Il y a une clé que j'ai connecté, la seconde je ne la retrouve pas (ma soeur me l'a surement emprêté, la clé n'est pas chez moi, je l'utilise rarement).
Donc voici le rapport :
############################## [ FindyKill V4.729 ]
# User : toby (Administrateurs) # PC-DE-TOBY
# Update on 19/05/09 by Chiquitine29
# Start at: 22:51:07 | 19/05/2009
# Website :
http://pagesperso-orange.fr/NosTools/findykill.html
# Intel(R) Core(TM)2 Quad CPU Q9400 @ 2.66GHz
# Microsoft® Windows Vista™ Edition Familiale Premium (6.0.6001 32-bit) # Service Pack 1
# Internet Explorer 7.0.6001.18000
# Windows Firewall Status : Enabled
# C: # Disque fixe local # 916,45 Go (711,74 Go free) [OS] # NTFS
# D: # Disque fixe local # 15 Go (9,5 Go free) [RECOVERY] # NTFS
# E: # Disque CD-ROM
# F: # Disque CD-ROM # 493,8 Mo (0 Mo free) [AIO928_R4.39] # CDFS
# G: # Disque amovible
# H: # Disque amovible
# I: # Disque amovible
# J: # Disque amovible
# K: # Disque amovible # 3,73 Go (3,64 Go free) # FAT32
############################## [ Processus actifs ]
C:WindowsSystem32smss.exe
C:Windowssystem32csrss.exe
C:Windowssystem32wininit.exe
C:Windowssystem32csrss.exe
C:Windowssystem32services.exe
C:Windowssystem32lsass.exe
C:Windowssystem32lsm.exe
C:Windowssystem32svchost.exe
C:Windowssystem32svchost.exe
C:Windowssystem32Ati2evxx.exe
C:WindowsSystem32svchost.exe
C:WindowsSystem32svchost.exe
C:Windowssystem32svchost.exe
C:Windowssystem32SLsvc.exe
C:Windowssystem32svchost.exe
C:Windowssystem32winlogon.exe
C:Windowssystem32svchost.exe
C:Windowssystem32WUDFHost.exe
C:WindowsSystem32spoolsv.exe
C:Windowssystem32svchost.exe
C:Windowssystem32Ati2evxx.exe
C:Windowssystem32Dwm.exe
C:WindowsExplorer.EXE
C:Program FilesDellMFP_DELLdeDvcStatus.exe
C:Program FilesScanSoftOmniPageSE4OpWareSE4.exe
C:Program FilesIntelIntel Matrix Storage ManagerIAAnotif.exe
C:Program FilesCreativeSound Blaster X-FiVolume PanelVolPanlu.exe
C:WindowsSystem32Ctxfihlp.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticMOM.exe
C:WindowsSystem32CTxfispi.exe
C:Program FilesCorelCorel Snapfire PlusCorel Photo Downloader.exe
C:Windowsehomeehtray.exe
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:Program FilesWindows Media Playerwmpnscfg.exe
C:Program FilesCommon FilesInstallShieldUpdateServiceissch.exe
C:Users obyAppDataRoamingdriverswinupgro.exe
C:Program FilesWIDCOMMBluetooth SoftwareBTTray.exe
C:Program FilesMegatecUPSilon 2000Monw32.exe
C:Windowsehomeehmsas.exe
C:Program FilesATI TechnologiesATI.ACECore-StaticCCC.exe
C:Windowssystem32 askeng.exe
C:Windowssystem32 askeng.exe
C:Windowssystem32svchost.exe
C:Program FilesDellMFP_DELLdeMntrService.exe
C:Program FilesIntelIntel Matrix Storage ManagerIaantmon.exe
C:Windowssystem32PnkBstrA.exe
C:Windowssystem32svchost.exe
C:Windowssystem32PSIService.exe
C:Program FilesMegatecUPSilon 2000RupsMon.exe
C:Program FilesMicrosoftSearch Enhancement PackSeaPortSeaPort.exe
C:Program FilesDell Support Centerinsprtsvc.exe
C:Windowssystem32svchost.exe
C:WindowsSystem32svchost.exe
C:Windowssystem32SearchIndexer.exe
C:Program FilesWIDCOMMBluetooth SoftwareBtStackServer.exe
C:Program FilesWindows Media Playerwmpnetwk.exe
C:Windowssystem32WUDFHost.exe
C:Windowssystem32wbemunsecapp.exe
C:Windowssystem32wbemwmiprvse.exe
C:Windowssystem32 askeng.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesWindows LiveToolbarwltuser.exe
C:WindowsMicrosoft.NETFrameworkv3.0Windows Communication Foundationinfocard.exe
C:Users obyAppDataRoamingmflec006.exe
C:Windowssystem32wintems.exe
C:WindowsSystem32mobsync.exe
C:Windowssystem32conime.exe
C:Windowssystem32wbemwmiprvse.exe
################## [ Processus infectieux stoppés ]
"C:Users obyAppDataRoamingdriverswinupgro.exe" (2104)
"C:Users obyAppDataRoamingmflec006.exe" (3712)
"C:Windowssystem32wintems.exe" (5340)
################## [ Fichiers / Dossiers infectieux ]
Found ! C:Windowssystem32an_list.txt
Found ! C:Windowssystem32mdelk.exe
Found ! C:Windowssystem32wintems.exe
Found ! C:Windowssystem32driversdown
Found ! "C:Users obyAppDataRoamingdrivers"
Found ! "C:Users obyAppDataRoamingdriversdownld"
Found ! "C:Users obyAppDataRoamingdriverssrosa2.sys"
Found ! "C:Users obyAppDataRoamingdriverswfsintwq.sys"
Found ! "C:Users obyAppDataRoamingdriverswinupgro.exe"
Found ! "C:Users obyAppDataRoamingm"
Found ! "C:Users obyAppDataRoamingmdata.oct"
Found ! "C:Users obyAppDataRoamingmflec006.exe"
Found ! "C:Users obyAppDataRoamingmlist.oct"
Found ! "C:Users obyAppDataRoamingmshared"
Found ! "C:Users obyAppDataRoamingmsrvlist.oct"
################## [ Infected Temp Files ]
Found ! C:Users obyLocal SettingsTemporary Internet FilesContent.IE5L01C1GS564_6[1].jpg
Found ! C:Users obyLocal SettingsTemporary Internet FilesContent.IE5L01C1GS5file[1].txt
Found ! C:Users obyLocal SettingsTemporary Internet FilesContent.IE5YV7C7BNTfile[1].txt
Found ! C:Users obyLocal SettingsTemporary Internet FilesContent.IE5YV7C7BNTfile[2].txt
Found ! C:Users obyLocal SettingsTemporary Internet FilesContent.IE5ML0GRPI64[1].jpg
Found ! C:Users obyLocal SettingsTemporary Internet FilesContent.IE5ML0GRPI64_1[1].jpg
Found ! C:Users obyLocal SettingsTemporary Internet FilesContent.IE5ML0GRPI64_3[1].jpg
Found ! C:Users obyLocal SettingsTemporary Internet FilesContent.IE5ML0GRPI64_3[2].jpg
################## [ Registre / Clés infectieuses ]
Found ! HKEY_USERSS-1-5-21-2947922233-315922049-389500266-1000SoftwareLocal AppWizard-Generated Applicationswinupgro
Found ! HKEY_USERSS-1-5-21-2947922233-315922049-389500266-1000Softwareisoft
Found ! HKEY_USERSS-1-5-21-2947922233-315922049-389500266-1000SoftwareDateTime4
Found ! HKEY_USERSS-1-5-21-2947922233-315922049-389500266-1000SoftwareFFC
Found ! HKEY_USERSS-1-5-21-2947922233-315922049-389500266-1000SoftwareMuleAppData
Found ! HKEY_USERSS-1-5-21-2947922233-315922049-389500266-1000SoftwareUbisoft
Found ! HKEY_CURRENT_USERSoftwareLocal AppWizard-Generated Applicationswinupgro
Found ! HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicessrosa
Found ! HKEY_LOCAL_MACHINESYSTEMControlSet001Servicessrosa
Found ! HKEY_LOCAL_MACHINESYSTEMControlSet002Servicessrosa
Found ! HKEY_LOCAL_MACHINESYSTEMCurrentControlSetEnumRootLEGACY_SROSA
Found ! HKEY_LOCAL_MACHINESYSTEMControlSet001EnumRootLEGACY_SROSA
Found ! HKEY_LOCAL_MACHINESYSTEMControlSet002EnumRootLEGACY_SROSA
Found ! HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicessK9Ou0s
Found ! HKEY_LOCAL_MACHINESYSTEMControlSet001ServicessK9Ou0s
Found ! HKEY_LOCAL_MACHINESYSTEMControlSet002ServicessK9Ou0s
Found ! HKEY_LOCAL_MACHINESYSTEMCurrentControlSetEnumRootLEGACY_SK9OU0S
Found ! HKEY_LOCAL_MACHINESYSTEMControlSet001EnumRootLEGACY_SK9OU0S
Found ! HKEY_LOCAL_MACHINESYSTEMControlSet002EnumRootLEGACY_SK9OU0S
Found ! HKEY_CURRENT_USERSoftwareisoft
Found ! HKEY_CURRENT_USERSoftwareDateTime4
Found ! HKEY_CURRENT_USERSoftwareMuleAppData
Found ! HKEY_CURRENT_USERSoftwareFFC
Found ! HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun\"drvsyskit"
Found ! HKEY_USERSS-1-5-21-2947922233-315922049-389500266-1000SoftwareMicrosoftWindowsCurrentVersionRun\"drvsyskit"
Found ! HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun\"german.exe"
Found ! HKEY_USERSS-1-5-21-2947922233-315922049-389500266-1000SoftwareMicrosoftWindowsCurrentVersionRun\"german.exe"
Found ! HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun\"mule_st_key"
Found ! HKEY_USERSS-1-5-21-2947922233-315922049-389500266-1000SoftwareMicrosoftWindowsCurrentVersionRun\"mule_st_key"
# (!) HKLMSYSTEM...Servicessrosa -> Start = 0x1
# (!) HKLMSYSTEM...ServicessK9Ou0s -> Start = 0x1
################## [ Recherche dans supports amovibles]
Found ! F:autorun.inf
################## [ Registre / Mountpoints2 ]
# -> Not found !
################## [ ! Fin du rapport # FindyKill V4.729 ! ]
