Ralentissement du pc

O MON DIEU!!!! tu t'étonne de pourquoi il est lent??? tu a vu tous les soft inutile que tu a^^ et puis au démarrage en plus... fait un nettoyage, enlève la plupart des soft au démarrage qui serve a rien.

Up s'il vous plait

Up s'il vous plait

Merci de t'être occuper de moi et voila ce que tu m'as demandé:

le log.txt
Logfile of random's system information tool 1.06 (written by random/random)
Run by VINCENT at 2009-05-31 12:07:54
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 315 GB (66%) free of 477 GB
Total RAM: 2046 MB (46% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:07:57, on 31/05/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\Program Files\Secunia\PSI\psi.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe
C:\Program Files\MagicTune Premium\GammaTray.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\SEC\Natural Color Pro\NCProTray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Mozilla Firefox 3.1 Beta 3\firefox.exe
C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
C:\Windows\system32\Taskmgr.exe
C:\Users\VINCENT\Downloads\Minimise_memory_firefox_Xtaze.net\Minimise-memory-firefox-Xtaze.net\FFM.exe
C:\Users\VINCENT\Desktop\RSIT.exe
C:\Program Files\hijackthis\VINCENT.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?cc=fr&toHttps=1&redig=55729C844D6A45819CAD368B3E178C9F
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.sfr.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ustart.org
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: Votre PC prend la parole - {CEDDA62B-5FBE-4AB2-AE2E-5E069F555555} - C:\Program Files\Micro Application\Votre PC prend la parole\IE\MediaDICOIEToolbarSonLocal.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: SYSTRAN Toolbar - {95daa571-4def-4a6d-97d8-98a346672a24} - mscoree.dll (file missing)
O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [XboxStat] "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun
O4 - HKLM\..\Run: [WindowsLivePhone] C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe /AutoRun
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [VeohPlugin] "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WindowsLivePhone] "C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe" /AutoRun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: GammaTray.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: NCProTray.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O8 - Extra context menu item: Consulter les dictionnaires (SYSTRAN) - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/lookup.js
O8 - Extra context menu item: Traduire (SYSTRAN) - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/translate.js
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Broken Internet access because of LSP provider 'c:\program files\bonjour\mdnsnsp.dll' missing
O13 - Gopher Prefix:
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: ,C:\PROGRA~1\KASPER~1\KASPER~2\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~2\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~2\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~2\kloehk.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate1c986d95a14bab) (gupdate1c986d95a14bab) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: MagicTuneEngine - Unknown owner - C:\Program Files\MagicTune Premium\MagicTuneEngine.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: SiSoftware Deployment Agent Service (SandraAgentSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009\RpcAgentSrv.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe

Quelque infections,

Je doute sur quelque fichiers,

Rends toi sur ce site :

https://www.virustotal.com/gui/

Copie ce qui suit et colles le dans l'espace pour la recherche ( ou clique sur "parcourir" et va jusqu'au fichier demandé ) :

C:\Windows\1C4551A64743409391E41477CD655043.TMP

Clique sur Send File ( = " Envoyer le fichier " ).

Un rapport va s'élaborer ligne à ligne.

Attends bien la fin ... Il doit comprendre la taille du fichier envoyé.

Sauvegarde le rapport avec le bloc-note.

Copie le dans ta prochaine réponse ...

( Si VirusTotal indique que le fichier a déjà été analysé, clique sur le bouton Ré-analyse le fichier maintenant )

Répète le même opération pour:
C:\Windows\system32\yv12vfw.dll
C:\Windows\system32\ff_vfw.dll

******************************************************************************

▶ Désactive l'UAC

Télécharge UsbFix de C_XX & Chiquitine29

▶ Tutoriel d'installation

▶ Tutoriel recherche

▶ Lance l'installation avec les paramètres par défaut

▶ Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectés (!) sans les ouvrir (!)

▶ Fais un clic droit sur le raccourci UsbFix présent sur ton bureau et choisis "Exécuter en tant qu'administrateur" .

▶ Choisis l'option 1 (recherche)

▶ Laisse travailler l'outil

▶ Ensuite poste le rapport UsbFix.txt qui apparaîtra

Notes :
1- le rapport UsbFix.txt est sauvegardé a la racine du disque

2- Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides

3- "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

@+

J'ai l'impression que ça sert à rien ce que j'ai fait (il n'y a pas de résultat)

Antivirus Version Dernière mise à jour Résultat
a-squared 4.0.0.101 2009.05.31 -
AhnLab-V3 5.0.0.2 2009.05.31 -
AntiVir 7.9.0.180 2009.05.30 -
Antiy-AVL 2.0.3.1 2009.05.31 -
Authentium 5.1.2.4 2009.05.30 -
Avast 4.8.1335.0 2009.05.30 -
AVG 8.5.0.339 2009.05.31 -
BitDefender 7.2 2009.05.31 -
CAT-QuickHeal 10.00 2009.05.29 -
ClamAV 0.94.1 2009.05.30 -
Comodo 1223 2009.05.31 -
DrWeb 5.0.0.12182 2009.05.29 -
eSafe 7.0.17.0 2009.05.27 -
eTrust-Vet 31.6.6530 2009.05.30 -
F-Prot 4.4.4.56 2009.05.30 -
F-Secure 8.0.14470.0 2009.05.31 -
Fortinet 3.117.0.0 2009.05.31 -
GData 19 2009.05.31 -
Ikarus T3.1.1.57.0 2009.05.31 -
K7AntiVirus 7.10.749 2009.05.29 -
Kaspersky 7.0.0.125 2009.05.31 -
McAfee 5631 2009.05.30 -
McAfee+Artemis 5631 2009.05.30 -
McAfee-GW-Edition 6.7.6 2009.05.29 -
Microsoft 1.4701 2009.05.31 -
NOD32 4117 2009.05.30 -
Norman 6.01.05 2009.05.29 -
nProtect 2009.1.8.0 2009.05.31 -
Panda 10.0.0.14 2009.05.30 -
PCTools 4.4.2.0 2009.05.30 -
Prevx 3.0 2009.05.31 -
Rising 21.31.63.00 2009.05.31 -
Sophos 4.42.0 2009.05.31 -
Sunbelt 3.2.1858.2 2009.05.30 -
Symantec 1.4.4.12 2009.05.31 -
TheHacker 6.3.4.3.334 2009.05.29 -
TrendMicro 8.950.0.1092 2009.05.29 -
VBA32 3.12.10.6 2009.05.31 -
ViRobot 2009.5.29.1761 2009.05.29 -
VirusBuster 4.6.5.0 2009.05.30 -
Information additionnelle
File size: 200704 bytes
MD5...: 4bdad33a6edf1dcede6381a9bf235157
SHA1..: 4893650b15b90f4a36c2a4d3aa750c17140e7974
SHA256: 304fa0e881662e727cc920a8e5891af67953cf8df8de6054f6426005b2f92388
ssdeep: -
PEiD..: -
TrID..: File type identification
Win32 Executable MS Visual C++ (generic) (53.1%)
Windows Screen Saver (18.4%)
Win32 Executable Generic (12.0%)
Win32 Dynamic Link Library (generic) (10.6%)
Generic Win/DOS Executable (2.8%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0xdf33
timedatestamp.....: 0x493e26ce (Tue Dec 09 08:05:34 2008)
machinetype.......: 0x14c (I386)

( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x1ded5 0x1e000 6.68 b9c9579e39e592690732c3fe27a3c184
.rdata 0x1f000 0x6df0 0x7000 5.12 d2b5ccfa1dcfe567de406c47f2bfbfd2
.data 0x26000 0x593c 0x2000 3.82 b2bf7c01eec5675ee935f8d978e81b43
.rsrc 0x2c000 0x3b9c 0x4000 3.90 6e4a936c9476fe797f4c1ba4c0634fbc
.reloc 0x30000 0x4848 0x5000 3.44 cd852862cb7eea0cdc38be9f5dc7b33e

( 8 imports )
> KERNEL32.dll: GetVersionExA, lstrcmpW, GlobalFindAtomA, GlobalGetAtomNameA, GetThreadLocale, ReadFile, WriteFile, SetFilePointer, FlushFileBuffers, GetCurrentProcess, CreateFileA, GetCPInfo, GetOEMCP, InterlockedIncrement, HeapAlloc, HeapFree, HeapReAlloc, VirtualAlloc, RtlUnwind, GetCommandLineA, GetProcessHeap, ExitProcess, RaiseException, HeapSize, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, VirtualFree, HeapDestroy, HeapCreate, GetStdHandle, SetHandleCount, GetFileType, GetStartupInfoA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, GetACP, IsValidCodePage, GetConsoleCP, GetConsoleMode, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, GlobalFlags, WritePrivateProfileStringA, SetErrorMode, TlsFree, DeleteCriticalSection, LocalReAlloc, TlsSetValue, TlsAlloc, InitializeCriticalSection, GlobalHandle, GlobalReAlloc, EnterCriticalSection, TlsGetValue, LeaveCriticalSection, LocalAlloc, InterlockedDecrement, GetModuleFileNameW, GlobalFree, GlobalUnlock, GetCurrentProcessId, SetLastError, GlobalAddAtomA, GlobalDeleteAtom, GetCurrentThread, GetCurrentThreadId, ConvertDefaultLocale, GetModuleFileNameA, EnumResourceLanguagesA, GetLocaleInfoA, LoadLibraryA, FindResourceA, LoadResource, LockResource, SizeofResource, GlobalLock, lstrcmpA, GlobalAlloc, FreeLibrary, GetModuleHandleA, GetProcAddress, lstrlenA, CompareStringA, GetVersion, WideCharToMultiByte, MultiByteToWideChar, InterlockedExchange, CreateProcessA, WaitForSingleObject, Sleep, DeleteFileA, RemoveDirectoryA, CloseHandle, GetLastError, FormatMessageA, LocalFree
> USER32.dll: GetSysColorBrush, LoadCursorA, DestroyMenu, RegisterWindowMessageA, LoadIconA, WinHelpA, GetCapture, GetClassLongA, SetPropA, GetPropA, RemovePropA, IsWindow, GetForegroundWindow, GetDlgItem, GetTopWindow, DestroyWindow, GetMessageTime, GetMessagePos, MapWindowPoints, SetForegroundWindow, GetClientRect, GetMenu, CreateWindowExA, GetClassInfoExA, GetClassInfoA, RegisterClassA, AdjustWindowRectEx, CopyRect, ShowWindow, DefWindowProcA, CallWindowProcA, SetWindowLongA, SetWindowPos, SystemParametersInfoA, IsIconic, GetWindowPlacement, GetSystemMetrics, GetWindow, GetDlgCtrlID, GetWindowRect, GetClassNameA, PtInRect, SetWindowTextA, GetSysColor, ReleaseDC, GetDC, ClientToScreen, GrayStringA, DrawTextExA, DrawTextA, TabbedTextOutA, UnregisterClassA, UnhookWindowsHookEx, GetMenuItemID, MessageBoxA, GetMenuItemCount, GetSubMenu, GetWindowThreadProcessId, GetWindowLongA, GetLastActivePopup, IsWindowEnabled, EnableWindow, PostQuitMessage, PostMessageA, CheckMenuItem, EnableMenuItem, GetMenuState, ModifyMenuA, SendMessageA, GetParent, GetFocus, LoadBitmapA, GetMenuCheckMarkDimensions, SetCursor, SetWindowsHookExA, CallNextHookEx, GetMessageA, TranslateMessage, DispatchMessageA, GetActiveWindow, IsWindowVisible, GetKeyState, PeekMessageA, GetCursorPos, ValidateRect, SetMenuItemBitmaps, GetWindowTextA
> ADVAPI32.dll: RegSetValueExA, RegCreateKeyExA, RegQueryValueA, RegOpenKeyA, RegEnumKeyA, RegDeleteKeyA, RegQueryValueExA, RegOpenKeyExA, RegEnumKeyExA, RegCloseKey
> SHLWAPI.dll: PathFindExtensionA, PathFindFileNameA
> OLEACC.dll: LresultFromObject, CreateStdAccessibleObject
> GDI32.dll: DeleteDC, ExtTextOutA, GetStockObject, GetDeviceCaps, SaveDC, RestoreDC, SetBkColor, ScaleWindowExtEx, SetWindowExtEx, SetTextColor, SetMapMode, GetClipBox, ScaleViewportExtEx, SetViewportExtEx, OffsetViewportOrgEx, SetViewportOrgEx, SelectObject, CreateBitmap, TextOutA, RectVisible, PtVisible, DeleteObject, Escape
> WINSPOOL.DRV: DocumentPropertiesA, OpenPrinterA, ClosePrinter
> OLEAUT32.dll: -, -, -

( 2 exports )
GetExistingPhysXInformation, UnInstallExistingPhysX
PDFiD.: -
RDS...: NSRL Reference Data Set
-

Antivirus Version Dernière mise à jour Résultat
a-squared 4.0.0.101 2009.05.31 -
AhnLab-V3 5.0.0.2 2009.05.31 -
AntiVir 7.9.0.180 2009.05.30 -
Antiy-AVL 2.0.3.1 2009.05.31 -
Authentium 5.1.2.4 2009.05.30 -
Avast 4.8.1335.0 2009.05.30 -
AVG 8.5.0.339 2009.05.31 -
BitDefender 7.2 2009.05.31 -
CAT-QuickHeal 10.00 2009.05.29 -
ClamAV 0.94.1 2009.05.30 -
Comodo 1223 2009.05.31 -
DrWeb 5.0.0.12182 2009.05.29 -
eSafe 7.0.17.0 2009.05.27 -
eTrust-Vet 31.6.6530 2009.05.30 -
F-Prot 4.4.4.56 2009.05.30 -
F-Secure 8.0.14470.0 2009.05.31 -
Fortinet 3.117.0.0 2009.05.31 -
GData 19 2009.05.31 -
Ikarus T3.1.1.57.0 2009.05.31 -
K7AntiVirus 7.10.749 2009.05.29 -
Kaspersky 7.0.0.125 2009.05.31 -
McAfee 5631 2009.05.30 -
McAfee+Artemis 5631 2009.05.30 -
McAfee-GW-Edition 6.7.6 2009.05.29 -
Microsoft 1.4701 2009.05.31 -
NOD32 4117 2009.05.30 -
Norman 6.01.05 2009.05.29 -
nProtect 2009.1.8.0 2009.05.31 -
Panda 10.0.0.14 2009.05.30 -
PCTools 4.4.2.0 2009.05.30 -
Prevx 3.0 2009.05.31 -
Rising 21.31.63.00 2009.05.31 -
Sophos 4.42.0 2009.05.31 -
Sunbelt 3.2.1858.2 2009.05.30 -
Symantec 1.4.4.12 2009.05.31 -
TheHacker 6.3.4.3.334 2009.05.29 -
TrendMicro 8.950.0.1092 2009.05.29 -
VBA32 3.12.10.6 2009.05.31 -
ViRobot 2009.5.29.1761 2009.05.29 -
VirusBuster 4.6.5.0 2009.05.30 -
Information additionnelle
File size: 217088 bytes
MD5...: dd602c1fba3a3e962627569c9e10af7c
SHA1..: d81cabff225dffdb4b244a0348ba213f98592ff2
SHA256: 83f16a27f4d1e28d79d6d3b3f589518d82bbac947f868d5969b47e8dedb76ba3
ssdeep: -
PEiD..: Armadillo v1.xx - v2.xx
TrID..: File type identification
Win64 Executable Generic (59.6%)
Win32 Executable MS Visual C++ (generic) (26.2%)
Win32 Executable Generic (5.9%)
Win32 Dynamic Link Library (generic) (5.2%)
Generic Win/DOS Executable (1.3%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0xc7d7
timedatestamp.....: 0x4013ec64 (Sun Jan 25 16:18:44 2004)
machinetype.......: 0x14c (I386)

( 9 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x192d2 0x1a000 6.61 5aad0c4aabe78dc2946820c9020b4d46
MMXCODE1 0x1b000 0x15dd 0x2000 4.98 5fe93d2ac42df837757dae46365840a5
.rdata 0x1d000 0x145b 0x2000 3.61 9bea31ed36e1dfc81274f2665e45ea10
.data 0x1f000 0x7de4 0x4000 2.35 346a533c6530e537273ff920dbd5a078
H26xColo 0x27000 0x7784 0x8000 0.45 3f7b1c92254241417fcc6cd517a71317
MMXDATA1 0x2f000 0x1c0 0x1000 0.81 b24401e4ba5403f7ff985ae30a7d4000
MMXCCDAT 0x30000 0x4828 0x5000 5.39 f1f12a58b43260ed6c172de6a2159435
.rsrc 0x35000 0x1aa0 0x2000 2.98 678e62bb1b2cec65f1f2e3e0269df2f7
.reloc 0x37000 0x1cfe 0x2000 4.81 ccc6631df5a6cdc229a349b73de5aa3e

( 5 imports )
> KERNEL32.DLL: WaitForSingleObject, GetSystemInfo, MultiByteToWideChar, GetPrivateProfileIntA, IsBadReadPtr, InterlockedDecrement, InterlockedIncrement, GetLastError, CreateThread, GetCurrentThreadId, TlsSetValue, ExitThread, RtlUnwind, GetCommandLineA, GetVersion, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, ExitProcess, WideCharToMultiByte, LCMapStringA, LCMapStringW, TlsAlloc, TlsFree, SetLastError, TlsGetValue, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, GetProcAddress, GetModuleHandleA, SetHandleCount, CloseHandle, GetFileType, GetStartupInfoA, GetModuleFileNameA, FreeEnvironmentStringsA, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, WriteFile, GetCPInfo, GetStringTypeA, GetStringTypeW, VirtualAlloc, HeapReAlloc, IsBadWritePtr, SetFilePointer, SetUnhandledExceptionFilter, IsBadCodePtr, GetACP, GetOEMCP, LoadLibraryA, SetStdHandle, FlushFileBuffers, HeapFree, GetProcessHeap, HeapAlloc, GetStdHandle
> ADVAPI32.dll: RegQueryValueExA, RegOpenKeyExA, RegCloseKey
> GDI32.dll: GetSystemPaletteEntries
> USER32.dll: DialogBoxParamA, PostMessageA, EndDialog, ReleaseDC, GetDC
> WINMM.dll: DefDriverProc

( 2 exports )
DllMain, DriverProc
PDFiD.: -
RDS...: NSRL Reference Data Set
-
ThreatExpert info: <a href='http://www.threatexpert.com/report.aspx?md5=dd602c1fba3a3e962627569c9e10af7c' target='_blank'>https://www.symantec.com?md5=dd602c1fba3a3e962627569c9e10af7c</a>
CWSandbox info: <a href='http://research.sunbelt-software.com/partnerresource/MD5.aspx?md5=dd602c1fba3a3e962627569c9e10af7c' target='_blank'>http://research.sunbelt-software.com/...

le ff-vfw

Antivirus Version Dernière mise à jour Résultat
a-squared 4.0.0.101 2009.05.31 -
AhnLab-V3 5.0.0.2 2009.05.31 -
AntiVir 7.9.0.180 2009.05.30 -
Antiy-AVL 2.0.3.1 2009.05.31 -
Authentium 5.1.2.4 2009.05.30 -
Avast 4.8.1335.0 2009.05.30 -
AVG 8.5.0.339 2009.05.31 -
BitDefender 7.2 2009.05.31 -
CAT-QuickHeal 10.00 2009.05.29 -
ClamAV 0.94.1 2009.05.30 -
Comodo 1223 2009.05.31 -
DrWeb 5.0.0.12182 2009.05.29 -
eSafe 7.0.17.0 2009.05.27 -
eTrust-Vet 31.6.6530 2009.05.30 -
F-Prot 4.4.4.56 2009.05.30 -
F-Secure 8.0.14470.0 2009.05.31 -
Fortinet 3.117.0.0 2009.05.31 -
GData 19 2009.05.31 -
Ikarus T3.1.1.57.0 2009.05.31 -
K7AntiVirus 7.10.749 2009.05.29 -
Kaspersky 7.0.0.125 2009.05.31 -
McAfee 5631 2009.05.30 -
McAfee+Artemis 5631 2009.05.30 -
McAfee-GW-Edition 6.7.6 2009.05.29 -
Microsoft 1.4701 2009.05.31 -
NOD32 4117 2009.05.30 -
Norman 6.01.05 2009.05.29 -
nProtect 2009.1.8.0 2009.05.31 -
Panda 10.0.0.14 2009.05.30 -
PCTools 4.4.2.0 2009.05.30 -
Prevx 3.0 2009.05.31 -
Rising 21.31.63.00 2009.05.31 -
Sophos 4.42.0 2009.05.31 -
Sunbelt 3.2.1858.2 2009.05.30 -
Symantec 1.4.4.12 2009.05.31 -
TheHacker 6.3.4.3.334 2009.05.29 -
TrendMicro 8.950.0.1092 2009.05.29 -
ViRobot 2009.5.29.1761 2009.05.29 -
VirusBuster 4.6.5.0 2009.05.30 -
Information additionnelle
File size: 84480 bytes
MD5...: c9992f2321917b900a101fd41af0a30b
SHA1..: 9632b17db8381385743149ec5a331c3c9ec73acc
SHA256: dde9c11032b1deed454eeb52c1ab852165bdc2849546e1f02c953d08bb7ef47c
ssdeep: -
PEiD..: -
TrID..: File type identification
Win32 Executable MS Visual C++ (generic) (65.2%)
Win32 Executable Generic (14.7%)
Win32 Dynamic Link Library (generic) (13.1%)
Generic Win/DOS Executable (3.4%)
DOS Executable Generic (3.4%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x4b7e
timedatestamp.....: 0x49d4bbee (Thu Apr 02 13:21:50 2009)
machinetype.......: 0x14c (I386)

( 6 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0xdabf 0xdc00 6.59 6061576ae6c887217ff23e27d99caad9
.rdata 0xf000 0x341f 0x3600 5.16 03823706e02e41a5d04d8d0bd0169dfa
.data 0x13000 0x2d80 0x1200 2.67 6fe505c8593fe0592ec4e7e2f933a743
.tls 0x16000 0x2 0x200 0.00 bf619eac0cdf3f68d496ea9344137e8b
.rsrc 0x17000 0x264 0x400 5.11 8cebf6162a9a1f9a8fe48d1cec1f27c8
.reloc 0x18000 0x1b60 0x1c00 4.06 6d6cf4ccc144c272ca5cdb4e41871130

( 4 imports )
> KERNEL32.dll: SetEvent, GetSystemTimeAsFileTime, WaitForSingleObject, GetCurrentThreadId, CloseHandle, CreateEventA, RaiseException, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, RtlUnwind, GetCommandLineA, WideCharToMultiByte, GetTimeZoneInformation, HeapAlloc, GetLastError, HeapFree, GetModuleHandleW, GetProcAddress, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, InterlockedDecrement, Sleep, HeapSize, ExitProcess, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, DeleteCriticalSection, GetModuleFileNameA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, HeapCreate, HeapDestroy, VirtualFree, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, LeaveCriticalSection, EnterCriticalSection, GetCPInfo, VirtualAlloc, HeapReAlloc, WriteFile, GetACP, GetOEMCP, IsValidCodePage, LoadLibraryA, InitializeCriticalSectionAndSpinCount, SetFilePointer, GetConsoleCP, GetConsoleMode, MultiByteToWideChar, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, CompareStringA, CompareStringW, SetEnvironmentVariableA, CreateFileA, FlushFileBuffers, GetProcessHeap, ReleaseMutex, CreateMutexA
> ole32.dll: CoUninitialize, CoInitialize, CoCreateInstance
> WINMM.dll: DefDriverProc
> COMCTL32.dll: -

( 2 exports )
DriverProc, configureVFW
PDFiD.: -
RDS...: NSRL Reference Data Set
-

je fais le usbfix

Et le voila le usbfix.txt

############################## [ UsbFix V3.027 | Scan ]

# User : VINCENT (Administrateurs) # GENESIS
# Update on 30/05/09 by Chiquitine29, C_XX & Chimay8
# WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
# Start at: 14:15:45 | 31/05/2009

# Intel(R) Core(TM)2 Duo CPU E6850 @ 3.00GHz
# Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6001 32-bit) # Service Pack 1
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Disabled
# AV : Kaspersky Internet Security 8.0.0.454 [ Enabled | Updated ]
# FW : Kaspersky Internet Security[ Enabled ]8.0.0.454

# A:\ # Lecteur de disquettes 3 ½ pouces
# C:\ # Disque fixe local # 465,76 Go (307 Go free) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque amovible # 3,9 Go (3,25 Go free) [USB] # FAT32

############################## [ Processus actifs ]

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\MagicTune Premium\MagicTuneEngine.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\Windows\system32\PSIService.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\TUProgSt.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\Program Files\Secunia\PSI\psi.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe
C:\Program Files\MagicTune Premium\GammaTray.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\SEC\Natural Color Pro\NCProTray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Mozilla Firefox 3.1 Beta 3\firefox.exe
C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
C:\Windows\system32\Taskmgr.exe
C:\Users\VINCENT\Downloads\Minimise_memory_firefox_Xtaze.net\Minimise-memory-firefox-Xtaze.net\FFM.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Windows Live\Messenger\wlcsdk.exe
C:\Windows\regedit.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\System32\mobsync.exe

################## [ Registre Startup ]

HKCU_Main: "Local Page"="C:\\Windows\\system32\\blank.htm"
HKCU_Main: "Search Page"="https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fhome.microsoft.com%2fintl%2fbr%2faccess%2fallinone.asp%3f"
HKCU_Main: "Start Page"="https://www.sfr.fr/"
HKLM_logon: "Userinit"="C:\\Windows\\system32\\userinit.exe,"
HKLM_logon: "LegalNoticeCaption"=""
HKLM_logon: "LegalNoticeText"=""
HKLM_Run: AVP="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
HKLM_Run: XboxStat="C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun
HKLM_Run: WindowsLivePhone=C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe /AutoRun
HKLM_Run: NvCplDaemon=RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM_Run: Kernel and Hardware Abstraction Layer=KHALMNPR.EXE
HKLM_Run: JMB36X IDE Setup=C:\Windows\RaidTool\xInsIDE.exe
HKLM_Run: RtHDVCpl=RtHDVCpl.exe
HKLM_Run: Skytel=Skytel.exe
HKLM_Run: QuickTime Task="C:\Program Files\QuickTime\QTTask.exe" -atboottime
HKLM_Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
HKCU_Run: VeohPlugin="C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"
HKCU_Run: swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
HKCU_Run: ehTray.exe=C:\Windows\ehome\ehTray.exe
HKCU_Run: WindowsLivePhone="C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe" /AutoRun
HKCU_Run: WMPNSCFG=C:\Program Files\Windows Media Player\WMPNSCFG.exe
HKCU_Run: HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\AdobeUpdater=

################## [ Fichiers # Dossiers infectieux ]

################## [ Registre # Clés Run infectieuses ]

Found ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe

################## [ Registre # Mountpoints2 ]

HKCU\...\Explorer\MountPoints2\{20bd2f9c-be24-11dd-bd6b-001a4d58fb1b}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{83d7f6a8-7756-11dd-9ff2-001a4d58fb1b}\Shell\AutoRun\Command
HKCU\...\Explorer\MountPoints2\{d1fa6a61-1c39-11de-93dd-001a4d58fb1b}\Shell\AutoRun\Command

################## [ Informations # Fichier Suspect ]

################## [ Cracks # Keygens # Serials ]

# -> Nothing found !

################## [ ! Fin du rapport # UsbFix V3.027 ! ]

Nettoyage:

▶ Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectés (!) sans les ouvrir (!)

▶ Fais un clic droit sur le raccourci UsbFix présent sur ton bureau et choisis "Exécuter en tant qu'administrateur" .

▶ choisi l'option 2 ( Suppression )

▶ Ton bureau disparaîtra et le PC redémarrera .

▶ Au redémarrage , UsbFix scannera ton pc , laisse travailler l'outil.

▶ Ensuite poste le rapport UsbFix.txt qui apparaîtra avec le bureau .

▶ Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )

tutoriel nettoyage

puis poste un nouveau log RSIT pour l'analyse...

Voila

############################## [ UsbFix V3.027 | Cleaning ]

# User : VINCENT (Administrateurs) # GENESIS
# Update on 30/05/09 by Chiquitine29, C_XX & Chimay8
# WebSite : http://pagesperso-orange.fr/NosTools/usbfix.html
# Start at: 14:41:25 | 31/05/2009

# Intel(R) Core(TM)2 Duo CPU E6850 @ 3.00GHz
# Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6001 32-bit) # Service Pack 1
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Disabled
# AV : Kaspersky Internet Security 8.0.0.454 [ Enabled | Updated ]
# FW : Kaspersky Internet Security[ Enabled ]8.0.0.454

# A:\ # Lecteur de disquettes 3 ½ pouces
# C:\ # Disque fixe local # 465,76 Go (307,82 Go free) # NTFS
# D:\ # Disque CD-ROM
# E:\ # Disque amovible # 3,9 Go (3,25 Go free) [USB] # FAT32
# F:\ # Disque amovible

############################## [ Processus actifs ]

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\LogonUI.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\MagicTune Premium\MagicTuneEngine.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\Windows\system32\PSIService.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\TUProgSt.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\userinit.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\system32\runonce.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\rundll32.exe
C:\Windows\system32\rundll32.exe

################## [ Fichiers # Dossiers infectieux ]

################## [ Registre # Clés Run infectieuses ]

Deleted ! HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe

################## [ Registre # Mountpoints2 ]

Deleted ! HKCU\...\Explorer\MountPoints2\{20bd2f9c-be24-11dd-bd6b-001a4d58fb1b}\Shell\AutoRun\Command
Deleted ! HKCU\...\Explorer\MountPoints2\{83d7f6a8-7756-11dd-9ff2-001a4d58fb1b}\Shell\AutoRun\Command
Deleted ! HKCU\...\Explorer\MountPoints2\{d1fa6a61-1c39-11de-93dd-001a4d58fb1b}\Shell\AutoRun\Command

################## [ Listing des fichiers présent ]

[06/04/2008 18:06|-rahs----|0] - C:\$bootdrive$
[06/04/2008 17:52|-rahs----|2] - C:\$drvmig$
[06/04/2008 18:06|-rahs----|0] - C:\$dwnlvldrive$
[06/04/2008 18:06|-rahs----|0] - C:\$lsdrive$
[10/01/2009 22:55|--ah-----|11] - C:\AuResult.ini
[01/01/2009 15:40|--ah-----|74] - C:\autoexec.000
[20/01/2009 21:29|--a------|118] - C:\autoexec.bat
[18/01/2008 23:45|-rahs----|333203] - C:\bootmgr
[06/04/2008 18:08|--a-s----|8192] - C:\BOOTSECT.BAK
[18/09/2006 23:43|--a------|10] - C:\config.sys
[28/03/2008 23:18|-rahs----|0] - C:\IO.SYS
[31/12/2008 17:45|--a------|98] - C:\MDL 2.0 Debug.txt
[28/03/2008 23:18|-rahs----|0] - C:\MSDOS.SYS
[?|?|?] - C:\pagefile.sys
[31/05/2009 14:44|--a------|4035] - C:\UsbFix.txt
[02/04/2009 02:32|--a------|692202970] - E:\OUTLANDER.2008.FRENCH.DVDRiP.XViD-OLi82.avi

################## [ Vaccination ]

# C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# E:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.

################## [ Informations # Fichier Suspect ]

################## [ Cracks # Keygens # Serials ]

# -> Nothing found !

################## [ ! Fin du rapport # UsbFix V3.027 ! ]

Log.txt

Logfile of random's system information tool 1.06 (written by random/random)
Run by VINCENT at 2009-05-31 14:58:57
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 322 GB (67%) free of 477 GB
Total RAM: 2046 MB (47% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:59:03, on 31/05/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\conime.exe
C:\Windows\explorer.exe
C:\Program Files\MagicTune Premium\GammaTray.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\SEC\Natural Color Pro\NCProTray.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Mozilla Firefox 3.1 Beta 3\firefox.exe
C:\Users\VINCENT\Desktop\RSIT.exe
C:\Program Files\hijackthis\VINCENT.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS02
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: Votre PC prend la parole - {CEDDA62B-5FBE-4AB2-AE2E-5E069F555555} - C:\Program Files\Micro Application\Votre PC prend la parole\IE\MediaDICOIEToolbarSonLocal.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: SYSTRAN Toolbar - {95daa571-4def-4a6d-97d8-98a346672a24} - mscoree.dll (file missing)
O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [XboxStat] "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun
O4 - HKLM\..\Run: [WindowsLivePhone] C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe /AutoRun
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [VeohPlugin] "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WindowsLivePhone] "C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe" /AutoRun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: GammaTray.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: NCProTray.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Consulter les dictionnaires (SYSTRAN) - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/lookup.js
O8 - Extra context menu item: Traduire (SYSTRAN) - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/translate.js
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Broken Internet access because of LSP provider 'c:\program files\bonjour\mdnsnsp.dll' missing
O13 - Gopher Prefix:
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: ,C:\PROGRA~1\KASPER~1\KASPER~2\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~2\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~2\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~2\kloehk.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate1c986d95a14bab) (gupdate1c986d95a14bab) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: MagicTuneEngine - Unknown owner - C:\Program Files\MagicTune Premium\MagicTuneEngine.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: SiSoftware Deployment Agent Service (SandraAgentSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009\RpcAgentSrv.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe

Vire ce fichier manuellement:
C:\Windows\1C4551A64743409391E41477CD655043.TMP

Ensuite:

Télécharge Ad-remover ( de C_XX ) sur ton bureau :

! Déconnecte toi et ferme toutes applications en cours !

• Double clique sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut .

• Double-clique sur le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .

• Au menu principal choisis l'option "L" et tape sur [entrée] .

• Laisse travailler l'outil et ne touche à rien ...

--> Poste le rapport qui apparait à la fin , sur le forum ...

Notes:

1- Le rapport est sauvegardé aussi sous C:\Ad-report.log
2- "Process.exe", une composante de l'outil, est détecté par certains antivirus :
(AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.


Aide (Installation)
Aide (Recherche)

J'ai essayer avec Ad-remover mais ça n'a pas marcher je l'ai laisser tourner pendant une heure mais rien il est rester à rien faire la ou il y a la sorte de chat. je vais réessayer, faut il le lancer en mode administateur?
PS: avant de quitté j'ai regarder les processus et kaspersky et Système prenaient chacun 50% de la CPU.

il a nettoyé tous en me disant que le fichier est introuvable.

.
======= RAPPORT D'AD-REMOVER 1.1.4.5 | UNIQUEMENT XP/VISTA =======
.
Mit à jour part C_XX le 31/05/2009 à 12:50
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 18:05:51, 31/05/2009 | Mode Normal | Option: CLEAN
Exécuté de: C:\Program Files\Ad-remover\
Système d'exploitation: Microsoft® ™ Home Premium Service Pack 1 v6.0.6001
Nom du PC: GENESIS
.
Administrateur: Administrateur *Desactive*
N'est pas administrateur: ASPNET
N'est pas administrateur: GAEL
N'est pas administrateur: Invité *Desactive*
N'est pas administrateur: MOI
Administrateur: VINCENT
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
.
.
C:\Users\VINCENT\AppData\Roaming\ItsLabel

(!) -- Fichiers temporaires supprimés.

.
============== Scan additionnel ==============
.

* Mozilla FireFox Version 3.1b3 *

Nom du profil: 1v57dz3g.default (VINCENT)
.
(Prefs.js) user_pref("browser.search.defaultenginename", "Yahoo");
(Prefs.js) user_pref("browser.search.selectedEngine", "Yahoo");
(Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.1b3");
.
.

* Internet Explorer Version 8.0.6001.18702 *

[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://home.microsoft.com/access/allinone.asp
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: res://ieframe.dll/tabswelcome.htm

============== Suspect (Cracks, Serials ... ) ==============

.

+---------------------------------------------------------------------------+

2251 Octet(s) - C:\Ad-Report-CLEAN.log
829 Octet(s) - C:\Ad-Report-SCAN.log

21 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
1 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE

Fin à: 18:10:15 | 31/05/2009
.
============== E.O.F ==============
.

Edit:
Il faut etre l'admin de l'ordi, procede comme ceci:

Avant d'utiliser adremover, désactive l'UAC

• fais un clic droit sur le raccourci Ad-remover qui est sur ton bureau et choisis "exécuter en tant qu'adminstrateur"

• Au menu principal choisis l'option "L" et tape sur [entrée] .

• Laisse travailler l'outil et ne touche à rien ...

--> Poste le rapport qui apparait à la fin , sur le forum ...

Notes:

1- Le rapport est sauvegardé aussi sous C:\Ad-report.log
2- "Process.exe", une composante de l'outil, est détecté par certains antivirus :
(AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

Poste un nouveau log RSIT

voila le ad-report-clean.log

Je te remercie vraiment de m'offrir de ton temps pour m'aider c'est vraiment gentil de ta part.

.
======= RAPPORT D'AD-REMOVER 1.1.4.5 | UNIQUEMENT XP/VISTA =======
.
Mit à jour part C_XX le 31/05/2009 à 12:50
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 20:54:28, 31/05/2009 | Mode Normal | Option: CLEAN
Exécuté de: C:\Program Files\Ad-remover\
Système d'exploitation: Microsoft® ™ Home Premium Service Pack 1 v6.0.6001
Nom du PC: GENESIS
.
Administrateur: Administrateur *Desactive*
N'est pas administrateur: ASPNET
N'est pas administrateur: GAEL
N'est pas administrateur: Invité *Desactive*
N'est pas administrateur: MOI
Administrateur: VINCENT
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
.
.

(!) -- Fichiers temporaires supprimés.

.
============== Scan additionnel ==============
.

* Mozilla FireFox Version 3.1b3 *

Nom du profil: 1v57dz3g.default (VINCENT)
.
(Prefs.js) user_pref("browser.search.defaultenginename", "Yahoo");
(Prefs.js) user_pref("browser.search.selectedEngine", "Yahoo");
(Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.1b3");
.
.

* Internet Explorer Version 8.0.6001.18702 *

[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://home.microsoft.com/access/allinone.asp
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: res://ieframe.dll/tabswelcome.htm

============== Suspect (Cracks, Serials ... ) ==============

.

+---------------------------------------------------------------------------+

2207 Octet(s) - C:\Ad-Report-CLEAN.log

22 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
1 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE

Fin à: 20:59:10 | 31/05/2009
.
============== E.O.F ==============
.

et le log.txt de RSIT

Logfile of random's system information tool 1.06 (written by random/random)
Run by VINCENT at 2009-05-31 21:01:21
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 321 GB (67%) free of 477 GB
Total RAM: 2046 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:01:26, on 31/05/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\MagicTune Premium\GammaTray.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\SEC\Natural Color Pro\NCProTray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Secunia\PSI\psi.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\Taskmgr.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\explorer.exe
C:\Windows\system32\notepad.exe
C:\Program Files\Mozilla Firefox 3.1 Beta 3\firefox.exe
C:\Users\VINCENT\Desktop\RSIT.exe
C:\Program Files\hijackthis\VINCENT.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: Votre PC prend la parole - {CEDDA62B-5FBE-4AB2-AE2E-5E069F555555} - C:\Program Files\Micro Application\Votre PC prend la parole\IE\MediaDICOIEToolbarSonLocal.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: SYSTRAN Toolbar - {95daa571-4def-4a6d-97d8-98a346672a24} - mscoree.dll (file missing)
O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [XboxStat] "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun
O4 - HKLM\..\Run: [WindowsLivePhone] C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe /AutoRun
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKCU\..\Run: [VeohPlugin] "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WindowsLivePhone] "C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe" /AutoRun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: GammaTray.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: NCProTray.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Consulter les dictionnaires (SYSTRAN) - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/lookup.js
O8 - Extra context menu item: Traduire (SYSTRAN) - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/translate.js
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Broken Internet access because of LSP provider 'c:\program files\bonjour\mdnsnsp.dll' missing
O13 - Gopher Prefix:
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: ,C:\PROGRA~1\KASPER~1\KASPER~2\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~2\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~2\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~2\kloehk.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate1c986d95a14bab) (gupdate1c986d95a14bab) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: MagicTuneEngine - Unknown owner - C:\Program Files\MagicTune Premium\MagicTuneEngine.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: SiSoftware Deployment Agent Service (SandraAgentSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009\RpcAgentSrv.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe

le log de OTMoveIt3 et j'ai trouver un dossier crawler avec un dll (WebSecurityGuard.dll)

========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========

Service\Driver Boonty Games deleted successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\yygca\\ deleted successfully.
========== FILES ==========
File/Folder C:\Program Files\Common Files\BOONTY Shared not found.
File/Folder C:\Program Files\Boonty Games not found.
========== COMMANDS ==========
Explorer started successfully
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
Windows Temp folder emptied.
File delete failed. C:\Users\VINCENT\AppData\Local\Mozilla\Firefox\Profiles\1v57dz3g.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Users\VINCENT\AppData\Local\Mozilla\Firefox\Profiles\1v57dz3g.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Users\VINCENT\AppData\Local\Mozilla\Firefox\Profiles\1v57dz3g.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Users\VINCENT\AppData\Local\Mozilla\Firefox\Profiles\1v57dz3g.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Users\VINCENT\AppData\Local\Mozilla\Firefox\Profiles\1v57dz3g.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
File delete failed. C:\Users\VINCENT\AppData\Local\Mozilla\Firefox\Profiles\1v57dz3g.default\XUL.mfl scheduled to be deleted on reboot.
FireFox cache emptied.
Opera cache emptied.
Temp folders emptied.

OTMoveIt3 by OldTimer - Version 1.0.11.0 log created on 05312009_214257

Files moved on Reboot...
C:\Users\VINCENT\AppData\Local\Mozilla\Firefox\Profiles\1v57dz3g.default\Cache\_CACHE_001_ moved successfully.
C:\Users\VINCENT\AppData\Local\Mozilla\Firefox\Profiles\1v57dz3g.default\Cache\_CACHE_002_ moved successfully.
C:\Users\VINCENT\AppData\Local\Mozilla\Firefox\Profiles\1v57dz3g.default\Cache\_CACHE_003_ moved successfully.
C:\Users\VINCENT\AppData\Local\Mozilla\Firefox\Profiles\1v57dz3g.default\Cache\_CACHE_MAP_ moved successfully.
C:\Users\VINCENT\AppData\Local\Mozilla\Firefox\Profiles\1v57dz3g.default\urlclassifier3.sqlite moved successfully.
C:\Users\VINCENT\AppData\Local\Mozilla\Firefox\Profiles\1v57dz3g.default\XUL.mfl moved successfully.

fixnavi.txt

Search Navipromo version 3.7.7 commencé le 31/05/2009 à 21:54:21,60

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
!!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 12.05.2009 à 18h00 par IL-MAFIOSO

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU E6850 @ 3.00GHz )
BIOS : Award Modular BIOS v6.00PG
USER : VINCENT ( Not Administrator ! )
BOOT : Normal boot

Antivirus : Kaspersky Internet Security 8.0.0.454 (Not Activated)
Firewall : Kaspersky Internet Security 8.0.0.454 (Not Activated)

A:\ (USB)
C:\ (Local Disk) - NTFS - Total:465 Go (Free:313 Go)
D:\ (CD or DVD)
F:\ (USB)

Recherche executé en mode normal

*** Recherche dossiers dans "C:\Windows" ***

*** Recherche dossiers dans "C:\Program Files" ***

*** Recherche dossiers dans "c:\progra~2\micros~1\windows\startm~1\programs" ***

*** Recherche dossiers dans "c:\progra~2\micros~1\windows\startm~1" ***

*** Recherche dossiers dans "C:\ProgramData" ***

*** Recherche dossiers dans "c:\users\vincent\appdata\roaming\micros~1\windows\startm~1\programs" ***

*** Recherche dossiers dans "C:\Users\VINCENT\AppData\Local\virtualstore\Program Files" ***

*** Recherche dossiers dans "C:\Users\GAEL\AppData\Local\virtualstore\Program Files" ***

*** Recherche dossiers dans "C:\Users\MOI\AppData\Local\virtualstore\Program Files" ***

*** Recherche dossiers dans "C:\Users\VINCENT\AppData\Local" ***

*** Recherche dossiers dans "C:\Users\GAEL\AppData\Local" ***

*** Recherche dossiers dans "C:\Users\INVIT~1\AppData\Local" ***

*** Recherche dossiers dans "C:\Users\MOI\AppData\Local" ***

*** Recherche dossiers dans "C:\Users\VINCENT\AppData\Roaming" ***

*** Recherche dossiers dans "C:\Users\GAEL\appdata\roaming" ***

*** Recherche dossiers dans "C:\Users\INVIT~1\appdata\roaming" ***

*** Recherche dossiers dans "C:\Users\MOI\appdata\roaming" ***

*** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
pour + d'infos : http://www.gmer.net

*** Recherche avec GenericNaviSearch ***
!!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
!!! A vérifier impérativement avant toute suppression manuelle !!!

* Recherche dans "C:\Windows\system32" *

* Recherche dans "C:\Users\VINCENT\AppData\Local\Microsoft" *

* Recherche dans "C:\Users\VINCENT\AppData\Local\virtualstore\windows\system32" *

* Recherche dans "C:\Users\VINCENT\AppData\Local" *

* Recherche dans "C:\Users\GAEL\AppData\Local" *

* Recherche dans "C:\Users\INVIT~1\AppData\Local" *

* Recherche dans "C:\Users\MOI\AppData\Local" *

*** Recherche fichiers ***

*** Recherche clés spécifiques dans le Registre ***
!! Les clés trouvées ne sont pas forcément infectées !!

*** Module de Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche nouveaux fichiers Instant Access :

2)Recherche Heuristique :

* Dans "C:\Windows\system32" :

* Dans "C:\Users\VINCENT\AppData\Local\Microsoft" :

* Dans "C:\Users\VINCENT\AppData\Local\virtualstore\windows\system32" :

* Dans "C:\Users\VINCENT\AppData\Local" :

* Dans "C:\Users\GAEL\AppData\Local" :

* Dans "C:\Users\INVIT~1\AppData\Local" :

* Dans "C:\Users\MOI\AppData\Local" :

3)Recherche Certificats :

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat Montorgueil absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltd absent !

4)Recherche autres dossiers et fichiers connus :

*** Analyse terminée le 31/05/2009 à 22:04:44,42 ***

Toujours avec l'UAC désactivée,

Télécharge ToolBar S&D ( de Eric_71/Team IDN )

* Laisse le te guider pendant l'installation ..

*!! Déconnecte toi et ferme toutes tes applications en cours le temps de la manip !!*

▶ Fais un clic droit sur le raccourcis ToolBar S&D et choisis " exécuter en tant qu'administrateur"

▶ choisis F puis valide.

▶ Tapes sur 2 ( nettoyage ) puis tape sur [Entrée].

*Le nettoyage commence*

▶ Ne touche a rien pendant le scan

▶ Un rapport sera généré à la fin du processus : poste son contenu dans ta prochaine réponse


NOTE:
Le rapport est sauvegardé ici -> C:\TB.txt

Puis poste un nouveau log RSIT, et attends moi pour demain (matin et après-midi)

Le voila et bonne nuit.

-----------\\ ToolBar S&D 1.2.8 XP/Vista

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU E6850 @ 3.00GHz )
BIOS : Award Modular BIOS v6.00PG
USER : VINCENT ( Not Administrator ! )
BOOT : Normal boot
Antivirus : Kaspersky Internet Security 8.0.0.454 (Not Activated)
Firewall : Kaspersky Internet Security 8.0.0.454 (Not Activated)
A:\ (USB)
C:\ (Local Disk) - NTFS - Total:465 Go (Free:313 Go)
D:\ (CD or DVD)
F:\ (USB)

"C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
Option : [2] ( 31/05/2009|22:48 )

[ UAC => 1 ]

-----------\\ SUPPRESSION

Supprime! - C:\Program Files\Crawler\Toolbar
Supprime! - C:\Program Files\Crawler

-----------\\ Recherche de Fichiers / Dossiers ...

-----------\\ [..\Internet Explorer\Main]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Page"="https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fhome.microsoft.com%2fintl%2fbr%2faccess%2fallinone.asp%3f"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Search Bar"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Local Page"="C:\\Windows\\system32\\blank.htm"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Default_page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Url"="http://www.microsoft.com/athome/community/rss.xml"
"Url"="http://rss.msn.com/en-us/?feedoutput=rss&ocid=iehrs&unsub=true"
"Url"="http://www.microsoft.com/atwork/community/rss.xml"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.msn.com/fr-fr/"
"Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Local Page"="C:\\Windows\\System32\\blank.htm"
"Search bar"="http://www.bing.com/spresults.aspx"

--------------------\\ Recherche d'autres infections

--------------------\\ Cracks & Keygens ..

C:\Users\VINCENT\AppData\Roaming\Azureus\torrents\CoD_-_WaW_-_Co-Op_Crack.4511138.TPB.torrent
C:\Users\VINCENT\AppData\Roaming\BitTorrent\Mirrors.Edge.Crackfix-RELOADED.torrent
C:\Users\VINCENT\AppData\Roaming\BitTorrent\Patch 1.2 + crack NO-CD + crack multiplay.torrent
C:\Users\VINCENT\AppData\Roaming\Software Informer\cache\icons\Cracklock_is1.ico
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder
C:\Users\VINCENT\Documents\apmb\Photozoom.Professional.v2.3.2.Multilangages.Incl-Keygen.By Simspel
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours crack anydvd_5_6_1_1.eml
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\Cours Cracks
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\crack_logiciel de base
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\explication_crack clone cd 5.2.0.0.doc
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\explication_crack StartClean.doc
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\explication_crack winzip9.0.doc
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\FABRICATION_CRACK_BASIC
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\patchSI_clavierFR.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\patchSI_xp.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\StartClean.EXE
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\tpc_patch
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\wdasm893
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\wdasm893.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\Windasm 8.9
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\Cours Cracks\drapeaunoir1.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\Cours Cracks\mcours2_serial.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\Cours Cracks\mcours4.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\Cours Cracks\PEiD092_detect protect.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_acdsee_2.41.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_assembleur.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_clonecd_5.2.0.0.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_clonecd_5.2.5.1.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_clonedvd_2.5.4.3.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_clonedvd_2.8.4.1.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_cracking.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_cracking_01.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_cracking_02.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_cracking_03.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_cracking_04.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_cracking_05.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_cracking_06.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_cracking_07.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_cracking_08.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_cracking_09.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_cracking_10.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_cracking_11.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_cracking_12.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_cracking_13.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_cracking_14.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_flashget_1.65.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_flashget_1.70.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_ftp_expert_3.61.0.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_ftp_expert_3.70.0.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_gmg_4.0.2.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_photoimpact_8.5.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_pif_sclean_keygen.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_pif_source_C1.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_pif_source_C2.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_pif_startclean.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_powerarchiver_9.20.07.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_powerarchiver_9.25.01.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_readiris_pro_10.02.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_readiris_pro_10.04.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_readiris_pro_10.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_readiris_pro_9.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_telechargements.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_total_commander_6.51.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_ultralingua_4.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_ultralingua_5.0.2.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_ultralingua_5.0.3.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_webcopier_4.2.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_webexpert_6.05.2.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_webexpert_6.05.4.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_winrar_3.40.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_winrar_3.40b5.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_winrar_3.40b6.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_winrar_3.41.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_winrar_3.50.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_winzip_8.1_SR2.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\cours_winzip_9.0_SR1.htm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\afficher_serial_cours2.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\allcode.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\allcode2.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\arrowd.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\arrowu.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\bourrin.jpg
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\chaine.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\chaine2.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\code_cours2.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\crazy.jpg
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\description.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\fenetre_debugger_w32dasm.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\fenetre_dos_cours_5_smeita.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\fenetre_registres.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\find.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\find2.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\get_api_result2_cours2.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\get_api_result_cours2.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\good.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\hexa.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\hexa2.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\home.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\image_source.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\image_source2.jpg
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\incorect.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\incorect2.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\localisation_serial_start_clean.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\local_function.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\lstrcmp_cours2.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\modif.jpg
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\nag1.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\nag2.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\offhedit.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\offset.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\offset2.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\offwhex.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\pifoman.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\propre.jpg
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\rechascii.jpg
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\rechhexa.jpg
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\register.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\sdr.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\search.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\serial_cours2.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\smeita.jpg
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\softview.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\start_clean_interface_keygen.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\start_clean_morceau_routine_serial_1.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\start_clean_morceau_routine_serial_10.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\start_clean_morceau_routine_serial_2.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\start_clean_morceau_routine_serial_3.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\start_clean_morceau_routine_serial_4.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\start_clean_morceau_routine_serial_5.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\start_clean_morceau_routine_serial_6.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\start_clean_morceau_routine_serial_7.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\start_clean_morceau_routine_serial_8.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\start_clean_morceau_routine_serial_9.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\start_clean_register.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\start_clean_register2.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\start_clean_trouver_contenu_registre.png
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\static.jpg
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\Thumbs.db
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\timy.jpg
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\tpc.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\cours_cracking\images\tpc2.gif
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\crack_logiciel de base\Apres.EXE
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\crack_logiciel de base\explication crack.doc
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\crack_logiciel de base\explication crack_ASM.doc
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\crack_logiciel de base\explication crack_temps.doc
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\crack_logiciel de base\hiew 6.04.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\crack_logiciel de base\Windasm v8.9.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\FABRICATION_CRACK_BASIC\explication crack.doc
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\FABRICATION_CRACK_BASIC\explication crack_ASM.doc
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\FABRICATION_CRACK_BASIC\explication crack_temps.doc
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\FABRICATION_CRACK_BASIC\HIEW_604.ZIP
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\FABRICATION_CRACK_BASIC\Windasm 9.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\eXescope_6.30.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\hiew 6.04.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\OllyDbg
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\OllyDbg1.10.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\PEiD092_detect protect.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\peid2
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\Procdump.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\Resource_Hacker.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\res_hacker
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\softIce_4.05xp.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\Stripper 2.11
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\stripper_2.11.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\upx
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\upx072d.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\Windasm
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\Windasm v8.9.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\WinHex_10.2.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\OllyDbg\BOOKMARK.DLL
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\OllyDbg\Cmdline.dll
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\OllyDbg\DBGHELP.DLL
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\OllyDbg\HideDebugger.dll
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\OllyDbg\license.txt
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\OllyDbg\OLLYDBG.EXE
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\OllyDbg\OLLYDBG.HLP
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\OllyDbg\ollydbg.ini
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\OllyDbg\OllyDump.dll
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\OllyDbg\readme.txt
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\OllyDbg\register.txt
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\peid2\external.txt
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\peid2\plugins
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\peid2\pluginsdk
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\peid2\readme.txt
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\peid2\userdb.txt
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\peid2\plugins\GenOEP.dll
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\peid2\plugins\ImpREC.dll
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\peid2\plugins\kanal.dll
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\peid2\plugins\ZDRx.dll
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\peid2\pluginsdk\defs.h
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\peid2\pluginsdk\null.c
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\peid2\pluginsdk\NULL.dll
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\BHRAMA.C
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\BHRAMA.H
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\BHRAMA.TXT
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\BHRAMA~1.H
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\BMAKE
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\CLIENT.ASM
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\CLIENT.DEF
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\CLIENT.EXE
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\CLIENT.MAP
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\CLIENT.OBJ
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\CLIENT.RC
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\CLIENT.RES
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\ENDOFPD.TXT
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\FILE_ID.DIZ
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\HISTORY.TXT
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\ICON1.ICO
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\LICENSE.TXT
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\LOADER.EXE
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\MAIN.C
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\MMAKE
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\PROCDUMP.EXE
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\PROCDUMP.TXT
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\PSAPI.DLL
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\pt21client.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\README.TXT
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\RUNME.COM
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\SCRIPT.INI
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\SCRIPT.TXT
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\TARGET.EXE
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\UNBOX.EXE
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\UNPACK.TXT
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\VSRMPD.VXD
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\VXDBODY.KMD
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\VXDBODY.VXD
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\WIN32.INC
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\procdump\WWW.TXT
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\res_hacker\CoolMon.exe
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\res_hacker\Dialogs.def
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\res_hacker\ReadMe.txt
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\res_hacker\ResHacker.cnt
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\res_hacker\ResHacker.exe
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\res_hacker\ResHacker.hlp
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\res_hacker\RESHACKER.ini
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\res_hacker\Version_History.txt
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp\clavier_fr_softice_xp.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp\DATA.TAG
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp\data1.cab
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp\data1.hdr
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp\installation xp.txt
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp\lang.dat
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp\layout.bin
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp\nticexp.zip
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp\os.dat
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp\serial.txt
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp\Setup.exe
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp\SETUP.INI
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp\setup.ins
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp\setup.lid
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp\_INST32I.EX_
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp\_ISDel.exe
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp\_Setup.dll
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp\_sys1.cab
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp\_sys1.hdr
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp\_user1.cab
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\SoftIce_4.05xp\_user1.hdr
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\Stripper 2.11\Engine.sys
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\Stripper 2.11\readme
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\Stripper 2.11\_stripperX.exe
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\upx\crack.pas
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\upx\EXETOOLS.URL
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\upx\LICENSE
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\upx\NEWS
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\upx\upx.doc
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\upx\upx.exe
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\Windasm\BIDS50F.DLL
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\Windasm\CW3220.DLL
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\Windasm\IMAGEHLP.DLL
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\Windasm\Lancez-moi.exe
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\Windasm\OWL50F.DLL
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\Windasm\PSAPI.DLL
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\Windasm\W32DAPI.LUP
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\Windasm\W32DSM89.EXE
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\logiciels_crack\Windasm\wpjfiles
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\tpc_patch\Bloc-notes.lnk
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\tpc_patch\cracks_termines
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\tpc_patch\fichiers_pas
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\tpc_patch\tpc.exe
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\tpc_patch\tpc.PIF
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\tpc_patch\TPPATCH.EXE
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\tpc_patch\turbo.tpl
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\tpc_patch\cracks_termines\CRACK-~2.EXE
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\tpc_patch\cracks_termines\CRACK-~2.PIF
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\tpc_patch\cracks_termines\cracks_termines.rar
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\tpc_patch\cracks_termines\CRACK_me.EXE
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\tpc_patch\cracks_termines\CRACK_me.PIF
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\tpc_patch\fichiers_pas\Bloc-notes.lnk
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\wdasm893\BIDS50F.DLL
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\wdasm893\CW3220.DLL
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\wdasm893\File_ID.diz
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\wdasm893\IMAGEHLP.DLL
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\wdasm893\INSTALL.TXT
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\wdasm893\OWL50F.DLL
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\wdasm893\PSAPI.DLL
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\wdasm893\shmeitcorp.exe
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\wdasm893\shmeitcorp.nfo
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\wdasm893\W32DAPI.LUP
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\wdasm893\W32DASM8.GID
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\wdasm893\W32DASM8.HLP
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\wdasm893\W32DSM89 - VB.exe
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\Windasm 8.9\BIDS50F.DLL
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\Windasm 8.9\CW3220.DLL
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\Windasm 8.9\IMAGEHLP.DLL
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\Windasm 8.9\Lancez-moi.exe
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\Windasm 8.9\OWL50F.DLL
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\Windasm 8.9\PSAPI.DLL
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\Windasm 8.9\W32DAPI.LUP
C:\Users\VINCENT\Documents\apmb\packcracking_By_MouhcineUnder\packcracking_By_MouhcineUnder\cracking\Windasm 8.9\W32DSM89.EXE
C:\Users\VINCENT\Documents\apmb\Photozoom.Professional.v2.3.2.Multilangages.Incl-Keygen.By Simspel\Keygen
C:\Users\VINCENT\Documents\apmb\Photozoom.Professional.v2.3.2.Multilangages.Incl-Keygen.By Simspel\PhotoZoom Pro 2 Setup.exe
C:\Users\VINCENT\Documents\apmb\Photozoom.Professional.v2.3.2.Multilangages.Incl-Keygen.By Simspel\Keygen\keygen.exe
C:\Users\VINCENT\Documents\Jeux Video\cod4\patch fr\keygenCOD4
C:\Users\VINCENT\Documents\Jeux Video\cod4\patch fr\keygenCOD4\rzr-cod4.exe
C:\Users\VINCENT\Documents\Jeux Video\cod4\patch fr\keygenCOD4\rzr-cod4.nfo
C:\Users\VINCENT\Documents\Jeux Video\Crysis\Crysis-Cracks
C:\Users\VINCENT\Documents\Jeux Video\Crysis\Crysis-Cracks\Crack for WinVista
C:\Users\VINCENT\Documents\Jeux Video\Crysis\Crysis-Cracks\Crack for WinXP
C:\Users\VINCENT\Documents\Jeux Video\Crysis\Crysis-Cracks\Crack for WinVista\Bin32
C:\Users\VINCENT\Documents\Jeux Video\Crysis\Crysis-Cracks\Crack for WinVista\Bin64
C:\Users\VINCENT\Documents\Jeux Video\Crysis\Crysis-Cracks\Crack for WinVista\Bin64\Crysis.exe
C:\Users\VINCENT\Documents\Jeux Video\Crysis\Crysis-Cracks\Crack for WinXP\Crysis.exe
C:\Users\VINCENT\Documents\Jeux Video\Crysis\Crysis-Cracks\Crack for WinXP\WinXp nfo.txt
C:\Users\VINCENT\Documents\Jeux Video\nfs\KeyGen.exe
C:\Users\VINCENT\Documents\logiciel\Diskeeper_Pro_Premier_v13.0\Diskeepe_Pro_Premier_v13.0\Crack
C:\Users\VINCENT\Documents\logiciel\Diskeeper_Pro_Premier_v13.0\Diskeepe_Pro_Premier_v13.0\Crack\again.nfo
C:\Users\VINCENT\Documents\logiciel\Diskeeper_Pro_Premier_v13.0\Diskeepe_Pro_Premier_v13.0\Crack\patch
C:\Users\VINCENT\Documents\logiciel\Diskeeper_Pro_Premier_v13.0\Diskeepe_Pro_Premier_v13.0\Crack\patch\Diskeeper.chm
C:\Users\VINCENT\Documents\logiciel\Diskeeper_Pro_Premier_v13.0\Diskeepe_Pro_Premier_v13.0\Crack\patch\DkTabProvider.dll
C:\Users\VINCENT\Documents\logiciel\Diskeeper_Pro_Premier_v13.0\Diskeepe_Pro_Premier_v13.0\Crack\patch\tab.dat
C:\Users\VINCENT\Documents\logiciel\Diskeeper_Pro_Premier_v13.0\Diskeepe_Pro_Premier_v13.0\Crack\patch\Tab.dll
C:\Users\VINCENT\Documents\logiciel\sy\Systran 6 Crack
C:\Users\VINCENT\Documents\logiciel\sy\Systran 6 Crack\Systran 6 Crack
C:\Users\VINCENT\Documents\logiciel\sy\Systran 6 Crack\Systran 6 Crack\instructions.txt
C:\Users\VINCENT\Documents\logiciel\sy\Systran 6 Crack\Systran 6 Crack\libsyslic1.dll
C:\Users\VINCENT\Documents\logiciel\sy\Systran 6 Crack\Systran 6 Crack\libsyslic1.original.dll
C:\Users\VINCENT\Documents\Mes fichiers re‡us\call of duty\Crack
C:\Users\VINCENT\Documents\Mes fichiers re‡us\call of duty\Crack\CoDWaW.exe
C:\Users\VINCENT\Documents\Mes fichiers re‡us\call of duty\Crack\rzr-c5kg.exe
C:\Users\VINCENT\Documents\Mes fichiers re‡us\call of duty\Crack\rzr-c5kg.rar
C:\Users\VINCENT\Documents\Mes fichiers re‡us\EA Games\Mirrors.Edge.Crackfix-RELOADED
C:\Users\VINCENT\Documents\Mes fichiers re‡us\EA Games\Mirrors.Edge.Crackfix-RELOADED\MirrorsEdge.exe
C:\Users\VINCENT\Documents\Mes fichiers re‡us\EA Games\Mirrors.Edge.Crackfix-RELOADED\reloaded.nfo
C:\Users\VINCENT\Documents\Mes fichiers re‡us\EA Games\Mirrors.Edge.Crackfix-RELOADED\rld-mefx.rar
C:\Users\VINCENT\Documents\Mes fichiers re‡us\EA Games\Mirrors.Edge.Crackfix-RELOADED\rld-mefx.sfv
C:\Users\VINCENT\Documents\Mes fichiers re‡us\EA Games\Mirrors.Edge.Crackfix-RELOADED\Torrent downloaded from Demonoid.com.txt
C:\Users\VINCENT\Documents\My Games\fc1010\Farcry2 1.01Patch\FarCry2.Crack.Razor1911
C:\Users\VINCENT\Documents\My Games\fc1010\Farcry2 1.01Patch\FarCry2.Crack.Razor1911\rzr-fcr2.nfo
C:\Users\VINCENT\Downloads\Downloads\AVS_VC_6.2.3.314\AVS_Video_Converter_6.2.3.314_www.bookviet4a.org\crack_AVSVideoConverter
C:\Users\VINCENT\Downloads\Downloads\AVS_VC_6.2.3.314\AVS_Video_Converter_6.2.3.314_www.bookviet4a.org\crack_AVSVideoConverter\AVSVideoConverter.exe
C:\Users\VINCENT\Downloads\eMule\NVIDIA_PureVideo__1.02-223\keygen.exe
C:\Users\VINCENT\Downloads\eMule\River.Past.-.Video.Cleaner.Pro.v7.7.11.1735\River Past - Video Cleaner Pro v7.7.11.1735\Keygen.exe
C:\Users\VINCENT\Downloads\TU2009\Keygen.exe
C:\Users\VINCENT\Music\Eminem-_Relapse__2009_\Eminem- Relapse [2009]\Crack A Bottle (Feat. Dr. Dre & 50 Cent.mp3

[ UAC => 1 ]

1 - "C:\ToolBar SD\TB_1.txt" - 31/05/2009|22:46 - Option : [1]
2 - "C:\ToolBar SD\TB_2.txt" - 31/05/2009|22:49 - Option : [2]

-----------\\ Fin du rapport a 22:49:18,45

et le nouveau RSIT

Logfile of random's system information tool 1.06 (written by random/random)
Run by VINCENT at 2009-05-31 22:51:34
Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
System drive C: has 321 GB (67%) free of 477 GB
Total RAM: 2046 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:51:38, on 31/05/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\MagicTune Premium\GammaTray.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\SEC\Natural Color Pro\NCProTray.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Secunia\PSI\psi.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Windows\system32\conime.exe
C:\Program Files\Windows NT\Accessories\WORDPAD.EXE
C:\Users\VINCENT\Desktop\RSIT.exe
C:\Program Files\hijackthis\VINCENT.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: Votre PC prend la parole - {CEDDA62B-5FBE-4AB2-AE2E-5E069F555555} - C:\Program Files\Micro Application\Votre PC prend la parole\IE\MediaDICOIEToolbarSonLocal.dll
O3 - Toolbar: SYSTRAN Toolbar - {95daa571-4def-4a6d-97d8-98a346672a24} - mscoree.dll (file missing)
O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [XboxStat] "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun
O4 - HKLM\..\Run: [WindowsLivePhone] C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe /AutoRun
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKCU\..\Run: [VeohPlugin] "C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WindowsLivePhone] "C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe" /AutoRun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: GammaTray.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: NCProTray.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Consulter les dictionnaires (SYSTRAN) - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/lookup.js
O8 - Extra context menu item: Traduire (SYSTRAN) - res://C:\Program Files\SYSTRAN\6\\GUIres.dll/translate.js
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O10 - Broken Internet access because of LSP provider 'c:\program files\bonjour\mdnsnsp.dll' missing
O13 - Gopher Prefix:
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O20 - AppInit_DLLs: ,C:\PROGRA~1\KASPER~1\KASPER~2\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~2\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~2\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~2\kloehk.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate1c986d95a14bab) (gupdate1c986d95a14bab) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\LBTServ.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: MagicTuneEngine - Unknown owner - C:\Program Files\MagicTune Premium\MagicTuneEngine.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: SiSoftware Deployment Agent Service (SandraAgentSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2009\RpcAgentSrv.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: @%Syste

1- Ton log RSIT est incomplet,

2- Supprimes tes cracks, car source de virus, pour plus d'info, reporte-toi a cet article: Le danger des cracks

C:\Users\VINCENT\Music\Eminem-_Relapse__2009_\Eminem- Relapse [2009]\Crack A Bottle (Feat. Dr. Dre & 50 Cent.mp3

Moi aussi j'aime 50Cent, mais pas en crack :)

*******
Télécharge MalwareBytes' Anti-Malware

▶ Tu l'installe; le programme va se mettre a jour automatiquement

▶ Une fois a jour, le programme va se lancer; clic sur l'onglet paramètre, et coche la case : "Arrêter internet explorer pendant la suppression"

▶ Clique maintenant sur l'onglet recherche et coche la case : "exécuter un examen complet".

▶ Puis clic sur "rechercher".

▶ Laisse le scanner le PC...

▶ Si des éléments on été trouvés --> clic sur "afficher les résultats", puis sur supprimer la sélection. afin de détruire les éléments infectés.

▶ Si il t´es demandé de redémarrer --> clic sur "YES".

▶ A la fin un rapport va s´ouvrir; sauvegarde le de manière a le retrouver en vu de le poster sur le forum.

▶ Copie et colle le rapport S.T.P.

** Note: les rapport sont aussi rangé dans l'onglet Rapport/Log

Poste un nouveau log RSIT, et n'oublie pas de supprimer tes cracks!!!!!!

@+