Virus

Résolu
tital17 -  
Bonsoir,
ça fait quelques jours que j'essaie de changer mon antivirus mais malheureusement je n'arrive pas à l'installer il semble que je sois infecté par 1 ou plusieurs virus. j'ai vu sur d'autres sites qu'il fallait fournir un rapport de Hijack pour que des personnes compétentes puissent résoudre les problèmes. Est ce que quelqu'un peut m'aider?
Voici le rapport:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:24, on 2008-10-19
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Hercules\WiFi Station\WifiStation.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\MASTER\Bureau\HiJackThis(2).exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.homepageinspect.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {70AB0A8B-8A8A-496F-A339-4CD2F3352991} - C:\WINDOWS\system32\fccayvv.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {96960F5A-628F-4D90-BE08-5E9460671533} - C:\WINDOWS\system32\jkhfd.dll (file missing)
O2 - BHO: (no name) - {A5489C17-02AD-2E52-DD46-2A909AA43BBC} - (no file)
O2 - BHO: (no name) - {C2A1C5CB-C0EF-4689-9436-F62CCA1C5383} - C:\Program Files\NetProject\sbmdl.dll (file missing)
O3 - Toolbar: Web Application - {81705D67-3F73-4983-859B-97D0922E5ABE} - C:\Program Files\NetProject\wamdl.dll (file missing)
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: WiFi Station.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.browsergate.com/redirect.php (file missing)
O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.browsergate.com/redirect.php (file missing)
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://www.secuser.com
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/
O20 - Winlogon Notify: fccayvv - fccayvv.dll (file missing)
O22 - SharedTaskScheduler: corduroyed - {699fabf8-1087-491f-b57c-80a68929d82b} - (no file)
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
Configuration: Windows XP
Firefox 2.0.0.16

41 réponses

Résumé de la discussion

Une installation antivirus échouée et des symptômes d’infection sur Windows XP amènent à demander de l’aide, avec un rapport HijackThis détaillant de nombreuses entrées suspectes et services curieux. Plusieurs réponses proposent des outils de nettoyage et des procédures diverses, notamment FindyKill et S&D ToolBar SD, afin d’analyser et d’éliminer les éléments malveillants présents. Des échanges mentionnent également des variantes de rapports FindyKill ou des logs montrant des processus et fichiers dans C:\WINDOWS\system32 ou C:\Windows\downld, indiquant une infection complexe nécessitant outils spécialisés. En fin de fil, une réponse partage un rapport FindyKill détaillé montrant une longue liste de processus, services et pilotes suspects, démontrant l’étendue potentielle de la compromission.

Bobot (l’IA à votre service)
  1. Destrio5 Modérateur
    Pour Bagle, je te conseille FindyKill au lieu d'Elibagla.

    --> Télécharge FindyKill (par Chiquitine29) sur ton bureau :
    http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe

    --> Lance l'installation avec les paramètres par defaut

    --> Double-clique sur le raccourci FindyKill sur ton bureau

    --> Au menu principal, choisis l'option 1 (Recherche)

    --> Poste le rapport FindyKill.txt

    Note : le rapport FindyKill.txt est sauvegardé à la racine du disque.
    1. Destrio5 Modérateur
      Heu, c'est pas fini.

      - Télécharge Navilog1 (de IL-MAFIOSO) et enregistre-le sur le bureau :
      http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe

      - Double-clique sur Navilog1.exe afin de lancer l'installation

      - Si le fix ne lance pas automatiquement après son installation, double-clique sur Navilog1 présent sur le bureau

      - Appuie sur F ou f puis valide par Entrée

      - Appuie sur une touche de ton clavier à chaque fois que cela est demandé, tu arriveras au menu des options

      - Choisis l'option 1 et appuie sur la touche Entrée pour valider ton choix

      - Patiente jusqu'au message : *** Analyse terminée le ..... ***

      - Le scan fini, le bloc-notes contenant le rapport sera affiché, poste le contenu de ce rapport dans ta prochaine réponse

      - Si le résultat du scan ne s'affiche pas, tu le trouveras dans C:\fixnavi.txt

      N'utilise pas l'option 2, 3 et 4 sans notre accord, des fichiers légitimes peuvent être inclus dans ce scan.
      1. tital17 Auteur
        salut destrio,
        je te remercie de m'avoir permis de me débarrasser de toutes les saloperies qu'il y avait dans mon ordinateur.
        Bonne journée
        1. Destrio5 Modérateur
          "Present ! - C:\WINDOWS\prefetch\MDELK.EXE-238AA5EF.pf "
          ---> Il faudrait que tu refasses l'option 2.
          2. tital17 Auteur
            Dsl, trop fatigué hier soir,voici le dernier rapport si tu peux me dire si c'est bon ou non . merci de ta part
            ----------------- FindyKill V4.005 ------------------

            * User : MASTER - ROCHELLE-XYJLT4
            * Emplacement : C:\Program Files\FindyKill
            * Outils Mis a jours le 19/10/08 par Chiquitine29
            * Recherche effectuée à 7:21:51 le 2008-10-20
            * Windows XP - Internet Explorer 6.0.2900.2180

            ((((((((((((((((( *** Recherche *** ))))))))))))))))))

            --------------- [ Processus actifs ] ----------------

            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\csrss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\system32\spoolsv.exe
            C:\Program Files\CDBurnerXP\NMSAccessU.exe
            C:\WINDOWS\system32\HPZipm12.exe
            C:\Program Files\Spyware Terminator\sp_rsser.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\system32\wdfmgr.exe
            C:\WINDOWS\system32\wscntfy.exe
            C:\WINDOWS\Explorer.EXE
            C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
            C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
            C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
            C:\WINDOWS\system32\ctfmon.exe
            C:\Program Files\DAEMON Tools Lite\daemon.exe
            C:\Program Files\Hercules\WiFi Station\WifiStation.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\system32\wuauclt.exe
            C:\Program Files\Mozilla Firefox\firefox.exe

            --------------- [ Fichiers/Dossiers infectieux ] ----------------

            »»»» Presence des fichiers dans C:

            »»»» Presence des fichiers dans C:\WINDOWS

            »»»» Presence des fichiers dans C:\WINDOWS\Prefetch

            Present ! - C:\WINDOWS\prefetch\MDELK.EXE-238AA5EF.pf

            »»»» Presence des fichiers dans C:\WINDOWS\system32

            »»»» Presence des fichiers dans C:\WINDOWS\system32\drivers

            »»»» Presence des fichiers dans C:\Documents and Settings\MASTER\Application Data

            »»»» Presence des fichiers dans C:\DOCUME~1\MASTER\LOCALS~1\Temp

            --------------- [ Registre / Startup ] ----------------

            ! REG.EXE VERSION 3.0

            HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
            SpywareTerminator REG_SZ "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
            TkBellExe REG_SZ "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
            SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"

            HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents

            ! REG.EXE VERSION 3.0

            HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
            CTFMON.EXE REG_SZ C:\WINDOWS\system32\ctfmon.exe
            BitTorrent REG_SZ "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
            DAEMON Tools Lite REG_SZ "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun

            --------------- [ Registre / Clés infectieuses ] ----------------

            --------------- [ Etat / Services ] ----------------

            +- Services : [ Auto=2 Demande=3 Désactivé=4 ]

            Ndisuio - Type de démarrage = 2

            Wlansvc - Type de démarrage = 2

            Ip6Fw - Type de démarrage = 2

            SharedAccess - Type de démarrage = "Start"

            wuauserv - Type de démarrage = 2

            wscsvc - Type de démarrage = 2

            --------------- [ Recherche dans supports amovibles] ----------------

            +- Informations :

            C: - Lecteur fixe

            E: - Lecteur fixe

            H: - Lecteur amovible

            +- presence des fichiers :

            --------------- [ Registre / Moutpoint2 ] ----------------

            -> Recherche négative.

            ------------------- ! Fin du rapport ! --------------------
            3. Destrio5 Modérateur
              Ce rapport de FindyKill est complet. L'infection Bagle s'attrape dans les cracks et keygens donc si tu en as, il faut les supprimer sinon l'infection se relancera.

              --> Branche tes disques amovibles à ton PC (clefs USB, disque dur externe, etc...) sans les ouvrir

              --> Double-clique sur le raccourci FindyKill sur ton bureau

              --> Au menu principal, choisis l'option 2 (Suppression)

              /!\ Il y aura 2 redémarrages, laisse travailler l'outil jusqu'à l'apparition du message "nettoyage effectué" /!\

              --> Ensuite, poste le rapport FindyKill.txt

              Note : le rapport FindyKill.txt est sauvegardé à la racine du disque.
              1. Utilisateur anonyme
                Re,

                ben j'ai fait un nettoyage avec ensuite il est vrai que je n'aurait pas penser a cela donc??????

                @+
                1. tital17 Auteur
                  ----------------- FindyKill V4.005 ------------------

                  * User : MASTER - ROCHELLE-XYJLT4
                  * Emplacement : C:\Program Files\FindyKill
                  * Outils Mis a jours le 19/10/08 par Chiquitine29
                  * Recherche effectuée à 21:44:19 le 2008-10-19
                  * Windows XP - Internet Explorer 6.0.2900.2180

                  ((((((((((((((((( *** Recherche *** ))))))))))))))))))

                  --------------- [ Processus actifs ] ----------------

                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\csrss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\Program Files\CDBurnerXP\NMSAccessU.exe
                  C:\WINDOWS\system32\HPZipm12.exe
                  C:\Program Files\Spyware Terminator\sp_rsser.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\wdfmgr.exe
                  C:\WINDOWS\system32\ctfmon.exe
                  C:\Program Files\DAEMON Tools Lite\daemon.exe
                  C:\Program Files\Hercules\WiFi Station\WifiStation.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\Program Files\Mozilla Firefox\firefox.exe
                  C:\WINDOWS\notepad.exe
                  C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE
                  C:\WINDOWS\explorer.exe

                  --------------- [ Fichiers/Dossiers infectieux ] ----------------

                  »»»» Presence des fichiers dans C:

                  »»»» Presence des fichiers dans C:\WINDOWS

                  »»»» Presence des fichiers dans C:\WINDOWS\Prefetch

                  Present ! - C:\WINDOWS\prefetch\101156.EXE-173E0A88.pf
                  Present ! - C:\WINDOWS\prefetch\103406.EXE-12F65020.pf
                  Present ! - C:\WINDOWS\prefetch\107390.EXE-25196BC2.pf
                  Present ! - C:\WINDOWS\prefetch\116796.EXE-0ED1AD70.pf
                  Present ! - C:\WINDOWS\prefetch\119343.EXE-186CAFE8.pf
                  Present ! - C:\WINDOWS\prefetch\130812.EXE-3902460E.pf
                  Present ! - C:\WINDOWS\prefetch\137140.EXE-2F2140DE.pf
                  Present ! - C:\WINDOWS\prefetch\139187.EXE-1A69A310.pf
                  Present ! - C:\WINDOWS\prefetch\142125.EXE-07030296.pf
                  Present ! - C:\WINDOWS\prefetch\14711500.EXE-103E5957.pf
                  Present ! - C:\WINDOWS\prefetch\14755421.EXE-0C7F6001.pf
                  Present ! - C:\WINDOWS\prefetch\14760859.EXE-1C379855.pf
                  Present ! - C:\WINDOWS\prefetch\15324218.EXE-33D0F696.pf
                  Present ! - C:\WINDOWS\prefetch\165392765.EXE-395E9117.pf
                  Present ! - C:\WINDOWS\prefetch\165422171.EXE-22431989.pf
                  Present ! - C:\WINDOWS\prefetch\179927781.EXE-0F1E44A3.pf
                  Present ! - C:\WINDOWS\prefetch\180089046.EXE-2CABA43A.pf
                  Present ! - C:\WINDOWS\prefetch\183296.EXE-09D74D21.pf
                  Present ! - C:\WINDOWS\prefetch\189390.EXE-2EBB7D7A.pf
                  Present ! - C:\WINDOWS\prefetch\192765.EXE-10E937A1.pf
                  Present ! - C:\WINDOWS\prefetch\194669859.EXE-31DFCDBC.pf
                  Present ! - C:\WINDOWS\prefetch\194676843.EXE-2C5D880E.pf
                  Present ! - C:\WINDOWS\prefetch\209296671.EXE-322BEFFE.pf
                  Present ! - C:\WINDOWS\prefetch\209306109.EXE-22EEC960.pf
                  Present ! - C:\WINDOWS\prefetch\89890.EXE-07E67765.pf
                  Present ! - C:\WINDOWS\prefetch\92750.EXE-075EE928.pf
                  Present ! - C:\WINDOWS\prefetch\FLEC006.EXE-118F0B44.pf
                  Present ! - C:\WINDOWS\prefetch\HLDRRR.EXE-106798BB.pf
                  Present ! - C:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf
                  Present ! - C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf
                  Present ! - C:\WINDOWS\Prefetch\O4PATCH.EXE-2DA7463B.pf
                  Present ! - C:\WINDOWS\Prefetch\PATCH.EXE-1DE617D3.pf
                  Present ! - C:\WINDOWS\Prefetch\PATCHJRE.EXE-065EAC0D.pf

                  »»»» Presence des fichiers dans C:\WINDOWS\system32

                  Présent ! - C:\WINDOWS\system32\mdelk.exe
                  Présent ! - C:\WINDOWS\system32\wintems.exe
                  Présent ! - C:\WINDOWS\system32\ban_list.txt

                  »»»» Presence des fichiers dans C:\WINDOWS\system32\drivers

                  Présent ! - C:\WINDOWS\system32\drivers\mdelk.exe
                  Présent ! - C:\WINDOWS\system32\drivers\srosa.sys
                  Présent ! - C:\WINDOWS\system32\drivers\hldrrr.exe
                  Présent ! - "C:\WINDOWS\system32\drivers\downld"
                  Present ! - C:\WINDOWS\system32\drivers\downld\105390.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\106842500.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\107390.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\114890.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\121667750.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\121770750.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\1231500.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\1250750.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\1329890.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\137140.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\146640.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14711500.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14757750.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14758890.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14904390.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14942250.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14993390.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\150808390.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\150829750.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\150942140.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\165440140.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\170500.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\180073140.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\180074750.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\18495140.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\18546000.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\189390.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\209397250.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\29327500.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\33508250.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\349890.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\414000.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\44739250.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\48022390.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\48045640.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\48255500.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\650250.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\77475750.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\92222390.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\92750.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\106842500.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\106863656.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\106870546.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\106915062.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\106922859.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\106951687.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\106967937.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\106983859.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\107110953.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\107170468.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\107193984.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\111171.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\117421.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\121667750.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\121679656.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\121681203.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\121689187.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\121699562.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\121726765.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\121731437.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\121770750.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\121783953.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\121792796.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\124171.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\136216484.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\136236515.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\136239171.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\136253906.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\136262218.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\136265953.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\136309062.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\136322125.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\136352203.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14726531.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14746281.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14755421.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14809171.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\150796406.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\150798515.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\150808390.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\150811062.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\150819187.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\150826218.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\150829750.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\150942140.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\150968437.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\150977312.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\15499671.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\165392765.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\165407843.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\165409515.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\165422171.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\165430265.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\165436796.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\165440140.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\165479218.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\165499296.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\165507093.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\179927781.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\180073140.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\180074750.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\180089046.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\180096265.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\180111093.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\180122671.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\180183093.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\180209078.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\180226671.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\194661343.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\194663328.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\194669859.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\194676843.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\194714062.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\194753625.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\194758281.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\194800265.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\194815437.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\194831859.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\197921.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\209306109.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\209344578.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\209351796.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\209389437.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\209397250.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\209400781.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\209443421.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\209464546.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\209478187.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\227921.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\288171.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\29341031.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\29356921.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\29439281.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\29664671.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\3225281.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\3273531.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\33302921.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\33446531.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\422921.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\44340171.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\44626921.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\460281.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\48065531.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\48317421.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\62738531.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\62760671.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\62790921.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\73890781.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\73928781.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\73953171.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\74060031.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\77457671.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\92084781.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\92110031.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\92154921.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\104312.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\106915062.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\121699562.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\125812.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\130812.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\136309062.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14779062.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14814062.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14910812.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\15077812.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\150811062.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\150977312.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\15297312.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\175312.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\194714062.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\197812.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\29744562.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\3150062.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\59314562.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\73931812.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\77472562.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\77528812.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\845812.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\107110953.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\108453.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\119343.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\121681203.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\121783953.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\134453.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\136265953.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\136352203.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14792703.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14813843.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14901953.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\15120953.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\15190703.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\15301843.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\165407843.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\165507093.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\180093.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\180111093.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\180183093.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\181843.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\18528343.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\194661343.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\194676843.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\198203.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\203203.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\229343.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\276593.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\29426593.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\29723453.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\29824953.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\29882703.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\298953.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\33299453.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\33336703.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\3570093.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\48018453.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\48128343.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\48291203.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\59355953.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\62804843.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\62903703.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\77333203.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\92305703.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\107193984.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\128234.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\1295984.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\136216484.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14895984.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\18542234.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\208984.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\260734.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\329734.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\33357734.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\3487484.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\44498984.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\48099484.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\48124734.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\74070734.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\77380234.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\92028234.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\97984.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\113515.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\121726765.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\136236515.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\136322125.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\140765.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\142125.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14728765.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14804265.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14872515.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14881125.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\150798515.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\15201515.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\159625.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\165392765.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\165409515.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\165430265.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\176875.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\180096265.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\18520765.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\192765.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\194753625.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\194800265.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\211765.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\3312875.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\3820875.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\44393625.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\59239375.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\59387625.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\606125.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\62818765.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\62825875.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\73882265.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\73915265.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\77435125.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\77555265.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\814125.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\91979375.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\92037375.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\101156.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\101656.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\103406.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\106863656.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\106870546.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\115796.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\116796.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\117156.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\1184406.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\119046.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\1211156.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\121679656.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\121792796.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\128046.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\136253906.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14706796.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14742906.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14761796.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14898156.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14928156.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14933906.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\150796406.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\15480156.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\165436796.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\165499296.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\173406.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\180089046.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\183296.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\18508296.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\18517296.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\18734906.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\191656.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\205046.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\209351796.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\209464546.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\213656.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\260796.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\284796.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\288546.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\29311296.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\3222656.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\323546.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\33324296.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\33372046.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\33379046.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\377406.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\435296.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\44471546.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\44780296.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\59317406.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\59379906.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\62896296.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\73943046.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\74022156.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\94906.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\106951687.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\106967937.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\1212687.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\121689187.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\121731437.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\139187.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14899187.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14900937.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14993937.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\150819187.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\150968437.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\18646687.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\194815437.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\209389437.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\209478187.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\228187.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\29621437.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\306937.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\378437.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\3919437.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\44403937.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\44438937.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\47966187.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\482187.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\914187.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\106828.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\107170468.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\108468.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\116718.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\1242078.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\1339328.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\136262218.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\139828.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14806218.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14825578.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14874078.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14882718.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\150826218.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\15148468.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\15324218.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\15386828.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\15394218.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\15444078.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\165479218.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\180209078.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\194663328.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\209344578.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\215578.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\257828.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\287218.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\29347218.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\29396718.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\29680968.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\29758718.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\33255578.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\3370578.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\3456328.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\59231218.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\59431968.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\59461078.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\59473078.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\62758468.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\73912328.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\106922859.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\106983859.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\114359.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\143859.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14760859.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14773859.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14848609.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\14885609.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\161859.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\18505109.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\18790859.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\194669859.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\194831859.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\209306109.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\29326359.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\29893109.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\33483609.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\62879859.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\77374359.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\77546859.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\92140859.exe
                  Present ! - C:\WINDOWS\system32\drivers\downld\92347859.exe

                  »»»» Presence des fichiers dans C:\Documents and Settings\MASTER\Application Data

                  Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\flec006.exe"
                  Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\list.oct"
                  Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\data.oct"
                  Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\srvlist.oct"
                  Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\shared"
                  Présent ! - "C:\Documents and Settings\MASTER\Application Data\m"

                  »»»» Presence des fichiers dans C:\DOCUME~1\MASTER\LOCALS~1\Temp

                  --------------- [ Registre / Startup ] ----------------

                  ! REG.EXE VERSION 3.0

                  HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
                  SpywareTerminator REG_SZ "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
                  TkBellExe REG_SZ "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                  SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"

                  HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents

                  ! REG.EXE VERSION 3.0

                  HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
                  CTFMON.EXE REG_SZ C:\WINDOWS\system32\ctfmon.exe
                  BitTorrent REG_SZ "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
                  DAEMON Tools Lite REG_SZ "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun

                  --------------- [ Registre / Clés infectieuses ] ----------------

                  Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\Local AppWizard-Generated Applications\flec006
                  Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\Local AppWizard-Generated Applications\hldrrr
                  Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\Local AppWizard-Generated Applications\mdelk
                  Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\Local AppWizard-Generated Applications\nideiect
                  Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\DateTime4
                  Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\FFC
                  Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\FirstRRRun
                  Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\FirtR
                  Présent ! - HKEY_USERS\S-1-5-21-1202660629-115176313-725345543-1004\Software\MuleAppData
                  Présent ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\flec006
                  Présent ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\hldrrr
                  Présent ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\mdelk
                  Présent ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\nideiect
                  Présent ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa
                  Présent ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa
                  Présent ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\srosa
                  Présent ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
                  Présent ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA
                  Présent ! - HKEY_CURRENT_USER\Software\DateTime4
                  Présent ! - HKEY_CURRENT_USER\Software\FirtR
                  Présent ! - HKEY_CURRENT_USER\Software\FirstRRRun

                  --------------- [ Etat / Services ] ----------------

                  +- Services : [ Auto=2 Demande=3 Désactivé=4 ]

                  /!\ Ndisuio - Type de démarrage = 4

                  /!\ Ip6Fw - Type de démarrage = 4

                  SharedAccess - Type de démarrage = "Start"

                  /!\ wuauserv - Type de démarrage = 4

                  /!\ wscsvc - Type de démarrage = 4

                  --------------- [ Recherche dans supports amovibles] ----------------

                  +- Informations :

                  C: - Lecteur fixe

                  E: - Lecteur fixe

                  +- presence des fichiers :

                  --------------- [ Registre / Moutpoint2 ] ----------------

                  Present ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fb2d45b9-68f7-11dc-bc23-000d878e3eff}\Shell\AutoRun\command
                  Present ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fb2d45b9-68f7-11dc-bc23-000d878e3eff}\Shell\explore\Command
                  Present ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fb2d45b9-68f7-11dc-bc23-000d878e3eff}\Shell\open\Command

                  ------------------- ! Fin du rapport ! --------------------

                  si celui ci n'est pas complet je recommence la manip
                  1. Destrio5 Modérateur
                    goldorak59 ---> C'est marqué dans le rapport ToolBar S&D ;)
                    1. Destrio5 Modérateur
                      "que dois je faire maintenant? je suis encore infecté?"
                      ---> Oui, l'énorme rapport FindyKill le montre. Par contre, il n'est pas complet. Peux-tu le reposter ?
                      1. Utilisateur anonyme
                        Re,

                        ben moi lorsque c'est un bagle le log que j'utilise me le dit est pas là????

                        alors je ne comprend pas mais j'attend une réponse de ta part mais je soumet le topic a ces gens là car ?????

                        Sinon pour être plus précis===> la ligne qui concerne le "BAGLE" sur le rapport hijs.

                        merci de ton aide sur ce topic.

                        @+
                        2. Destrio5 Modérateur
                          "Maintenant concernant Baggle c'est quelle ligne? "
                          ---> C'est à dire ?
                          1. Utilisateur anonyme
                            Re,

                            je sais bien mais on intervient,

                            hier j'ai eu "lyonnais92 qui lui me conseil desfois aussi anthony5151,geoffrey5,marie,

                            donc voilà,

                            maintenant je ne dit pas que tu m'aide pas mais par mp car chiquitine29 le fait aussi des fois.

                            Maintenant concernant Baggle c'est quelle ligne?

                            merci.
                            2. tital17 Auteur
                              voici le rapport zakouko

                              ----------------- FindyKill V4.005 ------------------

                              * User : MASTER - ROCHELLE-XYJLT4
                              * Emplacement : C:\Program Files\FindyKill
                              * Outils Mis a jours le 19/10/08 par Chiquitine29
                              * Recherche effectuée à 21:44:19 le 2008-10-19
                              * Windows XP - Internet Explorer 6.0.2900.2180

                              ((((((((((((((((( *** Recherche *** ))))))))))))))))))

                              --------------- [ Processus actifs ] ----------------

                              C:\WINDOWS\System32\smss.exe
                              C:\WINDOWS\system32\csrss.exe
                              C:\WINDOWS\system32\winlogon.exe
                              C:\WINDOWS\system32\services.exe
                              C:\WINDOWS\system32\lsass.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\WINDOWS\system32\spoolsv.exe
                              C:\Program Files\CDBurnerXP\NMSAccessU.exe
                              C:\WINDOWS\system32\HPZipm12.exe
                              C:\Program Files\Spyware Terminator\sp_rsser.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\WINDOWS\system32\wdfmgr.exe
                              C:\WINDOWS\system32\ctfmon.exe
                              C:\Program Files\DAEMON Tools Lite\daemon.exe
                              C:\Program Files\Hercules\WiFi Station\WifiStation.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\Program Files\Mozilla Firefox\firefox.exe
                              C:\WINDOWS\notepad.exe
                              C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE
                              C:\WINDOWS\explorer.exe

                              --------------- [ Fichiers/Dossiers infectieux ] ----------------

                              »»»» Presence des fichiers dans C:

                              »»»» Presence des fichiers dans C:\WINDOWS

                              »»»» Presence des fichiers dans C:\WINDOWS\Prefetch

                              Present ! - C:\WINDOWS\prefetch\101156.EXE-173E0A88.pf
                              Present ! - C:\WINDOWS\prefetch\103406.EXE-12F65020.pf
                              Present ! - C:\WINDOWS\prefetch\107390.EXE-25196BC2.pf
                              Present ! - C:\WINDOWS\prefetch\116796.EXE-0ED1AD70.pf
                              Present ! - C:\WINDOWS\prefetch\119343.EXE-186CAFE8.pf
                              Present ! - C:\WINDOWS\prefetch\130812.EXE-3902460E.pf
                              Present ! - C:\WINDOWS\prefetch\137140.EXE-2F2140DE.pf
                              Present ! - C:\WINDOWS\prefetch\139187.EXE-1A69A310.pf
                              Present ! - C:\WINDOWS\prefetch\142125.EXE-07030296.pf
                              Present ! - C:\WINDOWS\prefetch\14711500.EXE-103E5957.pf
                              Present ! - C:\WINDOWS\prefetch\14755421.EXE-0C7F6001.pf
                              Present ! - C:\WINDOWS\prefetch\14760859.EXE-1C379855.pf
                              Present ! - C:\WINDOWS\prefetch\15324218.EXE-33D0F696.pf
                              Present ! - C:\WINDOWS\prefetch\165392765.EXE-395E9117.pf
                              Present ! - C:\WINDOWS\prefetch\165422171.EXE-22431989.pf
                              Present ! - C:\WINDOWS\prefetch\179927781.EXE-0F1E44A3.pf
                              Present ! - C:\WINDOWS\prefetch\180089046.EXE-2CABA43A.pf
                              Present ! - C:\WINDOWS\prefetch\183296.EXE-09D74D21.pf
                              Present ! - C:\WINDOWS\prefetch\189390.EXE-2EBB7D7A.pf
                              Present ! - C:\WINDOWS\prefetch\192765.EXE-10E937A1.pf
                              Present ! - C:\WINDOWS\prefetch\194669859.EXE-31DFCDBC.pf
                              Present ! - C:\WINDOWS\prefetch\194676843.EXE-2C5D880E.pf
                              Present ! - C:\WINDOWS\prefetch\209296671.EXE-322BEFFE.pf
                              Present ! - C:\WINDOWS\prefetch\209306109.EXE-22EEC960.pf
                              Present ! - C:\WINDOWS\prefetch\89890.EXE-07E67765.pf
                              Present ! - C:\WINDOWS\prefetch\92750.EXE-075EE928.pf
                              Present ! - C:\WINDOWS\prefetch\FLEC006.EXE-118F0B44.pf
                              Present ! - C:\WINDOWS\prefetch\HLDRRR.EXE-106798BB.pf
                              Present ! - C:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf
                              Present ! - C:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf
                              Present ! - C:\WINDOWS\Prefetch\O4PATCH.EXE-2DA7463B.pf
                              Present ! - C:\WINDOWS\Prefetch\PATCH.EXE-1DE617D3.pf
                              Present ! - C:\WINDOWS\Prefetch\PATCHJRE.EXE-065EAC0D.pf

                              »»»» Presence des fichiers dans C:\WINDOWS\system32

                              Présent ! - C:\WINDOWS\system32\mdelk.exe
                              Présent ! - C:\WINDOWS\system32\wintems.exe
                              Présent ! - C:\WINDOWS\system32\ban_list.txt

                              »»»» Presence des fichiers dans C:\WINDOWS\system32\drivers

                              Présent ! - C:\WINDOWS\system32\drivers\mdelk.exe
                              Présent ! - C:\WINDOWS\system32\drivers\srosa.sys
                              Présent ! - C:\WINDOWS\system32\drivers\hldrrr.exe
                              Présent ! - "C:\WINDOWS\system32\drivers\downld"
                              Present ! - C:\WINDOWS\system32\drivers\downld\105390.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\106842500.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\107390.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\114890.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\121667750.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\121770750.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\1231500.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\1250750.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\1329890.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\137140.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\146640.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14711500.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14757750.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14758890.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14904390.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14942250.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14993390.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\150808390.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\150829750.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\150942140.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\165440140.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\170500.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\180073140.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\180074750.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\18495140.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\18546000.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\189390.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\209397250.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\29327500.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\33508250.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\349890.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\414000.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\44739250.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\48022390.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\48045640.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\48255500.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\650250.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\77475750.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\92222390.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\92750.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\106842500.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\106863656.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\106870546.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\106915062.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\106922859.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\106951687.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\106967937.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\106983859.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\107110953.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\107170468.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\107193984.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\111171.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\117421.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\121667750.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\121679656.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\121681203.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\121689187.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\121699562.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\121726765.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\121731437.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\121770750.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\121783953.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\121792796.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\124171.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\136216484.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\136236515.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\136239171.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\136253906.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\136262218.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\136265953.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\136309062.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\136322125.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\136352203.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14726531.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14746281.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14755421.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14809171.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\150796406.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\150798515.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\150808390.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\150811062.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\150819187.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\150826218.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\150829750.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\150942140.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\150968437.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\150977312.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\15499671.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\165392765.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\165407843.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\165409515.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\165422171.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\165430265.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\165436796.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\165440140.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\165479218.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\165499296.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\165507093.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\179927781.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\180073140.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\180074750.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\180089046.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\180096265.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\180111093.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\180122671.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\180183093.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\180209078.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\180226671.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\194661343.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\194663328.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\194669859.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\194676843.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\194714062.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\194753625.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\194758281.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\194800265.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\194815437.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\194831859.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\197921.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\209306109.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\209344578.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\209351796.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\209389437.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\209397250.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\209400781.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\209443421.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\209464546.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\209478187.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\227921.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\288171.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\29341031.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\29356921.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\29439281.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\29664671.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\3225281.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\3273531.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\33302921.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\33446531.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\422921.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\44340171.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\44626921.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\460281.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\48065531.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\48317421.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\62738531.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\62760671.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\62790921.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\73890781.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\73928781.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\73953171.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\74060031.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\77457671.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\92084781.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\92110031.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\92154921.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\104312.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\106915062.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\121699562.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\125812.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\130812.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\136309062.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14779062.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14814062.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14910812.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\15077812.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\150811062.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\150977312.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\15297312.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\175312.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\194714062.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\197812.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\29744562.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\3150062.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\59314562.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\73931812.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\77472562.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\77528812.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\845812.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\107110953.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\108453.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\119343.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\121681203.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\121783953.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\134453.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\136265953.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\136352203.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14792703.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14813843.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14901953.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\15120953.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\15190703.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\15301843.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\165407843.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\165507093.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\180093.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\180111093.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\180183093.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\181843.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\18528343.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\194661343.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\194676843.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\198203.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\203203.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\229343.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\276593.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\29426593.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\29723453.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\29824953.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\29882703.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\298953.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\33299453.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\33336703.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\3570093.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\48018453.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\48128343.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\48291203.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\59355953.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\62804843.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\62903703.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\77333203.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\92305703.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\107193984.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\128234.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\1295984.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\136216484.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14895984.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\18542234.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\208984.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\260734.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\329734.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\33357734.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\3487484.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\44498984.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\48099484.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\48124734.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\74070734.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\77380234.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\92028234.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\97984.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\113515.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\121726765.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\136236515.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\136322125.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\140765.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\142125.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14728765.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14804265.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14872515.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14881125.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\150798515.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\15201515.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\159625.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\165392765.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\165409515.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\165430265.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\176875.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\180096265.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\18520765.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\192765.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\194753625.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\194800265.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\211765.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\3312875.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\3820875.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\44393625.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\59239375.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\59387625.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\606125.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\62818765.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\62825875.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\73882265.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\73915265.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\77435125.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\77555265.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\814125.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\91979375.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\92037375.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\101156.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\101656.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\103406.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\106863656.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\106870546.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\115796.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\116796.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\117156.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\1184406.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\119046.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\1211156.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\121679656.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\121792796.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\128046.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\136253906.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14706796.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14742906.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14761796.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14898156.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14928156.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14933906.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\150796406.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\15480156.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\165436796.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\165499296.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\173406.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\180089046.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\183296.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\18508296.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\18517296.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\18734906.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\191656.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\205046.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\209351796.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\209464546.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\213656.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\260796.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\284796.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\288546.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\29311296.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\3222656.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\323546.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\33324296.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\33372046.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\33379046.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\377406.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\435296.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\44471546.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\44780296.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\59317406.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\59379906.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\62896296.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\73943046.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\74022156.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\94906.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\106951687.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\106967937.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\1212687.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\121689187.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\121731437.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\139187.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14899187.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14900937.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14993937.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\150819187.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\150968437.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\18646687.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\194815437.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\209389437.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\209478187.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\228187.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\29621437.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\306937.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\378437.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\3919437.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\44403937.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\44438937.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\47966187.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\482187.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\914187.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\106828.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\107170468.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\108468.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\116718.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\1242078.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\1339328.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\136262218.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\139828.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14806218.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14825578.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14874078.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14882718.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\150826218.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\15148468.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\15324218.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\15386828.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\15394218.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\15444078.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\165479218.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\180209078.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\194663328.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\209344578.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\215578.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\257828.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\287218.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\29347218.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\29396718.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\29680968.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\29758718.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\33255578.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\3370578.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\3456328.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\59231218.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\59431968.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\59461078.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\59473078.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\62758468.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\73912328.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\106922859.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\106983859.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\114359.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\143859.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14760859.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14773859.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14848609.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\14885609.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\161859.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\18505109.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\18790859.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\194669859.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\194831859.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\209306109.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\29326359.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\29893109.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\33483609.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\62879859.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\77374359.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\77546859.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\92140859.exe
                              Present ! - C:\WINDOWS\system32\drivers\downld\92347859.exe

                              »»»» Presence des fichiers dans C:\Documents and Settings\MASTER\Application Data

                              Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\flec006.exe"
                              Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\list.oct"
                              Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\data.oct"
                              Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\srvlist.oct"
                              Présent ! - "C:\Documents and Settings\MASTER\Application Data\m\shared"
                              Présent ! - "C:\Documents and Settings\MASTER\Application Data\m"

                              »»»» Presence des fichiers dans C:\DOCUME~1\MASTER\LOCALS~1\Temp
                              1. tital17 Auteur
                                Merci de m'avoir aidé alors. bonne soirée et continue d'aider les "limités" en informatique!
                                1. Utilisateur anonyme
                                  Re,

                                  36 personnes te donne des trucs ....

                                  alors te laisse avec eux.

                                  bonne soirée.

                                  @+
                                  • 1
                                  • 2
                                  • 3

                                  Discussions similaires

                                  Softonic,est-ce un virus ?
                                  techmel1

                                  6 réponses
                                  Chrome://newtab
                                  Nova

                                  14 réponses
                                  Désinstaller Softonic
                                  Diguimette

                                  5 réponses
                                  Supprimer New Tab
                                  tysaozon

                                  8 réponses
                                  Bouton pause/break
                                  frans003

                                  3 réponses