Probleme fichiers temp

De rien , bon week end :)

Merci encore beaucoup à toi et ton copain !
Bonne continuation!

Helle ,

Voila c'est finit :) , tu vas pouvoir passer ton sujet en résolu ;)

# DelFix v10.2 - Rapport créé le 11/04/2013 à 21:54:21
# Mis à jour le 02/04/2013 par Xplode
# Nom d'utilisateur : AURORE - AURORE-PC

~ Suppression des outils de désinfection ...

Supprimé : C:\USBFix
Supprimé : C:\_OTL
Supprimé : C:\UsbFix [Clean 1] AURORE-PC.txt
Supprimé : C:\UsbFix [Clean 3] AURORE-PC.txt
Supprimé : C:\Users\AURORE\Downloads\adwcleaner(1).exe
Supprimé : C:\Users\AURORE\Downloads\adwcleaner.exe
Supprimé : C:\Users\AURORE\Downloads\Extras.Txt
Supprimé : C:\Users\AURORE\Downloads\OTL.Txt
Supprimé : C:\Users\AURORE\Downloads\OTL.exe
Supprimé : C:\Users\AURORE\Downloads\UsbFix.exe
Supprimée : HKCU\Software\USBFix
Supprimée : HKLM\SOFTWARE\OldTimer Tools
Supprimée : HKLM\SOFTWARE\AdwCleaner
Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\USBFix

~ Purge de la restauration système ...

Supprimé : RP #266 [Windows Update | 03/19/2013 17:32:09]
Supprimé : RP #267 [Windows Update | 03/22/2013 17:48:48]
Supprimé : RP #268 [Windows Update | 03/26/2013 17:20:20]
Supprimé : RP #269 [Windows Update | 03/26/2013 20:34:37]
Supprimé : RP #270 [Windows Update | 04/02/2013 20:42:17]
Supprimé : RP #271 [Windows Update | 04/09/2013 10:05:35]
Supprimé : RP #272 [Installed Java 7 Update 17 | 04/09/2013 14:42:13]
Supprimé : RP #273 [OTL Restore Point - 09/04/2013 20:22:12 | 04/09/2013 18:22:12]
Supprimé : RP #274 [Windows Update | 04/10/2013 10:16:51]

Nouveau point de restauration créé !

########## - EOF - ##########

# Télécharge DelFix par Xplode.
# Exécute delfix.exe
# Coche l'option "Supprimer les outils de désinfection".
# Coche "Purger la restauration système".
# Clique sur Exécuter.
# Patiente pendant le scan jusqu'à l'ouverture du rapport.

# Poste le contenu du rapport dans ta prochaine réponse sur le forum.
# Note : Le rapport se trouve sous C:\DelFix[S1].txt

( CTRL+A pour sélectionner, CTRL+C pour copier et CTRL+V pour coller )

Comme dis Birdy -> People help the people ....

All processes killed
========== OTL ==========
Registry key HKEY_USERS\S-1-5-21-3472143197-454811208-4115051923-1001\Software\Microsoft\Internet Explorer\SearchScopes\{814C76CB-2623-43F4-AAD0-58A0E5190A20}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{814C76CB-2623-43F4-AAD0-58A0E5190A20}\ not found.
Prefs.js: adapter@babylontc.com:1.0.0.1 removed from extensions.enabledItems
Prefs.js: ffxtlbr@babylon.com:1.1.3 removed from extensions.enabledItems
64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\PLFSetI deleted successfully.
C:\Windows\PLFSetI.exe moved successfully.
Registry value HKEY_USERS\S-1-5-21-3472143197-454811208-4115051923-1001\Software\Microsoft\Windows\CurrentVersion\Run\\FlashMediaPlayer deleted successfully.
File C:\Users\AURORE\AppData\Roaming\FlashMediaWeb\FlashMediaPlayer.exe not found.
Registry value HKEY_USERS\S-1-5-21-3472143197-454811208-4115051923-1001\Software\Microsoft\Windows\CurrentVersion\Run\\FlashMediaWeb deleted successfully.
File C:\Users\AURORE\AppData\Roaming\FlashMediaWeb\FlashMediaPlayer.exe not found.
Registry value HKEY_USERS\S-1-5-21-3472143197-454811208-4115051923-1001\Software\Microsoft\Windows\CurrentVersion\Run\\FlashPlayerPlugin deleted successfully.
File C:\Users\AURORE\AppData\Roaming\FlashMediaPlayer\FlashPlayerPlugin.exe not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\EnableLUA deleted successfully.
========== FILES ==========
C:\Users\AURORE\AppData\Roaming\FlashMedia.exe.tmp moved successfully.
C:\ProgramData\FullRemove.exe moved successfully.
C:\Users\AURORE\AppData\Roaming\FlashMediaPlayer folder moved successfully.
C:\Users\AURORE\AppData\Roaming\FlashMediaWeb folder moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job moved successfully.
C:\AdwCleaner[R1].txt moved successfully.
C:\AdwCleaner[R2].txt moved successfully.
C:\AdwCleaner[S1].txt moved successfully.
C:\AdwCleaner[S2].txt moved successfully.
C:\AdwCleaner[S3].txt moved successfully.
C:\AdwCleaner[S4].txt moved successfully.
File\Folder C:\ProgramData\Temp:0B9176C0 not found.
File\Folder C:\ProgramData\Temp:4CF61E54 not found.
File\Folder C:\ProgramData\Temp:5D7E5A8F not found.
File\Folder C:\ProgramData\Temp:E1F04E8D not found.
File\Folder C:\ProgramData\Temp:93DE1838 not found.
File\Folder C:\ProgramData\Temp:444C53BA not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrateur
->Temp folder emptied: 162080 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: All Users

User: AURORE
->Temp folder emptied: 299654 bytes
->Temporary Internet Files folder emptied: 546904 bytes
->Java cache emptied: 1 bytes
->FireFox cache emptied: 87091229 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 58334 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 57616 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 852 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 67843 bytes
RecycleBin emptied: 3609995 bytes

Total Files Cleaned = 88,00 mb

C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

OTL by OldTimer - Version 3.2.69.0 log created on 04112013_114505

Files\Folders moved on Reboot...
C:\Users\AURORE\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File\Folder C:\Users\AURORE\AppData\Local\Temp\~DFFD3F9748DE61ECEA.TMP not found!
File\Folder C:\Users\AURORE\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{10113058-39E2-4AE8-839C-B79A35986C93}.tmp not found!
File\Folder C:\Users\AURORE\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{5F216F54-1BCB-434A-B43E-6488E2627627}.tmp not found!
File\Folder C:\Users\AURORE\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{FCFEC736-8AE7-451C-A97C-7FF168F958FD}.tmp not found!
File\Folder C:\Users\AURORE\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\43755DB7.wmf not found!
File\Folder C:\Users\AURORE\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\572BAC4C.wmf not found!
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Fais ceci pour terminer le nettoyage :

Relance OTL.
Sous Persfonnalisation (Custom Scan), copie-colle le contenu du cadre ci dessous (bien prendre :OTL en début).
Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:

:OTL 
IE - HKU\S-1-5-21-3472143197-454811208-4115051923-1001\..\SearchScopes\{814C76CB-2623-43F4-AAD0-58A0E5190A20}: "URL" = https://www.orange.fr/portail?u=http%253A//r.voila.fr/se%253Frdata%253Dcomment%2525E7amarche%2526kw%253D{searchTerms}%26kw%3D%20%26sev%3D2%26ref%3DW3ACC_vis_prospect_0912_header_rechercher_webr3%26lg%3Dfr%26dblg%3Dfr%26db%3Dwebr3%26ctx%3Dorange%26profil%3Dorange
FF - prefs.js..extensions.enabledItems: adapter@babylontc.com:1.0.0.1
FF - prefs.js..extensions.enabledItems: ffxtlbr@babylon.com:1.1.3
O4:64bit: - HKLM..\Run: [PLFSetI] C:\Windows\PLFSetI.exe ()
O4 - HKU\S-1-5-21-3472143197-454811208-4115051923-1001..\Run: [FlashMediaPlayer] C:\Users\AURORE\AppData\Roaming\FlashMediaWeb\FlashMediaPlayer.exe (FlashMedia Player TM)
O4 - HKU\S-1-5-21-3472143197-454811208-4115051923-1001..\Run: [FlashMediaWeb] C:\Users\AURORE\AppData\Roaming\FlashMediaWeb\FlashMediaPlayer.exe (FlashMedia Player TM)
O4 - HKU\S-1-5-21-3472143197-454811208-4115051923-1001..\Run: [FlashPlayerPlugin] C:\Users\AURORE\AppData\Roaming\FlashMediaPlayer\FlashPlayerPlugin.exe (FlashMedia Player TM)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0

:files 
C:\Users\AURORE\AppData\Roaming\*.tmp
C:\ProgramData\FullRemove.exe
C:\Users\AURORE\AppData\Roaming\FlashMediaPlayer
C:\Users\AURORE\AppData\Roaming\FlashMediaWeb
C:\Windows\Tasks\Adobe Flash Player Updater.job
C:\AdwCleaner[R1].txt
C:\AdwCleaner[R2].txt
C:\AdwCleaner[S1].txt
C:\AdwCleaner[S2].txt
C:\AdwCleaner[S3].txt
C:\AdwCleaner[S4].txt
C:\ProgramData\Temp:0B9176C0
C:\ProgramData\Temp:4CF61E54
C:\ProgramData\Temp:5D7E5A8F
C:\ProgramData\Temp:E1F04E8D
C:\ProgramData\Temp:93DE1838
C:\ProgramData\Temp:444C53BA

:Commands 
[purity] 
[emptytemp] 
[resethosts] 
[reboot]

Capture

Redemarre le pc sous windows et poste le rapport dans ta prochaine réponse.
Le rapport est sauvegardé sous C:\_OTL\MovedFiles\date_heure.log

non plus de fichiers temp qui s'affiche au démarrage vous etes des anges merci beaucoup !

T'as pas de fichier .zip ?

Laisse tomber alors, pas grave ;)

Toujours des soucis avec les fichiers temp ?

Comme dis Birdy -> People help the people ....

est ce que c'est ça :

Informations

Le fichier UsbFix [Clean 3] AURORE-PC.txt a été uploadé.
Sa valeur md5 est : 58bcfd39e682e6889c4f10e18e7425e9
Son poid est : 8106 bytes
Son type est : text/plain
Son nom sur le serveur est : 58bcfd39e682e6889c4f10e18e7425e9.txt

La valeur MD5 du fichier UsbFix [Clean 3] AURORE-PC.txt a déja été scannée sur VirusTotal.
Date de soumission du fichier : 2013-04-10 10:08:28
Sha256 : 4b6a795f0f3f9701d2f00b155c2dc1a4a5dc7a4e3b48a2c25cf563a6fde3ea4e
Détection : 0/45

Agnitum [Version : 5.5.1.3 Update Date : 20130409] ->
AhnLab-V3 [Version : 2013.04.10.00 Update Date : 20130409] ->
AntiVir [Version : 7.11.71.168 Update Date : 20130410] ->
Antiy-AVL [Version : 2.0.3.7 Update Date : 20130410] ->
Avast [Version : 6.0.1289.0 Update Date : 20130410] ->
AVG [Version : 10.0.0.1190 Update Date : 20130409] ->
BitDefender [Version : 7.2 Update Date : 20130410] ->
ByteHero [Version : 1.0.0.1 Update Date : 20130409] ->
ClamAV [Version : 0.97.3.0 Update Date : 20130410] ->
Commtouch [Version : 5.4.1.7 Update Date : 20130410] ->
Comodo [Version : 15878 Update Date : 20130410] ->
Comodo [Version : Update Date : 20130410] ->
Emsisoft [Version : 3.0.0.575 Update Date : 20130410] ->
eSafe [Version : 7.0.17.0 Update Date : 20130407] ->
ESET-NOD32 [Version : 8212 Update Date : 20130410] ->
Fortinet [Version : 5.0.43.0 Update Date : 20130410] ->
F-Prot [Version : 4.7.1.166 Update Date : 20130409] ->
F-Secure [Version : 4.7.1.166 Update Date : 20130409] ->
GData [Version : 22 Update Date : 20130410] ->
Ikarus [Version : T3.1.4.0.0 Update Date : 20130410] ->
Jiangmin [Version : 16.0.100 Update Date : 20130410] ->
K7AntiVirus [Version : 9.164.8499 Update Date : 20130409] ->
Kaspersky [Version : 9.0.0.837 Update Date : 20130410] ->
Kingsoft [Version : 2013.1.8.219 Update Date : 20130408] ->
Malwarebytes [Version : 1.70.0.9 Update Date : 20130410] ->
McAfee [Version : 5.400.0.1158 Update Date : 20130410] ->
McAfee-GW-Edition [Version : 2012.1 Update Date : 20130410] ->
Microsoft [Version : 1.9302 Update Date : 20130410] ->
MicroWorld-eScan [Version : 12.0.250.0 Update Date : 20130410] ->
NANO-Antivirus [Version : 0.24.0.51813 Update Date : 20130410] ->
Norman [Version : 7.00.22 Update Date : 20130409] ->
nProtect [Version : 2013-04-10.02 Update Date : 20130410] ->
Panda [Version : 10.0.3.5 Update Date : 20130409] ->
PCTools [Version : 9.0.0.2 Update Date : 20130410] ->
CAT-QuickHeal [Version : 12.00 Update Date : 20130410] ->
Rising [Version : 24.57.01.04 Update Date : 20130410] ->
Sophos [Version : Update Date : ] ->
SUPERAntiSpyware [Version : 5.6.0.1008 Update Date : 20130410] ->
Symantec [Version : 20121.3.0.76 Update Date : 20130410] ->
TheHacker [Version : None Update Date : 20130410] ->
TotalDefense [Version : 37.0.10372 Update Date : 20130410] ->
TrendMicro [Version : 9.740.0.1012 Update Date : 20130410] ->
TrendMicro-HouseCall [Version : 9.700.0.1001 Update Date : 20130410] ->
VIPRE [Version : 16728 Update Date : 20130410] ->
VBA32 [Version : 3.12.20.2 Update Date : 20130408] ->
ViRobot [Version : 2011.4.7.4223 Update Date : 20130410] ->

Va sur cette page : http://sosvirus.org/viewtopic.php?f=6&t=489

Clic sur parcourir , puis va dans ordinateur -> disque C et cherche le fichier UsbFix_Upload_Aurore-PC.zip

clic ensuite sur envoyer

Oui faut pas copier coller mon texte c'était un exemple ^^
Il porte le nom de ton pc en plus le zip :)

quand je vais sur SOS virus et que je copie colle C:\UsbFix_UploadMe.ZIP il dit que le fichier n'existe pas.
C'est peut etre pas comme ça qu'il faut faire ?

Hello ,

il ne le prend pas

Ca te dis quoi ?

il ne le prend pas

http://sosvirus.org/viewtopic.php?f=6&t=489

envoie C:\UsbFix_UploadMe.ZIP

non que dois-je faire exactement car pas tout compris la ?

Génial ;)

Tu as uploadé le "uploadme" comme demandé ?

############################## | UsbFix V 7.120 | [Suppression]

Utilisateur: AURORE (Administrateur) # AURORE-PC
Mis à jour le 06/04/2013 par El Desaparecido
Lancé à 23:09:13 | 09/04/2013

Site Web: https://www.sosvirus.net/
Upload Malware: http://upload.sosvirus.org/
Contact: contact@sosvirus.org

PC: Packard Bell (EasyNote TJ66 ) (x64-based PC)
CPU: Pentium(R) Dual-Core CPU T4500 @ 2.30GHz (2294)
RAM -> [Total : 3001 | Free : 1878]
BIOS: Ver 1.00PARTTBL
BOOT: Fail-safe with network boot

OS: Microsoft Windows 7 Édition Familiale Premium (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 8.0.7601.17514

SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: avast! Antivirus [Enabled | Updated]
FW: Windows FireWall Service [Enabled]

C:\ (%systemdrive%) -> Disque fixe # 583 Go (394 Go libre(s) - 68%) [Packard Bell] # NTFS
D:\ -> CD-ROM
E:\ -> Disque amovible # 4 Go (4 Go libre(s) - 100%) [AUR0RE DISK] # FAT32

################## | El Desaparecido Section |

HKLM\SOFTWARE | Run : [BackupManagerTray] - "C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" -h -k
HKLM\SOFTWARE | Run : [Camera Assistant Software] - "C:\Program Files (x86)\Video Web Camera\traybar.exe"
HKLM\SOFTWARE | Run : [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe
HKLM\SOFTWARE | Run : [RemoteControl8] - "c:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe"
HKLM\SOFTWARE | Run : [AppleSyncNotifier] - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
HKLM\SOFTWARE | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKLM\SOFTWARE | Run : [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
HKLM\SOFTWARE | Run : [PopUpKiller] - C:\Program Files (x86)\PopUp Killer\PopUpKiller.EXE
HKLM\SOFTWARE | Run : [avast] - "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
HKLM\SOFTWARE | Run : [QuickTime Task] - "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
HKLM\SOFTWARE | Run : [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
HKLM\SOFTWARE | Run : [SiteRanker] - "C:\Program Files (x86)\SiteRanker\SiteRankTray.exe"
HKLM\SOFTWARE | Run : [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
HKLM\SOFTWARE\wow6432Node | Run : [BackupManagerTray] - "C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" -h -k
HKLM\SOFTWARE\wow6432Node | Run : [Camera Assistant Software] - "C:\Program Files (x86)\Video Web Camera\traybar.exe"
HKLM\SOFTWARE\wow6432Node | Run : [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe
HKLM\SOFTWARE\wow6432Node | Run : [RemoteControl8] - "c:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe"
HKLM\SOFTWARE\wow6432Node | Run : [AppleSyncNotifier] - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
HKLM\SOFTWARE\wow6432Node | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKLM\SOFTWARE\wow6432Node | Run : [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
HKLM\SOFTWARE\wow6432Node | Run : [PopUpKiller] - C:\Program Files (x86)\PopUp Killer\PopUpKiller.EXE
HKLM\SOFTWARE\wow6432Node | Run : [avast] - "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
HKLM\SOFTWARE\wow6432Node | Run : [QuickTime Task] - "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
HKLM\SOFTWARE\wow6432Node | Run : [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
HKLM\SOFTWARE\wow6432Node | Run : [SiteRanker] - "C:\Program Files (x86)\SiteRanker\SiteRankTray.exe"
HKLM\SOFTWARE\wow6432Node | Run : [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
HKLM\SOFTWARE | RunOnce : [] -
HKLM\SOFTWARE\wow6432Node | RunOnce : [] -
HKU\S-1-5-19\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-3472143197-454811208-4115051923-1001\SOFTWARE | Run : [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
HKU\S-1-5-21-3472143197-454811208-4115051923-1001\SOFTWARE | Run : [Akamai NetSession Interface] - "C:\Users\AURORE\AppData\Local\Akamai\netsession_win.exe"
HKU\S-1-5-21-3472143197-454811208-4115051923-1001\SOFTWARE | Run : [QuickTime Task] - "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
HKU\S-1-5-21-3472143197-454811208-4115051923-1001\SOFTWARE | Run : [FlashMediaPlayer] - C:\Users\AURORE\AppData\Roaming\FlashMediaWeb\FlashMediaPlayer.exe
HKU\S-1-5-21-3472143197-454811208-4115051923-1001\SOFTWARE | Run : [FlashMediaWeb] - C:\Users\AURORE\AppData\Roaming\FlashMediaWeb\FlashMediaPlayer.exe
HKU\S-1-5-21-3472143197-454811208-4115051923-1001\SOFTWARE | Run : [FlashPlayerPlugin] - C:\Users\AURORE\AppData\Roaming\FlashMediaPlayer\FlashPlayerPlugin.exe
HKU\S-1-5-19\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
HKU\S-1-5-20\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe

################## | Processus Stoppés |

Stoppé! C:\Windows\Explorer.EXE (1268)
Stoppé! C:\Windows\system32\ctfmon.exe (1340)

################## | Éléments infectieux |

Supprimé! C:\Users\AURORE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\trz4175.tmp
Supprimé! C:\Users\AURORE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FlashMediaPlayer.exe
Supprimé! C:\Users\AURORE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FlashPlayerPlugin.exe
Supprimé! C:\Users\AURORE\AppData\Roaming\FlashMediaPlayer\FlashPlayerPlugin.exe
Supprimé! C:\Users\AURORE\AppData\Roaming\FlashMediaWeb\FlashMediaPlayer.exe
Supprimé! C:\Users\AURORE\AppData\Roaming\FlashMediaWeb\FlashWebUpdt.exe
Supprimé! C:\Users\AURORE\Downloads\FlashMediaPlayer.exe

(!) Fichiers temporaires supprimés.

################## | Registre |

################## | Mountpoints2 |

Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{0afbd3c9-7401-11e0-8e10-206a8a131143}

################## | Listing |

[18/02/2012 - 17:33:07 | SHD ] C:\$Recycle.Bin
[09/04/2013 - 13:36:02 | N | 15921] C:\AdwCleaner[R1].txt
[09/04/2013 - 13:49:42 | N | 16103] C:\AdwCleaner[R2].txt
[09/04/2013 - 13:38:32 | N | 363] C:\AdwCleaner[S1].txt
[09/04/2013 - 13:45:58 | N | 363] C:\AdwCleaner[S2].txt
[09/04/2013 - 13:49:52 | N | 366] C:\AdwCleaner[S3].txt
[09/04/2013 - 13:58:40 | N | 15777] C:\AdwCleaner[S4].txt
[12/11/2012 - 00:09:19 | D ] C:\Ariane Moffatt
[14/07/2009 - 03:38:58 | RASH | 383562] C:\bootmgr
[27/07/2009 - 22:40:53 | N | 8192] C:\BOOTSECT.BAK
[14/07/2009 - 07:08:56 | SHD ] C:\Documents and Settings
[17/01/2011 - 20:37:01 | DC ] C:\elements
[09/04/2013 - 23:07:34 | ASH | 2360025088] C:\hiberfil.sys
[25/11/2012 - 20:55:39 | D ] C:\Intel
[17/01/2011 - 20:57:28 | RHD ] C:\MSOCache
[17/01/2011 - 20:36:27 | D ] C:\OEM
[09/04/2013 - 23:07:37 | ASH | 3146702848] C:\pagefile.sys
[31/05/2010 - 08:50:11 | N | 1240] C:\Patch.rev
[14/07/2009 - 05:20:08 | D ] C:\PerfLogs
[09/04/2013 - 20:22:33 | N | 512] C:\PhysicalMBR.bin
[17/01/2011 - 20:35:50 | N | 217] C:\Preload.rev
[09/04/2013 - 13:58:32 | D ] C:\Program Files
[09/04/2013 - 13:58:32 | D ] C:\Program Files (x86)
[09/04/2013 - 13:58:30 | HD ] C:\ProgramData
[17/01/2011 - 20:35:32 | SHD ] C:\Recovery
[09/04/2013 - 20:22:30 | SHD ] C:\System Volume Information
[09/04/2013 - 23:14:01 | D ] C:\UsbFix
[09/04/2013 - 22:28:59 | N | 10067] C:\UsbFix [Clean 1] AURORE-PC.txt
[09/04/2013 - 23:14:13 | A | 7796] C:\UsbFix [Clean 3] AURORE-PC.txt
[28/03/2012 - 17:02:13 | D ] C:\Users
[09/04/2013 - 23:07:34 | D ] C:\Windows

################## | Vaccin |

C:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
E:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

################## | E.O.F | https://www.sosvirus.net/ |

Ou fait-le en mode sans échec