Virus énorme!!

Bonjour,
j'ai installé un programme par mégarde et il m'a désinstallé l'antivirus et empéché le fonctionnement de mon anti trojan antispam uniblue qui est complètement paralyser
je ne sais pas comment faire il n'apparait pas dans les programmes donc je ne peux pas le désinstaller
de plus je ne peux plus aller sur internet cela ne fonctionne plus je suis sur un autre ordinateur
avant de formater et de tout réinstaller puis je faire quelque chose de moins lourd?
Configuration: Windows XP sp3
Firefox 3.0.5

15 réponses

  • Votes
  • Date
  • Date décroissante
  1. essay une restauration du systeme
    1. Bonjour

      1°- Le malware Beagle est en réalité un ver informatique se propageant essentiellement par :
      - les logiciels p2p
      - via de faux cracks (=logiciels piratés !)
      - ainsi que par mail.
      L'internaute croyant « télécharger un crack pour un logiciel en faisant une recherche via un logiciel p2p » installe lui-même le ver sur son ordinateur ; car le fichier.exe contenu dans l'archive est en réalité le ver Beagle !
      2°- --> Plus que jamais, il devient ESSENTIEL d'éviter tous les sites de cracks, warez, ...

      3°- Pour t'en convaincre, lis le contenu très clair de ces liens:
      •- les premiers sont de Malekal_morte et concernent les cracks =>
      http://forum.malekal.com/ftopic4869.php
      http://forum.malekal.com/ftopic893.php
      http://forum.malekal.com/ftopic4442.php
      •- le second de Tesgaz concerne le P2P en général =>
      https://forum.zebulon.fr/topic/85544-pr%C3%A9vention-le-p2p-et-ses-cons%C3%A9quences/

      * Le P2P ( l'utilisation de logiciels comme eMule, Sharazaa, LimeWire, Bit torrent):
      Les infections véhiculées pas le p2p sont une menace réelle!! par exemple le vers "Worm.Win32_Sumom-A" qui est un ver de messagerie instantanée et de réseaux peer-to-peer,se met dans le dossier "incoming/Shared" afin d'être expédié à toutes les personnes qui partagent tes téléchargements...
      L’infection « Worm.Win32_Sumom-A » => http://www.virustraq.com/info_virus/10134/details/
      Pourquoi éviter le P2P : http://www.speedweb1.org/forum-tesgaz/viewtopic.php?t=1793
      https://lexpansion.lexpress.fr/actualite-economique/

      Bonne lecture

      ======================================================

      Bagle fait joujou avec ton PC.

      --> Télécharge FindyKill (par Chiquitine29) sur ton bureau :
      http://sd-1.archive-host.com/membres/up/116615172019703188/FindyKill.exe

      --> Lance l'installation avec les paramètres par defaut

      --> Double-clique sur le raccourci FindyKill sur ton bureau

      --> Au menu principal, choisis l'option 1 (Recherche)

      --> Poste le rapport FindyKill.txt

      Note : le rapport FindyKill.txt est sauvegardé à la racine du disque.

      +++
      1. salut,

        c'est quoi exactement ce que tu as installé?

        tu es au près de ton ordinateur?
        1. voici le rapport désolé pour le délai mais j'avais un problème de clef usb

          merci de m'aider
          ############################## [ FindyKill V4.718 ]

          # User : nicolas (Administrateurs) # PRIGENT-8FBB20A
          # Update on 27/02/09 by Chiquitine29
          # Start at: 17:30:09 | 03/03/2009

          # Intel(R) Pentium(R) 4 CPU 2.80GHz
          # Microsoft Windows XP dition familiale (5.1.2600 32-bit) # Service Pack 3
          # Internet Explorer 7.0.5730.13
          # Windows Firewall Status : Disabled
          # AV : avast! antivirus 4.8.1335 [VPS 090225-1] 4.8.1335 [ (!) Disabled | Updated ]
          # FW : ZoneAlarm Firewall[ Enabled ]7.0.483.000

          # A:\ # Lecteur de disquettes 3 « pouces
          # C:\ # Disque fixe local # 26.37 Go (7.8 Go free) [windows] # NTFS
          # D:\ # Disque fixe local # 111.78 Go (51.63 Go free) [documents] # NTFS
          # E:\ # Disque fixe local # 279.47 Go (89.5 Go free) [global] # NTFS
          # F:\ # Disque CD-ROM
          # G:\ # Disque CD-ROM # 383.36 Mo (0 Mo free) [EWA1FROEM] # CDFS
          # H:\ # Disque CD-ROM
          # I:\ # Disque amovible # 248.75 Mo (247.38 Mo free) [SVT DANTEC] # FAT32

          ############################## [ Processus actifs ]

          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\csrss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          C:\Program Files\Java\jre6\bin\jqs.exe
          C:\WINDOWS\system32\nvsvc32.exe
          C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\TUProgSt.exe
          C:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe
          C:\WINDOWS\Explorer.EXE
          C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
          C:\Program Files\Pinnacle\PCTV Stereo\Remote\Remoterm.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          C:\Program Files\DAEMON Tools Lite\daemon.exe
          C:\Documents and Settings\nicolas.PRIGENT-8FBB20A\Application Data\drivers\winupgro.exe
          C:\WINDOWS\system32\wbem\wmiprvse.exe

          ################## [ Processus infectieux stoppés ]

          "C:\Documents and Settings\nicolas.PRIGENT-8FBB20A\Application Data\drivers\winupgro.exe" (1024)

          ################## [ Fichiers / Dossiers infectieux C:\ ]

          ################## [ C:\WINDOWS ]

          ################## [ C:\WINDOWS\system32 ]

          ################## [ C:\WINDOWS\system32\drivers ]

          ################## [ C:\.. Application Data ... ]

          Found ! - "C:\Documents and Settings\nicolas.PRIGENT-8FBB20A\Application Data\drivers"
          Found ! - "C:\Documents and Settings\nicolas.PRIGENT-8FBB20A\Application Data\drivers\srosa2.sys"
          Found ! - "C:\Documents and Settings\nicolas.PRIGENT-8FBB20A\Application Data\drivers\wfsintwq.sys"
          Found ! - "C:\Documents and Settings\nicolas.PRIGENT-8FBB20A\Application Data\drivers\winupgro.exe"
          Found ! - "C:\Documents and Settings\nicolas.PRIGENT-8FBB20A\Application Data\drivers\downld"

          ################## [ Registre / Clés infectieuses ]

          Found ! - HKEY_USERS\S-1-5-21-2052111302-1935655697-682003330-1004\Software\Local AppWizard-Generated Applications\winupgro
          Found ! - HKEY_USERS\S-1-5-21-2052111302-1935655697-682003330-1004\Software\bisoft
          Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro
          Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa
          Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
          Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s
          Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
          Found ! - HKEY_CURRENT_USER\Software\bisoft
          Found ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\"drvsyskit"
          Found ! - HKEY_USERS\S-1-5-21-2052111302-1935655697-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Run\\"drvsyskit"

          # Infection active : HKLM\SYSTEM\...\Services\srosa -> Start = 0x1
          # Infection active : HKLM\SYSTEM\...\Services\sK9Ou0s -> Start = 0x1

          ################## [ Recherche dans supports amovibles]

          # Contenu de l'autorun : G:\autorun.inf

          [autorun]
          open = Autorun.exe
          icon = EIWAAuto.ico

          # Presence des fichiers :

          Found ! [01/08/1913 14:04][-r-------] - G:\autorun.inf

          ################## [ Registre / Mountpoint2 ]

          # -> Not found !

          ################## [ ! Fin du rapport # FindyKill V4.718 ! ]
          1. Bonjour

            Double clic sur le raccourci FindyKill sur ton bureau

            Au menu principal, choisi l’option 2 (Suppression)

            /!\ il y aura 2 redémarrage, laisse travailler l’outils jusqu'à a l’apparition du message "nettoyage effectué"

            /!\ Ne te sert pas du pc durant la suppression, ton bureau ne sera pas accessible c est normal !

            Ensuite poste le rapport FindyKill.txt sauvegardé a la racine du disque

            Note : Si le Bureau ne réapparaît pas presse Ctrl + Alt + Supp, Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides

            1. ############################## [ FindyKill V4.718 ]

              # User : nicolas (Administrateurs) # PRIGENT-8FBB20A
              # Update on 27/02/09 by Chiquitine29
              # Start at: 17:57:23 | 03/03/2009

              # Intel(R) Pentium(R) 4 CPU 2.80GHz
              # Microsoft Windows XP dition familiale (5.1.2600 32-bit) # Service Pack 3
              # Internet Explorer 7.0.5730.13
              # Windows Firewall Status : Disabled
              # AV : avast! antivirus 4.8.1335 [VPS 090225-1] 4.8.1335 [ (!) Disabled | Updated ]
              # FW : ZoneAlarm Firewall[ Enabled ]7.0.483.000

              # A:\ # Lecteur de disquettes 3 « pouces
              # C:\ # Disque fixe local # 26.37 Go (7.77 Go free) [windows] # NTFS
              # D:\ # Disque fixe local # 111.78 Go (51.63 Go free) [documents] # NTFS
              # E:\ # Disque fixe local # 279.47 Go (89.5 Go free) [global] # NTFS
              # F:\ # Disque CD-ROM
              # G:\ # Disque CD-ROM # 383.36 Mo (0 Mo free) [EWA1FROEM] # CDFS
              # H:\ # Disque CD-ROM

              ############################## [ Active Processes ]

              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\csrss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\spoolsv.exe
              C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
              C:\Program Files\Java\jre6\bin\jqs.exe
              C:\WINDOWS\system32\nvsvc32.exe
              C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\TUProgSt.exe
              C:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe
              C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
              C:\Program Files\Pinnacle\PCTV Stereo\Remote\Remoterm.exe
              C:\WINDOWS\system32\ctfmon.exe
              C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
              C:\Program Files\DAEMON Tools Lite\daemon.exe
              C:\WINDOWS\system32\wbem\wmiprvse.exe

              ################## [ Infected Files / Folders C:\ ]

              ################## [ C:\WINDOWS ]

              ################## [ C:\WINDOWS\system32 ]

              ################## [ C:\WINDOWS\system32\drivers ]

              ################## [ C:\.. Application Data ... ]

              Deleted ! - "C:\Documents and Settings\nicolas.PRIGENT-8FBB20A\Application Data\drivers\srosa2.sys"
              Deleted ! - "C:\Documents and Settings\nicolas.PRIGENT-8FBB20A\Application Data\drivers\wfsintwq.sys"
              Deleted ! - "C:\Documents and Settings\nicolas.PRIGENT-8FBB20A\Application Data\drivers\winupgro.exe"
              Deleted ! - "C:\Documents and Settings\nicolas.PRIGENT-8FBB20A\Application Data\drivers\downld"
              Deleted ! - "C:\Documents and Settings\nicolas.PRIGENT-8FBB20A\Application Data\drivers"

              ################## [ Registry / Infected keys ]

              Deleted ! - HKEY_CURRENT_USER\Software\bisoft
              Deleted ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro
              Deleted ! - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\"drvsyskit"
              Deleted ! - HKEY_USERS\S-1-5-21-2052111302-1935655697-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Run\\"drvsyskit"

              ################## [ Cleaning Removable drives ]

              # Deleting files :

              ################## [ Registry / Mountpoint2 ]

              # -> Not found !

              ################## [ Searching Other Infections ]

              # Références de comparaison Bagle MD5 :

              e7d08797 C:\Documents and Settings\nicolas.PRIGENT-8FBB20A\Application Data\drivers\winupgro.exe
              0dd95f7cad549a33bbeac3128b055fc5 C:\Documents and Settings\nicolas.PRIGENT-8FBB20A\Application Data\drivers\winupgro.exe

              Suspect ! "C:\Program Files\Uniblue\SpyEraser\SpyEraser.exe"
              # Taille : 872448 # MD5 : 0DD95F7CAD549A33BBEAC3128B055FC5

              Suspect ! "C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP16\A0004922.exe"
              # Taille : 872448 # MD5 : 0DD95F7CAD549A33BBEAC3128B055FC5

              Suspect ! "D:\bourrique!!\setup.exe"
              # Taille : 872448 # MD5 : 0DD95F7CAD549A33BBEAC3128B055FC5

              ################## [ PEH Corrupted ]

              C:\Program Files\Alwil Software\Avast4\ashAvast.exe
              C:\Program Files\Alwil Software\Avast4\ashDisp.exe
              C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
              C:\Program Files\Alwil Software\Avast4\ashServ.exe
              C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
              C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              C:\Program Files\PowerQuest\PartitionMagic 8.0\DOCS\PM8Flash.exe
              C:\Program Files\PowerQuest\PartitionMagic 8.0\DrvMap.exe
              C:\Program Files\PowerQuest\PartitionMagic 8.0\pqbw.exe
              C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
              C:\Program Files\Zone Labs\ZoneAlarm\zatutor.exe
              C:\Program Files\Zone Labs\ZoneAlarm\zauninst.exe
              C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0003847.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0003848.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0003863.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0003866.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004858.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004859.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004860.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004863.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004864.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004865.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004866.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004867.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004868.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004876.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004877.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004878.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004879.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004880.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004881.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004882.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004885.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004886.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004891.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004892.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004893.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004896.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004897.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004898.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004899.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004900.exe
              C:\System Volume Information\_restore{80A6D8DD-5362-4CCE-B44F-090614E2B1AC}\RP15\A0004901.exe
              C:\WINDOWS\SoftwareDistribution\Download\2d4ddab9a9109e9ec75f14a0f408894b\update\update.exe
              C:\WINDOWS\SoftwareDistribution\Download\c3587308140154cec843541eb3824fc8\update\update.exe
              C:\WINDOWS\system32\ZoneLabs\updclient.exe
              C:\WINDOWS\system32\ZoneLabs\vsmon.exe

              ################## [ ! End of Report # FindyKill V4.718 ! ]

              merci
              1. Ok

                Tu relances FindyKill et tu fais l'option 4

                Ensuite

                C - Ccleaner :
                (nettoyeur de registre, cookies+temps+tempos+prefetch+historique+etc.)
                * Télécharge CCleaner.
                (attention à l'installation penser à DECOCHER l'installation de Yahoo toolbar discrètement proposé en plus de CCleaner).

                https://www.pcastuces.com/logitheque/ccleaner.htm
                http://www.commentcamarche.net/telecharger/telecharger 168 ccleaner
                Installe le dans un répertoire dédié.
                Décoche pendant l'installation
                --- les deux cases "Ajouter l'option ... "
                --- Contrôler les mises à jour
                * Lance Ccleaner pour un nettoyage complet.
                Tutorial ici:
                https://kerio.probb.fr/t242-tuto-ccleaner-v-2
                https://www.malekal.com/tutoriel-ccleaner/
                ET
                http://perso.orange.fr/jesses/Docs/Logiciels/CCleaner.htm

                F - Hijackthis - Outil de diagnostic et réparation
                télécharge HijackThis ici:
                http://telechargement.zebulon.fr/138-hijackthis-1991.html
                https://kerio.probb.fr/t62-comment-utiliser-et-comprendre-hijackthis
                Dézippe le dans un dossier prévu à cet effet.
                Par exemple C:\hijackthis < Enregistre le bien dans c : !
                Démo : (Merci a Balltrap34 pour cette réalisation)
                http://pageperso.aol.fr/balltrap34/Hijenr.gif
                Lance le puis:
                clique sur "do a system scan and save logfile" (cf démo)
                faire un copier coller du log entier sur le forum
                Démo : (Merci a Balltrap34 pour cette réalisation)
                http://pagesperso-orange.fr/rginformatique/section%20virus/demohijack.htm
                http://www.tutoriaux-excalibur.com/hijackthis.htm
                https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html

                Bon courage

                A+
                1. voila le log hijack

                  merci marie
                  Logfile of Trend Micro HijackThis v2.0.2
                  Scan saved at 19:24:22, on 03/03/2009
                  Platform: Windows XP SP3 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v7.00 (7.00.6000.16791)
                  Boot mode: Normal

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                  C:\Program Files\Java\jre6\bin\jqs.exe
                  C:\WINDOWS\system32\nvsvc32.exe
                  C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\TUProgSt.exe
                  C:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe
                  C:\WINDOWS\system32\wscntfy.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\explorer.exe
                  C:\WINDOWS\System32\svchost.exe
                  I:\HijackThis.exe

                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                  R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
                  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                  O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                  O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
                  O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
                  O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
                  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                  O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
                  O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
                  O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                  O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                  O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
                  O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
                  O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
                  O4 - HKLM\..\Run: [PCTVRemote] C:\Program Files\Pinnacle\PCTV Stereo\Remote\Remoterm.exe
                  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                  O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
                  O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKCU\..\Run: [Uniblue SpyEraser] "C:\Program Files\Uniblue\SpyEraser\SpyEraser.exe" -m
                  O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
                  O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                  O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                  O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                  O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                  O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O15 - Trusted Zone: http://*.orange.fr
                  O15 - Trusted Zone: http://rw.search.ke.voila.fr
                  O15 - Trusted Zone: http://orange.weborama.fr
                  O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
                  O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
                  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                  O18 - Protocol: skyline - {3A4F9195-65A8-11D5-85C1-0001023952C1} - C:\Program Files\Skyline\TerraExplorer\TerraExplorerX.dll
                  O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                  O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                  O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
                  O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
                  O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
                  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                  O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
                  O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
                  O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
                  O23 - Service: Uniblue DiskRescue - Uniblue - C:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe
                  1. voila
                    merci

                    ################################### [ FindyKill V4.718 ]

                    # User : nicolas (Administrateurs) # PRIGENT-8FBB20A
                    # Update on 27/02/09 by Chiquitine29
                    # Start at: 20:00:54 | 03/03/2009

                    # Intel(R) Pentium(R) 4 CPU 2.80GHz
                    # Microsoft Windows XP dition familiale (5.1.2600 32-bit) # Service Pack 3
                    # Internet Explorer 7.0.5730.13
                    # Windows Firewall Status : Disabled
                    # AV : avast! antivirus 4.8.1335 [VPS 090225-1] 4.8.1335 [ (!) Disabled | Updated ]
                    # FW : ZoneAlarm Firewall[ Enabled ]7.0.483.000

                    # A:\ # Lecteur de disquettes 3 « pouces
                    # C:\ # Disque fixe local # 26.37 Go (7.96 Go free) [windows] # NTFS
                    # D:\ # Disque fixe local # 111.78 Go (52.22 Go free) [documents] # NTFS
                    # E:\ # Disque fixe local # 279.47 Go (89.5 Go free) [global] # NTFS
                    # F:\ # Disque CD-ROM
                    # G:\ # Disque CD-ROM
                    # H:\ # Disque CD-ROM

                    ################################### [ Searching Cracks / Keygen ]

                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\bodies\characters\aged_juno\a_normal_neckcrack.anim
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\bodies\characters\juno\a_normal_neckcrack.anim
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\help_us_when_the_lapis_come
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\no_one_dies_now
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\stay_here_and_rot
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\we'll_deal_with_the_lapis
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_are_you_having_a_party
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_is_it_your_bedtime
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_should_i_gulp
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_those_deceiving
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\help_us_when_the_lapis_come\iconah_so_the_lapis_are_on_their.ogg
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\help_us_when_the_lapis_come\iconah_so_the_lapis_are_on_their.sfx
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\no_one_dies_now\iconah_nobodys_dying_today.ogg
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\no_one_dies_now\iconah_nobodys_dying_today.sfx
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\stay_here_and_rot\iconah_you_can_sit_here.ogg
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\stay_here_and_rot\iconah_you_can_sit_here.sfx
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\we'll_deal_with_the_lapis\iconah_well_you_just_go_on_feeling_sorry.ogg
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\we'll_deal_with_the_lapis\iconah_well_you_just_go_on_feeling_sorry.sfx
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_are_you_having_a_party\cybreed_they_ve_decided.ogg
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_are_you_having_a_party\cybreed_they_ve_decided.sfx
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_are_you_having_a_party\cybreed_unfortunately_the_cold_ladies.ogg
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_are_you_having_a_party\cybreed_unfortunately_the_cold_ladies.sfx
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_are_you_having_a_party\iconah_how_come_i_didnt_get_an_invitation.ogg
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_are_you_having_a_party\iconah_how_come_i_didnt_get_an_invitation.sfx
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_are_you_having_a_party\iconah_now_why_would_those.ogg
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_are_you_having_a_party\iconah_now_why_would_those.sfx
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_is_it_your_bedtime\cybreed_actuallty_it_is_but_we_cant_leave.ogg
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_is_it_your_bedtime\cybreed_actuallty_it_is_but_we_cant_leave.sfx
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_is_it_your_bedtime\cybreed_of_course_not.ogg
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_is_it_your_bedtime\cybreed_of_course_not.sfx
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_is_it_your_bedtime\cybreed_the_cold_whites_they_are.ogg
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_is_it_your_bedtime\cybreed_the_cold_whites_they_are.sfx
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_is_it_your_bedtime\iconah_im_not_stopping.ogg
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_is_it_your_bedtime\iconah_im_not_stopping.sfx
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_is_it_your_bedtime\iconah_sacrifice_whos_.ogg
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_is_it_your_bedtime\iconah_sacrifice_whos_.sfx
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_should_i_gulp\cybreed_irrelevant_check_your_scanners.ogg
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_should_i_gulp\cybreed_irrelevant_check_your_scanners.sfx
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_should_i_gulp\iconah_im_not_buying_it.ogg
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_should_i_gulp\iconah_im_not_buying_it.sfx
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_those_deceiving\cybreed_fool_take_a_look_at_your_scanners.ogg
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_those_deceiving\cybreed_fool_take_a_look_at_your_scanners.sfx
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_those_deceiving\iconah_i_see_well_then.ogg
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_those_deceiving\iconah_i_see_well_then.sfx
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_those_deceiving\iconah_well_arent_they_going.ogg
                    C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacrifice\dialog_with_crack\why_those_deceiving\iconah_well_arent_they_going.sfx
                    C:\Program Files\GIMP-2.0\share\gimp\2.0\patterns\cracked.pat

                    ################## [ ! Fin du rapport # FindyKill V4.718 ! ]
                    1. Bonjour

                      Faut que tu supprime tout tes cracks et keygens pour pouvoir avancer

                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\bodies\characters\aged_juno\a_normal_n­eckcrack.anim
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\bodies\characters\juno\a_normal_neckcr­ack.anim
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\help_us_when_the_lapis_come
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\no_one_dies_now
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\stay_here_and_rot
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\we'll_deal_with_the_lapis
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_are_you_having_a_party
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_is_it_your_bedtime
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_should_i_gulp
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_those_deceiving
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\help_us_when_the_lapis_come\iconah_s­o_the_lapis_are_on_their.ogg
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\help_us_when_the_lapis_come\iconah_s­o_the_lapis_are_on_their.sfx
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\no_one_dies_now\iconah_nobodys_dying­_today.ogg
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\no_one_dies_now\iconah_nobodys_dying­_today.sfx
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\stay_here_and_rot\iconah_you_can_sit­_here.ogg
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\stay_here_and_rot\iconah_you_can_sit­_here.sfx
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\we'll_deal_with_the_lapis\iconah_wel­l_you_just_go_on_feeling_sorry.ogg
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\we'll_deal_with_the_lapis\iconah_wel­l_you_just_go_on_feeling_sorry.sfx
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_are_you_having_a_party\cybreed_t­hey_ve_decided.ogg
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_are_you_having_a_party\cybreed_t­hey_ve_decided.sfx
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_are_you_having_a_party\cybreed_u­nfortunately_the_cold_ladies.ogg
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_are_you_having_a_party\cybreed_u­nfortunately_the_cold_ladies.sfx
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_are_you_having_a_party\iconah_ho­w_come_i_didnt_get_an_invitation.ogg
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_are_you_having_a_party\iconah_ho­w_come_i_didnt_get_an_invitation.sfx
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_are_you_having_a_party\iconah_no­w_why_would_those.ogg
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_are_you_having_a_party\iconah_no­w_why_would_those.sfx
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_is_it_your_bedtime\cybreed_actua­llty_it_is_but_we_cant_leave.ogg
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_is_it_your_bedtime\cybreed_actua­llty_it_is_but_we_cant_leave.sfx
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_is_it_your_bedtime\cybreed_of_co­urse_not.ogg
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_is_it_your_bedtime\cybreed_of_co­urse_not.sfx
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_is_it_your_bedtime\cybreed_the_c­old_whites_they_are.ogg
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_is_it_your_bedtime\cybreed_the_c­old_whites_they_are.sfx
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_is_it_your_bedtime\iconah_im_not­_stopping.ogg
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_is_it_your_bedtime\iconah_im_not­_stopping.sfx
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_is_it_your_bedtime\iconah_sacrif­ice_whos_.ogg
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_is_it_your_bedtime\iconah_sacrif­ice_whos_.sfx
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_should_i_gulp\cybreed_irrelevant­_check_your_scanners.ogg
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_should_i_gulp\cybreed_irrelevant­_check_your_scanners.sfx
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_should_i_gulp\iconah_im_not_buyi­ng_it.ogg
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_should_i_gulp\iconah_im_not_buyi­ng_it.sfx
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_those_deceiving\cybreed_fool_tak­e_a_look_at_your_scanners.ogg
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_those_deceiving\cybreed_fool_tak­e_a_look_at_your_scanners.sfx
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_those_deceiving\iconah_i_see_wel­l_then.ogg
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_those_deceiving\iconah_i_see_wel­l_then.sfx
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_those_deceiving\iconah_well_aren­t_they_going.ogg
                      C:\Program Files\DreamCatcher\Genesis Rising\data\resources\sounds\speeches\lifewave_galaxy\3_sacr­ifice\dialog_with_crack\why_those_deceiving\iconah_well_aren­t_they_going.sfx
                      C:\Program Files\GIMP-2.0\share\gimp\2.0\patterns\cracked.pat 


                      TOn infection se situe aussi dans ta resto systeme, donc il faut désinfecter avant de la purger.
                      Mais désinfecter un PC avec tous ces cracks, cela veut dire que dans 15 jours tu auras encore des soucis ;))

                      1. donc j'ai formater et je réinstalle
                        c'est encore la meilleur solution et je vais faire une image clonezilla
                        1. Bonjour

                          Sage decision ;))
                          Voyant toutes tes veroles >> cracks et Keygens valait mieux ;)
                          Par contre, refais moi un log hijackthis pour verifier tes mises a jour

                          ++