A voir également:
- Je n'arrive plus à ouvrir IE et mozilla
- Comment ouvrir un fichier epub ? - Guide
- Ouvrir fichier .bin - Guide
- Downloadhelper mozilla - Télécharger - Outils pour navigateurs
- Ouvrir fichier .dat - Guide
- Comment ouvrir un fichier docx ? - Guide
70 réponses
salut :
ca l'aide vachement ca......:(
scolo3 :
Télécharge OTL de OLDTimer
et enregistre le sur ton Bureau.
Double clic sur OTL.exe pour le lancer.
Coche les 2 cases Lop et Purity
Coche la case devant scan all users
règle-le sur "60 Days"
Clic sur Run Scan.
A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).
Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\OTL.txt)
NE LE POSTE PAS SUR LE FORUM
Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/
Clique sur Parcourir et cherche le fichier ci-dessus.
Clique sur Ouvrir.
Clique sur "Cliquez ici pour déposer le fichier".
Un lien de cette forme :
http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt
est ajouté dans la page.
Copie ce lien dans ta réponse.
Tu feras la meme chose avec le "Extra.txt" s'il t'est demandé
ca l'aide vachement ca......:(
scolo3 :
Télécharge OTL de OLDTimer
et enregistre le sur ton Bureau.
Double clic sur OTL.exe pour le lancer.
Coche les 2 cases Lop et Purity
Coche la case devant scan all users
règle-le sur "60 Days"
Clic sur Run Scan.
A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).
Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\OTL.txt)
NE LE POSTE PAS SUR LE FORUM
Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/
Clique sur Parcourir et cherche le fichier ci-dessus.
Clique sur Ouvrir.
Clique sur "Cliquez ici pour déposer le fichier".
Un lien de cette forme :
http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt
est ajouté dans la page.
Copie ce lien dans ta réponse.
Tu feras la meme chose avec le "Extra.txt" s'il t'est demandé
fais une restauration système puis fais une analyse complète de ton pc. Installe google chrome beaucoup plus fiable : https://www.google.com/chrome/?hl=fr
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
^^ et bien , pas mal infecté :)
♦ Télécharge Ad-remover ( de C_XX ) sur ton bureau :
♦ Déconnecte toi et ferme toutes applications en cours !
♦ Double clique sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut .
♦ Double-clique sur le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .
♦ Au menu principal choisis l'option "L" et tape sur [entrée] .
♦ Laisse travailler l'outil et ne touche à rien ...
♦ Poste le rapport qui apparait à la fin , sur le forum ...
( Le rapport est sauvegardé aussi sous C:\Ad-report.log )
( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )
♦ Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
ensuite :
########## | XP _ Instal & recherche | ########
• Télécharge et install UsbFix par Chiquitine29
(!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectées sans les ouvrir
• Double clic sur le raccourci UsbFix présent sur ton bureau .
• Au menu principal choisis l'option " F " pour français et tape sur [entrée] .
• Au second menu Choisis l'option " 1 " (recherche) et tape sur [entrée]
• Laisse travailler l'outil.
• Ensuite post le rapport UsbFix.txt qui apparaitra.
• Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )
( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )
• Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
• Tuto : http://pagesperso-orange.fr/NosTools/usbfix.html
♦ Télécharge Ad-remover ( de C_XX ) sur ton bureau :
♦ Déconnecte toi et ferme toutes applications en cours !
♦ Double clique sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut .
♦ Double-clique sur le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .
♦ Au menu principal choisis l'option "L" et tape sur [entrée] .
♦ Laisse travailler l'outil et ne touche à rien ...
♦ Poste le rapport qui apparait à la fin , sur le forum ...
( Le rapport est sauvegardé aussi sous C:\Ad-report.log )
( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )
♦ Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
ensuite :
########## | XP _ Instal & recherche | ########
• Télécharge et install UsbFix par Chiquitine29
(!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectées sans les ouvrir
• Double clic sur le raccourci UsbFix présent sur ton bureau .
• Au menu principal choisis l'option " F " pour français et tape sur [entrée] .
• Au second menu Choisis l'option " 1 " (recherche) et tape sur [entrée]
• Laisse travailler l'outil.
• Ensuite post le rapport UsbFix.txt qui apparaitra.
• Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )
( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )
• Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
• Tuto : http://pagesperso-orange.fr/NosTools/usbfix.html
.
======= RAPPORT D'AD-REMOVER 1.1.4.5_O | UNIQUEMENT XP/VISTA/SEVEN =======
.
Mit à jour par C_XX le 24/06/2009 à 7:10 PM
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 16:30:16, 01/08/2009 | Mode Normal | Option: CLEAN
Exécuté de: C:\Program Files\Ad-remover\
Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Nom du PC: owen | Utilisateur actuel: philippe
.
Administrateur: Administrateur
N'est pas administrateur: ASPNET
Administrateur: cindy
N'est pas administrateur: HelpAssistant *Desactive*
N'est pas administrateur: Invité *Desactive*
Administrateur: philippe
N'est pas administrateur: SUPPORT_388945a0 *Desactive*
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
.
HKCR\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239}
HKCR\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKCR\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}
HKCR\CLSID\{a4730ebe-43a6-443e-9776-36915d323ad3}
HKCR\EoRezoBHO.EoBho
HKCR\EoRezoBHO.EoBho.1
HKCR\FunWebProducts.BrowserOverlayBarButton
HKCR\FunWebProducts.BrowserOverlayBarButton.1
HKCR\FunWebProducts.BrowserOverlayEmbed
HKCR\FunWebProducts.BrowserOverlayEmbed.1
HKCR\FunWebProducts.DataControl
HKCR\FunWebProducts.DataControl.1
HKCR\FunWebProducts.HistoryKillerScheduler
HKCR\FunWebProducts.HistoryKillerScheduler.1
HKCR\FunWebProducts.HistorySwatterControlBar
HKCR\FunWebProducts.HistorySwatterControlBar.1
HKCR\FunWebProducts.HTMLMenu
HKCR\FunWebProducts.HTMLMenu.1
HKCR\FunWebProducts.HTMLMenu.2
HKCR\FunWebProducts.IECookiesManager
HKCR\FunWebProducts.IECookiesManager.1
HKCR\FunWebProducts.KillerObjManager
HKCR\FunWebProducts.KillerObjManager.1
HKCR\FunWebProducts.PopSwatterBarButton
HKCR\FunWebProducts.PopSwatterBarButton.1
HKCR\FunWebProducts.PopSwatterSettingsControl
HKCR\FunWebProducts.PopSwatterSettingsControl.1
HKCR\FunWebProducts.ShellViewControl
HKCR\FunWebProducts.ShellViewControl.1
HKCR\Interface\{1093995a-ba37-41d2-836e-091067c4ad17}
HKCR\Interface\{120927bf-1700-43bc-810f-fab92549b390}
HKCR\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}
HKCR\Interface\{1f52a5fa-a705-4415-b975-88503b291728}
HKCR\Interface\{247a115f-06c2-4fb3-967d-2d62d3cf4f0a}
HKCR\Interface\{2e3537fc-cf2f-4f56-af54-5a6a3dd375cc}
HKCR\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc}
HKCR\Interface\{3e1656ed-f60e-4597-b6aa-b6a58e171495}
HKCR\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}
HKCR\Interface\{6e74766c-4d93-4cc0-96d1-47b8e07ff9ca}
HKCR\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff}
HKCR\Interface\{90449521-d834-4703-bb4e-d3aa44042ff8}
HKCR\Interface\{991AAC62-B100-47CE-8B75-253965244f69}
HKCR\Interface\{a626cdbd-3d13-4f78-b819-440a28d7e8fc}
HKCR\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
HKCR\Interface\{bbabdc90-f3d5-4801-863a-ee6ae529862d}
HKCR\Interface\{d6ff3684-ad3b-48eb-bbb4-b9e6c5a355c1}
HKCR\Interface\{de38c398-b328-4f4c-a3ad-1b5e4ed93477}
HKCR\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25e}
HKCR\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25f}
HKCR\Interface\{eb9e5c1c-b1f9-4c2b-be8a-27d6446fdaf8}
HKCR\MyWebSearch.ChatSessionPlugin
HKCR\MyWebSearch.ChatSessionPlugin.1
HKCR\MyWebSearch.HTMLPanel
HKCR\MyWebSearch.HTMLPanel.1
HKCR\MyWebSearch.OutlookAddin
HKCR\MyWebSearch.OutlookAddin.1
HKCR\MyWebSearch.PseudoTransparentPlugin
HKCR\MyWebSearch.PseudoTransparentPlugin.1
HKCR\MyWebSearchToolBar.SettingsPlugin
HKCR\MyWebSearchToolBar.SettingsPlugin.1
HKCR\MyWebSearchToolBar.ToolbarPlugin
HKCR\MyWebSearchToolBar.ToolbarPlugin.1
HKCR\screensavercontrol.screensaverinstaller
HKCR\screensavercontrol.screensaverinstaller.1
HKCR\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA}
HKCR\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}
HKCR\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}
HKCR\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}
HKCR\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}
HKCR\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C}
HKCR\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}
HKCR\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
HKCR\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}
HKCR\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}
HKCR\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612}
HKCR\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}
HKCU\Software\EoRezo
HKCU\Software\Fun Web Products
HKCU\Software\FunWebProducts
HKCU\Software\Grand Virtual
HKCU\Software\ItsLabel
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9FF05104-B030-46FC-94B8-81276E4E27DF}
HKCU\Software\MyWebSearch
HKLM\SOFTWARE\Classes\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}
HKLM\SOFTWARE\Classes\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}
HKLM\SOFTWARE\Classes\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
HKLM\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
HKLM\SOFTWARE\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
HKLM\SOFTWARE\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}
HKLM\SOFTWARE\Classes\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC}
HKLM\SOFTWARE\Classes\CLSID\{25560540-9571-4D7B-9389-0F166788785A}
HKLM\SOFTWARE\Classes\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
HKLM\SOFTWARE\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}
HKLM\SOFTWARE\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}
HKLM\SOFTWARE\Classes\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
HKLM\SOFTWARE\Classes\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}
HKLM\SOFTWARE\Classes\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}
HKLM\SOFTWARE\Classes\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}
HKLM\SOFTWARE\Classes\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983}
HKLM\SOFTWARE\Classes\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}
HKLM\SOFTWARE\Classes\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}
HKLM\SOFTWARE\Classes\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB}
HKLM\SOFTWARE\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}
HKLM\SOFTWARE\Classes\CLSID\{A9571378-68A1-443d-B082-284F960C6D17}
HKLM\SOFTWARE\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}
HKLM\SOFTWARE\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}
HKLM\SOFTWARE\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}
HKLM\SOFTWARE\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}
HKLM\SOFTWARE\Classes\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}
HKLM\SOFTWARE\Classes\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}
HKLM\SOFTWARE\Classes\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA}
HKLM\SOFTWARE\Classes\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}
HKLM\SOFTWARE\Classes\Interface\{3E720451-B472-4954-B7AA-33069EB53906}
HKLM\SOFTWARE\Classes\Interface\{3E720453-B472-4954-B7AA-33069EB53906}
HKLM\SOFTWARE\Classes\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C}
HKLM\SOFTWARE\Classes\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}
HKLM\SOFTWARE\Classes\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A}
HKLM\SOFTWARE\Classes\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}
HKLM\SOFTWARE\Classes\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}
HKLM\SOFTWARE\Classes\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}
HKLM\SOFTWARE\Classes\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}
HKLM\SOFTWARE\Classes\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612}
HKLM\SOFTWARE\Classes\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612}
HKLM\SOFTWARE\Classes\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978}
HKLM\Software\EoRezo
HKLM\Software\FocusInteractive
HKLM\Software\Fun Web Products
HKLM\Software\FunWebProducts
HKLM\Software\ItsLabel
HKLM\Software\Microsoft\Code Store Database\Distribution Units\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}
HKLM\Software\Microsoft\Multimedia\WMPlayer\Schemes\f3pss
HKLM\Software\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin
HKLM\Software\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin
HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyWebSearch bar Uninstall
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4D7B-9389-0F166788785A}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2EFF3CF7-99C1-4C29-BC2B-68E057E22340}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98D9753D-D73B-42D5-8C85-4469CDA897AB}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9FF05104-B030-46FC-94B8-81276E4E27DF}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4FBD-94E5-5B2A9C7C1612}
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall
HKLM\Software\MyWebSearch
HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\\FunWebProducts
HKLM\Software\Microsoft\Windows Media\Wmsdk\Sources\\F3PopularScreenSavers
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\MyWebSearch Email Plugin
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\My Web Search Bar Search Scope Monitor
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
.
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\cache
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\cmhost.cyp
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\ConfMedia.cyp
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\db
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\eoDesktop
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\eoStats
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\host.cyp
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\user.cyp
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\db\cat.cyp
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\eoDesktop\config.xml
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\eoDesktop\eoDesktop.html
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\eoDesktop\userConfig.xml
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\eoStats\eoStats.txt
C:\DOCUME~1\philippe\APPLIC~1\EoRezo
C:\DOCUME~1\philippe\APPLIC~1\ItsLabel\ItsTV
C:\DOCUME~1\philippe\APPLIC~1\ItsLabel\ItsTV\itsTV.xml
C:\DOCUME~1\philippe\APPLIC~1\ItsLabel
C:\Program Files\EoRezo\EoAdv
C:\Program Files\EoRezo\EoAdv\eoAdv.url
C:\Program Files\EoRezo\EoAdv\EoRezoBho.old
C:\Program Files\EoRezo
C:\Program Files\FunWebProducts\ScreenSaver
C:\Program Files\FunWebProducts\Shared
C:\Program Files\FunWebProducts\ScreenSaver\Images
C:\Program Files\FunWebProducts\ScreenSaver\Images\0025BAFF.urr
C:\Program Files\FunWebProducts\Shared\Cache
C:\Program Files\FunWebProducts\Shared\Cache\AvatarSmallBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\CursorManiaBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\FunBuddyIconBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\MailStampBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\MyFunCardsIMBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\MyStationeryBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html
C:\Program Files\FunWebProducts
/!\ NON SUPPRIMÉ: C:\Program Files\MyWebSearch\bar
C:\Program Files\MyWebSearch\SrchAstt
/!\ NON SUPPRIMÉ: C:\Program Files\MyWebSearch\bar\1.bin
C:\Program Files\MyWebSearch\bar\Avatar
C:\Program Files\MyWebSearch\bar\Cache
C:\Program Files\MyWebSearch\bar\Game
C:\Program Files\MyWebSearch\bar\History
C:\Program Files\MyWebSearch\bar\icons
C:\Program Files\MyWebSearch\bar\Message
C:\Program Files\MyWebSearch\bar\MSNBackgrounds
C:\Program Files\MyWebSearch\bar\Notifier
C:\Program Files\MyWebSearch\bar\Settings
C:\Program Files\MyWebSearch\bar\1.bin\F3BKGERR.JPG
C:\Program Files\MyWebSearch\bar\1.bin\F3BROVLY.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3CJPEG.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3DTACTL.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3HISTSW.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3HTTPCT.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3IMSTUB.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR
C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3RESTUB.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3SCHMON.EXE
C:\Program Files\MyWebSearch\bar\1.bin\F3SCRCTR.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3SHLLVW.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3SPACER.WMV
C:\Program Files\MyWebSearch\bar\1.bin\F3WALLPP.DAT
C:\Program Files\MyWebSearch\bar\1.bin\F3WPHOOK.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.JAR
C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.MANIFEST
C:\Program Files\MyWebSearch\bar\1.bin\M3HTML.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3IDLE.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3IMPIPE.EXE
C:\Program Files\MyWebSearch\bar\1.bin\M3MSG.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.JAR
C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.MANIFEST
C:\Program Files\MyWebSearch\bar\1.bin\M3OUTLCN.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3PLUGIN.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3SKIN.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3SKPLAY.EXE
C:\Program Files\MyWebSearch\bar\1.bin\M3SLSRCH.EXE
C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL
/!\ NON SUPPRIMÉ: C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL
C:\Program Files\MyWebSearch\bar\1.bin\NPMYWEBS.DLL
C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S
C:\Program Files\MyWebSearch\bar\Cache\0003CDF0
C:\Program Files\MyWebSearch\bar\Cache\002597F6
C:\Program Files\MyWebSearch\bar\Cache\0025998C.bin
C:\Program Files\MyWebSearch\bar\Cache\00259B71.bin
C:\Program Files\MyWebSearch\bar\Cache\00259CE8.bin
C:\Program Files\MyWebSearch\bar\Cache\00259F39.bin
C:\Program Files\MyWebSearch\bar\Cache\004EAEF1.bin
C:\Program Files\MyWebSearch\bar\Cache\004EB0D6.bin
C:\Program Files\MyWebSearch\bar\Cache\004EB24D.bin
C:\Program Files\MyWebSearch\bar\Cache\004EB3A4.bin
C:\Program Files\MyWebSearch\bar\Cache\004EB4FC.bin
C:\Program Files\MyWebSearch\bar\Cache\00CA50F8.bin
C:\Program Files\MyWebSearch\bar\Cache\00CA53F5.bin
C:\Program Files\MyWebSearch\bar\Cache\00CA5637.bin
C:\Program Files\MyWebSearch\bar\Cache\00CA57AE
C:\Program Files\MyWebSearch\bar\Cache\files.ini
C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S
C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S
C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S
C:\Program Files\MyWebSearch\bar\History\search2
C:\Program Files\MyWebSearch\bar\icons\CM.ICO
C:\Program Files\MyWebSearch\bar\icons\MFC.ICO
C:\Program Files\MyWebSearch\bar\icons\PSS.ICO
C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO
C:\Program Files\MyWebSearch\bar\icons\WB.ICO
C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO
C:\Program Files\MyWebSearch\bar\Message\COMMON
C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S
C:\Program Files\MyWebSearch\bar\Message\COMMON\ask_logo.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\autoup.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\autoup.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\center.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\index.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\mid_dots.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\mws_logo.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\protect.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\shocked.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\stop.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\systray.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\systrayp.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\tp_grad.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\warn.gif
C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S
C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S
C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S
C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S
C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S
C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S
C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S
C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S
C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S
C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S
C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S
C:\Program Files\MyWebSearch\bar\Settings\prevcfg2.htm
C:\Program Files\MyWebSearch\bar\Settings\setting2.htm
C:\Program Files\MyWebSearch\bar\Settings\setting2.htm.bak
C:\Program Files\MyWebSearch\bar\Settings\settings.dat
C:\Program Files\MyWebSearch\bar\Settings\settings.dat.bak
C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat
C:\Program Files\MyWebSearch\SrchAstt\1.bin
C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
/!\ NON SUPPRIMÉ: C:\Program Files\MyWebSearch
C:\DOCUME~1\philippe\APPLIC~1\Mozilla\Firefox\Profiles\kceuqc7r.default\searchplugins\ask.xml
C:\WINDOWS\Downloaded Program Files\f3initialsetup1.0.0.15-3.inf
C:\Program Files\Mozilla Firefox\Plugins\NPMyWebS.dll
C:\WINDOWS\System32\f3PSSavr.scr
C:\Program Files\MSN Messenger\riched20.dll
C:\Program Files\Internet Explorer\msimg32.dll
C:\WINDOWS\Prefetch\MWSOEMON.EXE-194861D2.pf
C:\Documents and Settings\cindy\Cookies\cindy@eorezo[2].txt
C:\Documents and Settings\cindy\Cookies\cindy@scache0.eorezo[1].txt
C:\Documents and Settings\cindy\Cookies\cindy@scache3.eorezo[2].txt
(!) -- Fichiers temporaires supprimés.
.
============== Scan additionnel ==============
.
* Mozilla FireFox Version 3.0.8 *
Nom du profil: kceuqc7r.default (philippe)
.
(Prefs.js) user_pref("browser.search.defaultenginename", "Ask");
(Prefs.js) user_pref("browser.search.selectedEngine", "Ask");
(Prefs.js) user_pref("browser.search.defaulturl", "hxxp://search.live.com/results.aspx?FORM=IEFM1&q=");
(Prefs.js) user_pref("browser.startup.homepage", "hxxp://go.microsoft.com/fwlink/?LinkId=69157");
(Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.8");
.
.
* Internet Explorer Version 7.0.5730.11 *
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
============== Suspect (Cracks, Serials ... ) ==============
.
C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\1209776195jtun_hbpatch07.x00.full.zip
.
===================================
.
21093 Octet(s) - C:\Ad-Report-CLEAN.log
.
1489 Fichier(s) - C:\DOCUME~1\philippe\LOCALS~1\Temp
267 Fichier(s) - C:\WINDOWS\Temp
.
18 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
25 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE
.
Fin à: 16:50:33 | 01/08/2009
.
============== E.O.F ==============
.
======= RAPPORT D'AD-REMOVER 1.1.4.5_O | UNIQUEMENT XP/VISTA/SEVEN =======
.
Mit à jour par C_XX le 24/06/2009 à 7:10 PM
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 16:30:16, 01/08/2009 | Mode Normal | Option: CLEAN
Exécuté de: C:\Program Files\Ad-remover\
Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Nom du PC: owen | Utilisateur actuel: philippe
.
Administrateur: Administrateur
N'est pas administrateur: ASPNET
Administrateur: cindy
N'est pas administrateur: HelpAssistant *Desactive*
N'est pas administrateur: Invité *Desactive*
Administrateur: philippe
N'est pas administrateur: SUPPORT_388945a0 *Desactive*
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
.
HKCR\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239}
HKCR\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKCR\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}
HKCR\CLSID\{a4730ebe-43a6-443e-9776-36915d323ad3}
HKCR\EoRezoBHO.EoBho
HKCR\EoRezoBHO.EoBho.1
HKCR\FunWebProducts.BrowserOverlayBarButton
HKCR\FunWebProducts.BrowserOverlayBarButton.1
HKCR\FunWebProducts.BrowserOverlayEmbed
HKCR\FunWebProducts.BrowserOverlayEmbed.1
HKCR\FunWebProducts.DataControl
HKCR\FunWebProducts.DataControl.1
HKCR\FunWebProducts.HistoryKillerScheduler
HKCR\FunWebProducts.HistoryKillerScheduler.1
HKCR\FunWebProducts.HistorySwatterControlBar
HKCR\FunWebProducts.HistorySwatterControlBar.1
HKCR\FunWebProducts.HTMLMenu
HKCR\FunWebProducts.HTMLMenu.1
HKCR\FunWebProducts.HTMLMenu.2
HKCR\FunWebProducts.IECookiesManager
HKCR\FunWebProducts.IECookiesManager.1
HKCR\FunWebProducts.KillerObjManager
HKCR\FunWebProducts.KillerObjManager.1
HKCR\FunWebProducts.PopSwatterBarButton
HKCR\FunWebProducts.PopSwatterBarButton.1
HKCR\FunWebProducts.PopSwatterSettingsControl
HKCR\FunWebProducts.PopSwatterSettingsControl.1
HKCR\FunWebProducts.ShellViewControl
HKCR\FunWebProducts.ShellViewControl.1
HKCR\Interface\{1093995a-ba37-41d2-836e-091067c4ad17}
HKCR\Interface\{120927bf-1700-43bc-810f-fab92549b390}
HKCR\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}
HKCR\Interface\{1f52a5fa-a705-4415-b975-88503b291728}
HKCR\Interface\{247a115f-06c2-4fb3-967d-2d62d3cf4f0a}
HKCR\Interface\{2e3537fc-cf2f-4f56-af54-5a6a3dd375cc}
HKCR\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc}
HKCR\Interface\{3e1656ed-f60e-4597-b6aa-b6a58e171495}
HKCR\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}
HKCR\Interface\{6e74766c-4d93-4cc0-96d1-47b8e07ff9ca}
HKCR\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff}
HKCR\Interface\{90449521-d834-4703-bb4e-d3aa44042ff8}
HKCR\Interface\{991AAC62-B100-47CE-8B75-253965244f69}
HKCR\Interface\{a626cdbd-3d13-4f78-b819-440a28d7e8fc}
HKCR\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
HKCR\Interface\{bbabdc90-f3d5-4801-863a-ee6ae529862d}
HKCR\Interface\{d6ff3684-ad3b-48eb-bbb4-b9e6c5a355c1}
HKCR\Interface\{de38c398-b328-4f4c-a3ad-1b5e4ed93477}
HKCR\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25e}
HKCR\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25f}
HKCR\Interface\{eb9e5c1c-b1f9-4c2b-be8a-27d6446fdaf8}
HKCR\MyWebSearch.ChatSessionPlugin
HKCR\MyWebSearch.ChatSessionPlugin.1
HKCR\MyWebSearch.HTMLPanel
HKCR\MyWebSearch.HTMLPanel.1
HKCR\MyWebSearch.OutlookAddin
HKCR\MyWebSearch.OutlookAddin.1
HKCR\MyWebSearch.PseudoTransparentPlugin
HKCR\MyWebSearch.PseudoTransparentPlugin.1
HKCR\MyWebSearchToolBar.SettingsPlugin
HKCR\MyWebSearchToolBar.SettingsPlugin.1
HKCR\MyWebSearchToolBar.ToolbarPlugin
HKCR\MyWebSearchToolBar.ToolbarPlugin.1
HKCR\screensavercontrol.screensaverinstaller
HKCR\screensavercontrol.screensaverinstaller.1
HKCR\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA}
HKCR\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}
HKCR\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}
HKCR\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}
HKCR\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}
HKCR\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C}
HKCR\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}
HKCR\Typelib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
HKCR\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}
HKCR\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}
HKCR\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612}
HKCR\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}
HKCU\Software\EoRezo
HKCU\Software\Fun Web Products
HKCU\Software\FunWebProducts
HKCU\Software\Grand Virtual
HKCU\Software\ItsLabel
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9FF05104-B030-46FC-94B8-81276E4E27DF}
HKCU\Software\MyWebSearch
HKLM\SOFTWARE\Classes\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}
HKLM\SOFTWARE\Classes\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}
HKLM\SOFTWARE\Classes\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
HKLM\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
HKLM\SOFTWARE\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
HKLM\SOFTWARE\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}
HKLM\SOFTWARE\Classes\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC}
HKLM\SOFTWARE\Classes\CLSID\{25560540-9571-4D7B-9389-0F166788785A}
HKLM\SOFTWARE\Classes\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
HKLM\SOFTWARE\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}
HKLM\SOFTWARE\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}
HKLM\SOFTWARE\Classes\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
HKLM\SOFTWARE\Classes\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}
HKLM\SOFTWARE\Classes\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}
HKLM\SOFTWARE\Classes\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}
HKLM\SOFTWARE\Classes\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983}
HKLM\SOFTWARE\Classes\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}
HKLM\SOFTWARE\Classes\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}
HKLM\SOFTWARE\Classes\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB}
HKLM\SOFTWARE\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}
HKLM\SOFTWARE\Classes\CLSID\{A9571378-68A1-443d-B082-284F960C6D17}
HKLM\SOFTWARE\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}
HKLM\SOFTWARE\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}
HKLM\SOFTWARE\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}
HKLM\SOFTWARE\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}
HKLM\SOFTWARE\Classes\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}
HKLM\SOFTWARE\Classes\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}
HKLM\SOFTWARE\Classes\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA}
HKLM\SOFTWARE\Classes\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}
HKLM\SOFTWARE\Classes\Interface\{3E720451-B472-4954-B7AA-33069EB53906}
HKLM\SOFTWARE\Classes\Interface\{3E720453-B472-4954-B7AA-33069EB53906}
HKLM\SOFTWARE\Classes\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C}
HKLM\SOFTWARE\Classes\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}
HKLM\SOFTWARE\Classes\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A}
HKLM\SOFTWARE\Classes\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}
HKLM\SOFTWARE\Classes\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}
HKLM\SOFTWARE\Classes\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}
HKLM\SOFTWARE\Classes\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}
HKLM\SOFTWARE\Classes\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612}
HKLM\SOFTWARE\Classes\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612}
HKLM\SOFTWARE\Classes\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978}
HKLM\Software\EoRezo
HKLM\Software\FocusInteractive
HKLM\Software\Fun Web Products
HKLM\Software\FunWebProducts
HKLM\Software\ItsLabel
HKLM\Software\Microsoft\Code Store Database\Distribution Units\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0}
HKLM\Software\Microsoft\Multimedia\WMPlayer\Schemes\f3pss
HKLM\Software\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin
HKLM\Software\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin
HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyWebSearch bar Uninstall
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4D7B-9389-0F166788785A}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2EFF3CF7-99C1-4C29-BC2B-68E057E22340}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98D9753D-D73B-42D5-8C85-4469CDA897AB}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9FF05104-B030-46FC-94B8-81276E4E27DF}
HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4FBD-94E5-5B2A9C7C1612}
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall
HKLM\Software\MyWebSearch
HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\\FunWebProducts
HKLM\Software\Microsoft\Windows Media\Wmsdk\Sources\\F3PopularScreenSavers
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\MyWebSearch Email Plugin
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\My Web Search Bar Search Scope Monitor
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
.
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\cache
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\cmhost.cyp
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\ConfMedia.cyp
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\db
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\eoDesktop
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\eoStats
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\host.cyp
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\user.cyp
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\db\cat.cyp
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\eoDesktop\config.xml
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\eoDesktop\eoDesktop.html
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\eoDesktop\userConfig.xml
C:\DOCUME~1\philippe\APPLIC~1\EoRezo\eoStats\eoStats.txt
C:\DOCUME~1\philippe\APPLIC~1\EoRezo
C:\DOCUME~1\philippe\APPLIC~1\ItsLabel\ItsTV
C:\DOCUME~1\philippe\APPLIC~1\ItsLabel\ItsTV\itsTV.xml
C:\DOCUME~1\philippe\APPLIC~1\ItsLabel
C:\Program Files\EoRezo\EoAdv
C:\Program Files\EoRezo\EoAdv\eoAdv.url
C:\Program Files\EoRezo\EoAdv\EoRezoBho.old
C:\Program Files\EoRezo
C:\Program Files\FunWebProducts\ScreenSaver
C:\Program Files\FunWebProducts\Shared
C:\Program Files\FunWebProducts\ScreenSaver\Images
C:\Program Files\FunWebProducts\ScreenSaver\Images\0025BAFF.urr
C:\Program Files\FunWebProducts\Shared\Cache
C:\Program Files\FunWebProducts\Shared\Cache\AvatarSmallBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\CursorManiaBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\FunBuddyIconBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\MailStampBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\MyFunCardsIMBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\MyStationeryBtn.html
C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html
C:\Program Files\FunWebProducts
/!\ NON SUPPRIMÉ: C:\Program Files\MyWebSearch\bar
C:\Program Files\MyWebSearch\SrchAstt
/!\ NON SUPPRIMÉ: C:\Program Files\MyWebSearch\bar\1.bin
C:\Program Files\MyWebSearch\bar\Avatar
C:\Program Files\MyWebSearch\bar\Cache
C:\Program Files\MyWebSearch\bar\Game
C:\Program Files\MyWebSearch\bar\History
C:\Program Files\MyWebSearch\bar\icons
C:\Program Files\MyWebSearch\bar\Message
C:\Program Files\MyWebSearch\bar\MSNBackgrounds
C:\Program Files\MyWebSearch\bar\Notifier
C:\Program Files\MyWebSearch\bar\Settings
C:\Program Files\MyWebSearch\bar\1.bin\F3BKGERR.JPG
C:\Program Files\MyWebSearch\bar\1.bin\F3BROVLY.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3CJPEG.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3DTACTL.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3HISTSW.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3HTTPCT.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3IMSTUB.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR
C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3RESTUB.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3SCHMON.EXE
C:\Program Files\MyWebSearch\bar\1.bin\F3SCRCTR.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3SHLLVW.DLL
C:\Program Files\MyWebSearch\bar\1.bin\F3SPACER.WMV
C:\Program Files\MyWebSearch\bar\1.bin\F3WALLPP.DAT
C:\Program Files\MyWebSearch\bar\1.bin\F3WPHOOK.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.JAR
C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.MANIFEST
C:\Program Files\MyWebSearch\bar\1.bin\M3HTML.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3IDLE.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3IMPIPE.EXE
C:\Program Files\MyWebSearch\bar\1.bin\M3MSG.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.JAR
C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.MANIFEST
C:\Program Files\MyWebSearch\bar\1.bin\M3OUTLCN.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3PLUGIN.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3SKIN.DLL
C:\Program Files\MyWebSearch\bar\1.bin\M3SKPLAY.EXE
C:\Program Files\MyWebSearch\bar\1.bin\M3SLSRCH.EXE
C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL
/!\ NON SUPPRIMÉ: C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL
C:\Program Files\MyWebSearch\bar\1.bin\NPMYWEBS.DLL
C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S
C:\Program Files\MyWebSearch\bar\Cache\0003CDF0
C:\Program Files\MyWebSearch\bar\Cache\002597F6
C:\Program Files\MyWebSearch\bar\Cache\0025998C.bin
C:\Program Files\MyWebSearch\bar\Cache\00259B71.bin
C:\Program Files\MyWebSearch\bar\Cache\00259CE8.bin
C:\Program Files\MyWebSearch\bar\Cache\00259F39.bin
C:\Program Files\MyWebSearch\bar\Cache\004EAEF1.bin
C:\Program Files\MyWebSearch\bar\Cache\004EB0D6.bin
C:\Program Files\MyWebSearch\bar\Cache\004EB24D.bin
C:\Program Files\MyWebSearch\bar\Cache\004EB3A4.bin
C:\Program Files\MyWebSearch\bar\Cache\004EB4FC.bin
C:\Program Files\MyWebSearch\bar\Cache\00CA50F8.bin
C:\Program Files\MyWebSearch\bar\Cache\00CA53F5.bin
C:\Program Files\MyWebSearch\bar\Cache\00CA5637.bin
C:\Program Files\MyWebSearch\bar\Cache\00CA57AE
C:\Program Files\MyWebSearch\bar\Cache\files.ini
C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S
C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S
C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S
C:\Program Files\MyWebSearch\bar\History\search2
C:\Program Files\MyWebSearch\bar\icons\CM.ICO
C:\Program Files\MyWebSearch\bar\icons\MFC.ICO
C:\Program Files\MyWebSearch\bar\icons\PSS.ICO
C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO
C:\Program Files\MyWebSearch\bar\icons\WB.ICO
C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO
C:\Program Files\MyWebSearch\bar\Message\COMMON
C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S
C:\Program Files\MyWebSearch\bar\Message\COMMON\ask_logo.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\autoup.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\autoup.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\center.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\index.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\mid_dots.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\mws_logo.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\protect.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\shocked.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\stop.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\systray.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\systrayp.htm
C:\Program Files\MyWebSearch\bar\Message\COMMON\tp_grad.gif
C:\Program Files\MyWebSearch\bar\Message\COMMON\warn.gif
C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S
C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S
C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S
C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S
C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S
C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S
C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S
C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S
C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S
C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S
C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S
C:\Program Files\MyWebSearch\bar\Settings\prevcfg2.htm
C:\Program Files\MyWebSearch\bar\Settings\setting2.htm
C:\Program Files\MyWebSearch\bar\Settings\setting2.htm.bak
C:\Program Files\MyWebSearch\bar\Settings\settings.dat
C:\Program Files\MyWebSearch\bar\Settings\settings.dat.bak
C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat
C:\Program Files\MyWebSearch\SrchAstt\1.bin
C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
/!\ NON SUPPRIMÉ: C:\Program Files\MyWebSearch
C:\DOCUME~1\philippe\APPLIC~1\Mozilla\Firefox\Profiles\kceuqc7r.default\searchplugins\ask.xml
C:\WINDOWS\Downloaded Program Files\f3initialsetup1.0.0.15-3.inf
C:\Program Files\Mozilla Firefox\Plugins\NPMyWebS.dll
C:\WINDOWS\System32\f3PSSavr.scr
C:\Program Files\MSN Messenger\riched20.dll
C:\Program Files\Internet Explorer\msimg32.dll
C:\WINDOWS\Prefetch\MWSOEMON.EXE-194861D2.pf
C:\Documents and Settings\cindy\Cookies\cindy@eorezo[2].txt
C:\Documents and Settings\cindy\Cookies\cindy@scache0.eorezo[1].txt
C:\Documents and Settings\cindy\Cookies\cindy@scache3.eorezo[2].txt
(!) -- Fichiers temporaires supprimés.
.
============== Scan additionnel ==============
.
* Mozilla FireFox Version 3.0.8 *
Nom du profil: kceuqc7r.default (philippe)
.
(Prefs.js) user_pref("browser.search.defaultenginename", "Ask");
(Prefs.js) user_pref("browser.search.selectedEngine", "Ask");
(Prefs.js) user_pref("browser.search.defaulturl", "hxxp://search.live.com/results.aspx?FORM=IEFM1&q=");
(Prefs.js) user_pref("browser.startup.homepage", "hxxp://go.microsoft.com/fwlink/?LinkId=69157");
(Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.8");
.
.
* Internet Explorer Version 7.0.5730.11 *
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
Tabs: res://ieframe.dll/tabswelcome.htm
============== Suspect (Cracks, Serials ... ) ==============
.
C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\Downloads\1209776195jtun_hbpatch07.x00.full.zip
.
===================================
.
21093 Octet(s) - C:\Ad-Report-CLEAN.log
.
1489 Fichier(s) - C:\DOCUME~1\philippe\LOCALS~1\Temp
267 Fichier(s) - C:\WINDOWS\Temp
.
18 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
25 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE
.
Fin à: 16:50:33 | 01/08/2009
.
============== E.O.F ==============
.
############################## | UsbFix V6.012 |
User : philippe (Administrateurs) # owen
Update on 01/08/09 by Chiquitine29 & C_XX
Start at: 18:00:15 | 01/08/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
AMD Sempron(tm) Processor 3000+
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 7.0.5730.11
Windows Firewall Status : Disabled
AV : Norton Internet Security Online 2007 [ Enabled | Updated ]
FW : Norton Internet Security Online[ Enabled ]2007
A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local # 180,29 Go (57,77 Go free) [HDD] # NTFS
D:\ -> Disque CD-ROM
E:\ -> Disque fixe local # 465,76 Go (57,6 Go free) [sauvegarde] # NTFS
F:\ -> Disque amovible
G:\ -> Disque amovible
H:\ -> Disque amovible
I:\ -> Disque amovible
K:\ -> Disque amovible # 1,91 Go (271,38 Mo free) # FAT
############################## | Processus actifs |
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\Sony Corporation\Picture Package\Picture Package Applications\Residence.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\Philips\Philips SPC220NC Webcam\TrayMin220.exe
C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Safari\Safari.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
################## | Fichiers # Dossiers infectieux |
################## | Other |
################## | Registre # Clés Run infectieuses |
Présent ! HKLM\software\microsoft\security center "AntiVirusDisableNotify" ( 0x1 )
Présent ! HKLM\software\microsoft\security center "FirewallDisableNotify" ( 0x1 )
################## | Registre # Mountpoints2 |
HKCU\..\..\Explorer\MountPoints2\{888fbb53-ddab-11dd-9617-00038a000015}
Shell\AutoRun\command =J:\EmDesk.exe
Shell\EmDesk\command =J:\EmDesk.exe
HKCU\..\..\Explorer\MountPoints2\{9bb468ea-4381-11dc-930d-00038a000015}
Shell\Auto\command =AdobeR.exe e
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
HKCU\..\..\Explorer\MountPoints2\{f16f1616-2761-11de-969a-00038a000015}
Shell\Auto\command =AdobeR.exe e
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
################## | Cracks / Keygens / Serials |
################## | ! Fin du rapport # UsbFix V6.012 ! |
User : philippe (Administrateurs) # owen
Update on 01/08/09 by Chiquitine29 & C_XX
Start at: 18:00:15 | 01/08/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
AMD Sempron(tm) Processor 3000+
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 7.0.5730.11
Windows Firewall Status : Disabled
AV : Norton Internet Security Online 2007 [ Enabled | Updated ]
FW : Norton Internet Security Online[ Enabled ]2007
A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local # 180,29 Go (57,77 Go free) [HDD] # NTFS
D:\ -> Disque CD-ROM
E:\ -> Disque fixe local # 465,76 Go (57,6 Go free) [sauvegarde] # NTFS
F:\ -> Disque amovible
G:\ -> Disque amovible
H:\ -> Disque amovible
I:\ -> Disque amovible
K:\ -> Disque amovible # 1,91 Go (271,38 Mo free) # FAT
############################## | Processus actifs |
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\Sony Corporation\Picture Package\Picture Package Applications\Residence.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\Philips\Philips SPC220NC Webcam\TrayMin220.exe
C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Safari\Safari.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
################## | Fichiers # Dossiers infectieux |
################## | Other |
################## | Registre # Clés Run infectieuses |
Présent ! HKLM\software\microsoft\security center "AntiVirusDisableNotify" ( 0x1 )
Présent ! HKLM\software\microsoft\security center "FirewallDisableNotify" ( 0x1 )
################## | Registre # Mountpoints2 |
HKCU\..\..\Explorer\MountPoints2\{888fbb53-ddab-11dd-9617-00038a000015}
Shell\AutoRun\command =J:\EmDesk.exe
Shell\EmDesk\command =J:\EmDesk.exe
HKCU\..\..\Explorer\MountPoints2\{9bb468ea-4381-11dc-930d-00038a000015}
Shell\Auto\command =AdobeR.exe e
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
HKCU\..\..\Explorer\MountPoints2\{f16f1616-2761-11de-969a-00038a000015}
Shell\Auto\command =AdobeR.exe e
Shell\AutoRun\command =C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
################## | Cracks / Keygens / Serials |
################## | ! Fin du rapport # UsbFix V6.012 ! |
########### | XP _ Suppression | ########
(!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectés sans les ouvrir
• Double clic (clic droit "en tant qu'administrateur" pour Vista)sur le raccourci UsbFix présent sur ton bureau
• Au menu principal choisis l'option " F " pour français et tape sur [entrée] .
• Au second menu Choisis l'option " 2 " ( Suppression ) et tape sur [entrée]
• Ton bureau disparaitra et le pc redémarrera .
• Au redémarrage , UsbFix scannera ton pc , laisse travailler l'outil.
• Ensuite post le rapport UsbFix.txt qui apparaitra avec le bureau .
• Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )
( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )
(!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectés sans les ouvrir
• Double clic (clic droit "en tant qu'administrateur" pour Vista)sur le raccourci UsbFix présent sur ton bureau
• Au menu principal choisis l'option " F " pour français et tape sur [entrée] .
• Au second menu Choisis l'option " 2 " ( Suppression ) et tape sur [entrée]
• Ton bureau disparaitra et le pc redémarrera .
• Au redémarrage , UsbFix scannera ton pc , laisse travailler l'outil.
• Ensuite post le rapport UsbFix.txt qui apparaitra avec le bureau .
• Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )
( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )
Gen-Hackman https://forums.commentcamarche.net/forum/affich-13665801-ntldr-is-missing-press-any-key-to-restart Rpd Moi
Je ne peux Plus Envoyé De Message Sur L'ancienne Conversation(?)
Je ne peux Plus Envoyé De Message Sur L'ancienne Conversation(?)
tu t'es trompé de topic ^^
############################## | UsbFix V6.012 |
User : philippe (Administrateurs) # owen
Update on 01/08/09 by Chiquitine29 & C_XX
Start at: 18:23:26 | 01/08/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
AMD Sempron(tm) Processor 3000+
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 7.0.5730.11
Windows Firewall Status : Disabled
AV : Norton Internet Security Online 2007 [ Enabled | Updated ]
FW : Norton Internet Security Online[ Enabled ]2007
A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local # 180,29 Go (57,77 Go free) [HDD] # NTFS
D:\ -> Disque CD-ROM
E:\ -> Disque fixe local # 465,76 Go (57,6 Go free) [sauvegarde] # NTFS
F:\ -> Disque amovible
G:\ -> Disque amovible
H:\ -> Disque amovible
I:\ -> Disque amovible
K:\ -> Disque amovible # 1,91 Go (271,38 Mo free) # FAT
############################## | Processus actifs |
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\WINDOWS\system32\cisvc.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
################## | Fichiers # Dossiers infectieux |
################## | Registre # Clés Run infectieuses |
# HKLM\software\microsoft\security center "AntiVirusDisableNotify" # -> Reset sucessfully !
# HKLM\software\microsoft\security center "FirewallDisableNotify" # -> Reset sucessfully !
################## | Registre # Mountpoints2 |
Supprimé ! HKCU\...\Explorer\MountPoints2\{888fbb53-ddab-11dd-9617-00038a000015}\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{9bb468ea-4381-11dc-930d-00038a000015}\Shell\Auto\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{f16f1616-2761-11de-969a-00038a000015}\Shell\Auto\Command
################## | Listing des fichiers présent |
[01/08/2009 16:50|--a------|21415] -> C:\Ad-Report-CLEAN.log
[05/11/2007 21:50|--a------|192] -> C:\BcBtRmv.log
[02/08/2005 12:29|-rahs----|215] -> C:\BOOT.BAK
[17/11/2006 23:51|--ahs----|296] -> C:\BOOT.INI
[05/08/2004 14:00|-rahs----|4952] -> C:\Bootfont.bin
[05/08/2004 14:00|-rahs----|263488] -> C:\cmldr
[14/10/2007 18:31|--a------|35] -> C:\CommMgr.log
[25/11/2006 20:08|--a------|0] -> C:\DBS.TXT
[29/07/2009 21:50|--a------|184] -> C:\drwtsn32.log
[02/08/2005 12:17|--a------|5335] -> C:\DWNLOG.TXT
[25/12/2006 12:36|--a------|4528583] -> C:\Elle Demande Du Zouk.mp3
[22/07/2007 11:25|--a------|27818] -> C:\error.log
[08/05/2007 14:30|--a------|230408] -> C:\GNCT511.RAW
[?|?|?] -> C:\hiberfil.sys
[02/08/2005 12:32|-rahs----|0] -> C:\IO.SYS
[02/08/2005 12:40|--ah-----|818] -> C:\IPH.PH
[02/08/2005 12:32|-rahs----|0] -> C:\MSDOS.SYS
[02/08/2005 12:38|--a------|157] -> C:\MYInventimeSetup.log
[05/08/2004 14:00|--a------|47564] -> C:\NTDETECT.COM
[22/05/2008 18:39|--a------|252240] -> C:\NTLDR
[29/02/2004 17:44|--a------|52576] -> C:\orange.bmp
[?|?|?] -> C:\pagefile.sys
[01/08/2005 16:48|--a------|1031] -> C:\SAUDIT.TXT
[03/11/2007 14:44|--a------|304160] -> C:\SPC220NC.DAT
[15/08/2008 14:11|--ah-----|232] -> C:\sqmdata00.sqm
[15/08/2008 15:36|--ah-----|268] -> C:\sqmdata01.sqm
[08/09/2008 13:54|--ah-----|268] -> C:\sqmdata02.sqm
[23/09/2008 23:12|--ah-----|268] -> C:\sqmdata03.sqm
[09/10/2008 13:49|--ah-----|268] -> C:\sqmdata04.sqm
[09/10/2008 23:18|--ah-----|268] -> C:\sqmdata05.sqm
[10/10/2008 19:49|--ah-----|268] -> C:\sqmdata06.sqm
[11/10/2008 02:54|--ah-----|268] -> C:\sqmdata07.sqm
[11/10/2008 15:49|--ah-----|268] -> C:\sqmdata08.sqm
[12/10/2008 00:40|--ah-----|268] -> C:\sqmdata09.sqm
[12/01/2008 01:29|--ah-----|268] -> C:\sqmdata10.sqm
[11/05/2008 15:14|--ah-----|268] -> C:\sqmdata11.sqm
[08/07/2008 13:38|--ah-----|268] -> C:\sqmdata12.sqm
[23/07/2008 13:26|--ah-----|268] -> C:\sqmdata13.sqm
[23/07/2008 13:41|--ah-----|172] -> C:\sqmdata14.sqm
[24/07/2008 00:33|--ah-----|268] -> C:\sqmdata15.sqm
[08/08/2008 14:14|--ah-----|268] -> C:\sqmdata16.sqm
[09/08/2008 00:40|--ah-----|268] -> C:\sqmdata17.sqm
[09/08/2008 14:10|--ah-----|268] -> C:\sqmdata18.sqm
[10/08/2008 00:03|--ah-----|268] -> C:\sqmdata19.sqm
[15/08/2008 14:11|--ah-----|244] -> C:\sqmnoopt00.sqm
[15/08/2008 15:36|--ah-----|244] -> C:\sqmnoopt01.sqm
[08/09/2008 13:54|--ah-----|244] -> C:\sqmnoopt02.sqm
[23/09/2008 23:12|--ah-----|244] -> C:\sqmnoopt03.sqm
[09/10/2008 13:49|--ah-----|244] -> C:\sqmnoopt04.sqm
[09/10/2008 23:18|--ah-----|244] -> C:\sqmnoopt05.sqm
[10/10/2008 19:49|--ah-----|244] -> C:\sqmnoopt06.sqm
[11/10/2008 02:54|--ah-----|244] -> C:\sqmnoopt07.sqm
[11/10/2008 15:49|--ah-----|244] -> C:\sqmnoopt08.sqm
[12/10/2008 00:40|--ah-----|244] -> C:\sqmnoopt09.sqm
[12/01/2008 01:29|--ah-----|244] -> C:\sqmnoopt10.sqm
[11/05/2008 15:14|--ah-----|244] -> C:\sqmnoopt11.sqm
[08/07/2008 13:38|--ah-----|244] -> C:\sqmnoopt12.sqm
[23/07/2008 13:26|--ah-----|244] -> C:\sqmnoopt13.sqm
[23/07/2008 13:41|--ah-----|172] -> C:\sqmnoopt14.sqm
[24/07/2008 00:33|--ah-----|244] -> C:\sqmnoopt15.sqm
[08/08/2008 14:14|--ah-----|244] -> C:\sqmnoopt16.sqm
[09/08/2008 00:40|--ah-----|244] -> C:\sqmnoopt17.sqm
[09/08/2008 14:10|--ah-----|244] -> C:\sqmnoopt18.sqm
[10/08/2008 00:03|--ah-----|244] -> C:\sqmnoopt19.sqm
[01/08/2009 18:25|--a------|6784] -> C:\UsbFix.txt
[19/12/2006 20:51|--a------|88219] -> C:\VideoEditor.log
[28/03/2008 22:33|--a------|30933] -> E:\candidature_pekin_express.pdf
[24/08/2008 22:42|--a------|15702] -> E:\cendrillon11.gif
[24/08/2008 22:42|--a------|83344] -> E:\donald9.gif
[09/11/2007 17:33|--a------|18261] -> E:\d‚claration bourse.ods
[31/08/2008 21:38|--a------|3231826] -> E:\eMule0.49b-Installer1.exe
[09/09/2008 01:27|--a------|2835920] -> E:\Gr‚goire - Toi plus moi.mp3
[27/10/2008 20:11|--a------|10679] -> E:\jeanna CAF.pdf
[11/10/2008 12:58|--a------|21526] -> E:\JEUX SIMPLES.ods
[24/08/2008 22:39|--a------|203376] -> E:\le%20roi%20lion%20(6).jpg
[24/08/2008 22:39|--a------|24259] -> E:\roi1.gif
[11/09/2008 22:06|--ahs----|15360] -> E:\Thumbs.db
[01/01/1995 02:00|--a------|44] -> E:\Track01.cda
[01/01/1995 02:07|--a------|44] -> E:\Track02.cda
[01/01/1995 02:12|--a------|44] -> E:\Track03.cda
[01/01/1995 02:18|--a------|44] -> E:\Track04.cda
[01/01/1995 02:26|--a------|44] -> E:\Track05.cda
[01/01/1995 02:32|--a------|44] -> E:\Track06.cda
[01/01/1995 02:37|--a------|44] -> E:\Track07.cda
[01/01/1995 02:43|--a------|44] -> E:\Track08.cda
[01/01/1995 02:50|--a------|44] -> E:\Track09.cda
[01/03/2005 10:14|--a------|654050] -> K:\VUES AERIENNES SUD MAYOTTE0061.JPG
[07/10/2004 04:49|-ra------|558037] -> K:\_LES_BOU.JPG
[07/10/2004 04:50|-ra------|901167] -> K:\0002.JPG
[03/04/2008 00:33|--a------|8349824] -> K:\03 - Poison Prince.mp3
[07/10/2004 01:42|-ra------|532817] -> K:\3_ZEBUS_.JPG
[03/04/2008 00:34|--a------|9871488] -> K:\08 - L.A..mp3
[07/10/2004 01:44|-ra------|807909] -> K:\0011.JPG
[07/10/2004 01:46|-ra------|900951] -> K:\0027.JPG
[02/08/2008 10:47|--a------|20082] -> K:\30ere courses de Prince du C V.odt
[07/10/2004 01:48|-ra------|809709] -> K:\0051.JPG
[07/10/2004 01:49|-ra------|914217] -> K:\0052.JPG
[07/10/2004 01:50|-ra------|1020968] -> K:\0062.JPG
[07/10/2004 01:52|-ra------|944355] -> K:\0069.JPG
[07/10/2004 01:55|-ra------|1301731] -> K:\0086.JPG
[07/10/2004 02:08|-ra------|148244] -> K:\100_0105.JPG
[06/10/2004 18:33|-ra------|162184] -> K:\100_0108.JPG
[06/10/2004 18:32|-ra------|193266] -> K:\100_0150.JPG
[07/10/2004 02:10|-ra------|184290] -> K:\100_0151.JPG
[06/10/2004 18:36|-ra------|232916] -> K:\101_0207.JPG
[07/10/2004 02:23|-ra------|700014] -> K:\101_0232.JPG
[25/09/2003 22:23|--a------|301624] -> K:\102-0276_IMG.JPG
[25/09/2003 22:29|--a------|338929] -> K:\102-0279_IMG.JPG
[07/10/2004 02:43|-ra------|786408] -> K:\00262.JPG
[07/10/2004 02:43|-ra------|847721] -> K:\00282.JPG
[07/10/2004 02:44|-ra------|994949] -> K:\00472.JPG
[07/10/2004 02:45|-ra------|583836] -> K:\ADOLESCE.JPG
[11/06/2007 22:57|--a------|15095] -> K:\AR-1181595407296.pdfIMPOT
[07/10/2004 02:46|-ra------|449943] -> K:\BALEINE2.JPG
[26/10/2008 22:09|--a------|12652] -> K:\billets avion.odt
[07/10/2004 02:52|-ra------|549091] -> K:\BOUENIE_.JPG
[07/10/2004 02:52|-ra------|304507] -> K:\CABRIOLE.JPG
[07/10/2004 02:54|-ra------|530350] -> K:\COUCHER_.JPG
[07/10/2004 02:54|-ra------|594076] -> K:\COURSE_D.JPG
[29/11/2007 09:29|--a------|504320] -> K:\curiousphotographs1.pps
[29/11/2007 09:31|--a------|1419776] -> K:\curiousphotographs2.pps
[29/11/2007 09:32|--a------|932352] -> K:\curiousphotographs3.pps
[09/11/2007 16:33|--a------|18261] -> K:\d‚claration bourse.ods
[07/10/2004 02:55|-ra------|374743] -> K:\DECOUPE_.JPG
[07/10/2004 02:55|-ra------|548862] -> K:\DES_KILO.JPG
[29/09/2004 06:51|--a------|2261621] -> K:\Dsc01268.jpg
[29/09/2004 06:55|--a------|2411527] -> K:\Dsc01286.jpg
[29/09/2004 06:56|--a------|2269965] -> K:\Dsc01291.jpg
[29/09/2004 06:56|--a------|2307315] -> K:\Dsc01293.jpg
[29/09/2004 06:56|--a------|2324119] -> K:\Dsc01299.jpg
[29/09/2004 06:58|--a------|2061137] -> K:\Dsc01305.jpg
[29/09/2004 06:59|--a------|2208631] -> K:\Dsc01306.jpg
[29/09/2004 06:59|--a------|2293952] -> K:\Dsc01307.jpg
[29/09/2004 06:59|--a------|2415832] -> K:\Dsc01308.jpg
[29/09/2004 06:59|--a------|2357830] -> K:\Dsc01309.jpg
[01/06/2005 08:37|--a------|792479] -> K:\Dsc01310.jpg
[29/09/2004 07:00|--a------|2401114] -> K:\Dsc01311.jpg
[29/09/2004 07:00|--a------|2293015] -> K:\Dsc01312.jpg
[29/09/2004 07:00|--a------|2366453] -> K:\Dsc01313.jpg
[29/09/2004 07:00|--a------|2247506] -> K:\Dsc01314.jpg
[29/09/2004 07:00|--a------|2251554] -> K:\Dsc01315.jpg
[28/03/2006 23:07|--a------|1015662] -> K:\DSCN0331.JPG
[27/07/2007 10:13|--a------|66453] -> K:\DSCN0694.JPG
[27/07/2007 10:13|--a------|71984] -> K:\DSCN0695.JPG
[27/07/2007 10:13|--a------|112904] -> K:\DSCN0696.JPG
[27/07/2007 10:13|--a------|99134] -> K:\DSCN0697.JPG
[27/07/2007 10:13|--a------|105917] -> K:\DSCN0698.JPG
[27/07/2007 10:13|--a------|68048] -> K:\DSCN0699.JPG
[27/07/2007 10:13|--a------|101812] -> K:\DSCN0700.JPG
[27/07/2007 10:13|--a------|92892] -> K:\DSCN0701.JPG
[27/07/2007 10:13|--a------|103367] -> K:\DSCN0702.JPG
[27/07/2007 10:13|--a------|91190] -> K:\DSCN0703.JPG
[27/07/2007 10:13|--a------|64734] -> K:\DSCN0704.JPG
[27/07/2007 10:13|--a------|59888] -> K:\DSCN0705.JPG
[27/07/2007 10:13|--a------|39742] -> K:\DSCN0706.JPG
[27/07/2007 10:13|--a------|66520] -> K:\DSCN0707.JPG
[27/07/2007 10:13|--a------|87375] -> K:\DSCN0708.JPG
[04/08/2005 12:49|--a------|375285] -> K:\DSCN3907.JPG
[04/08/2005 12:51|--a------|396231] -> K:\DSCN3910.JPG
[27/10/2003 18:12|-ra------|349851] -> K:\Dzaoudzi.jpg
[26/10/2008 22:06|--a------|269100] -> K:\F00077420.pdf
[26/10/2008 22:18|--a------|15900] -> K:\horaire navette.odt
[26/10/2008 22:13|--a------|22687] -> K:\hotel disney.odt
[07/10/2004 03:07|-ra------|566056] -> K:\ILES_DE2.JPG
[07/10/2004 03:09|-ra------|347026] -> K:\ILOT_CHO.JPG
[07/10/2004 03:09|-ra------|608115] -> K:\ILOT_DE2.JPG
[11/10/2008 11:58|--a------|21526] -> K:\JEUX SIMPLES.ods
[07/10/2004 03:11|-ra------|539430] -> K:\LA_PECHE.JPG
[07/10/2004 03:13|-ra------|562015] -> K:\LE_MAKI.JPG
[07/10/2004 03:13|-ra------|540599] -> K:\LE_MARCH.JPG
[16/07/2008 15:34|--a------|26624] -> K:\lepage.doc
[16/07/2008 15:56|--a------|13404] -> K:\lepage.odt
[07/10/2004 03:14|-ra------|500382] -> K:\LES_BOUE.JPG
[07/10/2004 03:14|-ra------|523256] -> K:\LES_CRIQ.JPG
[07/10/2004 03:16|-ra------|608322] -> K:\MAGNIFI2.JPG
[07/10/2004 03:20|-ra------|531121] -> K:\PECHE_A2.JPG
[07/10/2004 03:20|-ra------|838159] -> K:\PECHE_AU.JPG
[07/10/2004 03:21|-ra------|867656] -> K:\PECHE_TR.JPG
[07/10/2004 03:21|-ra------|561481] -> K:\PECHEUR_.JPG
[25/08/2007 11:18|--a------|805603] -> K:\Photo 3606.jpg
[25/08/2007 11:18|--a------|803457] -> K:\Photo 3607.jpg
[25/08/2007 11:18|--a------|761721] -> K:\Photo 3608.jpg
[25/08/2007 11:18|--a------|841269] -> K:\Photo 3610.jpg
[25/08/2007 11:18|--a------|1040972] -> K:\Photo 3613.jpg
[20/09/2007 12:59|--a------|2243] -> K:\piece_jointe.pdf
[07/10/2004 04:41|-ra------|508358] -> K:\PIROGUE6.JPG
[07/10/2004 04:42|-ra------|535143] -> K:\PLAGE_D2.JPG
[07/10/2004 03:23|-ra------|581966] -> K:\PLAGE_D3.JPG
[07/10/2004 03:23|-ra------|528482] -> K:\PLAGE_DE.JPG
[07/10/2004 03:23|-ra------|910573] -> K:\PLAGES_D.JPG
[08/05/2004 23:09|--a------|988122] -> K:\PonteMoya8mai04.JPG
[03/07/2003 21:59|--a------|159577] -> K:\PonteTortue2.JPG
[03/07/2003 22:04|--a------|128442] -> K:\PonteTortue3.JPG
[03/07/2003 22:04|--a------|119708] -> K:\PonteTortue4.JPG
[03/07/2003 22:05|--a------|127480] -> K:\PonteTortue5.JPG
[03/07/2003 22:05|--a------|109159] -> K:\PonteTortue6.JPG
[03/07/2003 22:06|--a------|139385] -> K:\PonteTortue7.JPG
[03/07/2003 22:08|--a------|128647] -> K:\PonteTortue8.JPG
[10/07/2008 22:03|--a------|11927254] -> K:\REIKI.bmp
[07/10/2004 03:25|-ra------|573260] -> K:\RESULTAT.JPG
[11/06/2007 22:55|--a------|7559] -> K:\Resume-1181595208546.pdf IMPOT
[07/10/2004 03:26|-ra------|467759] -> K:\RETENUE_.JPG
[05/01/2009 18:14|--a------|634386] -> K:\SSA50350.JPG
[07/10/2004 04:44|-ra------|349640] -> K:\TETE_ET_.JPG
[07/10/2004 04:44|-ra------|620438] -> K:\TRANSPOR.JPG
[07/10/2004 04:45|-ra------|548685] -> K:\UN_DAUPH.JPG
[07/10/2004 04:45|-ra------|584734] -> K:\UN_MAKI2.JPG
[30/12/2008 17:09|--a------|19191] -> K:\VENTE AMERIQUE 2009.odt
[07/10/2004 04:46|-ra------|541881] -> K:\VISAGE_E.JPG
[07/10/2004 04:47|-ra------|554881] -> K:\VISAGES_.JPG
[16/06/2009 19:03|--a------|26326] -> K:\FACTURE lepage 060900[1].odt
[22/07/2009 10:00|--a------|12089] -> K:\PAIEMENT MAISON.ods
[26/07/2009 12:20|--a------|43838] -> K:\R‚siliation.mht
[04/01/2005 09:18|--a------|1205743] -> K:\Vue d'ensemble Petite Terre.jpg
[07/10/2004 04:48|-ra------|603764] -> K:\VUE_DU_N.JPG
[07/10/2004 04:48|-ra------|598539] -> K:\VUE_PAN2.JPG
[07/10/2004 04:48|-ra------|611675] -> K:\VUE_PAN4.JPG
[07/10/2004 04:48|-ra------|488283] -> K:\VUE_PANO.JPG
[07/10/2004 04:48|-ra------|597594] -> K:\VUE_SUR2.JPG
[07/10/2004 04:49|-ra------|570915] -> K:\VUE_SUR3.JPG
[01/03/2005 09:25|--a------|683260] -> K:\VUES AERIENNES SUD MAYOTTE0001.JPG
[01/03/2005 10:57|--a------|718057] -> K:\VUES AERIENNES SUD MAYOTTE0002.JPG
[01/03/2005 09:26|--a------|738284] -> K:\VUES AERIENNES SUD MAYOTTE0003.JPG
[01/03/2005 09:27|--a------|578026] -> K:\VUES AERIENNES SUD MAYOTTE0005.JPG
[01/03/2005 09:28|--a------|663227] -> K:\VUES AERIENNES SUD MAYOTTE0006.JPG
[01/03/2005 09:28|--a------|575146] -> K:\VUES AERIENNES SUD MAYOTTE0007.JPG
[01/03/2005 10:57|--a------|552646] -> K:\VUES AERIENNES SUD MAYOTTE0008.JPG
[01/03/2005 09:32|--a------|606223] -> K:\VUES AERIENNES SUD MAYOTTE0010.JPG
[01/03/2005 10:57|--a------|683664] -> K:\VUES AERIENNES SUD MAYOTTE0011.JPG
[01/03/2005 10:57|--a------|838872] -> K:\VUES AERIENNES SUD MAYOTTE0012.JPG
[01/03/2005 09:33|--a------|1238320] -> K:\VUES AERIENNES SUD MAYOTTE0013.JPG
[01/03/2005 09:34|--a------|899603] -> K:\VUES AERIENNES SUD MAYOTTE0014.JPG
[01/03/2005 09:38|--a------|574528] -> K:\VUES AERIENNES SUD MAYOTTE0016.JPG
[01/03/2005 10:57|--a------|636093] -> K:\VUES AERIENNES SUD MAYOTTE0018.JPG
[01/03/2005 09:42|--a------|639681] -> K:\VUES AERIENNES SUD MAYOTTE0019.JPG
[01/03/2005 10:57|--a------|649305] -> K:\VUES AERIENNES SUD MAYOTTE0020.JPG
[01/03/2005 09:43|--a------|556483] -> K:\VUES AERIENNES SUD MAYOTTE0021.JPG
[01/03/2005 09:43|--a------|671593] -> K:\VUES AERIENNES SUD MAYOTTE0023.JPG
[01/03/2005 09:44|--a------|676287] -> K:\VUES AERIENNES SUD MAYOTTE0024.JPG
[01/03/2005 09:48|--a------|719797] -> K:\VUES AERIENNES SUD MAYOTTE0026.JPG
[01/03/2005 10:57|--a------|686249] -> K:\VUES AERIENNES SUD MAYOTTE0027.JPG
[01/03/2005 09:49|--a------|715628] -> K:\VUES AERIENNES SUD MAYOTTE0028.JPG
[01/03/2005 09:52|--a------|824479] -> K:\VUES AERIENNES SUD MAYOTTE0029.JPG
[01/03/2005 10:57|--a------|796110] -> K:\VUES AERIENNES SUD MAYOTTE0030.JPG
[01/03/2005 09:52|--a------|617393] -> K:\VUES AERIENNES SUD MAYOTTE0032.JPG
[01/03/2005 09:55|--a------|1004668] -> K:\VUES AERIENNES SUD MAYOTTE0033.JPG
[01/03/2005 09:56|--a------|1165089] -> K:\VUES AERIENNES SUD MAYOTTE0035.JPG
[01/03/2005 09:56|--a------|1029481] -> K:\VUES AERIENNES SUD MAYOTTE0036.JPG
[01/03/2005 09:57|--a------|1173101] -> K:\VUES AERIENNES SUD MAYOTTE0037.JPG
[01/03/2005 10:02|--a------|570580] -> K:\VUES AERIENNES SUD MAYOTTE0039.JPG
[01/03/2005 10:02|--a------|1123602] -> K:\VUES AERIENNES SUD MAYOTTE0040.JPG
[01/03/2005 10:02|--a------|835880] -> K:\VUES AERIENNES SUD MAYOTTE0041.JPG
[01/03/2005 10:02|--a------|802916] -> K:\VUES AERIENNES SUD MAYOTTE0042.JPG
[01/03/2005 10:03|--a------|821630] -> K:\VUES AERIENNES SUD MAYOTTE0043.JPG
[01/03/2005 10:57|--a------|954675] -> K:\VUES AERIENNES SUD MAYOTTE0044.JPG
[01/03/2005 10:06|--a------|632942] -> K:\VUES AERIENNES SUD MAYOTTE0045.JPG
[01/03/2005 10:57|--a------|724288] -> K:\VUES AERIENNES SUD MAYOTTE0046.JPG
[01/03/2005 10:57|--a------|719680] -> K:\VUES AERIENNES SUD MAYOTTE0047.JPG
[01/03/2005 10:07|--a------|728097] -> K:\VUES AERIENNES SUD MAYOTTE0048.JPG
[01/03/2005 10:07|--a------|738936] -> K:\VUES AERIENNES SUD MAYOTTE0049.JPG
[01/03/2005 10:08|--a------|597913] -> K:\VUES AERIENNES SUD MAYOTTE0050.JPG
[01/03/2005 10:57|--a------|623074] -> K:\VUES AERIENNES SUD MAYOTTE0051.JPG
[01/03/2005 10:10|--a------|732083] -> K:\VUES AERIENNES SUD MAYOTTE0052.JPG
[01/03/2005 10:10|--a------|630953] -> K:\VUES AERIENNES SUD MAYOTTE0053.JPG
[01/03/2005 10:57|--a------|977840] -> K:\VUES AERIENNES SUD MAYOTTE0054.JPG
[01/03/2005 10:11|--a------|698885] -> K:\VUES AERIENNES SUD MAYOTTE0056.JPG
[01/03/2005 10:57|--a------|727259] -> K:\VUES AERIENNES SUD MAYOTTE0057.JPG
[01/03/2005 10:57|--a------|736645] -> K:\VUES AERIENNES SUD MAYOTTE0058.JPG
[01/03/2005 10:57|--a------|852115] -> K:\VUES AERIENNES SUD MAYOTTE0060.JPG
[17/01/2009 12:33|--a------|968648704] -> K:\09011703.avi
[16/03/2009 16:33|--a------|5147167] -> K:\Skatman John - I'm a Scatman.mp3
[16/03/2009 17:00|--a------|4873531] -> K:\Vive la fˆte - Annie Cordy - Tata Yoyo.mp3
[16/03/2009 16:32|--a------|2610292] -> K:\Patrick Fiori - Les Choses de la Vie - 06 - Liberta (Borsalino).mp3
[16/03/2009 19:11|--a------|4168852] -> K:\La Compagnie Creole - C'est Bon Pour Le Moral.mp3
################## | Vaccination |
# C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# E:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# K:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
################## | Cracks / Keygens / Serials |
################## | ! Fin du rapport # UsbFix V6.012 ! |
############################## | UsbFix V6.012 |
User : philippe (Administrateurs) # owen
Update on 01/08/09 by Chiquitine29 & C_XX
Start at: 18:23:26 | 01/08/2009
Website : http://pagesperso-orange.fr/NosTools/index.html
AMD Sempron(tm) Processor 3000+
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 7.0.5730.11
Windows Firewall Status : Disabled
AV : Norton Internet Security Online 2007 [ Enabled | Updated ]
FW : Norton Internet Security Online[ Enabled ]2007
A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local # 180,29 Go (57,77 Go free) [HDD] # NTFS
D:\ -> Disque CD-ROM
E:\ -> Disque fixe local # 465,76 Go (57,6 Go free) [sauvegarde] # NTFS
F:\ -> Disque amovible
G:\ -> Disque amovible
H:\ -> Disque amovible
I:\ -> Disque amovible
K:\ -> Disque amovible # 1,91 Go (271,38 Mo free) # FAT
############################## | Processus actifs |
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\logonui.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\WINDOWS\system32\cisvc.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
################## | Fichiers # Dossiers infectieux |
################## | Registre # Clés Run infectieuses |
# HKLM\software\microsoft\security center "AntiVirusDisableNotify" # -> Reset sucessfully !
# HKLM\software\microsoft\security center "FirewallDisableNotify" # -> Reset sucessfully !
################## | Registre # Mountpoints2 |
Supprimé ! HKCU\...\Explorer\MountPoints2\{888fbb53-ddab-11dd-9617-00038a000015}\Shell\AutoRun\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{9bb468ea-4381-11dc-930d-00038a000015}\Shell\Auto\Command
Supprimé ! HKCU\...\Explorer\MountPoints2\{f16f1616-2761-11de-969a-00038a000015}\Shell\Auto\Command
################## | Listing des fichiers présent |
[01/08/2009 16:50|--a------|21415] -> C:\Ad-Report-CLEAN.log
[05/11/2007 21:50|--a------|192] -> C:\BcBtRmv.log
[02/08/2005 12:29|-rahs----|215] -> C:\BOOT.BAK
[17/11/2006 23:51|--ahs----|296] -> C:\BOOT.INI
[05/08/2004 14:00|-rahs----|4952] -> C:\Bootfont.bin
[05/08/2004 14:00|-rahs----|263488] -> C:\cmldr
[14/10/2007 18:31|--a------|35] -> C:\CommMgr.log
[25/11/2006 20:08|--a------|0] -> C:\DBS.TXT
[29/07/2009 21:50|--a------|184] -> C:\drwtsn32.log
[02/08/2005 12:17|--a------|5335] -> C:\DWNLOG.TXT
[25/12/2006 12:36|--a------|4528583] -> C:\Elle Demande Du Zouk.mp3
[22/07/2007 11:25|--a------|27818] -> C:\error.log
[08/05/2007 14:30|--a------|230408] -> C:\GNCT511.RAW
[?|?|?] -> C:\hiberfil.sys
[02/08/2005 12:32|-rahs----|0] -> C:\IO.SYS
[02/08/2005 12:40|--ah-----|818] -> C:\IPH.PH
[02/08/2005 12:32|-rahs----|0] -> C:\MSDOS.SYS
[02/08/2005 12:38|--a------|157] -> C:\MYInventimeSetup.log
[05/08/2004 14:00|--a------|47564] -> C:\NTDETECT.COM
[22/05/2008 18:39|--a------|252240] -> C:\NTLDR
[29/02/2004 17:44|--a------|52576] -> C:\orange.bmp
[?|?|?] -> C:\pagefile.sys
[01/08/2005 16:48|--a------|1031] -> C:\SAUDIT.TXT
[03/11/2007 14:44|--a------|304160] -> C:\SPC220NC.DAT
[15/08/2008 14:11|--ah-----|232] -> C:\sqmdata00.sqm
[15/08/2008 15:36|--ah-----|268] -> C:\sqmdata01.sqm
[08/09/2008 13:54|--ah-----|268] -> C:\sqmdata02.sqm
[23/09/2008 23:12|--ah-----|268] -> C:\sqmdata03.sqm
[09/10/2008 13:49|--ah-----|268] -> C:\sqmdata04.sqm
[09/10/2008 23:18|--ah-----|268] -> C:\sqmdata05.sqm
[10/10/2008 19:49|--ah-----|268] -> C:\sqmdata06.sqm
[11/10/2008 02:54|--ah-----|268] -> C:\sqmdata07.sqm
[11/10/2008 15:49|--ah-----|268] -> C:\sqmdata08.sqm
[12/10/2008 00:40|--ah-----|268] -> C:\sqmdata09.sqm
[12/01/2008 01:29|--ah-----|268] -> C:\sqmdata10.sqm
[11/05/2008 15:14|--ah-----|268] -> C:\sqmdata11.sqm
[08/07/2008 13:38|--ah-----|268] -> C:\sqmdata12.sqm
[23/07/2008 13:26|--ah-----|268] -> C:\sqmdata13.sqm
[23/07/2008 13:41|--ah-----|172] -> C:\sqmdata14.sqm
[24/07/2008 00:33|--ah-----|268] -> C:\sqmdata15.sqm
[08/08/2008 14:14|--ah-----|268] -> C:\sqmdata16.sqm
[09/08/2008 00:40|--ah-----|268] -> C:\sqmdata17.sqm
[09/08/2008 14:10|--ah-----|268] -> C:\sqmdata18.sqm
[10/08/2008 00:03|--ah-----|268] -> C:\sqmdata19.sqm
[15/08/2008 14:11|--ah-----|244] -> C:\sqmnoopt00.sqm
[15/08/2008 15:36|--ah-----|244] -> C:\sqmnoopt01.sqm
[08/09/2008 13:54|--ah-----|244] -> C:\sqmnoopt02.sqm
[23/09/2008 23:12|--ah-----|244] -> C:\sqmnoopt03.sqm
[09/10/2008 13:49|--ah-----|244] -> C:\sqmnoopt04.sqm
[09/10/2008 23:18|--ah-----|244] -> C:\sqmnoopt05.sqm
[10/10/2008 19:49|--ah-----|244] -> C:\sqmnoopt06.sqm
[11/10/2008 02:54|--ah-----|244] -> C:\sqmnoopt07.sqm
[11/10/2008 15:49|--ah-----|244] -> C:\sqmnoopt08.sqm
[12/10/2008 00:40|--ah-----|244] -> C:\sqmnoopt09.sqm
[12/01/2008 01:29|--ah-----|244] -> C:\sqmnoopt10.sqm
[11/05/2008 15:14|--ah-----|244] -> C:\sqmnoopt11.sqm
[08/07/2008 13:38|--ah-----|244] -> C:\sqmnoopt12.sqm
[23/07/2008 13:26|--ah-----|244] -> C:\sqmnoopt13.sqm
[23/07/2008 13:41|--ah-----|172] -> C:\sqmnoopt14.sqm
[24/07/2008 00:33|--ah-----|244] -> C:\sqmnoopt15.sqm
[08/08/2008 14:14|--ah-----|244] -> C:\sqmnoopt16.sqm
[09/08/2008 00:40|--ah-----|244] -> C:\sqmnoopt17.sqm
[09/08/2008 14:10|--ah-----|244] -> C:\sqmnoopt18.sqm
[10/08/2008 00:03|--ah-----|244] -> C:\sqmnoopt19.sqm
[01/08/2009 18:25|--a------|6784] -> C:\UsbFix.txt
[19/12/2006 20:51|--a------|88219] -> C:\VideoEditor.log
[28/03/2008 22:33|--a------|30933] -> E:\candidature_pekin_express.pdf
[24/08/2008 22:42|--a------|15702] -> E:\cendrillon11.gif
[24/08/2008 22:42|--a------|83344] -> E:\donald9.gif
[09/11/2007 17:33|--a------|18261] -> E:\d‚claration bourse.ods
[31/08/2008 21:38|--a------|3231826] -> E:\eMule0.49b-Installer1.exe
[09/09/2008 01:27|--a------|2835920] -> E:\Gr‚goire - Toi plus moi.mp3
[27/10/2008 20:11|--a------|10679] -> E:\jeanna CAF.pdf
[11/10/2008 12:58|--a------|21526] -> E:\JEUX SIMPLES.ods
[24/08/2008 22:39|--a------|203376] -> E:\le%20roi%20lion%20(6).jpg
[24/08/2008 22:39|--a------|24259] -> E:\roi1.gif
[11/09/2008 22:06|--ahs----|15360] -> E:\Thumbs.db
[01/01/1995 02:00|--a------|44] -> E:\Track01.cda
[01/01/1995 02:07|--a------|44] -> E:\Track02.cda
[01/01/1995 02:12|--a------|44] -> E:\Track03.cda
[01/01/1995 02:18|--a------|44] -> E:\Track04.cda
[01/01/1995 02:26|--a------|44] -> E:\Track05.cda
[01/01/1995 02:32|--a------|44] -> E:\Track06.cda
[01/01/1995 02:37|--a------|44] -> E:\Track07.cda
[01/01/1995 02:43|--a------|44] -> E:\Track08.cda
[01/01/1995 02:50|--a------|44] -> E:\Track09.cda
[01/03/2005 10:14|--a------|654050] -> K:\VUES AERIENNES SUD MAYOTTE0061.JPG
[07/10/2004 04:49|-ra------|558037] -> K:\_LES_BOU.JPG
[07/10/2004 04:50|-ra------|901167] -> K:\0002.JPG
[03/04/2008 00:33|--a------|8349824] -> K:\03 - Poison Prince.mp3
[07/10/2004 01:42|-ra------|532817] -> K:\3_ZEBUS_.JPG
[03/04/2008 00:34|--a------|9871488] -> K:\08 - L.A..mp3
[07/10/2004 01:44|-ra------|807909] -> K:\0011.JPG
[07/10/2004 01:46|-ra------|900951] -> K:\0027.JPG
[02/08/2008 10:47|--a------|20082] -> K:\30ere courses de Prince du C V.odt
[07/10/2004 01:48|-ra------|809709] -> K:\0051.JPG
[07/10/2004 01:49|-ra------|914217] -> K:\0052.JPG
[07/10/2004 01:50|-ra------|1020968] -> K:\0062.JPG
[07/10/2004 01:52|-ra------|944355] -> K:\0069.JPG
[07/10/2004 01:55|-ra------|1301731] -> K:\0086.JPG
[07/10/2004 02:08|-ra------|148244] -> K:\100_0105.JPG
[06/10/2004 18:33|-ra------|162184] -> K:\100_0108.JPG
[06/10/2004 18:32|-ra------|193266] -> K:\100_0150.JPG
[07/10/2004 02:10|-ra------|184290] -> K:\100_0151.JPG
[06/10/2004 18:36|-ra------|232916] -> K:\101_0207.JPG
[07/10/2004 02:23|-ra------|700014] -> K:\101_0232.JPG
[25/09/2003 22:23|--a------|301624] -> K:\102-0276_IMG.JPG
[25/09/2003 22:29|--a------|338929] -> K:\102-0279_IMG.JPG
[07/10/2004 02:43|-ra------|786408] -> K:\00262.JPG
[07/10/2004 02:43|-ra------|847721] -> K:\00282.JPG
[07/10/2004 02:44|-ra------|994949] -> K:\00472.JPG
[07/10/2004 02:45|-ra------|583836] -> K:\ADOLESCE.JPG
[11/06/2007 22:57|--a------|15095] -> K:\AR-1181595407296.pdfIMPOT
[07/10/2004 02:46|-ra------|449943] -> K:\BALEINE2.JPG
[26/10/2008 22:09|--a------|12652] -> K:\billets avion.odt
[07/10/2004 02:52|-ra------|549091] -> K:\BOUENIE_.JPG
[07/10/2004 02:52|-ra------|304507] -> K:\CABRIOLE.JPG
[07/10/2004 02:54|-ra------|530350] -> K:\COUCHER_.JPG
[07/10/2004 02:54|-ra------|594076] -> K:\COURSE_D.JPG
[29/11/2007 09:29|--a------|504320] -> K:\curiousphotographs1.pps
[29/11/2007 09:31|--a------|1419776] -> K:\curiousphotographs2.pps
[29/11/2007 09:32|--a------|932352] -> K:\curiousphotographs3.pps
[09/11/2007 16:33|--a------|18261] -> K:\d‚claration bourse.ods
[07/10/2004 02:55|-ra------|374743] -> K:\DECOUPE_.JPG
[07/10/2004 02:55|-ra------|548862] -> K:\DES_KILO.JPG
[29/09/2004 06:51|--a------|2261621] -> K:\Dsc01268.jpg
[29/09/2004 06:55|--a------|2411527] -> K:\Dsc01286.jpg
[29/09/2004 06:56|--a------|2269965] -> K:\Dsc01291.jpg
[29/09/2004 06:56|--a------|2307315] -> K:\Dsc01293.jpg
[29/09/2004 06:56|--a------|2324119] -> K:\Dsc01299.jpg
[29/09/2004 06:58|--a------|2061137] -> K:\Dsc01305.jpg
[29/09/2004 06:59|--a------|2208631] -> K:\Dsc01306.jpg
[29/09/2004 06:59|--a------|2293952] -> K:\Dsc01307.jpg
[29/09/2004 06:59|--a------|2415832] -> K:\Dsc01308.jpg
[29/09/2004 06:59|--a------|2357830] -> K:\Dsc01309.jpg
[01/06/2005 08:37|--a------|792479] -> K:\Dsc01310.jpg
[29/09/2004 07:00|--a------|2401114] -> K:\Dsc01311.jpg
[29/09/2004 07:00|--a------|2293015] -> K:\Dsc01312.jpg
[29/09/2004 07:00|--a------|2366453] -> K:\Dsc01313.jpg
[29/09/2004 07:00|--a------|2247506] -> K:\Dsc01314.jpg
[29/09/2004 07:00|--a------|2251554] -> K:\Dsc01315.jpg
[28/03/2006 23:07|--a------|1015662] -> K:\DSCN0331.JPG
[27/07/2007 10:13|--a------|66453] -> K:\DSCN0694.JPG
[27/07/2007 10:13|--a------|71984] -> K:\DSCN0695.JPG
[27/07/2007 10:13|--a------|112904] -> K:\DSCN0696.JPG
[27/07/2007 10:13|--a------|99134] -> K:\DSCN0697.JPG
[27/07/2007 10:13|--a------|105917] -> K:\DSCN0698.JPG
[27/07/2007 10:13|--a------|68048] -> K:\DSCN0699.JPG
[27/07/2007 10:13|--a------|101812] -> K:\DSCN0700.JPG
[27/07/2007 10:13|--a------|92892] -> K:\DSCN0701.JPG
[27/07/2007 10:13|--a------|103367] -> K:\DSCN0702.JPG
[27/07/2007 10:13|--a------|91190] -> K:\DSCN0703.JPG
[27/07/2007 10:13|--a------|64734] -> K:\DSCN0704.JPG
[27/07/2007 10:13|--a------|59888] -> K:\DSCN0705.JPG
[27/07/2007 10:13|--a------|39742] -> K:\DSCN0706.JPG
[27/07/2007 10:13|--a------|66520] -> K:\DSCN0707.JPG
[27/07/2007 10:13|--a------|87375] -> K:\DSCN0708.JPG
[04/08/2005 12:49|--a------|375285] -> K:\DSCN3907.JPG
[04/08/2005 12:51|--a------|396231] -> K:\DSCN3910.JPG
[27/10/2003 18:12|-ra------|349851] -> K:\Dzaoudzi.jpg
[26/10/2008 22:06|--a------|269100] -> K:\F00077420.pdf
[26/10/2008 22:18|--a------|15900] -> K:\horaire navette.odt
[26/10/2008 22:13|--a------|22687] -> K:\hotel disney.odt
[07/10/2004 03:07|-ra------|566056] -> K:\ILES_DE2.JPG
[07/10/2004 03:09|-ra------|347026] -> K:\ILOT_CHO.JPG
[07/10/2004 03:09|-ra------|608115] -> K:\ILOT_DE2.JPG
[11/10/2008 11:58|--a------|21526] -> K:\JEUX SIMPLES.ods
[07/10/2004 03:11|-ra------|539430] -> K:\LA_PECHE.JPG
[07/10/2004 03:13|-ra------|562015] -> K:\LE_MAKI.JPG
[07/10/2004 03:13|-ra------|540599] -> K:\LE_MARCH.JPG
[16/07/2008 15:34|--a------|26624] -> K:\lepage.doc
[16/07/2008 15:56|--a------|13404] -> K:\lepage.odt
[07/10/2004 03:14|-ra------|500382] -> K:\LES_BOUE.JPG
[07/10/2004 03:14|-ra------|523256] -> K:\LES_CRIQ.JPG
[07/10/2004 03:16|-ra------|608322] -> K:\MAGNIFI2.JPG
[07/10/2004 03:20|-ra------|531121] -> K:\PECHE_A2.JPG
[07/10/2004 03:20|-ra------|838159] -> K:\PECHE_AU.JPG
[07/10/2004 03:21|-ra------|867656] -> K:\PECHE_TR.JPG
[07/10/2004 03:21|-ra------|561481] -> K:\PECHEUR_.JPG
[25/08/2007 11:18|--a------|805603] -> K:\Photo 3606.jpg
[25/08/2007 11:18|--a------|803457] -> K:\Photo 3607.jpg
[25/08/2007 11:18|--a------|761721] -> K:\Photo 3608.jpg
[25/08/2007 11:18|--a------|841269] -> K:\Photo 3610.jpg
[25/08/2007 11:18|--a------|1040972] -> K:\Photo 3613.jpg
[20/09/2007 12:59|--a------|2243] -> K:\piece_jointe.pdf
[07/10/2004 04:41|-ra------|508358] -> K:\PIROGUE6.JPG
[07/10/2004 04:42|-ra------|535143] -> K:\PLAGE_D2.JPG
[07/10/2004 03:23|-ra------|581966] -> K:\PLAGE_D3.JPG
[07/10/2004 03:23|-ra------|528482] -> K:\PLAGE_DE.JPG
[07/10/2004 03:23|-ra------|910573] -> K:\PLAGES_D.JPG
[08/05/2004 23:09|--a------|988122] -> K:\PonteMoya8mai04.JPG
[03/07/2003 21:59|--a------|159577] -> K:\PonteTortue2.JPG
[03/07/2003 22:04|--a------|128442] -> K:\PonteTortue3.JPG
[03/07/2003 22:04|--a------|119708] -> K:\PonteTortue4.JPG
[03/07/2003 22:05|--a------|127480] -> K:\PonteTortue5.JPG
[03/07/2003 22:05|--a------|109159] -> K:\PonteTortue6.JPG
[03/07/2003 22:06|--a------|139385] -> K:\PonteTortue7.JPG
[03/07/2003 22:08|--a------|128647] -> K:\PonteTortue8.JPG
[10/07/2008 22:03|--a------|11927254] -> K:\REIKI.bmp
[07/10/2004 03:25|-ra------|573260] -> K:\RESULTAT.JPG
[11/06/2007 22:55|--a------|7559] -> K:\Resume-1181595208546.pdf IMPOT
[07/10/2004 03:26|-ra------|467759] -> K:\RETENUE_.JPG
[05/01/2009 18:14|--a------|634386] -> K:\SSA50350.JPG
[07/10/2004 04:44|-ra------|349640] -> K:\TETE_ET_.JPG
[07/10/2004 04:44|-ra------|620438] -> K:\TRANSPOR.JPG
[07/10/2004 04:45|-ra------|548685] -> K:\UN_DAUPH.JPG
[07/10/2004 04:45|-ra------|584734] -> K:\UN_MAKI2.JPG
[30/12/2008 17:09|--a------|19191] -> K:\VENTE AMERIQUE 2009.odt
[07/10/2004 04:46|-ra------|541881] -> K:\VISAGE_E.JPG
[07/10/2004 04:47|-ra------|554881] -> K:\VISAGES_.JPG
[16/06/2009 19:03|--a------|26326] -> K:\FACTURE lepage 060900[1].odt
[22/07/2009 10:00|--a------|12089] -> K:\PAIEMENT MAISON.ods
[26/07/2009 12:20|--a------|43838] -> K:\R‚siliation.mht
[04/01/2005 09:18|--a------|1205743] -> K:\Vue d'ensemble Petite Terre.jpg
[07/10/2004 04:48|-ra------|603764] -> K:\VUE_DU_N.JPG
[07/10/2004 04:48|-ra------|598539] -> K:\VUE_PAN2.JPG
[07/10/2004 04:48|-ra------|611675] -> K:\VUE_PAN4.JPG
[07/10/2004 04:48|-ra------|488283] -> K:\VUE_PANO.JPG
[07/10/2004 04:48|-ra------|597594] -> K:\VUE_SUR2.JPG
[07/10/2004 04:49|-ra------|570915] -> K:\VUE_SUR3.JPG
[01/03/2005 09:25|--a------|683260] -> K:\VUES AERIENNES SUD MAYOTTE0001.JPG
[01/03/2005 10:57|--a------|718057] -> K:\VUES AERIENNES SUD MAYOTTE0002.JPG
[01/03/2005 09:26|--a------|738284] -> K:\VUES AERIENNES SUD MAYOTTE0003.JPG
[01/03/2005 09:27|--a------|578026] -> K:\VUES AERIENNES SUD MAYOTTE0005.JPG
[01/03/2005 09:28|--a------|663227] -> K:\VUES AERIENNES SUD MAYOTTE0006.JPG
[01/03/2005 09:28|--a------|575146] -> K:\VUES AERIENNES SUD MAYOTTE0007.JPG
[01/03/2005 10:57|--a------|552646] -> K:\VUES AERIENNES SUD MAYOTTE0008.JPG
[01/03/2005 09:32|--a------|606223] -> K:\VUES AERIENNES SUD MAYOTTE0010.JPG
[01/03/2005 10:57|--a------|683664] -> K:\VUES AERIENNES SUD MAYOTTE0011.JPG
[01/03/2005 10:57|--a------|838872] -> K:\VUES AERIENNES SUD MAYOTTE0012.JPG
[01/03/2005 09:33|--a------|1238320] -> K:\VUES AERIENNES SUD MAYOTTE0013.JPG
[01/03/2005 09:34|--a------|899603] -> K:\VUES AERIENNES SUD MAYOTTE0014.JPG
[01/03/2005 09:38|--a------|574528] -> K:\VUES AERIENNES SUD MAYOTTE0016.JPG
[01/03/2005 10:57|--a------|636093] -> K:\VUES AERIENNES SUD MAYOTTE0018.JPG
[01/03/2005 09:42|--a------|639681] -> K:\VUES AERIENNES SUD MAYOTTE0019.JPG
[01/03/2005 10:57|--a------|649305] -> K:\VUES AERIENNES SUD MAYOTTE0020.JPG
[01/03/2005 09:43|--a------|556483] -> K:\VUES AERIENNES SUD MAYOTTE0021.JPG
[01/03/2005 09:43|--a------|671593] -> K:\VUES AERIENNES SUD MAYOTTE0023.JPG
[01/03/2005 09:44|--a------|676287] -> K:\VUES AERIENNES SUD MAYOTTE0024.JPG
[01/03/2005 09:48|--a------|719797] -> K:\VUES AERIENNES SUD MAYOTTE0026.JPG
[01/03/2005 10:57|--a------|686249] -> K:\VUES AERIENNES SUD MAYOTTE0027.JPG
[01/03/2005 09:49|--a------|715628] -> K:\VUES AERIENNES SUD MAYOTTE0028.JPG
[01/03/2005 09:52|--a------|824479] -> K:\VUES AERIENNES SUD MAYOTTE0029.JPG
[01/03/2005 10:57|--a------|796110] -> K:\VUES AERIENNES SUD MAYOTTE0030.JPG
[01/03/2005 09:52|--a------|617393] -> K:\VUES AERIENNES SUD MAYOTTE0032.JPG
[01/03/2005 09:55|--a------|1004668] -> K:\VUES AERIENNES SUD MAYOTTE0033.JPG
[01/03/2005 09:56|--a------|1165089] -> K:\VUES AERIENNES SUD MAYOTTE0035.JPG
[01/03/2005 09:56|--a------|1029481] -> K:\VUES AERIENNES SUD MAYOTTE0036.JPG
[01/03/2005 09:57|--a------|1173101] -> K:\VUES AERIENNES SUD MAYOTTE0037.JPG
[01/03/2005 10:02|--a------|570580] -> K:\VUES AERIENNES SUD MAYOTTE0039.JPG
[01/03/2005 10:02|--a------|1123602] -> K:\VUES AERIENNES SUD MAYOTTE0040.JPG
[01/03/2005 10:02|--a------|835880] -> K:\VUES AERIENNES SUD MAYOTTE0041.JPG
[01/03/2005 10:02|--a------|802916] -> K:\VUES AERIENNES SUD MAYOTTE0042.JPG
[01/03/2005 10:03|--a------|821630] -> K:\VUES AERIENNES SUD MAYOTTE0043.JPG
[01/03/2005 10:57|--a------|954675] -> K:\VUES AERIENNES SUD MAYOTTE0044.JPG
[01/03/2005 10:06|--a------|632942] -> K:\VUES AERIENNES SUD MAYOTTE0045.JPG
[01/03/2005 10:57|--a------|724288] -> K:\VUES AERIENNES SUD MAYOTTE0046.JPG
[01/03/2005 10:57|--a------|719680] -> K:\VUES AERIENNES SUD MAYOTTE0047.JPG
[01/03/2005 10:07|--a------|728097] -> K:\VUES AERIENNES SUD MAYOTTE0048.JPG
[01/03/2005 10:07|--a------|738936] -> K:\VUES AERIENNES SUD MAYOTTE0049.JPG
[01/03/2005 10:08|--a------|597913] -> K:\VUES AERIENNES SUD MAYOTTE0050.JPG
[01/03/2005 10:57|--a------|623074] -> K:\VUES AERIENNES SUD MAYOTTE0051.JPG
[01/03/2005 10:10|--a------|732083] -> K:\VUES AERIENNES SUD MAYOTTE0052.JPG
[01/03/2005 10:10|--a------|630953] -> K:\VUES AERIENNES SUD MAYOTTE0053.JPG
[01/03/2005 10:57|--a------|977840] -> K:\VUES AERIENNES SUD MAYOTTE0054.JPG
[01/03/2005 10:11|--a------|698885] -> K:\VUES AERIENNES SUD MAYOTTE0056.JPG
[01/03/2005 10:57|--a------|727259] -> K:\VUES AERIENNES SUD MAYOTTE0057.JPG
[01/03/2005 10:57|--a------|736645] -> K:\VUES AERIENNES SUD MAYOTTE0058.JPG
[01/03/2005 10:57|--a------|852115] -> K:\VUES AERIENNES SUD MAYOTTE0060.JPG
[17/01/2009 12:33|--a------|968648704] -> K:\09011703.avi
[16/03/2009 16:33|--a------|5147167] -> K:\Skatman John - I'm a Scatman.mp3
[16/03/2009 17:00|--a------|4873531] -> K:\Vive la fˆte - Annie Cordy - Tata Yoyo.mp3
[16/03/2009 16:32|--a------|2610292] -> K:\Patrick Fiori - Les Choses de la Vie - 06 - Liberta (Borsalino).mp3
[16/03/2009 19:11|--a------|4168852] -> K:\La Compagnie Creole - C'est Bon Pour Le Moral.mp3
################## | Vaccination |
# C:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# E:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
# K:\autorun.inf ( # Not infected ) -> Folder created by UsbFix.
################## | Cracks / Keygens / Serials |
################## | ! Fin du rapport # UsbFix V6.012 ! |
oui tu l' as envoyé sur un autre topic au lieu de le mettre ici ^^
refais ce que je t'ai demandé au post 3 de la meme maniere stp
n'oublie pas les cases a cocher ^^
refais ce que je t'ai demandé au post 3 de la meme maniere stp
n'oublie pas les cases a cocher ^^
si je l ai reposté ici :
https://forums.commentcamarche.net/forum/affich-13657962-je-n-arrive-plus-a-ouvrir-ie-et-mozilla#16
https://forums.commentcamarche.net/forum/affich-13657962-je-n-arrive-plus-a-ouvrir-ie-et-mozilla#16
relance AD-Remover option desinstallation
relance USBFix option desinstallation
ensuite :
Double clic sur OTL.exe pour le lancer.
Copie la liste qui se trouve en gras ci-dessous,
et colle-la dans la zone sous Customs Scans/Fixes
:processes
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
TeaTimer.exe
:OTL
IE - URLSearchHook: {00A6FAF6-072E-44cf-8957-5838F569A31D} - Reg Error: Key error. File not found
IE - URLSearchHook: {00A6FAF6-072E-44cf-8957-5838F569A31D} - Reg Error: Key error. File not found
FF - prefs.js..browser.search.defaultenginename: "Ask"
FF - prefs.js..browser.search.order.1: "Ask"
FF - prefs.js..browser.search.selectedEngine: "Ask"
O2 - BHO: (Shareware.Pro-FR Toolbar) - {280b5d37-4a76-467a-b3d6-942fca90acde} - C:\Program Files\Shareware.Pro-FR\tbShar.dll (Conduit Ltd.)
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - No CLSID value found.
O3 - HKU\S-1-5-21-1761668634-1925162059-1564977908-1006\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.
O4 - HKU\S-1-5-21-1761668634-1925162059-1564977908-1006..\Run: [hole shim] C:\DOCUME~1\philippe\APPLIC~1\WINACI~1\extra bleh.exe File not found
O4 - HKU\S-1-5-21-1761668634-1925162059-1564977908-1006..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe File not found
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab (Java Plug-in 1.5.0_10)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_04-windows-i586.cab (Java Plug-in 1.6.0_04)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\msdaipp - No CLSID value found
:reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=-
"ISUSPM Startup"=-
"ISUSScheduler"=-
"iTunesHelper"=-
"QuickTime Task"=-
"TkBellExe"=-
:files
C:\WINDOWS\tasks\A0B37C969184F962.job
C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
C:\Documents and Settings\All Users\Application Data\Wave Mail Title Does
C:\Documents and Settings\philippe\Application Data\BitDownload
C:\Documents and Settings\philippe\Application Data\Win acid less
C:\WINDOWS\Tasks\A0B37C969184F962.job
:commands
[emptytemp]
[reboot]
Clique sur RunFix pour lancer la suppression.
Poste le rapport.
==========
relance USBFix option desinstallation
ensuite :
Double clic sur OTL.exe pour le lancer.
Copie la liste qui se trouve en gras ci-dessous,
et colle-la dans la zone sous Customs Scans/Fixes
:processes
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
TeaTimer.exe
:OTL
IE - URLSearchHook: {00A6FAF6-072E-44cf-8957-5838F569A31D} - Reg Error: Key error. File not found
IE - URLSearchHook: {00A6FAF6-072E-44cf-8957-5838F569A31D} - Reg Error: Key error. File not found
FF - prefs.js..browser.search.defaultenginename: "Ask"
FF - prefs.js..browser.search.order.1: "Ask"
FF - prefs.js..browser.search.selectedEngine: "Ask"
O2 - BHO: (Shareware.Pro-FR Toolbar) - {280b5d37-4a76-467a-b3d6-942fca90acde} - C:\Program Files\Shareware.Pro-FR\tbShar.dll (Conduit Ltd.)
O3 - HKU\.DEFAULT\..\Toolbar\WebBrowser: (no name) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - No CLSID value found.
O3 - HKU\S-1-5-18\..\Toolbar\WebBrowser: (no name) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - No CLSID value found.
O3 - HKU\S-1-5-21-1761668634-1925162059-1564977908-1006\..\Toolbar\WebBrowser: (no name) - {0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} - No CLSID value found.
O4 - HKU\S-1-5-21-1761668634-1925162059-1564977908-1006..\Run: [hole shim] C:\DOCUME~1\philippe\APPLIC~1\WINACI~1\extra bleh.exe File not found
O4 - HKU\S-1-5-21-1761668634-1925162059-1564977908-1006..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe File not found
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab (Java Plug-in 1.5.0_10)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_04-windows-i586.cab (Java Plug-in 1.6.0_04)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\msdaipp - No CLSID value found
:reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=-
"ISUSPM Startup"=-
"ISUSScheduler"=-
"iTunesHelper"=-
"QuickTime Task"=-
"TkBellExe"=-
:files
C:\WINDOWS\tasks\A0B37C969184F962.job
C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
C:\Documents and Settings\All Users\Application Data\Wave Mail Title Does
C:\Documents and Settings\philippe\Application Data\BitDownload
C:\Documents and Settings\philippe\Application Data\Win acid less
C:\WINDOWS\Tasks\A0B37C969184F962.job
:commands
[emptytemp]
[reboot]
Clique sur RunFix pour lancer la suppression.
Poste le rapport.
==========
All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
No active process named iexplore.exe was found!
No active process named firefox.exe was found!
No active process named msnmsgr.exe was found!
No active process named TeaTimer.exe was found!
========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}\ not found.
Prefs.js: "Ask" removed from browser.search.defaultenginename
Prefs.js: "Ask" removed from browser.search.order.1
Prefs.js: "Ask" removed from browser.search.selectedEngine
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{280b5d37-4a76-467a-b3d6-942fca90acde}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{280b5d37-4a76-467a-b3d6-942fca90acde}\ deleted successfully.
C:\Program Files\Shareware.Pro-FR\tbShar.dll unregistered successfully.
C:\Program Files\Shareware.Pro-FR\tbShar.dll moved successfully.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{07B18EA9-A523-4961-B6BB-170DE4475CCA} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{07B18EA9-A523-4961-B6BB-170DE4475CCA} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}\ not found.
Registry value HKEY_USERS\S-1-5-21-1761668634-1925162059-1564977908-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7}\ not found.
Registry value HKEY_USERS\S-1-5-21-1761668634-1925162059-1564977908-1006\Software\Microsoft\Windows\CurrentVersion\Run\\hole shim deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1761668634-1925162059-1564977908-1006\Software\Microsoft\Windows\CurrentVersion\Run\\updateMgr deleted successfully.
Starting removal of ActiveX control {33564D57-0000-0010-8000-00AA00389B71}
C:\WINDOWS\Downloaded Program Files\WMV9VCM.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{33564D57-0000-0010-8000-00AA00389B71}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33564D57-0000-0010-8000-00AA00389B71}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{33564D57-0000-0010-8000-00AA00389B71}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33564D57-0000-0010-8000-00AA00389B71}\ not found.
Starting removal of ActiveX control {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
C:\WINDOWS\Downloaded Program Files\erma.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ipp\ deleted successfully.
File Protocol\Handler\ipp - No CLSID value found not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaipp\ deleted successfully.
File Protocol\Handler\msdaipp - No CLSID value found not found.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\ISUSPM Startup deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\ISUSScheduler deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\iTunesHelper deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\TkBellExe deleted successfully.
========== FILES ==========
C:\WINDOWS\tasks\A0B37C969184F962.job moved successfully.
C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}\x86\x86 moved successfully.
C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}\x86 moved successfully.
C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906} moved successfully.
C:\Documents and Settings\All Users\Application Data\Wave Mail Title Does moved successfully.
C:\Documents and Settings\philippe\Application Data\BitDownload\Data\TmpDir moved successfully.
C:\Documents and Settings\philippe\Application Data\BitDownload\Data\LgDir moved successfully.
C:\Documents and Settings\philippe\Application Data\BitDownload\Data\DataDir moved successfully.
C:\Documents and Settings\philippe\Application Data\BitDownload\Data\BackUp\LgDir moved successfully.
C:\Documents and Settings\philippe\Application Data\BitDownload\Data\BackUp\DataDir moved successfully.
C:\Documents and Settings\philippe\Application Data\BitDownload\Data\BackUp moved successfully.
C:\Documents and Settings\philippe\Application Data\BitDownload\Data moved successfully.
C:\Documents and Settings\philippe\Application Data\BitDownload moved successfully.
C:\Documents and Settings\philippe\Application Data\Win acid less moved successfully.
File\Folder C:\WINDOWS\Tasks\A0B37C969184F962.job not found.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: cindy
->Temp folder emptied: 18322365 bytes
->Temporary Internet Files folder emptied: 27222138 bytes
->Apple Safari cache emptied: 24735566 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32768 bytes
User: LocalService
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
->Temp folder emptied: 115616 bytes
->Temporary Internet Files folder emptied: 1613544 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: philippe
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 347795 bytes
->Java cache emptied: 5343 bytes
->FireFox cache emptied: 4578081 bytes
->Apple Safari cache emptied: 64908099 bytes
User: Propriétaire
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 19569 bytes
%systemroot%\System32 .tmp files removed: 3072 bytes
Windows Temp folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 135,36 mb
OTL by OldTimer - Version 3.0.10.3 log created on 08012009_221602
Files\Folders moved on Reboot...
Registry entries deleted on Reboot...
========== PROCESSES ==========
No active process named explorer.exe was found!
No active process named iexplore.exe was found!
No active process named firefox.exe was found!
No active process named msnmsgr.exe was found!
No active process named TeaTimer.exe was found!
========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}\ not found.
Prefs.js: "Ask" removed from browser.search.defaultenginename
Prefs.js: "Ask" removed from browser.search.order.1
Prefs.js: "Ask" removed from browser.search.selectedEngine
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{280b5d37-4a76-467a-b3d6-942fca90acde}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{280b5d37-4a76-467a-b3d6-942fca90acde}\ deleted successfully.
C:\Program Files\Shareware.Pro-FR\tbShar.dll unregistered successfully.
C:\Program Files\Shareware.Pro-FR\tbShar.dll moved successfully.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{07B18EA9-A523-4961-B6BB-170DE4475CCA} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{07B18EA9-A523-4961-B6BB-170DE4475CCA} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}\ not found.
Registry value HKEY_USERS\S-1-5-21-1761668634-1925162059-1564977908-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7}\ not found.
Registry value HKEY_USERS\S-1-5-21-1761668634-1925162059-1564977908-1006\Software\Microsoft\Windows\CurrentVersion\Run\\hole shim deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1761668634-1925162059-1564977908-1006\Software\Microsoft\Windows\CurrentVersion\Run\\updateMgr deleted successfully.
Starting removal of ActiveX control {33564D57-0000-0010-8000-00AA00389B71}
C:\WINDOWS\Downloaded Program Files\WMV9VCM.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{33564D57-0000-0010-8000-00AA00389B71}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33564D57-0000-0010-8000-00AA00389B71}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{33564D57-0000-0010-8000-00AA00389B71}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{33564D57-0000-0010-8000-00AA00389B71}\ not found.
Starting removal of ActiveX control {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
C:\WINDOWS\Downloaded Program Files\erma.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ipp\ deleted successfully.
File Protocol\Handler\ipp - No CLSID value found not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msdaipp\ deleted successfully.
File Protocol\Handler\msdaipp - No CLSID value found not found.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\ISUSPM Startup deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\ISUSScheduler deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\iTunesHelper deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\TkBellExe deleted successfully.
========== FILES ==========
C:\WINDOWS\tasks\A0B37C969184F962.job moved successfully.
C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}\x86\x86 moved successfully.
C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}\x86 moved successfully.
C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906} moved successfully.
C:\Documents and Settings\All Users\Application Data\Wave Mail Title Does moved successfully.
C:\Documents and Settings\philippe\Application Data\BitDownload\Data\TmpDir moved successfully.
C:\Documents and Settings\philippe\Application Data\BitDownload\Data\LgDir moved successfully.
C:\Documents and Settings\philippe\Application Data\BitDownload\Data\DataDir moved successfully.
C:\Documents and Settings\philippe\Application Data\BitDownload\Data\BackUp\LgDir moved successfully.
C:\Documents and Settings\philippe\Application Data\BitDownload\Data\BackUp\DataDir moved successfully.
C:\Documents and Settings\philippe\Application Data\BitDownload\Data\BackUp moved successfully.
C:\Documents and Settings\philippe\Application Data\BitDownload\Data moved successfully.
C:\Documents and Settings\philippe\Application Data\BitDownload moved successfully.
C:\Documents and Settings\philippe\Application Data\Win acid less moved successfully.
File\Folder C:\WINDOWS\Tasks\A0B37C969184F962.job not found.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: cindy
->Temp folder emptied: 18322365 bytes
->Temporary Internet Files folder emptied: 27222138 bytes
->Apple Safari cache emptied: 24735566 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32768 bytes
User: LocalService
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
->Temp folder emptied: 115616 bytes
->Temporary Internet Files folder emptied: 1613544 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: philippe
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 347795 bytes
->Java cache emptied: 5343 bytes
->FireFox cache emptied: 4578081 bytes
->Apple Safari cache emptied: 64908099 bytes
User: Propriétaire
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 19569 bytes
%systemroot%\System32 .tmp files removed: 3072 bytes
Windows Temp folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 135,36 mb
OTL by OldTimer - Version 3.0.10.3 log created on 08012009_221602
Files\Folders moved on Reboot...
Registry entries deleted on Reboot...
Double clic sur OTL.exe pour le lancer.
Copie la liste qui se trouve en gras ci-dessous,
et colle-la dans la zone sous Customs Scans/Fixes
:processes
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
TeaTimer.exe
:OTL
O3 - HKLM\..\Toolbar: (no name) - {280b5d37-4a76-467a-b3d6-942fca90acde} - No CLSID value found.
:reg
[HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchhooks]
"{00A6FAF6-072E-44cf-8957-5838F569A31D}"=-
[HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchhooks]
"{00A6FAF6-072E-44cf-8957-5838F569A31D}"=-
[HKEY_USERS\S-1-5-21-1761668634-1925162059-1564977908-1006\Software\Microsoft\Internet Explorer\URLSearchhooks]
"{280b5d37-4a76-467a-b3d6-942fca90acde}"=-
:commands
[emptytemp]
[reboot]
Clique sur RunFix pour lancer la suppression.
Poste le rapport.
==========
Copie la liste qui se trouve en gras ci-dessous,
et colle-la dans la zone sous Customs Scans/Fixes
:processes
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
TeaTimer.exe
:OTL
O3 - HKLM\..\Toolbar: (no name) - {280b5d37-4a76-467a-b3d6-942fca90acde} - No CLSID value found.
:reg
[HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchhooks]
"{00A6FAF6-072E-44cf-8957-5838F569A31D}"=-
[HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchhooks]
"{00A6FAF6-072E-44cf-8957-5838F569A31D}"=-
[HKEY_USERS\S-1-5-21-1761668634-1925162059-1564977908-1006\Software\Microsoft\Internet Explorer\URLSearchhooks]
"{280b5d37-4a76-467a-b3d6-942fca90acde}"=-
:commands
[emptytemp]
[reboot]
Clique sur RunFix pour lancer la suppression.
Poste le rapport.
==========
All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
No active process named iexplore.exe was found!
No active process named firefox.exe was found!
No active process named msnmsgr.exe was found!
No active process named TeaTimer.exe was found!
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{280b5d37-4a76-467a-b3d6-942fca90acde} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{280b5d37-4a76-467a-b3d6-942fca90acde}\ not found.
========== REGISTRY ==========
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchhooks\\{00A6FAF6-072E-44cf-8957-5838F569A31D} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchhooks\\{00A6FAF6-072E-44cf-8957-5838F569A31D} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}\ not found.
Registry value HKEY_USERS\S-1-5-21-1761668634-1925162059-1564977908-1006\Software\Microsoft\Internet Explorer\URLSearchhooks\\{280b5d37-4a76-467a-b3d6-942fca90acde} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{280b5d37-4a76-467a-b3d6-942fca90acde}\ not found.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: cindy
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Apple Safari cache emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: LocalService
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: philippe
->Temp folder emptied: 401 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Apple Safari cache emptied: 15823074 bytes
User: Propriétaire
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
Windows Temp folder emptied: 41624 bytes
RecycleBin emptied: 142534 bytes
Total Files Cleaned = 15,39 mb
OTL by OldTimer - Version 3.0.10.3 log created on 08012009_230632
Files\Folders moved on Reboot...
Registry entries deleted on Reboot...
========== PROCESSES ==========
No active process named explorer.exe was found!
No active process named iexplore.exe was found!
No active process named firefox.exe was found!
No active process named msnmsgr.exe was found!
No active process named TeaTimer.exe was found!
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{280b5d37-4a76-467a-b3d6-942fca90acde} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{280b5d37-4a76-467a-b3d6-942fca90acde}\ not found.
========== REGISTRY ==========
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchhooks\\{00A6FAF6-072E-44cf-8957-5838F569A31D} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchhooks\\{00A6FAF6-072E-44cf-8957-5838F569A31D} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}\ not found.
Registry value HKEY_USERS\S-1-5-21-1761668634-1925162059-1564977908-1006\Software\Microsoft\Internet Explorer\URLSearchhooks\\{280b5d37-4a76-467a-b3d6-942fca90acde} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{280b5d37-4a76-467a-b3d6-942fca90acde}\ not found.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: cindy
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Apple Safari cache emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: LocalService
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33170 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: philippe
->Temp folder emptied: 401 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Apple Safari cache emptied: 15823074 bytes
User: Propriétaire
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
Windows Temp folder emptied: 41624 bytes
RecycleBin emptied: 142534 bytes
Total Files Cleaned = 15,39 mb
OTL by OldTimer - Version 3.0.10.3 log created on 08012009_230632
Files\Folders moved on Reboot...
Registry entries deleted on Reboot...
Imprime ces instructions car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.
Télécharges :
Malwarebytes
ou :
Malwarebytes
* Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installe ) et mets le à jour .
(NB : Si tu as un message d'erreur t'indiquant qu'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : COMCTL32.OCX
* Potasses le Tuto pour te familiariser avec le prg :
( cela dit, il est très simple d'utilisation ).
relance malwarebytes en suivant scrupuleusement ces consignes :
! Déconnecte toi et ferme toutes applications en cours !
* Lance Malwarebyte's .
Fais un examen dit "Complet" .
--> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
--> à la fin tu cliques sur "résultat" .
--> Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .
Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !
Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)
Télécharges :
Malwarebytes
ou :
Malwarebytes
* Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installe ) et mets le à jour .
(NB : Si tu as un message d'erreur t'indiquant qu'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : COMCTL32.OCX
* Potasses le Tuto pour te familiariser avec le prg :
( cela dit, il est très simple d'utilisation ).
relance malwarebytes en suivant scrupuleusement ces consignes :
! Déconnecte toi et ferme toutes applications en cours !
* Lance Malwarebyte's .
Fais un examen dit "Complet" .
--> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
--> à la fin tu cliques sur "résultat" .
--> Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .
Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !
Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)