Xp antispyware 2009

loic-7 -  
Bonjour,
comme beaucoup de personnes je pense j'ai été infecté par xp antispyware 2009 et c'est la que j'ai besoin de votre pour le supprimer!!

ps : j'ai essayé beaucoup de méthodes mais rien ne marche... Je ne peux pas générer de rapport hijackthis parce ke lorsque je l'installe sur mon bureau et que je double clik dessus rien ne se passe

En espérant que vous pourrez m'aider :)
Configuration: Windows XP
Internet Explorer 7.0

77 réponses

Résumé de la discussion

XP antispyware 2009 représente la problématique centrale, puisqu'il s'agit d'une menace sous Windows XP qui se manifeste par des programmes indésirables et l'impossibilité d'exécuter certains outils de diagnostic. Des solutions proposées incluent Malwarebytes' Anti-Malware en mode sans échec, puis la suppression des éléments détectés et la relance des scans avec des rapports à partager, afin d'éliminer les infections et plugins indésirables. D'autres méthodes mentionnent l'utilisation d'outils tels que OTMoveIt3 pour déplacer ou supprimer des fichiers problématiques, SmitfraudFix pour nettoyer les entrées système et les clés de registres potentiellement corrompues. En cas de difficultés persistantes, il estPossible d'entreprendre des étapes complémentaires telles que la vérification des extensions indésirables et la gestion des rapports pour éviter l'infection récurrente.

Bobot (l’IA à votre service)
  2. loic-7
    ========== PROCESSES ==========
    Process explorer.exe killed successfully.
    ========== SERVICES/DRIVERS ==========
    Unable to stop service TDSSserv .
    ========== COMMANDS ==========
    File delete failed. C:\DOCUME~1\Admin\LOCALS~1\Temp\~DF3EF0.tmp scheduled to be deleted on reboot.
    File delete failed. C:\DOCUME~1\Admin\LOCALS~1\Temp\~DF4070.tmp scheduled to be deleted on reboot.
    File delete failed. C:\DOCUME~1\Admin\LOCALS~1\Temp\~DF9DC8.tmp scheduled to be deleted on reboot.
    File delete failed. C:\DOCUME~1\Admin\LOCALS~1\Temp\~DF9F07.tmp scheduled to be deleted on reboot.
    User's Temp folder emptied.
    User's Temporary Internet Files folder emptied.
    User's Internet Explorer cache folder emptied.
    Local Service Temp folder emptied.
    Local Service Temporary Internet Files folder emptied.
    Windows Temp folder emptied.
    Java cache emptied.
    FireFox cache emptied.
    Temp folders emptied.
    Explorer started successfully

    OTMoveIt3 by OldTimer - Version 1.0.7.0 log created on 11012008_184927

    Files moved on Reboot...
    File C:\DOCUME~1\Admin\LOCALS~1\Temp\~DF3EF0.tmp not found!
    File C:\DOCUME~1\Admin\LOCALS~1\Temp\~DF4070.tmp not found!
    File C:\DOCUME~1\Admin\LOCALS~1\Temp\~DF9DC8.tmp not found!
    File C:\DOCUME~1\Admin\LOCALS~1\Temp\~DF9F07.tmp not found!
    1. Destrio5 Modérateur
      ---> Double-clique sur OTMoveIt3.exe afin de le lancer.

      ---> Copie (Ctrl+C) le texte suivant ci-dessous :

      :processes
      explorer.exe

      :services
      TDSSserv

      :commands
      [purity]
      [emptytemp]
      [start explorer]
      [reboot]

      ---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

      ---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

      Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
      Accepte en cliquant sur YES.

      ---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
      Le nom du rapport correspond au moment de sa création : date_heure.log
      8. loic-7
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
        O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
        O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINXP\system32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
        O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINXP\system32\NvMcTray.dll,NvTaskbarInit
        O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
        O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINXP\system32\NeroCheck.exe
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
        O4 - HKLM\..\Run: [VX3000] C:\WINXP\vVX3000.exe
        O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
        O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
        O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
        O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
        O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
        O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
        O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINXP\system32\ctfmon.exe
        O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
        O4 - HKUS\S-1-5-19\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-19\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SERVICE RÉSEAU')
        O4 - HKUS\S-1-5-18\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SYSTEM')
        O4 - HKUS\.DEFAULT\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'Default user')
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
        O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
        O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
        O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
        O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
        O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
        O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
        O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
        O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
        O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
        O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
        O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
        O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
        O17 - HKLM\System\CCS\Services\Tcpip\..\{6131F926-D30A-4233-A55A-A091A8061242}: NameServer = 86.64.145.142 84.103.237.142
        O18 - Filter: application/xhtml+xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll
        O18 - Filter: application/xhtml+xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll
        O18 - Filter: text/xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll
        O18 - Filter: text/xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll
        O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
        O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
        O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
        O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINXP\system32\CTsvcCDA.EXE
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
        O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINXP\system32\nvsvc32.exe
        O23 - Service: PnkBstrA - Unknown owner - C:\WINXP\system32\PnkBstrA.exe
        1. loic-7
          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 18:23:02, on 01/11/2008
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.6000.16735)
          Boot mode: Normal

          Running processes:
          C:\WINXP\System32\smss.exe
          C:\WINXP\system32\winlogon.exe
          C:\WINXP\system32\services.exe
          C:\WINXP\system32\lsass.exe
          C:\WINXP\system32\svchost.exe
          C:\WINXP\System32\svchost.exe
          C:\WINXP\system32\spoolsv.exe
          C:\WINXP\Explorer.EXE
          C:\WINXP\RTHDCPL.EXE
          C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
          C:\WINXP\vVX3000.exe
          C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
          C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
          C:\Program Files\iTunes\iTunesHelper.exe
          C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
          C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
          C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
          C:\WINXP\system32\ctfmon.exe
          C:\Program Files\DAEMON Tools Lite\daemon.exe
          C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
          C:\Program Files\Bonjour\mDNSResponder.exe
          C:\WINXP\system32\CTsvcCDA.EXE
          C:\Program Files\Microsoft LifeCam\MSCamSvc.exe
          C:\WINXP\system32\nvsvc32.exe
          C:\WINXP\system32\PnkBstrA.exe
          C:\WINXP\system32\svchost.exe
          C:\WINXP\system32\svchost.exe
          C:\Program Files\iPod\bin\iPodService.exe
          C:\WINXP\system32\wscntfy.exe
          C:\WINXP\system32\wuauclt.exe
          C:\Program Files\internet explorer\iexplore.exe
          C:\Program Files\Windows Live\Messenger\usnsvc.exe
          C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
          C:\Program Files\internet explorer\iexplore.exe
          C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
          1. loic-7
            Logfile of Trend Micro HijackThis v2.0.2
            Scan saved at 18:23:02, on 01/11/2008
            Platform: Windows XP SP2 (WinNT 5.01.2600)
            MSIE: Internet Explorer v7.00 (7.00.6000.16735)
            Boot mode: Normal

            Running processes:
            C:\WINXP\System32\smss.exe
            C:\WINXP\system32\winlogon.exe
            C:\WINXP\system32\services.exe
            C:\WINXP\system32\lsass.exe
            C:\WINXP\system32\svchost.exe
            C:\WINXP\System32\svchost.exe
            C:\WINXP\system32\spoolsv.exe
            C:\WINXP\Explorer.EXE
            C:\WINXP\RTHDCPL.EXE
            C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
            C:\WINXP\vVX3000.exe
            C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
            C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
            C:\Program Files\iTunes\iTunesHelper.exe
            C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
            C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
            C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
            C:\WINXP\system32\ctfmon.exe
            C:\Program Files\DAEMON Tools Lite\daemon.exe
            C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
            C:\Program Files\Bonjour\mDNSResponder.exe
            C:\WINXP\system32\CTsvcCDA.EXE
            C:\Program Files\Microsoft LifeCam\MSCamSvc.exe
            C:\WINXP\system32\nvsvc32.exe
            C:\WINXP\system32\PnkBstrA.exe
            C:\WINXP\system32\svchost.exe
            C:\WINXP\system32\svchost.exe
            C:\Program Files\iPod\bin\iPodService.exe
            C:\WINXP\system32\wscntfy.exe
            C:\WINXP\system32\wuauclt.exe
            C:\Program Files\internet explorer\iexplore.exe
            C:\Program Files\Windows Live\Messenger\usnsvc.exe
            C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
            C:\Program Files\internet explorer\iexplore.exe
            C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
            R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
            O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
            O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
            O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL
            O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINXP\system32\NvCpl.dll,NvStartup
            O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
            O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINXP\system32\NvMcTray.dll,NvTaskbarInit
            O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
            O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
            O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINXP\system32\NeroCheck.exe
            O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
            O4 - HKLM\..\Run: [VX3000] C:\WINXP\vVX3000.exe
            O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
            O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
            O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
            O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
            O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
            O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
            O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
            O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
            O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
            O4 - HKCU\..\Run: [ctfmon.exe] C:\WINXP\system32\ctfmon.exe
            O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
            O4 - HKUS\S-1-5-19\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SERVICE LOCAL')
            O4 - HKUS\S-1-5-19\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
            O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SERVICE LOCAL')
            O4 - HKUS\S-1-5-20\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SERVICE RÉSEAU')
            O4 - HKUS\S-1-5-18\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SYSTEM')
            O4 - HKUS\.DEFAULT\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'Default user')
            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
            O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
            O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
            O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
            O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
            O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
            O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
            O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
            O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
            O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
            O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
            O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
            O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
            O17 - HKLM\System\CCS\Services\Tcpip\..\{6131F926-D30A-4233-A55A-A091A8061242}: NameServer = 86.64.145.142 84.103.237.142
            O18 - Filter: application/xhtml+xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll
            O18 - Filter: application/xhtml+xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll
            O18 - Filter: text/xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll
            O18 - Filter: text/xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll
            O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
            O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
            O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
            O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINXP\system32\CTsvcCDA.EXE
            O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
            O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
            O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINXP\system32\nvsvc32.exe
            O23 - Service: PnkBstrA - Unknown owner - C:\WINXP\system32\PnkBstrA.exe
            1. loic-7
              Logfile of Trend Micro HijackThis v2.0.2
              Scan saved at 18:23:02, on 01/11/2008
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v7.00 (7.00.6000.16735)
              Boot mode: Normal

              Running processes:
              C:\WINXP\System32\smss.exe
              C:\WINXP\system32\winlogon.exe
              C:\WINXP\system32\services.exe
              C:\WINXP\system32\lsass.exe
              C:\WINXP\system32\svchost.exe
              C:\WINXP\System32\svchost.exe
              C:\WINXP\system32\spoolsv.exe
              C:\WINXP\Explorer.EXE
              C:\WINXP\RTHDCPL.EXE
              C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
              C:\WINXP\vVX3000.exe
              C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
              C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
              C:\Program Files\iTunes\iTunesHelper.exe
              C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
              C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
              C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
              C:\WINXP\system32\ctfmon.exe
              C:\Program Files\DAEMON Tools Lite\daemon.exe
              C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
              C:\Program Files\Bonjour\mDNSResponder.exe
              C:\WINXP\system32\CTsvcCDA.EXE
              C:\Program Files\Microsoft LifeCam\MSCamSvc.exe
              C:\WINXP\system32\nvsvc32.exe
              C:\WINXP\system32\PnkBstrA.exe
              C:\WINXP\system32\svchost.exe
              C:\WINXP\system32\svchost.exe
              C:\Program Files\iPod\bin\iPodService.exe
              C:\WINXP\system32\wscntfy.exe
              C:\WINXP\system32\wuauclt.exe
              C:\Program Files\internet explorer\iexplore.exe
              C:\Program Files\Windows Live\Messenger\usnsvc.exe
              C:\Program Files\Java\jre1.6.0_05\bin\jucheck.exe
              C:\Program Files\internet explorer\iexplore.exe
              C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\windows\system32\blank.htm
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
              O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
              O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL
              O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINXP\system32\NvCpl.dll,NvStartup
              O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
              O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINXP\system32\NvMcTray.dll,NvTaskbarInit
              O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
              O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
              O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINXP\system32\NeroCheck.exe
              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
              O4 - HKLM\..\Run: [VX3000] C:\WINXP\vVX3000.exe
              O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
              O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
              O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
              O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
              O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
              O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
              O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
              O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
              O4 - HKCU\..\Run: [ctfmon.exe] C:\WINXP\system32\ctfmon.exe
              O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
              O4 - HKUS\S-1-5-19\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SERVICE LOCAL')
              O4 - HKUS\S-1-5-19\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SERVICE LOCAL')
              O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SERVICE LOCAL')
              O4 - HKUS\S-1-5-20\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SERVICE RÉSEAU')
              O4 - HKUS\S-1-5-18\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'SYSTEM')
              O4 - HKUS\.DEFAULT\..\RunOnce: [Config] %systemroot%\system32\run.cmd (User 'Default user')
              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
              O9 - Extra button: Remplir - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
              O9 - Extra 'Tools' menuitem: Remplir le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
              O9 - Extra button: Enregistrer - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
              O9 - Extra 'Tools' menuitem: Enregistrer le formulaire - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
              O9 - Extra button: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
              O9 - Extra 'Tools' menuitem: Barre RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
              O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
              O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
              O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
              O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
              O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
              O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
              O17 - HKLM\System\CCS\Services\Tcpip\..\{6131F926-D30A-4233-A55A-A091A8061242}: NameServer = 86.64.145.142 84.103.237.142
              O18 - Filter: application/xhtml+xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll
              O18 - Filter: application/xhtml+xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll
              O18 - Filter: text/xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll
              O18 - Filter: text/xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files\Design Science\MathPlayer\MathMLMimer.dll
              O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
              O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
              O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
              O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINXP\system32\CTsvcCDA.EXE
              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
              O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
              O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINXP\system32\nvsvc32.exe
              O23 - Service: PnkBstrA - Unknown owner - C:\WINXP\system32\PnkBstrA.exe
              1. Destrio5 Modérateur
                C'est mieux effectivement.

                ---> Poste un nouveau rapport HijackThis.
                1. loic-7
                  ========== PROCESSES ==========
                  Process explorer.exe killed successfully.
                  ========== FILES ==========
                  C:\DOCUME~1\ALLUSE~1\APPLIC~1\Soft draw bold remote moved successfully.
                  C:\Program Files\FIND ABOUT LOGO moved successfully.
                  File/Folder C:\DOCUME~1\Admin\LOCALS~1\Temp\NSIS not found.
                  File/Folder C:\DOCUME~1\Admin\Cookies\admin@adultfriendfinder[1].txt not found.
                  File/Folder C:\DOCUME~1\Admin\Cookies\admin@advertising[1].txt not found.
                  File/Folder C:\DOCUME~1\Admin\Cookies\admin@www.advertising365[2].txt not found.
                  File/Folder C:\DOCUME~1\Admin\Cookies\admin@partypoker[2].txt not found.
                  C:\DOCUME~1\ALLUSE~1\APPLIC~1\Balm Seek Media Store moved successfully.
                  C:\DOCUME~1\LOCALS~1\APPLIC~1\FIND ABOUT LOGO moved successfully.
                  ========== REGISTRY ==========
                  Unable to delete registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_TDSSSERV\\ .
                  Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TDSSserv\\ not found.
                  ========== COMMANDS ==========
                  File delete failed. C:\DOCUME~1\Admin\LOCALS~1\Temp\~DF3459.tmp scheduled to be deleted on reboot.
                  File delete failed. C:\DOCUME~1\Admin\LOCALS~1\Temp\~DF3472.tmp scheduled to be deleted on reboot.
                  File delete failed. C:\DOCUME~1\Admin\LOCALS~1\Temp\~DFCA94.tmp scheduled to be deleted on reboot.
                  File delete failed. C:\DOCUME~1\Admin\LOCALS~1\Temp\~DFCABA.tmp scheduled to be deleted on reboot.
                  User's Temp folder emptied.
                  User's Temporary Internet Files folder emptied.
                  User's Internet Explorer cache folder emptied.
                  Local Service Temp folder emptied.
                  Local Service Temporary Internet Files folder emptied.
                  Windows Temp folder emptied.
                  Java cache emptied.
                  FireFox cache emptied.
                  Temp folders emptied.
                  Explorer started successfully

                  OTMoveIt3 by OldTimer - Version 1.0.7.0 log created on 11012008_181207

                  Files moved on Reboot...
                  File C:\DOCUME~1\Admin\LOCALS~1\Temp\~DF3459.tmp not found!
                  File C:\DOCUME~1\Admin\LOCALS~1\Temp\~DF3472.tmp not found!
                  File C:\DOCUME~1\Admin\LOCALS~1\Temp\~DFCA94.tmp not found!
                  File C:\DOCUME~1\Admin\LOCALS~1\Temp\~DFCABA.tmp not found!
                  1. Destrio5 Modérateur
                    C'est moi qui ait fait une erreur, pardon.

                    ---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :
                    http://oldtimer.geekstogo.com/OTMoveIt3.exe

                    ---> Double-clique sur OTMoveIt3.exe afin de le lancer.

                    ---> Copie (Ctrl+C) le texte suivant ci-dessous :

                    :processes
                    explorer.exe

                    :files
                    C:\DOCUME~1\ALLUSE~1\APPLIC~1\Soft draw bold remote
                    C:\Program Files\FIND ABOUT LOGO
                    C:\DOCUME~1\Admin\LOCALS~1\Temp\NSIS
                    C:\DOCUME~1\Admin\Cookies\admin@adultfriendfinder[1].txt
                    C:\DOCUME~1\Admin\Cookies\admin@advertising[1].txt
                    C:\DOCUME~1\Admin\Cookies\admin@www.advertising365[2].txt
                    C:\DOCUME~1\Admin\Cookies\admin@partypoker[2].txt
                    C:\DOCUME~1\ALLUSE~1\APPLIC~1\Balm Seek Media Store
                    C:\DOCUME~1\LOCALS~1\APPLIC~1\FIND ABOUT LOGO

                    :reg
                    [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_TDSSSERV]
                    [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TDSSserv]

                    :commands
                    [purity]
                    [emptytemp]
                    [start explorer]
                    [reboot]

                    ---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

                    ---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

                    Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
                    Accepte en cliquant sur YES.

                    ---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
                    Le nom du rapport correspond au moment de sa création : date_heure.log
                    2. Destrio5 Modérateur
                      Alors là, je ne comprends pas.

                      Poste un nouveau rapport Lop S&D.
                      1. loic-7
                        ========== PROCESSES ==========
                        Process explorer.exe killed successfully.
                        ========== FILES ==========
                        Folder C:\DOCUME~1\ALLUSE~1\APPLIC~1\Soft draw bold remote\ not found.
                        Folder C:\Program Files\FIND ABOUT LOGO\ not found.
                        Folder C:\DOCUME~1\Admin\LOCALS~1\Temp\NSIS\ not found.
                        C:\DOCUME~1\Admin\Cookies\admin@adultfriendfinder[1].txt moved successfully.
                        C:\DOCUME~1\Admin\Cookies\admin@advertising[1].txt moved successfully.
                        C:\DOCUME~1\Admin\Cookies\admin@www.advertising365[2].txt moved successfully.
                        C:\DOCUME~1\Admin\Cookies\admin@partypoker[2].txt moved successfully.
                        Folder C:\DOCUME~1\ALLUSE~1\APPLIC~1\Balm Seek Media Store\ not found.
                        Folder C:\DOCUME~1\LOCALS~1\APPLIC~1\FIND ABOUT LOGO\ not found.
                        ========== REGISTRY ==========
                        Unable to delete registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_TDSSSERV\\ .
                        Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TDSSserv\\ deleted successfully.
                        ========== COMMANDS ==========
                        File delete failed. C:\DOCUME~1\Admin\LOCALS~1\Temp\~DFB56D.tmp scheduled to be deleted on reboot.
                        File delete failed. C:\DOCUME~1\Admin\LOCALS~1\Temp\~DFB5E6.tmp scheduled to be deleted on reboot.
                        File delete failed. C:\DOCUME~1\Admin\LOCALS~1\Temp\~DFD05C.tmp scheduled to be deleted on reboot.
                        File delete failed. C:\DOCUME~1\Admin\LOCALS~1\Temp\~DFD0A2.tmp scheduled to be deleted on reboot.
                        User's Temp folder emptied.
                        User's Temporary Internet Files folder emptied.
                        User's Internet Explorer cache folder emptied.
                        Local Service Temp folder emptied.
                        Local Service Temporary Internet Files folder emptied.
                        Windows Temp folder emptied.
                        Java cache emptied.
                        FireFox cache emptied.
                        Temp folders emptied.
                        Explorer started successfully

                        OTMoveIt3 by OldTimer - Version 1.0.7.0 log created on 10312008_202955

                        Files moved on Reboot...
                        File C:\DOCUME~1\Admin\LOCALS~1\Temp\~DFB56D.tmp not found!
                        File C:\DOCUME~1\Admin\LOCALS~1\Temp\~DFB5E6.tmp not found!
                        File C:\DOCUME~1\Admin\LOCALS~1\Temp\~DFD05C.tmp not found!
                        File C:\DOCUME~1\Admin\LOCALS~1\Temp\~DFD0A2.tmp not found!
                        1. Destrio5 Modérateur
                          Oui, ça vient d'eux.

                          ---> Télécharge OTMoveIt3 (OldTimer) sur ton Bureau :
                          http://oldtimer.geekstogo.com/OTMoveIt3.exe

                          ---> Double-clique sur OTMoveIt3.exe afin de le lancer.

                          ---> Copie (Ctrl+C) le texte suivant ci-dessous :

                          :processes
                          explorer.exe

                          :files
                          C:\DOCUME~1\ALLUSE~1\APPLIC~1\Soft draw bold remote\
                          C:\Program Files\FIND ABOUT LOGO\
                          C:\DOCUME~1\Admin\LOCALS~1\Temp\NSIS\
                          C:\DOCUME~1\Admin\Cookies\admin@adultfriendfinder[1].txt
                          C:\DOCUME~1\Admin\Cookies\admin@advertising[1].txt
                          C:\DOCUME~1\Admin\Cookies\admin@www.advertising365[2].txt
                          C:\DOCUME~1\Admin\Cookies\admin@partypoker[2].txt
                          C:\DOCUME~1\ALLUSE~1\APPLIC~1\Balm Seek Media Store\
                          C:\DOCUME~1\LOCALS~1\APPLIC~1\FIND ABOUT LOGO\

                          :reg
                          [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_TDSSSERV]
                          [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TDSSserv]

                          :commands
                          [purity]
                          [emptytemp]
                          [start explorer]
                          [reboot]

                          ---> Colle (Ctrl+V) le texte précédemment copié dans le cadre Paste Instructions for Items to be Moved.

                          ---> Clique maintenant sur le bouton MoveIt! puis ferme OTMoveIt3.

                          Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
                          Accepte en cliquant sur YES.

                          ---> Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
                          Le nom du rapport correspond au moment de sa création : date_heure.log
                          • 1
                          • 2
                          • 3
                          • 4

                          Discussions similaires

                          Ou trouver le pilote pour epson xp-2205
                          lutttinette

                          19 réponses
                          probleme configuration wifi epson xp-225
                          sam099

                          35 réponses
                          Télécharger Encarta Junior
                          98653773

                          3 réponses
                          où trouver le freecell du XP
                          désolation

                          7 réponses
                          Jeux origine. freecell-solitaire -démineur- etc... XP ou W7
                          mandgio

                          4 réponses