Aller au contenu

  • Pas encore inscrit ?

    Pourquoi ne pas vous inscrire ? C'est simple, rapide et gratuit.
    Pour en savoir plus, lisez Les avantages de l'inscription... et la Charte de Zébulon.
    De plus, les messages que vous postez en tant qu'invité restent invisibles tant qu'un modérateur ne les a pas validés. Inscrivez-vous, ce sera un gain de temps pour tout le monde, vous, les helpeurs et les modérateurs ! :wink:

[resolu]rapport hitjackthis

diabolik52
 Partager

Messages recommandés

diabolik52 Mega Power Member

diabolik52

Posté(e)
  • Auteur
Posté(e)

bon voila mes 2 rapports

 

L2mfix 032106

Creating Account.

La commande s'est termin‚e correctement.

 

Adding Administrative privleges.

Checking for L2MFix account(0=no 1=yes):

1

Granting SeDebugPrivilege to L2MFIX ... successful

 

Running From:

C:\WINDOWS\SYSTEM32

 

Killing Processes!

 

Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03

Copyright© 2002-2003 Craig.Peacock@beyondlogic.org

Killing PID 496 'smss.exe'

 

Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03

Copyright© 2002-2003 Craig.Peacock@beyondlogic.org

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing PID 932 'winlogon.exe'

Killing

diabolik52 Mega Power Member

diabolik52

Posté(e)
  • Auteur
Posté(e)

dsl il n ont pas tout mit la suite

 

Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03

Copyright© 2002-2003 Craig.Peacock@beyondlogic.org

Killing PID 1392 'explorer.exe'

Killing PID 1392 'explorer.exe'

Killing PID 1392 'explorer.exe'

Killing PID 1392 'explorer.exe'

 

Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03

Copyright© 2002-2003 Craig.Peacock@beyondlogic.org

Killing PID 340 'rundll32.exe'

Killing PID 340 'rundll32.exe'

Restoring Sedebugprivilege:

Granting SeDebugPrivilege to Administrateurs ... successful

 

Scanning First Pass. Please Wait!

 

First Pass Completed

 

Second Pass Scanning

 

Second pass Completed!

1 fichier(s) copi‚(s).

1 fichier(s) copi‚(s).

1 fichier(s) copi‚(s).

1 fichier(s) copi‚(s).

1 fichier(s) copi‚(s).

1 fichier(s) copi‚(s).

1 fichier(s) copi‚(s).

1 fichier(s) copi‚(s).

1 fichier(s) copi‚(s).

Deleting: C:\WINDOWS\system32\d6j0lg1m16.dll

Successfully Deleted: C:\WINDOWS\system32\d6j0lg1m16.dll

Deleting: C:\WINDOWS\system32\fpn8035ue.dll

Successfully Deleted: C:\WINDOWS\system32\fpn8035ue.dll

Deleting: C:\WINDOWS\system32\fpnu0359e.dll

Successfully Deleted: C:\WINDOWS\system32\fpnu0359e.dll

Deleting: C:\WINDOWS\system32\itetres.dll

Successfully Deleted: C:\WINDOWS\system32\itetres.dll

Deleting: C:\WINDOWS\system32\kgdal.dll

Successfully Deleted: C:\WINDOWS\system32\kgdal.dll

Deleting: C:\WINDOWS\system32\r2p80c7uef.dll

Successfully Deleted: C:\WINDOWS\system32\r2p80c7uef.dll

Deleting: C:\WINDOWS\system32\s2rslc971f.dll

Successfully Deleted: C:\WINDOWS\system32\s2rslc971f.dll

Deleting: C:\WINDOWS\system32\wlvcore2.dll

Successfully Deleted: C:\WINDOWS\system32\wlvcore2.dll

Deleting: C:\WINDOWS\system32\wsnsock.dll

Successfully Deleted: C:\WINDOWS\system32\wsnsock.dll

 

msg11?.dll

0 fichier(s) copi‚(s).

 

 

 

Restoring Windows Update Certificates.:

 

The following Is the Current Export of the Winlogon notify key:

****************************************************************************

Windows Registry Editor Version 5.00

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]

"DLLName"="Ati2evxx.dll"

"Asynchronous"=dword:00000000

"Impersonate"=dword:00000001

"Lock"="AtiLockEvent"

"Logoff"="AtiLogoffEvent"

"Logon"="AtiLogonEvent"

"Disconnect"="AtiDisConnectEvent"

"Reconnect"="AtiReConnectEvent"

"Safe"=dword:00000000

"Shutdown"="AtiShutdownEvent"

"StartScreenSaver"="AtiStartScreenSaverEvent"

"StartShell"="AtiStartShellEvent"

"Startup"="AtiStartupEvent"

"StopScreenSaver"="AtiStopScreenSaverEvent"

"Unlock"="AtiUnLockEvent"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]

"Asynchronous"=dword:00000000

"Impersonate"=dword:00000000

"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\

6c,00,00,00

"Logoff"="ChainWlxLogoffEvent"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]

"Asynchronous"=dword:00000000

"Impersonate"=dword:00000000

"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\

6c,00,6c,00,00,00

"Logoff"="CryptnetWlxLogoffEvent"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]

"DLLName"="cscdll.dll"

"Logon"="WinlogonLogonEvent"

"Logoff"="WinlogonLogoffEvent"

"ScreenSaver"="WinlogonScreenSaverEvent"

"Startup"="WinlogonStartupEvent"

"Shutdown"="WinlogonShutdownEvent"

"StartShell"="WinlogonStartShellEvent"

"Impersonate"=dword:00000000

"Asynchronous"=dword:00000001

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\DH]

"Asynchronous"=dword:00000000

"DllName"="C:\\WINDOWS\\system32\\ElnClass.Dll"

"Impersonate"=dword:00000000

"Logon"="WinLogon"

"Logoff"="WinLogoff"

"Shutdown"="WinShutdown"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\MS-DOS Emulation]

"Asynchronous"=dword:00000000

"DllName"="C:\\WINDOWS\\system32\\s2rslc971f.dll"

"Impersonate"=dword:00000000

"Logon"="WinLogon"

"Logoff"="WinLogoff"

"Shutdown"="WinShutdown"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon]

"DllName"="C:\\WINDOWS\\system32\\NavLogon.dll"

"StartShell"="NavStartShellEvent"

"Logoff"="NavLogoffEvent"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]

"DLLName"="wlnotify.dll"

"Logon"="SCardStartCertProp"

"Logoff"="SCardStopCertProp"

"Lock"="SCardSuspendCertProp"

"Unlock"="SCardResumeCertProp"

"Enabled"=dword:00000001

"Impersonate"=dword:00000001

"Asynchronous"=dword:00000001

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]

"Asynchronous"=dword:00000000

"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\

6c,00,6c,00,00,00

"Impersonate"=dword:00000000

"StartShell"="SchedStartShell"

"Logoff"="SchedEventLogOff"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]

"Logoff"="WLEventLogoff"

"Impersonate"=dword:00000000

"Asynchronous"=dword:00000001

"DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\

6c,00,6c,00,00,00

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]

"DLLName"="WlNotify.dll"

"Lock"="SensLockEvent"

"Logon"="SensLogonEvent"

"Logoff"="SensLogoffEvent"

"Safe"=dword:00000001

"MaxWait"=dword:00000258

"StartScreenSaver"="SensStartScreenSaverEvent"

"StopScreenSaver"="SensStopScreenSaverEvent"

"Startup"="SensStartupEvent"

"Shutdown"="SensShutdownEvent"

"StartShell"="SensStartShellEvent"

"PostShell"="SensPostShellEvent"

"Disconnect"="SensDisconnectEvent"

"Reconnect"="SensReconnectEvent"

"Unlock"="SensUnlockEvent"

"Impersonate"=dword:00000001

"Asynchronous"=dword:00000001

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]

"Asynchronous"=dword:00000000

"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\

6c,00,6c,00,00,00

"Impersonate"=dword:00000000

"Logoff"="TSEventLogoff"

"Logon"="TSEventLogon"

"PostShell"="TSEventPostShell"

"Shutdown"="TSEventShutdown"

"StartShell"="TSEventStartShell"

"Startup"="TSEventStartup"

"MaxWait"=dword:00000258

"Reconnect"="TSEventReconnect"

"Disconnect"="TSEventDisconnect"

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]

"DLLName"="wlnotify.dll"

"Logon"="RegisterTicketExpiredNotificationEvent"

"Logoff"="UnregisterTicketExpiredNotificationEvent"

"Impersonate"=dword:00000001

"Asynchronous"=dword:00000001

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WRNotifier]

"Asynchronous"=dword:00000000

"DllName"="WRLogonNTF.dll"

"Impersonate"=dword:00000001

"Lock"="WRLock"

"StartScreenSaver"="WRStartScreenSaver"

"StartShell"="WRStartShell"

"Startup"="WRStartup"

"StopScreenSaver"="WRStopScreenSaver"

"Unlock"="WRUnlock"

"Shutdown"="WRShutdown"

"Logoff"="WRLogoff"

"Logon"="WRLogon"

 

 

The following are the files found:

****************************************************************************

C:\WINDOWS\system32\d6j0lg1m16.dll

C:\WINDOWS\system32\fpn8035ue.dll

C:\WINDOWS\system32\fpnu0359e.dll

C:\WINDOWS\system32\itetres.dll

C:\WINDOWS\system32\kgdal.dll

C:\WINDOWS\system32\r2p80c7uef.dll

C:\WINDOWS\system32\s2rslc971f.dll

C:\WINDOWS\system32\wlvcore2.dll

C:\WINDOWS\system32\wsnsock.dll

 

Registry Entries that were Deleted:

Please verify that the listing looks ok.

If there was something deleted wrongly there are backups in the backreg folder.

****************************************************************************

Windows Registry Editor Version 5.00

 

[HKEY_CLASSES_ROOT\CLSID\{162827AB-EADE-42FE-885E-E8E7E630F6F9}]

@=""

 

[HKEY_CLASSES_ROOT\CLSID\{162827AB-EADE-42FE-885E-E8E7E630F6F9}\Implemented Categories]

@=""

 

[HKEY_CLASSES_ROOT\CLSID\{162827AB-EADE-42FE-885E-E8E7E630F6F9}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]

@=""

 

[HKEY_CLASSES_ROOT\CLSID\{162827AB-EADE-42FE-885E-E8E7E630F6F9}\InprocServer32]

@="C:\\WINDOWS\\system32\\ElnClass.Dll"

"ThreadingModel"="Apartment"

 

Windows Registry Editor Version 5.00

 

[HKEY_CLASSES_ROOT\CLSID\{32BC58D7-A8DB-48D7-B2A3-35615B099E71}]

@=""

"IDEx"="ADDR"

 

[HKEY_CLASSES_ROOT\CLSID\{32BC58D7-A8DB-48D7-B2A3-35615B099E71}\Implemented Categories]

@=""

 

[HKEY_CLASSES_ROOT\CLSID\{32BC58D7-A8DB-48D7-B2A3-35615B099E71}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]

@=""

 

[HKEY_CLASSES_ROOT\CLSID\{32BC58D7-A8DB-48D7-B2A3-35615B099E71}\InprocServer32]

@="C:\\WINDOWS\\system32\\skhcinst.dll"

"ThreadingModel"="Apartment"

 

Windows Registry Editor Version 5.00

 

[HKEY_CLASSES_ROOT\CLSID\{74512D89-38E5-4C1B-8356-6A710AF62CED}]

@=""

 

[HKEY_CLASSES_ROOT\CLSID\{74512D89-38E5-4C1B-8356-6A710AF62CED}\Implemented Categories]

@=""

 

[HKEY_CLASSES_ROOT\CLSID\{74512D89-38E5-4C1B-8356-6A710AF62CED}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]

@=""

 

[HKEY_CLASSES_ROOT\CLSID\{74512D89-38E5-4C1B-8356-6A710AF62CED}\InprocServer32]

@="C:\\WINDOWS\\system32\\syell32.dll"

"ThreadingModel"="Apartment"

 

Windows Registry Editor Version 5.00

 

[HKEY_CLASSES_ROOT\CLSID\{5D1A633C-436D-4BAE-B25F-75AB23734384}]

@=""

 

[HKEY_CLASSES_ROOT\CLSID\{5D1A633C-436D-4BAE-B25F-75AB23734384}\Implemented Categories]

@=""

 

[HKEY_CLASSES_ROOT\CLSID\{5D1A633C-436D-4BAE-B25F-75AB23734384}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]

@=""

 

[HKEY_CLASSES_ROOT\CLSID\{5D1A633C-436D-4BAE-B25F-75AB23734384}\InprocServer32]

@="C:\\WINDOWS\\system32\\wsnsock.dll"

"ThreadingModel"="Apartment"

 

Windows Registry Editor Version 5.00

 

[HKEY_CLASSES_ROOT\CLSID\{7DB49355-D61C-4F6F-B52E-23C3E398B536}]

@=""

 

[HKEY_CLASSES_ROOT\CLSID\{7DB49355-D61C-4F6F-B52E-23C3E398B536}\Implemented Categories]

@=""

 

[HKEY_CLASSES_ROOT\CLSID\{7DB49355-D61C-4F6F-B52E-23C3E398B536}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]

@=""

 

[HKEY_CLASSES_ROOT\CLSID\{7DB49355-D61C-4F6F-B52E-23C3E398B536}\InprocServer32]

@="C:\\WINDOWS\\system32\\ugrdtea.dll"

"ThreadingModel"="Apartment"

 

REGEDIT4

 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]

"{162827AB-EADE-42FE-885E-E8E7E630F6F9}"=-

"{32BC58D7-A8DB-48D7-B2A3-35615B099E71}"=-

"{74512D89-38E5-4C1B-8356-6A710AF62CED}"=-

"{33E8A6A7-8965-43D1-A199-C98C45D47194}"=-

"{5D1A633C-436D-4BAE-B25F-75AB23734384}"=-

"{7DB49355-D61C-4F6F-B52E-23C3E398B536}"=-

[-HKEY_CLASSES_ROOT\CLSID\{162827AB-EADE-42FE-885E-E8E7E630F6F9}]

[-HKEY_CLASSES_ROOT\CLSID\{32BC58D7-A8DB-48D7-B2A3-35615B099E71}]

[-HKEY_CLASSES_ROOT\CLSID\{74512D89-38E5-4C1B-8356-6A710AF62CED}]

[-HKEY_CLASSES_ROOT\CLSID\{33E8A6A7-8965-43D1-A199-C98C45D47194}]

[-HKEY_CLASSES_ROOT\CLSID\{5D1A633C-436D-4BAE-B25F-75AB23734384}]

[-HKEY_CLASSES_ROOT\CLSID\{7DB49355-D61C-4F6F-B52E-23C3E398B536}]

REGEDIT4

 

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform]

"SV1"=""

****************************************************************************

Desktop.ini Contents:

****************************************************************************

 

****************************************************************************

Checking for L2MFix account(0=no 1=yes):

0

Zipping up files for submission:

adding: dlls/d6j0lg1m16.dll (164 bytes security) (deflated 5%)

adding: dlls/fpn8035ue.dll (164 bytes security) (deflated 5%)

adding: dlls/fpnu0359e.dll (164 bytes security) (deflated 5%)

adding: dlls/itetres.dll (164 bytes security) (deflated 5%)

adding: dlls/kgdal.dll (164 bytes security) (deflated 5%)

adding: dlls/r2p80c7uef.dll (164 bytes security) (deflated 5%)

adding: dlls/s2rslc971f.dll (164 bytes security) (deflated 4%)

adding: dlls/wlvcore2.dll (164 bytes security) (deflated 5%)

adding: dlls/wsnsock.dll (164 bytes security) (deflated 4%)

adding: backregs/162827AB-EADE-42FE-885E-E8E7E630F6F9.reg (212 bytes security) (deflated 70%)

adding: backregs/32BC58D7-A8DB-48D7-B2A3-35615B099E71.reg (212 bytes security) (deflated 69%)

adding: backregs/5D1A633C-436D-4BAE-B25F-75AB23734384.reg (212 bytes security) (deflated 70%)

adding: backregs/74512D89-38E5-4C1B-8356-6A710AF62CED.reg (212 bytes security) (deflated 70%)

adding: backregs/7DB49355-D61C-4F6F-B52E-23C3E398B536.reg (212 bytes security) (deflated 70%)

adding: backregs/notibac.reg (164 bytes security) (deflated 88%)

adding: backregs/shell.reg (164 bytes security) (deflated 73%)

 

 

et le rapport hitjackthis

 

Logfile of HijackThis v1.99.1

Scan saved at 17:13:04, on 04/04/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\SYSTEM32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\savedump.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\svchost.exe

C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe

C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe

C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe

C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\wdfmgr.exe

C:\WINDOWS\SYSTEM32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\wscntfy.exe

C:\WINDOWS\notepad.exe

C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe

C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe

C:\Program Files\QuickTime\qttask.exe

C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe

C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

C:\Program Files\Trust\GM-4200 Gamer Mouse Optical\Panel.exe

C:\Program Files\DAEMON Tools\daemon.exe

C:\Program Files\FarStone\VDPPro\VHD\RDTask.exe

C:\Program Files\FarStone\VDPPro\VDP\vdtask.exe

C:\windows\mousepad7.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\AOL 9.0\aoltray.exe

C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe

C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\hijackthis\HijackThis.exe

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: (no name) - {02EE5B04-F144-47BB-83FB-A60BD91B74A9} - C:\Program Files\SurfSideKick 3\SskBho.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [speedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon

O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [Trust Gaming mouse] "C:\Program Files\Trust\GM-4200 Gamer Mouse Optical\Panel.exe"

O4 - HKLM\..\Run: [h3yb0y1] C:\WINDOWS\SYSTEM32\DRIVERS\etc\LSASS.exe C:\WINDOWS\SYSTEM32\DRIVERS\etc\system.exe C:\WINDOWS\SYSTEM32\DRIVERS\etc\serv-u.ini

O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033

O4 - HKLM\..\Run: [RAMDrive] "C:\Program Files\FarStone\VDPPro\VHD\RDTask.exe"

O4 - HKLM\..\Run: [DVDCTray] C:\Program Files\FarStone\VDPPro\dvdcreator\DVDCTrayIconShl.exe

O4 - HKLM\..\Run: [VirtualDrive] C:\Program Files\FarStone\VDPPro\VDP\vdtask.exe /AutoRestore

O4 - HKLM\..\Run: [mousepad] C:\windows\mousepad7.exe

O4 - HKLM\..\Run: [keyboard] C:\windows\keyboard7.exe

O4 - HKLM\..\Run: [surfSideKick 3] C:\Program Files\SurfSideKick 3\Ssk.exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [Malware Sweeper] C:\Program Files\MalwareSweeper.com\Malware Sweeper\MalSwep.exe /STARTUP

O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"

O4 - HKCU\..\Run: [steam] C:\Program Files\Steam\Steam.exe -silent

O4 - HKCU\..\Run: [surfSideKick 3] C:\Program Files\SurfSideKick 3\Ssk.exe

O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0\aoltray.exe

O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe

O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML

O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html

O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html

O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html

O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll

O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll

O12 - Plugin for .mpg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll

O12 - Plugin for .tif: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin7.dll

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

O20 - AppInit_DLLs: repairs303169566.dll

O20 - Winlogon Notify: DH - C:\WINDOWS\system32\ElnClass.Dll (file missing)

O20 - Winlogon Notify: MS-DOS Emulation - C:\WINDOWS\system32\s2rslc971f.dll (file missing)

O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll

O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)

O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe

O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe

O23 - Service: RadClock - Unknown owner - C:\Program Files\RadLinker\RadClock.exe

O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcDataSrv.exe

O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcSandraSrv.exe

O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe

tornado Full Patch Member

tornado

Posté(e)
Posté(e) (modifié)

Re diablolik,

 

 

 

 

Désolé de ne pas t'avoir répondu plus... c'est qu'en ce moment, c'est la période des examens (bac blanc de français, tpe), et je ne peux être sur le forum 24h/24, comme l'a dit un certain bruce lee :P .

 

 

Sinon, look2me a été apparemment supprimé, d'après le nouveau rapport hijackthis et celui de Lm2fix...

 

 

Je prépare une prcédure pour le reste des infections... ça va être assez long

Modifié par tornado

Rejoindre la conversation

Vous pouvez publier maintenant et vous inscrire plus tard. Si vous avez un compte, connectez-vous maintenant pour publier avec votre compte.
Remarque : votre message nécessitera l’approbation d’un modérateur avant de pouvoir être visible.

Invité
Répondre à ce sujet…

×   Collé en tant que texte enrichi.   Coller en tant que texte brut à la place

  Seulement 75 émoticônes maximum sont autorisées.

×   Votre lien a été automatiquement intégré.   Afficher plutôt comme un lien

×   Votre contenu précédent a été rétabli.   Vider l’éditeur

×   Vous ne pouvez pas directement coller des images. Envoyez-les depuis votre ordinateur ou insérez-les depuis une URL.

×
 Partager
Aller sur la liste des sujets

  • En ligne récemment   0 membre est en ligne

    • Aucun utilisateur enregistré regarde cette page.
×
×
  • Créer...