Bonjour,
un ami m'a passé son ordi pour que je le dépanne.
Il rencontre d'énorme souci avec cet ordinateur Vista Familial, perte du bureau Windows (résolu), redirection Internet vers d'autres sites que ceux demandés, impossibilités de faire correctement fonctionner les antivirus (Avast) et les anti Spyware (Add Aware et Spybot S&D) que j'ai essayé d'installer...
Manifestement cet ordinateur est totalement vérolé.
Ci-dessous le rapport obtenu avec ComboFix :
Merci de me dire quoi faire ensuite :
ComboFix 09-11-18.09 - Bruno 19/11/2009 18:18.1.2 - x86
Microsoft® Windows Vista™ Édition Familiale Premium 6.0.6000.0.1252.33.1036.18.2046.1052 [GMT 1:00]
Lancé depuis: c:\users\Bruno\Desktop\idn.exe
AV: avast! antivirus 4.8.1356 [VPS 091119-1] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
SP: avast! antivirus 4.8.1356 [VPS 091119-1] *enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
SP: Lavasoft Ad-Watch Live! *enabled* (Updated) {67844DAE-4F77-4D69-9457-98E8CFFDAA22}
SP: Windows Defender *enabled* (Outdated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\$recycle.bin\S-1-5-21-2152478756-3922319563-605102323-500
c:\programdata\Microsoft\Network\Downloader\qmgr0.dat
c:\programdata\Microsoft\Network\Downloader\qmgr1.dat
c:\users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Security Tool.lnk
c:\windows\10135h9zktoo5747.bin
c:\windows\10707hackt5ol1z9.exe
c:\windows\108849roj5ez5.cpl
c:\windows\108z3viru95da.cpl
c:\windows\10995t9oz237.dll
c:\windows\112219pamzot357.cpl
c:\windows\1139wor51b7z.bin
c:\windows\11537vzrus93d.ocx
c:\windows\1197zsp564a9.exe
c:\windows\11z12not-9-5irus5b5.ocx
c:\windows\1229z5o9-a-virus7e2.exe
c:\windows\12556spambo91bbz.bin
c:\windows\12684w95mez.dll
c:\windows\12983spy15z.bin
c:\windows\129985or9555z.exe
c:\windows\13171spambo95dz.dll
c:\windows\13c9addza5e85.cpl
c:\windows\14687n5t-a-virus79bz.cpl
c:\windows\14z63w5rm719.ocx
c:\windows\1503spzware7929.exe
c:\windows\15110not-a9virzs4a1.dll
c:\windows\1519spy79z9.exe
c:\windows\1529virz1859.bin
c:\windows\153555ir9s4z9.cpl
c:\windows\15651zot-9-virus578.bin
c:\windows\156z5viru93c1.ocx
c:\windows\157bzhief35689.bin
c:\windows\15979s5amzot8c.exe
c:\windows\15999hzef511.dll
c:\windows\15b8t5rez916914.dll
c:\windows\15ef9hizf3135.dll
c:\windows\16a3st5zl2944.exe
c:\windows\173t9oj6bz5.exe
c:\windows\17599vzrusa9.exe
c:\windows\18314not-a-v9ruz35e.exe
c:\windows\185z1worm399.bin
c:\windows\1889z5roj1e0.exe
c:\windows\1894zi9595.ocx
c:\windows\19037zroj45a9.ocx
c:\windows\191575pambot5zb.dll
c:\windows\19175spam5ot7zb.ocx
c:\windows\19188ha5ktooz5e59.cpl
c:\windows\1927spa9botz5.bin
c:\windows\195835acktozl5d9.exe
c:\windows\1983t5ief2142z.ocx
c:\windows\198bvi9z555.ocx
c:\windows\1990tro5971z.ocx
c:\windows\19932s9yz5.bin
c:\windows\19990s5yzcd.dll
c:\windows\1a28t5i9f953z.ocx
c:\windows\1b48addware5z19.dll
c:\windows\1df9sparze135.cpl
c:\windows\1e5s9azse431.bin
c:\windows\1e9faddwar91z56.cpl
c:\windows\1f1f9py5are18z6.ocx
c:\windows\1f58backd9oz769.ocx
c:\windows\1f96spzware950.bin
c:\windows\1z008worm598.exe
c:\windows\1z690virus165.bin
c:\windows\2033szar9e16175.bin
c:\windows\20963zor95b9.exe
c:\windows\209955ot-azvirus95e.ocx
c:\windows\21210spamz9t48d5.ocx
c:\windows\21516notza9virus43.exe
c:\windows\21594sp92zf.exe
c:\windows\219059rojz42.dll
c:\windows\22229zp523e.ocx
c:\windows\23475hazkt9ol2d4.cpl
c:\windows\236z5troj2259.cpl
c:\windows\23855hacktozl499.bin
c:\windows\23963wormz35.ocx
c:\windows\23z355p967b.exe
c:\windows\24034spz596.exe
c:\windows\24392not-a9vi5uz7f7.bin
c:\windows\24659zr973.ocx
c:\windows\24bbv952242z.cpl
c:\windows\2529sp5mboz551.exe
c:\windows\25328hack5ool6z9.cpl
c:\windows\25459ot-a-viruszd6.dll
c:\windows\25899spazbo93eb.dll
c:\windows\258zv9r4115.ocx
c:\windows\25z3hac5to9l6fa.bin
c:\windows\25z70worm4e69.exe
c:\windows\25z89orm9c5.dll
c:\windows\26272nzt-a-viru53579.dll
c:\windows\26395vir9s5e6z.bin
c:\windows\26619not-a5zirus119.bin
c:\windows\27139hiez1528.cpl
c:\windows\2798z59rm336.bin
c:\windows\281599izus56a.dll
c:\windows\2856z95oj553.bin
c:\windows\28956not-a-zirus56c.ocx
c:\windows\2899zownload5r2655.cpl
c:\windows\28cspa5s9103z.bin
c:\windows\29102hacktzol285.bin
c:\windows\29299zpambot5c9.cpl
c:\windows\293599pz551.cpl
c:\windows\29392vir5s9f1z.exe
c:\windows\29691w59z394.ocx
c:\windows\297ztroj45b.ocx
c:\windows\29923vir9s58fz.exe
c:\windows\29ebdown9oazer546.ocx
c:\windows\29eszarse3945.dll
c:\windows\2c7cs9zrse995.bin
c:\windows\2d0bt95ez1678.exe
c:\windows\2d1bthreatz54319.exe
c:\windows\2f55virz09.ocx
c:\windows\2fzbaddw5re7799.ocx
c:\windows\2z594not-a-9irus5855.dll
c:\windows\2z695t5oj98d.bin
c:\windows\2z928not-a-virus595.exe
c:\windows\30752viru935ez.cpl
c:\windows\30z01troj795.ocx
c:\windows\319959reatz614.ocx
c:\windows\3214zha9ktool4b5.cpl
c:\windows\32539spazbo9429.dll
c:\windows\32556h9zktool595.ocx
c:\windows\32757z5t-a-vi9us1da.ocx
c:\windows\32d5zteal5939.ocx
c:\windows\32z49tro56d0.bin
c:\windows\338zthre5t25295.bin
c:\windows\342cb95kdzor699.ocx
c:\windows\34a4ba5kdoor2890z.exe
c:\windows\3552not-a-virus1b9z.exe
c:\windows\355dzownload9r1134.bin
c:\windows\35695parse9z0.dll
c:\windows\36209ot-a-virus5b4z.cpl
c:\windows\3628ste5l19z2.ocx
c:\windows\3791not-a-virzs59d.exe
c:\windows\37d6downloadz93705.dll
c:\windows\37dda5dwzre9509.dll
c:\windows\392zwor9245.ocx
c:\windows\393fzd5ware178.cpl
c:\windows\394threat51186z.cpl
c:\windows\3971h9cktozl535.bin
c:\windows\397cdownloz5er2936.ocx
c:\windows\39d9t5al1691z.dll
c:\windows\3d025ddwz9e887.bin
c:\windows\3d53downloaderz3419.dll
c:\windows\3ed5thr9zt26966.bin
c:\windows\3f4dspywz5e1920.exe
c:\windows\3f5bbz9kdoor180.exe
c:\windows\3z419spy554.bin
c:\windows\3z44thi951003.exe
c:\windows\3z6535pa9bot13c.dll
c:\windows\3z95addw5re893.exe
c:\windows\3zecstea532219.dll
c:\windows\425thzef859.cpl
c:\windows\42c95hizf1737.bin
c:\windows\446espyza9e24255.ocx
c:\windows\45955pyzare2656.bin
c:\windows\45ae9ddwa5e259z.dll
c:\windows\46519pyz58.bin
c:\windows\465zaddware9839.cpl
c:\windows\46c9v5z492.bin
c:\windows\4710s9ywarez551.dll
c:\windows\4759steaz2866.cpl
c:\windows\47zastea91541.ocx
c:\windows\482f9zr9835.ocx
c:\windows\4887wz5910d.bin
c:\windows\4956szambot646.bin
c:\windows\4971th5ez15.dll
c:\windows\4988thie5979z.exe
c:\windows\4993zhreat95356.exe
c:\windows\49f3add9arez265.exe
c:\windows\4ac85teal28z9.bin
c:\windows\4b41s5ezl895.dll
c:\windows\4bcs9yw5re1901z.cpl
c:\windows\4bsp9rz51306.dll
c:\windows\4c9faddwaze20955.exe
c:\windows\4d5aste9z5610.exe
c:\windows\4d9dzhr9a55036.cpl
c:\windows\4dz0vi5719.bin
c:\windows\4zc5downloader9204.bin
c:\windows\50229hief189z.ocx
c:\windows\50692tzoj10b.ocx
c:\windows\5099thizf1246.bin
c:\windows\512aa5dwa9z2390.cpl
c:\windows\51888zpambot297.ocx
c:\windows\51dczpyware7995.bin
c:\windows\524429pamzot288.dll
c:\windows\5294downlz9der85.dll
c:\windows\52fzdownload9r453.ocx
c:\windows\5307s59zse235.bin
c:\windows\533dba9zdoor5937.bin
c:\windows\535stza9182.bin
c:\windows\53c9d5wnloader14z9.exe
c:\windows\543av95195z.bin
c:\windows\552fsz9rse448.cpl
c:\windows\553cbackdoor1z59.ocx
c:\windows\554dzhrea928935.bin
c:\windows\5554az5ware965.ocx
c:\windows\5559bazkdoor2333.dll
c:\windows\55909otza-viru55bc.cpl
c:\windows\559f5pz9se199.exe
c:\windows\55bdaddw9re3211z.exe
c:\windows\55edthief1639z.bin
c:\windows\56b9thizf95965.dll
c:\windows\56caz9ware1830.bin
c:\windows\56zste5l20419.exe
c:\windows\57135zief2926.bin
c:\windows\5728s5yw9rez668.dll
c:\windows\5731za95door1085.bin
c:\windows\5787z9ckdoor792.exe
c:\windows\57b6do9nlozder2750.cpl
c:\windows\57z9sparse1954.dll
c:\windows\5895zir151.cpl
c:\windows\5903t5rezt9677.bin
c:\windows\59122troj9z2.exe
c:\windows\59223spamboz61e.dll
c:\windows\59341trojz9c.bin
c:\windows\593zvir2409.bin
c:\windows\595bbazkdoor2676.ocx
c:\windows\5960vzr285.ocx
c:\windows\59693spy45z.dll
c:\windows\596ct5ief11z3.dll
c:\windows\5993tro952z.bin
c:\windows\5998down5oader2468z.ocx
c:\windows\59c0stea511z2.ocx
c:\windows\59fcthreat17z49.bin
c:\windows\59fzdownlo5der941.dll
c:\windows\59z9steal1515.exe
c:\windows\59zf9ackdo5r1598.exe
c:\windows\5a19backdozr15959.cpl
c:\windows\5a9s5eal310z.ocx
c:\windows\5b00dow9loaz5r11.cpl
c:\windows\5b5avir944z.bin
c:\windows\5ba6b5ckd9oz340.bin
c:\windows\5bz09parse2853.dll
c:\windows\5d08s5yw9re2758z.ocx
c:\windows\5d21th9ef19z5.cpl
c:\windows\5d4dzteal9535.bin
c:\windows\5d9azddware1369.ocx
c:\windows\5e09s5eaz749.bin
c:\windows\5e5fthi9fz002.exe
c:\windows\5e85s9eaz2315.ocx
c:\windows\5ef3zir2579.dll
c:\windows\5efcthie519z9.exe
c:\windows\5f9dzownloader5999.bin
c:\windows\5z26threat16499.cpl
c:\windows\5z29spars5178.dll
c:\windows\5z6adown9oad5r436.ocx
c:\windows\5z94spye4.exe
c:\windows\610bdownlo5de9151z.cpl
c:\windows\6175spywarez899.dll
c:\windows\61vzrus95c5.exe
c:\windows\63869orm3c5z.exe
c:\windows\63z5ha9ktoolaa.exe
c:\windows\6413downzoad9r25395.bin
c:\windows\64299iruz75e5.cpl
c:\windows\6589vir4z.ocx
c:\windows\65fath5eat9798z.bin
c:\windows\664ezownl5ader9051.ocx
c:\windows\665spyware39z3.ocx
c:\windows\6747szarse29385.ocx
c:\windows\6959spy9z8.dll
c:\windows\6967szam5otc99.dll
c:\windows\699ctzief265.bin
c:\windows\6a69downl5ade91349z.bin
c:\windows\6d5cdownload9z1586.cpl
c:\windows\6e23stz5986.exe
c:\windows\6ecbaz9do5r601.dll
c:\windows\6ece9ir236z5.cpl
c:\windows\6ee5baz5d9or1345.cpl
c:\windows\6ee8t5rz9t353.ocx
c:\windows\6ezvir39975.bin
c:\windows\6zc5vir2598.cpl
c:\windows\7062bac9dzor599.exe
c:\windows\72ce9pars5283z.ocx
c:\windows\72z59acktool145.exe
c:\windows\734d9iz5488.bin
c:\windows\73e5vir9z81.bin
c:\windows\7459spars5z94.ocx
c:\windows\746z5ir9s293.dll
c:\windows\748et5reat93494z.bin
c:\windows\7565viru96zf.cpl
c:\windows\7617hzckto956d3.exe
c:\windows\76eeback5oor9z43.dll
c:\windows\7828tr5z3c9.exe
c:\windows\789bthreat95z08.exe
c:\windows\7975downl9ader187z.dll
c:\windows\79d9spywz5e169.ocx
c:\windows\79zbthi5f584.cpl
c:\windows\7a5z9hief2879.ocx
c:\windows\7af9stea52z92.cpl
c:\windows\7cc5ad9ware1064z.bin
c:\windows\7f05azdware559.ocx
c:\windows\7f50stzal1694.bin
c:\windows\7f55zhreat54699.cpl
c:\windows\7z99vir24675.ocx
c:\windows\81565ot-a-virus439z.ocx
c:\windows\8z54t59j3f.bin
c:\windows\8zbs59al2787.cpl
c:\windows\90055ackdooz2440.exe
c:\windows\905fsteal1z46.exe
c:\windows\910ad5waze2106.dll
c:\windows\91822viz5s6d1.ocx
c:\windows\9259zeal258.exe
c:\windows\93fdbzc5door4.exe
c:\windows\943zthreat9955.bin
c:\windows\9448downloader3035z.bin
c:\windows\945z0worm3b3.exe
c:\windows\9523thief3z15.cpl
c:\windows\954zddwar53236.dll
c:\windows\95e5sparse1z04.dll
c:\windows\96vir29z95.bin
c:\windows\97e75hizf2183.cpl
c:\windows\9820sp95zb.dll
c:\windows\98z32vir5s5d3.bin
c:\windows\99471virzs53c5.bin
c:\windows\9960troj3zc5.cpl
c:\windows\9c13sparsz555.ocx
c:\windows\9dd9stzal2325.ocx
c:\windows\9f0vzr585.bin
c:\windows\9z975troj4bb.ocx
c:\windows\9zf5parse2696.ocx
c:\windows\a.bat
c:\windows\b99down5oader988z.cpl
c:\windows\ef49i57z0.exe
c:\windows\system32\10339no5-a-vi9usz82.exe
c:\windows\system32\10z76viru92d5.bin
c:\windows\system32\110zsp5ware1519.ocx
c:\windows\system32\1159addw9re6z8.exe
c:\windows\system32\119zvirus5e9.exe
c:\windows\system32\11z75tr9j5a3.bin
c:\windows\system32\12590virus45z.dll
c:\windows\system32\12593not-a-v5rzs5d5.exe
c:\windows\system32\1263spzm5ot4559.ocx
c:\windows\system32\12812spam5o943ez.bin
c:\windows\system32\1292zs5y9ec.ocx
c:\windows\system32\129685irusz29.dll
c:\windows\system32\12zcste5l1419.bin
c:\windows\system32\1386zownl5ader809.cpl
c:\windows\system32\139z5v59us6ae.cpl
c:\windows\system32\1415zac9door1352.dll
c:\windows\system32\1439zdd5are14319.bin
c:\windows\system32\14559not-a-5izus653.bin
c:\windows\system32\14567zackt95l798.exe
c:\windows\system32\14568hac9z5ol231.bin
c:\windows\system32\14913sp5z55.bin
c:\windows\system32\154289p5mbot30z.bin
c:\windows\system32\15610n9t-a-vi5uz99.cpl
c:\windows\system32\156zt9ief2080.cpl
c:\windows\system32\1590ztroj60e.cpl
c:\windows\system32\15945hack9zol4fb.dll
c:\windows\system32\16175no5-a-zirus21e9.exe
c:\windows\system32\16859not9a-vizus109.ocx
c:\windows\system32\174eth95fz.dll
c:\windows\system32\17552hacktooz55a9.ocx
c:\windows\system32\175919iru51cz.dll
c:\windows\system32\18159vzrus4.cpl
c:\windows\system32\1827szambo5931.dll
c:\windows\system32\18386w95m44z.bin
c:\windows\system32\183z9ownloader352.dll
c:\windows\system32\1856zackdoor2195.ocx
c:\windows\system32\18639p5rse1z38.cpl
c:\windows\system32\18861hacktozl9e5.exe
c:\windows\system32\18953virus5zf.dll
c:\windows\system32\1905zhack5ool409.dll
c:\windows\system32\193sp558z9.exe
c:\windows\system32\1959downloader1z125.ocx
c:\windows\system32\19749hack5zolee.bin
c:\windows\system32\19752hack59oz4ce.bin
c:\windows\system32\19796trzj58.dll
c:\windows\system32\19998zp9153.cpl
c:\windows\system32\19dzvir252.ocx
c:\windows\system32\19z09troj757.exe
c:\windows\system32\19zabac9doo5992.bin
c:\windows\system32\1b5zad9ware41.dll
c:\windows\system32\1b75th9efz169.bin
c:\windows\system32\1de5sparsez913.ocx
c:\windows\system32\1z165hrea928804.ocx
c:\windows\system32\1z6539roj627.bin
c:\windows\system32\1z98back5oor22169.cpl
c:\windows\system32\200279ack5ooz7e5.cpl
c:\windows\system32\20046notza-9ir5s67a.bin
c:\windows\system32\20286spambo9715z.ocx
c:\windows\system32\20373n9t-z-vir5s544.cpl
c:\windows\system32\20799spamb5t9z5.exe
c:\windows\system32\2080559ruz380.exe
c:\windows\system32\20812h5ckt9zl34c.cpl
c:\windows\system32\21325trzj694.bin
c:\windows\system32\2158ziru92e2.exe
c:\windows\system32\219cvzr2485.cpl
c:\windows\system32\21a2ad9waze26665.bin
c:\windows\system32\22110n5t-z-virus6b69.cpl
c:\windows\system32\22395wormz2.exe
c:\windows\system32\225059ot-a-viruz61c.dll
c:\windows\system32\2251zhackto5l3a59.cpl
c:\windows\system32\22577hac5toz94ec.dll
c:\windows\system32\225995pambot668z.exe
c:\windows\system32\2282z9py345.ocx
c:\windows\system32\22860not-a5virz939a.bin
c:\windows\system32\22995aczdoor2497.dll
c:\windows\system32\22z115ot9a-virus462.ocx
c:\windows\system32\22zfthrea530039.ocx
c:\windows\system32\235589irus45z.bin
c:\windows\system32\23874not-5-virusz9f.exe
c:\windows\system32\2421bazkdoor91895.exe
c:\windows\system32\24z915irusc99.dll
c:\windows\system32\25055spzm9o51e7.dll
c:\windows\system32\2535v9r240z.bin
c:\windows\system32\2540a5dw9ze1332.ocx
c:\windows\system32\2552downlzad5r2692.exe
c:\windows\system32\25939tz5j4e0.exe
c:\windows\system32\25999spz508.bin
c:\windows\system32\26114hac5tool7ez9.cpl
c:\windows\system32\26292hac5tool2f6z.exe
c:\windows\system32\26567szy7639.exe
c:\windows\system32\271295orz532.dll
c:\windows\system32\27418not-a-vzrus593.bin
c:\windows\system32\2757zspam9ot775.cpl
c:\windows\system32\275z7worm50d9.ocx
c:\windows\system32\27907vi5zs1d4.dll
c:\windows\system32\279135pamzot59c.exe
c:\windows\system32\28036not-a-vir5s9bz.dll
c:\windows\system32\28483not95-vizus338.exe
c:\windows\system32\28523hack5oo91bz.cpl
c:\windows\system32\28774spazbot59a.exe
c:\windows\system32\2894zvi9us625.exe
c:\windows\system32\28z005acktool91e.cpl
c:\windows\system32\28z45w9rm18c.cpl
c:\windows\system32\29075zpamb9t7b0.exe
c:\windows\system32\2945zpyware27925.dll
c:\windows\system32\29474worm559z.dll
c:\windows\system32\29573s5yz49.exe
c:\windows\system32\29652vzrus599.cpl
c:\windows\system32\29655zpy455.ocx
c:\windows\system32\29b1downzoader32235.bin
c:\windows\system32\29c5steal9z0.cpl
c:\windows\system32\2acathr5at19z60.cpl
c:\windows\system32\2ce9szyware2605.exe
c:\windows\system32\2d31thre9z85705.dll
c:\windows\system32\2da6b5ckdo9rz219.dll
c:\windows\system32\2eafdo9nlzader1215.cpl
c:\windows\system32\2z165teal931.dll
c:\windows\system32\2z495ir953.bin
c:\windows\system32\2z901not-9-virus3665.ocx
c:\windows\system32\2z965troj25a9.exe
c:\windows\system32\2zf0th5ef629.dll
c:\windows\system32\2zfc59eal171.exe
c:\windows\system32\30029ackdzor1752.cpl
c:\windows\system32\3034zv5r9s6eb.dll
c:\windows\system32\30697not-a-virzs7359.bin
c:\windows\system32\3078d9wnloaderz125.bin
c:\windows\system32\30985spa59zt618.cpl
c:\windows\system32\31073zot-5-virus693.ocx
c:\windows\system32\3115ztroj5859.cpl
c:\windows\system32\3125z9roj568.bin
c:\windows\system32\31dzbackdoor39295.cpl
c:\windows\system32\31f95acz9oor2538.ocx
c:\windows\system32\31z81wo9m5ff5.exe
c:\windows\system32\322599py426z.bin
c:\windows\system32\3394thiez5909.cpl
c:\windows\system32\339spyz5d.exe
c:\windows\system32\340esp9rze5352.ocx
c:\windows\system32\34285py9za.dll
c:\windows\system32\35066zpambot958.exe
c:\windows\system32\3575parze912.cpl
c:\windows\system32\357ztroj961.ocx
c:\windows\system32\35997worz639.exe
c:\windows\system32\36act9i5f9z2.ocx
c:\windows\system32\37e7th5ez3969.exe
c:\windows\system32\391cthreat357z3.cpl
c:\windows\system32\3935downloa9er6z7.exe
c:\windows\system32\397z95r637.dll
c:\windows\system32\3a8aspy5ar95z.dll
c:\windows\system32\3ae2st5al2649z.ocx
c:\windows\system32\3c55sp9wzre1523.bin
c:\windows\system32\3ed1vir579z.dll
c:\windows\system32\3f52steal2945z.dll
c:\windows\system32\3z5spyware1948.dll
c:\windows\system32\40z1sp5r9e395.dll
c:\windows\system32\4395zddware2630.dll
c:\windows\system32\4419vir957cz.dll
c:\windows\system32\459zsteal1997.exe
c:\windows\system32\45z1sp9rse12565.dll
c:\windows\system32\464fspy9are853z.dll
c:\windows\system32\4765downlozder1975.bin
c:\windows\system32\4817wzr970f5.cpl
c:\windows\system32\4819t5reat999z.bin
c:\windows\system32\490zw59m3ff.dll
c:\windows\system32\497fthr5at1z502.ocx
c:\windows\system32\49z9thre5t24495.cpl
c:\windows\system32\4b5cadzware5639.cpl
c:\windows\system32\4c79v5rz557.exe
c:\windows\system32\4e03stzal5779.exe
c:\windows\system32\4e9e95zkdoor1559.dll
c:\windows\system32\4ed3sp9ware1958z.bin
c:\windows\system32\4eezb5ckdoo91259.cpl
c:\windows\system32\4z39spywar5459.ocx
c:\windows\system32\5050s9yware294z.ocx
c:\windows\system32\508abz9kdoor5465.dll
c:\windows\system32\5140spzr9e553.exe
c:\windows\system32\5158sp9warez641.dll
c:\windows\system32\5188zvirus319.bin
c:\windows\system32\5199szy795.bin
c:\windows\system32\522659eal3z75.exe
c:\windows\system32\52455tzal981.ocx
c:\windows\system32\5290zspy67c.dll
c:\windows\system32\5294wor5zee.exe
c:\windows\system32\536bspa5se951z.dll
c:\windows\system32\5425spz5bf9.dll
c:\windows\system32\5491zro5555.dll
c:\windows\system32\54azs5yware2699.bin
c:\windows\system32\54z759py109.ocx
c:\windows\system32\5504not-z-virus5d9.bin
c:\windows\system32\5510addware699z.ocx
c:\windows\system32\5519bac9zoor3032.bin
c:\windows\system32\5569virz191.dll
c:\windows\system32\5580spambot794z.dll
c:\windows\system32\56795spy45z.ocx
c:\windows\system32\56z4backdoor30529.ocx
c:\windows\system32\56zte5l1294.bin
c:\windows\system32\5784szy9are1285.ocx
c:\windows\system32\5815w9rm3d1z.bin
c:\windows\system32\58189worm1d2z.ocx
c:\windows\system32\5825zh9cktool21a.exe
c:\windows\system32\5828z5ambot8e9.bin
c:\windows\system32\58352virusze09.cpl
c:\windows\system32\584zviru579d.cpl
c:\windows\system32\5852sz95are136.dll
c:\windows\system32\58869virus1az.exe
c:\windows\system32\588zste59427.ocx
c:\windows\system32\58ez59eal2806.cpl
c:\windows\system32\5925d9wnloadzr2773.dll
c:\windows\system32\592bzhief3020.dll
c:\windows\system32\5954t5rezt210.cpl
c:\windows\system32\5970sparsz595.exe
c:\windows\system32\59814h9cktool2bz.dll
c:\windows\system32\5989viz1907.ocx
c:\windows\system32\59910spz505.exe
c:\windows\system32\59996worm30z.bin
c:\windows\system32\59b3tz59at30683.bin
c:\windows\system32\59z82spy49e.dll
c:\windows\system32\5b7bb5z9door713.bin
c:\windows\system32\5c00backdozr19089.ocx
c:\windows\system32\5c9a5hreaz2329.cpl
c:\windows\system32\5cfadd9arez623.bin
c:\windows\system32\5cz8thief13489.cpl
c:\windows\system32\5d68add9aze3256.bin
c:\windows\system32\5df5spyware184z9.bin
c:\windows\system32\5e91zparse1245.bin
c:\windows\system32\5f39spyza9e1376.dll
c:\windows\system32\5f549zr26375.dll
c:\windows\system32\5fz4thief2949.cpl
c:\windows\system32\5z30addware9127.bin
c:\windows\system32\5z32t95ef2322.dll
c:\windows\system32\5z45threat35839.ocx
c:\windows\system32\5z4c9parse596.bin
c:\windows\system32\5z54troj19c.exe
c:\windows\system32\5z5dth9ef3032.dll
c:\windows\system32\5z75sparse98755.ocx
c:\windows\system32\5z79s5ea91265.cpl
c:\windows\system32\5zacspar592527.bin
c:\windows\system32\601ct9reatz2755.bin
c:\windows\system32\6085zir639.dll
c:\windows\system32\60a2z5arse969.exe
c:\windows\system32\6165zackdoor599.dll
c:\windows\system32\6189ad5zare2623.exe
c:\windows\system32\63bedo9nloader875z.cpl
c:\windows\system32\63za5p9rse709.exe
c:\windows\system32\641thief9154z.bin
c:\windows\system32\64475o9-a-viruz255.bin
c:\windows\system32\6534t5ie91032z.ocx
c:\windows\system32\66a1th5ez597.ocx
c:\windows\system32\66e3spywa5z21549.bin
c:\windows\system32\66f4t9ief1575z.cpl
c:\windows\system32\6735spambzt149.cpl
c:\windows\system32\67459ot-a-zirus17f.dll
c:\windows\system32\67d5download9rz108.bin
c:\windows\system32\6836szar9e957.dll
c:\windows\system32\6919downloazer23755.bin
c:\windows\system32\691tr9j56z.bin
c:\windows\system32\6932hacktz5l92d.dll
c:\windows\system32\69bft5ief37z.bin
c:\windows\system32\6a8athreat1z952.exe
c:\windows\system32\6eaz9ackdoor1295.bin
c:\windows\system32\6z53down9oader1193.exe
c:\windows\system32\6z59thr9at6733.exe
c:\windows\system32\6ze8d5wnloade9304.cpl
c:\windows\system32\7059szeal799.cpl
c:\windows\system32\7089tz5j290.dll
c:\windows\system32\70c1ba9kdooz18995.exe
c:\windows\system32\71be9zea52791.ocx
c:\windows\system32\71f5tea91074z.cpl
c:\windows\system32\737csparse1z895.bin
c:\windows\system32\7460v5rus7zd9.ocx
c:\windows\system32\75c6downloadez9415.exe
c:\windows\system32\75d9thre5t39z0.cpl
c:\windows\system32\762cbackd5oz3059.ocx
c:\windows\system32\76z9ddware2570.ocx
c:\windows\system32\7705spa9bzt35b.bin
c:\windows\system32\77585hre9z26077.bin
c:\windows\system32\7759w9rm6c5z.ocx
c:\windows\system32\785bsp9rse2609z.ocx
c:\windows\system32\7863d5wzloa9er137.cpl
c:\windows\system32\7959steal1953z.exe
c:\windows\system32\795czackdoor29395.dll
c:\windows\system32\7999v9ru56z5.dll
c:\windows\system32\79fz5ackdoo92051.dll
c:\windows\system32\79z7downloader1595.dll
c:\windows\system32\79zesp9rs5473.dll
c:\windows\system32\7be39hie52554z.bin
c:\windows\system32\7c255hze9t23218.dll
c:\windows\system32\7cbbdzwnload5r1489.ocx
c:\windows\system32\7cef5p9zare3265.bin
c:\windows\system32\7cf95hief19z0.dll
c:\windows\system32\7d1fa5d9aze342.cpl
c:\windows\system32\7dd2t5r9az3774.cpl
c:\windows\system32\7e22dow5loader3z69.ocx
c:\windows\system32\7eaasp9war5587z.cpl
c:\windows\system32\7fz45hreat9440.dll
c:\windows\system32\7z0aad59are652.exe
c:\windows\system32\81539pz995.ocx
c:\windows\system32\8156w95z589.dll
c:\windows\system32\8279vizusf25.bin
c:\windows\system32\8293ha9ztool5ce.ocx
c:\windows\system32\8352s9yzd9.cpl
c:\windows\system32\8458not-a-5iruzc79.dll
c:\windows\system32\84599roz759.dll
c:\windows\system32\8558zacktool29e.exe
c:\windows\system32\85959ro578z.exe
c:\windows\system32\8797not-a-vi5zs69.cpl
c:\windows\system32\8955spazbot7f1.exe
c:\windows\system32\89z5teal39.dll
c:\windows\system32\8z99no5-a-virus3aa.cpl
c:\windows\system32\9015p9mboz520.ocx
c:\windows\system32\9066spyzare2452.ocx
c:\windows\system32\90965roz445.cpl
c:\windows\system32\91509hackto5lzd9.exe
c:\windows\system32\915vir1766z.exe
c:\windows\system32\917aszyware5799.dll
c:\windows\system32\9253virus9z.dll
c:\windows\system32\925zwor557f.cpl
c:\windows\system32\93117worm594z.bin
c:\windows\system32\9315virzs3f8.dll
c:\windows\system32\935z2spy673.dll
c:\windows\system32\937z2virus1315.bin
c:\windows\system32\9391hacktz5l4b2.ocx
c:\windows\system32\9559zpy6b9.bin
c:\windows\system32\959szy1c45.ocx
c:\windows\system32\95f0steal695z.cpl
c:\windows\system32\95z7worm151.cpl
c:\windows\system32\9612baczd5or3121.cpl
c:\windows\system32\9681not-z-virus3265.ocx
c:\windows\system32\9698tzo592.cpl
c:\windows\system32\97585virus35z.cpl
c:\windows\system32\9758virus39z.exe
c:\windows\system32\978steaz1532.dll
c:\windows\system32\9819t59zcf.cpl
c:\windows\system32\9865not-a-v9zu5747.exe
c:\windows\system32\98aba5kdozr995.exe
c:\windows\system32\9976zhre5t32112.dll
c:\windows\system32\99z9worma25.dll
c:\windows\system32\9a635zreat22952.exe
c:\windows\system32\9b5bdownloader22z7.bin
c:\windows\system32\9b8fthizf1395.cpl
c:\windows\system32\9b955hizf1310.ocx
c:\windows\system32\9de5steaz986.bin
c:\windows\system32\9f05s5ywaze56.bin
c:\windows\system32\9z133spambot2285.exe
c:\windows\system32\9z24spy5are67.dll
c:\windows\system32\9z552vir5s4c5.cpl
c:\windows\system32\ad0spazse9485.dll
c:\windows\system32\c52thiez2395.exe
c:\windows\system32\cf5szywa9e2711.exe
c:\windows\system32\dfd9zars5894.ocx
c:\windows\system32\drivers\ESQULtqsnfghisaeferbjhikhhqebhihjeuqx.sys
c:\windows\system32\dz5th9eat18351.exe
c:\windows\System32\ESQULcjcwtqrojimswribadyjpphtqoddgcks.dll
c:\windows\system32\ESQULjvaaxwxjxtlxkwatpwvtmetepyaujgam.dll
c:\windows\system32\ESQULzcounter
c:\windows\system32\f43thief9153z.cpl
c:\windows\system32\lowsec
c:\windows\system32\lowsec\local.ds
c:\windows\system32\lowsec\user.ds
c:\windows\system32\z0e8th5eat39813.cpl
c:\windows\system32\z169downloa9er225.ocx
c:\windows\system32\z1715virus591.exe
c:\windows\system32\z20359py3ac.bin
c:\windows\system32\z25ft9ief1513.ocx
c:\windows\system32\z30805orm193.ocx
c:\windows\system32\z381troj3a59.cpl
c:\windows\system32\z4559spy4c5.dll
c:\windows\system32\z4903sp564f.exe
c:\windows\system32\z529v9rus75e.exe
c:\windows\system32\z550sp959.ocx
c:\windows\system32\z5aeaddw9re455.bin
c:\windows\system32\z5ccdo5nloader1449.cpl
c:\windows\system32\z6536wor95e1.exe
c:\windows\system32\z6dcdownl5a9er926.exe
c:\windows\system32\z6dsp9ware8875.dll
c:\windows\system32\z799vi5us3fe.ocx
c:\windows\system32\z80095orm68d.bin
c:\windows\system32\z8502t9oj7e6.bin
c:\windows\system32\z89395irusd2.bin
c:\windows\system32\z94bback9oor1052.ocx
c:\windows\system32\z94threat23905.bin
c:\windows\system32\z9593troj554.bin
c:\windows\system32\z95cvir119.bin
c:\windows\system32\z9766viru950f.ocx
c:\windows\system32\zb9espywar51031.dll
c:\windows\system32\zc21dow95oader2600.cpl
c:\windows\system32\zd05vir3249.ocx
c:\windows\system32\zfbadownlo5d9r2510.ocx
c:\windows\system32\zfe4steal93555.exe
c:\windows\system32\zffbt9r5at19167.exe
c:\windows\z09265roj627.bin
c:\windows\z2825virus59d.ocx
c:\windows\z4545parse1949.cpl
c:\windows\z4855hr9at5207.dll
c:\windows\z520tro951d.exe
c:\windows\z5488n9t-a-vir5s65f.ocx
c:\windows\z555troj958.ocx
c:\windows\z5709roj5a3.ocx
c:\windows\z585ba9kdoor283.dll
c:\windows\z651a9dware2901.exe
c:\windows\z9319worm3575.bin
c:\windows\z95755orm1d6.cpl
c:\windows\z9725spy5c15.bin
c:\windows\z9aes5ars9546.bin
c:\windows\zc95steal2915.exe
c:\windows\zcea5ow9loader3174.cpl
c:\windows\zd22spa5s92935.exe
----- BITS: Il y a peut-être des sites infectés -----
hxxp://lawfirmincubator.com
.
((((((((((((((((((((((((((((((((((((((( Pilotes/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_ESQULserv.sys
-------\Service_ESQULserv.sys
-------\Service_Ias
((((((((((((((((((((((((((((( Fichiers créés du 2009-10-19 au 2009-11-19 ))))))))))))))))))))))))))))))))))))
.
2009-11-19 17:26 . 2009-11-19 17:31 4096 d-----w- c:\users\Bruno\AppData\Local\temp
2009-11-19 17:26 . 2009-11-19 17:26 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-11-19 16:02 . 2009-11-19 16:02 -------- dc----w- c:\windows\system32\DRVSTORE
2009-11-19 16:02 . 2009-09-23 12:55 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2009-11-19 16:01 . 2009-11-19 16:02 4096 dc-h--w- c:\programdata\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}
2009-11-19 16:01 . 2009-10-03 08:15 2924848 -c--a-w- c:\programdata\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe
2009-11-19 16:01 . 2009-11-19 16:01 -------- d-----w- c:\programdata\Lavasoft
2009-11-19 16:01 . 2009-11-19 16:01 -------- d-----w- c:\program files\Lavasoft
2009-11-19 15:25 . 2009-11-19 15:25 4096 d-----w- c:\program files\RegCleaner
2009-11-19 15:23 . 2009-11-19 15:24 4096 d-----w- c:\program files\CCleaner
2009-11-19 15:03 . 2009-05-09 05:50 915456 ----a-w- c:\windows\system32\wininet.dll
2009-11-19 15:03 . 2009-05-09 05:34 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-11-19 12:37 . 2009-09-15 11:55 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-11-19 12:37 . 2009-09-15 11:55 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-11-19 12:00 . 2009-09-15 11:54 52368 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-11-19 12:00 . 2009-09-15 11:54 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-11-19 12:00 . 2009-09-15 11:59 1279968 ----a-w- c:\windows\system32\aswBoot.exe
2009-11-19 12:00 . 2009-09-15 11:55 53328 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2009-11-19 12:00 . 2009-09-15 11:53 97480 ----a-w- c:\windows\system32\AVASTSS.scr
2009-11-19 12:00 . 2003-03-18 19:14 499712 ----a-w- c:\windows\system32\MSVCP71.dll
2009-11-19 12:00 . 2009-11-19 12:00 -------- d-----w- c:\program files\Alwil Software
2009-11-19 11:48 . 2009-09-10 13:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-11-19 11:42 . 2009-11-19 11:48 4096 d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-11-19 11:42 . 2009-11-19 11:42 -------- d-----w- c:\programdata\Malwarebytes
2009-11-19 11:42 . 2009-09-10 13:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-10-23 23:39 . 2009-11-17 19:04 -------- d-sh--w- c:\users\Bruno\AppData\Roaming\lowsec
2009-10-23 19:03 . 2009-11-19 12:38 -------- d-----w- c:\programdata\87632228
2009-10-23 19:03 . 2009-11-19 12:38 -------- d-----w- c:\programdata\56566836
2009-10-23 19:03 . 2009-11-19 12:38 -------- d-----w- c:\programdata\57173730
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-11-19 17:30 . 2009-02-06 18:19 16608 ----a-w- c:\windows\gdrv.sys
2009-11-19 17:22 . 2006-11-02 15:48 690594 ----a-w- c:\windows\system32\perfh00C.dat
2009-11-19 17:22 . 2006-11-02 15:48 117366 ----a-w- c:\windows\system32\perfc00C.dat
2009-11-19 16:18 . 2009-02-06 18:20 4096 d-----w- c:\program files\Common Files\InstallShield
2009-11-19 16:14 . 2009-02-06 18:20 4096 d--h--w- c:\program files\InstallShield Installation Information
2009-11-19 13:49 . 2009-02-06 18:16 1356 ----a-w- c:\users\Bruno\AppData\Local\d3d9caps.dat
2009-10-27 12:24 . 2009-02-08 15:48 1 ----a-w- c:\users\Bruno\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2009-10-19 17:50 . 2009-10-19 17:50 653560 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-06 1232896]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2006-11-02 125440]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 201728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2009-04-06 1006264]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-02-09 13683232]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-02-09 92704]
"snpstd2"="c:\windows\vsnpstd2.exe" [2007-04-13 307200]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-09-15 81000]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2008-06-27 6295552]
"Skytel"="Skytel.exe" - c:\windows\SkyTel.exe [2008-06-25 1826816]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" - c:\windows\KHALMNPR.Exe [2007-04-11 56080]
c:\users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-9-12 384000]
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2009-2-6 692224]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
R0 Lbd;Lbd;c:\windows\System32\drivers\Lbd.sys [19/11/2009 17:02 64288]
R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [19/11/2009 13:37 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [19/11/2009 13:37 20560]
R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [19/11/2009 13:00 53328]
R2 GEST Service;GEST Service for program management.;c:\program files\GIGABYTE\EnergySaver\GSvr.exe [06/02/2009 19:20 80392]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [24/09/2009 12:17 1169232]
--- Autres Services/Pilotes en mémoire ---
*Deregistered* - mbr
.
Contenu du dossier 'Tâches planifiées'
2009-11-19 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 13:06]
2009-11-19 c:\windows\Tasks\User_Feed_Synchronization-{B36F91AB-5007-4DBE-9C9B-6B38C4097178}.job
- c:\windows\system32\msfeedssync.exe [2009-11-19 11:31]
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-11-19 18:31
Windows 6.0.6000 NTFS
Recherche de processus cachés ...
Recherche d'éléments en démarrage automatique cachés ...
Recherche de fichiers cachés ...
Scan terminé avec succès
Fichiers cachés: 0
**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------
- - - - - - - > 'Explorer.exe'(2100)
c:\program files\Logitech\SetPoint\lgscroll.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\windows\system32\rundll32.exe
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\windows\system32\WUDFHost.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\Alwil Software\Avast4\ashMaiSv.exe
c:\program files\Alwil Software\Avast4\ashWebSv.exe
c:\windows\System32\rundll32.exe
c:\program files\Alwil Software\Avast4\ashDisp.exe
c:\program files\OpenOffice.org 3\program\soffice.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\ehome\ehmsas.exe
c:\program files\Common Files\Logitech\KhalShared\KHALMNPR.EXE
c:\program files\OpenOffice.org 3\program\soffice.bin
c:\program files\Lavasoft\Ad-Aware\AAWTray.exe
.
**************************************************************************
.
Heure de fin: 2009-11-19 18:34 - La machine a redémarré
ComboFix-quarantined-files.txt 2009-11-19 17:34
Avant-CF: 36 633 808 896 octets libres
Après-CF: 37 263 171 584 octets libres
- - End Of File - - 10F61E9C830F1FC2DC5E612F40C1FD80
HGG
