Avast win 32 invalide
Bonjour,
bonjour voila j'ai voulu faire ma maline et j'ai télécharcher des fichiers hackers et depuis plus d'avast antivirus
ne plus faire de rapport hijack this quelqu'un peut il m'aider merci
bonjour voila j'ai voulu faire ma maline et j'ai télécharcher des fichiers hackers et depuis plus d'avast antivirus
ne plus faire de rapport hijack this quelqu'un peut il m'aider merci
Configuration: Windows XP / Internet Explorer 7.0
24 réponses
Résumé de la discussion
Un utilisateur a téléchargé des fichiers potentiellement malveillants et se retrouve avec une infection sur Windows XP/IE7, Avast qui ne signale plus rien et HijackThis qui ne répond pas. Des réponses proposent une désinfection multipartite en utilisant FindyKill et d'autres outils, en commençant par traiter Bagle et en déconnectant les supports externes pour éviter la propagation. D'autres avertissent qu'oser jouer avec des cracks attire les infections et recommandent de désinstaller Avast puis d'employer Malwarebytes Anti-Malware ou ComboFix pour nettoyer les fichiers, clés et services compromis. En cas de persistance, les rapports et les étapes réalisées doivent être partagés pour confirmer l'élimination des menaces et prévenir une réinfection éventuelle après le redémarrage.
-
Contributeur sécuritéok, c'est bon
on va vérifier autrement :
/!\ Il faut impérativement désactiver tous tes logiciels de protection pour utiliser ce programme/!\
• Rends toi sur cette page, et clique sur "Download EXE" pour télécharger Gmer (sous un nom aléatoire, pour éviter qu'il soit bloqué par une infection)
• Lance Gmer
• Dans l'onglet "Rootkit", clique sur "Scan" puis patiente.
• A la fin, clique sur "Save" et enregistre le rapport sur ton Bureau.
• Héberge le rapport et poste le lien correspondant dans ta prochaine réponse. -
il a fait une analyse mais rien de noter dans le rapport!!!
-
Contributeur sécurité• Télécharge Load_tdsskiller (de Loup Blanc) sur ton Bureau
• Lance load_tdsskiller
• L'outil va se connecter pour télécharger une copie à jour de TDSSKiller, puis va lancer une analyse
• A la fin, il te sera demandé d'appuyer sur une touche, puis le rapport s'affichera automatiquement : copie-colle son contenu dans ta prochaine réponse (C:\tdsskiller\report.txt) -
ComboFix 10-03-16.01 - Jacky 16/03/2010 21:33:00.1.1 - x86
Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.384.147 [GMT 1:00]
Lancé depuis: c:\documents and settings\Jacky\Bureau\C-FIX.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\Jacky\Local Settings\Temporary Internet Files\TestBrowser.html
c:\program files\Error Repair Professional
c:\program files\Error Repair Professional\Backups\Backup_0-50-1_4-10-2009.reg
c:\program files\Error Repair Professional\Backups\Backup_0-56-22_4-10-2009.reg
c:\program files\Iminent\SaveMoney\tbHElper.dll
c:\program files\QUAD Utilities
C:\WGASetup.exe
c:\windows\Downloaded Program Files\f3initialsetup1.0.0.15-3.inf
c:\windows\system32\acpceoef.ini
c:\windows\system32\apehixtc.ini
c:\windows\system32\arisrnpe.ini
c:\windows\system32\djxmsnkk.ini
c:\windows\system32\dnsayjqp.ini
c:\windows\system32\edplvfyi.ini
c:\windows\system32\eulqtsfr.ini
c:\windows\system32\hjjlm.ini
c:\windows\system32\hsgmphsv.ini
c:\windows\system32\hsqfyldt.ini
c:\windows\system32\iaclbutq.ini
c:\windows\system32\indfgfhv.ini
c:\windows\system32\kqrhfmqe.ini
c:\windows\system32\ohmgqemb.ini
c:\windows\system32\ougrymgb.ini
c:\windows\system32\pwcxaihm.ini
c:\windows\system32\qbcskjrw.ini
c:\windows\system32\rupoqyqy.ini
c:\windows\system32\seukiidt.ini
c:\windows\system32\shqeouvx.ini
c:\windows\system32\sibyotyp.ini
c:\windows\system32\SIntf16.dll
c:\windows\system32\srjbtvmv.ini
c:\windows\system32\tbosdetl.ini
c:\windows\system32\tjuvfyxv.ini
c:\windows\system32\tphcowxj.ini
c:\windows\system32\uhynapse.ini
c:\windows\system32\uwstuvnv.ini
c:\windows\system32\vhikgqgd.ini
c:\windows\system32\vugrbmpb.ini
c:\windows\system32\widobccx.ini
c:\windows\system32\woijvlpd.ini
c:\windows\system32\wquxrfkt.ini
c:\windows\system32\wsxcxobl.ini
c:\windows\system32\xowrlpol.ini
c:\windows\system32\yhsjcunk.ini
c:\windows\system32\yjdurafu.ini
c:\windows\system32\yuivbxis.ini
.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_NDISRD
((((((((((((((((((((((((((((( Fichiers créés du 2010-02-16 au 2010-03-16 ))))))))))))))))))))))))))))))))))))
.
2010-03-16 11:26 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-03-16 11:25 . 2010-03-16 11:26 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-03-16 11:25 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-03-15 23:02 . 2009-11-25 10:19 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2010-03-15 23:02 . 2009-03-30 08:32 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2010-03-15 23:02 . 2009-02-13 10:28 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2010-03-15 23:02 . 2009-02-13 10:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2010-03-15 23:02 . 2010-03-15 23:02 -------- d-----w- c:\program files\Avira
2010-03-15 23:02 . 2010-03-15 23:02 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
2010-03-15 22:46 . 2010-03-15 22:46 1220 ----a-w- C:\FindyKill_Upload_Me_PC.zip
2010-03-15 14:36 . 2010-03-16 19:38 -------- d-----w- c:\program files\ZHPDiag
2010-03-15 14:01 . 2010-03-15 14:01 -------- d-----w- c:\program files\Alwil Software
2010-03-15 14:00 . 2010-03-15 22:56 -------- d-----w- c:\documents and settings\All Users\Application Data\Alwil Software
2010-03-15 13:46 . 2010-03-15 22:46 -------- d-----w- C:\FyK
2010-03-02 13:44 . 2010-03-02 13:44 -------- d-----w- c:\documents and settings\Jacky\Application Data\com.mstv.Carrefour50Widget.14E181C9F98C97743205250D618D6563C1965D9A.1
2010-03-02 13:43 . 2010-03-02 13:39 38784 ----a-w- c:\documents and settings\Jacky\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2010-03-02 13:43 . 2010-03-02 13:43 -------- d-----w- c:\program files\Widget Carrefour PROMOLIBRE
2010-03-02 13:43 . 2010-03-02 13:39 38784 ----a-w- c:\documents and settings\Default User\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2010-03-02 13:43 . 2010-03-02 13:43 -------- d-----w- c:\program files\Fichiers communs\Adobe AIR
2010-02-28 10:02 . 2010-02-28 10:12 -------- d-----w- c:\documents and settings\Jacky\Application Data\Download Manager
2010-02-28 09:55 . 2010-02-28 09:56 -------- d-----w- c:\documents and settings\Jacky\Application Data\GARMIN
2010-02-28 09:55 . 2010-02-28 09:55 -------- d-----w- c:\program files\Garmin GPS Plugin
2010-02-28 09:54 . 2010-02-28 09:54 -------- d-----w- c:\program files\DIFX
2010-02-28 09:54 . 2010-02-28 09:55 -------- d-----w- c:\program files\Garmin
2010-02-26 18:34 . 2010-02-26 18:34 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Apple
2010-02-24 18:25 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe
2010-02-23 17:59 . 2010-02-23 17:59 -------- d-----w- c:\documents and settings\Jacky\Local Settings\Application Data\ABBYY
2010-02-19 23:47 . 2010-02-19 23:47 3604480 ----a-w- c:\windows\system32\GPhotos.scr
2010-02-15 20:58 . 2010-02-15 20:58 -------- d-----w- c:\documents and settings\Jacky\Application Data\Apple Computer
2010-02-15 20:52 . 2010-02-15 20:52 -------- d-----w- c:\documents and settings\Jacky\Local Settings\Application Data\Apple
2010-02-15 20:52 . 2010-02-15 20:52 -------- d-----w- c:\program files\Apple Software Update
2010-02-15 20:52 . 2010-02-15 20:52 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple
2010-02-15 20:52 . 2010-02-15 20:52 -------- d-----w- c:\documents and settings\Jacky\Local Settings\Application Data\Apple Computer
2010-02-15 20:30 . 2010-02-15 20:30 -------- d-----w- c:\documents and settings\Jacky\Local Settings\Application Data\Geckofx
2010-02-15 20:29 . 2010-02-17 06:40 -------- d-----w- c:\documents and settings\Jacky\Application Data\OpenCandy
2010-02-15 20:27 . 2010-02-15 20:28 -------- d-----w- c:\program files\AviSynth 2.5
2010-02-15 12:48 . 2010-02-15 12:48 -------- d-----w- c:\documents and settings\All Users\Application Data\ESTsoft
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-16 20:48 . 2010-02-12 14:45 720 ----a-w- c:\documents and settings\All Users\Application Data\ArcSoft\kodak-printcreations-22-080812-oem\acforall.dll
2010-03-16 12:37 . 2010-01-25 17:40 -------- d-----w- c:\program files\FunkyEmoticons
2010-03-15 22:42 . 2002-09-07 00:00 609376 ----a-w- c:\windows\system32\perfh00C.dat
2010-03-15 22:42 . 2002-09-07 00:00 126806 ----a-w- c:\windows\system32\perfc00C.dat
2010-03-15 21:11 . 2008-12-07 19:34 -------- d-----w- c:\program files\Windows Media Connect 2
2010-03-15 18:55 . 2010-02-13 15:30 -------- d-----w- c:\program files\uTorrent
2010-03-15 06:52 . 2010-02-13 15:29 -------- d-----w- c:\documents and settings\Jacky\Application Data\uTorrent
2010-03-09 18:38 . 2009-10-19 07:29 -------- d-----w- c:\documents and settings\Jacky\Application Data\Skype
2010-03-09 18:26 . 2009-10-19 07:31 -------- d-----w- c:\documents and settings\Jacky\Application Data\skypePM
2010-02-23 17:59 . 2010-02-12 15:46 -------- d-----w- c:\documents and settings\Jacky\Application Data\Epson
2010-02-23 17:59 . 2010-02-12 15:04 -------- d-----w- c:\program files\ABBYY FineReader 6.0 Sprint
2010-02-23 17:57 . 2006-02-07 18:46 -------- d-----w- c:\program files\Google
2010-02-13 15:29 . 2006-02-07 19:46 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-02-13 15:28 . 2010-02-13 15:28 2380538 ----a-w- c:\documents and settings\All Users\Application Data\ArcSoft\Global Deploy\CheckUpdate\ArcConnect.exe
2010-02-12 16:03 . 2010-02-12 16:03 -------- d-----w- c:\documents and settings\Jacky\Application Data\KodakCredentialStore
2010-02-12 15:48 . 2010-02-12 15:48 -------- d-----w- c:\documents and settings\Jacky\Application Data\Skinux
2010-02-12 15:17 . 2010-02-12 14:57 -------- d-----w- c:\documents and settings\All Users\Application Data\EPSON
2010-02-12 15:08 . 2010-02-12 15:08 -------- d-----w- c:\documents and settings\All Users\Application Data\UDL
2010-02-12 15:07 . 2010-02-12 15:05 -------- d-----w- c:\program files\Epson Software
2010-02-12 15:07 . 2010-02-12 14:56 -------- d-----w- c:\program files\epson
2010-02-12 14:46 . 2010-02-12 14:34 -------- d-----w- c:\documents and settings\All Users\Application Data\Kodak
2010-02-12 14:46 . 2007-11-11 12:32 -------- d-----w- c:\documents and settings\Jacky\Application Data\ArcSoft
2010-02-12 14:45 . 2010-02-12 14:45 -------- d-----w- c:\documents and settings\All Users\Application Data\ArcSoft
2010-02-12 14:45 . 2010-02-12 14:43 -------- d-----w- c:\program files\Fichiers communs\ArcSoft
2010-02-12 14:43 . 2010-02-12 14:43 -------- d-----w- c:\program files\ArcSoft
2010-02-12 14:43 . 2010-02-12 14:38 -------- d-----w- c:\program files\Kodak
2010-02-12 14:42 . 2010-02-12 14:40 -------- d-----w- c:\program files\Fichiers communs\Kodak
2010-02-12 14:36 . 2010-02-12 14:36 77824 ----a-w- c:\documents and settings\All Users\Application Data\Kodak\EasyShareSetup\ess\bindbins\bindbins.exe
2010-02-12 14:36 . 2010-02-12 14:36 225280 ----a-w- c:\documents and settings\All Users\Application Data\Kodak\EasyShareSetup\wtf\finish.exe
2010-02-12 14:36 . 2010-02-12 14:36 175104 ----a-w- c:\documents and settings\All Users\Application Data\Kodak\EasyShareSetup\reduced_contents_PrintCreation_expanded\setup.exe
2010-02-12 14:35 . 2010-02-12 14:35 45056 ----a-w- c:\documents and settings\All Users\Application Data\Kodak\EasyShareSetup\sysfiles\kb945060\kb945060.exe
2010-02-12 14:34 . 2010-02-12 14:34 225280 ----a-w- c:\documents and settings\All Users\Application Data\Kodak\EasyShareSetup\wtf\start.exe
2010-02-12 14:34 . 2010-02-12 14:34 1187840 ----a-w- c:\documents and settings\All Users\Application Data\Kodak\EasyShareSetup\$SETUP_1e0001_1383829\EasyShrx.Dll
2010-02-12 14:34 . 2010-02-12 14:34 114688 ----a-w- c:\documents and settings\All Users\Application Data\Kodak\EasyShareSetup\$Registration\KodakCameraAPI_8.2.30.1.dll
2010-02-09 17:23 . 2010-02-09 17:23 8905184 ----a-w- c:\documents and settings\Jacky\Application Data\OpenCandy\WeFiSetup_5_142_513.exe.exe
2010-02-09 15:10 . 2010-02-09 15:10 50354 ----a-w- c:\documents and settings\Jacky\Application Data\Facebook\uninstall.exe
2010-02-09 15:10 . 2010-02-09 15:09 -------- d-----w- c:\documents and settings\Jacky\Application Data\Facebook
2010-02-08 19:52 . 2010-02-08 19:46 664 ----a-w- c:\windows\system32\d3d9caps.dat
2010-02-08 19:46 . 2010-02-08 19:46 -------- d-----w- c:\documents and settings\All Users\Application Data\NVIDIA Corporation
2010-02-08 19:46 . 2010-02-08 19:46 -------- d-----w- c:\program files\NVIDIA Corporation
2010-02-08 16:44 . 2010-02-08 16:44 -------- d-----w- c:\documents and settings\All Users\Application Data\MissTeriTale2
2010-02-08 16:22 . 2010-02-08 16:22 552 ----a-w- c:\windows\system32\d3d8caps.dat
2010-02-08 14:47 . 2009-12-19 20:47 -------- d-----w- c:\documents and settings\Jacky\Application Data\ElementalsTheMagicKey
2010-02-07 18:00 . 2009-11-03 12:42 -------- d-----w- c:\program files\FACTOURE
2010-02-04 13:03 . 2010-02-04 13:03 -------- d-----w- c:\documents and settings\Jacky\Application Data\VampireSaga
2010-02-04 09:01 . 2010-02-06 21:48 74072 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2010-02-04 09:01 . 2010-02-06 21:48 528216 ----a-w- c:\windows\system32\XAudio2_6.dll
2010-02-04 09:01 . 2010-02-06 21:48 238936 ----a-w- c:\windows\system32\xactengine3_6.dll
2010-02-04 09:01 . 2010-02-06 21:48 22360 ----a-w- c:\windows\system32\X3DAudio1_7.dll
2010-02-01 22:04 . 2010-02-01 22:04 847040 ----a-w- c:\documents and settings\Jacky\Application Data\Facebook\axfbootloader.dll
2010-02-01 22:04 . 2010-02-01 22:04 5578752 ----a-w- c:\documents and settings\Jacky\Application Data\Facebook\npfbplugin_1_0_1.dll
2010-02-01 19:05 . 2010-02-01 19:05 -------- d-----w- c:\program files\WinAce
2010-02-01 14:41 . 2010-02-12 14:34 2635152 ----a-w- c:\documents and settings\All Users\Application Data\Kodak\EasyShareSetup\$SETUP_1e0001_1383829\Setup.exe
2010-01-25 17:40 . 2010-01-25 17:40 -------- d-----w- c:\documents and settings\Jacky\Application Data\FunkyEmoticons
2010-01-24 08:21 . 2009-05-03 08:25 -------- d-----w- c:\program files\Iminent
2010-01-23 09:13 . 2009-12-26 07:48 -------- d-----w- c:\program files\SweetIM
2010-01-23 09:13 . 2009-12-26 07:48 -------- d-----w- c:\documents and settings\All Users\Application Data\SweetIM
2010-01-20 19:21 . 2010-01-20 19:21 -------- d-----w- c:\documents and settings\All Users\Application Data\Toolbar4
2010-01-20 08:10 . 2009-01-01 16:32 -------- d-----w- c:\program files\Microsoft Silverlight
2010-01-18 16:44 . 2009-09-14 20:08 -------- d-----w- c:\documents and settings\Jacky\Application Data\Playrix Entertainment
2010-01-18 07:48 . 2006-02-07 19:16 -------- d-----w- c:\program files\Fichiers communs\Adobe
2010-01-16 17:57 . 2010-01-16 17:57 84 ----a-w- c:\documents and settings\Jacky\Local Settings\Application Data\GLF12B.tmp
2010-01-07 06:14 . 2009-04-14 17:17 106496 ----a-w- c:\windows\DUMP6e1b.tmp
2010-01-07 06:12 . 2009-04-14 17:17 106496 ----a-w- c:\windows\DUMP6e79.tmp
2010-01-05 13:18 . 2006-02-09 19:01 94720 -c--a-w- c:\documents and settings\Jacky\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-01-04 10:55 . 2010-01-04 10:55 73884 ---ha-w- c:\windows\system32\mlfcache.dat
2010-01-02 16:07 . 2008-11-15 22:08 1 ----a-w- c:\documents and settings\Jacky\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2009-12-31 16:50 . 2002-09-07 00:00 353792 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-22 18:39 . 2010-02-12 14:38 922112 ------w- c:\windows\system32\imapi2fs.dll
2009-12-22 18:39 . 2010-02-12 14:38 426496 ------w- c:\windows\system32\imapi2.dll
2009-12-21 19:07 . 2006-06-23 11:28 916480 ----a-w- c:\windows\system32\wininet.dll
2009-12-17 07:41 . 2004-08-19 23:09 347648 ----a-w- c:\windows\system32\mspaint.exe
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0C9929B6-0791-4208-B41A-91C6ABFD9027}]
2009-08-07 00:41 2722304 ----a-w- c:\program files\Iminent\SaveMoney\tbcore3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D1121FE0-0145-44C9-AA35-72071AC20A9B}"= "c:\program files\Blingee Plus\blingeetb.dll" [2009-10-21 2715136]
"{76985346-BDA2-4B2E-A727-956D7B8B012E}"= "c:\program files\Iminent\SaveMoney\tbcore3.dll" [2009-08-07 2722304]
[HKEY_CLASSES_ROOT\clsid\{d1121fe0-0145-44c9-aa35-72071ac20a9b}]
[HKEY_CLASSES_ROOT\BlingeeTb.BlingeeTb.3]
[HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKEY_CLASSES_ROOT\BlingeeTb.BlingeeTb]
[HKEY_CLASSES_ROOT\clsid\{76985346-bda2-4b2e-a727-956d7b8b012e}]
[HKEY_CLASSES_ROOT\SaveMoney.SaveMoney.3]
[HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKEY_CLASSES_ROOT\SaveMoney.SaveMoney]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{76985346-BDA2-4B2E-A727-956D7B8B012E}"= "c:\program files\Iminent\SaveMoney\tbcore3.dll" [2009-08-07 2722304]
[HKEY_CLASSES_ROOT\clsid\{76985346-bda2-4b2e-a727-956d7b8b012e}]
[HKEY_CLASSES_ROOT\SaveMoney.SaveMoney.3]
[HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKEY_CLASSES_ROOT\SaveMoney.SaveMoney]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IncrediMail"="c:\program files\IncrediMail\bin\IncMail.exe" [2009-09-07 251336]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-11-16 39408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2003-07-28 4841472]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"HonorAutoRunSetting"= 0 (0x0)
"NoResolveTrack"= 1 (0x1)
"NoFileAssociate"= 0 (0x0)
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMBalloonTip"= 1 (0x1)
"MaxRecentDocs"= 16 (0x10)
"HonorAutoRunSetting"= 0 (0x0)
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Creative WebCam Tray"="c:\program files\Creative\Shared Files\CamTray.exe"
"TuneUp MemOptimizer"="c:\program files\TuneUp Utilities 2009\MemOptimizer.exe" autostart
"NvMediaCenter"=RUNDLL32.EXE c:\windows\system32\NVMCTRAY.DLL,NvTaskbarInit
"swg"=c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
"CTFMON.EXE"=c:\windows\system32\ctfmon.exe
"IncrediMail"=c:\program files\IncrediMail\bin\IncMail.exe /c
"Skype"="c:\program files\Skype\Phone\Skype.exe" /nosplash /minimized
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" -autorun
"EPSON SX110 Series"=c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATIFBE.EXE /FU "c:\windows\TEMP\E_S1BD.tmp" /EF "HKCU"
"NVIEW"=rundll32.exe nview.dll,nViewLoadHook
"uTorrent"="c:\program files\uTorrent\uTorrent.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"WorksFUD"=c:\program files\Microsoft Works\wkfud.exe
"Microsoft Works Update Detection"=c:\program files\Microsoft Works\WkDetect.exe
"Monitor"=c:\windows\PixArt\PAC207\Monitor.exe
"Microsoft Works Portfolio"=c:\program files\Microsoft Works\WksSb.exe /AllUsers
"nwiz"=nwiz.exe /install
"NeroFilterCheck"=c:\windows\system32\NeroCheck.exe
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe"
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
"USB Storage Toolbox"=c:\program files\USB Disk Win98 Driver\Res.EXE
"KernelFaultCheck"=%systemroot%\system32\dumprep 0 -k
"SweetIM"=c:\program files\SweetIM\Messenger\SweetIM.exe
"ArcSoft Connection Service"=c:\program files\Fichiers communs\ArcSoft\Connection Service\Bin\ACDaemon.exe
"EEventManager"=c:\progra~1\EPSONS~1\EVENTM~1\EEventManager.exe
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime
"MyGarminAgent"=c:\program files\Garmin\MyGarminAgent.exe
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\IncrediMail\\bin\\IncMail.exe"=
"c:\\Program Files\\IncrediMail\\bin\\ImApp.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
"c:\\Program Files\\bfgclient\\bfgclient.exe"=
"c:\\Program Files\\IncrediMail\\bin\\ImLc.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"d:\\emule\\emule.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"c:\\WINDOWS\\system32\\rtcshare.exe"=
"c:\\Program Files\\Epson Software\\Event Manager\\EEventManager.exe"=
"c:\\Program Files\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [26/09/2009 23:40 691696]
R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [16/03/2010 00:02 108289]
R2 X4HSX32Ex;X4HSX32Ex;c:\program files\Player Metaboli\X4HSX32Ex.sys [20/10/2009 10:18 29856]
R3 fbxusb;Carte réseau virtuelle FreeBox USB;c:\windows\system32\drivers\fbxusb32.sys [11/11/2008 18:52 21344]
S2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [17/02/2010 17:59 135664]
S3 avshws;YouUp Simulated Hardware;c:\windows\system32\drivers\youup.sys [27/04/2009 15:57 57472]
S3 V0260VID;Live! Cam Vista IM;c:\windows\system32\drivers\V0260Vid.sys [11/11/2008 19:39 162176]
S3 WlanUIG;Sagem 802.11g Wireless LAN USB Adapter Driver;c:\windows\system32\drivers\WlanUIG.sys [10/09/2007 18:16 379456]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contenu du dossier 'Tâches planifiées'
2010-03-12 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
2010-03-16 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-11-16 11:21]
2010-03-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-17 16:59]
2010-03-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-17 16:59]
2010-03-16 c:\windows\Tasks\Maintenance en 1 clic.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-12-12 13:04]
.
.
------- Examen supplémentaire -------
.
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uDefault_Search_URL = hxxp://www.google.com/ie
uStart Page = hxxp://google.fr/
mWindow Title =
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &Add animation to IncrediMail Style Box - c:\program files\IncrediMail\bin\resources\WebMenuImg.htm
IE: Add to AMV Converter... - c:\program files\MP3 Player Utilities 4.11\AMVConverter\grab.html
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
IE: MediaManager tool grab multimedia file - c:\program files\MP3 Player Utilities 4.11\MediaManager\grab.html
TCP: {4450F113-8487-4083-8D1F-7908C3A310BB} = 192.168.1.1
DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} - hxxp://minitelweb.minitel.com/imin_data/ocx/MDM.cab
DPF: {32C3FEAE-0877-4767-8C20-62A5829A0945} - hxxp://www.facebook.com/fbplugin/win32/axfbootloader.cab?1265728183187
DPF: {4DD20514-9520-40A7-9CD6-66883643A20B} - hxxp://www.boaki.com/download/uviLaunch.cab
DPF: {50DC58D0-C870-4BE6-BC41-971ED2D5F022} - hxxp://www.super-messenger.fr/tab/HookWlmEx.exe
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game12.zylom.com/activex/zylomgamesplayer.cab
DPF: {D1121FE0-0145-44C9-AA35-72071AC20A9B} - hxxp://downloads.blingee.com/toolbar/blingeeplus_setup_a_1.0.0.5.cab
.
- - - - ORPHELINS SUPPRIMES - - - -
BHO-{676807d0-dc3c-f723-27d1-6b1399c4a8df} - (no file)
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
Notify-wvussrp - wvussrp.dll
AddRemove-Funky Emoticons - c:\program files\FunkyEmoticons\uninst.exe
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-16 21:49
Windows 5.1.2600 Service Pack 3 NTFS
Recherche de processus cachés ...
Recherche d'éléments en démarrage automatique cachés ...
Recherche de fichiers cachés ...
Scan terminé avec succès
Fichiers cachés: 0
**************************************************************************
Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net
device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll sfsync02.sys atapi.sys sphi.sys >>UNKNOWN [0x82F93938]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0xf7668f28
\Driver\ACPI -> ACPI.sys @ 0xf74bfcb8
\Driver\atapi -> sfsync02.sys @ 0xf76358b4
IoDeviceObjectType -> DeleteProcedure -> ntoskrnl.exe @ 0x805a0598
ParseProcedure -> ntoskrnl.exe @ 0x8056ea15
\Device\Harddisk0\DR0 -> DeleteProcedure -> ntoskrnl.exe @ 0x805a0598
ParseProcedure -> ntoskrnl.exe @ 0x8056ea15
NDIS: -> SendCompleteHandler -> 0x0
PacketIndicateHandler -> 0x0
SendHandler -> 0x0
user & kernel MBR OK
**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------
- - - - - - - > 'explorer.exe'(3276)
c:\progra~1\WINDOW~2\wmpband.dll
c:\windows\system32\msls31.dll
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\program files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe
c:\program files\Avira\AntiVir Desktop\avguard.exe
c:\program files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\nvsvc32.exe
c:\windows\system32\pctspk.exe
c:\windows\System32\TUProgSt.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Heure de fin: 2010-03-16 22:00:52 - La machine a redémarré
ComboFix-quarantined-files.txt 2010-03-16 21:00
Avant-CF: 20 059 320 320 octets libres
Après-CF: 20 229 144 576 octets libres
WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professionnel" /fastdetect /NoExecute=OptIn
- - End Of File - - 3FC1D9633D2AC4A65967D04660C4AE31 -
Contributeur sécurité/!\ Le logiciel qui suit n'est pas à utiliser à la légère ! Ne le faites que si un helpeur vous l'a recommandé. /!\
Ce logiciel est très puissant et une mauvaise utilisation peut faire des dégâts... Suis exactement cette procedure :
Télécharge ComboFix (de sUBs) sur ton Bureau (et pas ailleurs !). Pour cela, fais un clic droit sur ce lien et choisis "enregistrer la cible sous ... " et tape C-Fix dans la fenêtre qui s'ouvre et valide.
Déconnecte toi, ferme toutes tes applications en cours et DESACTIVE TOUTES TES DEFENCES, antivirus...
(qui pourraient gêner fortement l'outil...Tu les réactiveras donc après ! )
Tuto ici pour installer la Console de récupération (important en cas de problème il te le proposera) : https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
postes le rapport stp
(ne touche a rien pendant que l'outil travaille pour ne pas figer ton pc) -
http://www.cijoint.fr/cjlink.php?file=cj201003/cijYoajTPM.txt
-
Contributeur sécuritéok
pourrais tu refaire un zhpdiag comme au début stp pour faire le point
(pense a l'heberger sur cijoint sinon il ne paasera pas sur le forum ou il sera incomplet ;) -
Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3872
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
16/03/2010 17:43:08
mbam-log-2010-03-16 (17-43-08).txt
Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 211632
Temps écoulé: 2 hour(s), 13 minute(s), 18 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 5
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\AppDataLow\HavingFunOnline (Adware.BHO.FL) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
C:\Documents and Settings\Jacky\Application Data\setup.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jacky\Local Settings\Temp\ldm1.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Jacky\Local Settings\Temp\setupv.exe (Trojan.Inject) -> Quarantined and deleted successfully.
C:\FyK\Quarantine\C\Documents and Settings\Jacky\Application Data\drivers\downld\155109.exe.FindyKill (Worm.Bagle) -> Quarantined and deleted successfully.
C:\FyK\Quarantine\C\Documents and Settings\Jacky\Application Data\m\flec006.exe.FindyKill (Worm.Bagle) -> Quarantined and deleted successfully. -
Contributeur sécuritéTu peux supprimer Hjt et Avast, ils sont morts !!
Désinstalle Avast avec ceci et re-telecharge le :
http://www.commentcamarche.net/telecharger/telecharger-151-avast
Avant de s'occuper du reste :
Télécharge Malwarebytes’ Anti-Malware
- Sur la page cliques sur Télécharger Malwarebyte’s Anti-Malware
- Enregistres le sur le bureau
- Double cliques sur le fichier téléchargé pour lancer le processus d’installation
- Mets le a jour /!\
- Double-cliques sur l’icône de malwarebytes pour le relancer
- Dans l’onglet, Recherche, probablement ouvert par défaut,
- Sélectionne Exécuter un examen complet et Rechercher
- Si des malwares ont été détectés, cliques sur Afficher les résultats
- Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
- Colle le rapport ici, il se trouve dans l’onglet rapport/log
Si tu as besoin d’aide regarde ce tutorial
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
ps: s'il te demande de redemarrer : fais le !
-
Contributeur sécuritéah oui, ok pour le mp, ton rapport était trop long pour passer ^^
! Déconnecte toi et ferme toutes application en cours ( navigateur compris ) .
• Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...)
• Relance "FindyKill" : au menu principal choisis l'option " F " pour français et tape sur [entrée] .
• Au second menu choisis l'option 2 (suppression) et tape sur [entrée]
• Le pc va redémarrer automatiquement ...
▶ le programme va travailler , ne touche à rien ... , ton bureau ne sera pas accessible c est normal !
--> Poste le rapport qui apparait à la fin ( le rapport est sauvegardé aussi sous C:\FindyKill.txt )
/!\ Si le Bureau ne réapparait pas, presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tape explorer.exe et valide
Aides en images : http://pagesperso-orange.fr/NosTools/findykill.html
A LIRE tu comprendras :
Le danger des cracks
Bagle/Beagle
Bagle en video et informations
Une fois cet outil passé , on aura fait le plus gros (important), je ne repasserai sans doute que demain, je ne t'oublie pas :) ;)
-
############################## | FindyKill V5.038 |
# User : Jacky (Administrateurs) # PC
# Update on 15/03/2010 by El Desaparecido
# Start at: 23:29:54 | 15/03/2010
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Contact : FindyKill.Contact@gmail.com
# Intel(R) Celeron(TM) CPU 1300MHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Enabled
# AV : avast! antivirus 4.8.1368 [VPS 100315-0] 4.8.1368 [ (!) Disabled | Updated ]
# A:\ # Lecteur de disquettes 3 ½ pouces
# C:\ # Disque fixe local # 37,26 Go (19,04 Go free) # NTFS
# D:\ # Disque fixe local # 6 Go (2,74 Go free) # NTFS
# E:\ # Disque CD-ROM
# F:\ # Disque CD-ROM
# G:\ # Disque CD-ROM
# H:\ # Disque CD-ROM
# I:\ # Disque CD-ROM
# J:\ # Disque CD-ROM
################## | Eléments infectieux |
################## | MD5 ... |
################## | CRC32 ... |
################## | Registre |
Supprimé ! [HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA]
Supprimé ! [HKCU\Software\bisoft]
Supprimé ! [HKCU\Software\DateTime4]
Supprimé ! [HKCU\Software\MuleAppData]
Supprimé ! [HKCU\Software\WS4001]
Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] "drvsyskit"
Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] "german.exe"
Supprimé ! [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] "mule_st_key"
Supprimé ! [HKCU\Software\Local AppWizard-Generated Applications\winupgro]
################## | Etat |
# Mode sans echec restauré !
# Affichage des fichiers cachés : OK
# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 2 ( Good = 2 | Bad = 4 )
# Ip6Fw -> Start = 2 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 )
################## | Fichiers corrompus |
Corrompu : C:\Program Files\Alwil Software\Avast5\ashQuick.exe
[Offset = 000000F4 - Valeur = 0x0001]
Corrompu : C:\Program Files\Alwil Software\Avast5\ashUpd.exe
[Offset = 000000EC - Valeur = 0x0001]
Corrompu : C:\Program Files\Alwil Software\Avast5\aswRegSvr.exe
[Offset = 000000D4 - Valeur = 0x0001]
Corrompu : C:\Program Files\Alwil Software\Avast5\sched.exe
[Offset = 000000FC - Valeur = 0x0001]
Corrompu : C:\Program Files\Creative\Shared Files\Software Update\AutoUpdate.exe
[Offset = 00000104 - Valeur = 0x0001]
Corrompu : C:\Program Files\Iminent\SaveMoney\update.exe
[Offset = 000000F4 - Valeur = 0x0001]
Corrompu : C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
[Offset = 000000C4 - Valeur = 0x0001]
Corrompu : C:\WINDOWS\PixArt\PAC207\Monitor.exe
[Offset = 000000FC - Valeur = 0x0001]
Tentative de réparation...
Sauvegarde : Monitor.exe.REN
[Offset = 000000FC - Nouvelle valeur = 0x4C01]
Fichier réparé avec succès.
################## | Upload |
Veuillez envoyer le fichier : C:\FindyKill_Upload_Me_PC.zip : https://www.ionos.fr/?affiliate_id=77097
Merci pour votre contribution .
################## | ! Fin du rapport # FindyKill V5.038 ! |
-
-
############################## | FindyKill V5.037 |
# User : Jacky (Administrateurs) # PC
# Update on 18/02/2010 by El Desaparecido
# Start at: 19:13:40 | 15/03/2010
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Contact : FindyKill.Contact@gmail.com
# Intel(R) Celeron(TM) CPU 1300MHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Enabled
# AV : avast! antivirus 4.8.1368 [VPS 100315-0] 4.8.1368 [ (!) Disabled | Updated ]
# A:\ # Lecteur de disquettes 3 ½ pouces
# C:\ # Disque fixe local # 37,26 Go (18 Go free) # NTFS
# D:\ # Disque fixe local # 6 Go (2,74 Go free) # NTFS
# E:\ # Disque CD-ROM
# F:\ # Disque CD-ROM
# G:\ # Disque CD-ROM
# H:\ # Disque CD-ROM
# I:\ # Disque CD-ROM
# J:\ # Disque CD-ROM
############################## | Processus actifs |
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Jacky\Application Data\drivers\winupgro.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\Documents and Settings\Jacky\Application Data\m\flec006.exe
C:\WINDOWS\wintems.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\IncrediMail\bin\IncMail.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
############################## | Processus infectieux stoppés |
"C:\Documents and Settings\Jacky\Application Data\drivers\winupgro.exe" (1516)
"C:\Documents and Settings\Jacky\Application Data\m\flec006.exe" (3476)
"C:\WINDOWS\wintems.exe" (3924)
################## | C: |
################## | C:\WINDOWS |
C:\WINDOWS\ban_list.txt
C:\WINDOWS\mdelk.exe
C:\WINDOWS\wintems.exe
################## | C:\WINDOWS\Prefetch |
C:\WINDOWS\Prefetch\151750.EXE-057322EB.pf
C:\WINDOWS\Prefetch\154375.EXE-0AF6FE49.pf
C:\WINDOWS\Prefetch\155109.EXE-2E3A3CE5.pf
C:\WINDOWS\Prefetch\157500.EXE-1472A283.pf
C:\WINDOWS\Prefetch\163359.EXE-3729D5DC.pf
C:\WINDOWS\Prefetch\174578.EXE-375DB908.pf
C:\WINDOWS\Prefetch\175546.EXE-00C5A91E.pf
C:\WINDOWS\Prefetch\179390.EXE-1BC3FD34.pf
C:\WINDOWS\Prefetch\258375.EXE-12EAA47E.pf
C:\WINDOWS\Prefetch\260437.EXE-1F4E1F5F.pf
C:\WINDOWS\Prefetch\264015.EXE-3B1D0DB2.pf
C:\WINDOWS\Prefetch\FLEC006.EXE-36F13357.pf
C:\WINDOWS\Prefetch\INSTALL_CRACK.EXE-0BBB2632.pf
C:\WINDOWS\Prefetch\MDELK.EXE-087EF2B4.pf
C:\WINDOWS\Prefetch\WINTEMS.EXE-127B61D4.pf
################## | C:\WINDOWS\system32 |
C:\WINDOWS\system32\srosa2.sys
C:\WINDOWS\system32\wfsintwq.sys
################## | C:\WINDOWS\system32\drivers |
################## | C:\Documents and Settings\Jacky\Application Data |
C:\Documents and Settings\Jacky\Application Data\drivers
C:\Documents and Settings\Jacky\Application Data\drivers\downld
C:\Documents and Settings\Jacky\Application Data\drivers\downld\152062.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\152765.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\153171.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\153390.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\155109.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\157500.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\163359.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\169000.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\169250.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\169531.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\169921.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\170125.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\170718.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\171703.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\175062.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\175484.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\176218.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\176859.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\177484.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\178156.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\178343.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\178546.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\178718.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\178890.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\181546.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\183515.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\183703.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\183937.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\184046.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\184203.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\184609.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\185015.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\185187.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\185359.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\185562.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\185765.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\187156.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\188625.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\188828.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\189046.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\189484.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\189937.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\191328.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\191953.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\192234.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\192609.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\192875.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\193062.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\193406.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\193765.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\197687.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\198656.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\198828.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\199015.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\199265.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\199562.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\199765.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\199937.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\200203.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\200468.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\201765.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\211078.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\211468.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\212015.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\212234.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\212453.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\213390.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\214375.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\214562.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\214796.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\214984.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\215234.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\215515.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\215671.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\215843.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\216015.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\216515.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\217484.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\217625.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\217781.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\218203.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\218609.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\219328.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\220031.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\220625.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\221234.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\221796.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\222390.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\222671.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\222937.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\223046.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\223390.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\223750.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\224125.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\224468.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\224843.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\225828.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\226781.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\226968.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\227187.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\227406.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\227671.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\228828.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\229750.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\230109.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\230343.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\233281.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\238078.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\238218.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\238421.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\238843.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\240703.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\241640.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\242265.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\242468.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\242640.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\242812.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\243031.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\244187.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\245546.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\246562.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\247437.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\248046.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\252156.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\252703.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\253234.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\253406.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\253578.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\253828.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\254062.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\254281.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\254453.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\254578.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\254750.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\254906.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\255109.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\257296.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\258703.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\259140.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\259625.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\259843.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\260093.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\260437.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\261468.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\261687.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\261890.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\262578.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\263187.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\263656.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\264015.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\265984.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\267687.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\268328.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\268812.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\268921.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\269046.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\269578.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\270078.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\270296.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\270484.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\270687.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\270859.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\271671.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\271953.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\272140.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\272375.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\272578.exe
C:\Documents and Settings\Jacky\Application Data\drivers\winupgro.exe
C:\Documents and Settings\Jacky\Application Data\m
C:\Documents and Settings\Jacky\Application Data\m\data.oct
C:\Documents and Settings\Jacky\Application Data\m\flec006.exe
C:\Documents and Settings\Jacky\Application Data\m\list.oct
C:\Documents and Settings\Jacky\Application Data\m\srvlist.oct
C:\Documents and Settings\Jacky\Application Data\m\shared
C:\Documents and Settings\Jacky\Application Data\m\shared\12Ghosts ScreenSavMan 21.02e.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\4Media DVD to iPhone Converter v5.0.35 build 0512 by SND.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\4Videosoft DVD to iPhone Suite 3.1.06.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\5Star MOV Video Joiner 1.3.2.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\7 Sins [GERMAN] No-CD Fixed EXE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\A-Z QuickTime Video Converter 5.61 keygen.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ABest Video to AVI MPEG Converter 4.94 (crack).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Abilities Builder Math Facts v2.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Access Boss 3.2 Build 3.2.1.309.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ACDSee PowerPack 4.0.1.0598.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Active Whois v2.6.4145 by DiGERATi.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Active@ Undelete v2.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Addict Spellchecker Pro 3.01 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Adobe Dimensions 3.01.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Adobe InCopy CS v3.0 Tryout Multilanguage.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Adobe PressReady (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Advanced ACE Password Recovery 1.01.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\AFTER DARK 95 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\After Dark Screensaver Loony Toons Edition.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Akram Audio Editor v2.2 by DVT.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Algebra Trainer v2.0 German WinAll by LAXiTY.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\All NewLive Products October 2007.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\AltaMax Online Shopper 1.45 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\AM Workflow 3.1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Amort 8.01.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ANSYS CFX RIF V1.4.1 by LND.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Aone FLV Converter Suite 2.2.1224.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Aplus XviD to Pocket PC Converter 1.00.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ArtStudio v2.1b by Orion.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Artwork NETEXG v1.29 by TFT.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Ashampoo FireWall v1.xx by Under SEH T3am.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Ashampoo UnInstaller 2000 v2.0.0.1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Auction Informant 1.2 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\AudioMulch 0.9b2 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\AudioSpin Media Recorder 1.09.046.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Automatic Desktop Background Change Software 7.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\AV4 Customer Management System 4.1.5.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Axis World Time 1.8.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\BattleStar v2.8 by RAC.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Benzinkosten 2003.10.45.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Better File Select 1.8.1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Bibble Labs Bibble Pro v4.7 Cracked by SSG.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Birds 1.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\BitRate Viewer v1.5.054.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Black Diamond Sound Systems Tsunami Pro 6.4D.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Bookmark Manager Pro 3.0.0.350.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\BufoVok v3.0 German by Acme.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Bytescout PPT to SWF Scout v1.12d by Bidjan.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Cabela's Dangerous Hunts 2 v1.0 [ENGLISH] No-CD Fixed EXE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\CadSoft Eagle v4.16 by AGAiN.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Catalyst SocketTools Visual Edition 3.6.3630 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Catfood FTP Wizard v3.01.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\CDR Checker v1.0 by Orion.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\CDRWin v5.02.00 by Anonymous.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Centico Photo Album 1.03.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\CFA FileList 2000 v1.11.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\CiberCut 5.6 MAX DONGLE CRACKEDSiGNMAKER.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\CoD United Offense v1.5b PRIVATE LINUX SERVER FIX.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\CodePerfect 2.1 for Mac.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\CoffeeCup FireStarter v4.0 Full.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Comet FTP 1.2.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\CompRes 1.2.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\CoverPro v7.1.3 by PC.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Crystal 3D Sensations for Presentations 1.12 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Dance eJay v4.0 Fixed.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Dicom Gateway v1.1.7.7.8.222 by Lz0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Digi Grabber (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\DiskArcher Backup Utility v1.01.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Dogs of War v1.0 [ALL] CD-Copy Fixed EXE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\DrawIt 2.1a (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\DSEntertainer v2.0.9 German by BLiZZARD.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\EarthView v1.2 Updated.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Easy Audio CD Burner 3.11 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Elite Software Audit v7.01.79.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\EncryptHTML v1.20.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Epocware Weather v1.04 for SymbianOS7 OS8.1 S60 N90.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\EraseUndo for NTFS 1.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ETransform 2000 Suite (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Express Plus v2.1.1.0 by ViRiLiTY.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Extra DVD to Audio MP3 Ripper v5.0 by Bidjan.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\EZ Audit 6.0.1008 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\FarStone Virtual Drive Personal Edition 7.1.0 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\File Patcher v3.0 by Saltine.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\FRS Division Drills 3.0.4 patch.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\FTPRush v1.0.0605 ANSI Multilingual WinALL Cracked by BRD.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Full Control 2.0 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\GetRight 5.2d WinALL REGGED by PARANOiA.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\GIF2SWF v2.1 NEW.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\GMBA Calculator 1.1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Gorky 17 CHEATS v1.1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Gradience Attendance 10.0.712.13.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\GuideSX Encryptor 1.03 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Halloween Night - Animated Wallpaper 5.07.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Haushaltbuchfuehrung 5.6 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Help to RTF (HLP2RTF) Converter v2.12n.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Hex Workshop v4.22 by SnD.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Hidden Camera v2.14 Regged by iNFECTED.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\HiFiSoft MP3 Audio Batch Converter v1.00 Keygen Only by EXPLOSiON.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\HogWasher 4.2.2 for Mac.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\HotBurn 1.1.2 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\IAR Embedded Workbench for NEC 78K v4.40A Incl Keygen by Lz0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\IdImager 2.1.0.1t.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\IdImager v2.6.1.4b by EMBRACE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\iLead DVD to iPod Converter v4.0.5 by AT4RE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Impulse Universal (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ImTOO DVD Creator v3.0 by AT4RE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ImTOO DVD Ripper 1.0.6 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\InSync 2.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\InterVideo DVDCopy Platinum v4.0B018.53C00 GERMAN by Core.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Invault Online Backup Manager 5.1.0.7d.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\iRadioNet 2.01.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\iRider 2.21.1108 Crack by FFF.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ISMail PRO 2.2.8.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\James Bond 007 Nightfire v1.1 [SWEDISH] Fixed EXE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\JNIWrapper 3.8.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\JT Tray Organizer 1.0.21.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Kaspersky Anti-Virus Personal 5.0.522 WinAll by TWK.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\KingConvert For Archos404 605 4.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Knockdown Karate 1.0 Color or Grey for PalmOS.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Lakeridge Software WisBar Advance 3 v3.2c build 1 Retail for PocketPC WM2003 by RLYEH.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\LanScan Network Monitor 1.61g (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Lavavo CD Ripper v3.1.8 by EMBRACE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Les Arts Tempo 2.5b.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\LFP Manager2004 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\LingvoSoft Dictionary 2008 English - Bulgarian 4.1.29.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Loan Pro 1.7.5 for Mac.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Macromedia ColdFusion MX v6.1 by Core.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Mail Them Pro 2.2.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Map Designer Pro 2.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\MAYA v4.0 French by FFF.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\McFunSoft PSP Video Converter 8.0.10.24.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Mechanical Engineering 8.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\MediaVideoConverter PSP Converter 3.0.2.0306.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\microolap chm ebook reader 2.0 for pocket pc cracked by TSRh.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Microsoft Office Student and Teacher Edition 2003 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Microstudio 2.312 Retail (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\MicroWorld MailScan for Avirt Mail Server v4.2a.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\MidPoint Teamer v3.24.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\MindSoft Utilities XP v9.5 WinXP Regged by CRD.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Mobile Graphics ImageDesigner v0.92 Retail Chinese for SymbianOS S60 by RLYEH.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Morpheus Photo Compressor v2.00 French.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Movie Organizer Deluxe v2.5 by TBE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\MovieToolBox Movie Splitter v1.33 WinALL Cracked by DVT.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\MP3 Disc Burner 1.85.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\MSN Chat Monitor and Sniffer v3.3.4 Incl Keygen by BLiZZARD.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Myst IV v1.0 [ENGLISH] No-DVD Fixed EXE 1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\MyWebServer Link Resolver 1.0.3 keygen.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Need For Speed Hot Pursuit 2.6.0 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Neonix TR Rollover v1.0.2 for Dreamweaver.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Nero Burning ROM v5.5.7.8 Regfile by Bkl klm.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Netmedia Resource v2.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Neuronale Workstation 1.0 Keygen by EViDENCE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\OCR Image to Text Conversion Tool 2.0.2728.31801.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Opera v8.01.7583 by EXPLOSiON.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Panda Antivirus 2001.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\PDFKey 1.2 for Mac (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Pegasus Agile AVI Video Joiner v1.8 by AT4RE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\PL Table 4.40.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Pointwise Gridgen v15.09 R3 LINUX by TBE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\PowerQuest Drive Image Pro 5.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\PrimaSoft Auto Organizer Deluxe v3.6a.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\PrimaSoft AutoFTP Premium v3.6.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\PrinterExpress 1.1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Priore TWAIN .NET Control 1.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Privacy Protection Suite 2.1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Psycho Pinball (1995) (Codemasters) (Rev1) FULL!.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\quick starter 2.50 keygen by TSRh.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\RealTimeDB 1.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Reference Book 4.1 by FHCF.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Registry Bookmarks 1.0 by TNT.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Registry Medic v2.41 by ICI.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\RExcel v1.0.1019 Regged by SCRiPTMAFiA.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\River Past Cam Do Webmaster Edition v2.10.2.60118 WinALL Keygen Only by BRD.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\River Past Cam Do Webmaster Edition v2.5.3.50811 WinALL Keygen Only by BRD.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Rivers and Lake Screen Saver v5.00.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Rockit Pro DJ v4.00.3202.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Rocky Retail JAVA 128x160 K510 by RLYEH.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Sacrifice v1.0 [US ENGLISH] No-CD Fixed EXE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\sagetv 2.2.7 cracked by TSRh.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\scanrepair utilities 2006.4.1 serial by REVENGE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ScrLock 2.37 keygen.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\SEO PowerSuite 1.0 CrAcKed.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Shark Visions Screensaver 1.0 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ShufflePlay 2.80 beta 1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Simple Startup Manager 1.16 keygen.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\SMS GUN 8.1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\SobolSoft All Oracle Applications by AT4RE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\SoftCopy 2.0.1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\SoftCopy 3.1.3.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Sphere Utilities 1.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\StartUp Cleaner v1.3.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Steamland ALL ACCESS CHEAT by PiZZADOX.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Subtitle Translation Wizard v2.5 by AT4RE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Surround SCM 2.1.3 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\SwiftDog PCThrust v1.2.26.2007 by ENGiNE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\TamoSoft CommView v5.3 build 516 by tPORt.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Text2Audio Converter v1.9 Incl Keygen by ORiON.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\The Automated Dispatch Log System 1.33 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Thumbs Plus 3.10 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Thumbs Plus v5.01.2064 Retail by CORE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Translogic HDL Companion v1.1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Trillian Pro v2.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Tweak Jr 2.0 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\UsenetGrab 2.0 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Vampires (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\VisionGS BE v1.04b4 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Visual Business Cards 3.3d Serial by Lash.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Visual MP3.4.3.1 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\VNCScan Enterprise Console v2007.6.5.2.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\VuePrint Pro 6.0 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Web Forum Server 1.60.0426.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\WebGenie CGI Star Pro 3.6 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\WebIndex 1.0 crack.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\WhereIsIP v2.0++.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\WIDI Music Recognition System v3.3.2 build 588 by p1n0yak0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Wings over Vietnam v1.0 [ENGLISH] No-CD Fixed EXE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\WinHex v9.72 Working.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\WinI2C-DDC Lite 3.51.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\World War II Combat CHEAT CODES 2.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Writers Cafe v1.24 Unicode by ViRiLiTY.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\WWAYM NWBass VSTi v2.0 incl KeyGen by BEAT.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\X360 Tiff to Pdf Image ActiveX OCX 2.39 crack.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Xlight FTP Server 3.5 patch.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Xtreeme SiteXpert Professional v9.0.3 WinALL Retail Incl Keygen by ViRiLiTY.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Zealot All Video Joiner v2.4.1 WinAll Regged READ NFO by CRD.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ZipForge 4.05 patch.zip
################## | Temporary Internet Files |
################## | Registre |
[HKLM\SYSTEM\CurrentControlSet\Services\sK9Ou0s]
[HKLM\SYSTEM\ControlSet001\Services\sK9Ou0s]
[HKLM\SYSTEM\ControlSet004\Services\sK9Ou0s]
[HKLM\SYSTEM\CurrentControlSet\Services\srosa]
[HKLM\SYSTEM\ControlSet001\Services\srosa]
[HKLM\SYSTEM\ControlSet004\Services\srosa]
[HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S]
[HKLM\SYSTEM\ControlSet001\Enum\Root\LEGACY_SK9OU0S]
[HKLM\SYSTEM\ControlSet004\Enum\Root\LEGACY_SK9OU0S]
[HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA]
[HKLM\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA]
[HKCU\Software\bisoft]
[HKCU\Software\DateTime4]
[HKCU\Software\MuleAppData]
[HKCU\Software\WS4001]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Run] "drvsyskit"
[HKU\S-1-5-21-583907252-1482476501-1417001333-1003\Software\Microsoft\Windows\CurrentVersion\Run] "drvsyskit"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Run] "german.exe"
[HKU\S-1-5-21-583907252-1482476501-1417001333-1003\Software\Microsoft\Windows\CurrentVersion\Run] "german.exe"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Run] "mule_st_key"
[HKU\S-1-5-21-583907252-1482476501-1417001333-1003\Software\Microsoft\Windows\CurrentVersion\Run] "mule_st_key"
[HKU\S-1-5-21-583907252-1482476501-1417001333-1003\Software\bisoft]
[HKU\S-1-5-21-583907252-1482476501-1417001333-1003\Software\DateTime4]
[HKU\S-1-5-21-583907252-1482476501-1417001333-1003\Software\MuleAppData]
[HKCU\Software\Local AppWizard-Generated Applications\winupgro]
[HKU\S-1-5-21-583907252-1482476501-1417001333-1003\Software\Local AppWizard-Generated Applications\winupgro]
################## | Etat |
# Affichage des fichiers cachés : OK
Clé manquante : HKLM\...\SafeBoot | Mode sans echec non fonctionnel !
# (!) Ndisuio -> Start = 4 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 3 ( Good = 2 | Bad = 4 )
# (!) Ip6Fw -> Start = 4 ( Good = 2 | Bad = 4 )
# (!) SharedAccess -> Start = 4 ( Good = 2 | Bad = 4 )
# (!) wuauserv -> Start = 4 ( Good = 2 | Bad = 4 )
# (!) wscsvc -> Start = 4 ( Good = 2 | Bad = 4 )
################## | ! Fin du rapport # FindyKill V5.037 ! | -
je ne comprend pas il ne s'affiche pas du coup j'ai relancer un sujet intitulé pour neo
-
############################## | FindyKill V5.037 |
# User : Jacky (Administrateurs) # PC
# Update on 18/02/2010 by El Desaparecido
# Start at: 19:13:40 | 15/03/2010
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Contact : FindyKill.Contact@gmail.com
# Intel(R) Celeron(TM) CPU 1300MHz
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Enabled
# AV : avast! antivirus 4.8.1368 [VPS 100315-0] 4.8.1368 [ (!) Disabled | Updated ]
# A:\ # Lecteur de disquettes 3 ½ pouces
# C:\ # Disque fixe local # 37,26 Go (18 Go free) # NTFS
# D:\ # Disque fixe local # 6 Go (2,74 Go free) # NTFS
# E:\ # Disque CD-ROM
# F:\ # Disque CD-ROM
# G:\ # Disque CD-ROM
# H:\ # Disque CD-ROM
# I:\ # Disque CD-ROM
# J:\ # Disque CD-ROM
############################## | Processus actifs |
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Jacky\Application Data\drivers\winupgro.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\Documents and Settings\Jacky\Application Data\m\flec006.exe
C:\WINDOWS\wintems.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\IncrediMail\bin\IncMail.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
############################## | Processus infectieux stoppés |
"C:\Documents and Settings\Jacky\Application Data\drivers\winupgro.exe" (1516)
"C:\Documents and Settings\Jacky\Application Data\m\flec006.exe" (3476)
"C:\WINDOWS\wintems.exe" (3924)
################## | C: |
################## | C:\WINDOWS |
C:\WINDOWS\ban_list.txt
C:\WINDOWS\mdelk.exe
C:\WINDOWS\wintems.exe
################## | C:\WINDOWS\Prefetch |
C:\WINDOWS\Prefetch\151750.EXE-057322EB.pf
C:\WINDOWS\Prefetch\154375.EXE-0AF6FE49.pf
C:\WINDOWS\Prefetch\155109.EXE-2E3A3CE5.pf
C:\WINDOWS\Prefetch\157500.EXE-1472A283.pf
C:\WINDOWS\Prefetch\163359.EXE-3729D5DC.pf
C:\WINDOWS\Prefetch\174578.EXE-375DB908.pf
C:\WINDOWS\Prefetch\175546.EXE-00C5A91E.pf
C:\WINDOWS\Prefetch\179390.EXE-1BC3FD34.pf
C:\WINDOWS\Prefetch\258375.EXE-12EAA47E.pf
C:\WINDOWS\Prefetch\260437.EXE-1F4E1F5F.pf
C:\WINDOWS\Prefetch\264015.EXE-3B1D0DB2.pf
C:\WINDOWS\Prefetch\FLEC006.EXE-36F13357.pf
C:\WINDOWS\Prefetch\INSTALL_CRACK.EXE-0BBB2632.pf
C:\WINDOWS\Prefetch\MDELK.EXE-087EF2B4.pf
C:\WINDOWS\Prefetch\WINTEMS.EXE-127B61D4.pf
################## | C:\WINDOWS\system32 |
C:\WINDOWS\system32\srosa2.sys
C:\WINDOWS\system32\wfsintwq.sys
################## | C:\WINDOWS\system32\drivers |
################## | C:\Documents and Settings\Jacky\Application Data |
C:\Documents and Settings\Jacky\Application Data\drivers
C:\Documents and Settings\Jacky\Application Data\drivers\downld
C:\Documents and Settings\Jacky\Application Data\drivers\downld\152062.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\152765.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\153171.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\153390.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\155109.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\157500.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\163359.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\169000.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\169250.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\169531.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\169921.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\170125.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\170718.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\171703.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\175062.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\175484.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\176218.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\176859.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\177484.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\178156.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\178343.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\178546.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\178718.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\178890.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\181546.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\183515.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\183703.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\183937.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\184046.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\184203.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\184609.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\185015.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\185187.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\185359.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\185562.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\185765.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\187156.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\188625.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\188828.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\189046.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\189484.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\189937.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\191328.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\191953.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\192234.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\192609.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\192875.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\193062.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\193406.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\193765.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\197687.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\198656.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\198828.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\199015.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\199265.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\199562.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\199765.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\199937.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\200203.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\200468.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\201765.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\211078.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\211468.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\212015.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\212234.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\212453.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\213390.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\214375.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\214562.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\214796.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\214984.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\215234.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\215515.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\215671.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\215843.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\216015.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\216515.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\217484.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\217625.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\217781.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\218203.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\218609.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\219328.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\220031.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\220625.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\221234.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\221796.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\222390.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\222671.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\222937.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\223046.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\223390.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\223750.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\224125.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\224468.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\224843.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\225828.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\226781.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\226968.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\227187.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\227406.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\227671.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\228828.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\229750.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\230109.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\230343.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\233281.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\238078.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\238218.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\238421.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\238843.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\240703.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\241640.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\242265.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\242468.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\242640.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\242812.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\243031.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\244187.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\245546.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\246562.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\247437.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\248046.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\252156.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\252703.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\253234.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\253406.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\253578.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\253828.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\254062.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\254281.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\254453.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\254578.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\254750.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\254906.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\255109.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\257296.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\258703.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\259140.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\259625.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\259843.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\260093.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\260437.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\261468.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\261687.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\261890.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\262578.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\263187.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\263656.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\264015.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\265984.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\267687.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\268328.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\268812.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\268921.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\269046.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\269578.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\270078.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\270296.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\270484.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\270687.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\270859.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\271671.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\271953.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\272140.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\272375.exe
C:\Documents and Settings\Jacky\Application Data\drivers\downld\272578.exe
C:\Documents and Settings\Jacky\Application Data\drivers\winupgro.exe
C:\Documents and Settings\Jacky\Application Data\m
C:\Documents and Settings\Jacky\Application Data\m\data.oct
C:\Documents and Settings\Jacky\Application Data\m\flec006.exe
C:\Documents and Settings\Jacky\Application Data\m\list.oct
C:\Documents and Settings\Jacky\Application Data\m\srvlist.oct
C:\Documents and Settings\Jacky\Application Data\m\shared
C:\Documents and Settings\Jacky\Application Data\m\shared\12Ghosts ScreenSavMan 21.02e.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\4Media DVD to iPhone Converter v5.0.35 build 0512 by SND.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\4Videosoft DVD to iPhone Suite 3.1.06.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\5Star MOV Video Joiner 1.3.2.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\7 Sins [GERMAN] No-CD Fixed EXE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\A-Z QuickTime Video Converter 5.61 keygen.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ABest Video to AVI MPEG Converter 4.94 (crack).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Abilities Builder Math Facts v2.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Access Boss 3.2 Build 3.2.1.309.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ACDSee PowerPack 4.0.1.0598.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Active Whois v2.6.4145 by DiGERATi.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Active@ Undelete v2.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Addict Spellchecker Pro 3.01 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Adobe Dimensions 3.01.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Adobe InCopy CS v3.0 Tryout Multilanguage.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Adobe PressReady (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Advanced ACE Password Recovery 1.01.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\AFTER DARK 95 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\After Dark Screensaver Loony Toons Edition.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Akram Audio Editor v2.2 by DVT.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Algebra Trainer v2.0 German WinAll by LAXiTY.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\All NewLive Products October 2007.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\AltaMax Online Shopper 1.45 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\AM Workflow 3.1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Amort 8.01.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ANSYS CFX RIF V1.4.1 by LND.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Aone FLV Converter Suite 2.2.1224.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Aplus XviD to Pocket PC Converter 1.00.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ArtStudio v2.1b by Orion.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Artwork NETEXG v1.29 by TFT.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Ashampoo FireWall v1.xx by Under SEH T3am.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Ashampoo UnInstaller 2000 v2.0.0.1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Auction Informant 1.2 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\AudioMulch 0.9b2 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\AudioSpin Media Recorder 1.09.046.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Automatic Desktop Background Change Software 7.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\AV4 Customer Management System 4.1.5.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Axis World Time 1.8.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\BattleStar v2.8 by RAC.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Benzinkosten 2003.10.45.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Better File Select 1.8.1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Bibble Labs Bibble Pro v4.7 Cracked by SSG.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Birds 1.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\BitRate Viewer v1.5.054.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Black Diamond Sound Systems Tsunami Pro 6.4D.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Bookmark Manager Pro 3.0.0.350.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\BufoVok v3.0 German by Acme.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Bytescout PPT to SWF Scout v1.12d by Bidjan.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Cabela's Dangerous Hunts 2 v1.0 [ENGLISH] No-CD Fixed EXE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\CadSoft Eagle v4.16 by AGAiN.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Catalyst SocketTools Visual Edition 3.6.3630 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Catfood FTP Wizard v3.01.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\CDR Checker v1.0 by Orion.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\CDRWin v5.02.00 by Anonymous.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Centico Photo Album 1.03.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\CFA FileList 2000 v1.11.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\CiberCut 5.6 MAX DONGLE CRACKEDSiGNMAKER.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\CoD United Offense v1.5b PRIVATE LINUX SERVER FIX.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\CodePerfect 2.1 for Mac.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\CoffeeCup FireStarter v4.0 Full.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Comet FTP 1.2.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\CompRes 1.2.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\CoverPro v7.1.3 by PC.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Crystal 3D Sensations for Presentations 1.12 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Dance eJay v4.0 Fixed.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Dicom Gateway v1.1.7.7.8.222 by Lz0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Digi Grabber (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\DiskArcher Backup Utility v1.01.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Dogs of War v1.0 [ALL] CD-Copy Fixed EXE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\DrawIt 2.1a (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\DSEntertainer v2.0.9 German by BLiZZARD.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\EarthView v1.2 Updated.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Easy Audio CD Burner 3.11 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Elite Software Audit v7.01.79.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\EncryptHTML v1.20.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Epocware Weather v1.04 for SymbianOS7 OS8.1 S60 N90.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\EraseUndo for NTFS 1.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ETransform 2000 Suite (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Express Plus v2.1.1.0 by ViRiLiTY.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Extra DVD to Audio MP3 Ripper v5.0 by Bidjan.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\EZ Audit 6.0.1008 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\FarStone Virtual Drive Personal Edition 7.1.0 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\File Patcher v3.0 by Saltine.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\FRS Division Drills 3.0.4 patch.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\FTPRush v1.0.0605 ANSI Multilingual WinALL Cracked by BRD.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Full Control 2.0 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\GetRight 5.2d WinALL REGGED by PARANOiA.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\GIF2SWF v2.1 NEW.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\GMBA Calculator 1.1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Gorky 17 CHEATS v1.1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Gradience Attendance 10.0.712.13.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\GuideSX Encryptor 1.03 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Halloween Night - Animated Wallpaper 5.07.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Haushaltbuchfuehrung 5.6 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Help to RTF (HLP2RTF) Converter v2.12n.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Hex Workshop v4.22 by SnD.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Hidden Camera v2.14 Regged by iNFECTED.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\HiFiSoft MP3 Audio Batch Converter v1.00 Keygen Only by EXPLOSiON.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\HogWasher 4.2.2 for Mac.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\HotBurn 1.1.2 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\IAR Embedded Workbench for NEC 78K v4.40A Incl Keygen by Lz0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\IdImager 2.1.0.1t.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\IdImager v2.6.1.4b by EMBRACE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\iLead DVD to iPod Converter v4.0.5 by AT4RE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Impulse Universal (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ImTOO DVD Creator v3.0 by AT4RE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ImTOO DVD Ripper 1.0.6 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\InSync 2.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\InterVideo DVDCopy Platinum v4.0B018.53C00 GERMAN by Core.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Invault Online Backup Manager 5.1.0.7d.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\iRadioNet 2.01.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\iRider 2.21.1108 Crack by FFF.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ISMail PRO 2.2.8.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\James Bond 007 Nightfire v1.1 [SWEDISH] Fixed EXE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\JNIWrapper 3.8.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\JT Tray Organizer 1.0.21.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Kaspersky Anti-Virus Personal 5.0.522 WinAll by TWK.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\KingConvert For Archos404 605 4.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Knockdown Karate 1.0 Color or Grey for PalmOS.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Lakeridge Software WisBar Advance 3 v3.2c build 1 Retail for PocketPC WM2003 by RLYEH.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\LanScan Network Monitor 1.61g (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Lavavo CD Ripper v3.1.8 by EMBRACE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Les Arts Tempo 2.5b.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\LFP Manager2004 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\LingvoSoft Dictionary 2008 English - Bulgarian 4.1.29.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Loan Pro 1.7.5 for Mac.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Macromedia ColdFusion MX v6.1 by Core.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Mail Them Pro 2.2.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Map Designer Pro 2.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\MAYA v4.0 French by FFF.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\McFunSoft PSP Video Converter 8.0.10.24.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Mechanical Engineering 8.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\MediaVideoConverter PSP Converter 3.0.2.0306.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\microolap chm ebook reader 2.0 for pocket pc cracked by TSRh.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Microsoft Office Student and Teacher Edition 2003 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Microstudio 2.312 Retail (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\MicroWorld MailScan for Avirt Mail Server v4.2a.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\MidPoint Teamer v3.24.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\MindSoft Utilities XP v9.5 WinXP Regged by CRD.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Mobile Graphics ImageDesigner v0.92 Retail Chinese for SymbianOS S60 by RLYEH.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Morpheus Photo Compressor v2.00 French.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Movie Organizer Deluxe v2.5 by TBE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\MovieToolBox Movie Splitter v1.33 WinALL Cracked by DVT.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\MP3 Disc Burner 1.85.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\MSN Chat Monitor and Sniffer v3.3.4 Incl Keygen by BLiZZARD.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Myst IV v1.0 [ENGLISH] No-DVD Fixed EXE 1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\MyWebServer Link Resolver 1.0.3 keygen.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Need For Speed Hot Pursuit 2.6.0 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Neonix TR Rollover v1.0.2 for Dreamweaver.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Nero Burning ROM v5.5.7.8 Regfile by Bkl klm.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Netmedia Resource v2.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Neuronale Workstation 1.0 Keygen by EViDENCE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\OCR Image to Text Conversion Tool 2.0.2728.31801.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Opera v8.01.7583 by EXPLOSiON.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Panda Antivirus 2001.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\PDFKey 1.2 for Mac (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Pegasus Agile AVI Video Joiner v1.8 by AT4RE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\PL Table 4.40.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Pointwise Gridgen v15.09 R3 LINUX by TBE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\PowerQuest Drive Image Pro 5.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\PrimaSoft Auto Organizer Deluxe v3.6a.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\PrimaSoft AutoFTP Premium v3.6.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\PrinterExpress 1.1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Priore TWAIN .NET Control 1.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Privacy Protection Suite 2.1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Psycho Pinball (1995) (Codemasters) (Rev1) FULL!.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\quick starter 2.50 keygen by TSRh.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\RealTimeDB 1.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Reference Book 4.1 by FHCF.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Registry Bookmarks 1.0 by TNT.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Registry Medic v2.41 by ICI.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\RExcel v1.0.1019 Regged by SCRiPTMAFiA.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\River Past Cam Do Webmaster Edition v2.10.2.60118 WinALL Keygen Only by BRD.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\River Past Cam Do Webmaster Edition v2.5.3.50811 WinALL Keygen Only by BRD.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Rivers and Lake Screen Saver v5.00.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Rockit Pro DJ v4.00.3202.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Rocky Retail JAVA 128x160 K510 by RLYEH.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Sacrifice v1.0 [US ENGLISH] No-CD Fixed EXE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\sagetv 2.2.7 cracked by TSRh.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\scanrepair utilities 2006.4.1 serial by REVENGE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ScrLock 2.37 keygen.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\SEO PowerSuite 1.0 CrAcKed.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Shark Visions Screensaver 1.0 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ShufflePlay 2.80 beta 1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Simple Startup Manager 1.16 keygen.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\SMS GUN 8.1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\SobolSoft All Oracle Applications by AT4RE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\SoftCopy 2.0.1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\SoftCopy 3.1.3.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Sphere Utilities 1.0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\StartUp Cleaner v1.3.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Steamland ALL ACCESS CHEAT by PiZZADOX.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Subtitle Translation Wizard v2.5 by AT4RE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Surround SCM 2.1.3 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\SwiftDog PCThrust v1.2.26.2007 by ENGiNE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\TamoSoft CommView v5.3 build 516 by tPORt.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Text2Audio Converter v1.9 Incl Keygen by ORiON.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\The Automated Dispatch Log System 1.33 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Thumbs Plus 3.10 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Thumbs Plus v5.01.2064 Retail by CORE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Translogic HDL Companion v1.1.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Trillian Pro v2.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Tweak Jr 2.0 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\UsenetGrab 2.0 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Vampires (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\VisionGS BE v1.04b4 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Visual Business Cards 3.3d Serial by Lash.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Visual MP3.4.3.1 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\VNCScan Enterprise Console v2007.6.5.2.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\VuePrint Pro 6.0 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Web Forum Server 1.60.0426.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\WebGenie CGI Star Pro 3.6 (Serial).zip
C:\Documents and Settings\Jacky\Application Data\m\shared\WebIndex 1.0 crack.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\WhereIsIP v2.0++.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\WIDI Music Recognition System v3.3.2 build 588 by p1n0yak0.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Wings over Vietnam v1.0 [ENGLISH] No-CD Fixed EXE.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\WinHex v9.72 Working.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\WinI2C-DDC Lite 3.51.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\World War II Combat CHEAT CODES 2.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Writers Cafe v1.24 Unicode by ViRiLiTY.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\WWAYM NWBass VSTi v2.0 incl KeyGen by BEAT.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\X360 Tiff to Pdf Image ActiveX OCX 2.39 crack.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Xlight FTP Server 3.5 patch.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Xtreeme SiteXpert Professional v9.0.3 WinALL Retail Incl Keygen by ViRiLiTY.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\Zealot All Video Joiner v2.4.1 WinAll Regged READ NFO by CRD.zip
C:\Documents and Settings\Jacky\Application Data\m\shared\ZipForge 4.05 patch.zip
################## | Temporary Internet Files |
################## | Registre |
[HKLM\SYSTEM\CurrentControlSet\Services\sK9Ou0s]
[HKLM\SYSTEM\ControlSet001\Services\sK9Ou0s]
[HKLM\SYSTEM\ControlSet004\Services\sK9Ou0s]
[HKLM\SYSTEM\CurrentControlSet\Services\srosa]
[HKLM\SYSTEM\ControlSet001\Services\srosa]
[HKLM\SYSTEM\ControlSet004\Services\srosa]
[HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S]
[HKLM\SYSTEM\ControlSet001\Enum\Root\LEGACY_SK9OU0S]
[HKLM\SYSTEM\ControlSet004\Enum\Root\LEGACY_SK9OU0S]
[HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA]
[HKLM\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA]
[HKCU\Software\bisoft]
[HKCU\Software\DateTime4]
[HKCU\Software\MuleAppData]
[HKCU\Software\WS4001]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Run] "drvsyskit"
[HKU\S-1-5-21-583907252-1482476501-1417001333-1003\Software\Microsoft\Windows\CurrentVersion\Run] "drvsyskit"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Run] "german.exe"
[HKU\S-1-5-21-583907252-1482476501-1417001333-1003\Software\Microsoft\Windows\CurrentVersion\Run] "german.exe"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Run] "mule_st_key"
[HKU\S-1-5-21-583907252-1482476501-1417001333-1003\Software\Microsoft\Windows\CurrentVersion\Run] "mule_st_key"
[HKU\S-1-5-21-583907252-1482476501-1417001333-1003\Software\bisoft]
[HKU\S-1-5-21-583907252-1482476501-1417001333-1003\Software\DateTime4]
[HKU\S-1-5-21-583907252-1482476501-1417001333-1003\Software\MuleAppData]
[HKCU\Software\Local AppWizard-Generated Applications\winupgro]
[HKU\S-1-5-21-583907252-1482476501-1417001333-1003\Software\Local AppWizard-Generated Applications\winupgro]
################## | Etat |
# Affichage des fichiers cachés : OK
Clé manquante : HKLM\...\SafeBoot | Mode sans echec non fonctionnel !
# (!) Ndisuio -> Start = 4 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 3 ( Good = 2 | Bad = 4 )
# (!) Ip6Fw -> Start = 4 ( Good = 2 | Bad = 4 )
# (!) SharedAccess -> Start = 4 ( Good = 2 | Bad = 4 )
# (!) wuauserv -> Start = 4 ( Good = 2 | Bad = 4 )
# (!) wscsvc -> Start = 4 ( Good = 2 | Bad = 4 )
################## | ! Fin du rapport # FindyKill V5.037 ! | -
Contributeur sécuriténon
re-essaie s'il n'est pas affiché c'est que je le vois pas ;) -
alors tu as bien reçu le post
-
Contributeur sécuritéNeo c pas la les informations sur les vers/virus?
si tu veux me poser des questions, fais le en mp ou au bureau pour eviter d'encombrer le sujet stp ;) -
---\\ Infection Bagle (Possible)
O41 - Driver: sK9Ou0s (sK9Ou0s) . (.Pas de propriétaire - AVZ Driver.) - C:\WINDOWS\system32\srosa2.sys
O44 - LFC:[MD5.FD977A96D36C3413102FF603C6B67643] - 15/03/2010 - 15:08:09 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\WINDOWS\ban_list.txt
O44 - LFC:[MD5.524D8D450622DB4A7875B111C299A76B] - 15/03/2010 - 15:07:48 ---A- . (.Pas de propriétaire - AVZ Driver.) -- C:\WINDOWS\System32\srosa2.sys
O58 - SDL:[MD5.524D8D450622DB4A7875B111C299A76B] - 15/03/2010 - 15:07:48 ---A- . (.Pas de propriétaire - AVZ Driver.) -- C:\WINDOWS\system32\srosa2.sys
O64 - Services: CurCS - C:\WINDOWS\system32\srosa2.sys - sK9Ou0s (sK9Ou0s) .(.Pas de propriétaire - AVZ Driver.) - LEGACY_SK9OU0S
---\\ Infection BT - BHO/Toolbar (Possible)
O2 - BHO: GamesBarBHO Class - {CB0D163C-E9F4-4236-9496-0597E24B23A5} . (.Pas de propriétaire - Pas de description.) -- (.not file.)
Neo c pas la les informations sur les vers/virus? -
Contributeur sécuritéJe disait apres quand son pc sera desinfecter
quand on joue avec des cracks, peu importe l'antivirus, le resultat est le même !
@ Pitchsoso :
tu as PLUSIEURES infections, on va donc utiliser plusieurs outils pour les supprimer, on va s'attaquer a Bagle en priorité :
▶ Télécharge FindyKill sur ton bureau :
http://findykill.changelog.fr/Setup.exe
ou
http://pagesperso-orange.fr/NosTools/Chiquitine29/Setup.exe
! Déconnecte toi et ferme toutes applications en cours !
• Double clique sur "FindyKill.exe" pour lancer l'installation et laisse les paramètres d'instalation par défaut .
• Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...)
• Double-clique sur le raccourci FindyKill qui est sur ton bureau pour lancer l'outil .
• Au menu principal choisis l'option " F " pour français et tape sur [entrée] .
• Au second menu Choisis l'option " 1 " (recherche) et tape sur [entrée]
▶ Laisse travailler l'outil et ne touche à rien ...
--> Poste le rapport qui apparait à la fin , sur le forum ...
( le rapport est sauvegardé aussi sous C:\FindyKill.txt )
( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )
Aides en images : http://pagesperso-orange.fr/NosTools/findykill.html
-
uTorrent c pas un logiciel de piratage?
-
merci neo voici le lien:http://www.cijoint.fr/cjlink.php?file=cj201003/cij2CHNDXq.txt
- 1
- 2
Suivant
