¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Pre_Scan | 3.0103 | g3n-h@ckm@n & Saachaa ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ~ ¤¤¤¤¤ XP | Vista | 7 | 8 - 32/64 bits ¤¤¤¤¤ ~ Update on 03/01/2013 | 23.50 by g3n-h@ckm@n ~ Evolution : http://gen-hackman.forum-pro.fr/t64-historique-de-l-outil ~ Pre_Script Infos : http://gen-hackman.forum-pro.fr/t89-les-switchs ~ Pre_scan Feedbacks : http://gen-hackman.forum-pro.fr/t93-feedback-pre_scan#505 ~ [C4rbone (Administrator)] - [PC-G4M3-C4RBONE] ~ SID = S-1-5-21-3206400207-2192252165-2289142726-1000 ~ System : Windows 7 Home Premium (32 bits) HomePremium Service Pack 1 ~ TotalValidations : 5 ~ ProcessorNameString : Pentium(R) Dual-Core CPU E5500 @ 2.80GHz ~ Identifier : x86 Family 6 Model 23 Stepping 10 ~ Mémory RAM = Total (KB) : 3144950 | Used (%) : 16 | Free (KB) : 2621120 ~ Pagefile = Total (KB) : 6288150 | Free (KB) : 5811760 ~ Virtual = Total (KB) : 2097020 | Free (KB) : 1966000 ¤¤¤¤¤¤¤¤¤¤ | Boot's scripts ¤¤¤¤¤¤¤¤¤¤ | Drives c:\ -> [Fixed] | [OS] | Total : 448580 Mo | Free : 36850 Mo -> NTFS d:\ -> [Fixed] | [HP_RECOVERY] | Total : 13590 Mo | Free : 1630 Mo -> NTFS e:\ -> [CDROM] | [Disk1] | Total : 650 Mo | Free : 0 Mo -> CDFS h:\ -> [Removable] | [] | Total : 7680 Mo | Free : 4620 Mo -> FAT32 k:\ -> [Fixed] | [Expansion Drive] | Total : 953870 Mo | Free : 514860 Mo -> NTFS l:\ -> [Removable] | [JOSSE] | Total : 3690 Mo | Free : 50 Mo -> FAT32 ¤¤¤¤¤¤¤¤¤¤ | Windows Updates Last(s) détection(s) : 2012-12-08 15:17:45 Last(s) download(s) : 2012-12-07 18:16:30 Last(s) installation(s) : 2012-12-07 18:17:12 ¤¤¤¤¤¤¤¤¤¤ | Sessions ~ C:\Windows\system32\config\systemprofile ~ C:\Windows\ServiceProfiles\LocalService ~ C:\Windows\ServiceProfiles\NetworkService ~ C:\Users\C4rbone ~ C:\Users\UpdatusUser ~ C:\Users\Invité New restorepoint created 22:42:06 ¤¤¤¤¤¤¤¤¤¤ | stopped Processes (1472) -- explorer.exe (1920) -- sppsvc.exe ¤¤¤¤¤¤¤¤¤¤ | Running processes Boot : Normal ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Pre_Scan | 3.0103 | g3n-h@ckm@n & Saachaa ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ~ ¤¤¤¤¤ XP | Vista | 7 | 8 - 32/64 bits ¤¤¤¤¤ ~ Update on 03/01/2013 | 23.50 by g3n-h@ckm@n ~ Evolution : http://gen-hackman.forum-pro.fr/t64-historique-de-l-outil ~ Pre_Script Infos : http://gen-hackman.forum-pro.fr/t89-les-switchs ~ Pre_scan Feedbacks : http://gen-hackman.forum-pro.fr/t93-feedback-pre_scan#505 ~ [C4rbone (Administrator)] - [PC-G4M3-C4RBONE] ~ SID = S-1-5-21-3206400207-2192252165-2289142726-1000 ~ System : Windows 7 Home Premium (32 bits) HomePremium Service Pack 1 ~ TotalValidations : 5 ~ ProcessorNameString : Pentium(R) Dual-Core CPU E5500 @ 2.80GHz ~ Identifier : x86 Family 6 Model 23 Stepping 10 ~ Mémory RAM = Total (KB) : 3144950 | Used (%) : 11 | Free (KB) : 2782170 ~ Pagefile = Total (KB) : 6288150 | Free (KB) : 5954090 ~ Virtual = Total (KB) : 2097020 | Free (KB) : 1976780 ¤¤¤¤¤¤¤¤¤¤ | Boot's scripts ¤¤¤¤¤¤¤¤¤¤ | Drives c:\ -> [Fixed] | [OS] | Total : 448580 Mo | Free : 36860 Mo -> NTFS d:\ -> [Fixed] | [HP_RECOVERY] | Total : 13590 Mo | Free : 1630 Mo -> NTFS e:\ -> [CDROM] | [Disk1] | Total : 650 Mo | Free : 0 Mo -> CDFS h:\ -> [Removable] | [] | Total : 7680 Mo | Free : 4620 Mo -> FAT32 k:\ -> [Fixed] | [Expansion Drive] | Total : 953870 Mo | Free : 514860 Mo -> NTFS l:\ -> [Removable] | [JOSSE] | Total : 3690 Mo | Free : 50 Mo -> FAT32 ¤¤¤¤¤¤¤¤¤¤ | Windows Updates Last(s) détection(s) : 2012-12-08 15:17:45 Last(s) download(s) : 2012-12-07 18:16:30 Last(s) installation(s) : 2012-12-07 18:17:12 ¤¤¤¤¤¤¤¤¤¤ | Sessions ~ C:\Windows\system32\config\systemprofile ~ C:\Windows\ServiceProfiles\LocalService ~ C:\Windows\ServiceProfiles\NetworkService ~ C:\Users\C4rbone ~ C:\Users\UpdatusUser ~ C:\Users\Invité New restorepoint created 23:03:04 ¤¤¤¤¤¤¤¤¤¤ | stopped Processes (868) -- explorer.exe (904) -- ctfmon.exe ¤¤¤¤¤¤¤¤¤¤ | Running processes Boot : Safemode ¤¤¤¤¤¤¤¤¤¤ | Winlogon User Repaird : [HKU\S-1-5-21-3206400207-2192252165-2289142726-1000 | Winlogon]|[Shell] : expstart.exe -> () ¤¤¤¤¤¤¤¤¤¤ | Winlogon Machine Repaired : [HKLM | Winlogon]|[PowerDownAfterShutdown] : 0 -> 1 ¤¤¤¤¤¤¤¤¤¤ | Associations : OK ! ¤ Navigators settings associations are OK ! ¤¤¤¤¤¤¤¤¤¤ | Registry : OK ! ¤¤¤¤¤¤¤¤¤¤ | SafeBoot | Control | Repair Safeboot Keys are O.K Alternate shell is OK ! ¤ Safeboot Minimal Subkeys : O.K ! ¤ Safeboot Network Subkeys : O.K ! ¤¤¤¤¤¤¤¤¤¤ | IFEO : OK ! ¤¤¤¤¤¤¤¤¤¤ | Mountpoints2 Deleted : HKU\S-1-5-21-3206400207-2192252165-2289142726-1000 | {15026189-4f1e-11e1-a748-d485649e8ade} | AutoRun\command] : J:\setup.exe Deleted : HKU\S-1-5-21-3206400207-2192252165-2289142726-1000 | {4cabca34-3f6f-11e1-9487-d485649e8ade} | AutoRun\command] : "K:\WD SmartWare.exe" autoplay=true Deleted : HKU\S-1-5-21-3206400207-2192252165-2289142726-1000 | {c0753b9e-2b4a-11e1-af2a-806e6f6e6963} | AutoRun\command] : E:\EE2AutoRun.exe Deleted : HKU\S-1-5-21-3206400207-2192252165-2289142726-1000 | {f53fb44f-39da-11e1-9579-d485649e8ade} | AutoRun\command] : J:\Setup.exe Contenu de E:\Autorun.inf : [autorun] OPEN=EE2AutoRun.exe icon=EE2.ico Contenu de L:\Autorun.inf : [autorun] open=NumeriDesk.exe icon=milliweb.ico label=NumeriDesk action=start NumeriDesk.exe ¤¤¤¤¤¤¤¤¤¤ | Windows [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\system.ini\Boot]|[Shell] : USR:Microsoft\Windows NT\CurrentVersion\Winlogon Winsrv : OK ! [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[AppInit_DLLS] : [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[LoadAppInit_DLLs] : 0 [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]|[Programs] : com exe bat pif cmd ¤¤¤¤¤¤¤¤¤¤ | Security Center ¤¤¤¤¤¤¤¤¤¤ | Services Corrections Repaired : [HKLM | Services\Compbatt] : 3 -> 0 Repaired : [HKLM | Services\Power] : 4 -> 2 Repaired : [HKLM | Services\NVSvc] : 4 -> 2 Repaired : [HKLM | Services\nsi] : 4 -> 2 Repaired : [HKLM | Services\NLASvc] : 4 -> 2 Repaired : [HKLM | Services\MPSsvc] : 4 -> 2 Repaired : [HKLM | Services\MMCSS] : 4 -> 2 Repaired : [HKLM | Services\Iphlpsvc] : 4 -> 2 Repaired : [HKLM | Services\IKEEXT] : 4 -> 2 Repaired : [HKLM | Services\lmhosts] : 4 -> 2 Repaired : [HKLM | Services\LanmanWorkstation] : 4 -> 2 Repaired : [HKLM | Services\LanmanServer] : 4 -> 2 Repaired : [HKLM | Services\agp440] : 3 -> 2 Repaired : [HKLM | Services\AudioEndpointBuilder] : 4 -> 2 Repaired : [HKLM | Services\Audiosrv] : 4 -> 2 Repaired : [HKLM | Services\BFE] : 4 -> 2 Repaired : [HKLM | Services\CryptSvc] : 3 -> 2 Repaired : [HKLM | Services\EapHost] : 4 -> 2 Repaired : [HKLM | Services\Wlansvc] : 4 -> 2 Repaired : [HKLM | Services\SharedAccess] : 4 -> 2 Repaired : [HKLM | Services\windefend] : 4 -> 2 Repaired : [HKLM | Services\winmgmt] : 4 -> 2 Repaired : [HKLM | Services\wuauserv] : 4 -> 2 Repaired : [HKLM | Services\wudfsvc] : 4 -> 2 Repaired : [HKLM | Services\WerSvc] : 4 -> 2 Repaired : [HKLM | Services\wscsvc] : 4 -> 2 Repaired : [HKLM | Services\Wwansvc] : 4 -> 3 ¤¤¤¤¤¤¤¤¤¤ | Internet Explorer Repaired : [HKU\S-1-5-21-3206400207-2192252165-2289142726-1000 | Internet Explorer\Main]|[Start Page] : http://www.google.fr/ -> http://www.google.com/ Repaired : [HKU\S-1-5-21-3206400207-2192252165-2289142726-1000 | Internet Explorer\Main]|[Search Page] : http://go.microsoft.com/fwlink/?LinkId=54896 -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch Repaired : [HKLM | Internet Explorer\Search]|[SearchAssistant] : -> http://www.google.com/ie Repaired : [HKLM | Internet Explorer\AboutURLs]|[Tabs] : -> res://ieframe.dll/tabswelcome.htm ¤ Repaired : [HKU\S-1-5-21-3206400207-2192252165-2289142726-1000 | Windows\CurrentVersion\Internet settings]|[WarnonZoneCrossing] : 0 -> 1 ¤¤¤¤¤¤¤¤¤¤ | Hosts C:\Windows\System32\Drivers\etc\hosts : Replaced ¤¤¤¤¤¤¤¤¤¤ | Files | Folders | Registry Moved to quarantine successfully : C:\$Recycle.bin\S-1-5-21-3206400207-2192252165-2289142726-1000\$RFUZJ7V\unins000.dat Moved to quarantine successfully : C:\$Recycle.bin\S-1-5-21-3206400207-2192252165-2289142726-1000\$RFUZJ7V\DesktopUploader.exe Moved to quarantine successfully : C:\$Recycle.bin\S-1-5-21-3206400207-2192252165-2289142726-1000\$RFUZJ7V\unins000.exe Moved to quarantine successfully : C:\$Recycle.bin\S-1-5-21-3206400207-2192252165-2289142726-1000\$RFUZJ7V\libeay32.dll Moved to quarantine successfully : C:\$Recycle.bin\S-1-5-21-3206400207-2192252165-2289142726-1000\$RFUZJ7V\QtCore4.dll Moved to quarantine successfully : C:\$Recycle.bin\S-1-5-21-3206400207-2192252165-2289142726-1000\$RFUZJ7V\QtGui4.dll Moved to quarantine successfully : C:\$Recycle.bin\S-1-5-21-3206400207-2192252165-2289142726-1000\$RFUZJ7V\QtNetwork4.dll Moved to quarantine successfully : C:\$Recycle.bin\S-1-5-21-3206400207-2192252165-2289142726-1000\$RFUZJ7V\ssleay32.dll Moved to quarantine successfully : C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP Impossible to move : C:\Windows\msdownld.tmp Moved to quarantine successfully : C:\Windows\War3Unin.pif Moved to quarantine successfully : C:\Windows\War3Unin.dat Impossible to move : C:\Users\C4rbone\AppData\Local\Temp\~DF7919E079269D53D1.TMP Moved to quarantine successfully : C:\Users\C4rbone\AppData\Local\Temp\CRX_75DAF8CB7768\manifest.json Moved to quarantine successfully : C:\Users\C4rbone\Downloads\01net_PC_Inspector_File_Recovery.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\296.10-desktop-win7-winvista-32bit-international-whql.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\32bit_Vista_Win7_R268.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\360desktop_360desktop_0.8.5.2084_32_bits_anglais_269730.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\6.06_nvidia_system_tools.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\7z920.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\assassins_creed_1.02.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\avast_free_antivirus_setup.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\ava_us_downloader (1).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\ava_us_downloader (2).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\ava_us_downloader.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Azert1a trainers 1.7.413.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\battlelog-web-plugins-1.116.0-retail-prod.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\battlelog-web-plugins-1.118.0-retail-prod.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\battlelog-web-plugins-1.122.0-retail-prod.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\bbkeyswin.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\bdcamsetup.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\BLR_Installer_OBv2.exe.torrent Moved to quarantine successfully : C:\Users\C4rbone\Downloads\brushdirectory.com-0514.zip Moved to quarantine successfully : C:\Users\C4rbone\Downloads\CAE_Downloader.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Caldera.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\ccsetup325.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\CFSetup291.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\chromeinstall-7u6 (1).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\chromeinstall-7u6.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\ChromeSetup.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\CraftManiak (1).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\CraftManiak.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\CSIW_Setup_29_Jan_2011.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\CSO_Installer_V049.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\daemon-tools-lite_daemon_tools_lite_4.45.2_francais_10729.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\dosbox_dosbox_0.74_anglais_11037.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\dotNetFx40_Full_setup.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Dropbox 1.2.52.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\DxtorySetup2.0.115.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\DxtorySetup2.0.117 (1).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\DxtorySetup2.0.117.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\dxwebsetup.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\FacebookVideoCallSetup_v1.2.205.0.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\fences_public.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\fomm_0_10_2-640.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Fraps + Crack By Rangodu80.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Gamemagiz.com_External Crosshair v3 by master131.rar Moved to quarantine successfully : C:\Users\C4rbone\Downloads\gb3-setup.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\gb3.5-beta-setup.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\GROLauncherEMEA.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\IE9-special-bing.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\IJJI_REACTOR_INST_EN (1).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\IJJI_REACTOR_INST_EN (2).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\IJJI_REACTOR_INST_EN.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\iLividSetupV1 (1).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\iLividSetupV1 (2).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\iLividSetupV1 (3).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\iLividSetupV1 (4).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\iLividSetupV1 (5).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\iLividSetupV1.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\ImageSplitter.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Imperator_Driver_v1.02.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\installer_bad_piggies_1_0_0_French.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\installer_battlefield_bad_company_2.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\installer_bluestacks_0_7_7_813_beta_French (1).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\installer_bluestacks_0_7_7_813_beta_French.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\installer_cobalt_v115_alpha_French.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\installer_supertux_supertux-editor-0_3_0-mono-set_French.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\InstallWoW.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\iTunesSetup.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\jdk-7u4-ea-bin-b11-windows-i586-09_feb_2012.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\jdk-7u8-ea-bin-b04-windows-i586-22_aug_2012.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\LeagueofLegends (1).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\LeagueofLegends.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\LOLReplay-0.8.0.1.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\LOTROProgressive_1.342.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\MagicLauncher_0.9.7 (1).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\MagicLauncher_0.9.7.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\MagicLauncher_0.9.8.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\MagicLauncher_0.9.9.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Maj_AntidoteRX_v7_v8.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Mastalol's Combat Arms Injector.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\mbam-setup-1.65.1.1000.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\mcnbs_setup.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\mcpatcher-2.3.0_01(1).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\mcpatcher-2.3.0_01.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\mcpatcher-2.3.1.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\mcpatcher-2.3.3_02.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\mcpatcher-2.3.6_02.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\mcpatcher-2.3.7_02.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\mcpatcher-2.4.1_01.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Minecraft (1).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Minecraft (2).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Minecraft Maps.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Minecraft.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Minecraft_Server (1).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Minecraft_Server (2).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Minecraft_Server.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Mon IP Locale.bat Moved to quarantine successfully : C:\Users\C4rbone\Downloads\mp3tagv253setup.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\mseinstall.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\mumble-1.2.3a_plus_MumbleComSkin.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\MW3 Multi-Hack Tazzy Opz 1.5.387.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\MW3LvlHack.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\myCraft.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\namebench-1.3.1-Windows.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\nd.class Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Nexus Mod Manager-0.13.1.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\npp.5.9.8.Installer.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\OOo_3.3.0_Win_x86_install-wJRE_fr.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Opera_1162_int_Setup.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\OriginThinSetup.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\pbsvc_blr.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\pci_filerecovery (1).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\pci_filerecovery.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\QuickTimeInstaller.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\repulse_us_downloader.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\RocketDock-v1.3.5 (1).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\RocketDock-v1.3.5.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Runes_of_Magic_5_0_0_2535_full.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Saitek_Cyborg_V3_Pad_SD6_32_Drivers_pfw (1).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Saitek_Cyborg_V3_Pad_SD6_32_Drivers_pfw (2).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Saitek_Cyborg_V3_Pad_SD6_32_Drivers_pfw (3).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Saitek_Cyborg_V3_Pad_SD6_32_Drivers_pfw.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\SD7_0_23_0_32Bit_Software (1).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\SD7_0_23_0_32Bit_Software.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\setup (1).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Setup (2).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\setup (3).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\setup (4).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\setup (5).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\setup (6).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\setup.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\setup_110.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\setup_av_free.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\SkypeSetup(1).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\SkypeSetup(2).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\SkypeSetup.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Smart_Technology_7_0_2_7_32bit.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\SoftonicDownloader_pour_cursorfx-ex-cursorxp.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\SoftonicDownloader_pour_graphcalc.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\SoftonicDownloader_pour_jdownloader.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\SoftonicDownloader_pour_minecraft-skinedit.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\SpybotSD2.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Spykey.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Strike_7_keyboard_SD7_0_23_0_32Bit_Driver.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\ST_SD7_0_13_22_32Bit_Software.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\TCPOptimizer.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\TeamSpeak3-Client-win32-3.0.6.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\TeamViewer_Setup_fr.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\the-rad-video-tools_the_rad_video_tools_1.99n_anglais_11111.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\TI-Nspire_CAS_Student_Software-3.2.0.1219.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\TunaticSetup.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\UnityWebPlayer.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\UploadingDesktop.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\utorrent.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\utvideo-11.1.1-win.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\vcredist_x86.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\vegaspro11.0.520_32bit.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Vengeance2000SW_1_7_051512.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\vlc-1.1.11-win32.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\WindowBlinds7_public.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Windows8-ConsumerPreview-setup.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\winrar_4_refnexway733353(1).exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\winrar_4_refnexway733353.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\wmpfirefoxplugin.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\WoW-4.0.0-WOW-enUS-Installer.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\WoW-4.0.0-WOW-frFR-Installer.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\wubi.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\XnView-win.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\xsplit_installer_v1.1.1210.3101.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\zaSetupWeb_102_078_000.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Connectify_Hotspot-BitTorrent-d\ConnectifyHotspotInstaller_Bittorrent_370.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Edgeworld-BitTorrent-g\Edgeworld.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Skyrim\The Elder Scrolls V Skyrim Update 2 RELOADED\SkyrimLauncher.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Skyrim\The Elder Scrolls V Skyrim Update 2 RELOADED\steam_api.dll Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Skyrim\The Elder Scrolls V Skyrim Update 2 RELOADED\TESV.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Skyrim\The Elder Scrolls V Skyrim Update 2 RELOADED\Data\Strings\Update_English.DLSTRINGS Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Skyrim\The Elder Scrolls V Skyrim Update 3 RELOADED\The.Elder.Scrolls.V.Skyrim.Update.3-RELOADED.nzb Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Skyrim\The Elder Scrolls V Skyrim Update 4 RELOADED (Diff Group)\SkyrimLauncher.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Skyrim\The Elder Scrolls V Skyrim Update 4 RELOADED (Diff Group)\steam_api.dll Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Skyrim\The Elder Scrolls V Skyrim Update 4 RELOADED (Diff Group)\TESV.exe Moved to quarantine successfully : C:\Users\C4rbone\Downloads\Skyrim\The Elder Scrolls V Skyrim Update 4 RELOADED (Diff Group)\Data\Strings\Update_English.DLSTRINGS Moved to quarantine successfully : C:\Users\C4rbone\Downloads\world\level.dat Moved to quarantine successfully : C:\Users\C4rbone\Downloads\world\level.dat_old Moved to quarantine successfully : C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\Fichiers Internet temporaires\Content.IE5\index.dat Moved to quarantine successfully : C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\History\History.IE5\index.dat Moved to quarantine successfully : C:\Users\C4rbone\AppData\Roaming\C4rbonelog.dat Moved to quarantine successfully : C:\Users\C4rbone\AppData\Roaming\cacaoweb\npdfile.dat Moved to quarantine successfully : C:\Users\C4rbone\AppData\Roaming\cacaoweb\storage.db Moved to quarantine successfully : C:\Users\C4rbone\AppData\Roaming\ImperatorProfile0.dat Moved to quarantine successfully : C:\Users\C4rbone\AppData\Roaming\Might & Magic Heroes VI\ShaderCache4121151189.bin Moved to quarantine successfully : C:\Users\C4rbone\AppData\Roaming\Minecraft Map Viewer\MinecraftMapViewer.exe Moved to quarantine successfully : C:\Users\C4rbone\AppData\Roaming\PnkBstrK.sys Impossible to move : C:\Users\C4rbone\AppData\Roaming\uploading.com Moved to quarantine successfully : C:\Users\C4rbone\AppData\Roaming\WTablet\Pen_Tablet.dat Moved to quarantine successfully : C:\Users\C4rbone\AppData\Roaming\adobe\com.adobe.132.ALL.registration Moved to quarantine successfully : C:\Users\C4rbone\AppData\Local\Flash Video Downloader 2.5\Flash Video Downloader 2.5.exe Moved to quarantine successfully : C:\Users\C4rbone\AppData\Local\Flash Video Downloader 2.5\uninstall.vbs Moved to quarantine successfully : C:\Users\C4rbone\AppData\Local\Google Translator\Google Translator.exe Moved to quarantine successfully : C:\Users\C4rbone\AppData\Local\Google Translator\uninstall.vbs Moved to quarantine successfully : C:\Users\C4rbone\AppData\Local\Ubisoft Game Launcher\userdata.dat Moved to quarantine successfully : C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1\GEARDIFx.exe Moved to quarantine successfully : C:\ProgramData\DAEMON Tools Pro\dtpro.dat Moved to quarantine successfully : C:\ProgramData\FLEXnet\adobe_00080000_tsf.data Moved to quarantine successfully : C:\ProgramData\PopCap Games\popcinfot.dat Moved to quarantine successfully : C:\ProgramData\regid.1986-12.com.adobe\regid.1986-12.com.adobe_MasterCollection-CS5.5-Win-GM-MUL.swidtag Moved to quarantine successfully : C:\ProgramData\regid.1986-12.com.adobe\regid.1986-12.com.adobe_MasterCollection-CS5.5-Win-GM.swidtag Moved to quarantine successfully : C:\ProgramData\regid.1986-12.com.adobe\regid.1986-12.com.adobe_Photoshop-CS5.5-Win-GM.swidtag Moved to quarantine successfully : C:\ProgramData\regid.1986-12.com.adobe\regid.1986-12.com.adobe_Photoshop-CS6-Win-GM.swidtag Moved to quarantine successfully : C:\ProgramData\regid.1986-12.com.adobe\regid.1986-12.com.adobe_PremiereProSuite-CS5-Win-GM.swidtag Impossible to move : C:\ProgramData\regid.1986-12.com.adobe Moved to quarantine successfully : C:\ProgramData\Spybot - Search & Destroy\ClientCount.bin Moved to quarantine successfully : C:\ProgramData\{E568B6A0-8E02-46C8-8954-00ECD7CD3554}\CursorFX_setup.dat Moved to quarantine successfully : C:\ProgramData\{E568B6A0-8E02-46C8-8954-00ECD7CD3554}\CursorFX_setup.exe Moved to quarantine successfully : C:\ProgramData\{E568B6A0-8E02-46C8-8954-00ECD7CD3554}\instance.dat Moved to quarantine successfully : C:\ProgramData\{E568B6A0-8E02-46C8-8954-00ECD7CD3554}\mia.lib Moved to quarantine successfully : C:\ProgramData\~0\FencesInstaller.exe Moved to quarantine successfully : C:\ProgramData\~0\mia.lib Moved to quarantine successfully : C:\Windows\System32\Config\systemprofile\AppData\Roaming\WTablet\Pen_Tablet.dat Moved to quarantine successfully : C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3206400207-2192252165-2289142726-1000Core.job Moved to quarantine successfully : C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3206400207-2192252165-2289142726-1000UA.job Deleted : [HKLM | MSConfig\startupreg\Akamai NetSession Interface]|[command] : "C:\Users\C4rbone\AppData\Local\Akamai\netsession_win.exe" Moved to quarantine successfully : C:\Users\C4rbone\AppData\Local\Akamai\netsession_win.exe Deleted : [HKLM | MSConfig\startupreg\Spykey]|[command] : C:\Users\C4rbone\Downloads\Spykey.exe 00:29:14 Moved to quarantine successfully : C:\Users\C4rbone\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\chrome.exe - Raccourci.lnk Moved to quarantine successfully : C:\Users\C4rbone\AppData\Local\fusioncache.dat Moved to quarantine successfully : |D| - C:\Users\C4rbone\AppData\Roaming\Install Impossible to move : C:\ProgramData\~0 Moved to quarantine successfully : |D| - C:\Users\C4rbone\AppData\LocalLow\Sun\Java\Deployment\cache\6.0 Prefetch -> Emptied ¤¤¤¤¤¤¤¤¤¤ | quarantined at reboot Moved to quarantine successfully at Reboot : C:\Windows\msdownld.tmp Moved to quarantine successfully at Reboot : C:\Users\C4rbone\AppData\Local\Temp\~DF7919E079269D53D1.TMP Moved to quarantine successfully at Reboot : C:\Users\C4rbone\AppData\Roaming\uploading.com Moved to quarantine successfully at Reboot : C:\ProgramData\regid.1986-12.com.adobe Moved to quarantine successfully at Reboot : C:\ProgramData\~0 ¤¤¤¤¤ 01:04:54 ¤¤¤¤¤¤¤¤¤¤ | Listing Partition(s) Disk: 0 Size=477G Pos MBRndx Type/Name Size Active Hide Start Sector Sectors --- ------ ---------- ---- ------ ---- ------------ ------------ 0 0 07-NTFS 100M Yes No 2,048 204,800 1 1 07-NTFS 449G No No 206,848 918,686,896 2 3 05-FAT16x 15G No No 918,894,590 30,048,258 3 2 07-NTFS 14G No No 948,942,848 27,828,224 ¤¤¤¤¤¤¤¤¤¤ | MBR Control MBR code signature : 9B 18 53 25