Forums d'entraide informatique - Les forums de PCW

Forums d'entraide informatique - Les forums de PCW > Forum Informatique > Sécurité Informatique > infection?!
Version complète : infection?!
Vous consultez actuellement la version basse qualité d'un document. Voir la version complète avec le bon formatage.
Pages : 1 2 3

Aleaseptic

01-12-2008, 20:07 PM
Bonsoir,

J'ai un gros problème, je viens de me rendre compte qu'avast n'était plus actifs! En réessayant de le lancer il m'indique que ashavast.exe n'est pas une application Win32 valide. J'ai essayé de me renseigner sur le net! J'ai alors essayé une procédure en mode sans échec mais je n'arrive pas non plus à redemarrer en mode sans echec... je n'arrive pas non plus à installer hijackthis. j'ai essayé de passer elibagla en mode windows normal du coup : il ma trouvé 21 infections mais le problème est toujours là...
Pouvez vous m'aider svp?

Voici le rapport d'elibagla :


Mon Dec 01 20:17:12 2008
EliBagle v11.53 ©2008 S.G.H. / Satinfo S.L. (Actualizado el 27 de Junio del 2008)
----------------------------------------------
Lista de Acciones (por Acción Directa):
C:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Bagle Acceso Denegado.
C:\WINDOWS\SYSTEM32\BAN_LIST.TXT --> Eliminado Bagle
Por favor, envienos una muestra del fichero
C:\Muestras\SROSA.SYS.Muestra EliBagle v11.53
a "virus@satinfo.es". Gracias.
C:\WINDOWS\SYSTEM32\DRIVERS\SROSA.SYS --> Bagle Acceso Denegado.
C:\DOCUMENTS AND SETTINGS\LUCIEN\APPLICATION DATA\M\FLEC006.EXE --> Bagle Acceso Denegado.
C:\DOCUMENTS AND SETTINGS\LUCIEN\APPLICATION DATA\M\LIST.OCT --> Eliminado Bagle

Mon Dec 01 20:18:25 2008
EliBagle v11.53 ©2008 S.G.H. / Satinfo S.L. (Actualizado el 27 de Junio del 2008)
----------------------------------------------
Lista de Acciones (por Acción Directa):
C:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Bagle Acceso Denegado.

Mon Dec 01 20:18:36 2008
EliBagle v11.53 ©2008 S.G.H. / Satinfo S.L. (Actualizado el 27 de Junio del 2008)
----------------------------------------------
Lista de Acciones (por Acción Directa):
C:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Bagle Acceso Denegado.

Mon Dec 01 20:18:42 2008
EliBagle v11.53 ©2008 S.G.H. / Satinfo S.L. (Actualizado el 27 de Junio del 2008)
----------------------------------------------
Lista de Acciones (por Acción Directa):
C:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Bagle Acceso Denegado.

Mon Dec 01 20:19:22 2008
EliBagle v11.53 ©2008 S.G.H. / Satinfo S.L. (Actualizado el 27 de Junio del 2008)
----------------------------------------------
Lista de Acciones (por Acción Directa):
C:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Bagle Acceso Denegado.
Por favor, envienos una muestra del fichero
C:\Muestras\SROSA.SYS.Muestra EliBagle v11.53
a "virus@satinfo.es". Gracias.
C:\WINDOWS\SYSTEM32\DRIVERS\SROSA.SYS --> Bagle Acceso Denegado.
C:\DOCUMENTS AND SETTINGS\LUCIEN\APPLICATION DATA\M\FLEC006.EXE --> Bagle Acceso Denegado.

Mon Dec 01 20:22:34 2008
EliBagle v11.53 ©2008 S.G.H. / Satinfo S.L. (Actualizado el 27 de Junio del 2008)
----------------------------------------------
Lista de Acciones (por Acción Directa):
C:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Eliminado Bagle
Por favor, envienos una muestra del fichero
C:\Muestras\SROSA.SYS.Muestra EliBagle v11.53
a "virus@satinfo.es". Gracias.
C:\WINDOWS\SYSTEM32\DRIVERS\SROSA.SYS --> Eliminado Bagle
C:\DOCUMENTS AND SETTINGS\LUCIEN\APPLICATION DATA\M\FLEC006.EXE --> Eliminado Bagle
Restaurada Clave: "SafeBoot\Minimal y Network"

Mon Dec 01 20:23:27 2008
EliBagle v11.53 ©2008 S.G.H. / Satinfo S.L. (Actualizado el 27 de Junio del 2008)
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\
C:\!KillBox\WINTEMS.EXE --> Eliminado Bagle
C:\WINDOWS\system32\MDELK.EXE --> Eliminado Bagle
C:\WINDOWS\system32\drivers\downld\102703.EXE --> Eliminado Bagle
C:\WINDOWS\system32\drivers\downld\109890.EXE --> Eliminado Bagle
C:\WINDOWS\system32\drivers\downld\114765.EXE --> Eliminado Bagle
C:\WINDOWS\system32\drivers\downld\115609.EXE --> Eliminado Bagle
C:\WINDOWS\system32\drivers\downld\123078.EXE --> Eliminado Bagle
C:\WINDOWS\system32\drivers\downld\134640.EXE --> Eliminado Bagle
C:\WINDOWS\system32\drivers\downld\145203.EXE --> Eliminado Bagle
C:\WINDOWS\system32\drivers\downld\161937.EXE --> Eliminado Bagle
C:\WINDOWS\system32\drivers\downld\167656.EXE --> Eliminado Bagle
C:\WINDOWS\system32\drivers\downld\171218.EXE --> Eliminado Bagle
C:\WINDOWS\system32\drivers\downld\174125.EXE --> Eliminado Bagle
C:\WINDOWS\system32\drivers\downld\179875.EXE --> Eliminado Bagle
C:\WINDOWS\system32\drivers\downld\184953.EXE --> Eliminado Bagle
C:\WINDOWS\system32\drivers\downld\189343.EXE --> Eliminado Bagle
C:\WINDOWS\system32\drivers\downld\224890.EXE --> Eliminado Bagle
C:\WINDOWS\system32\drivers\downld\237234.EXE --> Eliminado Bagle
C:\WINDOWS\system32\drivers\downld\365046.EXE --> Eliminado Bagle

Nº Total de Directorios: 16153
Nº Total de Ficheros: 159996
Nº de Ficheros Analizados: 15905
Nº de Ficheros Infectados: 19
Nº de Ficheros Limpiados: 19

Mon Dec 01 20:29:40 2008
EliBagle v11.53 ©2008 S.G.H. / Satinfo S.L. (Actualizado el 27 de Junio del 2008)
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

Nº Total de Directorios: 16153
Nº Total de Ficheros: 159977
Nº de Ficheros Analizados: 15886
Nº de Ficheros Infectados: 0
Nº de Ficheros Limpiados: 0


Et voici le scan de blacklight après passage de elibagla.... Si ça peut vous aider!

12/01/08 20:50:08 [Info]: BlackLight Engine 2.2.1092 initialized
12/01/08 20:50:08 [Info]: OS: 5.1 build 2600 (Service Pack 3)
12/01/08 20:50:08 [Note]: 7019 4
12/01/08 20:50:08 [Note]: 7005 0
12/01/08 20:50:13 [Note]: 7006 0
12/01/08 20:50:13 [Note]: 7011 264
12/01/08 20:50:13 [Note]: 7035 0
12/01/08 20:50:15 [Note]: 7026 0
12/01/08 20:50:16 [Note]: 7026 0
12/01/08 20:50:16 [Note]: 7024 3
12/01/08 20:50:16 [Info]: Hidden process: C:\WINDOWS\system32\wintems.exe
12/01/08 20:50:16 [Note]: 7024 3
12/01/08 20:50:16 [Info]: Hidden process: C:\Documents and Settings\Lucien\Application Data\m\flec006.exe
12/01/08 20:50:16 [Note]: 7024 3
12/01/08 20:50:16 [Info]: Hidden process: C:\WINDOWS\system32\drivers\winfilse.exe
12/01/08 20:50:20 [Note]: FSRAW library version 1.7.1024
12/01/08 20:50:22 [Info]: Hidden file: C:\Documents and Settings\Lucien\Application Data\m\flec006.exe
12/01/08 20:50:22 [Note]: 10002 2
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\1st Audio Splitter Extracto
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\3D_Constructo_Combat_1.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\448Delta Encryption 1.0.2.9
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\ABC Wallpaper Machine 2.20.
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Access Key 6.1.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\ActiveEarth_2.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\AcuSat_1.01_(Crack).zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Image Printer Professional
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Image_Converter_&_Resizer_1
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Image_Converter_DLL_1.21.zi
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\IMterrupt_Professional_2006
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\ImTOO DVD to PSP Converter
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Invez 3.013.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\IP_Country_Lookup_1.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Israel_Calendar_1.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\BV IMaGe ConVeRter 1.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Byteko FineAnces 1.5.115.zi
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Celtx 0.9.9.1.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\CGIVote_1.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Chilkat Charset ActiveX 10.
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Citrix 1Y0-222 Practice Tes
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\ClipboardDoc 1.0.1.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Color_Inspector_1.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Color_Pilot_Junior_1.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Comfort Templates Manager 2
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\panda.platinum.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Parse-O-Matic Power Tool 4.
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Passwords_Plus_1.006.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Pc Tools File Recover 6.2.0
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Perspector 4.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\PhotoMark_1.3.0.39_[Crack].
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\PhotoStory 2005.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\PowerConverter_XP_5.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\QDBF 1.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\DJ Audio Editor 1.1.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\DunSpeed_2.0_With_Crack.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Electrochemical Cells Pro 2
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Eyes Relaxing and Focusing
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\FileFone_0.9p_Beta.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\FinanCalc for Excel ENG 2.0
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Framy_Green_Splash_1.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Free Batch Thumbnail Creato
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Friggin Funz Screensaver 1.
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\GPS DLL 1.0.3.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Hibernator_1.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Home_Library_XP_1.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\iFunny Icons Vol.2.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Lyripod_1.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\MailRecovery Professional 2
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Mamba - Animated Wallpaper
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Math_Basics_5.0_Patch.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Memory Stick Data Recovery
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Mobile_Soba_Lite_1.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Mojopac 1.0.2.5 Serial.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\MonitorOffSaver_1.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Advanced_WMA_Catalog_1.05xp
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Avg.Professional.Edition.7.
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Building_Formulas_1.0.13_(S
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Disk and Registry Uninstall
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Jesterware DVD Ripper Profe
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Look RS232 4.3.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Outbar.NET 1.1.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\QuickBuild_1.1.4.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\StockTick - Stock Ticker 20
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Tyrian_2000_demo.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\SWF_Scout_library_2.11_With
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\SwWeek 2.1.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\SysTools Notes to Excel 3.0
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\The Lock XP Security Manage
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\The_Scrambler_1.1.4a.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Tomb_Raider_II_Gold_demo_-_
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\TPropertyPageSaver_2.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Tsr Calculator 1.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\AVG.Antivirus.7.0.167.+.Ser
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\AVmixer Pro 1.2.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\AVX_Mp3_Info_1.1_With_Crack
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\AZ_Paint_&_Animated_GIF_Edi
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Batch_Folder_Creator_1.0_(K
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Battlefield_1942_-_The_Real
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Battleship_1.2.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Best Affiliate Programs 2.6
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\BrainStorm_3.5.2.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\MoreMotion Web Designer 3.3
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Multiple_Price_Options_Add-
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Musicworld_Onlinr_1.01.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\MyTunesRSS 3.0 RC4.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Net Usage Item 1.2.171.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Network_Password_Recovery_W
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Okoker Encrypt Folder 1.6.z
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Onbidder_3.02.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\OptimizeMe_1.2.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\RakeHelper 1.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Raw_HTML_Editor_1.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Registry_Defragmenter_&_Com
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Remote Folders 1.37.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Repair My Backup for BKF fi
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\RestoreIT 7.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\SecureWord_Mobile_1.5.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\SMS_in_a_Box_0.8.336.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Complete PC Care 10.0 Crack
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\CorrectPhoto 2.0.3.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Create_Your_Business_Card_1
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Credit_Card_Butler_Software
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Crypteze 1.1.0.512.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\DealHound 0.8.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Declan's_Japanese_Dictionar
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Diablo II Throw Weapons mod
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Diary_Defender_1.8.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Directory_Submitter_1.2_[Ke
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Unreal_Tournament_2004_All_
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Video_Timecode_Calculator_1
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\VMPC Data Security 50201.zi
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Voice_Insert_ActiveX_2.5.zi
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Walls_And_Balls_0.7.4.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Windows Certificate Enrollm
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\WorkOrder XP 1.0.13.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\All-Purpose Resumes 1.03.zi
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Amazing Girls Photo Screens
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Army Men 2 1.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\ASP.NET_Documentation_Tool_
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Asterisk Logger 1.04.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\AtFinCalc 1.0.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\AthenaQuizEdit_1.0.1.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\John Lennon Screensaver 1.0
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\Jvw_Google_rank_and_pageran
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\King Tut's Tomb in Las Vega
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\LingvoSoft Talking Dictiona
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\LisaSoft DVD to Mac iPhone
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Info]: Hidden file: c:\Documents and Settings\Lucien\Application Data\m\shared\LLuna 2.5.3.zip
12/01/08 20:50:22 [Note]: 10002 3
12/01/08 20:50:22 [Note]: 10002 2
12/01/08 20:50:22 [Note]: 10002 2
12/01/08 20:51:27 [Info]: Hidden file: c:\Program Files\Movie Maker\shared\empty.txt
12/01/08 20:51:27 [Note]: 10002 3
12/01/08 20:51:27 [Info]: Hidden file: c:\Program Files\Movie Maker\shared\filters.xml
12/01/08 20:51:27 [Note]: 10002 3
12/01/08 20:51:27 [Info]: Hidden file: c:\Program Files\Movie Maker\shared\news.png
12/01/08 20:51:27 [Note]: 10002 3
12/01/08 20:51:27 [Info]: Hidden file: c:\Program Files\Movie Maker\shared\paint.png
12/01/08 20:51:27 [Note]: 10002 3
12/01/08 20:51:27 [Info]: Hidden file: c:\Program Files\Movie Maker\shared\profiles\blank.txt
12/01/08 20:51:27 [Note]: 10002 3
12/01/08 20:51:27 [Info]: Hidden file: c:\Program Files\Movie Maker\shared\sample1.jpg
12/01/08 20:51:27 [Note]: 10002 3
12/01/08 20:51:27 [Info]: Hidden file: c:\Program Files\Movie Maker\shared\sample2.jpg
12/01/08 20:51:27 [Note]: 10002 3
12/01/08 20:51:27 [Note]: 10002 2
12/01/08 20:51:27 [Note]: 10002 2
12/01/08 20:54:06 [Note]: 10002 2
12/01/08 20:54:06 [Note]: 10002 2
12/01/08 20:54:56 [Info]: Hidden file: c:\WINDOWS\system32\mdelk.exe
12/01/08 20:54:56 [Note]: 10002 2
12/01/08 20:54:56 [Info]: Hidden file: C:\WINDOWS\system32\wintems.exe
12/01/08 20:54:56 [Note]: 10002 2
12/01/08 20:55:01 [Info]: Hidden file: c:\WINDOWS\system32\drivers\srosa.sys
12/01/08 20:55:01 [Note]: 10002 2
12/01/08 20:55:01 [Info]: Hidden file: C:\WINDOWS\system32\drivers\winfilse.exe
12/01/08 20:55:01 [Note]: 10002 2
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\164171.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\279359.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\101140.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\101890.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\102359.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\103296.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\103906.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\105468.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\111593.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\113828.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\114546.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\117734.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\118375.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\119203.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\123390.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\124437.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\125843.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\129421.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\129984.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\130125.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\131796.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\132593.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\135125.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\135984.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\137312.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\140750.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\141578.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\145921.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\150921.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\151265.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\151562.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\153375.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\162468.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\171656.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\173750.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\173968.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\180359.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\181453.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\192640.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\193765.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\197812.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\200359.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\200437.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\201125.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\201453.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\201531.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\204125.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\213468.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\215937.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\224828.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\227703.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\228781.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\231656.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\235125.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\237000.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\238437.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\239421.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\241937.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\255640.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\256015.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\257015.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\257531.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\262640.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\264453.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\269703.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\272750.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\279375.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\287515.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\293828.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\325375.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\408000.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\413562.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\446656.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\459406.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\535296.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\54250.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\56015.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\565281.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\565968.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\57218.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\57359.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\596000.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\60750.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\62281.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\63250.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\64187.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\65296.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\73234.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\78656.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\79593.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\84031.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\84593.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\85578.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\85656.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\89812.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\90453.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\91343.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\91406.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\91875.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\92515.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\94468.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Info]: Hidden file: c:\WINDOWS\system32\drivers\downld\97296.exe
12/01/08 20:55:04 [Note]: 10002 3
12/01/08 20:55:04 [Note]: 10002 2
12/01/08 20:55:04 [Note]: 10002 2
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 3
12/01/08 20:55:10 [Note]: 10002 2
12/01/08 20:55:10 [Note]: 10002 2
12/01/08 20:56:33 [Note]: 2000 1012
12/01/08 20:57:03 [Note]: 7007 0

Merci beaucoup d'avance pour votre aide!

Baroudeur

01-12-2008, 20:25 PM
télécharge virus cleaner de avast et lance le http://www.avast.com/fre/down_cleaner.html

redemarre , puis essaye a nouveau hijackthis

Essaye aussi de desinstaller avast puis le reinstaller
ensuite il va te demander de redemarrer avec un scan au demarrage
Fait le

Aleaseptic

01-12-2008, 20:51 PM
L'analyse est en cours pour ce qui est de avast j'ai dejà essayé de le désinstaller et ensuite de le réinstaller rien à faire!
Merci à toi!

Aleaseptic

01-12-2008, 21:48 PM
l'analyse n'a rien donné! Il n'a rien trouvé et impossible d'installer hijackthis! En fait c'est pour ça que j'ai posté ce que blacklight a scanné! J'ai KillBox qui peut supprimer les entrées! Mais bon... Quelqu'un a une idée??? A l'aide svp!!!

Troll

01-12-2008, 22:35 PM
Salut vous deux,


Allez Alea je l'y penche tout compte fait...


Je suggère de faire tout d'abord un bon petit nettoyage.

Attention, ne réactive pas la restauration système tant qu'on ne te l'a pas dit explicitement. On te dira quand la réactiver. (quand on sera sûr qu'il ne reste rien, notamment)



Voilà, bon courage, bonne nuit Wink

Aleaseptic

01-12-2008, 23:10 PM
Merci Troll
Mais mon prblème est là! Je n'arrive pas à demarrer en mode sans echec! Lors du lancement (affichage de la liste des composants) mon ordi reboot automatiquement... Et je n'arrive pas non plus à lancer avg et spybot ccleaner etc... : erreur application win32 non valide...
Une idée?

Merci encore!

criters

02-12-2008, 11:01 AM
Pourquoi n'arrive tu pas a démarrer en mode sans echec ?

Tu as le menu en appuyant sur F8 lors du démarrage ?
Tu n'a pas l'option "Demarrer en mode sans echec" ?

Aleaseptic

02-12-2008, 11:51 AM
sisi!
En fait comme je le dit c'est après avoir choisi mode sans échec que la liste s'affiche en écriture blanche et fond noir
que l'ordi redémarre automatiquement... je comprend pas!!! Aidez moi svp je sais pas quoi faire...

criters

02-12-2008, 12:41 PM
Bon tout d'abord si tu as une clef usb (ou pas) télécharge :
http://www.01net.com/telecharger/windows...50186.html

C'est un anti virus très léger qui a pour but de supprimer les virus les plus connu , avec de la chance cela pourra enlever tes problèmes principaux(ne t'inquiète pas c'est un utilitaire gratuit)
Il va scanner tes fichiers et tes processus

Pourquoi sur une clef usb ? cela se peut que le virus n'empêche pas exécution d'un programme a partir d'un disque amovible et donc une chance de plus de faire marcher anti virus


Suite a cela , il faudra encore réinstaller soit Avast ou Nod32 (Les 2 sont très bon)

Aleaseptic

02-12-2008, 14:04 PM
Ne t'en fais pas je m'inquiète rarement Smile
Mais comme pour le reste impossible de lancer le processus une fois installé! Erreur win 32 non valide! Apparemment mon virus est : BLAST
L'idée de la clé usb était bonne mais ça ne fonctionne pas non plus!
Merci pour votre aide mais là je commence à me dire qu'une réinstallation de windows ira peut être plus vite...
Mais c'est bizarre cette histoire de mode sans échec qui ne se lance pas! J'ai même branché un clavier avec fil directement sur la carte mère et pas moyen, il reboot en permanence...

Une idée svp... :cry:

Merci d'avance
Pages : 1 2 3
Forums d'entraide informatique - Les forums de PCW > Forum Informatique > Sécurité Informatique > infection?!
URLs de référence