé infosat.txt, il est en outre sauvegardé sous la racine : C:\infosat.txt
désolé pour le temps, rapport:
SmitFraudFix v2.361
Rapport fait à 21:34:32.00, 2008-10-19
Executé à partir de C:\Documents and Settings\MASTER\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{699fabf8-1087-491f-b57c-80a68929d82b}"="corduroyed"
»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus
»»»»»»»»»»»»»»»»»»»»»»»» hosts
127.0.0.1 localhost
»»»»»»»»»»»»»»»»»»»»»»»» VACFix
VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix
S!Ri's WS2Fix: LSP not Found.
»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix
GenericRenosFix by S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés
»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» AntiXPVSTFix
AntiXPVSTFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» RK
»»»»»»»»»»»»»»»»»»»»»»»» DNS
Description: Carte réseau Fast Ethernet PCI Realtek RTL8139 Family - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.1.1
Description: Hercules Wireless G USB2 - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\..\{CC027FAD-0141-491A-85F8-D73BF92A7293}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\..\{D23D33A5-7C74-4180-9874-E111946B9040}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{CC027FAD-0141-491A-85F8-D73BF92A7293}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{D23D33A5-7C74-4180-9874-E111946B9040}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{CC027FAD-0141-491A-85F8-D73BF92A7293}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{D23D33A5-7C74-4180-9874-E111946B9040}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires
»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""
»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre
Nettoyage terminé.
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{699fabf8-1087-491f-b57c-80a68929d82b}"="corduroyed"
»»»»»»»»»»»»»»»»»»»»»»»» Fin
je m'occupe de cela zakouko, merci
SmitFraudFix v2.361
Rapport fait à 21:34:32.00, 2008-10-19
Executé à partir de C:\Documents and Settings\MASTER\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{699fabf8-1087-491f-b57c-80a68929d82b}"="corduroyed"
»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus
»»»»»»»»»»»»»»»»»»»»»»»» hosts
127.0.0.1 localhost
»»»»»»»»»»»»»»»»»»»»»»»» VACFix
VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix
S!Ri's WS2Fix: LSP not Found.
»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix
GenericRenosFix by S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés
»»»»»»»»»»»»»»»»»»»»»»»» IEDFix
IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» 404Fix
404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» AntiXPVSTFix
AntiXPVSTFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» RK
»»»»»»»»»»»»»»»»»»»»»»»» DNS
Description: Carte réseau Fast Ethernet PCI Realtek RTL8139 Family - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.1.1
Description: Hercules Wireless G USB2 - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\..\{CC027FAD-0141-491A-85F8-D73BF92A7293}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\..\{D23D33A5-7C74-4180-9874-E111946B9040}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{CC027FAD-0141-491A-85F8-D73BF92A7293}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{D23D33A5-7C74-4180-9874-E111946B9040}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{CC027FAD-0141-491A-85F8-D73BF92A7293}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{D23D33A5-7C74-4180-9874-E111946B9040}: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires
»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""
»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre
Nettoyage terminé.
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{699fabf8-1087-491f-b57c-80a68929d82b}"="corduroyed"
»»»»»»»»»»»»»»»»»»»»»»»» Fin
je m'occupe de cela zakouko, merci
le logiciel met un peu de temps zakouko je te poste le rapport dès que c'est fini.
Merci goldorak59, je voulais savoir si ta manip était finie?
Merci goldorak59, je voulais savoir si ta manip était finie?
voici le rapport zakouko
----------------- FindyKill V4.005 ------------------
* User : MASTER - ROCHELLE-XYJLT4
* Emplacement : C:\Program Files\FindyKill
* Outils Mis a jours le 19/10/08 par Chiquitine29
* Recherche effectuée à 21:44:19 le 2008-10-19
* Windows XP - Internet Explorer 6.0.2900.2180
((((((((((((((((( *** Recherche *** ))))))))))))))))))
--------------- [ Processus actifs ] ----------------
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Hercules\WiFi Station\WifiStation.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\notepad.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE
C:\WINDOWS\explorer.exe
--------------- [ Fichiers/Dossiers infectieux ] ----------------
»»»» Presence des fichiers dans C:
»»»» Presence des fichiers dans C:\WINDOWS
»»»» Presence des fichiers dans C:\WINDOWS\Prefetch
Present ! - C:\WINDOWS\prefetch\101156.EXE-173E0A88.pf
Present ! - C:\WINDOWS\prefetch\103406.EXE-12F65020.pf
Present ! - C:\WINDOWS\prefetch\107390.EXE-25196BC2.pf
Present ! - C:\WINDOWS\prefetch\116796.EXE-0ED1AD70.pf
Present ! - C:\WINDOWS\prefetch\119343.EXE-186CAFE8.pf
Present ! - C:\WINDOWS\prefetch\130812.EXE-3902460E.pf
Present ! - C:\WINDOWS\prefetch\137140.EXE-2F2140DE.pf
Present ! - C:\WINDOWS\prefetch\139187.EXE-1A69A310.pf
Present ! - C:\WINDOWS\prefetch\142125.EXE-07030296.pf
Present ! - C:\WINDOWS\prefetch\14711500.EXE-103E5957.pf
Present ! - C:\WINDOWS\prefetch\14755421.EXE-0C7F6001.pf
Present ! - C:\WINDOWS\prefetch\14760859.EXE-1C379855.pf
Present ! - C:\WINDOWS\prefetch\15324218.EXE-33D0F696.pf
Present ! - C:\WINDOWS\prefetch\165392765.EXE-395E9117.pf
Present ! - C:\WINDOWS\prefetch\165422171.EXE-22431989.pf
Present ! - C:\WINDOWS\prefetch\179927781.EXE-0F1E44A3.pf
Present ! - C:\WINDOWS\prefetch\180089046.EXE-2CABA43A.pf
Present ! - C:\WINDOWS\prefetch\183296.EXE-09D74D21.pf
Present ! - C:\WINDOWS\prefetch\189390.EXE-2EBB7D7A.pf
Present ! - C:\WINDOWS\prefetch\192765.EXE-10E937A1.pf
Present ! - C:\WINDOWS\prefetch\194669859.EXE-31DFCDBC.pf
Present ! - C:\WINDOWS\prefetch\194676843.EXE-2C5D880E.pf
Present ! - C:\WINDOWS\prefetch\209296671.EXE-322BEFFE.pf
Present ! - C:\WINDOWS\prefetch\209306109.EXE-22EEC960.pf
Present ! - C:\WINDOWS\prefetch\89890.EXE-07E67765.pf
Present ! - C:\WINDOWS\prefetch\92750.EXE-075EE928.pf
Present ! - C:\WINDOWS\prefetch\FLEC006.EXE-118F0B44.pf
Present ! - C:\WINDOWS\prefetch\HLDRRR.EXE-106798BB.pf
Present ! - C:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf
Present ! - C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf
Present ! - C:\WINDOWS\Prefetch\O4PATCH.EXE-2DA7463B.pf
Present ! - C:\WINDOWS\Prefetch\PATCH.EXE-1DE617D3.pf
Present ! - C:\WINDOWS\Prefetch\PATCHJRE.EXE-065EAC0D.pf
»»»» Presence des fichiers dans C:\WINDOWS\system32
Présent ! - C:\WINDOWS\system32\mdelk.exe
Présent ! - C:\WINDOWS\system32\wintems.exe
Présent ! - C:\WINDOWS\system32\ban_list.txt
»»»» Presence des fichiers dans C:\WINDOWS\system32\drivers
Présent ! - C:\WINDOWS\system32\drivers\mdelk.exe
Présent ! - C:\WINDOWS\system32\drivers\srosa.sys
Présent ! - C:\WINDOWS\system32\drivers\hldrrr.exe
Présent ! - "C:\WINDOWS\system32\drivers\downld"
Present ! - C:\WINDOWS\system32\drivers\downld\105390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106842500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\114890.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121667750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121770750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1231500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1250750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1329890.exe
Present ! - C:\WINDOWS\system32\drivers\downld\137140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\146640.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14711500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14757750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14758890.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14904390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14942250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14993390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150808390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150829750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150942140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165440140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\170500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180073140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180074750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18495140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18546000.exe
Present ! - C:\WINDOWS\system32\drivers\downld\189390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209397250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29327500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33508250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\349890.exe
Present ! - C:\WINDOWS\system32\drivers\downld\414000.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44739250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48022390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48045640.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48255500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\650250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77475750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92222390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106842500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106863656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106870546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106915062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106922859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106951687.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106967937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106983859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107110953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107170468.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107193984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\111171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\117421.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121667750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121679656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121681203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121689187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121699562.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121726765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121731437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121770750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121783953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121792796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\124171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136216484.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136236515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136239171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136253906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136262218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136265953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136309062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136322125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136352203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14726531.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14746281.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14755421.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14809171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150796406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150798515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150808390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150811062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150819187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150826218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150829750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150942140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150968437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150977312.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15499671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165392765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165407843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165409515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165422171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165430265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165436796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165440140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165479218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165499296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165507093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\179927781.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180073140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180074750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180089046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180096265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180111093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180122671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180183093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180209078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180226671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194661343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194663328.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194669859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194676843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194714062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194753625.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194758281.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194800265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194815437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194831859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\197921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209306109.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209344578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209351796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209389437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209397250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209400781.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209443421.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209464546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209478187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\227921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\288171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29341031.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29356921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29439281.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29664671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3225281.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3273531.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33302921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33446531.exe
Present ! - C:\WINDOWS\system32\drivers\downld\422921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44340171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44626921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\460281.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48065531.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48317421.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62738531.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62760671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62790921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73890781.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73928781.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73953171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\74060031.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77457671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92084781.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92110031.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92154921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\104312.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106915062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121699562.exe
Present ! - C:\WINDOWS\system32\drivers\downld\125812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\130812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136309062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14779062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14814062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14910812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15077812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150811062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150977312.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15297312.exe
Present ! - C:\WINDOWS\system32\drivers\downld\175312.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194714062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\197812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29744562.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3150062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59314562.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73931812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77472562.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77528812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\845812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107110953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\108453.exe
Present ! - C:\WINDOWS\system32\drivers\downld\119343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121681203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121783953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\134453.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136265953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136352203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14792703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14813843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14901953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15120953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15190703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15301843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165407843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165507093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180111093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180183093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\181843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18528343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194661343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194676843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\198203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\203203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\229343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\276593.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29426593.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29723453.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29824953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29882703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\298953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33299453.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33336703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3570093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48018453.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48128343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48291203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59355953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62804843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62903703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77333203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92305703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107193984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\128234.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1295984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136216484.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14895984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18542234.exe
Present ! - C:\WINDOWS\system32\drivers\downld\208984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\260734.exe
Present ! - C:\WINDOWS\system32\drivers\downld\329734.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33357734.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3487484.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44498984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48099484.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48124734.exe
Present ! - C:\WINDOWS\system32\drivers\downld\74070734.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77380234.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92028234.exe
Present ! - C:\WINDOWS\system32\drivers\downld\97984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\113515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121726765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136236515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136322125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\140765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\142125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14728765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14804265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14872515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14881125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150798515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15201515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\159625.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165392765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165409515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165430265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\176875.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180096265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18520765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\192765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194753625.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194800265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\211765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3312875.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3820875.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44393625.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59239375.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59387625.exe
Present ! - C:\WINDOWS\system32\drivers\downld\606125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62818765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62825875.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73882265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73915265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77435125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77555265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\814125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\91979375.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92037375.exe
Present ! - C:\WINDOWS\system32\drivers\downld\101156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\101656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\103406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106863656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106870546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\115796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\116796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\117156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1184406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\119046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1211156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121679656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121792796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\128046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136253906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14706796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14742906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14761796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14898156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14928156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14933906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150796406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15480156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165436796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165499296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\173406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180089046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\183296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18508296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18517296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18734906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\191656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\205046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209351796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209464546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\213656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\260796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\284796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\288546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29311296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3222656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\323546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33324296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33372046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33379046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\377406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\435296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44471546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44780296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59317406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59379906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62896296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73943046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\74022156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\94906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106951687.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106967937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1212687.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121689187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121731437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\139187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14899187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14900937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14993937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150819187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150968437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18646687.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194815437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209389437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209478187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\228187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29621437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\306937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\378437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3919437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44403937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44438937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\47966187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\482187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\914187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106828.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107170468.exe
Present ! - C:\WINDOWS\system32\drivers\downld\108468.exe
Present ! - C:\WINDOWS\system32\drivers\downld\116718.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1242078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1339328.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136262218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\139828.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14806218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14825578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14874078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14882718.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150826218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15148468.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15324218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15386828.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15394218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15444078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165479218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180209078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194663328.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209344578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\215578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\257828.exe
Present ! - C:\WINDOWS\system32\drivers\downld\287218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29347218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29396718.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29680968.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29758718.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33255578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3370578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3456328.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59231218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59431968.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59461078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59473078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62758468.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73912328.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106922859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106983859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\114359.exe
Present ! - C:\WINDOWS\system32\drivers\downld\143859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14760859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14773859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14848609.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14885609.exe
Present ! - C:\WINDOWS\system32\drivers\downld\161859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18505109.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18790859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194669859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194831859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209306109.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29326359.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29893109.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33483609.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62879859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77374359.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77546859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92140859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92347859.exe
»»»» Presence des fichiers dans C:\Documents and Settings\MASTER\Application Data
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\flec006.exe"
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\list.oct"
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\data.oct"
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\srvlist.oct"
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\shared"
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m"
»»»» Presence des fichiers dans C:\DOCUME~1\MASTER\LOCALS~1\Temp
----------------- FindyKill V4.005 ------------------
* User : MASTER - ROCHELLE-XYJLT4
* Emplacement : C:\Program Files\FindyKill
* Outils Mis a jours le 19/10/08 par Chiquitine29
* Recherche effectuée à 21:44:19 le 2008-10-19
* Windows XP - Internet Explorer 6.0.2900.2180
((((((((((((((((( *** Recherche *** ))))))))))))))))))
--------------- [ Processus actifs ] ----------------
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Hercules\WiFi Station\WifiStation.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\notepad.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE
C:\WINDOWS\explorer.exe
--------------- [ Fichiers/Dossiers infectieux ] ----------------
»»»» Presence des fichiers dans C:
»»»» Presence des fichiers dans C:\WINDOWS
»»»» Presence des fichiers dans C:\WINDOWS\Prefetch
Present ! - C:\WINDOWS\prefetch\101156.EXE-173E0A88.pf
Present ! - C:\WINDOWS\prefetch\103406.EXE-12F65020.pf
Present ! - C:\WINDOWS\prefetch\107390.EXE-25196BC2.pf
Present ! - C:\WINDOWS\prefetch\116796.EXE-0ED1AD70.pf
Present ! - C:\WINDOWS\prefetch\119343.EXE-186CAFE8.pf
Present ! - C:\WINDOWS\prefetch\130812.EXE-3902460E.pf
Present ! - C:\WINDOWS\prefetch\137140.EXE-2F2140DE.pf
Present ! - C:\WINDOWS\prefetch\139187.EXE-1A69A310.pf
Present ! - C:\WINDOWS\prefetch\142125.EXE-07030296.pf
Present ! - C:\WINDOWS\prefetch\14711500.EXE-103E5957.pf
Present ! - C:\WINDOWS\prefetch\14755421.EXE-0C7F6001.pf
Present ! - C:\WINDOWS\prefetch\14760859.EXE-1C379855.pf
Present ! - C:\WINDOWS\prefetch\15324218.EXE-33D0F696.pf
Present ! - C:\WINDOWS\prefetch\165392765.EXE-395E9117.pf
Present ! - C:\WINDOWS\prefetch\165422171.EXE-22431989.pf
Present ! - C:\WINDOWS\prefetch\179927781.EXE-0F1E44A3.pf
Present ! - C:\WINDOWS\prefetch\180089046.EXE-2CABA43A.pf
Present ! - C:\WINDOWS\prefetch\183296.EXE-09D74D21.pf
Present ! - C:\WINDOWS\prefetch\189390.EXE-2EBB7D7A.pf
Present ! - C:\WINDOWS\prefetch\192765.EXE-10E937A1.pf
Present ! - C:\WINDOWS\prefetch\194669859.EXE-31DFCDBC.pf
Present ! - C:\WINDOWS\prefetch\194676843.EXE-2C5D880E.pf
Present ! - C:\WINDOWS\prefetch\209296671.EXE-322BEFFE.pf
Present ! - C:\WINDOWS\prefetch\209306109.EXE-22EEC960.pf
Present ! - C:\WINDOWS\prefetch\89890.EXE-07E67765.pf
Present ! - C:\WINDOWS\prefetch\92750.EXE-075EE928.pf
Present ! - C:\WINDOWS\prefetch\FLEC006.EXE-118F0B44.pf
Present ! - C:\WINDOWS\prefetch\HLDRRR.EXE-106798BB.pf
Present ! - C:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf
Present ! - C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf
Present ! - C:\WINDOWS\Prefetch\O4PATCH.EXE-2DA7463B.pf
Present ! - C:\WINDOWS\Prefetch\PATCH.EXE-1DE617D3.pf
Present ! - C:\WINDOWS\Prefetch\PATCHJRE.EXE-065EAC0D.pf
»»»» Presence des fichiers dans C:\WINDOWS\system32
Présent ! - C:\WINDOWS\system32\mdelk.exe
Présent ! - C:\WINDOWS\system32\wintems.exe
Présent ! - C:\WINDOWS\system32\ban_list.txt
»»»» Presence des fichiers dans C:\WINDOWS\system32\drivers
Présent ! - C:\WINDOWS\system32\drivers\mdelk.exe
Présent ! - C:\WINDOWS\system32\drivers\srosa.sys
Présent ! - C:\WINDOWS\system32\drivers\hldrrr.exe
Présent ! - "C:\WINDOWS\system32\drivers\downld"
Present ! - C:\WINDOWS\system32\drivers\downld\105390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106842500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\114890.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121667750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121770750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1231500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1250750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1329890.exe
Present ! - C:\WINDOWS\system32\drivers\downld\137140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\146640.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14711500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14757750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14758890.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14904390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14942250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14993390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150808390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150829750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150942140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165440140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\170500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180073140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180074750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18495140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18546000.exe
Present ! - C:\WINDOWS\system32\drivers\downld\189390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209397250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29327500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33508250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\349890.exe
Present ! - C:\WINDOWS\system32\drivers\downld\414000.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44739250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48022390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48045640.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48255500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\650250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77475750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92222390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106842500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106863656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106870546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106915062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106922859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106951687.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106967937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106983859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107110953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107170468.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107193984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\111171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\117421.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121667750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121679656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121681203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121689187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121699562.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121726765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121731437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121770750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121783953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121792796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\124171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136216484.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136236515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136239171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136253906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136262218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136265953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136309062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136322125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136352203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14726531.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14746281.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14755421.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14809171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150796406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150798515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150808390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150811062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150819187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150826218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150829750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150942140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150968437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150977312.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15499671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165392765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165407843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165409515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165422171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165430265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165436796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165440140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165479218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165499296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165507093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\179927781.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180073140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180074750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180089046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180096265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180111093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180122671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180183093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180209078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180226671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194661343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194663328.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194669859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194676843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194714062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194753625.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194758281.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194800265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194815437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194831859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\197921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209306109.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209344578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209351796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209389437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209397250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209400781.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209443421.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209464546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209478187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\227921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\288171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29341031.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29356921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29439281.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29664671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3225281.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3273531.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33302921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33446531.exe
Present ! - C:\WINDOWS\system32\drivers\downld\422921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44340171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44626921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\460281.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48065531.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48317421.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62738531.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62760671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62790921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73890781.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73928781.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73953171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\74060031.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77457671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92084781.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92110031.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92154921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\104312.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106915062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121699562.exe
Present ! - C:\WINDOWS\system32\drivers\downld\125812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\130812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136309062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14779062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14814062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14910812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15077812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150811062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150977312.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15297312.exe
Present ! - C:\WINDOWS\system32\drivers\downld\175312.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194714062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\197812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29744562.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3150062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59314562.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73931812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77472562.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77528812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\845812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107110953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\108453.exe
Present ! - C:\WINDOWS\system32\drivers\downld\119343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121681203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121783953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\134453.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136265953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136352203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14792703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14813843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14901953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15120953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15190703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15301843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165407843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165507093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180111093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180183093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\181843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18528343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194661343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194676843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\198203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\203203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\229343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\276593.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29426593.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29723453.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29824953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29882703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\298953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33299453.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33336703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3570093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48018453.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48128343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48291203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59355953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62804843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62903703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77333203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92305703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107193984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\128234.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1295984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136216484.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14895984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18542234.exe
Present ! - C:\WINDOWS\system32\drivers\downld\208984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\260734.exe
Present ! - C:\WINDOWS\system32\drivers\downld\329734.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33357734.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3487484.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44498984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48099484.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48124734.exe
Present ! - C:\WINDOWS\system32\drivers\downld\74070734.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77380234.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92028234.exe
Present ! - C:\WINDOWS\system32\drivers\downld\97984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\113515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121726765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136236515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136322125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\140765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\142125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14728765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14804265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14872515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14881125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150798515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15201515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\159625.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165392765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165409515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165430265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\176875.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180096265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18520765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\192765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194753625.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194800265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\211765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3312875.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3820875.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44393625.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59239375.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59387625.exe
Present ! - C:\WINDOWS\system32\drivers\downld\606125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62818765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62825875.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73882265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73915265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77435125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77555265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\814125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\91979375.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92037375.exe
Present ! - C:\WINDOWS\system32\drivers\downld\101156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\101656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\103406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106863656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106870546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\115796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\116796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\117156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1184406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\119046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1211156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121679656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121792796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\128046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136253906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14706796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14742906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14761796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14898156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14928156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14933906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150796406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15480156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165436796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165499296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\173406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180089046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\183296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18508296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18517296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18734906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\191656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\205046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209351796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209464546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\213656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\260796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\284796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\288546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29311296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3222656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\323546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33324296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33372046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33379046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\377406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\435296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44471546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44780296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59317406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59379906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62896296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73943046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\74022156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\94906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106951687.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106967937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1212687.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121689187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121731437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\139187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14899187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14900937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14993937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150819187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150968437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18646687.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194815437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209389437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209478187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\228187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29621437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\306937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\378437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3919437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44403937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44438937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\47966187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\482187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\914187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106828.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107170468.exe
Present ! - C:\WINDOWS\system32\drivers\downld\108468.exe
Present ! - C:\WINDOWS\system32\drivers\downld\116718.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1242078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1339328.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136262218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\139828.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14806218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14825578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14874078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14882718.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150826218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15148468.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15324218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15386828.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15394218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15444078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165479218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180209078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194663328.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209344578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\215578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\257828.exe
Present ! - C:\WINDOWS\system32\drivers\downld\287218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29347218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29396718.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29680968.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29758718.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33255578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3370578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3456328.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59231218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59431968.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59461078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59473078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62758468.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73912328.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106922859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106983859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\114359.exe
Present ! - C:\WINDOWS\system32\drivers\downld\143859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14760859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14773859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14848609.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14885609.exe
Present ! - C:\WINDOWS\system32\drivers\downld\161859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18505109.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18790859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194669859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194831859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209306109.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29326359.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29893109.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33483609.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62879859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77374359.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77546859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92140859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92347859.exe
»»»» Presence des fichiers dans C:\Documents and Settings\MASTER\Application Data
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\flec006.exe"
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\list.oct"
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\data.oct"
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\srvlist.oct"
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\shared"
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m"
»»»» Presence des fichiers dans C:\DOCUME~1\MASTER\LOCALS~1\Temp
Re,
je sais bien mais on intervient,
hier j'ai eu "lyonnais92 qui lui me conseil desfois aussi anthony5151,geoffrey5,marie,
donc voilà,
maintenant je ne dit pas que tu m'aide pas mais par mp car chiquitine29 le fait aussi des fois.
Maintenant concernant Baggle c'est quelle ligne?
merci.
je sais bien mais on intervient,
hier j'ai eu "lyonnais92 qui lui me conseil desfois aussi anthony5151,geoffrey5,marie,
donc voilà,
maintenant je ne dit pas que tu m'aide pas mais par mp car chiquitine29 le fait aussi des fois.
Maintenant concernant Baggle c'est quelle ligne?
merci.
Re,
ben moi lorsque c'est un bagle le log que j'utilise me le dit est pas là????
alors je ne comprend pas mais j'attend une réponse de ta part mais je soumet le topic a ces gens là car ?????
Sinon pour être plus précis===> la ligne qui concerne le "BAGLE" sur le rapport hijs.
merci de ton aide sur ce topic.
@+
ben moi lorsque c'est un bagle le log que j'utilise me le dit est pas là????
alors je ne comprend pas mais j'attend une réponse de ta part mais je soumet le topic a ces gens là car ?????
Sinon pour être plus précis===> la ligne qui concerne le "BAGLE" sur le rapport hijs.
merci de ton aide sur ce topic.
@+
"que dois je faire maintenant? je suis encore infecté?"
---> Oui, l'énorme rapport FindyKill le montre. Par contre, il n'est pas complet. Peux-tu le reposter ?
---> Oui, l'énorme rapport FindyKill le montre. Par contre, il n'est pas complet. Peux-tu le reposter ?
----------------- FindyKill V4.005 ------------------
* User : MASTER - ROCHELLE-XYJLT4
* Emplacement : C:\Program Files\FindyKill
* Outils Mis a jours le 19/10/08 par Chiquitine29
* Recherche effectuée à 21:44:19 le 2008-10-19
* Windows XP - Internet Explorer 6.0.2900.2180
((((((((((((((((( *** Recherche *** ))))))))))))))))))
--------------- [ Processus actifs ] ----------------
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Hercules\WiFi Station\WifiStation.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\notepad.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE
C:\WINDOWS\explorer.exe
--------------- [ Fichiers/Dossiers infectieux ] ----------------
»»»» Presence des fichiers dans C:
»»»» Presence des fichiers dans C:\WINDOWS
»»»» Presence des fichiers dans C:\WINDOWS\Prefetch
Present ! - C:\WINDOWS\prefetch\101156.EXE-173E0A88.pf
Present ! - C:\WINDOWS\prefetch\103406.EXE-12F65020.pf
Present ! - C:\WINDOWS\prefetch\107390.EXE-25196BC2.pf
Present ! - C:\WINDOWS\prefetch\116796.EXE-0ED1AD70.pf
Present ! - C:\WINDOWS\prefetch\119343.EXE-186CAFE8.pf
Present ! - C:\WINDOWS\prefetch\130812.EXE-3902460E.pf
Present ! - C:\WINDOWS\prefetch\137140.EXE-2F2140DE.pf
Present ! - C:\WINDOWS\prefetch\139187.EXE-1A69A310.pf
Present ! - C:\WINDOWS\prefetch\142125.EXE-07030296.pf
Present ! - C:\WINDOWS\prefetch\14711500.EXE-103E5957.pf
Present ! - C:\WINDOWS\prefetch\14755421.EXE-0C7F6001.pf
Present ! - C:\WINDOWS\prefetch\14760859.EXE-1C379855.pf
Present ! - C:\WINDOWS\prefetch\15324218.EXE-33D0F696.pf
Present ! - C:\WINDOWS\prefetch\165392765.EXE-395E9117.pf
Present ! - C:\WINDOWS\prefetch\165422171.EXE-22431989.pf
Present ! - C:\WINDOWS\prefetch\179927781.EXE-0F1E44A3.pf
Present ! - C:\WINDOWS\prefetch\180089046.EXE-2CABA43A.pf
Present ! - C:\WINDOWS\prefetch\183296.EXE-09D74D21.pf
Present ! - C:\WINDOWS\prefetch\189390.EXE-2EBB7D7A.pf
Present ! - C:\WINDOWS\prefetch\192765.EXE-10E937A1.pf
Present ! - C:\WINDOWS\prefetch\194669859.EXE-31DFCDBC.pf
Present ! - C:\WINDOWS\prefetch\194676843.EXE-2C5D880E.pf
Present ! - C:\WINDOWS\prefetch\209296671.EXE-322BEFFE.pf
Present ! - C:\WINDOWS\prefetch\209306109.EXE-22EEC960.pf
Present ! - C:\WINDOWS\prefetch\89890.EXE-07E67765.pf
Present ! - C:\WINDOWS\prefetch\92750.EXE-075EE928.pf
Present ! - C:\WINDOWS\prefetch\FLEC006.EXE-118F0B44.pf
Present ! - C:\WINDOWS\prefetch\HLDRRR.EXE-106798BB.pf
Present ! - C:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf
Present ! - C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf
Present ! - C:\WINDOWS\Prefetch\O4PATCH.EXE-2DA7463B.pf
Present ! - C:\WINDOWS\Prefetch\PATCH.EXE-1DE617D3.pf
Present ! - C:\WINDOWS\Prefetch\PATCHJRE.EXE-065EAC0D.pf
»»»» Presence des fichiers dans C:\WINDOWS\system32
Présent ! - C:\WINDOWS\system32\mdelk.exe
Présent ! - C:\WINDOWS\system32\wintems.exe
Présent ! - C:\WINDOWS\system32\ban_list.txt
»»»» Presence des fichiers dans C:\WINDOWS\system32\drivers
Présent ! - C:\WINDOWS\system32\drivers\mdelk.exe
Présent ! - C:\WINDOWS\system32\drivers\srosa.sys
Présent ! - C:\WINDOWS\system32\drivers\hldrrr.exe
Présent ! - "C:\WINDOWS\system32\drivers\downld"
Present ! - C:\WINDOWS\system32\drivers\downld\105390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106842500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\114890.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121667750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121770750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1231500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1250750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1329890.exe
Present ! - C:\WINDOWS\system32\drivers\downld\137140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\146640.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14711500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14757750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14758890.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14904390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14942250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14993390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150808390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150829750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150942140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165440140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\170500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180073140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180074750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18495140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18546000.exe
Present ! - C:\WINDOWS\system32\drivers\downld\189390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209397250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29327500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33508250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\349890.exe
Present ! - C:\WINDOWS\system32\drivers\downld\414000.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44739250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48022390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48045640.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48255500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\650250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77475750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92222390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106842500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106863656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106870546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106915062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106922859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106951687.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106967937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106983859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107110953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107170468.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107193984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\111171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\117421.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121667750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121679656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121681203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121689187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121699562.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121726765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121731437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121770750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121783953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121792796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\124171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136216484.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136236515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136239171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136253906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136262218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136265953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136309062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136322125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136352203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14726531.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14746281.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14755421.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14809171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150796406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150798515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150808390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150811062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150819187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150826218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150829750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150942140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150968437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150977312.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15499671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165392765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165407843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165409515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165422171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165430265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165436796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165440140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165479218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165499296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165507093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\179927781.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180073140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180074750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180089046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180096265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180111093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180122671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180183093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180209078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180226671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194661343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194663328.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194669859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194676843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194714062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194753625.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194758281.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194800265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194815437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194831859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\197921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209306109.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209344578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209351796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209389437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209397250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209400781.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209443421.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209464546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209478187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\227921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\288171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29341031.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29356921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29439281.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29664671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3225281.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3273531.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33302921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33446531.exe
Present ! - C:\WINDOWS\system32\drivers\downld\422921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44340171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44626921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\460281.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48065531.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48317421.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62738531.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62760671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62790921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73890781.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73928781.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73953171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\74060031.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77457671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92084781.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92110031.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92154921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\104312.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106915062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121699562.exe
Present ! - C:\WINDOWS\system32\drivers\downld\125812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\130812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136309062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14779062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14814062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14910812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15077812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150811062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150977312.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15297312.exe
Present ! - C:\WINDOWS\system32\drivers\downld\175312.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194714062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\197812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29744562.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3150062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59314562.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73931812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77472562.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77528812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\845812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107110953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\108453.exe
Present ! - C:\WINDOWS\system32\drivers\downld\119343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121681203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121783953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\134453.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136265953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136352203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14792703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14813843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14901953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15120953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15190703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15301843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165407843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165507093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180111093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180183093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\181843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18528343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194661343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194676843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\198203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\203203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\229343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\276593.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29426593.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29723453.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29824953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29882703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\298953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33299453.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33336703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3570093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48018453.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48128343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48291203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59355953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62804843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62903703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77333203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92305703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107193984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\128234.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1295984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136216484.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14895984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18542234.exe
Present ! - C:\WINDOWS\system32\drivers\downld\208984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\260734.exe
Present ! - C:\WINDOWS\system32\drivers\downld\329734.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33357734.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3487484.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44498984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48099484.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48124734.exe
Present ! - C:\WINDOWS\system32\drivers\downld\74070734.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77380234.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92028234.exe
Present ! - C:\WINDOWS\system32\drivers\downld\97984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\113515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121726765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136236515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136322125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\140765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\142125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14728765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14804265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14872515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14881125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150798515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15201515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\159625.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165392765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165409515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165430265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\176875.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180096265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18520765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\192765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194753625.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194800265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\211765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3312875.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3820875.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44393625.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59239375.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59387625.exe
Present ! - C:\WINDOWS\system32\drivers\downld\606125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62818765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62825875.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73882265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73915265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77435125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77555265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\814125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\91979375.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92037375.exe
Present ! - C:\WINDOWS\system32\drivers\downld\101156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\101656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\103406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106863656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106870546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\115796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\116796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\117156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1184406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\119046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1211156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121679656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121792796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\128046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136253906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14706796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14742906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14761796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14898156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14928156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14933906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150796406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15480156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165436796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165499296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\173406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180089046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\183296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18508296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18517296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18734906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\191656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\205046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209351796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209464546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\213656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\260796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\284796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\288546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29311296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3222656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\323546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33324296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33372046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33379046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\377406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\435296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44471546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44780296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59317406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59379906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62896296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73943046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\74022156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\94906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106951687.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106967937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1212687.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121689187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121731437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\139187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14899187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14900937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14993937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150819187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150968437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18646687.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194815437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209389437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209478187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\228187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29621437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\306937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\378437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3919437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44403937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44438937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\47966187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\482187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\914187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106828.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107170468.exe
Present ! - C:\WINDOWS\system32\drivers\downld\108468.exe
Present ! - C:\WINDOWS\system32\drivers\downld\116718.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1242078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1339328.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136262218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\139828.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14806218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14825578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14874078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14882718.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150826218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15148468.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15324218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15386828.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15394218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15444078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165479218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180209078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194663328.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209344578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\215578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\257828.exe
Present ! - C:\WINDOWS\system32\drivers\downld\287218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29347218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29396718.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29680968.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29758718.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33255578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3370578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3456328.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59231218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59431968.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59461078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59473078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62758468.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73912328.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106922859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106983859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\114359.exe
Present ! - C:\WINDOWS\system32\drivers\downld\143859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14760859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14773859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14848609.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14885609.exe
Present ! - C:\WINDOWS\system32\drivers\downld\161859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18505109.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18790859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194669859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194831859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209306109.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29326359.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29893109.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33483609.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62879859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77374359.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77546859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92140859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92347859.exe
»»»» Presence des fichiers dans C:\Documents and Settings\MASTER\Application Data
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\flec006.exe"
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\list.oct"
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\data.oct"
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\srvlist.oct"
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\shared"
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m"
»»»» Presence des fichiers dans C:\DOCUME~1\MASTER\LOCALS~1\Temp
--------------- [ Registre / Startup ] ----------------
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
SpywareTerminator REG_SZ "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
TkBellExe REG_SZ "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents
! REG.EXE VERSION 3.0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
CTFMON.EXE REG_SZ C:\WINDOWS\system32\ctfmon.exe
BitTorrent REG_SZ "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
DAEMON Tools Lite REG_SZ "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
--------------- [ Registre / Clés infectieuses ] ----------------
Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\Local AppWizard-Generated Applications\flec006
Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\Local AppWizard-Generated Applications\hldrrr
Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\Local AppWizard-Generated Applications\mdelk
Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\Local AppWizard-Generated Applications\nideiect
Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\DateTime4
Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\FFC
Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\FirstRRRun
Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\FirtR
Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\MuleAppData
Présent ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\flec006
Présent ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\hldrrr
Présent ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\mdelk
Présent ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\nideiect
Présent ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa
Présent ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa
Présent ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\srosa
Présent ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
Présent ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA
Présent ! - HKEY_CURRENT_USER\Software\DateTime4
Présent ! - HKEY_CURRENT_USER\Software\FirtR
Présent ! - HKEY_CURRENT_USER\Software\FirstRRRun
--------------- [ Etat / Services ] ----------------
+- Services : [ Auto=2 Demande=3 Désactivé=4 ]
/!\ Ndisuio - Type de démarrage = 4
/!\ Ip6Fw - Type de démarrage = 4
SharedAccess - Type de démarrage = "Start"
/!\ wuauserv - Type de démarrage = 4
/!\ wscsvc - Type de démarrage = 4
--------------- [ Recherche dans supports amovibles] ----------------
+- Informations :
C: - Lecteur fixe
E: - Lecteur fixe
+- presence des fichiers :
--------------- [ Registre / Moutpoint2 ] ----------------
Present ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fb2d45b9-68f7-11dc-bc23-000d878e3eff}\Shell\AutoRun\command
Present ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fb2d45b9-68f7-11dc-bc23-000d878e3eff}\Shell\explore\Command
Present ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fb2d45b9-68f7-11dc-bc23-000d878e3eff}\Shell\open\Command
------------------- ! Fin du rapport ! --------------------
si celui ci n'est pas complet je recommence la manip
* User : MASTER - ROCHELLE-XYJLT4
* Emplacement : C:\Program Files\FindyKill
* Outils Mis a jours le 19/10/08 par Chiquitine29
* Recherche effectuée à 21:44:19 le 2008-10-19
* Windows XP - Internet Explorer 6.0.2900.2180
((((((((((((((((( *** Recherche *** ))))))))))))))))))
--------------- [ Processus actifs ] ----------------
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Hercules\WiFi Station\WifiStation.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\notepad.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE
C:\WINDOWS\explorer.exe
--------------- [ Fichiers/Dossiers infectieux ] ----------------
»»»» Presence des fichiers dans C:
»»»» Presence des fichiers dans C:\WINDOWS
»»»» Presence des fichiers dans C:\WINDOWS\Prefetch
Present ! - C:\WINDOWS\prefetch\101156.EXE-173E0A88.pf
Present ! - C:\WINDOWS\prefetch\103406.EXE-12F65020.pf
Present ! - C:\WINDOWS\prefetch\107390.EXE-25196BC2.pf
Present ! - C:\WINDOWS\prefetch\116796.EXE-0ED1AD70.pf
Present ! - C:\WINDOWS\prefetch\119343.EXE-186CAFE8.pf
Present ! - C:\WINDOWS\prefetch\130812.EXE-3902460E.pf
Present ! - C:\WINDOWS\prefetch\137140.EXE-2F2140DE.pf
Present ! - C:\WINDOWS\prefetch\139187.EXE-1A69A310.pf
Present ! - C:\WINDOWS\prefetch\142125.EXE-07030296.pf
Present ! - C:\WINDOWS\prefetch\14711500.EXE-103E5957.pf
Present ! - C:\WINDOWS\prefetch\14755421.EXE-0C7F6001.pf
Present ! - C:\WINDOWS\prefetch\14760859.EXE-1C379855.pf
Present ! - C:\WINDOWS\prefetch\15324218.EXE-33D0F696.pf
Present ! - C:\WINDOWS\prefetch\165392765.EXE-395E9117.pf
Present ! - C:\WINDOWS\prefetch\165422171.EXE-22431989.pf
Present ! - C:\WINDOWS\prefetch\179927781.EXE-0F1E44A3.pf
Present ! - C:\WINDOWS\prefetch\180089046.EXE-2CABA43A.pf
Present ! - C:\WINDOWS\prefetch\183296.EXE-09D74D21.pf
Present ! - C:\WINDOWS\prefetch\189390.EXE-2EBB7D7A.pf
Present ! - C:\WINDOWS\prefetch\192765.EXE-10E937A1.pf
Present ! - C:\WINDOWS\prefetch\194669859.EXE-31DFCDBC.pf
Present ! - C:\WINDOWS\prefetch\194676843.EXE-2C5D880E.pf
Present ! - C:\WINDOWS\prefetch\209296671.EXE-322BEFFE.pf
Present ! - C:\WINDOWS\prefetch\209306109.EXE-22EEC960.pf
Present ! - C:\WINDOWS\prefetch\89890.EXE-07E67765.pf
Present ! - C:\WINDOWS\prefetch\92750.EXE-075EE928.pf
Present ! - C:\WINDOWS\prefetch\FLEC006.EXE-118F0B44.pf
Present ! - C:\WINDOWS\prefetch\HLDRRR.EXE-106798BB.pf
Present ! - C:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf
Present ! - C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf
Present ! - C:\WINDOWS\Prefetch\O4PATCH.EXE-2DA7463B.pf
Present ! - C:\WINDOWS\Prefetch\PATCH.EXE-1DE617D3.pf
Present ! - C:\WINDOWS\Prefetch\PATCHJRE.EXE-065EAC0D.pf
»»»» Presence des fichiers dans C:\WINDOWS\system32
Présent ! - C:\WINDOWS\system32\mdelk.exe
Présent ! - C:\WINDOWS\system32\wintems.exe
Présent ! - C:\WINDOWS\system32\ban_list.txt
»»»» Presence des fichiers dans C:\WINDOWS\system32\drivers
Présent ! - C:\WINDOWS\system32\drivers\mdelk.exe
Présent ! - C:\WINDOWS\system32\drivers\srosa.sys
Présent ! - C:\WINDOWS\system32\drivers\hldrrr.exe
Présent ! - "C:\WINDOWS\system32\drivers\downld"
Present ! - C:\WINDOWS\system32\drivers\downld\105390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106842500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\114890.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121667750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121770750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1231500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1250750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1329890.exe
Present ! - C:\WINDOWS\system32\drivers\downld\137140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\146640.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14711500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14757750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14758890.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14904390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14942250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14993390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150808390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150829750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150942140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165440140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\170500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180073140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180074750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18495140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18546000.exe
Present ! - C:\WINDOWS\system32\drivers\downld\189390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209397250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29327500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33508250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\349890.exe
Present ! - C:\WINDOWS\system32\drivers\downld\414000.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44739250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48022390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48045640.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48255500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\650250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77475750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92222390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106842500.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106863656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106870546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106915062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106922859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106951687.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106967937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106983859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107110953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107170468.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107193984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\111171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\117421.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121667750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121679656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121681203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121689187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121699562.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121726765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121731437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121770750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121783953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121792796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\124171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136216484.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136236515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136239171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136253906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136262218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136265953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136309062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136322125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136352203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14726531.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14746281.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14755421.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14809171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150796406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150798515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150808390.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150811062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150819187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150826218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150829750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150942140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150968437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150977312.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15499671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165392765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165407843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165409515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165422171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165430265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165436796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165440140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165479218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165499296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165507093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\179927781.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180073140.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180074750.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180089046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180096265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180111093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180122671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180183093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180209078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180226671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194661343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194663328.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194669859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194676843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194714062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194753625.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194758281.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194800265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194815437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194831859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\197921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209306109.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209344578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209351796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209389437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209397250.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209400781.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209443421.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209464546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209478187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\227921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\288171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29341031.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29356921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29439281.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29664671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3225281.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3273531.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33302921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33446531.exe
Present ! - C:\WINDOWS\system32\drivers\downld\422921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44340171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44626921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\460281.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48065531.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48317421.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62738531.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62760671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62790921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73890781.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73928781.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73953171.exe
Present ! - C:\WINDOWS\system32\drivers\downld\74060031.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77457671.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92084781.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92110031.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92154921.exe
Present ! - C:\WINDOWS\system32\drivers\downld\104312.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106915062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121699562.exe
Present ! - C:\WINDOWS\system32\drivers\downld\125812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\130812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136309062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14779062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14814062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14910812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15077812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150811062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150977312.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15297312.exe
Present ! - C:\WINDOWS\system32\drivers\downld\175312.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194714062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\197812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29744562.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3150062.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59314562.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73931812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77472562.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77528812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\845812.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107110953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\108453.exe
Present ! - C:\WINDOWS\system32\drivers\downld\119343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121681203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121783953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\134453.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136265953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136352203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14792703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14813843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14901953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15120953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15190703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15301843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165407843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165507093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180111093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180183093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\181843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18528343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194661343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194676843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\198203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\203203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\229343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\276593.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29426593.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29723453.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29824953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29882703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\298953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33299453.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33336703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3570093.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48018453.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48128343.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48291203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59355953.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62804843.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62903703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77333203.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92305703.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107193984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\128234.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1295984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136216484.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14895984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18542234.exe
Present ! - C:\WINDOWS\system32\drivers\downld\208984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\260734.exe
Present ! - C:\WINDOWS\system32\drivers\downld\329734.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33357734.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3487484.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44498984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48099484.exe
Present ! - C:\WINDOWS\system32\drivers\downld\48124734.exe
Present ! - C:\WINDOWS\system32\drivers\downld\74070734.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77380234.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92028234.exe
Present ! - C:\WINDOWS\system32\drivers\downld\97984.exe
Present ! - C:\WINDOWS\system32\drivers\downld\113515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121726765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136236515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136322125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\140765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\142125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14728765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14804265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14872515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14881125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150798515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15201515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\159625.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165392765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165409515.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165430265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\176875.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180096265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18520765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\192765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194753625.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194800265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\211765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3312875.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3820875.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44393625.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59239375.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59387625.exe
Present ! - C:\WINDOWS\system32\drivers\downld\606125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62818765.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62825875.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73882265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73915265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77435125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77555265.exe
Present ! - C:\WINDOWS\system32\drivers\downld\814125.exe
Present ! - C:\WINDOWS\system32\drivers\downld\91979375.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92037375.exe
Present ! - C:\WINDOWS\system32\drivers\downld\101156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\101656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\103406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106863656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106870546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\115796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\116796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\117156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1184406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\119046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1211156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121679656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121792796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\128046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136253906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14706796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14742906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14761796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14898156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14928156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14933906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150796406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15480156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165436796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165499296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\173406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180089046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\183296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18508296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18517296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18734906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\191656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\205046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209351796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209464546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\213656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\260796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\284796.exe
Present ! - C:\WINDOWS\system32\drivers\downld\288546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29311296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3222656.exe
Present ! - C:\WINDOWS\system32\drivers\downld\323546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33324296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33372046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33379046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\377406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\435296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44471546.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44780296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59317406.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59379906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62896296.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73943046.exe
Present ! - C:\WINDOWS\system32\drivers\downld\74022156.exe
Present ! - C:\WINDOWS\system32\drivers\downld\94906.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106951687.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106967937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1212687.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121689187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\121731437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\139187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14899187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14900937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14993937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150819187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150968437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18646687.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194815437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209389437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209478187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\228187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29621437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\306937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\378437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3919437.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44403937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\44438937.exe
Present ! - C:\WINDOWS\system32\drivers\downld\47966187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\482187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\914187.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106828.exe
Present ! - C:\WINDOWS\system32\drivers\downld\107170468.exe
Present ! - C:\WINDOWS\system32\drivers\downld\108468.exe
Present ! - C:\WINDOWS\system32\drivers\downld\116718.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1242078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\1339328.exe
Present ! - C:\WINDOWS\system32\drivers\downld\136262218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\139828.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14806218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14825578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14874078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14882718.exe
Present ! - C:\WINDOWS\system32\drivers\downld\150826218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15148468.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15324218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15386828.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15394218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\15444078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\165479218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\180209078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194663328.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209344578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\215578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\257828.exe
Present ! - C:\WINDOWS\system32\drivers\downld\287218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29347218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29396718.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29680968.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29758718.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33255578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3370578.exe
Present ! - C:\WINDOWS\system32\drivers\downld\3456328.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59231218.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59431968.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59461078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\59473078.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62758468.exe
Present ! - C:\WINDOWS\system32\drivers\downld\73912328.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106922859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\106983859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\114359.exe
Present ! - C:\WINDOWS\system32\drivers\downld\143859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14760859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14773859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14848609.exe
Present ! - C:\WINDOWS\system32\drivers\downld\14885609.exe
Present ! - C:\WINDOWS\system32\drivers\downld\161859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18505109.exe
Present ! - C:\WINDOWS\system32\drivers\downld\18790859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194669859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\194831859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\209306109.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29326359.exe
Present ! - C:\WINDOWS\system32\drivers\downld\29893109.exe
Present ! - C:\WINDOWS\system32\drivers\downld\33483609.exe
Present ! - C:\WINDOWS\system32\drivers\downld\62879859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77374359.exe
Present ! - C:\WINDOWS\system32\drivers\downld\77546859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92140859.exe
Present ! - C:\WINDOWS\system32\drivers\downld\92347859.exe
»»»» Presence des fichiers dans C:\Documents and Settings\MASTER\Application Data
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\flec006.exe"
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\list.oct"
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\data.oct"
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\srvlist.oct"
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\shared"
Présent ! - "C:\Documents and Settings\MASTER\Application Data\m"
»»»» Presence des fichiers dans C:\DOCUME~1\MASTER\LOCALS~1\Temp
--------------- [ Registre / Startup ] ----------------
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
SpywareTerminator REG_SZ "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
TkBellExe REG_SZ "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents
! REG.EXE VERSION 3.0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
CTFMON.EXE REG_SZ C:\WINDOWS\system32\ctfmon.exe
BitTorrent REG_SZ "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
DAEMON Tools Lite REG_SZ "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
--------------- [ Registre / Clés infectieuses ] ----------------
Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\Local AppWizard-Generated Applications\flec006
Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\Local AppWizard-Generated Applications\hldrrr
Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\Local AppWizard-Generated Applications\mdelk
Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\Local AppWizard-Generated Applications\nideiect
Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\DateTime4
Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\FFC
Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\FirstRRRun
Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\FirtR
Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\MuleAppData
Présent ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\flec006
Présent ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\hldrrr
Présent ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\mdelk
Présent ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\nideiect
Présent ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa
Présent ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa
Présent ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\srosa
Présent ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
Présent ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA
Présent ! - HKEY_CURRENT_USER\Software\DateTime4
Présent ! - HKEY_CURRENT_USER\Software\FirtR
Présent ! - HKEY_CURRENT_USER\Software\FirstRRRun
--------------- [ Etat / Services ] ----------------
+- Services : [ Auto=2 Demande=3 Désactivé=4 ]
/!\ Ndisuio - Type de démarrage = 4
/!\ Ip6Fw - Type de démarrage = 4
SharedAccess - Type de démarrage = "Start"
/!\ wuauserv - Type de démarrage = 4
/!\ wscsvc - Type de démarrage = 4
--------------- [ Recherche dans supports amovibles] ----------------
+- Informations :
C: - Lecteur fixe
E: - Lecteur fixe
+- presence des fichiers :
--------------- [ Registre / Moutpoint2 ] ----------------
Present ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fb2d45b9-68f7-11dc-bc23-000d878e3eff}\Shell\AutoRun\command
Present ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fb2d45b9-68f7-11dc-bc23-000d878e3eff}\Shell\explore\Command
Present ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fb2d45b9-68f7-11dc-bc23-000d878e3eff}\Shell\open\Command
------------------- ! Fin du rapport ! --------------------
si celui ci n'est pas complet je recommence la manip