A L'AIDE !!! Win32.Zafi.B

Zacky vengeance -  
Bonjour,
Depuis Hier que je me tue a essailler d'auter se virus Win32.Zafi.B , je ne peu plus aller sur internet , sur msn , sur steam ... tout crash toujour jai downloader malwarebytes comme plusieur autre forum le propose mes le scan n'affiche rien jai pourtant pri le temp de prendre le dernière mise a joue de malwarebytes jai aussi hijackthis et doctoc spyware et AVG 8 mes rien ne fonctionne jai été voir les tuto comment l'auter manuellement je croi que qu'il y en a aucun pour vista SVP aider moi !!!!
Configuration: Windows Vista
Firefox 3.0.8

46 réponses

Résumé de la discussion

Un virus Win32.Zafi.B bloque l’accès à Internet et provoque des crash multiformes sur Windows Vista, malgré l’utilisation de Malwarebytes, HijackThis, doctoc spyware et AVG 8. Des propositions consistent à utiliser RSIT (random's system information tool) pour générer deux rapports exploitables, puis partager les logs log.txt et info.txt afin d’analyser l’infection et orienter la désinfection. En cas de non-détection, des outils complémentaires comme UsbFix et une réévaluation du log HijackThis sont recommandés pour identifier les lignes suspectes et lancer une désinfection ciblée. D'autres pistes évoquent aussi l'importance de vérifier les clés USB ou les sources externes, et d'utiliser des rapports détaillés pour éviter des réinfections sur Vista.

Bobot (l’IA à votre service)
  1. V-X
    Re,

    ▶ Télécharge random's system information tool (RSIT) et enregistre le sur ton bureau.

    ▶ Double clique sur RSIT.exe pour lancer l'outil.

    ▶ Clique sur ' continue ' à l'écran Disclaimer.

    ▶ Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.

    ▶ Une fois le scan fini , 2 rapports vont apparaitre. Poste le contenu des 2 rapports séparément.
    ( log.txt & info.txt )

    (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

    Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
    1
    1. V-X
      Salut,

      Poste ton rapport hijackthis que tu as fait ;)
      0
      1. Zacky vengeance Auteur
        voila le rapport Merci pour la réponse rapide =)

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 13:22:29, on 2009-04-14
        Platform: Windows Vista SP1 (WinNT 6.00.1905)
        MSIE: Internet Explorer v7.00 (7.00.6001.18000)
        Boot mode: Normal

        Running processes:
        C:\Windows\system32\Dwm.exe
        C:\Windows\system32\taskeng.exe
        C:\Windows\Explorer.EXE
        C:\Windows\RtHDVCpl.exe
        C:\Acer\Empowering Technology\SysMonitor.exe
        C:\Program Files\Spyware Doctor\pctsTray.exe
        C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
        C:\Program Files\Java\jre6\bin\jusched.exe
        C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
        C:\Program Files\AVG\AVG8\avgtray.exe
        C:\Program Files\Linksys\Linksys EasyLink Advisor\Linksys EasyLink Advisor.exe
        C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe
        C:\Program Files\iTunes\iTunesHelper.exe
        C:\Windows\System32\rundll32.exe
        C:\Program Files\Windows Sidebar\sidebar.exe
        C:\Windows\ehome\ehtray.exe
        C:\Windows\ehome\ehmsas.exe
        C:\Program Files\Windows Media Player\wmpnscfg.exe
        C:\Windows\System32\p2phost.exe
        C:\Program Files\Steam\steam.exe
        C:\Program Files\DAEMON Tools Lite\daemon.exe
        C:\Program Files\Jugaari\Jaadu VNC Connect\JaaduConnect.exe
        C:\Program Files\Electronic Arts\EADM\Core.exe
        C:\Program Files\GameSpy\Comrade\Comrade.exe
        C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
        C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
        C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
        C:\Windows\system32\conime.exe
        C:\Users\Hunter\Desktop\HiJackThis.exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com/spresults.aspx
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/spresults.aspx
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.ca.acer.yahoo.com
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.ca.acer.yahoo.com
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
        R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.bing.com/spresults.aspx
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
        R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
        O1 - Hosts: ::1 localhost
        O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
        O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
        O2 - BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
        O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
        O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
        O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
        O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
        O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
        O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
        O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
        O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe
        O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
        O4 - HKLM\..\Run: [Acer Product Registration] "C:\Program Files\Acer Registration\ACE1.exe" /startup
        O4 - HKLM\..\Run: [Acer Assist Launcher] C:\Program Files\Acer Assist\launcher.exe
        O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
        O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
        O4 - HKLM\..\Run: [Skytel] Skytel.exe
        O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
        O4 - HKLM\..\Run: [LELA] "C:\Program Files\Linksys\Linksys EasyLink Advisor\Linksys EasyLink Advisor.exe" /minimized
        O4 - HKLM\..\Run: [nmctxth] "C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe"
        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
        O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
        O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
        O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
        O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
        O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
        O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
        O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
        O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
        O4 - HKCU\..\Run: [Speech Recognition] "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
        O4 - HKCU\..\Run: [CollaborationHost] C:\Windows\system32\p2phost.exe -s
        O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"
        O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
        O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
        O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Users\Hunter\Program Files\DNA\btdna.exe"
        O4 - HKCU\..\Run: [Windows] "C:\Users\Public\Public Documents\Windows Movie Player\player.exe"
        O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
        O4 - HKCU\..\Run: [JaaduVNCConnect] "C:\Program Files\Jugaari\Jaadu VNC Connect\JaaduConnect.exe" -autostart
        O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
        O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
        O4 - HKCU\..\Run: [Comrade.exe] C:\Program Files\GameSpy\Comrade\Comrade.exe
        O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'SYSTEM')
        O4 - HKUS\.DEFAULT\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'Default user')
        O4 - Global Startup: Empowering Technology Launcher.lnk = ?
        O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
        O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
        O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
        O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
        O13 - Gopher Prefix:
        O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} -
        O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
        O20 - AppInit_DLLs: avgrsstx.dll
        O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
        O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
        O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
        O23 - Service: AVG8 Firewall (avgfws8) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgfws8.exe
        O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
        O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
        O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
        O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
        O23 - Service: Linksys Updater (LinksysUpdater) - Unknown owner - C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe
        O23 - Service: Pure Networks Platform Service (nmservice) - Pure Networks, Inc. - C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
        O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
        O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
        O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
        O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
        O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
        O23 - Service: TeamViewer 3 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer3\TeamViewer_Host.exe
        0
        1. V-X
          Re,

          ▶ Relance hijack et clique sur "Do a system scan only"

          ▶ Ensuite recherche ces lignes et coches les cases

          R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
          O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

          ▶ Ensuite clique sur "Fix checked"
          xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
          ▶ Désactive le « contrôle des comptes utilisateurs = UAC »
          (tu le réactiveras après ta désinfection): Ne pas oublier !!
          Désactiver l'UAC est nécessaire pour pouvoir faire fonctionner certains programmes sous Vista.
          - Vas dans Démarrer puis panneau de configuration
          - Double Clique sur l'icône "Comptes d'utilisateurs"
          - Clique ensuite sur désactiver et valide.
          Comment désactiver L'UAC

          ==>>Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.<<===

          !! Déconnectes toi et fermes toute tes applications en cours le temps de la manipe !!

          ▶ Double-cliques sur l'.exe pour lancer l'installe et laisses toi guider ...

          ▶ Une fois fait, cliques sur le raccourci créé sur ton bureau pour lancer l'outil .

          ▶ Choisis l'option 1 ( "recherche") et tapes "entrée" .

          ▶Une fois le scan finit , un rapport va apparaître, copie/colles l'intégralité
          de son contenu dans ta prochaine réponse ...

          ( le rapport est en outre sauvegardé ici -> C:\TB.txt )

          Tutoriel Toolbard-S&D

          Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
          0
          2. Zacky vengeance Auteur
            Wow Merci encore pour la réponce rapide mes comment déactiver le control des compte utilisateur ?
            0
            1. V-X
              Re,

              - Vas dans Démarrer puis panneau de configuration
              - Double Clique sur l'icône "Comptes d'utilisateurs"
              - Clique ensuite sur désactiver et valide
              - Redémarre ton PC.

              Pour lancer toolbard S&D,clic droit sur l'icône sur ton bureau et "Exécute en tant qu'administrateur".
              0
              1. Zacky vengeance Auteur
                bon maintenant problème aik toolbar comme tu c'est aik win.Zafi.B je ne peu pas aller sur internet car sa crash toujour alors jai télécharger toolbar sur lordinateur de ma soeur jai pri une clé usb et jlai mi sur mon ordinateur et sa dit ne pas lancer la phase de désinfestion sans lavis dun spécialiste dans le doute postez votre rapport sur un forum... ?!?!
                0
                1. Zacky vengeance Auteur
                  bon je cmprend pas pk mes sa marcher voila le rapport

                  -----------\\ ToolBar S&D 1.2.8 XP/Vista

                  Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
                  X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz )
                  BIOS : Default System BIOS
                  USER : Hunter ( Not Administrator ! )
                  BOOT : Normal boot
                  Antivirus : AVG Internet Security 8.0 (Activated)
                  Firewall : AVG Firewall 8.0 (Not Activated)
                  C:\ (Local Disk) - NTFS - Total:144 Go (Free:12 Go)
                  D:\ (Local Disk) - NTFS - Total:144 Go (Free:143 Go)
                  E:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
                  F:\ (USB)
                  G:\ (USB)
                  H:\ (USB) - FAT - Total:970 Mo (Free:0 Go)
                  I:\ (USB)
                  J:\ (CD or DVD)
                  K:\ (CD or DVD)

                  "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
                  Option : [1] ( 2009-04-14|13:58 )

                  [ UAC => 1 ]

                  -----------\\ Recherche de Fichiers / Dossiers ...

                  C:\Program Files\DAEMON Tools Toolbar
                  C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
                  C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT
                  C:\Program Files\DAEMON Tools Toolbar\Resources
                  C:\Program Files\DAEMON Tools Toolbar\uninst.exe
                  C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
                  C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\chrome
                  C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\chrome.manifest
                  C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\components
                  C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\install.rdf
                  C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\chrome\dttoolbar.jar
                  C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\components\DTToolbarFF.dll
                  C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT\components\DTToolbarFF.xpt
                  C:\Program Files\DAEMON Tools Toolbar\Resources\about.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\as.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\as.png
                  C:\Program Files\DAEMON Tools Toolbar\Resources\astro.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\b1.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\b1.png
                  C:\Program Files\DAEMON Tools Toolbar\Resources\BurnImage.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\buy.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond000.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond001.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond003.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond004.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond005.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond006.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond007.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond008.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond009.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond010.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond011.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond019.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond020.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond021.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond022.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond023.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond024.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond025.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond026.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond037.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond038.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond039.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond040.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond041.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond046.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond048.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond050.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond051.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond052.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond053.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond054.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond055.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond056.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond057.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond058.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond059.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond060.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond061.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond062.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond063.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond064.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond065.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond066.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond067.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond068.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond069.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond075.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond076.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond077.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond078.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond079.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond080.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond084.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond085.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond086.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond087.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond088.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond089.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond090.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond091.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond092.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond093.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond094.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond095.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond108.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond109.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond110.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond111.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond112.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond113.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond120.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond121.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond122.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond126.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond127.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond128.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond129.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond130.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond131.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond132.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond133.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond134.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond135.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond136.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond137.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond138.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond140.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond141.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond142.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond143.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond148.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond149.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond152.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond154.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond155.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond156.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\cond157.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\d.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\d2.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\daemon.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\ds.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\dsearch.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\dt.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\DTPro.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\Dwnl.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\emulation.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\features.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\gd.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\globe.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\GrabImage.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\hb.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\hb.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\help.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\ip.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\lang.xml
                  C:\Program Files\DAEMON Tools Toolbar\Resources\lingvo.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\m.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\mail.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\mailc.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_down.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_m.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_under.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\mail_disable.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\mail_down.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\mail_m.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\mail_under.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\next.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\next_down.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\next_m.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\next_under.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\none.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\none_m.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\noW.gif
                  C:\Program Files\DAEMON Tools Toolbar\Resources\op.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\pragma.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\prev.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\prev_down.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\prev_m.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\prev_under.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\prod.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\refresh.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_down.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_m.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_under.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\Rss.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\Rss1.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\rssClose.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\rssL.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\rssOpen.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\size.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\size_m.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\skins.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\spt.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\SupportRequest.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\time.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\TitleIcon.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\toolbar.xml
                  C:\Program Files\DAEMON Tools Toolbar\Resources\trans.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\Trash.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_down.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_m.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_under.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\u.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wb.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m42.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m43.bmp
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wi.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wi0.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wi1.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wi10.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wi11.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wi12.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wi13.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wi2.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wi3.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wi4.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wi5.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wi6.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wi7.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wi8.ico
                  C:\Program Files\DAEMON Tools Toolbar\Resources\wi9.ico

                  -----------\\ [..\Internet Explorer\Main]

                  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                  "Start Page"="https://www.google.com/?gws_rd=ssl"
                  "SEARCH PAGE"="http://www.bing.com/spresults.aspx"
                  "Local Page"="C:\\Windows\\system32\\blank.htm"
                  "SearchMigratedDefaultURL"="https://search.yahoo.com/web{searchTerms}&ei=utf-8&fr=b1ie7"
                  "Search Bar"="http://www.bing.com/spresults.aspx"
                  "Url"="https://www.msn.com/fr-fr/actualite/"

                  [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                  "Start Page"="http://fr.ca.acer.yahoo.com"
                  "Default_Page_URL"="http://fr.ca.acer.yahoo.com"
                  "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                  "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"

                  --------------------\\ Recherche d'autres infections

                  --------------------\\ Cracks & Keygens ..

                  C:\Users\Hunter\AppData\Local\VirtualStore\Program Files\World of Warcraft\WTF.20080519-152028\Account\ZACKY777\WoWcrack (Blizz High-Rate)
                  C:\Users\Hunter\AppData\Local\VirtualStore\Program Files\World of Warcraft\WTF.20080519-152028\Account\ZACKY777\WoWcrack (Blizz High-Rate)\Asdasdgweh
                  C:\Users\Hunter\AppData\Local\VirtualStore\Program Files\World of Warcraft\WTF.20080519-152028\Account\ZACKY777\WoWcrack (Blizz High-Rate)\Asdasdgweh\camera-settings.txt
                  C:\Users\Hunter\AppData\Local\VirtualStore\Program Files\World of Warcraft\WTF.20080519-152028\Account\ZACKY777\WoWcrack (Blizz High-Rate)\Asdasdgweh\chat-cache.txt
                  C:\Users\Hunter\AppData\Local\VirtualStore\Program Files\World of Warcraft\WTF.20080519-152028\Account\ZACKY777\WoWcrack (Blizz High-Rate)\Asdasdgweh\layout-cache.txt
                  C:\Users\Hunter\AppData\Local\VirtualStore\Program Files\World of Warcraft\WTF.20080519-152028\Account\ZACKY777\WoWcrack (Blizz High-Rate)\Asdasdgweh\SavedVariables
                  C:\Users\Hunter\AppData\Local\VirtualStore\Program Files\World of Warcraft\WTF.20080519-152028\Account\ZACKY777\WoWcrack (Blizz High-Rate)\Asdasdgweh\SavedVariables.lua
                  C:\Users\Hunter\AppData\Roaming\Apple Computer\Logs\CrashReporter\MobileDevice\iPod (Hunter)\Crackulous_2009-03-23-204306_iPod--Hunterz.crash
                  C:\Users\Hunter\AppData\Roaming\Apple Computer\Logs\CrashReporter\MobileDevice\iPod (Hunter)\Crackulous_2009-03-23-204306_iPod--Hunterz.plist
                  C:\Users\Hunter\AppData\Roaming\Apple Computer\Logs\CrashReporter\MobileDevice\iPod (Hunter)\Crackulous_2009-03-23-204315_iPod--Hunterz.crash
                  C:\Users\Hunter\AppData\Roaming\Apple Computer\Logs\CrashReporter\MobileDevice\iPod (Hunter)\Crackulous_2009-03-23-204315_iPod--Hunterz.plist
                  C:\Users\Hunter\AppData\Roaming\Apple Computer\Logs\CrashReporter\MobileDevice\iPod (Hunter)\Crackulous_2009-03-23-204322_iPod--Hunterz.crash
                  C:\Users\Hunter\AppData\Roaming\Apple Computer\Logs\CrashReporter\MobileDevice\iPod (Hunter)\Crackulous_2009-03-23-204322_iPod--Hunterz.plist
                  C:\Users\Hunter\AppData\Roaming\BitTorrent\180 SERIALS, KEYS, KEYGENS & CRACKS.torrent
                  C:\Users\Hunter\AppData\Roaming\BitTorrent\Ad-Aware.2007.Professional.7.0.2.1.Incl.Crack.torrent
                  C:\Users\Hunter\AppData\Roaming\BitTorrent\Ad-aware6.0Professional+Keygen.zip.torrent
                  C:\Users\Hunter\AppData\Roaming\BitTorrent\AV Voice Changer Software 6.0.10 - vLcB + keygen.torrent
                  C:\Users\Hunter\AppData\Roaming\BitTorrent\GTA IV - Gran Theft Auto 4 - Latest Patch Crack + Serial Keygen.torrent
                  C:\Users\Hunter\AppData\Roaming\BitTorrent\GTA IV Keygen.exe.torrent
                  C:\Users\Hunter\AppData\Roaming\BitTorrent\GTAIV__Keygen.rar.torrent
                  C:\Users\Hunter\AppData\Roaming\BitTorrent\Guitar Pro 5.0 full+crack.torrent
                  C:\Users\Hunter\AppData\Roaming\Microsoft\Office\R‚cent\Crack.lnk
                  C:\Users\Hunter\Desktop\Hunter\CD-KEYS og SERIALS\7000 Serials cracks.txt
                  C:\Users\Hunter\Desktop\Hunter\CD-KEYS og SERIALS\serials\7500 Serials cracks.txt
                  C:\Users\Hunter\Documents\Ableton\Presets\Audio Effects\Vinyl Distortion\Crack.adv
                  C:\Users\Hunter\Documents\Downloads\GTA IV - Gran Theft Auto 4 - Latest Patch Crack + Serial Keygen
                  C:\Users\Hunter\Documents\Downloads\Grand.Theft.Auto.IV-Darkc0der\Crack
                  C:\Users\Hunter\Documents\Downloads\Grand.Theft.Auto.IV-Darkc0der\Crack\GTAIV.exe
                  C:\Users\Hunter\Documents\Downloads\Grand.Theft.Auto.IV-Darkc0der\Crack\LaunchGTAIV.exe
                  C:\Users\Hunter\Documents\Downloads\Grand.Theft.Auto.IV-Darkc0der\Crack\paul.dll
                  C:\Users\Hunter\Documents\Downloads\GTA IV - Gran Theft Auto 4 - Latest Patch Crack + Serial Keygen\GTA Keygen.exe
                  C:\Users\Hunter\Documents\Mes fichiers re‡us\Halo_-_KeyGen_by_DerMunch.zip

                  [ UAC => 1 ]

                  1 - "C:\ToolBar SD\TB_1.txt" - 2009-04-14|13:59 - Option : [1]

                  -----------\\ Fin du rapport a 13:59:10,78
                  0
                  1. V-X
                    Re,

                    Sa va le téléchargement chez toi=>Les-risques-securitaires-du-peer-to-peer 

                    C:\Users\Hunter\AppData\Local\VirtualStore\Program Files\World of Warcraft\WTF.20080519-152028\Account\ZACKY777\WoWcrack (Blizz High-Rate)
C:\Users\Hunter\AppData\Local\VirtualStore\Program Files\World of Warcraft\WTF.20080519-152028\Account\ZACKY777\WoWcrack (Blizz High-Rate)\Asdasdgweh
C:\Users\Hunter\AppData\Local\VirtualStore\Program Files\World of Warcraft\WTF.20080519-152028\Account\ZACKY777\WoWcrack (Blizz High-Rate)\Asdasdgweh\camera-settings.txt
C:\Users\Hunter\AppData\Local\VirtualStore\Program Files\World of Warcraft\WTF.20080519-152028\Account\ZACKY777\WoWcrack (Blizz High-Rate)\Asdasdgweh\chat-cache.txt
C:\Users\Hunter\AppData\Local\VirtualStore\Program Files\World of Warcraft\WTF.20080519-152028\Account\ZACKY777\WoWcrack (Blizz High-Rate)\Asdasdgweh\layout-cache.txt
C:\Users\Hunter\AppData\Local\VirtualStore\Program Files\World of Warcraft\WTF.20080519-152028\Account\ZACKY777\WoWcrack (Blizz High-Rate)\Asdasdgweh\SavedVariables
C:\Users\Hunter\AppData\Local\VirtualStore\Program Files\World of Warcraft\WTF.20080519-152028\Account\ZACKY777\WoWcrack (Blizz High-Rate)\Asdasdgweh\SavedVariables.lua
C:\Users\Hunter\AppData\Roaming\Apple Computer\Logs\CrashReporter\MobileDevice\iPod (Hunter)\Crackulous_2009-03-23-204306_iPod--Hunterz.crash
C:\Users\Hunter\AppData\Roaming\Apple Computer\Logs\CrashReporter\MobileDevice\iPod (Hunter)\Crackulous_2009-03-23-204306_iPod--Hunterz.plist
C:\Users\Hunter\AppData\Roaming\Apple Computer\Logs\CrashReporter\MobileDevice\iPod (Hunter)\Crackulous_2009-03-23-204315_iPod--Hunterz.crash
C:\Users\Hunter\AppData\Roaming\Apple Computer\Logs\CrashReporter\MobileDevice\iPod (Hunter)\Crackulous_2009-03-23-204315_iPod--Hunterz.plist
C:\Users\Hunter\AppData\Roaming\Apple Computer\Logs\CrashReporter\MobileDevice\iPod (Hunter)\Crackulous_2009-03-23-204322_iPod--Hunterz.crash
C:\Users\Hunter\AppData\Roaming\Apple Computer\Logs\CrashReporter\MobileDevice\iPod (Hunter)\Crackulous_2009-03-23-204322_iPod--Hunterz.plist
C:\Users\Hunter\AppData\Roaming\BitTorrent\180 SERIALS, KEYS, KEYGENS & CRACKS.torrent
C:\Users\Hunter\AppData\Roaming\BitTorrent\Ad-Aware.2007.Professional.7.0.2.1.Incl.Crack.torrent
C:\Users\Hunter\AppData\Roaming\BitTorrent\Ad-aware6.0Professional+Keygen.zip.torrent
C:\Users\Hunter\AppData\Roaming\BitTorrent\AV Voice Changer Software 6.0.10 - vLcB + keygen.torrent
C:\Users\Hunter\AppData\Roaming\BitTorrent\GTA IV - Gran Theft Auto 4 - Latest Patch Crack + Serial Keygen.torrent
C:\Users\Hunter\AppData\Roaming\BitTorrent\GTA IV Keygen.exe.torrent
C:\Users\Hunter\AppData\Roaming\BitTorrent\GTAIV__Keygen.rar.torrent
C:\Users\Hunter\AppData\Roaming\BitTorrent\Guitar Pro 5.0 full+crack.torrent
C:\Users\Hunter\AppData\Roaming\Microsoft\Office\R‚cent\Crack.lnk
C:\Users\Hunter\Desktop\Hunter\CD-KEYS og SERIALS\7000 Serials cracks.txt
C:\Users\Hunter\Desktop\Hunter\CD-KEYS og SERIALS\serials\7500 Serials cracks.txt
C:\Users\Hunter\Documents\Ableton\Presets\Audio Effects\Vinyl Distortion\Crack.adv
C:\Users\Hunter\Documents\Downloads\GTA IV - Gran Theft Auto 4 - Latest Patch Crack + Serial Keygen
C:\Users\Hunter\Documents\Downloads\Grand.Theft.Auto.IV-Darkc0der\Crack
C:\Users\Hunter\Documents\Downloads\Grand.Theft.Auto.IV-Darkc0der\Crack\GTAIV.exe
C:\Users\Hunter\Documents\Downloads\Grand.Theft.Auto.IV-Darkc0der\Crack\LaunchGTAIV.exe
C:\Users\Hunter\Documents\Downloads\Grand.Theft.Auto.IV-Darkc0der\Crack\paul.dll
C:\Users\Hunter\Documents\Downloads\GTA IV - Gran Theft Auto 4 - Latest Patch Crack + Serial Keygen\GTA Keygen.exe
C:\Users\Hunter\Documents\Mes fichiers re‡us\Halo_-_KeyGen_by_DerMunch.zip


                    Relance toolbard S&D et fait le choix 2 et poste le rapport.
                    0
                    1. Zacky vengeance Auteur
                      voila

                      -----------\\ ToolBar S&D 1.2.8 XP/Vista

                      Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
                      X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz )
                      BIOS : Default System BIOS
                      USER : Hunter ( Not Administrator ! )
                      BOOT : Normal boot
                      Antivirus : AVG Internet Security 8.0 (Activated)
                      Firewall : AVG Firewall 8.0 (Not Activated)
                      C:\ (Local Disk) - NTFS - Total:144 Go (Free:12 Go)
                      D:\ (Local Disk) - NTFS - Total:144 Go (Free:143 Go)
                      E:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
                      F:\ (USB)
                      G:\ (USB)
                      H:\ (USB)
                      I:\ (USB)
                      J:\ (CD or DVD)
                      K:\ (CD or DVD)

                      "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
                      Option : [2] ( 2009-04-14|14:21 )

                      [ UAC => 1 ]

                      -----------\\ SUPPRESSION

                      Supprime! - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
                      Supprime! - C:\Program Files\DAEMON Tools Toolbar\FirefoxDTT
                      Supprime! - C:\Program Files\DAEMON Tools Toolbar\Resources
                      Supprime! - C:\Program Files\DAEMON Tools Toolbar\uninst.exe
                      Supprime! - C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
                      Supprime! - C:\Program Files\DAEMON Tools Toolbar

                      -----------\\ Recherche de Fichiers / Dossiers ...

                      -----------\\ [..\Internet Explorer\Main]

                      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                      "Start Page"="https://www.google.com/?gws_rd=ssl"
                      "SEARCH PAGE"="http://www.bing.com/spresults.aspx"
                      "Local Page"="C:\\Windows\\system32\\blank.htm"
                      "SearchMigratedDefaultURL"="https://search.yahoo.com/web{searchTerms}&ei=utf-8&fr=b1ie7"
                      "Search Bar"="http://www.bing.com/spresults.aspx"
                      "Url"="https://www.msn.com/fr-fr/actualite/"

                      [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                      "Start Page"="https://www.msn.com/fr-fr/"
                      "Default_Page_URL"="http://fr.ca.acer.yahoo.com"
                      "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                      "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"

                      --------------------\\ Recherche d'autres infections

                      --------------------\\ Cracks & Keygens ..

                      C:\Users\Hunter\AppData\Local\VirtualStore\Program Files\World of Warcraft\WTF.20080519-152028\Account\ZACKY777\WoWcrack (Blizz High-Rate)
                      C:\Users\Hunter\AppData\Local\VirtualStore\Program Files\World of Warcraft\WTF.20080519-152028\Account\ZACKY777\WoWcrack (Blizz High-Rate)\Asdasdgweh
                      C:\Users\Hunter\AppData\Local\VirtualStore\Program Files\World of Warcraft\WTF.20080519-152028\Account\ZACKY777\WoWcrack (Blizz High-Rate)\Asdasdgweh\camera-settings.txt
                      C:\Users\Hunter\AppData\Local\VirtualStore\Program Files\World of Warcraft\WTF.20080519-152028\Account\ZACKY777\WoWcrack (Blizz High-Rate)\Asdasdgweh\chat-cache.txt
                      C:\Users\Hunter\AppData\Local\VirtualStore\Program Files\World of Warcraft\WTF.20080519-152028\Account\ZACKY777\WoWcrack (Blizz High-Rate)\Asdasdgweh\layout-cache.txt
                      C:\Users\Hunter\AppData\Local\VirtualStore\Program Files\World of Warcraft\WTF.20080519-152028\Account\ZACKY777\WoWcrack (Blizz High-Rate)\Asdasdgweh\SavedVariables
                      C:\Users\Hunter\AppData\Local\VirtualStore\Program Files\World of Warcraft\WTF.20080519-152028\Account\ZACKY777\WoWcrack (Blizz High-Rate)\Asdasdgweh\SavedVariables.lua
                      C:\Users\Hunter\AppData\Roaming\Apple Computer\Logs\CrashReporter\MobileDevice\iPod (Hunter)\Crackulous_2009-03-23-204306_iPod--Hunterz.crash
                      C:\Users\Hunter\AppData\Roaming\Apple Computer\Logs\CrashReporter\MobileDevice\iPod (Hunter)\Crackulous_2009-03-23-204306_iPod--Hunterz.plist
                      C:\Users\Hunter\AppData\Roaming\Apple Computer\Logs\CrashReporter\MobileDevice\iPod (Hunter)\Crackulous_2009-03-23-204315_iPod--Hunterz.crash
                      C:\Users\Hunter\AppData\Roaming\Apple Computer\Logs\CrashReporter\MobileDevice\iPod (Hunter)\Crackulous_2009-03-23-204315_iPod--Hunterz.plist
                      C:\Users\Hunter\AppData\Roaming\Apple Computer\Logs\CrashReporter\MobileDevice\iPod (Hunter)\Crackulous_2009-03-23-204322_iPod--Hunterz.crash
                      C:\Users\Hunter\AppData\Roaming\Apple Computer\Logs\CrashReporter\MobileDevice\iPod (Hunter)\Crackulous_2009-03-23-204322_iPod--Hunterz.plist
                      C:\Users\Hunter\AppData\Roaming\BitTorrent\180 SERIALS, KEYS, KEYGENS & CRACKS.torrent
                      C:\Users\Hunter\AppData\Roaming\BitTorrent\Ad-Aware.2007.Professional.7.0.2.1.Incl.Crack.torrent
                      C:\Users\Hunter\AppData\Roaming\BitTorrent\Ad-aware6.0Professional+Keygen.zip.torrent
                      C:\Users\Hunter\AppData\Roaming\BitTorrent\AV Voice Changer Software 6.0.10 - vLcB + keygen.torrent
                      C:\Users\Hunter\AppData\Roaming\BitTorrent\GTA IV - Gran Theft Auto 4 - Latest Patch Crack + Serial Keygen.torrent
                      C:\Users\Hunter\AppData\Roaming\BitTorrent\GTA IV Keygen.exe.torrent
                      C:\Users\Hunter\AppData\Roaming\BitTorrent\GTAIV__Keygen.rar.torrent
                      C:\Users\Hunter\AppData\Roaming\BitTorrent\Guitar Pro 5.0 full+crack.torrent
                      C:\Users\Hunter\AppData\Roaming\Microsoft\Office\R‚cent\Crack.lnk
                      C:\Users\Hunter\Desktop\Hunter\CD-KEYS og SERIALS\7000 Serials cracks.txt
                      C:\Users\Hunter\Desktop\Hunter\CD-KEYS og SERIALS\serials\7500 Serials cracks.txt
                      C:\Users\Hunter\Documents\Ableton\Presets\Audio Effects\Vinyl Distortion\Crack.adv
                      C:\Users\Hunter\Documents\Downloads\GTA IV - Gran Theft Auto 4 - Latest Patch Crack + Serial Keygen
                      C:\Users\Hunter\Documents\Downloads\Grand.Theft.Auto.IV-Darkc0der\Crack
                      C:\Users\Hunter\Documents\Downloads\Grand.Theft.Auto.IV-Darkc0der\Crack\GTAIV.exe
                      C:\Users\Hunter\Documents\Downloads\Grand.Theft.Auto.IV-Darkc0der\Crack\LaunchGTAIV.exe
                      C:\Users\Hunter\Documents\Downloads\Grand.Theft.Auto.IV-Darkc0der\Crack\paul.dll
                      C:\Users\Hunter\Documents\Downloads\GTA IV - Gran Theft Auto 4 - Latest Patch Crack + Serial Keygen\GTA Keygen.exe
                      C:\Users\Hunter\Documents\Mes fichiers re‡us\Halo_-_KeyGen_by_DerMunch.zip

                      [ UAC => 1 ]

                      1 - "C:\ToolBar SD\TB_1.txt" - 2009-04-14|13:59 - Option : [1]
                      2 - "C:\ToolBar SD\TB_2.txt" - 2009-04-14|14:22 - Option : [2]

                      -----------\\ Fin du rapport a 14:22:31,21
                      0
                      1. Zacky vengeance Auteur
                        tien voila ques que sa ma donner

                        Logfile of random's system information tool 1.06 (written by random/random)
                        Run by Hunter at 2009-04-14 14:56:49
                        Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
                        System drive C: has 12 GB (8%) free of 148 GB
                        Total RAM: 2047 MB (37% free)

                        Logfile of Trend Micro HijackThis v2.0.2
                        Scan saved at 14:56:56, on 2009-04-14
                        Platform: Windows Vista SP1 (WinNT 6.00.1905)
                        MSIE: Internet Explorer v7.00 (7.00.6001.18000)
                        Boot mode: Normal

                        Running processes:
                        C:\Windows\System32\smss.exe
                        C:\Windows\system32\csrss.exe
                        C:\Windows\system32\wininit.exe
                        C:\Windows\system32\csrss.exe
                        C:\Windows\system32\services.exe
                        C:\Windows\system32\lsass.exe
                        C:\Windows\system32\lsm.exe
                        C:\Windows\system32\winlogon.exe
                        C:\Windows\system32\svchost.exe
                        C:\Windows\system32\nvvsvc.exe
                        C:\Windows\system32\svchost.exe
                        C:\Windows\System32\svchost.exe
                        C:\Windows\System32\svchost.exe
                        C:\Windows\system32\svchost.exe
                        C:\Windows\system32\SLsvc.exe
                        C:\Windows\system32\svchost.exe
                        C:\Windows\system32\svchost.exe
                        C:\Windows\system32\rundll32.exe
                        C:\Windows\System32\spoolsv.exe
                        C:\Windows\system32\svchost.exe
                        C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
                        C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                        C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
                        C:\PROGRA~1\AVG\AVG8\avgfws8.exe
                        C:\Windows\system32\Dwm.exe
                        C:\Program Files\Bonjour\mDNSResponder.exe
                        C:\PROGRA~1\AVG\AVG8\avgam.exe
                        C:\Windows\system32\taskeng.exe
                        C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
                        C:\PROGRA~1\AVG\AVG8\avgrsx.exe
                        C:\PROGRA~1\AVG\AVG8\avgnsx.exe
                        C:\Windows\system32\svchost.exe
                        C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                        C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe
                        C:\Windows\System32\svchost.exe
                        C:\Windows\System32\svchost.exe
                        C:\Windows\system32\PnkBstrA.exe
                        C:\Windows\system32\svchost.exe
                        C:\Program Files\Spyware Doctor\pctsAuxs.exe
                        C:\Program Files\Spyware Doctor\pctsSvc.exe
                        C:\Windows\system32\java.exe
                        C:\Windows\RtHDVCpl.exe
                        C:\Acer\Empowering Technology\SysMonitor.exe
                        C:\Windows\system32\svchost.exe
                        C:\Program Files\TeamViewer3\TeamViewer_Host.exe
                        C:\Windows\System32\svchost.exe
                        C:\Windows\system32\SearchIndexer.exe
                        C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
                        C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
                        C:\Windows\system32\WUDFHost.exe
                        C:\Program Files\Spyware Doctor\pctsTray.exe
                        C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
                        C:\Windows\system32\wbem\wmiprvse.exe
                        C:\Program Files\Java\jre6\bin\jusched.exe
                        C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
                        C:\Program Files\AVG\AVG8\avgtray.exe
                        C:\Program Files\Linksys\Linksys EasyLink Advisor\Linksys EasyLink Advisor.exe
                        C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe
                        C:\Program Files\iTunes\iTunesHelper.exe
                        C:\Windows\System32\rundll32.exe
                        C:\Program Files\Windows Sidebar\sidebar.exe
                        C:\Windows\ehome\ehtray.exe
                        C:\Windows\ehome\ehmsas.exe
                        C:\Program Files\Windows Media Player\wmpnscfg.exe
                        C:\Program Files\Windows Media Player\wmpnetwk.exe
                        C:\Windows\System32\p2phost.exe
                        C:\Program Files\Steam\steam.exe
                        C:\Program Files\DAEMON Tools Lite\daemon.exe
                        C:\Program Files\Jugaari\Jaadu VNC Connect\JaaduConnect.exe
                        C:\Users\Hunter\AppData\Roaming\Google\vxpclock.exe
                        C:\Program Files\Electronic Arts\EADM\Core.exe
                        C:\Program Files\GameSpy\Comrade\Comrade.exe
                        C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                        C:\Windows\system32\taskeng.exe
                        C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
                        C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
                        C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
                        C:\Program Files\iPod\bin\iPodService.exe
                        C:\Program Files\Common Files\Steam\SteamService.exe
                        C:\Windows\system32\conime.exe
                        C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
                        C:\Windows\system32\taskeng.exe
                        c:\program files\steam\steamapps\zacky7\counter-strike source\hl2.exe
                        C:\Windows\Explorer.EXE
                        C:\Users\Hunter\Desktop\RSIT.exe
                        C:\Program Files\trend micro\Hunter.exe

                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com/spresults.aspx
                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/spresults.aspx
                        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.ca.acer.yahoo.com
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                        R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.bing.com/spresults.aspx
                        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                        R3 - Default URLSearchHook is missing
                        O1 - Hosts: ::1 localhost
                        O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
                        O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                        O2 - BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
                        O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                        O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
                        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                        O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
                        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                        O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
                        O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
                        O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                        O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
                        O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe
                        O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
                        O4 - HKLM\..\Run: [Acer Product Registration] "C:\Program Files\Acer Registration\ACE1.exe" /startup
                        O4 - HKLM\..\Run: [Acer Assist Launcher] C:\Program Files\Acer Assist\launcher.exe
                        O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
                        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                        O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                        O4 - HKLM\..\Run: [Skytel] Skytel.exe
                        O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
                        O4 - HKLM\..\Run: [LELA] "C:\Program Files\Linksys\Linksys EasyLink Advisor\Linksys EasyLink Advisor.exe" /minimized
                        O4 - HKLM\..\Run: [nmctxth] "C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe"
                        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                        O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                        O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
                        O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
                        O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
                        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
                        O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
                        O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
                        O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
                        O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                        O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
                        O4 - HKCU\..\Run: [Speech Recognition] "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
                        O4 - HKCU\..\Run: [CollaborationHost] C:\Windows\system32\p2phost.exe -s
                        O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"
                        O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
                        O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
                        O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Users\Hunter\Program Files\DNA\btdna.exe"
                        O4 - HKCU\..\Run: [Windows] "C:\Users\Public\Public Documents\Windows Movie Player\player.exe"
                        O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                        O4 - HKCU\..\Run: [JaaduVNCConnect] "C:\Program Files\Jugaari\Jaadu VNC Connect\JaaduConnect.exe" -autostart
                        O4 - HKCU\..\Run: [realteks] "C:\Users\Hunter\AppData\Roaming\Google\vxpclock.exe" 2
                        O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
                        O4 - HKCU\..\Run: [Comrade.exe] C:\Program Files\GameSpy\Comrade\Comrade.exe
                        O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                        O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                        O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                        O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'SYSTEM')
                        O4 - HKUS\.DEFAULT\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'Default user')
                        O4 - Global Startup: Empowering Technology Launcher.lnk = ?
                        O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
                        O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                        O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                        O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
                        O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
                        O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
                        O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
                        O13 - Gopher Prefix:
                        O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} -
                        O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
                        O20 - AppInit_DLLs: avgrsstx.dll
                        O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
                        O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                        O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
                        O23 - Service: AVG8 Firewall (avgfws8) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgfws8.exe
                        O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                        O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
                        O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
                        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
                        O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                        O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                        O23 - Service: Linksys Updater (LinksysUpdater) - Unknown owner - C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe
                        O23 - Service: Pure Networks Platform Service (nmservice) - Pure Networks, Inc. - C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
                        O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
                        O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
                        O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
                        O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
                        O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
                        O23 - Service: TeamViewer 3 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer3\TeamViewer_Host.exe
                        0
                        1. V-X
                          Re,

                          ▶ Relance hijack et clique sur "Do a system scan only"

                          ▶ Ensuite recherche ces lignes et coches les cases

                          R3 - Default URLSearchHook is missing

                          ▶ Ensuite clique sur "Fix checked"
                          xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
                          ▶ Telecharge et install UsbFix de C_XX & Chiquitine29

                          ▶ Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectés sans les ouvrir

                          ▶ Double clic sur le raccourci UsbFix présent sur ton bureau .

                          ▶ Choisi l option 1 ( Recherche )

                          ▶ Laisse travailler l outil.

                          ▶ Ensuite post le rapport UsbFix.txt qui apparaitra.

                          ▶ Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )

                          ( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

                          Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
                          Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
                          Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

                          Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
                          0
                          1. Zacky vengeance Auteur
                            bon jai downloader et instaler usbfix quand je fait loption 1 sa nécri que accèe refuser
                            0
                            1. Zacky vengeance Auteur
                              svp quelqun aider moi :S
                              0
                              1. V-X
                                Re,

                                Minute papillon......

                                Clic droit et "Exécute en tant qu'administrateur".
                                0
                                1. Zacky vengeance Auteur
                                  cool sa marche Merci de prendre de tom temp précieu pour maider =)

                                  Logfile of random's system information tool 1.06 (written by random/random)
                                  Run by Hunter at 2009-04-14 16:13:52
                                  Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
                                  System drive C: has 12 GB (8%) free of 148 GB
                                  Total RAM: 2047 MB (53% free)

                                  Logfile of Trend Micro HijackThis v2.0.2
                                  Scan saved at 16:14:04, on 2009-04-14
                                  Platform: Windows Vista SP1 (WinNT 6.00.1905)
                                  MSIE: Internet Explorer v7.00 (7.00.6001.18000)
                                  Boot mode: Normal

                                  Running processes:
                                  C:\Windows\System32\smss.exe
                                  C:\Windows\system32\csrss.exe
                                  C:\Windows\system32\wininit.exe
                                  C:\Windows\system32\csrss.exe
                                  C:\Windows\system32\services.exe
                                  C:\Windows\system32\lsass.exe
                                  C:\Windows\system32\lsm.exe
                                  C:\Windows\system32\winlogon.exe
                                  C:\Windows\system32\svchost.exe
                                  C:\Windows\system32\nvvsvc.exe
                                  C:\Windows\system32\svchost.exe
                                  C:\Windows\System32\svchost.exe
                                  C:\Windows\System32\svchost.exe
                                  C:\Windows\system32\svchost.exe
                                  C:\Windows\system32\SLsvc.exe
                                  C:\Windows\system32\svchost.exe
                                  C:\Windows\system32\svchost.exe
                                  C:\Windows\system32\rundll32.exe
                                  C:\Windows\System32\spoolsv.exe
                                  C:\Windows\system32\svchost.exe
                                  C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
                                  C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                                  C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
                                  C:\PROGRA~1\AVG\AVG8\avgfws8.exe
                                  C:\Windows\system32\Dwm.exe
                                  C:\Program Files\Bonjour\mDNSResponder.exe
                                  C:\PROGRA~1\AVG\AVG8\avgam.exe
                                  C:\Windows\system32\taskeng.exe
                                  C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
                                  C:\PROGRA~1\AVG\AVG8\avgrsx.exe
                                  C:\Windows\system32\svchost.exe
                                  C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                                  C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe
                                  C:\Windows\System32\svchost.exe
                                  C:\Windows\System32\svchost.exe
                                  C:\Windows\system32\PnkBstrA.exe
                                  C:\Windows\system32\svchost.exe
                                  C:\Program Files\Spyware Doctor\pctsAuxs.exe
                                  C:\Program Files\Spyware Doctor\pctsSvc.exe
                                  C:\Windows\system32\java.exe
                                  C:\Windows\RtHDVCpl.exe
                                  C:\Acer\Empowering Technology\SysMonitor.exe
                                  C:\Windows\system32\svchost.exe
                                  C:\Program Files\TeamViewer3\TeamViewer_Host.exe
                                  C:\Windows\System32\svchost.exe
                                  C:\Windows\system32\SearchIndexer.exe
                                  C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
                                  C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
                                  C:\Windows\system32\WUDFHost.exe
                                  C:\Program Files\Spyware Doctor\pctsTray.exe
                                  C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
                                  C:\Windows\system32\wbem\wmiprvse.exe
                                  C:\Program Files\Java\jre6\bin\jusched.exe
                                  C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
                                  C:\Program Files\AVG\AVG8\avgtray.exe
                                  C:\Program Files\Linksys\Linksys EasyLink Advisor\Linksys EasyLink Advisor.exe
                                  C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe
                                  C:\Program Files\iTunes\iTunesHelper.exe
                                  C:\Windows\System32\rundll32.exe
                                  C:\Program Files\Windows Sidebar\sidebar.exe
                                  C:\Windows\ehome\ehtray.exe
                                  C:\Windows\ehome\ehmsas.exe
                                  C:\Program Files\Windows Media Player\wmpnscfg.exe
                                  C:\Program Files\Windows Media Player\wmpnetwk.exe
                                  C:\Windows\System32\p2phost.exe
                                  C:\Program Files\DAEMON Tools Lite\daemon.exe
                                  C:\Program Files\Jugaari\Jaadu VNC Connect\JaaduConnect.exe
                                  C:\Users\Hunter\AppData\Roaming\Google\vxpclock.exe
                                  C:\Program Files\Electronic Arts\EADM\Core.exe
                                  C:\Program Files\GameSpy\Comrade\Comrade.exe
                                  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                                  C:\Windows\system32\taskeng.exe
                                  C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
                                  C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
                                  C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
                                  C:\Program Files\iPod\bin\iPodService.exe
                                  C:\Windows\system32\conime.exe
                                  C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
                                  C:\Windows\system32\taskeng.exe
                                  C:\Windows\explorer.exe
                                  C:\PROGRA~1\AVG\AVG8\avgnsx.exe
                                  C:\Program Files\Steam\Steam.exe
                                  C:\Program Files\Common Files\Steam\SteamService.exe
                                  C:\Users\Hunter\Desktop\RSIT.exe
                                  C:\Program Files\trend micro\Hunter.exe

                                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com/spresults.aspx
                                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/spresults.aspx
                                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
                                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.ca.acer.yahoo.com
                                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                                  R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.bing.com/spresults.aspx
                                  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                                  O1 - Hosts: ::1 localhost
                                  O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
                                  O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                                  O2 - BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
                                  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                                  O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
                                  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                  O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
                                  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                                  O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
                                  O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
                                  O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                                  O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
                                  O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe
                                  O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
                                  O4 - HKLM\..\Run: [Acer Product Registration] "C:\Program Files\Acer Registration\ACE1.exe" /startup
                                  O4 - HKLM\..\Run: [Acer Assist Launcher] C:\Program Files\Acer Assist\launcher.exe
                                  O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
                                  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                                  O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                                  O4 - HKLM\..\Run: [Skytel] Skytel.exe
                                  O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
                                  O4 - HKLM\..\Run: [LELA] "C:\Program Files\Linksys\Linksys EasyLink Advisor\Linksys EasyLink Advisor.exe" /minimized
                                  O4 - HKLM\..\Run: [nmctxth] "C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe"
                                  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                                  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                                  O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
                                  O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
                                  O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
                                  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
                                  O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
                                  O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
                                  O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
                                  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                                  O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
                                  O4 - HKCU\..\Run: [Speech Recognition] "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
                                  O4 - HKCU\..\Run: [CollaborationHost] C:\Windows\system32\p2phost.exe -s
                                  O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"
                                  O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
                                  O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
                                  O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Users\Hunter\Program Files\DNA\btdna.exe"
                                  O4 - HKCU\..\Run: [Windows] "C:\Users\Public\Public Documents\Windows Movie Player\player.exe"
                                  O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                                  O4 - HKCU\..\Run: [JaaduVNCConnect] "C:\Program Files\Jugaari\Jaadu VNC Connect\JaaduConnect.exe" -autostart
                                  O4 - HKCU\..\Run: [realteks] "C:\Users\Hunter\AppData\Roaming\Google\vxpclock.exe" 2
                                  O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
                                  O4 - HKCU\..\Run: [Comrade.exe] C:\Program Files\GameSpy\Comrade\Comrade.exe
                                  O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                                  O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                                  O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                                  O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'SYSTEM')
                                  O4 - HKUS\.DEFAULT\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'Default user')
                                  O4 - Global Startup: Empowering Technology Launcher.lnk = ?
                                  O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                                  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
                                  O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                                  O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                                  O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
                                  O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
                                  O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
                                  O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
                                  O13 - Gopher Prefix:
                                  O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} -
                                  O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
                                  O20 - AppInit_DLLs: avgrsstx.dll
                                  O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
                                  O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                                  O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
                                  O23 - Service: AVG8 Firewall (avgfws8) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgfws8.exe
                                  O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                                  O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
                                  O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
                                  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
                                  O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                                  O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                                  O23 - Service: Linksys Updater (LinksysUpdater) - Unknown owner - C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe
                                  O23 - Service: Pure Networks Platform Service (nmservice) - Pure Networks, Inc. - C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
                                  O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
                                  O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
                                  O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
                                  O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
                                  O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
                                  O23 - Service: TeamViewer 3 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer3\TeamViewer_Host.exe
                                  0
                                  1. V-X
                                    Re,

                                    Euhhhhh ....

                                    Je t'ai demander de faire USBFIX.

                                    ▶ Telecharge et install UsbFix de C_XX & Chiquitine29

                                    ▶ Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectés sans les ouvrir

                                    ▶ Clic droit sur l'icône "Exécute en tant qu'administrateur" sur le raccourci UsbFix présent sur ton bureau .

                                    ▶ Choisi l option 1 ( Recherche )

                                    ▶ Laisse travailler l outil.

                                    ▶ Ensuite post le rapport UsbFix.txt qui apparaitra.

                                    ▶ Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )

                                    ( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

                                    Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
                                    Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
                                    Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

                                    Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
                                    0
                                    1. Zacky vengeance Auteur
                                      oui jai poster le rapport pkoi sa ne serais pas suposer donner quelque chose comme sa ?
                                      0
                                      1. Zacky vengeance Auteur
                                        Logfile of Trend Micro HijackThis v2.0.2
                                        Scan saved at 16:34:00, on 2009-04-14
                                        Platform: Windows Vista SP1 (WinNT 6.00.1905)
                                        MSIE: Internet Explorer v7.00 (7.00.6001.18000)
                                        Boot mode: Normal

                                        Running processes:
                                        C:\Windows\system32\Dwm.exe
                                        C:\Windows\system32\taskeng.exe
                                        C:\Windows\RtHDVCpl.exe
                                        C:\Acer\Empowering Technology\SysMonitor.exe
                                        C:\Program Files\Spyware Doctor\pctsTray.exe
                                        C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
                                        C:\Program Files\Java\jre6\bin\jusched.exe
                                        C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
                                        C:\Program Files\AVG\AVG8\avgtray.exe
                                        C:\Program Files\Linksys\Linksys EasyLink Advisor\Linksys EasyLink Advisor.exe
                                        C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe
                                        C:\Program Files\iTunes\iTunesHelper.exe
                                        C:\Windows\System32\rundll32.exe
                                        C:\Program Files\Windows Sidebar\sidebar.exe
                                        C:\Windows\ehome\ehtray.exe
                                        C:\Windows\ehome\ehmsas.exe
                                        C:\Program Files\Windows Media Player\wmpnscfg.exe
                                        C:\Windows\System32\p2phost.exe
                                        C:\Program Files\DAEMON Tools Lite\daemon.exe
                                        C:\Program Files\Jugaari\Jaadu VNC Connect\JaaduConnect.exe
                                        C:\Program Files\Electronic Arts\EADM\Core.exe
                                        C:\Program Files\GameSpy\Comrade\Comrade.exe
                                        C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                                        C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
                                        C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
                                        C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
                                        C:\Windows\system32\conime.exe
                                        C:\Windows\explorer.exe
                                        C:\Program Files\Steam\Steam.exe
                                        c:\program files\steam\steamapps\zacky7\counter-strike source\hl2.exe
                                        C:\Program Files\Steam\GameOverlayUI.exe
                                        C:\Users\Hunter\Desktop\HiJackThis.exe
                                        C:\Windows\system32\DllHost.exe

                                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com/spresults.aspx
                                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/spresults.aspx
                                        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
                                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.ca.acer.yahoo.com
                                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                                        R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.bing.com/spresults.aspx
                                        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                                        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                                        O1 - Hosts: ::1 localhost
                                        O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
                                        O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                                        O2 - BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
                                        O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                                        O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
                                        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                        O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
                                        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                                        O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
                                        O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
                                        O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                                        O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
                                        O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe
                                        O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
                                        O4 - HKLM\..\Run: [Acer Product Registration] "C:\Program Files\Acer Registration\ACE1.exe" /startup
                                        O4 - HKLM\..\Run: [Acer Assist Launcher] C:\Program Files\Acer Assist\launcher.exe
                                        O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
                                        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                                        O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                                        O4 - HKLM\..\Run: [Skytel] Skytel.exe
                                        O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
                                        O4 - HKLM\..\Run: [LELA] "C:\Program Files\Linksys\Linksys EasyLink Advisor\Linksys EasyLink Advisor.exe" /minimized
                                        O4 - HKLM\..\Run: [nmctxth] "C:\Program Files\Common Files\Pure Networks Shared\Platform\nmctxth.exe"
                                        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                                        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                                        O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                                        O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
                                        O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
                                        O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
                                        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
                                        O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
                                        O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
                                        O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
                                        O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                                        O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
                                        O4 - HKCU\..\Run: [Speech Recognition] "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
                                        O4 - HKCU\..\Run: [CollaborationHost] C:\Windows\system32\p2phost.exe -s
                                        O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"
                                        O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
                                        O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
                                        O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Users\Hunter\Program Files\DNA\btdna.exe"
                                        O4 - HKCU\..\Run: [Windows] "C:\Users\Public\Public Documents\Windows Movie Player\player.exe"
                                        O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                                        O4 - HKCU\..\Run: [JaaduVNCConnect] "C:\Program Files\Jugaari\Jaadu VNC Connect\JaaduConnect.exe" -autostart
                                        O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
                                        O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
                                        O4 - HKCU\..\Run: [Comrade.exe] C:\Program Files\GameSpy\Comrade\Comrade.exe
                                        O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'SYSTEM')
                                        O4 - HKUS\.DEFAULT\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'Default user')
                                        O4 - Global Startup: Empowering Technology Launcher.lnk = ?
                                        O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                                        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
                                        O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                                        O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                                        O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
                                        O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
                                        O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
                                        O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
                                        O13 - Gopher Prefix:
                                        O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} -
                                        O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
                                        O20 - AppInit_DLLs: avgrsstx.dll
                                        O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
                                        O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                                        O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
                                        O23 - Service: AVG8 Firewall (avgfws8) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgfws8.exe
                                        O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                                        O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
                                        O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
                                        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
                                        O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                                        O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                                        O23 - Service: Linksys Updater (LinksysUpdater) - Unknown owner - C:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exe
                                        O23 - Service: Pure Networks Platform Service (nmservice) - Pure Networks, Inc. - C:\Program Files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
                                        O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
                                        O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
                                        O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
                                        O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
                                        O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
                                        O23 - Service: TeamViewer 3 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer3\TeamViewer_Host.exe
                                        0
                                        1. V-X
                                          Re,

                                          Non ce n'est pas sa encore une fois.....

                                          Enregistre le rapport sur ton bureau.

                                          Le rapport d'usbfix. bien entendu.
                                          0
                                          • 1
                                          • 2
                                          • 3

                                          Discussions similaires

                                          Problème avec "PUADIManager:Win32/OfferCore
                                          Knaki

                                          3 réponses
                                          PUADlManager:Win32/OfferCore
                                          tenmalade

                                          2 réponses
                                          PUADlManager:Win32/OfferCore
                                          bernardarrad

                                          3 réponses
                                          PUA:Win32/InstallCore detecté par windows sécurité
                                          thetib

                                          11 réponses
                                          Pb Windows 7, .EXE n'est pas app win32 valide
                                          Witeric

                                          15 réponses