Fenetre tres longue a ouvrir

je2lmars -  
Bonjour,
mon ordi me semble tres lent pouvez m aider svp
Configuration: Windows XP Internet Explorer 7.0

33 réponses

Résumé de la discussion

Problème principal : un ordinateur lent sous Windows XP et Internet Explorer 7, avec des doutes sur des infections et des extensions indésirables. Plusieurs réponses recommandent des outils de détection et nettoyage comme Malwarebytes Anti-Malware et HijackThis, et préconisent des scans complets ainsi que le redémarrage après suppression. Des symptômes récurrents impliquent des programmes au démarrage et des barres d’outils modifiant les pages d’accueil ou les moteurs de recherche, avec des rapports hijackthis et des processus suspects à vérifier. En cas d’infections détectées, les propositions incluent la désinstallation de composants indésirables, l’emplacement et la suppression de fichiers temporaires, et l’utilisation d’outils dédiés comme MoveIt et OTM pour nettoyer le système.

Bobot (l’IA à votre service)
  1. XaTon
    Lu ,

    Fait ceci

    ~~~~~~~~~~~~~~~> Hijack This <~~~~~~~~~~~~~~~~~~~

    - Telecharger Hijack
    >http://www.infos-du-net.com/telecharger/HijackThis.html

    Une fois Hijack installer, exécuter le :
    - Cliquer sur "Do a system scan and save a logfile"

    - Un fichier texte s'ouvre, si ce n'est pas le cas celui-ci se trouve dans le même dossier que hijackthis.exe .
    - Faire édition / sélectionner tout
    - Clic droit / copier

    - Poste moi le rapport entier

    0
    1. je2lmars
      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 17:57:20, on 31/08/2009
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v8.00 (8.00.6001.18702)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\RTHDCPL.EXE
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\WINDOWS\system32\RUNDLL32.EXE
      C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      C:\Program Files\DAEMON Tools Lite\daemon.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\OpenOffice.org 3\program\soffice.exe
      C:\Program Files\OpenOffice.org 3\program\soffice.bin
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\Program Files\Memeo\AutoBackup\MemeoBackgroundService.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\PnkBstrA.exe
      C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Memeo\AutoBackup\MemeoBackup.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
      C:\WINDOWS\system32\wbem\wmiapsrv.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Windows Live\Toolbar\wltuser.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\jeremy\Local Settings\Temporary Internet Files\Content.IE5\M3VLYVOO\HiJackThis[1].exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
      O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
      O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll
      O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
      O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
      O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
      O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
      O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
      O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
      O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
      O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [Memeo Backup] C:\Program Files\Memeo\AutoBackup\MemeoLauncher2.exe --silent
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
      O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1103472 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB6; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; InfoPath.2; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)" -"https://www.jeuxclic.com/jeux.php?id=14195"
      O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
      O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
      O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
      O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
      O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
      O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/MSNPUpld.cab
      O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
      O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://gamenextfr.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab
      O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
      O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
      O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: MemeoBackgroundService - Memeo - C:\Program Files\Memeo\AutoBackup\MemeoBackgroundService.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
      0
      1. XaTon
        ~~~~~~~~~~~~~~~~> Toolbar-S&D <~~~~~~~~~~~~~~~~~~~

        * Télécharger Toolbar-S&D (Team IDN) sur le Bureau.

        > https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

        - Lance l'installation du programme en exécutant le fichier téléchargé.

        - Double-clique maintenant sur le raccourci de Toolbar-S&D.

        - Sélectionne la langue souhaitée en tapant </gras>la lettre de ton choix</gras> puis en validant avec la touche </gras>Entrée.</gras>

        - Choisis maintenant l'option 1 (Recherche).

        /!\ Patiente jusqu'à la fin de la recherche. /!\

        - Poste le rapport généré. (C:\TB.txt)

        ~~~~~~~~~~~~~~~> OTM <~~~~~~~~~~~~~~~~~~

        - Télécharge OTM (de Old_Timer) sur ton Bureau

        > http://www.geekstogo.com/forum/files/file/402-otm-oldtimers-move-it/

        - Double-clique sur OTM.exe pour le lancer.

        - Assure toi que la case Unregister Dll's and Ocx's soit bien cochée.

        - Copie la liste qui se trouve dans la citation ci-dessous et colle-la dans le cadre de gauche de OTM sous Paste instructions for item to be moved. 


        :Processes

:files
C:\WINDOWS\system32\Adobe\SHOCKW~1\SWHELP~1.EXE

:Commands
[purity]
[emptytemp]
[Reboot]


        - Clique sur MoveIt! pour lancer la suppression.

        - Le résultat apparaitra dans le cadre Results.

        - Clique sur Exit pour fermer.

        - Poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

        > Il te sera peut-être demandé de redémarrer le pc pour achever la suppression. Si c'est le cas accepte par Yes.

        0
        1. je2lmars
          -----------\\ ToolBar S&D 1.2.9 XP/Vista

          Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
          X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4400+ )
          BIOS : Default System BIOS
          USER : jeremy ( Administrator )
          BOOT : Normal boot
          Antivirus : Kaspersky Internet Security 8.0.0.506 (Activated)
          Firewall : Kaspersky Internet Security 8.0.0.506 (Activated)
          A:\ (USB)
          C:\ (Local Disk) - NTFS - Total:123 Go (Free:37 Go)
          D:\ (Local Disk) - NTFS - Total:341 Go (Free:245 Go)
          E:\ (CD or DVD)
          F:\ (CD or DVD)

          "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
          Option : [1] ( 31/08/2009|18:23 )

          -----------\\ Recherche de Fichiers / Dossiers ...

          C:\Program Files\AskBarDis
          C:\Program Files\AskBarDis\bar
          C:\Program Files\AskBarDis\unins000.dat
          C:\Program Files\AskBarDis\unins000.exe
          C:\Program Files\AskBarDis\bar\bin
          C:\Program Files\AskBarDis\bar\Cache
          C:\Program Files\AskBarDis\bar\History
          C:\Program Files\AskBarDis\bar\Settings
          C:\Program Files\AskBarDis\bar\bin\askBar.dll
          C:\Program Files\AskBarDis\bar\bin\askPopStp.dll
          C:\Program Files\AskBarDis\bar\bin\psvince.dll
          C:\Program Files\AskBarDis\bar\Cache\00A31218.bin
          C:\Program Files\AskBarDis\bar\Cache\00A31498.bin
          C:\Program Files\AskBarDis\bar\Cache\00A319B9.bin
          C:\Program Files\AskBarDis\bar\Cache\00A31CE5.bin
          C:\Program Files\AskBarDis\bar\Cache\00A31ED9.bin
          C:\Program Files\AskBarDis\bar\Cache\00A32448.bin
          C:\Program Files\AskBarDis\bar\Cache\00A32A14.bin
          C:\Program Files\AskBarDis\bar\Cache\00A32B8B.bin
          C:\Program Files\AskBarDis\bar\Cache\00A32D70.bin
          C:\Program Files\AskBarDis\bar\Cache\00A3337A.bin
          C:\Program Files\AskBarDis\bar\Cache\00A33B2B.bin
          C:\Program Files\AskBarDis\bar\Cache\00A3407B.bin
          C:\Program Files\AskBarDis\bar\Cache\00A341E2.bin
          C:\Program Files\AskBarDis\bar\Cache\019E3BA3
          C:\Program Files\AskBarDis\bar\Cache\files.ini
          C:\Program Files\AskBarDis\bar\History\search
          C:\Program Files\AskBarDis\bar\Settings\AskLogo.ico
          C:\Program Files\AskBarDis\bar\Settings\config.dat
          C:\Program Files\AskBarDis\bar\Settings\config.dat.bak
          C:\Program Files\AskBarDis\bar\Settings\prevcfg.htm
          C:\Program Files\DAEMON Tools Toolbar
          C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
          C:\Program Files\DAEMON Tools Toolbar\Resources
          C:\Program Files\DAEMON Tools Toolbar\uninst.exe
          C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
          C:\Program Files\DAEMON Tools Toolbar\Resources\about.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\AboutWindow.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\AddRadioStation.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\as.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\as.png
          C:\Program Files\DAEMON Tools Toolbar\Resources\astro.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\az.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\b1.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\b1.png
          C:\Program Files\DAEMON Tools Toolbar\Resources\BurnImage.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\buy.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond000.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond001.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond003.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond004.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond005.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond006.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond007.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond008.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond009.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond010.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond011.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond019.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond020.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond021.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond022.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond023.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond024.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond025.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond026.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond037.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond038.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond039.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond040.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond041.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond046.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond048.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond050.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond051.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond052.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond053.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond054.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond055.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond056.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond057.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond058.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond059.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond060.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond061.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond062.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond063.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond064.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond065.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond066.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond067.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond068.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond069.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond075.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond076.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond077.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond078.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond079.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond080.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond084.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond085.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond086.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond087.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond088.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond089.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond090.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond091.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond092.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond093.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond094.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond095.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond108.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond109.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond110.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond111.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond112.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond113.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond120.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond121.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond122.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond126.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond127.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond128.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond129.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond130.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond131.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond132.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond133.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond134.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond135.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond136.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond137.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond138.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond140.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond141.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond142.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond143.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond148.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond149.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond152.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond154.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond155.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond156.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond157.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\Config.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\d.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\d2.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\daemon.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\ds.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\dsearch.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\dt.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\DTPro.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\Dwnl.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\emulation.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\features.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\GameCentrix.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\gd.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\genre.xml
          C:\Program Files\DAEMON Tools Toolbar\Resources\globe.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\GrabImage.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\hb.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\hb.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\help.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\ip.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\lang.xml
          C:\Program Files\DAEMON Tools Toolbar\Resources\lingvo.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\m.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\mail.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\mailc.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\mail_disable.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\mail_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\mail_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\mail_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRadioConfig.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRadioStation.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRSCur.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\MenuTr.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\next.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\next_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\next_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\next_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\none.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\none_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\noW.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\op.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\play.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\play.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\play_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\play_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\play_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\pragma.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\prev.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\prev_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\prev_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\prev_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\prod.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\Radio.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBg.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBg.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBgMask.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDisp.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDisp_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioE.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioG.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioL.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLDotMask.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLeft.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLeftMask.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLM.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioN.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioR.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioR.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioRM.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioRU.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioW.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\refresh.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\Rss.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\Rss1.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\rssClose.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\rssL.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\rssOpen.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\size.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\size_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\skins.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\spt.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\stop.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\stop.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\stop_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\stop_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\stop_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\style.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\SupportRequest.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\time.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\TitleIcon.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\toolbar.xml
          C:\Program Files\DAEMON Tools Toolbar\Resources\trans.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\Trash.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\u.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\vol.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\vol.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\vol_back.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\vol_dott.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\vol_dott_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\vol_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\vol_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\vol_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\wb.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m42.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m43.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi0.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi1.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi10.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi11.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi12.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi13.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi2.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi3.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi4.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi5.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi6.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi7.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi8.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi9.ico

          -----------\\ Extensions

          (jeremy) - {E9A1DEE0-C623-4439-8932-001E7D17607D} => ajtoolbar

          -----------\\ [..\Internet Explorer\Main]

          [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
          "Start Page"="https://www.google.fr/?gws_rd=ssl"
          "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
          "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
          "Search Page"="https://www.google.com/?gws_rd=ssl"

          [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
          "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
          "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
          "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
          "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
          "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"

          --------------------\\ Recherche d'autres infections

          --------------------\\ Cracks & Keygens ..

          C:\DOCUME~1\jeremy\Bureau\ejay\crack
          C:\DOCUME~1\jeremy\Bureau\ejay\crack\ReadMe.txt
          C:\DOCUME~1\jeremy\Bureau\ejay\crack\Techno5.exe

          1 - "C:\ToolBar SD\TB_1.txt" - 31/08/2009|18:25 - Option : [1]

          -----------\\ Fin du rapport a 18:25:31,15
          0
          2. XaTon 
            C:\DOCUME~1\jeremy\Bureau\ejay\crack
C:\DOCUME~1\jeremy\Bureau\ejay\crack\ReadMe.txt
C:\DOCUME~1\jeremy\Bureau\ejay\crack\Techno5.exe


            Et des crack ,et des crack
            Supprime moi ca

            Poste moi le rapport d'OTM

            Et fait ceci

            ~~~~~~~~~~~~~~~~> Toolbar-S&D <~~~~~~~~~~~~~~~~~~~

            - Relance Toolbar-S&D en double-cliquant sur le raccourci.

            - Tape sur "2" puis valide en appuyant sur "Entrée".

            - /!\ Ne ferme pas la fenêtre lors de la suppression /!\

            - Un rapport sera généré, poste son contenu ici.

            NOTE :

            Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.

            Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."

            Tape explorer puis valide.
            0
            1. je2lmars
              All processes killed
              ========== PROCESSES ==========
              ========== FILES ==========
              C:\WINDOWS\system32\Adobe\SHOCKW~1\SwHelper_1103472.exe moved successfully.
              ========== COMMANDS ==========

              [EMPTYTEMP]

              User: All Users

              User: All Users.WINDOWS

              User: Default User

              User: Default User.WINDOWS
              ->Temp folder emptied: 0 bytes
              ->Temporary Internet Files folder emptied: 33170 bytes

              User: jeremy
              File delete failed. C:\Documents and Settings\jeremy\Local Settings\Temp\Temporary Internet Files\Content.IE5\W1MZ4D2J\activity;src=2212472;met=1;v=1;pid=18730659;aid=213532958;ko=0;cid=30822317;rid=30840193;rv=1;&timestamp=1239660538453;eid1=2;ecn1=1;etm1=9;eid2=12;ecn2=1;etm2=6;eid3=11;e[1].gif scheduled to be deleted on reboot.
              File delete failed. C:\Documents and Settings\jeremy\Local Settings\Temp\Temporary Internet Files\Content.IE5\W1MZ4D2J\francais;var0=MRS;sz=300x250;ptile=2;var1=;var2=;var3=;var4=;var7=50;var7=voyagesharp;var7=33;var7=34;var7=42;var7=truetarget;var8=;var9=;var10=;var11=;ord=545329069513854[1] scheduled to be deleted on reboot.
              File delete failed. C:\Documents and Settings\jeremy\Local Settings\Temp\Temporary Internet Files\Content.IE5\OPEBS9E3\francais;var0=MRS;sz=300x250;ptile=2;var1=;var2=;var3=;var4=;var7=50;var7=voyagesharp;var7=33;var7=34;var7=42;var7=truetarget;var8=;var9=;var10=;var11=;ord=192520009885303[2] scheduled to be deleted on reboot.
              File delete failed. C:\Documents and Settings\jeremy\Local Settings\Temp\Temporary Internet Files\Content.IE5\OPEBS9E3\francais;var0=MRS;sz=300x250;ptile=2;var1=;var2=;var3=;var4=;var7=50;var7=voyagesharp;var7=33;var7=34;var7=42;var7=truetarget;var8=;var9=;var10=;var11=;ord=483670651388271[2] scheduled to be deleted on reboot.
              File delete failed. C:\Documents and Settings\jeremy\Local Settings\Temp\Temporary Internet Files\Content.IE5\OPEBS9E3\francais;var0=MRS;sz=300x250;ptile=2;var1=;var2=;var3=;var4=;var7=50;var7=voyagesharp;var7=33;var7=42;var7=truetarget;var8=;var9=;var10=;var11=;ord=4201827751519839[1] scheduled to be deleted on reboot.
              File delete failed. C:\Documents and Settings\jeremy\Local Settings\Temp\Temporary Internet Files\Content.IE5\OPEBS9E3\pharmacy_drugsmedications;sz=300x250;kl=N;klg=fr;kt=K;kga=-1;kr=F;kw=tranxen;kgg=-1;kcr=fr;dc_dedup=1;kmyd=ad_creative_1;tile=1;dcopt=ist;ord=5189197884054280[2] scheduled to be deleted on reboot.
              ->Temp folder emptied: 252664364 bytes
              File delete failed. C:\Documents and Settings\jeremy\Local Settings\Temporary Internet Files\Content.IE5\0FDZEQVL\Che - 1ère partie scheduled to be deleted on reboot.
              File delete failed. C:\Documents and Settings\jeremy\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
              ->Temporary Internet Files folder emptied: 31549042 bytes
              ->Java cache emptied: 0 bytes

              User: LocalService
              ->Temp folder emptied: 0 bytes
              File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
              ->Temporary Internet Files folder emptied: 10540332 bytes

              User: NetworkService
              ->Temp folder emptied: 0 bytes
              ->Temporary Internet Files folder emptied: 33170 bytes

              %systemdrive% .tmp files removed: 0 bytes
              %systemroot% .tmp files removed: 2134506 bytes
              %systemroot%\System32 .tmp files removed: 3072 bytes
              Windows Temp folder emptied: 24270117 bytes
              RecycleBin emptied: 982626312 bytes

              Total Files Cleaned = 1243,45 mb

              OTM by OldTimer - Version 3.0.0.6 log created on 08312009_183625

              Files moved on Reboot...
              File C:\Documents and Settings\jeremy\Local Settings\Temp\Temporary Internet Files\Content.IE5\W1MZ4D2J\activity;src=2212472;met=1;v=1;pid=18730659;aid=213532958;ko=0;cid=30822317;rid=30840193;rv=1;&timestamp=1239660538453;eid1=2;ecn1=1;etm1=9;eid2=12;ecn2=1;etm2=6;eid3=11;e[1].gif not found!
              File C:\Documents and Settings\jeremy\Local Settings\Temp\Temporary Internet Files\Content.IE5\W1MZ4D2J\francais;var0=MRS;sz=300x250;ptile=2;var1=;var2=;var3=;var4=;var7=50;var7=voyagesharp;var7=33;var7=34;var7=42;var7=truetarget;var8=;var9=;var10=;var11=;ord=545329069513854[1] not found!
              File C:\Documents and Settings\jeremy\Local Settings\Temp\Temporary Internet Files\Content.IE5\OPEBS9E3\francais;var0=MRS;sz=300x250;ptile=2;var1=;var2=;var3=;var4=;var7=50;var7=voyagesharp;var7=33;var7=34;var7=42;var7=truetarget;var8=;var9=;var10=;var11=;ord=192520009885303[2] not found!
              File C:\Documents and Settings\jeremy\Local Settings\Temp\Temporary Internet Files\Content.IE5\OPEBS9E3\francais;var0=MRS;sz=300x250;ptile=2;var1=;var2=;var3=;var4=;var7=50;var7=voyagesharp;var7=33;var7=34;var7=42;var7=truetarget;var8=;var9=;var10=;var11=;ord=483670651388271[2] not found!
              File C:\Documents and Settings\jeremy\Local Settings\Temp\Temporary Internet Files\Content.IE5\OPEBS9E3\francais;var0=MRS;sz=300x250;ptile=2;var1=;var2=;var3=;var4=;var7=50;var7=voyagesharp;var7=33;var7=42;var7=truetarget;var8=;var9=;var10=;var11=;ord=4201827751519839[1] not found!
              File C:\Documents and Settings\jeremy\Local Settings\Temp\Temporary Internet Files\Content.IE5\OPEBS9E3\pharmacy_drugsmedications;sz=300x250;kl=N;klg=fr;kt=K;kga=-1;kr=F;kw=tranxen;kgg=-1;kcr=fr;dc_dedup=1;kmyd=ad_creative_1;tile=1;dcopt=ist;ord=5189197884054280[2] not found!
              File C:\Documents and Settings\jeremy\Local Settings\Temporary Internet Files\Content.IE5\0FDZEQVL\Che - 1ère partie not found!

              Registry entries deleted on Reboot...
              0
              2. je2lmars
                -----------\\ ToolBar S&D 1.2.9 XP/Vista

                Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
                X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 4400+ )
                BIOS : Default System BIOS
                USER : jeremy ( Administrator )
                BOOT : Normal boot
                Antivirus : Kaspersky Internet Security 8.0.0.506 (Activated)
                Firewall : Kaspersky Internet Security 8.0.0.506 (Activated)
                A:\ (USB)
                C:\ (Local Disk) - NTFS - Total:123 Go (Free:39 Go)
                D:\ (Local Disk) - NTFS - Total:341 Go (Free:245 Go)
                E:\ (CD or DVD)
                F:\ (CD or DVD)

                "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
                Option : [2] ( 31/08/2009|18:51 )

                -----------\\ SUPPRESSION

                Supprime! - C:\Program Files\AskBarDis\bar
                Supprime! - C:\Program Files\AskBarDis\unins000.dat
                Supprime! - C:\Program Files\AskBarDis\unins000.exe
                Supprime! - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
                Supprime! - C:\Program Files\DAEMON Tools Toolbar\Resources
                Supprime! - C:\Program Files\DAEMON Tools Toolbar\uninst.exe
                Supprime! - C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
                Supprime! - C:\Program Files\AskBarDis
                Supprime! - C:\Program Files\DAEMON Tools Toolbar

                -----------\\ Recherche de Fichiers / Dossiers ...

                -----------\\ Extensions

                (jeremy) - {E9A1DEE0-C623-4439-8932-001E7D17607D} => ajtoolbar

                -----------\\ [..\Internet Explorer\Main]

                [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                "Start Page"="https://www.google.fr/?gws_rd=ssl"
                "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
                "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                "Search Page"="https://www.google.com/?gws_rd=ssl"

                [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
                "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                "Start Page"="https://www.msn.com/fr-fr/"

                --------------------\\ Recherche d'autres infections

                Aucune autre infection trouvée !

                1 - "C:\ToolBar SD\TB_1.txt" - 31/08/2009|18:25 - Option : [1]
                2 - "C:\ToolBar SD\TB_2.txt" - 31/08/2009|18:53 - Option : [2]

                -----------\\ Fin du rapport a 18:53:03,64
                0
                1. je2lmars
                  Logfile of Trend Micro HijackThis v2.0.2
                  Scan saved at 18:56:24, on 31/08/2009
                  Platform: Windows XP SP3 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v8.00 (8.00.6001.18702)
                  Boot mode: Normal

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\WINDOWS\Explorer.EXE
                  C:\WINDOWS\system32\svchost.exe
                  C:\Program Files\Java\jre6\bin\jqs.exe
                  C:\Program Files\Memeo\AutoBackup\MemeoBackgroundService.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\nvsvc32.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\PnkBstrA.exe
                  C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\system32\wbem\wmiapsrv.exe
                  C:\WINDOWS\RTHDCPL.EXE
                  C:\Program Files\Java\jre6\bin\jusched.exe
                  C:\WINDOWS\system32\RUNDLL32.EXE
                  C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                  C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                  C:\Program Files\DAEMON Tools Lite\daemon.exe
                  C:\WINDOWS\system32\ctfmon.exe
                  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                  C:\Program Files\OpenOffice.org 3\program\soffice.exe
                  C:\Program Files\OpenOffice.org 3\program\soffice.bin
                  C:\Program Files\Memeo\AutoBackup\MemeoBackup.exe
                  C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
                  C:\Program Files\Windows Live\Toolbar\wltuser.exe
                  C:\Program Files\Internet Explorer\iexplore.exe
                  C:\Program Files\Internet Explorer\iexplore.exe
                  C:\Program Files\Internet Explorer\iexplore.exe
                  C:\Program Files\Internet Explorer\iexplore.exe
                  C:\Documents and Settings\jeremy\Bureau\HiJackThis.exe

                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                  R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
                  R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
                  O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
                  O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll
                  O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
                  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                  O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
                  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                  O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
                  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
                  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
                  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
                  O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
                  O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                  O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
                  O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
                  O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
                  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                  O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                  O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                  O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                  O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                  O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                  O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
                  O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                  O4 - HKLM\..\Run: [Memeo Backup] C:\Program Files\Memeo\AutoBackup\MemeoLauncher2.exe --silent
                  O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                  O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
                  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
                  O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1103472 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB6; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; InfoPath.2; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)" -"https://www.jeuxclic.com/jeux.php?id=14195"
                  O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
                  O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                  O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
                  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
                  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
                  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
                  O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
                  O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                  O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                  O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
                  O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
                  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
                  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                  O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
                  O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
                  O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab
                  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/MSNPUpld.cab
                  O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
                  O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://gamenextfr.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab
                  O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
                  O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
                  O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
                  O23 - Service: MemeoBackgroundService - Memeo - C:\Program Files\Memeo\AutoBackup\MemeoBackgroundService.exe
                  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                  O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
                  0
                  1. XaTon
                    ~~~~~~~~~~~~~~~> OTM <~~~~~~~~~~~~~~~~~~

                    - Télécharge OTM (de Old_Timer) sur ton Bureau

                    > http://www.geekstogo.com/forum/files/file/402-otm-oldtimers-move-it/

                    - Double-clique sur OTM.exe pour le lancer.

                    - Assure toi que la case Unregister Dll's and Ocx's soit bien cochée.

                    - Copie la liste qui se trouve dans la citation ci-dessous et colle-la dans le cadre de gauche de OTM sous Paste instructions for item to be moved. 


                    :Processes

:files
C:\WINDOWS\system32\Adobe\SHOCKW~1\SWHELP~1.EXE

:Commands
[purity]
[emptytemp]
[Reboot]


                    - Clique sur MoveIt! pour lancer la suppression.

                    - Le résultat apparaitra dans le cadre Results.

                    - Clique sur Exit pour fermer.

                    - Poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

                    > Il te sera peut-être demandé de redémarrer le pc pour achever la suppression. Si c'est le cas accepte par Yes.
                    0
                    1. je2lmars
                      merci xa ton de m aider ainsi

                      All processes killed
                      ========== PROCESSES ==========
                      ========== FILES ==========
                      File/Folder C:\WINDOWS\system32\Adobe\SHOCKW~1\SWHELP~1.EXE not found.
                      ========== COMMANDS ==========

                      [EMPTYTEMP]

                      User: All Users

                      User: All Users.WINDOWS

                      User: Default User

                      User: Default User.WINDOWS
                      ->Temp folder emptied: 0 bytes
                      ->Temporary Internet Files folder emptied: 0 bytes

                      User: jeremy
                      ->Temp folder emptied: 685050 bytes
                      File delete failed. C:\Documents and Settings\jeremy\Local Settings\Temporary Internet Files\Content.IE5\0FDZEQVL\Che - 1ère partie scheduled to be deleted on reboot.
                      File delete failed. C:\Documents and Settings\jeremy\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
                      ->Temporary Internet Files folder emptied: 4287779 bytes
                      ->Java cache emptied: 0 bytes

                      User: LocalService
                      ->Temp folder emptied: 0 bytes
                      File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
                      ->Temporary Internet Files folder emptied: 33170 bytes

                      User: NetworkService
                      ->Temp folder emptied: 0 bytes
                      ->Temporary Internet Files folder emptied: 0 bytes

                      %systemdrive% .tmp files removed: 0 bytes
                      %systemroot% .tmp files removed: 0 bytes
                      %systemroot%\System32 .tmp files removed: 0 bytes
                      Windows Temp folder emptied: 6162 bytes
                      RecycleBin emptied: 0 bytes

                      Total Files Cleaned = 4,78 mb

                      OTM by OldTimer - Version 3.0.0.6 log created on 08312009_191026

                      Files moved on Reboot...
                      File C:\Documents and Settings\jeremy\Local Settings\Temporary Internet Files\Content.IE5\0FDZEQVL\Che - 1ère partie not found!

                      Registry entries deleted on Reboot...
                      0
                      2. je2lmars
                        Logfile of Trend Micro HijackThis v2.0.2
                        Scan saved at 19:19:48, on 31/08/2009
                        Platform: Windows XP SP3 (WinNT 5.01.2600)
                        MSIE: Internet Explorer v8.00 (8.00.6001.18702)
                        Boot mode: Normal

                        Running processes:
                        C:\WINDOWS\System32\smss.exe
                        C:\WINDOWS\system32\winlogon.exe
                        C:\WINDOWS\system32\services.exe
                        C:\WINDOWS\system32\lsass.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\WINDOWS\system32\spoolsv.exe
                        C:\WINDOWS\Explorer.EXE
                        C:\WINDOWS\system32\svchost.exe
                        C:\Program Files\Java\jre6\bin\jqs.exe
                        C:\Program Files\Memeo\AutoBackup\MemeoBackgroundService.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\WINDOWS\system32\nvsvc32.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\WINDOWS\system32\PnkBstrA.exe
                        C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\system32\wbem\wmiapsrv.exe
                        C:\WINDOWS\RTHDCPL.EXE
                        C:\Program Files\Java\jre6\bin\jusched.exe
                        C:\WINDOWS\system32\RUNDLL32.EXE
                        C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                        C:\Program Files\DAEMON Tools Lite\daemon.exe
                        C:\WINDOWS\system32\ctfmon.exe
                        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                        C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                        C:\Program Files\OpenOffice.org 3\program\soffice.exe
                        C:\Program Files\OpenOffice.org 3\program\soffice.bin
                        C:\Program Files\Memeo\AutoBackup\MemeoBackup.exe
                        C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
                        C:\Program Files\Internet Explorer\iexplore.exe
                        C:\Program Files\Internet Explorer\iexplore.exe
                        C:\Program Files\Windows Live\Toolbar\wltuser.exe
                        C:\Documents and Settings\jeremy\Bureau\HiJackThis.exe

                        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                        R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - C:\Program Files\AskSearch\bin\DefaultSearch.dll
                        R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
                        O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
                        O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll
                        O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
                        O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                        O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
                        O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                        O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
                        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
                        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
                        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
                        O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
                        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                        O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
                        O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
                        O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
                        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                        O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                        O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
                        O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
                        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                        O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                        O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                        O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
                        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                        O4 - HKLM\..\Run: [Memeo Backup] C:\Program Files\Memeo\AutoBackup\MemeoLauncher2.exe --silent
                        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                        O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
                        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                        O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
                        O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1103472 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB6; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; InfoPath.2; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)" -"https://www.jeuxclic.com/jeux.php?id=14195"
                        O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
                        O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                        O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
                        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
                        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
                        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\jp2iexp.dll
                        O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
                        O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                        O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                        O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
                        O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
                        O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
                        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                        O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
                        O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
                        O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab
                        O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/MSNPUpld.cab
                        O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
                        O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://gamenextfr.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab
                        O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
                        O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
                        O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                        O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
                        O23 - Service: MemeoBackgroundService - Memeo - C:\Program Files\Memeo\AutoBackup\MemeoBackgroundService.exe
                        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                        O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
                        0
                        1. je2lmars
                          il faut que j y aille
                          peut on rester en contact
                          0
                          1. XaTon
                            peut on rester en contact

                            Comment ca ?
                            0
                            1. je2lmars
                              si tu pense qu il y a encore du boulot avec mon ordi comment faire pour rester en contact
                              est tu souvent sur ce forum??
                              si oui pas de souci
                              mais quand pense tu de mon probleme
                              0
                              1. XaTon 
                                est tu souvent sur ce forum??


                                Oui , je le suis même un peu trop

                                LoL
                                0
                                1. je2lmars
                                  ok @ plus
                                  faut il que je lance un programme avant mon depart ou pas ou j en est on ????
                                  0
                                  1. XaTon
                                    Fait ceci :

                                    ~~~~~~~~~~~~~~> Malwarebytes <~~~~~~~~~~~~~~~~~~~

                                    - Télécharger Malwarebytes
                                    - Enregistre le sur le bureau
                                    - Double clique sur le fichier téléchargé pour lancer le processus d’installation
                                    - Lorsqu’il te le sera demandé, mets à jour Malwarebytes anti malware
                                    - Si le pare-feu demande l’autorisation de se connecter pour malwarebytes, acceptes
                                    - Une fois la mise à jour terminée, ferme Malwarebytes

                                    - Double-clique sur l’icône de malwarebytes pour le relancer
                                    - Dans l’onglet, Recherche, probablement ouvert par défaut,
                                    - Sélectionne Exécuter un examen complet
                                    - Clique sur Rechercher
                                    - Le scan démarre

                                    - A la fin de l’analyse, un message s’affiche : L’examen s’est terminé normalement. Cliquez sur ‘Afficher les résultats’ pour afficher tous les objets trouvés.
                                    - Clique sur Ok pour poursuivre.
                                    - Si des malwares ont été détectés, cliques sur Afficher les résultats
                                    - Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.

                                    - Malwarebytes va ouvrir le bloc-notes et y copier le rapport d’analyse.
                                    - Rends toi dans l’onglet rapport/log
                                    - Tu clique dessus pour l’afficher.
                                    - Une fois affiché, cliques sur édition en haut du bloc notes, et puis sur sélectionner tout
                                    - Tu recliques sur édition et puis sur copier et tu reviens sur le forum et dans ta réponse
                                    - Tu clique droit dans le cadre de la réponse et coller

                                    0
                                    1. je2lmars
                                      re
                                      apparement R A S
                                      Malwarebytes' Anti-Malware 1.40
                                      Version de la base de données: 2725
                                      Windows 5.1.2600 Service Pack 3

                                      01/09/2009 16:14:15
                                      mbam-log-2009-09-01 (16-14-15).txt

                                      Type de recherche: Examen complet (A:\|C:\|D:\|E:\|F:\|)
                                      Eléments examinés: 181310
                                      Temps écoulé: 47 minute(s), 39 second(s)

                                      Processus mémoire infecté(s): 0
                                      Module(s) mémoire infecté(s): 0
                                      Clé(s) du Registre infectée(s): 0
                                      Valeur(s) du Registre infectée(s): 0
                                      Elément(s) de données du Registre infecté(s): 0
                                      Dossier(s) infecté(s): 0
                                      Fichier(s) infecté(s): 0

                                      Processus mémoire infecté(s):
                                      (Aucun élément nuisible détecté)

                                      Module(s) mémoire infecté(s):
                                      (Aucun élément nuisible détecté)

                                      Clé(s) du Registre infectée(s):
                                      (Aucun élément nuisible détecté)

                                      Valeur(s) du Registre infectée(s):
                                      (Aucun élément nuisible détecté)

                                      Elément(s) de données du Registre infecté(s):
                                      (Aucun élément nuisible détecté)

                                      Dossier(s) infecté(s):
                                      (Aucun élément nuisible détecté)

                                      Fichier(s) infecté(s):
                                      (Aucun élément nuisible détecté)
                                      0
                                      • 1
                                      • 2