-
Compteur de contenus
14 -
Inscription
-
Dernière visite
Type de contenu
Profils
Forums
Blogs
Tout ce qui a été posté par obrigadoo
-
infecter par TR/Dldr.Bagle.cez
obrigadoo a répondu à un(e) sujet de obrigadoo dans Analyses et éradication malwares
ça y est j'ai scanner tous les disques j'ai changer la configuration de antivir j'ai fait un scan des fichiers zip seulement il a trouver quelques fichiers infecter mais j'ai pu les suprrimer donc je pense que tous est bon maintenant -
infecter par TR/Dldr.Bagle.cez
obrigadoo a répondu à un(e) sujet de obrigadoo dans Analyses et éradication malwares
bonjour impossible de passer l'antivirus jusqu'au bout et pourtant je n'ai fais que sur un seul disque dur de 300 giga il a scanner pendant 9 heure mais vers la fin il a planter, j'ai eu aucun rapport alors qu'il avait trouver 28 infection le truc c'est qu'il bouffe tous l'espace disque de ma partition window et quand il n'y a plus de place il se bloque et c'est super long car il controle absolument tous les fichiers -
infecter par TR/Dldr.Bagle.cez
obrigadoo a répondu à un(e) sujet de obrigadoo dans Analyses et éradication malwares
bonjour je suis toujours sur le même xp, celui d'ou j'ai lancer combofix mais je controle tous les disques, les 2 XP et les disques de données hum c'est bien ce que je pensait je suis seulement a 7,7% et ça fait 7 heures que antivir tourne et il a trouver 8 fichiers infecté pour l'instant ce qui est bizare, car j'ai fait un scan avec ZSc.exe juste avant et qui n'avait rien trouvé je pense pas que j'aurais le résultat du scan avant demain soir :s a toute -
infecter par TR/Dldr.Bagle.cez
obrigadoo a répondu à un(e) sujet de obrigadoo dans Analyses et éradication malwares
bonsoir j'ai réussi a récuperer le multi-boot via les proprietés systeme dans l'onglet avancé j'essai de faire un scan complet avec antivir mais c'est super long je crois que ça va me prendre tous le weekend pour tous controler -
infecter par TR/Dldr.Bagle.cez
obrigadoo a répondu à un(e) sujet de obrigadoo dans Analyses et éradication malwares
bonjour j'ai mis du temps mais j'y suis arriver j'ai tous effacer a la main, Zsc ne detecte plus rien et l'antivirus fonctionne merci beaucoup apparement y'a plus de virus -
infecter par TR/Dldr.Bagle.cez
obrigadoo a répondu à un(e) sujet de obrigadoo dans Analyses et éradication malwares
bon bah y'a un problème :s pour faire le scan ça marche mais après quand je click sur "desinfect" le programme plante au bout de 5 ou 6 fichiers j'ai essayer plusieurs fois mais rien n'y fait y a-t-il un autre programme similaire ? ou sinon je peux les supprimer manuellement, j'espère qu'il n'y a pas de risque a ouvrir un fichier infecter du moment que je ne lance pas le .exe bye -
infecter par TR/Dldr.Bagle.cez
obrigadoo a répondu à un(e) sujet de obrigadoo dans Analyses et éradication malwares
bonjour dans Zip_Scan il y a l'option Delete qui est cocher par default juste en dessous de desinfect je dois la décocher ou pas ? -
infecter par TR/Dldr.Bagle.cez
obrigadoo a répondu à un(e) sujet de obrigadoo dans Analyses et éradication malwares
bonjour alors j'ai tout fait comme tu m'a dit j'ai copié le dossier INFECTED, il n'y avait qu'une vingtaine de fichiers que j'ai pu récupérer dedans mais je n'ai pas retrouver les anciens, je pense que j'ai du vidé la quarantaine avant j'ai désinstallé et réinstallé antivir sans activé le guard et voici le log de zip_scan (qu-est-ce que c'est qu'un faux positif ?) -- Report -- . D:\DS\micro\beup\dlditool-win32.zip | patch/crack.exe <-- FOUND D:\songbook to copy\Guitar Lesson - Chordal Arpeggios.zip | crack/crack.exe <-- FOUND D:\songbook to copy\Guitar Techniques - Arpeggios For Accompaniment.zip | keygen/crack.exe <-- FOUND D:\Azureus\jre\lib\deploy\ffjcext.zip | patch/keygen.exe <-- FOUND D:\backup divers\scan\advscan1.zip | crack/crack.exe <-- FOUND D:\backup divers\scan\advscan2.zip | keygen/patch.exe <-- FOUND D:\backup divers\scan\advscan3zip | crack/crack.exe <-- FOUND D:\backup divers\amsn music-1.5.zip | keygen/keygen.exe <-- FOUND D:\backup divers\apprendre\dactylo\Dactylo.zip | crack/crack.exe <-- FOUND D:\backup divers\apprendre\mbFlash_win-1.0.zip | crack/keygen.exe <-- FOUND D:\backup divers\apprendre\Vb5_dll.zip | crack/keygen.exe <-- FOUND D:\backup divers\emule morph\Incoming\Gemstones And Crystals.zip | patch/crack.exe <-- FOUND D:\backup divers\emule morph\Incoming\[GUITARE - TECHNIQUE - METHODE] - Tapping.zip | patch/patch.exe <-- FOUND D:\backup divers\K!tv c+\AidePlugin.zip | patch/patch.exe <-- FOUND D:\backup divers\K!tv c+\Grincheux_17.zip | crack/patch.exe <-- FOUND D:\backup divers\libmp3lame-win-3.97 .zip | keygen/crack.exe <-- FOUND D:\backup divers\libmp3lame-win-3.97.zip | keygen/patch.exe <-- FOUND D:\backup divers\msgothic.zip | keygen/crack.exe <-- FOUND D:\backup divers\strong dc Downloads\doc compresser\meuhmeuhtv2.30.zip | crack/patch.exe <-- FOUND D:\backup divers\strong dc++\Downloads\(Guitar) Sweep picked arpeggios (tab) advanced.zip | crack/keygen.exe <-- FOUND D:\backup divers\strong dc++\Downloads\Advanced Monster Tapping-filer.zip | crack/crack.exe <-- FOUND D:\backup divers\strong dc++\Downloads\My Sheets.zip | crack/patch.exe <-- FOUND D:\backup divers\strong dc++\Downloads\Open Country Lick (Mp3 And Tab).zip | crack/patch.exe <-- FOUND D:\guitar exercice\A Dorian Tapping Lick (Mp3 And Tab).zip | patch/patch.exe <-- FOUND D:\guitar exercice\download diver gp3\Night Ranger | patch/crack.exe <-- FOUND D:\guitar exercice\download diver gp3\Paul Gilbert Licks (Tab).zip | keygen/patch.exe <-- FOUND D:\guitar exercice\download diver gp3\Rainbow - Stranger in US ALL.zip | keygen/keygen.exe <-- FOUND D:\guitar exercice\download diver gp3\rock_and_roll_over.zip | keygen/patch.exe <-- FOUND D:\guitar exercice\download diver gp3\Terror Death Licks.zip | keygen/crack.exe <-- FOUND D:\HD 2 GIGA\NEW BOOK pavle+++\Choirgirl.zip | patch/keygen.exe <-- FOUND D:\HD 2 GIGA\NEW BOOK pavle+++\train.zip | patch/keygen.exe <-- FOUND D:\HD 2 GIGA\NEW BOOK pavle+++\YG Vol.1 RK.zip | crack/keygen.exe <-- FOUND D:\HD 2 GIGA\divers foxfire\.1archivA.zip | crack/crack.exe <-- FOUND D:\HD 2 GIGA\divers foxfire\plt\champ\[eBook FR] Les champignons - G. Pacioni - Grands guides nature Nathan (420 espèces, descriptions détaillées, photos couleur).zip | crack/keygen.exe <-- FOUND D:\HD 2 GIGA\divers dl\Advanced Monster Tapping-filer.zip | keygen/keygen.exe <-- FOUND D:\HD 2 GIGA\lycée thème\PROJET\cu1\MO-CU1\MU-CU1\MU-CU1_etau.zip | keygen/patch.exe <-- FOUND D:\HD 2 GIGA\lycée thème\PROJET\cu1\MO-CU1\MU-CU1\MU-CU1_plaque+equerre.zip | crack/crack.exe <-- FOUND D:\HD 2 GIGA\lycée thème\PROJET\nc-Bo09_30 10-02-05.zip | keygen/keygen.exe <-- FOUND D:\HD 2 GIGA\lycée thème\PROJET\étaut mors\MU-CU1_etau\MU-CU1_etau.zip | crack/keygen.exe <-- FOUND D:\HD 2 GIGA\lycée thème\PROJET\étaut mors\MU-CU1_plaque+equerre\MU-CU1_plaque+equerre.zip | keygen/patch.exe <-- FOUND D:\HD 2 GIGA\lycée thème\PROJET\étaut mors\étaut mors.zip | crack/patch.exe <-- FOUND D:\HD 2 GIGA\Nouveau dossier\autres\msnpolygamy.zip | crack/patch.exe <-- FOUND D:\HD 2 GIGA\Nouveau dossier\autre lycée.zip | patch/keygen.exe <-- FOUND D:\HD 2 GIGA\Nouveau dossier\nenew\2001-2002\t pro 2001-2002.zip | patch/keygen.exe <-- FOUND D:\HD 2 GIGA\Nouveau dossier\R.zip | crack/patch.exe <-- FOUND D:\mp3\Divers\castellano\mp3 nihon\YUTAKA.zip | keygen/keygen.exe <-- FOUND D:\mp3\Divers\castellano\mp3 nihon\[Nipponsei] Akahori Gedou Hour Rabuge - Nesshou[Momoi Haruko].zip | crack/patch.exe <-- FOUND D:\mp3\Divers\castellano\mp3 nihon\[Nipponsei] BartenderHajimari [Natural High].zip | crack/crack.exe <-- FOUND D:\mp3\Divers\castellano\nihon\Kana-no-quiz\library.zip | crack/crack.exe <-- FOUND D:\mp3\Divers\castellano\nihon\pod101\Newbie\kanjimots.zip | crack/keygen.exe <-- FOUND D:\photoooo\Nouveau dossier\01.zip | crack/patch.exe <-- FOUND D:\photoooo\Nouveau dossier\02.zip | patch/patch.exe <-- FOUND D:\scan 2\BOOK\Creative Guitar 1 - Cutting.zip | keygen/patch.exe <-- FOUND D:\scan 2\BOOK\LMDMF.zip | keygen/keygen.exe <-- FOUND D:\scan 2\BOOK\USDownloader.zip | keygen/crack.exe <-- FOUND D:\tEMP XP 10 giga\msgothic.zip | patch/keygen.exe <-- FOUND G:\Documents and Settings\zippy\Bureau\TEMPORARY\JkDefrag-3.36.zip | patch/patch.exe <-- FOUND G:\Documents and Settings\zippy\Bureau\TEMPORARY\Linux.France..zip | crack/keygen.exe <-- FOUND G:\Documents and Settings\zippy\Bureau\TEMPORARY\micro.zip | patch/crack.exe <-- FOUND G:\Documents and Settings\zippy\Bureau\TEMPORARY\primax colorado30_en98.zip | keygen/patch.exe <-- FOUND G:\Documents and Settings\zippy\Bureau\TEMPORARY\guitaralready\ G:\Documents and Settings\zippy\Bureau\TEMPORARY\The best.zip | keygen/patch.exe <-- FOUND G:\Documents and Settings\zippy\Bureau\TEMPORARY\tki_gr_.zip | keygen/patch.exe <-- FOUND G:\Documents and Settings\zippy\Bureau\TEMPORARY\ultimate guitar chord trainer UGCTWin-Trial.zip | keygen/patch.exe <-- FOUND G:\Documents and Settings\zippy\Bureau\TEMPORARY\vdownloader.zip | crack/keygen.exe <-- FOUND G:\Documents and Settings\zippy\Bureau\TEMPORARY\WinampPro%20plus 4.994067e-304ssentials%5BFRENCHD4.994067e-304HotfileD.zip | keygen/patch.exe <-- FOUND G:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.6.0.b105\core1.zip | keygen/crack.exe <-- FOUND G:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.6.0.b105\core2.zip | patch/patch.exe <-- FOUND G:\Program Files\Fichiers communs\Java\Update\Base Images\jre1.6.0.b105\core3.zip | keygen/keygen.exe <-- FOUND G:\Program Files\Java\jre1.6.0_07\lib\deploy\ffjcext.zip | keygen/patch.exe <-- FOUND G:\Program Files\OpenOffice.org 3\Basis\share\config\images.zip | crack/crack.exe <-- FOUND G:\Program Files\OpenOffice.org 3\Basis\share\config\images_classic.zip | crack/patch.exe <-- FOUND G:\Program Files\OpenOffice.org 3\Basis\share\config\images_crystal.zip | patch/crack.exe <-- FOUND G:\Program Files\OpenOffice.org 3\Basis\share\config\images_hicontrast.zip | crack/patch.exe <-- FOUND G:\Program Files\OpenOffice.org 3\Basis\share\config\images_industrial.zip | keygen/keygen.exe <-- FOUND G:\Program Files\OpenOffice.org 3\Basis\share\config\images_tango.zip | patch/keygen.exe <-- FOUND G:\Program Files\OpenOffice.org 3\Basis\share\config\wizard\web\buttons\glas-blue.zip | patch/keygen.exe <-- FOUND G:\Program Files\OpenOffice.org 3\Basis\share\config\wizard\web\buttons\glas-green.zip | keygen/crack.exe <-- FOUND G:\Program Files\OpenOffice.org 3\Basis\share\config\wizard\web\buttons\glas-red.zip | patch/crack.exe <-- FOUND G:\Program Files\OpenOffice.org 3\Basis\share\config\wizard\web\buttons\round-gorilla.zip | keygen/patch.exe <-- FOUND G:\Program Files\OpenOffice.org 3\Basis\share\config\wizard\web\buttons\round-white.zip | crack/patch.exe <-- FOUND G:\Program Files\OpenOffice.org 3\Basis\share\config\wizard\web\buttons\simple.zip | crack/crack.exe <-- FOUND G:\Program Files\OpenOffice.org 3\Basis\share\config\wizard\web\buttons\square-blue.zip | keygen/crack.exe <-- FOUND G:\Program Files\OpenOffice.org 3\Basis\share\config\wizard\web\buttons\square-gray.zip | keygen/crack.exe <-- FOUND G:\Program Files\OpenOffice.org 3\Basis\share\config\wizard\web\buttons\square-green.zip | crack/keygen.exe <-- FOUND G:\Program Files\OpenOffice.org 3\Basis\share\config\wizard\web\buttons\square-red.zip | keygen/keygen.exe <-- FOUND G:\Program Files\OpenOffice.org 3\Basis\share\config\wizard\web\buttons\square-yellow.zip | crack/keygen.exe <-- FOUND G:\Program Files\OpenOffice.org 3\share\config\images_brand.zip | crack/patch.exe <-- FOUND G:\Program Files\Sony\Noise Reduction Plug-In\sfnrpack.zip | patch/patch.exe <-- FOUND G:\Program Files\Sony\Sound Forge 9.0\FileIO Plug-Ins\ac3plug\ac3plug.zip | crack/crack.exe <-- FOUND G:\Program Files\Sony\Sound Forge 9.0\FileIO Plug-Ins\mcplug\mcplug.zip | patch/crack.exe <-- FOUND G:\Program Files\Sony\Sound Forge 9.0\Forge90.zip | patch/keygen.exe <-- FOUND G:\Program Files\Windows Media Player\npdrmv2.zip | keygen/keygen.exe <-- FOUND G:\Program Files\Windows Media Player\npds.zip | crack/crack.exe <-- FOUND H:\Dune Buggy.zip | crack/patch.exe <-- FOUND H:\Feather Pluck'n.zip | crack/keygen.exe <-- FOUND H:\FretsOnFire-1.3.110-win32.zip | keygen/keygen.exe <-- FOUND H:\informatique book\a_practical_guide_to_linux_commands_editors_and_sh_ell_programming.zip | patch/patch.exe <-- FOUND H:\informatique book\ebook.Beginning_Ubuntu_Linux_From_Novice_to_Professional.1590596277.zip | crack/keygen.exe <-- FOUND H:\Ladybug.zip | keygen/keygen.exe <-- FOUND H:\torrent\fini\10240\p90.part01.zip | patch/keygen.exe <-- FOUND H:\torrent\fini\10240\p90.part02.zip | patch/keygen.exe <-- FOUND H:\torrent\fini\10240\p90.part03.zip | keygen/keygen.exe <-- FOUND H:\torrent\fini\10240\p90.part04.zip | keygen/crack.exe <-- FOUND H:\torrent\fini\10240\p90.part05.zip | crack/patch.exe <-- FOUND H:\torrent\fini\10240\p90.part06.zip | patch/crack.exe <-- FOUND H:\torrent\fini\Ubuntu Pocket guide\ubuntupocketguide-v1-1.zip | crack/keygen.exe <-- FOUND H:\vdownloader.zip | patch/patch.exe <-- FOUND . -- EOF -- voila -
infecter par TR/Dldr.Bagle.cez
obrigadoo a répondu à un(e) sujet de obrigadoo dans Analyses et éradication malwares
Bonjour a tous je n'ai toujours pas le multiboot de window mais je vais chercher du coté du boot.ini le programme avira entivirus ne fonctionne plus il y a un message d'erreur qui me dit "avcenter.exe n'est pas une application Win32 valide." sinon j'ai pas tous commpris dans le rappport ça a supprimer les virus ? et ça n'a pas effacer les fichiers infecter ? je n'ose plus aller dans mes dossiers de peur de les contaminer car je ne vois que les dossier sur le disque dur c: alors que j'ai un deuxième windows sur le g, et d'autre disque dur dont je ne sais pas si ils sont infecté doit-je refaire la manipulation sur l'autre disque une foit que j'aurais réussi a le faire démarrer ? en tout cas merci pour ton aide tous cela aura au moins servit de leçon a mes enfants je sait pas ce qu'ils ont foutu mais cette fois ci ils ont fait fort lol, mais dans un sens ils se sont puni tous seul, car ça fait plusieur jours qu'il ne peuvent pas utilisé l'ordinateur -
infecter par TR/Dldr.Bagle.cez
obrigadoo a répondu à un(e) sujet de obrigadoo dans Analyses et éradication malwares
bonjour bonjour alors voici le résultat du blabla.exe (ça a pris pas mal de temps) comme le rapport fait 620 ligne pour éviter le flood j'ai l'ai uploader sur mediafire le rapport est ici: rapport combofix "C'est grave docteur ?" ====================== ComboFix 10-02-16.03 - kripsy 17/02/2010 18:38:36.1.1 - x86 Microsoft Windows XP Professionnel 5.1.2600.3.1252.33.1036.18.1023.749 [GMT 1:00] Lancé depuis: c:\documents and settings\kripsy.KRISPY\Bureau\blabla.exe AV: AntiVir Desktop *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7} . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\kripsy.KRISPY\Application Data\Desktopicon c:\documents and settings\kripsy.KRISPY\Application Data\Desktopicon\eBayShortcuts.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\217873.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\220346.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\220667.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\221047.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\221288.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\246724.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\247065.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\251421.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\252182.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\252783.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\253554.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\260474.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\261315.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\262176.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\262537.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\262847.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\264390.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\270749.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\271069.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\271280.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\274865.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\275295.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\276627.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\277158.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\277438.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\277649.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\282726.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\285260.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\286261.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\286732.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\287523.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\287994.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\288594.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\289115.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\290057.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\290687.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\292110.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\292370.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\293421.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\294253.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\294904.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\304277.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\308994.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\309364.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\309755.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\309995.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\310416.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\310736.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\311107.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\311307.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\312038.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\312679.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\313500.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\314231.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\315563.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\316024.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\316505.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\316875.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\318437.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\319769.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\320130.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\322223.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\323104.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\323875.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\324716.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\325387.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\325798.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\326068.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\328872.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\371754.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\372075.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\372335.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\372715.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\372976.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\374808.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\376090.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\376451.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\376811.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\377332.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\377673.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\378384.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\379135.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\379736.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\380226.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\381268.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\382399.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\382930.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\383381.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\384983.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\386345.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\387056.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\387487.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\388037.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\388508.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\388959.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\389199.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\393746.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\436257.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\438029.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\438670.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\439161.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\439572.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\440152.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\440693.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\442386.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\442906.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\444549.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\447803.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\448965.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\450037.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\450547.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\451228.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\451589.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\455264.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\456015.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\456636.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\458479.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\460542.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\461283.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\482233.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\482774.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\483104.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\484236.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\485157.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\485578.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\485988.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\486429.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\486709.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\488302.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\488772.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\489924.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\490625.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\491166.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\491606.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\493179.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\493639.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\497014.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\497415.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\498156.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\498647.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\499518.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\500539.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\500880.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\501270.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\502823.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\503453.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\504425.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\504815.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\505807.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\506598.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\507950.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\508481.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\509252.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\509752.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\510363.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\510884.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\513468.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\515060.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\515451.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\515711.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\516212.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\516562.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\525355.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\525826.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\528299.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\528630.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\529000.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\529321.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\529811.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\530392.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\531554.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\532305.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\533847.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\534698.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\535129.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\535479.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\536751.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\537452.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\538374.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\541148.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\542359.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\543010.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\543471.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\543771.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\544522.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\545163.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\545364.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\545754.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\546505.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\546916.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\548568.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\549129.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\550621.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\551172.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\551523.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\551803.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\553095.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\554357.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\554747.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\555328.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\556720.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\556920.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\557471.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\558052.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\558553.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\558843.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\559604.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\560065.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\560606.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\580574.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\581756.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\582737.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\583238.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\583909.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\584570.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\585131.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\587264.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\588225.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\590098.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\590869.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\592972.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\609856.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\634562.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\635583.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\636385.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\638708.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\638978.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\639559.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\640110.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\640951.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\658076.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\659348.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\660109.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\660459.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\702800.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\705464.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\705854.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\706225.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\706676.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\708028.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\708278.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\708608.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\708899.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\710411.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\711803.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\712154.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\712444.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\712734.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\712915.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\713716.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\714427.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\714787.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\715018.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\715709.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\716320.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\716650.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\716890.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\717541.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\717942.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\720906.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\722739.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\724041.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\724261.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\724621.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\724862.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\725212.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\725513.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\727856.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\728076.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\728427.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\728667.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\728948.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\729138.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\729438.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\729639.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\730199.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\730650.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\732413.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\733975.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\734656.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\735167.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\735457.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\736208.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\739012.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\741846.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\742217.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\742467.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\742808.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\743058.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\743649.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\744200.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\744810.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\745181.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\746903.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\747625.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\749617.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\750338.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\750919.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\751590.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\752111.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\772550.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\773301.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\773952.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\778329.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\800330.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\801492.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\801702.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\805978.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\806219.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\806589.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\807010.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\815662.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\817175.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\817505.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\817775.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\818547.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\819238.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\819778.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\820239.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\820650.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\825697.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\826298.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\826889.exe c:\documents and settings\kripsy.KRISPY\Application Data\drivers\downld\827509.exe c:\recycler\S-1-5-21-1644491937-1383384898-1343024091-1003 C:\test.txt c:\windows\system32\517fc4a1.dat c:\windows\system32\671136e8.dll c:\windows\system32\ban_list.txt c:\windows\system32\config.dat c:\windows\system32\set32.dll c:\windows\system32\srosa2.sys . ((((((((((((((((((((((((((((((((((((((( Pilotes/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_SK9OU0S -------\Service_sK9Ou0s -------\Service_srosa ((((((((((((((((((((((((((((( Fichiers créés du 2010-01-17 au 2010-02-17 )))))))))))))))))))))))))))))))))))) . 2010-02-17 17:04 . 2010-02-17 17:09 -------- d-----w- C:\blabla 2010-02-15 19:27 . 2010-02-15 19:29 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\Ten Thumbs Typing Tutor 2010-02-15 19:26 . 2010-02-15 19:26 -------- d-----w- c:\program files\Ten Thumbs Typing Tutor 4.7 2010-02-14 17:14 . 2010-02-14 21:20 -------- d-----w- c:\documents and settings\kripsy.KRISPY\Application Data\Thinstall 2010-02-14 17:14 . 2010-02-14 17:14 -------- d-----w- c:\documents and settings\kripsy.KRISPY\Local Settings\Application Data\Thinstall 2010-02-09 20:54 . 2010-02-09 21:22 -------- d-----w- c:\program files\Free Music Zilla 2010-02-07 12:48 . 2010-02-07 12:48 -------- d-----w- C:\download 2010-02-07 11:52 . 2010-02-16 18:40 -------- d--h--w- c:\documents and settings\kripsy.KRISPY\Application Data\drivers 2010-02-06 19:30 . 2010-02-06 19:30 286720 ------w- c:\windows\Setup1.exe 2010-02-06 19:30 . 2010-02-06 19:30 73216 ----a-w- c:\windows\ST6UNST.EXE 2010-02-06 10:48 . 2010-02-06 10:48 -------- d-----w- c:\program files\Master the Facts Multiplication 2010-01-31 11:04 . 2010-01-31 11:04 -------- d-----w- c:\documents and settings\kripsy.KRISPY\Application Data\FMZilla . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2010-02-15 18:52 . 2010-01-09 18:25 -------- d-----w- c:\documents and settings\kripsy.KRISPY\Application Data\vlc 2010-02-14 21:04 . 2009-06-24 18:14 -------- d-----w- c:\documents and settings\kripsy.KRISPY\Application Data\Spotify 2010-02-10 18:45 . 2008-07-26 15:16 -------- d-----w- c:\documents and settings\kripsy.KRISPY\Application Data\Azureus 2010-02-08 17:36 . 2009-08-27 08:03 664 ----a-w- c:\windows\system32\d3d9caps.dat 2010-02-07 12:30 . 2009-11-11 14:46 -------- d-----w- c:\program files\AFT software 2010-01-31 16:16 . 2008-07-12 07:04 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy 2010-01-30 11:24 . 2010-01-12 17:46 -------- d-----w- c:\documents and settings\kripsy.KRISPY\Application Data\LimeWire 2010-01-23 20:50 . 2008-08-04 21:30 -------- d-----w- c:\documents and settings\kripsy.KRISPY\Application Data\dvdcss 2010-01-23 08:12 . 2008-07-08 16:54 500900 ----a-w- c:\windows\system32\perfh00C.dat 2010-01-23 08:12 . 2008-07-08 16:54 80748 ----a-w- c:\windows\system32\perfc00C.dat 2010-01-22 16:15 . 2009-11-09 19:27 -------- d-----w- c:\program files\rdesc 2010-01-12 17:44 . 2010-01-12 17:37 -------- d-----w- c:\program files\LimeWire 2010-01-10 17:28 . 2010-01-10 17:28 -------- d-----w- c:\program files\LearnKeyHR 2010-01-05 09:56 . 2008-12-06 21:59 832512 ----a-w- c:\windows\system32\wininet.dll 2010-01-05 09:56 . 2008-12-06 21:58 78336 ----a-w- c:\windows\system32\ieencode.dll 2010-01-05 09:56 . 2008-12-06 21:57 17408 ----a-w- c:\windows\system32\corpol.dll 2009-12-12 17:52 . 2008-07-08 18:29 64792 ----a-w- c:\documents and settings\kripsy.KRISPY\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2009-12-10 20:25 . 2009-05-01 05:59 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2009-12-08 20:05 . 2009-12-08 20:05 218 ----a-w- c:\documents and settings\kripsy.KRISPY\fet_settings.dat 2009-11-21 15:58 . 2008-12-06 21:57 471552 ----a-w- c:\windows\AppPatch\aclayers.dll 2006-05-03 09:06 . 2008-08-04 08:03 163328 --sh--r- c:\windows\system32\flvDX.dll 2007-02-21 10:47 . 2008-08-04 08:03 31232 --sh--r- c:\windows\system32\msfDX.dll 2008-03-16 12:30 . 2008-08-04 08:03 216064 --sh--r- c:\windows\system32\nbDX.dll . <pre> c:\program files\EarMaster Pro 5\Ear50 .exe </pre> ((((((((((((((((((((((((((((((((( Points de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2010-02-16 847872] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-02-16 209153] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-13 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ComPlusSetup] 2008-04-13 19:33 625664 ----a-w- c:\windows\system32\catsrvut.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service] @="Service" [HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^Assistant d'Acrobat.lnk] path=c:\documents and settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Assistant d'Acrobat.lnk backup=c:\windows\pss\Assistant d'Acrobat.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^kripsy.KRISPY^Menu Démarrer^Programmes^Démarrage^LimeWire On Startup.lnk] path=c:\documents and settings\kripsy.KRISPY\Menu Démarrer\Programmes\Démarrage\LimeWire On Startup.lnk backup=c:\windows\pss\LimeWire On Startup.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ad-Watch] 2009-09-21 18:19 520024 ----a-w- c:\program files\Lavasoft\Ad-Aware\AAWTray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AudioHQ] 1999-04-12 00:00 203264 ----a-w- c:\program files\Creative\SBLive\AudioHQ\AHQTB.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Babylon Client] 2009-06-07 13:33 4025744 ----a-w- c:\program files\Babylon\Babylon-Pro\Babylon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] 2007-08-03 11:51 202024 ----a-w- c:\program files\Fichiers communs\Nero\Lib\NMBgMonitor.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Creative Launcher] 1999-06-22 00:51 245760 ----a-w- c:\program files\Creative\Launcher\CTLauncher.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE] 2008-04-13 19:34 15360 ------w- c:\windows\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite] 2008-12-29 10:40 687560 ----a-w- c:\program files\DAEMON Tools Lite\daemon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Détecteur de disque] 1998-12-16 00:53 185856 ----a-w- c:\program files\Creative\ShareDLL\CtNotify.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMEKRMIG6.1] 2001-08-28 16:00 44032 ----a-w- c:\windows\ime\IMKR6_1\imekrmig.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1] 2008-04-13 09:43 208952 ----a-w- c:\windows\ime\IMJP8_1\imjpmig.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LVCOMSX] 2007-03-06 16:51 252704 ----a-w- c:\program files\Fichiers communs\LogiShrd\LComMgr\LVComSX.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr] 2009-07-26 15:44 3883856 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSPY2002] 2008-04-13 09:43 59392 ----a-w- c:\windows\system32\IME\PINTLGNT\IMSCINST.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan] 2007-08-08 08:25 1828136 ----a-w- c:\program files\NERO\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] 2007-03-01 14:57 153136 ----a-w- c:\program files\Fichiers communs\Nero\Lib\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A] 2008-04-13 09:43 455168 ----a-w- c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync] 2008-04-13 09:43 455168 ----a-w- c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] 2007-06-29 05:24 286720 ----a-w- c:\program files\QuickTime\QTTask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] 2009-07-25 03:23 149280 ----a-w- c:\program files\Java\jre6\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe] 2008-08-27 11:53 185896 ----a-w- c:\program files\Fichiers communs\Real\Update_OB\realsched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrackerChecker2] c:\program files\Tracker Checker 2\Tracker Checker 2.exe [N/A] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VeohPlugin] 2009-02-24 19:44 3558136 ----a-w- c:\program files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] c:\program files\Winamp\winampa.exe [N/A] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "WLSetupSvc"=3 (0x3) "NMIndexingService"=3 (0x3) "nlsvc"=2 (0x2) "Nero BackItUp Scheduler 3"=2 (0x2) "Lavasoft Ad-Aware Service"=2 (0x2) "CCALib8"=2 (0x2) "mnmsrvc"=3 (0x3) "idsvc"=3 (0x3) "helpsvc"=2 (0x2) "Ati HotKey Poller"=2 (0x2) "LVSrvLauncher"=2 (0x2) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "d:\\backup divers\\emule morph\\eMule.exe"= "c:\\WINDOWS\\system32\\sessmgr.exe"= "c:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Mozilla Firefox\\firefox.exe"= "c:\\ratio\\RatioMaster.exe"= "c:\\Program Files\\Azureus\\Azureus.exe"= "d:\\Azureus\\Azureus.exe"= "c:\\Program Files\\Real\\RealPlayer\\realplay.exe"= "c:\\Program Files\\NERO\\Nero\\Nero8\\Nero Home\\NeroHome.exe"= "c:\\WINDOWS\\system32\\mmc.exe"= "d:\\backup divers\\strong dc++\\StrongDCaaa.exe"= "c:\\Program Files\\Veoh Networks\\VeohWebPlayer\\veohwebplayer.exe"= "c:\\Program Files\\Spotify\\spotify.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List] "25:TCP"= 25:TCP:File and Printer Sharing "8872:TCP"= 8872:TCP:epos "1454:TCP"= 1454:TCP:epos R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [27/08/2009 19:16 64160] R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [11/11/2008 10:39 717296] R1 nltdi;nltdi;c:\windows\system32\drivers\nltdi.sys [23/04/2007 12:03 82200] R2 ppsio2;PPDevice;c:\windows\system32\drivers\PPSIO2.SYS [18/12/2009 18:55 22400] R2 zcorem32;Zone Datafile;c:\windows\system32\rundll32.exe zcorem32.dll,epos --> c:\windows\system32\rundll32.exe zcorem32.dll,epos [?] R3 WsAudioDevice_383;WsAudioDevice_383;c:\windows\system32\drivers\WsAudioDevice_383.sys [29/05/2009 22:53 16640] S2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [01/05/2009 06:59 108289] S3 camvid20;Philips ToUcam Camera; Video;c:\windows\system32\drivers\camdrv21.sys [08/12/2009 17:38 223232] S3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [14/08/2009 09:12 8704] S3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [14/08/2009 09:12 3072] S4 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [18/01/2009 22:34 1028432] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5AAB3CB6-AE5D-2470-76CB-AC272E4AAB02}] c:\windows\system32:winnn32.exe [N/A] . Contenu du dossier 'Tâches planifiées' 2010-02-15 c:\windows\Tasks\Ad-Aware Update (Weekly).job - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-01-18 18:22] 2009-12-30 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-06-03 12:42] . . ------- Examen supplémentaire ------- . uStart Page = about:blank IE: Translate this web page with Babylon - c:\program files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm IE: Translate with Babylon - c:\program files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm IE: {{F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - res://c:\program files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm FF - ProfilePath - c:\documents and settings\kripsy.KRISPY\Application Data\Mozilla\Firefox\Profiles\339mtde0.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1460988&SearchSource=3&q={searchTerms} FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - about:blank FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\np32asw.dll FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\NPVeohTVPlugin.dll FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ . - - - - ORPHELINS SUPPRIMES - - - - AddRemove-Free Music Zilla_is1 - c:\program files\Free Music Zilla\unins000.exe AddRemove-Youtube Music Downloader_is1 - c:\youtubemusicdownloader\unins000.exe AddRemove-{8DD0F820-3656-4AB3-A7F4-005CAA2D0897}_is1 - c:\rdesc\unins000.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-02-17 19:16 Windows 5.1.2600 Service Pack 3 NTFS Recherche de processus cachés ... Recherche d'éléments en démarrage automatique cachés ... Recherche de fichiers cachés ... Scan terminé avec succès Fichiers cachés: 0 ************************************************************************** . --------------------- CLES DE REGISTRE BLOQUEES --------------------- [HKEY_USERS\S-1-5-21-1343024091-1060284298-839522115-1003\Software\VB and VBA Program Settings\M*a*c*h*i*n*i*s*t* *T*o*o*l*B*o*x*"!\Options] "Show Tips at Startup"="1" "editNC Is Installed"="False" "Main Dialogue Width"="9555" "Main Dialogue Height"="4770" "Main Dialogue StartUp X"="4822" "Main Dialogue StartUp Y"="5295" [HKEY_USERS\S-1-5-21-1343024091-1060284298-839522115-1003\Software\VB and VBA Program Settings\M*a*c*h*i*n*i*s*t* *T*o*o*l*B*o*x*"!\Settings] "frmSpeedFeedMill StartUp_Xpos"="4425" "frmSpeedFeedMill StartUp_Ypos"="4965" "frmSpeedFeedTap StartUp_Xpos"="3975" "frmSpeedFeedTap StartUp_Ypos"="4320" "frmChord StartUp_Xpos"="5985" "frmChord StartUp_Ypos"="5970" "frmSineBar StartUp_Xpos"="6960" "frmSineBar StartUp_Ypos"="6300" "frm3Point StartUp_Xpos"="6660" "frm3Point StartUp_Ypos"="5460" "frmObliqueTriangle StartUp_Xpos"="6878" "frmObliqueTriangle StartUp_Ypos"="5692" "frmPolygon StartUp_Xpos"="5408" "frmPolygon StartUp_Ypos"="5385" "frmHardness StartUp_Xpos"="6060" "frmHardness StartUp_Ypos"="6960" "frmConvertIJK StartUp_Xpos"="6180" "frmConvertIJK StartUp_Ypos"="5475" "frmConvert StartUp_Xpos"="6330" "frmConvert StartUp_Ypos"="5325" [HKEY_LOCAL_MACHINE\software\Classes\M*a*c*h*i*n*i*s*t* *T*o*o*l*B*o*x*"!\DefaultIcon] @="c:\\Program Files\\Machinist ToolBox\\MachinistToolBox.ico" [HKEY_LOCAL_MACHINE\software\Classes\M*a*c*h*i*n*i*s*t* *T*o*o*l*B*o*x*"!\shell\open\command] @="\"c:\\Program Files\\Machinist ToolBox\\Metapad\\metapad.exe\" \"%1\"" . --------------------- DLLs chargées dans les processus actifs --------------------- - - - - - - - > 'explorer.exe'(1408) c:\windows\system32\eappprxy.dll c:\program files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll c:\program files\Spybot - Search & Destroy\SDHelper.dll . ------------------------ Autres processus actifs ------------------------ . c:\windows\system32\rundll32.exe c:\program files\Java\jre6\bin\jqs.exe c:\windows\system32\devldr32.exe c:\windows\system32\wbem\wmiapsrv.exe . ************************************************************************** . Heure de fin: 2010-02-17 19:25:48 - La machine a redémarré ComboFix-quarantined-files.txt 2010-02-17 18:25 Avant-CF: 1 080 504 320 octets libres Après-CF: 845 864 960 octets libres Current=2 Default=2 Failed=0 LastKnownGood=3 Sets=1,2,3,4 - - End Of File - - B0140A835F53873C1438C4B210F9DF29 -
infecter par TR/Dldr.Bagle.cez
obrigadoo a répondu à un(e) sujet de obrigadoo dans Analyses et éradication malwares
merci beaucoup pour ton aide (j'aurais du venir avant ça aurai éviter que mon antivirus supprime 200 fichiers, dont certain de xp) alors voila j'ai telecharger et tout.... (entre temps mon explorateur du xp2 qui était censé fonctionné, ne fonctionne plus, donc je crois qu'il est bien actif maintenant ^^) le programme a trouver des rootkit donc je note les noms des fichiers,puis l'ordi redemarre mais problème, maitenant au boot je ne peux plus choisir mon XP avec lequel j'ai commencer la manip' (le multiboot de XP a disparu) du coup je ne peux pas continuer ce que j'avais commencer avec combofix et je me retrouve sur le 1er XP celui qui était le plus infecté (j'ai toujours internet pour l'instant, j'espère que ça va durer) donc je vais recommencer tous ça demain soir car je me lève tôt demain matin en tous cas merci beaucoup pour ton aide -
infecter par TR/Dldr.Bagle.cez
obrigadoo a répondu à un(e) sujet de obrigadoo dans Analyses et éradication malwares
en fait j'ai plusieurs disques durs avec plusieurs os dessus -j'ai 1 disque dur avec XP (celui ou l'antivirus ne fonctionne plus) -et 1 disque dur partitionner avec un autre XP (au cas ou le 1er merde, mais j'ai trouver de fichier infecter aussi ici) et un linux (ubuntu) j'ai essayer de désinfecter avec avira antivir qui a trouver un peu plus de 140 fichier infecter o_O' il trouve ces virus la: R/Dldr.Bagle.cez TR/Spy.gen j'ai utiliser SetupFindyKill.exe mais il se bloque a chaque fois a 60% ce que j'ai peur c'est que le virus infecte des fichiers compresser qui normalement sont clean malgré tous ça je peux encore venir sur le forum -
Bonjour a tous (je vous préviens, pour moi c'est pas un bon jours lol) alors voila je suis infecter par ce virus R/Dldr.Bagle.cez qui s'est multiplier un peu partout je n'arrive pas a m'en debarasser j'ai un window XP avec avira antivir comme antivirus (mais qui ne se lance plus au démarrage) help, je ne sais pas trop par ou commencer bien cordialement , un internaute au bord de la crise de nerf