----------------- FindyKill V4.710 ------------------ * User : Julien - JULIEN-PC * executed from : C:\Program Files\FindyKill * Update on 21/12/08 par Chiquitine29 * Start at 15:00:51 the di 30/12/2008 * Windows Vista - Internet Explorer 7.0.6001.18000 ((((((((((((((( *** deleting *** )))))))))))))))))) --------------- [ Active Processes ] ---------------- C:\Windows\System32\smss.exe C:\Windows\system32\csrss.exe C:\Windows\system32\wininit.exe C:\Windows\system32\csrss.exe C:\Windows\system32\winlogon.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe C:\Windows\system32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\system32\svchost.exe C:\Windows\system32\svchost.exe C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe C:\Windows\system32\svchost.exe C:\Windows\System32\ZoneLabs\vsmon.exe C:\Windows\system32\Dwm.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\Program Files\Alwil Software\Avast4\setup\avast.setup C:\Windows\System32\spoolsv.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\svchost.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\taskeng.exe C:\Program Files\Google\Update\GoogleUpdate.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Windows\system32\svchost.exe C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe C:\Windows\system32\svchost.exe C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe C:\Windows\System32\svchost.exe C:\Windows\system32\IoctlSvc.exe C:\Windows\System32\svchost.exe C:\Program Files\CyberLink\Shared files\RichVideo.exe C:\Program Files\Spyware Doctor\pctsAuxs.exe C:\Program Files\Spyware Doctor\pctsSvc.exe C:\Windows\system32\svchost.exe C:\Windows\System32\TUProgSt.exe C:\Program Files\Spyware Doctor\pctsTray.exe C:\Windows\System32\svchost.exe C:\Windows\system32\SearchIndexer.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\runonce.exe C:\Windows\system32\conime.exe --------------- [ Infected files / folders ] ---------------- »»»» Supression files in C: »»»» Supression files in C:\Windows Deleted ! - "C:\Windows\crack\crack.exe" Deleted ! - "C:\Windows\crack" »»»» Supression files in C:\Windows\Prefetch »»»» Supression files in C:\Windows\system32 »»»» Supression files in C:\Windows\system32\config\systemprofile\AppData\Roaming »»»» Supression files in C:\Windows\system32\drivers »»»» Supression files in C:\Users\Julien\AppData\Roaming »»»» Supression files in C:\Users\Julien\AppData\Local\Temp »»»» Supression files in C:\Users\Julien\Local Settings\Temporary Internet Files\Content.IE5 Deleted ! - C:\Users\Julien\AppData\Local\Magentic\Runtime\ScreenSaver\40242AE5-DFC3-4FA108AC7-10CCDD67B640\tranquil_thumb.jpg --------------- [ Registry / Infected keys ] ---------------- Deleted ! - HKEY_CURRENT_CONFIG\System\CurrentControlSet\Enum\ROOT\LEGACY_SROSA --------------- [ States / Restarting of services ] ---------------- +- Services : [ Auto=2 / Request=3 / Disable=4 ] Ndisuio - Type of startup = 3 EapHost - Type of startup = 2 Wlansvc - Type of startup = 2 SharedAccess - Type of startup = 2 wuauserv - Type of startup = 2 wscsvc - Type of startup = 2 WinDefend - Type of startup = 2 --------------- [ Cleaning removable drives ] ---------------- +- Informations : C: - vast station D: - vast station +- deleting files : --------------- [ Registry / Mountpoint2 ] ---------------- -> Not found ! --------------- [ Searching Cracks / Keygen ] ---------------- C:\Users\Julien\AppData\Roaming\Azureus\torrents\ADOBE_CS3_MASTER_COLLECTION_CORPORATE_FINAL_INCL_CRACK.3804307.TPB.torrent C:\Users\Julien\Documents\LimeWire\Incomplete\SJ6JJTHXCKTXA4EYNRODUUEKCECCKAZI\.datWindows Vista Crack C:\Users\Julien\Documents\LimeWire\Incomplete\SJ6JJTHXCKTXA4EYNRODUUEKCECCKAZI\Windows Vista Crack C:\Users\Julien\Documents\LimeWire\Incomplete\SJ6JJTHXCKTXA4EYNRODUUEKCECCKAZI\Windows Vista Crack\0.jpg C:\Users\Julien\Documents\LimeWire\Incomplete\SJ6JJTHXCKTXA4EYNRODUUEKCECCKAZI\Windows Vista Crack\1.jpg C:\Users\Julien\Documents\LimeWire\Incomplete\SJ6JJTHXCKTXA4EYNRODUUEKCECCKAZI\Windows Vista Crack\2.jpg C:\Users\Julien\Documents\LimeWire\Incomplete\SJ6JJTHXCKTXA4EYNRODUUEKCECCKAZI\Windows Vista Crack\Crack C:\Users\Julien\Documents\LimeWire\Incomplete\SJ6JJTHXCKTXA4EYNRODUUEKCECCKAZI\Windows Vista Crack\Readme.doc C:\Users\Julien\Documents\LimeWire\Incomplete\SJ6JJTHXCKTXA4EYNRODUUEKCECCKAZI\Windows Vista Crack\Crack\data C:\Users\Julien\Documents\LimeWire\Incomplete\SJ6JJTHXCKTXA4EYNRODUUEKCECCKAZI\Windows Vista Crack\Crack\data\Acer.bin C:\Users\Julien\Documents\LimeWire\Incomplete\SJ6JJTHXCKTXA4EYNRODUUEKCECCKAZI\Windows Vista Crack\Crack\data\Asus.bin C:\Users\Julien\Documents\LimeWire\Incomplete\SJ6JJTHXCKTXA4EYNRODUUEKCECCKAZI\Windows Vista Crack\Crack\data\Dell.bin C:\Users\Julien\Documents\LimeWire\Incomplete\SJ6JJTHXCKTXA4EYNRODUUEKCECCKAZI\Windows Vista Crack\Crack\data\Gateway.bin C:\Users\Julien\Documents\LimeWire\Incomplete\SJ6JJTHXCKTXA4EYNRODUUEKCECCKAZI\Windows Vista Crack\Crack\data\HP.bin C:\Users\Julien\Documents\LimeWire\Incomplete\SJ6JJTHXCKTXA4EYNRODUUEKCECCKAZI\Windows Vista Crack\Crack\data\Lenovo.bin C:\Users\Julien\Documents\LimeWire\Incomplete\SJ6JJTHXCKTXA4EYNRODUUEKCECCKAZI\Windows Vista Crack\Crack\data\NEC.bin C:\Users\Julien\Documents\LimeWire\Incomplete\SJ6JJTHXCKTXA4EYNRODUUEKCECCKAZI\Windows Vista Crack\Crack\data\Sony.bin C:\Users\Julien\Documents\LimeWire\Incomplete\SJ6JJTHXCKTXA4EYNRODUUEKCECCKAZI\Windows Vista Crack\Crack\data\vstaldr1 C:\Users\Julien\Documents\LimeWire\Incomplete\SJ6JJTHXCKTXA4EYNRODUUEKCECCKAZI\Windows Vista Crack\Crack\data\vstaldr2 ---------------- ! End of report ! ------------------