Virus trojan et rootkit infecté
Résolu
manon0202
Messages postés
33
Date d'inscription
Statut
Membre
Dernière intervention
-
manon0202 Messages postés 33 Date d'inscription Statut Membre Dernière intervention -
manon0202 Messages postés 33 Date d'inscription Statut Membre Dernière intervention -
Bonjour!
Depuis avant-hier, quand je mets mon ordinateur portable en veille prolongée, et que je le rouvre le lendemain, c'est impossible, déjà, il est très long à remettre la page avec le mot de passe pour aller sur mon compte et de toute manière, je ne peux pas l'ouvrir puisque la page bugge et quand je le redémarre, tout fonctionne :/
Du coup, j'ai lancé Kaspersky online, car avira ne me trouve jamais rien...
Et il m'a trouvé ça :
--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7 REPORT
Saturday, November 15, 2008
Operating System: Microsoft Windows XP Home Edition Service Pack 2 (build 2600)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Friday, November 14, 2008 20:14:58
Records in database: 1385149
--------------------------------------------------------------------------------
Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes
Scan area - My Computer:
C:\
D:\
Scan statistics:
Files scanned: 138159
Threat name: 5
Infected objects: 8
Suspicious objects: 0
Duration of the scan: 03:38:46
File name / Threat name / Threats count
C:\Documents and Settings\Manon\Mes documents\Logiciels\mirc621.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.621 1
C:\Documents and Settings\Manon\Mes documents\Logiciels\sysreset255.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.621 1
C:\Documents and Settings\Manon\Mes documents\Ma musique\Lime wire\Pierrot Et Boutitou Soundtrackrar Infected: Rootkit.Win32.Agent.eii 1
C:\Documents and Settings\Manon\Mes documents\Ma musique\Mangas\Ayashi no Ceres - Blowing from the South.mp3 Infected: Trojan-Downloader.WMA.GetCodec.c 1
C:\Program Files\Emule\emule.exe Infected: Trojan-Downloader.Win32.Agent.aexe 1
C:\Program Files\mIRC\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.621 1
C:\Program Files\mIRC6.31\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.631 1
C:\sysreset\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.621 1
The selected area was scanned.
ensuite, j'ai vu que sur le forum, on demandait presque toujours de faire un scan HijackThis, alors je l'ai fait:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:35:25, on 15/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\PROGRA~1\SPYWAR~1\sp_rsser.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\WINDOWS\system32\ZoomingHook.exe
C:\WINDOWS\system32\TCtrlIOHook.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\Fichiers communs\MySoftware\Newsflsh.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\freecell.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Notepad++\notepad++.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\AxBx\Clean Virus MSN\CleanVirusMSN.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Crux P2P\Plugins\RazaWebHook.dll (file missing)
O2 - BHO: rightonads optimizer - {10F3E8BD-257A-4702-A2F5-DC02055B068C} - C:\WINDOWS\system32\gzmrt.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
O4 - HKLM\..\Run: [Zooming] ZoomingHook.exe
O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe hwSetUP
O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
O4 - HKLM\..\Run: [TOSHIBA Accessibility] C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Lecteur Windows Media.lnk = C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Startup: Raccourci vers TFncKy.lnk = C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
O4 - Startup: Windows Live Messenger .lnk = C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Newsflash.lnk = ?
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\Manon\Application Data\Dealio\kb127\res\DealioSearch.html
O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Crux P2P\Plugins\RazaWebHook.dll/3000
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {7C5D062A-7A1E-4A46-A02B-A928084CBD66} (MLauncherNew Class) - http://legendofares.netgame.com/download/MusaLauncherNew.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://195.41.18.51/activex/AxisCamControl.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game03.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\PROGRA~1\SPYWAR~1\sp_rsser.exe
O24 - Desktop Component 1: PC-Aquarium Deluxe - 7db39a0d-580f-4be9-9195-8bfcd226f6c2
Depuis avant-hier, quand je mets mon ordinateur portable en veille prolongée, et que je le rouvre le lendemain, c'est impossible, déjà, il est très long à remettre la page avec le mot de passe pour aller sur mon compte et de toute manière, je ne peux pas l'ouvrir puisque la page bugge et quand je le redémarre, tout fonctionne :/
Du coup, j'ai lancé Kaspersky online, car avira ne me trouve jamais rien...
Et il m'a trouvé ça :
--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7 REPORT
Saturday, November 15, 2008
Operating System: Microsoft Windows XP Home Edition Service Pack 2 (build 2600)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Friday, November 14, 2008 20:14:58
Records in database: 1385149
--------------------------------------------------------------------------------
Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes
Scan area - My Computer:
C:\
D:\
Scan statistics:
Files scanned: 138159
Threat name: 5
Infected objects: 8
Suspicious objects: 0
Duration of the scan: 03:38:46
File name / Threat name / Threats count
C:\Documents and Settings\Manon\Mes documents\Logiciels\mirc621.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.621 1
C:\Documents and Settings\Manon\Mes documents\Logiciels\sysreset255.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.621 1
C:\Documents and Settings\Manon\Mes documents\Ma musique\Lime wire\Pierrot Et Boutitou Soundtrackrar Infected: Rootkit.Win32.Agent.eii 1
C:\Documents and Settings\Manon\Mes documents\Ma musique\Mangas\Ayashi no Ceres - Blowing from the South.mp3 Infected: Trojan-Downloader.WMA.GetCodec.c 1
C:\Program Files\Emule\emule.exe Infected: Trojan-Downloader.Win32.Agent.aexe 1
C:\Program Files\mIRC\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.621 1
C:\Program Files\mIRC6.31\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.631 1
C:\sysreset\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.621 1
The selected area was scanned.
ensuite, j'ai vu que sur le forum, on demandait presque toujours de faire un scan HijackThis, alors je l'ai fait:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:35:25, on 15/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\PROGRA~1\SPYWAR~1\sp_rsser.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\WINDOWS\system32\ZoomingHook.exe
C:\WINDOWS\system32\TCtrlIOHook.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\Fichiers communs\MySoftware\Newsflsh.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\freecell.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Notepad++\notepad++.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\AxBx\Clean Virus MSN\CleanVirusMSN.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Crux P2P\Plugins\RazaWebHook.dll (file missing)
O2 - BHO: rightonads optimizer - {10F3E8BD-257A-4702-A2F5-DC02055B068C} - C:\WINDOWS\system32\gzmrt.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: DealioBHO Class - {6A87B991-A31F-4130-AE72-6D0C294BF082} - C:\Program Files\Dealio\kb127\Dealio.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O3 - Toolbar: Dealio - {E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F} - C:\Program Files\Dealio\kb127\Dealio.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
O4 - HKLM\..\Run: [Zooming] ZoomingHook.exe
O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe hwSetUP
O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
O4 - HKLM\..\Run: [TOSHIBA Accessibility] C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [au] C:\Program Files\Dealio\DealioAU.exe
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Lecteur Windows Media.lnk = C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Startup: Raccourci vers TFncKy.lnk = C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
O4 - Startup: Windows Live Messenger .lnk = C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Newsflash.lnk = ?
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\Manon\Application Data\Dealio\kb127\res\DealioSearch.html
O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Crux P2P\Plugins\RazaWebHook.dll/3000
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Program Files\Dealio\kb127\Dealio.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {7C5D062A-7A1E-4A46-A02B-A928084CBD66} (MLauncherNew Class) - http://legendofares.netgame.com/download/MusaLauncherNew.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://195.41.18.51/activex/AxisCamControl.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game03.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\PROGRA~1\SPYWAR~1\sp_rsser.exe
O24 - Desktop Component 1: PC-Aquarium Deluxe - 7db39a0d-580f-4be9-9195-8bfcd226f6c2
A voir également:
- Virus trojan et rootkit infecté
- Virus mcafee - Accueil - Piratage
- Trojan remover - Télécharger - Antivirus & Antimalwares
- Virus facebook demande d'amis - Accueil - Facebook
- Faux message virus iphone ✓ - Forum Virus
- Undisclosed-recipients virus - Guide
55 réponses
Re je suis arrivée à ça =>Télécharge AD-Remover (de Cyrildu17 / C_XX) sur ton bureau :
seulement, le lien que tu m'as donné ne fonctionne pas...
seulement, le lien que tu m'as donné ne fonctionne pas...
Ok,
Pour AD-Remover on vera plus tard.
Par contre tu n'as pas fixé les lignes dans HiJackT (elles sont toujours là).
Refais le stp et poste son rapport puis passe à la suite.
A+
Pour AD-Remover on vera plus tard.
Par contre tu n'as pas fixé les lignes dans HiJackT (elles sont toujours là).
Refais le stp et poste son rapport puis passe à la suite.
A+
arf j ai oublié de refaire un rapport apres avoir enlevé les lignes ^^'
le voila
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:51:35, on 21/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\PROGRA~1\SPYWAR~1\sp_rsser.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\WINDOWS\system32\ZoomingHook.exe
C:\WINDOWS\system32\TCtrlIOHook.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\Fichiers communs\MySoftware\Newsflsh.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Notepad++\notepad++.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
O4 - HKLM\..\Run: [Zooming] ZoomingHook.exe
O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe hwSetUP
O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
O4 - HKLM\..\Run: [TOSHIBA Accessibility] C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: Lecteur Windows Media.lnk = C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Startup: Raccourci vers TFncKy.lnk = C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
O4 - Startup: Windows Live Messenger .lnk = C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\Manon\Application Data\Dealio\kb127\res\DealioSearch.html
O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Crux P2P\Plugins\RazaWebHook.dll/3000
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {7C5D062A-7A1E-4A46-A02B-A928084CBD66} (MLauncherNew Class) - http://legendofares.netgame.com/download/MusaLauncherNew.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://195.41.18.51/activex/AxisCamControl.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game03.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\PROGRA~1\SPYWAR~1\sp_rsser.exe
O24 - Desktop Component 1: PC-Aquarium Deluxe - 7db39a0d-580f-4be9-9195-8bfcd226f6c2
le voila
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:51:35, on 21/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\PROGRA~1\SPYWAR~1\sp_rsser.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
C:\WINDOWS\system32\ZoomingHook.exe
C:\WINDOWS\system32\TCtrlIOHook.exe
C:\WINDOWS\system32\TPSMain.exe
C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\Fichiers communs\MySoftware\Newsflsh.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\PROGRA~1\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Notepad++\notepad++.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Tvs] C:\Program Files\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [PadTouch] C:\Program Files\TOSHIBA\Touch and Launch\PadExe.exe
O4 - HKLM\..\Run: [Zooming] ZoomingHook.exe
O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\Utilitaire de zoom TOSHIBA\SmoothView.exe
O4 - HKLM\..\Run: [HWSetup] C:\Program Files\TOSHIBA\TOSHIBA Applet\HWSetup.exe hwSetUP
O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
O4 - HKLM\..\Run: [TOSHIBA Accessibility] C:\Program Files\TOSHIBA\Accessibility\FnKeyHook.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: Lecteur Windows Media.lnk = C:\Program Files\Windows Media Player\wmplayer.exe
O4 - Startup: Raccourci vers TFncKy.lnk = C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
O4 - Startup: Windows Live Messenger .lnk = C:\Program Files\Windows Live\Messenger\msnmsgr.exe
O8 - Extra context menu item: Compare Prices with &Dealio - C:\Documents and Settings\Manon\Application Data\Dealio\kb127\res\DealioSearch.html
O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Crux P2P\Plugins\RazaWebHook.dll/3000
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {7C5D062A-7A1E-4A46-A02B-A928084CBD66} (MLauncherNew Class) - http://legendofares.netgame.com/download/MusaLauncherNew.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://195.41.18.51/activex/AxisCamControl.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game03.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\PROGRA~1\SPYWAR~1\sp_rsser.exe
O24 - Desktop Component 1: PC-Aquarium Deluxe - 7db39a0d-580f-4be9-9195-8bfcd226f6c2
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Bonsoir,
Franchement Gen-Hackman tu fais chier.
Quelle dexterite dans les paroles....merci bonne soiree
Franchement Gen-Hackman tu fais chier.
Quelle dexterite dans les paroles....merci bonne soiree
:/
Merci gen-hackman de m'avoir accordé du temps^^
-----------\\ ToolBar S&D 1.2.5 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) M processor 1.73GHz )
BIOS : Ver 1.00PARTTBLX
USER : Manon ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Not Activated)
C:\ (Local Disk) - NTFS - Total:92 Go (Free:10 Go)
D:\ (CD or DVD)
"C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 )
Option : [1] ( 21/11/2008| 2:57 )
-----------\\ Recherche de Fichiers / Dossiers ...
C:\Program Files\Crawler
C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio
C:\Program Files\KaZaA
C:\Program Files\KaZaA\My Shared Folder
\...\{2bae58c2-79f9-45d1-a286-81f911301c3a} - (p2p_energy)
-----------\\ Extensions
(Manon) - {2bae58c2-79f9-45d1-a286-81f911301c3a} => p2p_energy
(Manon) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
(Manon) - {5514CFC3-D9A8-4f1a-8DF1-930EBFB59901} => QuteClassic
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
1 - "C:\ToolBar SD\TB_1.txt" - 21/11/2008| 3:21 - Option : [1]
-----------\\ Fin du rapport a 3:21:28,07
SUIVANT :
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
File move failed. C:\WINDOWS\WindowsUpdate.log scheduled to be moved on reboot.
File move failed. C:\WINDOWS\wiaservc.log scheduled to be moved on reboot.
File move failed. C:\WINDOWS\wiadebug.log scheduled to be moved on reboot.
File move failed. C:\WINDOWS\Sti_Trace.log scheduled to be moved on reboot.
C:\WINDOWS\SwSys2.bmp moved successfully.
C:\WINDOWS\SwSys1.bmp moved successfully.
C:\WINDOWS\bizpub32.INI moved successfully.
c:\Documents and Settings\Manon\Mes documents\--MANGAS--\MessengerSkinner_setup.exe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\400000a500003i moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\300000003400002i moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\1000000b00002i moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\1000000600002i moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%SystemSystem% moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\TypeSupport moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\Linguistics moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\caps moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\backup moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\Adobe PCD\cache moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\Adobe PCD moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files\Adobe\caps moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files\Adobe\backup moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files\Adobe\Adobe PCD\cache moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files\Adobe\Adobe PCD moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files\Adobe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Required\VersionCue moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Required\plug_ins3d moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Required moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Presets\Workspaces\2-Task-based Workspaces moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Presets\Workspaces\1-Basic Workspaces moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Presets\Workspaces moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Presets moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir% moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile%\Local Settings\Temporary Internet Files\Content.IE5 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile%\Local Settings\Temporary Internet Files moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile%\Local Settings\Temp moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile%\Local Settings\Historique\History.IE5 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile%\Local Settings\Historique moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile%\Local Settings moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile%\Cookies moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile% moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData%\Adobe\TypeSupport moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData%\Adobe\Fonts moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData%\Adobe\Color moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData%\Adobe\CameraRaw\Cache moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData%\Adobe\CameraRaw moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData%\Adobe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData% moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Workflow moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe VanishingPoint CS3\Photoshop moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe VanishingPoint CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Liquify CS3\Photoshop moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Liquify CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Lighting Effects CS3\Photoshop\Lighting Styles moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Lighting Effects CS3\Photoshop moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Lighting Effects CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Filter Gallery CS3\Photoshop moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Filter Gallery CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics\Dictionaries\ATE User Dictionary\all moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics\Dictionaries\ATE User Dictionary moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\all moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics\Dictionaries moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\CameraRaw\Defaults moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\CameraRaw moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Tools moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Styles moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Patterns\PostScript Patterns moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Patterns moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Menu Customization moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Keyboard Shortcuts moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Gradients moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\TRITONE\Process Tritones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\TRITONE\PANTONE(R) Tritones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\TRITONE\Gray Tritones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\TRITONE moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Quadtones\Process Quadtones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Quadtones\PANTONE(R) Quadtones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Quadtones\Gray Quadtones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Quadtones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Duotones\Process Duotones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Duotones\PANTONE(R) Duotones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Duotones\Gray-Black Duotones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Duotones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Custom Shapes moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Curves moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Contours moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Color Swatches moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Channel Mixer moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Brushes moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Black and White moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Actions moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Adobe Photoshop CS3 Settings moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData% moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\400000a500003i moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\300000003400002i moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\1000000b00002i moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\1000000600002i moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%SystemSystem% moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\Linguistics moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\caps moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\backup moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\Adobe PCD\cache moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\Adobe PCD moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files\Adobe\caps moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files\Adobe\backup moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files\Adobe\Adobe PCD\cache moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files\Adobe\Adobe PCD moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files\Adobe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Required\VersionCue moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Required\plug_ins3d moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Required moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Presets\Workspaces\2-Task-based Workspaces moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Presets\Workspaces\1-Basic Workspaces moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Presets\Workspaces moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Presets moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir% moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile%\Local Settings\Temp moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile%\Local Settings moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile% moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData%\Adobe\TypeSupport moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData%\Adobe\Fonts moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData%\Adobe\Color moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData%\Adobe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData% moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Workflow moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe VanishingPoint CS3\Photoshop moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe VanishingPoint CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Liquify CS3\Photoshop moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Liquify CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Lighting Effects CS3\Photoshop\Lighting Styles moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Lighting Effects CS3\Photoshop moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Lighting Effects CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Filter Gallery CS3\Photoshop moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Filter Gallery CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics\Dictionaries\ATE User Dictionary\all moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics\Dictionaries\ATE User Dictionary moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\all moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics\Dictionaries moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Tools moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Styles moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Patterns\PostScript Patterns moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Patterns moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Menu Customization moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Keyboard Shortcuts moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Gradients moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\TRITONE\Process Tritones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\TRITONE\PANTONE(R) Tritones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\TRITONE\Gray Tritones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\TRITONE moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Quadtones\Process Quadtones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Quadtones\PANTONE(R) Quadtones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Quadtones\Gray Quadtones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Quadtones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Duotones\Process Duotones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Duotones\PANTONE(R) Duotones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Duotones\Gray-Black Duotones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Duotones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Custom Shapes moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Curves moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Contours moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Color Swatches moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Channel Mixer moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Brushes moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Black and White moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Actions moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Adobe Photoshop CS3 Settings moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData% moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3 moved successfully.
C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources moved successfully.
C:\Program Files\SweetIM\Toolbars\Internet Explorer moved successfully.
C:\Program Files\SweetIM\Toolbars moved successfully.
C:\Program Files\SweetIM\Messenger\resources\images moved successfully.
C:\Program Files\SweetIM\Messenger\resources moved successfully.
C:\Program Files\SweetIM\Messenger moved successfully.
C:\Program Files\SweetIM moved successfully.
c:\Documents and Settings\Manon\Bureau\ComboFix.exe moved successfully.
c:\Documents and Settings\Manon\Bureau\ToolsCleaner2.exe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\SweetImSetup.exe moved successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\etilqs_D8UdV62fQN6ZLkwrticI scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF3005.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF3970.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF6680.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF671C.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\~DFD7D4.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\XUL.mfl scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully
OTMoveIt3 by OldTimer - Version 1.0.7.1 log created on 11212008_032833
Merci gen-hackman de m'avoir accordé du temps^^
-----------\\ ToolBar S&D 1.2.5 XP/Vista
Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) M processor 1.73GHz )
BIOS : Ver 1.00PARTTBLX
USER : Manon ( Administrator )
BOOT : Normal boot
Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Not Activated)
C:\ (Local Disk) - NTFS - Total:92 Go (Free:10 Go)
D:\ (CD or DVD)
"C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 )
Option : [1] ( 21/11/2008| 2:57 )
-----------\\ Recherche de Fichiers / Dossiers ...
C:\Program Files\Crawler
C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Dealio
C:\Program Files\KaZaA
C:\Program Files\KaZaA\My Shared Folder
\...\{2bae58c2-79f9-45d1-a286-81f911301c3a} - (p2p_energy)
-----------\\ Extensions
(Manon) - {2bae58c2-79f9-45d1-a286-81f911301c3a} => p2p_energy
(Manon) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
(Manon) - {5514CFC3-D9A8-4f1a-8DF1-930EBFB59901} => QuteClassic
-----------\\ [..\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Local Page"="C:\\WINDOWS\\system32\\blank.htm"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
"Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
"Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"
--------------------\\ Recherche d'autres infections
Aucune autre infection trouvée !
1 - "C:\ToolBar SD\TB_1.txt" - 21/11/2008| 3:21 - Option : [1]
-----------\\ Fin du rapport a 3:21:28,07
SUIVANT :
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
File move failed. C:\WINDOWS\WindowsUpdate.log scheduled to be moved on reboot.
File move failed. C:\WINDOWS\wiaservc.log scheduled to be moved on reboot.
File move failed. C:\WINDOWS\wiadebug.log scheduled to be moved on reboot.
File move failed. C:\WINDOWS\Sti_Trace.log scheduled to be moved on reboot.
C:\WINDOWS\SwSys2.bmp moved successfully.
C:\WINDOWS\SwSys1.bmp moved successfully.
C:\WINDOWS\bizpub32.INI moved successfully.
c:\Documents and Settings\Manon\Mes documents\--MANGAS--\MessengerSkinner_setup.exe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\400000a500003i moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\300000003400002i moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\1000000b00002i moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\1000000600002i moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%SystemSystem% moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\TypeSupport moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\Linguistics moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\caps moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\backup moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\Adobe PCD\cache moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\Adobe PCD moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files\Adobe\caps moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files\Adobe\backup moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files\Adobe\Adobe PCD\cache moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files\Adobe\Adobe PCD moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files\Adobe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Required\VersionCue moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Required\plug_ins3d moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Required moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Presets\Workspaces\2-Task-based Workspaces moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Presets\Workspaces\1-Basic Workspaces moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Presets\Workspaces moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Presets moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir% moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile%\Local Settings\Temporary Internet Files\Content.IE5 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile%\Local Settings\Temporary Internet Files moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile%\Local Settings\Temp moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile%\Local Settings\Historique\History.IE5 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile%\Local Settings\Historique moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile%\Local Settings moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile%\Cookies moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile% moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData%\Adobe\TypeSupport moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData%\Adobe\Fonts moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData%\Adobe\Color moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData%\Adobe\CameraRaw\Cache moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData%\Adobe\CameraRaw moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData%\Adobe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData% moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Workflow moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe VanishingPoint CS3\Photoshop moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe VanishingPoint CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Liquify CS3\Photoshop moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Liquify CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Lighting Effects CS3\Photoshop\Lighting Styles moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Lighting Effects CS3\Photoshop moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Lighting Effects CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Filter Gallery CS3\Photoshop moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Filter Gallery CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics\Dictionaries\ATE User Dictionary\all moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics\Dictionaries\ATE User Dictionary moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\all moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics\Dictionaries moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\CameraRaw\Defaults moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\CameraRaw moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Tools moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Styles moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Patterns\PostScript Patterns moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Patterns moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Menu Customization moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Keyboard Shortcuts moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Gradients moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\TRITONE\Process Tritones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\TRITONE\PANTONE(R) Tritones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\TRITONE\Gray Tritones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\TRITONE moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Quadtones\Process Quadtones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Quadtones\PANTONE(R) Quadtones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Quadtones\Gray Quadtones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Quadtones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Duotones\Process Duotones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Duotones\PANTONE(R) Duotones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Duotones\Gray-Black Duotones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Duotones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Custom Shapes moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Curves moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Contours moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Color Swatches moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Channel Mixer moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Brushes moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Black and White moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Actions moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Adobe Photoshop CS3 Settings moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData% moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3\CSDATA moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\Portable.Adobe.Photoshop.CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\400000a500003i moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\300000003400002i moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\1000000b00002i moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\1000000600002i moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%SystemSystem% moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\Linguistics moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\caps moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\backup moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\Adobe PCD\cache moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe\Adobe PCD moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs\Adobe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Fichiers communs moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files\Adobe\caps moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files\Adobe\backup moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files\Adobe\Adobe PCD\cache moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files\Adobe\Adobe PCD moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files\Adobe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Common Files moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Required\VersionCue moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Required\plug_ins3d moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Required moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Presets\Workspaces\2-Task-based Workspaces moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Presets\Workspaces\1-Basic Workspaces moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Presets\Workspaces moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3\Presets moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe\Adobe Photoshop CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir%\Adobe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%ProgramFilesDir% moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile%\Local Settings\Temp moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile%\Local Settings moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%Profile% moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData%\Adobe\TypeSupport moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData%\Adobe\Fonts moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData%\Adobe\Color moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData%\Adobe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%Local AppData% moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Workflow moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe VanishingPoint CS3\Photoshop moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe VanishingPoint CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Liquify CS3\Photoshop moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Liquify CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Lighting Effects CS3\Photoshop\Lighting Styles moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Lighting Effects CS3\Photoshop moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Lighting Effects CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Filter Gallery CS3\Photoshop moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins\Adobe Filter Gallery CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Plugins moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics\Dictionaries\ATE User Dictionary\all moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics\Dictionaries\ATE User Dictionary moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary\all moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics\Dictionaries\Adobe Custom Dictionary moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics\Dictionaries moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Linguistics moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Tools moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Styles moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Patterns\PostScript Patterns moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Patterns moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Menu Customization moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Keyboard Shortcuts moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Gradients moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\TRITONE\Process Tritones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\TRITONE\PANTONE(R) Tritones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\TRITONE\Gray Tritones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\TRITONE moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Quadtones\Process Quadtones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Quadtones\PANTONE(R) Quadtones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Quadtones\Gray Quadtones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Quadtones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Duotones\Process Duotones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Duotones\PANTONE(R) Duotones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Duotones\Gray-Black Duotones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones\Duotones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Duotones moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Custom Shapes moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Curves moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Contours moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Color Swatches moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Channel Mixer moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Brushes moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Black and White moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets\Actions moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Presets moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3\Adobe Photoshop CS3 Settings moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe\Adobe Photoshop CS3 moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData%\Adobe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA\%AppData% moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3\CSDATA moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\Portable.Adobe.Photoshop.CS3 moved successfully.
C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources moved successfully.
C:\Program Files\SweetIM\Toolbars\Internet Explorer moved successfully.
C:\Program Files\SweetIM\Toolbars moved successfully.
C:\Program Files\SweetIM\Messenger\resources\images moved successfully.
C:\Program Files\SweetIM\Messenger\resources moved successfully.
C:\Program Files\SweetIM\Messenger moved successfully.
C:\Program Files\SweetIM moved successfully.
c:\Documents and Settings\Manon\Bureau\ComboFix.exe moved successfully.
c:\Documents and Settings\Manon\Bureau\ToolsCleaner2.exe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\SweetImSetup.exe moved successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\etilqs_D8UdV62fQN6ZLkwrticI scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF3005.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF3970.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF6680.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF671C.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\~DFD7D4.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\XUL.mfl scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully
OTMoveIt3 by OldTimer - Version 1.0.7.1 log created on 11212008_032833
Virus Total now:
http://www.virustotal.com/fr/analisis/7ae00f5ef5c731fda3467090539f94fc
http://www.virustotal.com/fr/analisis/edd967bf9790b818be390df649051377 => virus détecté ici
http://www.virustotal.com/fr/analisis/1112c217853de46e19216affcb3b3c40
je scan les autres cette aprem
a++ ^^
http://www.virustotal.com/fr/analisis/7ae00f5ef5c731fda3467090539f94fc
http://www.virustotal.com/fr/analisis/edd967bf9790b818be390df649051377 => virus détecté ici
http://www.virustotal.com/fr/analisis/1112c217853de46e19216affcb3b3c40
je scan les autres cette aprem
a++ ^^
Salut Manon,
Tu as passé une bonne fin de soirée ?
Ok, très bien pour les rapports. Juste un truc qui me chiffonne :
Voici la liste des fichiers que je t'ai demandé d'analyser :
C:\WINDOWS\System32\GDIPFONTCACHEV1.DAT
C:\WINDOWS\Downloaded Program Files\CamCli.dll
c:\Documents and Settings\Manon\Mes documents\Logiciels\ossvg1004.exe
c:\Documents and Settings\Manon\Mes documents\Logiciels\wsx1_fr.exe
c:\Documents and Settings\Manon\Mes documents\Logiciels\JEUX\1624_eval.exe
Il sort d'où celui là : WebSite_X1.exe : http://www.virustotal.com/fr/analisis/1112c217853de46e19216affcb3b3c40
Je ne le vois dans aucun de tes rapports ! Peux tu me donner son chemin please ?
(quelque chose comme C:\......blablabla...\WebSite_X1.exe)
Quand tu auras poster le reste des analyses virus total je t'envoie la suite (la suppression).
Fais ceci en plus du reste :
> Lance Toolbar-S&D en double-cliquant sur son raccourci.
- Tape sur "2" puis valide en appuyant sur <Entrée>.
Ne ferme pas la fenêtre lors de la suppression !
Un rapport sera généré, poste son contenu sur le forum.
On touche au but.
Le PC va mieux ?
Dpluches
Tu as passé une bonne fin de soirée ?
Ok, très bien pour les rapports. Juste un truc qui me chiffonne :
Voici la liste des fichiers que je t'ai demandé d'analyser :
C:\WINDOWS\System32\GDIPFONTCACHEV1.DAT
C:\WINDOWS\Downloaded Program Files\CamCli.dll
c:\Documents and Settings\Manon\Mes documents\Logiciels\ossvg1004.exe
c:\Documents and Settings\Manon\Mes documents\Logiciels\wsx1_fr.exe
c:\Documents and Settings\Manon\Mes documents\Logiciels\JEUX\1624_eval.exe
Il sort d'où celui là : WebSite_X1.exe : http://www.virustotal.com/fr/analisis/1112c217853de46e19216affcb3b3c40
Je ne le vois dans aucun de tes rapports ! Peux tu me donner son chemin please ?
(quelque chose comme C:\......blablabla...\WebSite_X1.exe)
Quand tu auras poster le reste des analyses virus total je t'envoie la suite (la suppression).
Fais ceci en plus du reste :
> Lance Toolbar-S&D en double-cliquant sur son raccourci.
- Tape sur "2" puis valide en appuyant sur <Entrée>.
Ne ferme pas la fenêtre lors de la suppression !
Un rapport sera généré, poste son contenu sur le forum.
On touche au but.
Le PC va mieux ?
Dpluches
Waw, je suis trop une best XD
J'étais crevée et j'ai pas fait gaffe à ce que j'ai donné à analyser peut-être ://
je l'ai trouvé ici c:\Documents and Settings\Manon\Mes documents\Logiciels\WebSite_X1.exe
c'est quand j'ai voulu analyser le c:\Documents and Settings\Manon\Mes documents\Logiciels\wsx1_fr.exe certainement :/
Nan bah en fait, il veut pas scanner wsx1_fr.exe et donc il scanne website_x1.exe à la place :/
Je vais déplacer web site et réessayer de scanner l'autre...
Bon, il veut toujours pas, c'est toujours l'autre qui s'affiche :/
Hum... en fait, c'est le dossier compressé de website, ceci explique peut-être cela :p
Bon suite des scans
http://www.virustotal.com/fr/analisis/e0f3fa3b95c6e5547849d35eff30fe9a
Le fichier c:\Documents and Settings\Manon\Mes documents\Logiciels\JEUX\1624_eval.exe
ça fait 1h voire plus que je l'ai envoyé, bah ils l'ont toujours pas reçu! c'est peut-être parce qu'il fait 239 Mo, non???
Et sinon, quand je mets l'ordi en veille prolongée, bah ça met pu 3 heures \o/ et la page du mot de passe ne se bloque pas Wouhou!! et j'ai l'impression que les fichiers s'ouvrent plus vite aussi :D
Traduction=> Nette amélioration quoi!!
J'étais crevée et j'ai pas fait gaffe à ce que j'ai donné à analyser peut-être ://
je l'ai trouvé ici c:\Documents and Settings\Manon\Mes documents\Logiciels\WebSite_X1.exe
c'est quand j'ai voulu analyser le c:\Documents and Settings\Manon\Mes documents\Logiciels\wsx1_fr.exe certainement :/
Nan bah en fait, il veut pas scanner wsx1_fr.exe et donc il scanne website_x1.exe à la place :/
Je vais déplacer web site et réessayer de scanner l'autre...
Bon, il veut toujours pas, c'est toujours l'autre qui s'affiche :/
Hum... en fait, c'est le dossier compressé de website, ceci explique peut-être cela :p
Bon suite des scans
http://www.virustotal.com/fr/analisis/e0f3fa3b95c6e5547849d35eff30fe9a
Le fichier c:\Documents and Settings\Manon\Mes documents\Logiciels\JEUX\1624_eval.exe
ça fait 1h voire plus que je l'ai envoyé, bah ils l'ont toujours pas reçu! c'est peut-être parce qu'il fait 239 Mo, non???
Et sinon, quand je mets l'ordi en veille prolongée, bah ça met pu 3 heures \o/ et la page du mot de passe ne se bloque pas Wouhou!! et j'ai l'impression que les fichiers s'ouvrent plus vite aussi :D
Traduction=> Nette amélioration quoi!!
Bon, je l'ai laissé s'envoyer
et il m'a fait ça: Bigger than max permited size / Mayor del tamaño máximo permitido
Fichier trop gros quoi, donc il peut pas l'examiner
J'fais quoi?
et il m'a fait ça: Bigger than max permited size / Mayor del tamaño máximo permitido
Fichier trop gros quoi, donc il peut pas l'examiner
J'fais quoi?
Lol j'étais pas impatiente, ne t'en fais pas ^^
Plus aucune erreur trouvées ac ccleaner :D
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\WINDOWS\Downloaded Program Files\CamCli.dll unregistered successfully.
C:\WINDOWS\Downloaded Program Files\CamCli.dll moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\ossvg1004.exe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\wsx1_fr.exe moved successfully.
File/Folder c:\Documents and Settings\Manon\Mes documents\Logiciels\WebSite_X1.exe not found.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\etilqs_XW9kEMUspisS2IGR6QTa scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF401F.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF4031.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF8644.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF8658.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\XUL.mfl scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully
OTMoveIt3 by OldTimer - Version 1.0.7.1 log created on 11222008_020107
Files moved on Reboot...
File C:\DOCUME~1\Manon\LOCALS~1\Temp\etilqs_XW9kEMUspisS2IGR6QTa not found!
File C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF401F.tmp not found!
File C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF4031.tmp not found!
File C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF8644.tmp not found!
File C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF8658.tmp not found!
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_001_ moved successfully.
C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_002_ moved successfully.
C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_003_ moved successfully.
C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_MAP_ moved successfully.
C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\urlclassifier3.sqlite moved successfully.
C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\XUL.mfl moved successfully.
Plus aucune erreur trouvées ac ccleaner :D
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
C:\WINDOWS\Downloaded Program Files\CamCli.dll unregistered successfully.
C:\WINDOWS\Downloaded Program Files\CamCli.dll moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\ossvg1004.exe moved successfully.
c:\Documents and Settings\Manon\Mes documents\Logiciels\wsx1_fr.exe moved successfully.
File/Folder c:\Documents and Settings\Manon\Mes documents\Logiciels\WebSite_X1.exe not found.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\etilqs_XW9kEMUspisS2IGR6QTa scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF401F.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF4031.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF8644.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF8658.tmp scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\XUL.mfl scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully
OTMoveIt3 by OldTimer - Version 1.0.7.1 log created on 11222008_020107
Files moved on Reboot...
File C:\DOCUME~1\Manon\LOCALS~1\Temp\etilqs_XW9kEMUspisS2IGR6QTa not found!
File C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF401F.tmp not found!
File C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF4031.tmp not found!
File C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF8644.tmp not found!
File C:\DOCUME~1\Manon\LOCALS~1\Temp\~DF8658.tmp not found!
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_001_ moved successfully.
C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_002_ moved successfully.
C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_003_ moved successfully.
C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\Cache\_CACHE_MAP_ moved successfully.
C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\urlclassifier3.sqlite moved successfully.
C:\Documents and Settings\Manon\Local Settings\Application Data\Mozilla\Firefox\Profiles\pi7wt76v.default\XUL.mfl moved successfully.
Salut Manon,
mais je ne m'en fais pas :))
C'est toujours un plaisir de converser avec toi.
Bon,
bien joué pour les suppressions.
Et comment va le PC ?
Si tout va bien alors on termine (sinon dis moi et laisse ce poste en suspend) :
> Installe IE7 stp : https://www.01net.com/telecharger/windows/Internet/navigateur/fiches/33081.html
> Peux-tu vérifier ta console JAVA ici ? : https://www.java.com/fr/download/uninstalltool.jsp, et installer la nouvelle version si besoin est (dans ce cas désinstalle avant l'ancienne version).
Pour info. ou en cas de problème : http://assiste.com.free.fr/p/abc/c/anti_java.html
> Mets à jour Acrobat si ce n'est pas le cas (désinstalle avant la version antérieure) : https://get2.adobe.com/reader/otherversions/
> Télécharge et installe Update Checker : https://filehippo.com/windows/tuning-utilities/
- Lance le programme. Une page web de ce type va s'ouvrir.
- Fais les mises à jour de tous les logiciels proposés pour Update. Je ne te conseille pas de faire celles pour les versions béta (elles peuvent être instables).
- Fais un copier/coller de la liste de éléments "Updates". Puis poste la sur le forum.
- Une fois les mises à jour effectuées, relance ton PC.
Tuto si problèmes : http://www.commentcamarche.net/faq/sujet 9908 update checker vos logiciels sont ils a jour
> Télécharge ToolsCleaner : https://www.commentcamarche.net/telecharger/securite/22061-toolscleaner/ sur ton bureau pour supprimer les boîtes de Pandore.
- Clique sur Recherche et laisse le scan agir ...
- Clique sur Suppression pour finaliser (tu peux, si tu le souhaites, te servir des Options facultatives)
- Clique sur Quitter pour obtenir le rapport et poste le dans ta réponse (TCleaner.txt se trouve à la racine de ton disque dur (C:\)).
- Supprime ToolsCleaner ensuite (il n'est pas installé dans Ajout/suppression de programmes. C'est un fichier directement exécutable : pas d'installation).
> Télécharge et installe Easy Cleaner : https://www.01net.com/telecharger/windows/Utilitaire/registre/fiches/8351.html
(lien miroir : https://www.clubic.com/telecharger-fiche11170-easycleaner.html )
- Lance le programme puis clique sur <Registre> puis sur <Trouver>.
- A la fin du scan clique sur <Supprime tout> puis confirme par <Oui> puis quitte le programme.
Si besoin tuto ici : https://www.pcparadise.fr
et http://www.6ma.fr/tuto/easycleaner-nettoyer-windows-des-elements-obsoletes/
> Tu peux aussi vider ta corbeille.
> Si nous avons utilisé MalwaresByte's Anti-Malware : vide sa quarantaine.
- Lance le programme puis clique sur <Quarantaine>.
- Sélectionne tous les éléments puis clique sur <supprime>.
- Quitte la programme.
> Idem pour ton antivirus : vide sa quarantaine si ce n'est pas déjà fait...
> Désactive et réactive la restauration de système, pour cela : suis les instructions de ce lien : http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fr_docid/20020830101856924
PS : Si tu est sous Vista c'est ce lien : http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/4f60eedf1156c8068525695b005ca288/c066b2e9a50cc948802572870032b170?OpenDocument
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Quelques conseils et recommandations pour l'avenir :
> Passe un coup d'AGV et/ou de MalwareByte's Anti-Malware et de Ccleaner de temps en temps (1 fois par semaine à 1 fois par mois, suivant l'utilisation que tu fais de ton PC. Tu peux aussi décocher la casse dans l’onglet "Options" puis clique sur "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier temp de Windows, plus vieux que 48 heures").
- Utilise aussi tes autres logiciels de protection (scannes antivirus, antispywares...). N'oublie pas de faire les mises à jour avant de les utiliser.
- Pense aussi à faire une défragmentation de tes disques durs de temps en temps (garde suffisamment d'espace sur C:\ (1/3 de libre pour être à l'aise))
> Pour bien protéger ton PC :
[1 seul Antivirus] + [1 seul Pare feu (/!\ les routeurs et box en possèdent un)] + [Quelques Antispywares] + [Mises à Jour récentes Windows et Logiciels de Protection] + [Utilisation de Firefox -ou autres- (Internet Explorer présente des failles de sécurité qui mettent longtemps avant d'être corrigées mais il faut absolument le conserver pour les mises à jour Windows)] + [Utilisation du PC en mode Invité (= limité). Lors d'une infection en mode administrateur le PC est beaucoup plus vulnérable. Voir ICI]
PS : En fait la meilleure des protections c'est toi même : ce que tu fais avec ton PC : où tu surfes, télécharges...ect....
Les virus utilisent les failles de ton PC pour infecter un système. Info : http://assiste.com.free.fr/p/abc/a/zombies_et_botnets.html
> Quelques liens utiles :
- http://www.commentcamarche.net/faq/sujet 2432 securite proteger un ordinateur contre les malwares d internet
- https://sebsauvage.net/safehex.html
- https://www.zebulon.fr/telechargements/securite/protection-donnees-personnelles/spywareblaster.html (= petit logiciel qui bloque l'installation d'activ-X nuisibles au PC. Fonctionne en arrière plan)
Voila,
Bonne lecture....
A+
mais je ne m'en fais pas :))
C'est toujours un plaisir de converser avec toi.
Bon,
bien joué pour les suppressions.
Et comment va le PC ?
Si tout va bien alors on termine (sinon dis moi et laisse ce poste en suspend) :
> Installe IE7 stp : https://www.01net.com/telecharger/windows/Internet/navigateur/fiches/33081.html
> Peux-tu vérifier ta console JAVA ici ? : https://www.java.com/fr/download/uninstalltool.jsp, et installer la nouvelle version si besoin est (dans ce cas désinstalle avant l'ancienne version).
Pour info. ou en cas de problème : http://assiste.com.free.fr/p/abc/c/anti_java.html
> Mets à jour Acrobat si ce n'est pas le cas (désinstalle avant la version antérieure) : https://get2.adobe.com/reader/otherversions/
> Télécharge et installe Update Checker : https://filehippo.com/windows/tuning-utilities/
- Lance le programme. Une page web de ce type va s'ouvrir.
- Fais les mises à jour de tous les logiciels proposés pour Update. Je ne te conseille pas de faire celles pour les versions béta (elles peuvent être instables).
- Fais un copier/coller de la liste de éléments "Updates". Puis poste la sur le forum.
- Une fois les mises à jour effectuées, relance ton PC.
Tuto si problèmes : http://www.commentcamarche.net/faq/sujet 9908 update checker vos logiciels sont ils a jour
> Télécharge ToolsCleaner : https://www.commentcamarche.net/telecharger/securite/22061-toolscleaner/ sur ton bureau pour supprimer les boîtes de Pandore.
- Clique sur Recherche et laisse le scan agir ...
- Clique sur Suppression pour finaliser (tu peux, si tu le souhaites, te servir des Options facultatives)
- Clique sur Quitter pour obtenir le rapport et poste le dans ta réponse (TCleaner.txt se trouve à la racine de ton disque dur (C:\)).
- Supprime ToolsCleaner ensuite (il n'est pas installé dans Ajout/suppression de programmes. C'est un fichier directement exécutable : pas d'installation).
> Télécharge et installe Easy Cleaner : https://www.01net.com/telecharger/windows/Utilitaire/registre/fiches/8351.html
(lien miroir : https://www.clubic.com/telecharger-fiche11170-easycleaner.html )
- Lance le programme puis clique sur <Registre> puis sur <Trouver>.
- A la fin du scan clique sur <Supprime tout> puis confirme par <Oui> puis quitte le programme.
Si besoin tuto ici : https://www.pcparadise.fr
et http://www.6ma.fr/tuto/easycleaner-nettoyer-windows-des-elements-obsoletes/
> Tu peux aussi vider ta corbeille.
> Si nous avons utilisé MalwaresByte's Anti-Malware : vide sa quarantaine.
- Lance le programme puis clique sur <Quarantaine>.
- Sélectionne tous les éléments puis clique sur <supprime>.
- Quitte la programme.
> Idem pour ton antivirus : vide sa quarantaine si ce n'est pas déjà fait...
> Désactive et réactive la restauration de système, pour cela : suis les instructions de ce lien : http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/fr_docid/20020830101856924
PS : Si tu est sous Vista c'est ce lien : http://service1.symantec.com/SUPPORT/INTER/tsgeninfointl.nsf/4f60eedf1156c8068525695b005ca288/c066b2e9a50cc948802572870032b170?OpenDocument
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Quelques conseils et recommandations pour l'avenir :
> Passe un coup d'AGV et/ou de MalwareByte's Anti-Malware et de Ccleaner de temps en temps (1 fois par semaine à 1 fois par mois, suivant l'utilisation que tu fais de ton PC. Tu peux aussi décocher la casse dans l’onglet "Options" puis clique sur "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier temp de Windows, plus vieux que 48 heures").
- Utilise aussi tes autres logiciels de protection (scannes antivirus, antispywares...). N'oublie pas de faire les mises à jour avant de les utiliser.
- Pense aussi à faire une défragmentation de tes disques durs de temps en temps (garde suffisamment d'espace sur C:\ (1/3 de libre pour être à l'aise))
> Pour bien protéger ton PC :
[1 seul Antivirus] + [1 seul Pare feu (/!\ les routeurs et box en possèdent un)] + [Quelques Antispywares] + [Mises à Jour récentes Windows et Logiciels de Protection] + [Utilisation de Firefox -ou autres- (Internet Explorer présente des failles de sécurité qui mettent longtemps avant d'être corrigées mais il faut absolument le conserver pour les mises à jour Windows)] + [Utilisation du PC en mode Invité (= limité). Lors d'une infection en mode administrateur le PC est beaucoup plus vulnérable. Voir ICI]
PS : En fait la meilleure des protections c'est toi même : ce que tu fais avec ton PC : où tu surfes, télécharges...ect....
Les virus utilisent les failles de ton PC pour infecter un système. Info : http://assiste.com.free.fr/p/abc/a/zombies_et_botnets.html
> Quelques liens utiles :
- http://www.commentcamarche.net/faq/sujet 2432 securite proteger un ordinateur contre les malwares d internet
- https://sebsauvage.net/safehex.html
- https://www.zebulon.fr/telechargements/securite/protection-donnees-personnelles/spywareblaster.html (= petit logiciel qui bloque l'installation d'activ-X nuisibles au PC. Fonctionne en arrière plan)
Voila,
Bonne lecture....
A+
Youhou désolée de l'attente de ma réponse...
le lien pour Update Checker : http://www.imagebam.com/image/b02e0920651697/
J'ai pas tout installé, c'est normal. Il est pas mal ce logiciel n'empêche, moi qui n'aime pas installer les mises à jour ! ^.^
[ Rapport ToolsCleaner version 2.2.7 (par A.Rothstein & dj QUIOU) ]
-->- Recherche:
C:\TB.txt: trouvé !
C:\_OtMoveIt: trouvé !
C:\Toolbar SD: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\Manon\Mes documents\Logiciels\JEUX\HijackThis.lnk: trouvé !
C:\Documents and Settings\Manon\Mes documents\Logiciels\JEUX\HJTInstall.exe: trouvé !
C:\Documents and Settings\Manon\Mes documents\Logiciels\JEUX\ToolBarSD.exe: trouvé !
C:\Documents and Settings\Manon\Mes documents\Logiciels\JEUX\OTMoveIt3.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
C:\WINDOWS\NIRCMD.exe: trouvé !
C:\WINDOWS\Downloaded Program Files\*.msnfix: trouvé !
C:\_OTMoveIt\MovedFiles\11212008_032833\Documents and Settings\Manon\Bureau\ComboFix.exe: trouvé !
---------------------------------
-->- Suppression:
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\Manon\Mes documents\Logiciels\JEUX\HijackThis.lnk: supprimé !
C:\Documents and Settings\Manon\Mes documents\Logiciels\JEUX\HJTInstall.exe: supprimé !
C:\Documents and Settings\Manon\Mes documents\Logiciels\JEUX\ToolBarSD.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\_OTMoveIt\MovedFiles\11212008_032833\Documents and Settings\Manon\Bureau\ComboFix.exe: ERREUR DE SUPPRESSION !!
C:\TB.txt: supprimé !
C:\Documents and Settings\Manon\Mes documents\Logiciels\JEUX\OTMoveIt3.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\WINDOWS\NIRCMD.exe: supprimé !
C:\WINDOWS\Downloaded Program Files\*.msnfix: ERREUR DE SUPPRESSION !!
C:\_OtMoveIt: supprimé !
C:\Toolbar SD: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !
J'avais pas de quarantainse sur malware
et non plus sur mon antivirus... mais ça c'est normal, j'en ai pas depuis que j'ai désinfecté le pc avec toi :/
Avira ne veut pus revenir >_____<
le lien pour Update Checker : http://www.imagebam.com/image/b02e0920651697/
J'ai pas tout installé, c'est normal. Il est pas mal ce logiciel n'empêche, moi qui n'aime pas installer les mises à jour ! ^.^
[ Rapport ToolsCleaner version 2.2.7 (par A.Rothstein & dj QUIOU) ]
-->- Recherche:
C:\TB.txt: trouvé !
C:\_OtMoveIt: trouvé !
C:\Toolbar SD: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
C:\Documents and Settings\Manon\Mes documents\Logiciels\JEUX\HijackThis.lnk: trouvé !
C:\Documents and Settings\Manon\Mes documents\Logiciels\JEUX\HJTInstall.exe: trouvé !
C:\Documents and Settings\Manon\Mes documents\Logiciels\JEUX\ToolBarSD.exe: trouvé !
C:\Documents and Settings\Manon\Mes documents\Logiciels\JEUX\OTMoveIt3.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis: trouvé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
C:\WINDOWS\NIRCMD.exe: trouvé !
C:\WINDOWS\Downloaded Program Files\*.msnfix: trouvé !
C:\_OTMoveIt\MovedFiles\11212008_032833\Documents and Settings\Manon\Bureau\ComboFix.exe: trouvé !
---------------------------------
-->- Suppression:
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
C:\Documents and Settings\Manon\Mes documents\Logiciels\JEUX\HijackThis.lnk: supprimé !
C:\Documents and Settings\Manon\Mes documents\Logiciels\JEUX\HJTInstall.exe: supprimé !
C:\Documents and Settings\Manon\Mes documents\Logiciels\JEUX\ToolBarSD.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
C:\_OTMoveIt\MovedFiles\11212008_032833\Documents and Settings\Manon\Bureau\ComboFix.exe: ERREUR DE SUPPRESSION !!
C:\TB.txt: supprimé !
C:\Documents and Settings\Manon\Mes documents\Logiciels\JEUX\OTMoveIt3.exe: supprimé !
C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
C:\WINDOWS\NIRCMD.exe: supprimé !
C:\WINDOWS\Downloaded Program Files\*.msnfix: ERREUR DE SUPPRESSION !!
C:\_OtMoveIt: supprimé !
C:\Toolbar SD: supprimé !
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
C:\Program Files\Trend Micro\HijackThis: supprimé !
J'avais pas de quarantainse sur malware
et non plus sur mon antivirus... mais ça c'est normal, j'en ai pas depuis que j'ai désinfecté le pc avec toi :/
Avira ne veut pus revenir >_____<
Bon c'est bon, j'ai dl un autre avira et il fonctionne \o/
Merci Diid pour tout, j'espère que tu trouveras rien d'autre dans le dernier scan :D
Là je suis en train de faire une analyse de virus de mon ordi par avira je te dis s'il trouve quelque chose...
Merci Diid pour tout, j'espère que tu trouveras rien d'autre dans le dernier scan :D
Là je suis en train de faire une analyse de virus de mon ordi par avira je te dis s'il trouve quelque chose...
En fait... j'ai dû oublier de supprimer les fichiers infectés -_-
Avira AntiVir Personal
Date de création du fichier de rapport : dimanche 14 décembre 2008 16:10
La recherche porte sur 1085187 souches de virus.
Détenteur de la licence :Avira AntiVir PersonalEdition Classic
Numéro de série : 0000149996-ADJIE-0001
Plateforme : Windows XP
Version de Windows :(Service Pack 2) [5.1.2600]
Mode Boot : Démarré normalement
Identifiant : SYSTEM
Nom de l'ordinateur :MANON1
Informations de version :
BUILD.DAT : 8.2.0.52 16931 Bytes 02/12/2008 14:55:00
AVSCAN.EXE : 8.1.4.10 315649 Bytes 18/11/2008 08:21:00
AVSCAN.DLL : 8.1.4.1 49921 Bytes 21/07/2008 13:44:27
LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:16
LUKERES.DLL : 8.1.4.0 13057 Bytes 04/07/2008 07:30:27
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 11:30:36
ANTIVIR1.VDF : 7.1.0.197 1170432 Bytes 07/12/2008 14:55:59
ANTIVIR2.VDF : 7.1.0.198 2048 Bytes 07/12/2008 14:56:00
ANTIVIR3.VDF : 7.1.0.229 137728 Bytes 12/12/2008 14:56:01
Version du moteur: 8.2.0.45
AEVDF.DLL : 8.1.0.6 102772 Bytes 14/10/2008 10:05:56
AESCRIPT.DLL : 8.1.1.19 336252 Bytes 14/12/2008 14:56:10
AESCN.DLL : 8.1.1.5 123251 Bytes 07/11/2008 15:06:41
AERDL.DLL : 8.1.1.3 438645 Bytes 04/11/2008 13:58:38
AEPACK.DLL : 8.1.3.4 393591 Bytes 11/11/2008 09:41:39
AEOFFICE.DLL : 8.1.0.33 196987 Bytes 14/12/2008 14:56:08
AEHEUR.DLL : 8.1.0.75 1524087 Bytes 14/12/2008 14:56:07
AEHELP.DLL : 8.1.2.0 119159 Bytes 14/12/2008 14:56:03
AEGEN.DLL : 8.1.1.8 323956 Bytes 14/12/2008 14:56:03
AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 10:05:56
AECORE.DLL : 8.1.5.2 172405 Bytes 14/12/2008 14:56:02
AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 10:05:56
AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:02
AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:27:58
AVREP.DLL : 8.0.0.2 98344 Bytes 31/07/2008 12:02:15
AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:37
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:19
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:46
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:36
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:07
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 04/07/2008 07:23:16
RCTEXT.DLL : 8.0.52.1 86273 Bytes 17/07/2008 10:08:43
Configuration pour la recherche actuelle :
Nom de la tâche..................: Contrôle intégral du système
Fichier de configuration.........: c:\program files\avira\antivir personaledition classic\sysscan.avp
Documentation....................: bas
Action principale................: interactif
Action secondaire................: ignorer
Recherche sur les secteurs d'amorçage maître: marche
Recherche sur les secteurs d'amorçage: marche
Secteurs d'amorçage..............: C:,
Recherche dans les programmes actifs: marche
Recherche en cours sur l'enregistrement: marche
Recherche de Rootkits............: arrêt
Fichier mode de recherche........: Sélection de fichiers intelligente
Recherche sur les archives.......: marche
Limiter la profondeur de récursivité: 20
Archive Smart Extensions.........: marche
Heuristique de macrovirus........: marche
Heuristique fichier..............: moyen
Début de la recherche : dimanche 14 décembre 2008 16:10
La recherche sur les processus démarrés commence :
Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avcenter.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avgnt.exe' - '1' module(s) sont contrôlés
Processus de recherche 'usnsvc.exe' - '1' module(s) sont contrôlés
Processus de recherche 'BTSTAC~1.EXE' - '1' module(s) sont contrôlés
Processus de recherche 'wuauclt.exe' - '1' module(s) sont contrôlés
Processus de recherche 'msnmsgr.exe' - '1' module(s) sont contrôlés
Processus de recherche 'TFncKy.exe' - '1' module(s) sont contrôlés
Processus de recherche 'mirc.exe' - '1' module(s) sont contrôlés
Processus de recherche 'wmplayer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'BTTray.exe' - '1' module(s) sont contrôlés
Processus de recherche 'UpdateChecker.exe' - '1' module(s) sont contrôlés
Processus de recherche 'TeaTimer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'fdm.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ctfmon.exe' - '1' module(s) sont contrôlés
Processus de recherche 'TOSCDSPD.exe' - '1' module(s) sont contrôlés
Processus de recherche 'jusched.exe' - '1' module(s) sont contrôlés
Processus de recherche 'TPSBattM.exe' - '1' module(s) sont contrôlés
Processus de recherche 'Spywareterminatorshield.Exe' - '1' module(s) sont contrôlés
Processus de recherche 'ApntEx.exe' - '1' module(s) sont contrôlés
Processus de recherche 'tfswctrl.exe' - '1' module(s) sont contrôlés
Processus de recherche 'FnKeyHook.exe' - '1' module(s) sont contrôlés
Processus de recherche 'SmoothView.exe' - '1' module(s) sont contrôlés
Processus de recherche 'TPSMain.exe' - '1' module(s) sont contrôlés
Processus de recherche 'TCtrlIOHook.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ZoomingHook.exe' - '1' module(s) sont contrôlés
Processus de recherche 'PadExe.exe' - '1' module(s) sont contrôlés
Processus de recherche 'TPTray.exe' - '1' module(s) sont contrôlés
Processus de recherche 'CeEKey.exe' - '1' module(s) sont contrôlés
Processus de recherche 'Apoint.exe' - '1' module(s) sont contrôlés
Processus de recherche 'agrsmmsg.exe' - '1' module(s) sont contrôlés
Processus de recherche 'TvsTray.exe' - '1' module(s) sont contrôlés
Processus de recherche 'atiptaxx.exe' - '1' module(s) sont contrôlés
Processus de recherche 'explorer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ati2evxx.exe' - '1' module(s) sont contrôlés
Processus de recherche 'alg.exe' - '1' module(s) sont contrôlés
Processus de recherche 'wdfmgr.exe' - '1' module(s) sont contrôlés
Processus de recherche 'sp_rsser.exe' - '1' module(s) sont contrôlés
Processus de recherche 'GoogleUpdaterService.exe' - '1' module(s) sont contrôlés
Processus de recherche 'CFSvcs.exe' - '1' module(s) sont contrôlés
Processus de recherche 'btwdins.exe' - '1' module(s) sont contrôlés
Processus de recherche 'mDNSResponder.exe' - '1' module(s) sont contrôlés
Processus de recherche 'AppleMobileDeviceService.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avguard.exe' - '1' module(s) sont contrôlés
Processus de recherche 'a2service.exe' - '1' module(s) sont contrôlés
Processus de recherche 'sched.exe' - '1' module(s) sont contrôlés
Processus de recherche 'spoolsv.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ati2evxx.exe' - '1' module(s) sont contrôlés
Processus de recherche 'lsass.exe' - '1' module(s) sont contrôlés
Processus de recherche 'services.exe' - '1' module(s) sont contrôlés
Processus de recherche 'winlogon.exe' - '1' module(s) sont contrôlés
Processus de recherche 'csrss.exe' - '1' module(s) sont contrôlés
Processus de recherche 'smss.exe' - '1' module(s) sont contrôlés
'58' processus ont été contrôlés avec '58' modules
La recherche sur les secteurs d'amorçage maître commence :
Secteur d'amorçage maître HD0
[INFO] Aucun virus trouvé !
La recherche sur les secteurs d'amorçage commence :
Secteur d'amorçage 'C:\'
[INFO] Aucun virus trouvé !
La recherche sur les renvois aux fichiers exécutables (registre) commence.
Le registre a été contrôlé ( '61' fichiers).
La recherche sur les fichiers sélectionnés commence :
Recherche débutant dans 'C:\'
C:\hiberfil.sys
[AVERTISSEMENT] Impossible d'ouvrir le fichier !
C:\pagefile.sys
[AVERTISSEMENT] Impossible d'ouvrir le fichier !
C:\Documents and Settings\Manon\Mes documents\Ma musique\Lime wire\Pierrot Et Boutitou Soundtrackrar
[0] Type d'archive: RAR
--> Setup.exe
[RESULTAT] Contient le modèle de détection du rootkit RKIT/Agent.eii.142
[REMARQUE] Fichier supprimé.
C:\Documents and Settings\Manon\Mes documents\Ma musique\Mangas\Ayashi no Ceres - Blowing from the South.mp3
[RESULTAT] Contient le modèle de détection de l'exploit EXP/ASF.GetCodec.Gen
[REMARQUE] Fichier supprimé.
Fin de la recherche : dimanche 14 décembre 2008 21:37
Temps nécessaire: 5:26:58 Heure(s)
La recherche a été effectuée intégralement
9014 Les répertoires ont été contrôlés
507320 Des fichiers ont été contrôlés
2 Des virus ou programmes indésirables ont été trouvés
0 Des fichiers ont été classés comme suspects
2 Des fichiers ont été supprimés
0 Des virus ou programmes indésirables ont été réparés
0 Les fichiers ont été déplacés dans la quarantaine
0 Les fichiers ont été renommés
2 Impossible de contrôler des fichiers
507316 Fichiers non infectés
8765 Les archives ont été contrôlées
2 Avertissements
2 Consignes
Avira AntiVir Personal
Date de création du fichier de rapport : dimanche 14 décembre 2008 16:10
La recherche porte sur 1085187 souches de virus.
Détenteur de la licence :Avira AntiVir PersonalEdition Classic
Numéro de série : 0000149996-ADJIE-0001
Plateforme : Windows XP
Version de Windows :(Service Pack 2) [5.1.2600]
Mode Boot : Démarré normalement
Identifiant : SYSTEM
Nom de l'ordinateur :MANON1
Informations de version :
BUILD.DAT : 8.2.0.52 16931 Bytes 02/12/2008 14:55:00
AVSCAN.EXE : 8.1.4.10 315649 Bytes 18/11/2008 08:21:00
AVSCAN.DLL : 8.1.4.1 49921 Bytes 21/07/2008 13:44:27
LUKE.DLL : 8.1.4.5 164097 Bytes 12/06/2008 12:44:16
LUKERES.DLL : 8.1.4.0 13057 Bytes 04/07/2008 07:30:27
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 11:30:36
ANTIVIR1.VDF : 7.1.0.197 1170432 Bytes 07/12/2008 14:55:59
ANTIVIR2.VDF : 7.1.0.198 2048 Bytes 07/12/2008 14:56:00
ANTIVIR3.VDF : 7.1.0.229 137728 Bytes 12/12/2008 14:56:01
Version du moteur: 8.2.0.45
AEVDF.DLL : 8.1.0.6 102772 Bytes 14/10/2008 10:05:56
AESCRIPT.DLL : 8.1.1.19 336252 Bytes 14/12/2008 14:56:10
AESCN.DLL : 8.1.1.5 123251 Bytes 07/11/2008 15:06:41
AERDL.DLL : 8.1.1.3 438645 Bytes 04/11/2008 13:58:38
AEPACK.DLL : 8.1.3.4 393591 Bytes 11/11/2008 09:41:39
AEOFFICE.DLL : 8.1.0.33 196987 Bytes 14/12/2008 14:56:08
AEHEUR.DLL : 8.1.0.75 1524087 Bytes 14/12/2008 14:56:07
AEHELP.DLL : 8.1.2.0 119159 Bytes 14/12/2008 14:56:03
AEGEN.DLL : 8.1.1.8 323956 Bytes 14/12/2008 14:56:03
AEEMU.DLL : 8.1.0.9 393588 Bytes 14/10/2008 10:05:56
AECORE.DLL : 8.1.5.2 172405 Bytes 14/12/2008 14:56:02
AEBB.DLL : 8.1.0.3 53618 Bytes 14/10/2008 10:05:56
AVWINLL.DLL : 1.0.0.12 15105 Bytes 09/07/2008 08:40:02
AVPREF.DLL : 8.0.2.0 38657 Bytes 16/05/2008 09:27:58
AVREP.DLL : 8.0.0.2 98344 Bytes 31/07/2008 12:02:15
AVREG.DLL : 8.0.0.1 33537 Bytes 09/05/2008 11:26:37
AVARKT.DLL : 1.0.0.23 307457 Bytes 12/02/2008 08:29:19
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12/06/2008 12:27:46
SQLITE3.DLL : 3.3.17.1 339968 Bytes 22/01/2008 17:28:02
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12/06/2008 12:49:36
NETNT.DLL : 8.0.0.1 7937 Bytes 25/01/2008 12:05:07
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 04/07/2008 07:23:16
RCTEXT.DLL : 8.0.52.1 86273 Bytes 17/07/2008 10:08:43
Configuration pour la recherche actuelle :
Nom de la tâche..................: Contrôle intégral du système
Fichier de configuration.........: c:\program files\avira\antivir personaledition classic\sysscan.avp
Documentation....................: bas
Action principale................: interactif
Action secondaire................: ignorer
Recherche sur les secteurs d'amorçage maître: marche
Recherche sur les secteurs d'amorçage: marche
Secteurs d'amorçage..............: C:,
Recherche dans les programmes actifs: marche
Recherche en cours sur l'enregistrement: marche
Recherche de Rootkits............: arrêt
Fichier mode de recherche........: Sélection de fichiers intelligente
Recherche sur les archives.......: marche
Limiter la profondeur de récursivité: 20
Archive Smart Extensions.........: marche
Heuristique de macrovirus........: marche
Heuristique fichier..............: moyen
Début de la recherche : dimanche 14 décembre 2008 16:10
La recherche sur les processus démarrés commence :
Processus de recherche 'avscan.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avcenter.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avgnt.exe' - '1' module(s) sont contrôlés
Processus de recherche 'usnsvc.exe' - '1' module(s) sont contrôlés
Processus de recherche 'BTSTAC~1.EXE' - '1' module(s) sont contrôlés
Processus de recherche 'wuauclt.exe' - '1' module(s) sont contrôlés
Processus de recherche 'msnmsgr.exe' - '1' module(s) sont contrôlés
Processus de recherche 'TFncKy.exe' - '1' module(s) sont contrôlés
Processus de recherche 'mirc.exe' - '1' module(s) sont contrôlés
Processus de recherche 'wmplayer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'BTTray.exe' - '1' module(s) sont contrôlés
Processus de recherche 'UpdateChecker.exe' - '1' module(s) sont contrôlés
Processus de recherche 'TeaTimer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'fdm.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ctfmon.exe' - '1' module(s) sont contrôlés
Processus de recherche 'TOSCDSPD.exe' - '1' module(s) sont contrôlés
Processus de recherche 'jusched.exe' - '1' module(s) sont contrôlés
Processus de recherche 'TPSBattM.exe' - '1' module(s) sont contrôlés
Processus de recherche 'Spywareterminatorshield.Exe' - '1' module(s) sont contrôlés
Processus de recherche 'ApntEx.exe' - '1' module(s) sont contrôlés
Processus de recherche 'tfswctrl.exe' - '1' module(s) sont contrôlés
Processus de recherche 'FnKeyHook.exe' - '1' module(s) sont contrôlés
Processus de recherche 'SmoothView.exe' - '1' module(s) sont contrôlés
Processus de recherche 'TPSMain.exe' - '1' module(s) sont contrôlés
Processus de recherche 'TCtrlIOHook.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ZoomingHook.exe' - '1' module(s) sont contrôlés
Processus de recherche 'PadExe.exe' - '1' module(s) sont contrôlés
Processus de recherche 'TPTray.exe' - '1' module(s) sont contrôlés
Processus de recherche 'CeEKey.exe' - '1' module(s) sont contrôlés
Processus de recherche 'Apoint.exe' - '1' module(s) sont contrôlés
Processus de recherche 'agrsmmsg.exe' - '1' module(s) sont contrôlés
Processus de recherche 'TvsTray.exe' - '1' module(s) sont contrôlés
Processus de recherche 'atiptaxx.exe' - '1' module(s) sont contrôlés
Processus de recherche 'explorer.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ati2evxx.exe' - '1' module(s) sont contrôlés
Processus de recherche 'alg.exe' - '1' module(s) sont contrôlés
Processus de recherche 'wdfmgr.exe' - '1' module(s) sont contrôlés
Processus de recherche 'sp_rsser.exe' - '1' module(s) sont contrôlés
Processus de recherche 'GoogleUpdaterService.exe' - '1' module(s) sont contrôlés
Processus de recherche 'CFSvcs.exe' - '1' module(s) sont contrôlés
Processus de recherche 'btwdins.exe' - '1' module(s) sont contrôlés
Processus de recherche 'mDNSResponder.exe' - '1' module(s) sont contrôlés
Processus de recherche 'AppleMobileDeviceService.exe' - '1' module(s) sont contrôlés
Processus de recherche 'avguard.exe' - '1' module(s) sont contrôlés
Processus de recherche 'a2service.exe' - '1' module(s) sont contrôlés
Processus de recherche 'sched.exe' - '1' module(s) sont contrôlés
Processus de recherche 'spoolsv.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'svchost.exe' - '1' module(s) sont contrôlés
Processus de recherche 'ati2evxx.exe' - '1' module(s) sont contrôlés
Processus de recherche 'lsass.exe' - '1' module(s) sont contrôlés
Processus de recherche 'services.exe' - '1' module(s) sont contrôlés
Processus de recherche 'winlogon.exe' - '1' module(s) sont contrôlés
Processus de recherche 'csrss.exe' - '1' module(s) sont contrôlés
Processus de recherche 'smss.exe' - '1' module(s) sont contrôlés
'58' processus ont été contrôlés avec '58' modules
La recherche sur les secteurs d'amorçage maître commence :
Secteur d'amorçage maître HD0
[INFO] Aucun virus trouvé !
La recherche sur les secteurs d'amorçage commence :
Secteur d'amorçage 'C:\'
[INFO] Aucun virus trouvé !
La recherche sur les renvois aux fichiers exécutables (registre) commence.
Le registre a été contrôlé ( '61' fichiers).
La recherche sur les fichiers sélectionnés commence :
Recherche débutant dans 'C:\'
C:\hiberfil.sys
[AVERTISSEMENT] Impossible d'ouvrir le fichier !
C:\pagefile.sys
[AVERTISSEMENT] Impossible d'ouvrir le fichier !
C:\Documents and Settings\Manon\Mes documents\Ma musique\Lime wire\Pierrot Et Boutitou Soundtrackrar
[0] Type d'archive: RAR
--> Setup.exe
[RESULTAT] Contient le modèle de détection du rootkit RKIT/Agent.eii.142
[REMARQUE] Fichier supprimé.
C:\Documents and Settings\Manon\Mes documents\Ma musique\Mangas\Ayashi no Ceres - Blowing from the South.mp3
[RESULTAT] Contient le modèle de détection de l'exploit EXP/ASF.GetCodec.Gen
[REMARQUE] Fichier supprimé.
Fin de la recherche : dimanche 14 décembre 2008 21:37
Temps nécessaire: 5:26:58 Heure(s)
La recherche a été effectuée intégralement
9014 Les répertoires ont été contrôlés
507320 Des fichiers ont été contrôlés
2 Des virus ou programmes indésirables ont été trouvés
0 Des fichiers ont été classés comme suspects
2 Des fichiers ont été supprimés
0 Des virus ou programmes indésirables ont été réparés
0 Les fichiers ont été déplacés dans la quarantaine
0 Les fichiers ont été renommés
2 Impossible de contrôler des fichiers
507316 Fichiers non infectés
8765 Les archives ont été contrôlées
2 Avertissements
2 Consignes