Pc très très lent

[nasco]

Bonjour
lorsque j'allume mon pc le message suivant NTVDM a rencontré une erreur systeme .cHo . Choisissez Fermer pour mettre fin à l'application.

depuis ce message mon pc marche au ralenti il me faut des minutes pour ouvrir un fichier ou une application ou internet et mon pc fait du bruit comme si qu'il travailler en outre mon espace libre diminue avant ce probleme j'etais à 120 GO utilisé et maintenant j'en suis à 159 alors que je n'ai rien installé et que je n'ai pas enregistré de nouveaux fichiers.
De plus des fenêtres de pub comme 100sm s'ouvre toutes les secondes

Ai-je attrapé un virus?? Comment réparer?

Merci beaucoup je suis sous Windows XP.

[EinsteinZero]

Salut,
ça sent en effet le virus car un PC en bon état n'ouvre pas pas sans cesse des fenêtres de pub.....

si tu le peux, installe malwarebyte's anti-malware, mets le à jour puis redémarre en mode sans échec et fait un scan du PC avec malwarebyte's, supprime ce qu'il trouvera et poste son rapport

ensuite, poste un rapport hijackthis >>tuto ici<< pour que les spécialistes des virus prennent la suite

[Di@blo]

Salut,

le problème est que NTVDM est un fichier système, donc si les messages te disent qu'il est impliqué et un stoc de messages publicitaires en prime, là, y'a un gros souci, fait un maximum de scans en ligne et poste ensuite un rapport Hijack ou autre... histoire de voir le tout.

@+

[nasco]

bonjour
excusez le retard de ma réponse mais mon pc rame de plus en plus et en faisant un scan avec malwarebyte cela m'a pris 3h grrrrr et voici le rapport du scan

Malwarebytes' Anti-Malware 1.44
Version de la base de données: 3892
Windows 5.1.2600 Service Pack 3 (Safe Mode)
Internet Explorer 7.0.5730.11

21/03/2010 22:28:44
mbam-log-2010-03-21dernier (22-28-35).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 807201
Temps écoulé: 3 hour(s), 58 minute(s), 32 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 107

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Documents and Settings\HelpAssistant.STATION.001\Application Data\Desktopicon\eBayShortcuts.exe (Adware.ADON) -> No action taken.
C:\Documents and Settings\HelpAssistant.STATION.001\Application Data\Soft2PC\Software\software.exe (Rogue.Eorezo) -> No action taken.
C:\Documents and Settings\HelpAssistant.STATION.001\Mes documents\Logiciels\SlysoftCloneDVD2Keygen.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\HelpAssistant.STATION.001\Mes documents\Logiciels\Clone DVD2\SlysoftCloneDVD2Keygen.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\UTILISATEUR\Application Data\Desktopicon\eBayShortcuts.exe (Adware.ADON) -> No action taken.
C:\Documents and Settings\UTILISATEUR\Application Data\Soft2PC\Software\software.exe (Rogue.Eorezo) -> No action taken.
C:\Documents and Settings\UTILISATEUR\Mes documents\Logiciels\SlysoftCloneDVD2Keygen.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\UTILISATEUR\Mes documents\Logiciels\Clone DVD2\SlysoftCloneDVD2Keygen.exe (Trojan.Downloader) -> No action taken.
C:\Program Files\eMule\Incoming\Corel PaintShop Pro XII 12.00 keymaker.exe (Malware.Packer) -> No action taken.
C:\Program Files\Internet Explorer\js.mui (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP621\A0253713.rbf (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP621\A0253725.rbf (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0254272.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0254279.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0254280.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0254281.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0254282.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0254283.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0254284.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0254285.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0254286.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0254287.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0254288.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0254289.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0255273.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0255274.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0255275.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0255276.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0255277.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0255278.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0255279.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0255280.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0255281.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0255282.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0255283.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0255284.exe (Trojan.Dropper.Gen) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP622\A0255285.exe (Malware.Packer.Gen) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0255381.exe (Malware.Packer.Gen) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0255382.exe (Trojan.Dropper.Gen) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0255383.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0255384.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0255385.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0255386.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0255387.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0255388.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0255389.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0255390.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0255391.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0255392.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0255393.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0255394.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0255395.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0255396.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0255406.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0255407.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0256020.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0256021.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0256022.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0256023.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0256024.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0256026.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0256030.DLL (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0256031.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP623\A0257096.sys (Rootkit.Agent) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP661\A0266389.exe (Malware.Packer) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP662\A0267457.exe (Adware.ADON) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP662\A0267774.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP662\A0267775.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0269494.exe (Adware.ADON) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0271052.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0271053.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0273691.exe (Adware.ADON) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0274004.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0274005.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0275560.exe (Adware.ADON) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0275873.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0275874.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0279376.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0279696.exe (Adware.ADON) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0279903.exe (Adware.ADON) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0280216.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0281902.exe (Adware.ADON) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0282215.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0285732.exe (Adware.ADON) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0285984.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0287131.exe (Adware.ADON) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0287381.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0290768.exe (Adware.ADON) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0291019.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0294493.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP664\A0294886.exe (Trojan.Downloader) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP665\A0294992.exe (Adware.ADON) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP665\A0295243.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP666\A0297824.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP666\A0298076.exe (Adware.ADON) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP666\A0298732.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP666\A0299908.exe (Malware.Packer) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP667\A0300325.exe (Rogue.Eorezo) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP667\A0300641.exe (Adware.ADON) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP667\A0300795.exe (Malware.Packer) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP667\A0301634.exe (Malware.Packer) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP667\A0303007.exe (Adware.ADON) -> No action taken.
C:\System Volume Information\_restore{4BC44C15-BAAD-42FB-A330-4D60C764F759}\RP667\A0303327.exe (Rogue.Eorezo) -> No action taken.
C:\WINDOWS\system32\0035(2).DLL (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\54285.VIR (Trojan.Mudrop) -> No action taken.
C:\WINDOWS\system32\WORK.DAT (Malware.Trace) -> No action taken.
C:\WINDOWS\system32\wupd.dat (Malware.Trace) -> No action taken.

[EinsteinZero]

Bonsoir,
joli carton..... ton PC est bien chargé, fait supprimer tout cela par malwarebyte's et poste un rapport hijackthis
afin que les spécialiste des virus puissent prendre la suite

[nasco]

merci EinsteinZero j'espère pouvoir réparer avec votre aide.
Voici le rapport Hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:20:30, on 22/03/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16981)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Soft2PC\soft2pc.exe
C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe
C:\WINDOWS\system32\sistray.exe
C:\Documents and Settings\UTILISATEUR\Application Data\Dropbox\bin\Dropbox.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\ASTSRV.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Ulead Systems\Ulead PhotoImpact 12\Iedit_.exe
C:\Program Files\CDBurnerXP\cdbxpp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://y.lo.st
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
O2 - BHO: SOFT2PCBHO - {3475D2C4-BBD1-4255-A70D-4125A4D30956} - C:\Program Files\Soft2PC\soft2pcBHO.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [soft2PC] "C:\Program Files\Soft2PC\soft2pc.exe"
O4 - HKLM\..\Run: [Helper] C:\Documents and Settings\UTILISATEUR\Application Data\Soft2PC\Software\SoftwareHP.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/ ... ontrol.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/re ... NPUpld.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} - http://www.eset.eu/buxus/docs/OnlineScanner.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A01B01D4-F40A-4FED-A2CE-713031E7A5DF}: NameServer = 192.168.1.1
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Nalpeiron Licensing Service (ASTSRV) - Nalpeiron Ltd. - C:\WINDOWS\system32\ASTSRV.EXE
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: UPnPService - Magix AG - C:\Program Files\Fichiers communs\MAGIX Shared\UPnPService\UPnPService.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.1.33\bin\mysqld.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/UTILIS~1/LOCALS~1/Temp/msohtmlclip1/01/clip_image002.jpg
O24 - Desktop Component 1: (no name) - file:///C:/DOCUME~1/UTILIS~1/LOCALS~1/Temp/msohtmlclip1/01/clip_image002.gif

--
End of file - 11627 bytes

[bernard53]

Bonsoir a tous.

Fait ceci en plus "nasco"

Télécharge AD-Remover <<ICI>>

**Pour Vista** : clique droit sur le raccourci qui est sur ton bureau: "Exécuter en tant qu'administrateur"

Ensuite choisi l'option: Nettoyer puis valide.

Le scan achevé, une fenêtre va s’afficher, mets le rapport ici s.t.p :bien:
(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

Tu trouveras aussi le rapport sous C:\Ad-report(date).log



Puis ceci plus complet que HijackThis

Télécharge random's system information tool (RSIT) par random/random et sauvegarde-le sur le Bureau:

Double clique sur RSIT.exe qui se trouve sur ton bureau pour le lancer:
Pour VISTA :
Clic-droit et choisis "Exécuter en tant qu'administrateur".
Ensuite :
Si l'outil HijackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera (autorise l'accès dans ton pare-feu, si demandé) et tu devras accepter la licence.

Le rapport va se créer. Pour le mettre sur le forum.

Tout sélectionner : CRTL+ A
Tout copier : CRTL+ C
Tout coller : CRTL+ V

Vous pouvez, une fois posté, le fermer. Ce rapport s’appelle.log.txt

Le rapport est sauvegardé à la racine du disque: C:\rsit\info.txt et C:\rsit\log.txt

[nasco]

bonsoir Bernard
J'ai essayé d'utilise Ad-Remove mais impossible il se bloque toujours à hauteur de 30% du scan comment faire? Merci

[bernard53]

bonsoir Bernard
J'ai essayé d'utilise Ad-Remove mais impossible il se bloque toujours à hauteur de 30% du scan comment faire? Merci

Désactive ton antivirus et pare feu en besoin.

Sinon lance le mais choisi "Scanner" au lieu de nettoyage

[bernard53]

Attention a 30% il faut attendre un moment mais le scan continu.

attends un peu plus longtemps pour voir!

[nasco]

hier j'ai attendu 3H et toujours bloqué à 30%
Sinon voici le rapport de RSIT


Logfile of random's system information tool 1.06 (written by random/random)
Run by UTILISATEUR at 2010-03-22 21:41:47
Microsoft Windows XP Professionnel Service Pack 3
System drive C: has 78 GB (32%) free of 239 GB
Total RAM: 991 MB (18% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:43:08, on 22/03/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16981)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Soft2PC\soft2pc.exe
C:\Program Files\Fichiers communs\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe
C:\WINDOWS\system32\sistray.exe
C:\Documents and Settings\UTILISATEUR\Application Data\Dropbox\bin\Dropbox.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\ASTSRV.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\CDBurnerXP\cdbxpp.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Documents and Settings\UTILISATEUR\Bureau\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\UTILISATEUR.exe
C:\WINDOWS\system32\wuauclt.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://y.lo.st
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
O2 - BHO: SOFT2PCBHO - {3475D2C4-BBD1-4255-A70D-4125A4D30956} - C:\Program Files\Soft2PC\soft2pcBHO.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [soft2PC] "C:\Program Files\Soft2PC\soft2pc.exe"
O4 - HKLM\..\Run: [Helper] C:\Documents and Settings\UTILISATEUR\Application Data\Soft2PC\Software\SoftwareHP.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/ ... ontrol.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/re ... NPUpld.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} - http://www.eset.eu/buxus/docs/OnlineScanner.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A01B01D4-F40A-4FED-A2CE-713031E7A5DF}: NameServer = 192.168.1.1
O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Nalpeiron Licensing Service (ASTSRV) - Nalpeiron Ltd. - C:\WINDOWS\system32\ASTSRV.EXE
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: UPnPService - Magix AG - C:\Program Files\Fichiers communs\MAGIX Shared\UPnPService\UPnPService.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.1.33\bin\mysqld.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/UTILIS~1/LOCALS~1/Temp/msohtmlclip1/01/clip_image002.jpg
O24 - Desktop Component 1: (no name) - file:///C:/DOCUME~1/UTILIS~1/LOCALS~1/Temp/msohtmlclip1/01/clip_image002.gif

--
End of file - 11573 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\At1.job
C:\WINDOWS\tasks\At10.job
C:\WINDOWS\tasks\At11.job
C:\WINDOWS\tasks\At12.job
C:\WINDOWS\tasks\At13.job
C:\WINDOWS\tasks\At14.job
C:\WINDOWS\tasks\At15.job
C:\WINDOWS\tasks\At16.job
C:\WINDOWS\tasks\At17.job
C:\WINDOWS\tasks\At18.job
C:\WINDOWS\tasks\At19.job
C:\WINDOWS\tasks\At2.job
C:\WINDOWS\tasks\At20.job
C:\WINDOWS\tasks\At21.job
C:\WINDOWS\tasks\At22.job
C:\WINDOWS\tasks\At23.job
C:\WINDOWS\tasks\At24.job
C:\WINDOWS\tasks\At25.job
C:\WINDOWS\tasks\At26.job
C:\WINDOWS\tasks\At27.job
C:\WINDOWS\tasks\At28.job
C:\WINDOWS\tasks\At29.job
C:\WINDOWS\tasks\At3.job
C:\WINDOWS\tasks\At30.job
C:\WINDOWS\tasks\At31.job
C:\WINDOWS\tasks\At32.job
C:\WINDOWS\tasks\At33.job
C:\WINDOWS\tasks\At34.job
C:\WINDOWS\tasks\At35.job
C:\WINDOWS\tasks\At36.job
C:\WINDOWS\tasks\At37.job
C:\WINDOWS\tasks\At38.job
C:\WINDOWS\tasks\At39.job
C:\WINDOWS\tasks\At4.job
C:\WINDOWS\tasks\At40.job
C:\WINDOWS\tasks\At41.job
C:\WINDOWS\tasks\At42.job
C:\WINDOWS\tasks\At43.job
C:\WINDOWS\tasks\At44.job
C:\WINDOWS\tasks\At45.job
C:\WINDOWS\tasks\At46.job
C:\WINDOWS\tasks\At47.job
C:\WINDOWS\tasks\At48.job
C:\WINDOWS\tasks\At5.job
C:\WINDOWS\tasks\At6.job
C:\WINDOWS\tasks\At7.job
C:\WINDOWS\tasks\At8.job
C:\WINDOWS\tasks\At9.job
C:\WINDOWS\tasks\GlaryInitialize.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1960408961-583907252-725345543-1003.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1960408961-583907252-725345543-1003.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{7DE6B8E2-8DB4-495C-8C57-232F84FE1D7E}.job
C:\WINDOWS\tasks\WGASetup.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-07-15 1586472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - c:\program files\real\realplayer\rpbrowserrecordplugin.dll [2009-09-28 329312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3475D2C4-BBD1-4255-A70D-4125A4D30956}]
SOFT2PCBHO Class - C:\Program Files\Soft2PC\soft2pcBHO.dll [2010-01-18 221184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-09-15 1562960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{327C2873-E90D-4c37-AA9D-10AC9BABA46C} - Easy-WebPrint - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll [2004-04-16 405504]

Locked

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ORAHSSSessionManager"=C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe [2007-12-12 107248]
"avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-02-12 262401]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2009-09-28 198160]
"Adobe ARM"=C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
"soft2PC"=C:\Program Files\Soft2PC\soft2pc.exe [2010-01-18 638976]
"Helper"=C:\Documents and Settings\UTILISATEUR\Application Data\Soft2PC\Software\SoftwareHP.exe [2010-01-18 376832]
"Adobe Photo Downloader"=C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe [2005-06-23 57344]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
Adobe Gamma Loader.lnk - C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
Rappels du Calendrier Microsoft Works.lnk - C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exe
Utility Tray.lnk - C:\WINDOWS\system32\sistray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2008-09-05 267304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDrives"=0
"NoDriveAutoRun"=67108863

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\Ecount\CCompta.exe"="C:\Program Files\Ecount\CCompta.exe:*:Enabled:CCompta"
"C:\Program Files\Pinnacle\Studio 10\programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 10\programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Pinnacle\Studio 12\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 12\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 12\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\umi.exe:*:Enabled:umi"
"C:\Program Files\eMule\eMule.exe"="C:\Program Files\eMule\eMule.exe:*:Enabled:eMule Plus"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Documents and Settings\UTILISATEUR\Mes documents\Logiciels\eMule0.49b\emule.exe"="C:\Documents and Settings\UTILISATEUR\Mes documents\Logiciels\eMule0.49b\emule.exe:*:Enabled:eMule"
"C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe"="C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe:*:Enabled:Sunbelt Firewall GUI"
"C:\Program Files\OrangeHSS\Connectivity\ConnectivityManager.exe"="C:\Program Files\OrangeHSS\Connectivity\ConnectivityManager.exe:*:enabled:CSS"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\Adobe\Adobe Flash CS3\Flash.exe"="C:\Program Files\Adobe\Adobe Flash CS3\Flash.exe:*:Enabled:Adobe Flash CS3"
"C:\wamp\bin\apache\Apache2.2.11\bin\httpd.exe"="C:\wamp\bin\apache\Apache2.2.11\bin\httpd.exe:*:Enabled:Apache HTTP Server"
"C:\Documents and Settings\UTILISATEUR\Mes documents\utorrent.exe"="C:\Documents and Settings\UTILISATEUR\Mes documents\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Visicom Media\FTP Expert 3\ftpxpert3.exe"="C:\Program Files\Visicom Media\FTP Expert 3\ftpxpert3.exe:*:Enabled:AceFTP v3"
"C:\Program Files\Pando Networks\Pando\Pando.exe"="C:\Program Files\Pando Networks\Pando\Pando.exe:*:Enabled:Pando"
"C:\Documents and Settings\UTILISATEUR\Application Data\Dropbox\bin\Dropbox.exe"="C:\Documents and Settings\UTILISATEUR\Application Data\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======File associations======

.js - edit -
.js - open - "C:\Program Files\Adobe\dreamweaver CS3\Adobe Dreamweaver CS3\Dreamweaver.exe","%1"
.txt - open - C:\WINDOWS\NOTEPAD.EXE %1

======List of files/folders created in the last 1 months======

2010-03-22 10:00:47 ----D---- C:\Documents and Settings\UTILISATEUR\Application Data\Dropbox
2010-03-21 16:16:17 ----D---- C:\WINDOWS\system32\NtmsData
2010-03-21 14:35:58 ----A---- C:\Ad-Report-CLEAN[1].txt
2010-03-21 12:37:54 ----D---- C:\Program Files\Fichiers communs\xing shared
2010-03-21 12:12:54 ----D---- C:\Program Files\Lwh
2010-03-21 10:26:55 ----A---- C:\Ad-Report-SCAN[4].txt
2010-03-21 10:19:45 ----A---- C:\Ad-Report-SCAN[3].txt
2010-03-20 18:55:11 ----D---- C:\Documents and Settings\UTILISATEUR\Application Data\GlarySoft
2010-03-20 17:56:45 ----D---- C:\Program Files\Glary Utilities
2010-03-20 16:51:27 ----D---- C:\WINDOWS\system32\GroupPolicy
2010-03-20 08:09:09 ----A---- C:\Ad-Report-SCAN[2].txt
2010-03-20 07:34:03 ----A---- C:\Ad-Report-SCAN[1].txt
2010-03-20 07:33:56 ----D---- C:\Ad-Remover
2010-03-19 11:51:26 ----D---- C:\Program Files\Ashampoo
2010-03-19 11:49:19 ----D---- C:\finalburner
2010-03-19 11:47:53 ----D---- C:\Program Files\FinalBurner
2010-03-19 11:42:55 ----D---- C:\Program Files\Astonsoft
2010-03-11 19:08:31 ----DC---- C:\WINDOWS\$NtUninstallKB975561$
2010-03-09 19:02:53 ----D---- C:\Program Files\Qui veut gagner des milliards
2010-03-08 16:19:16 ----D---- C:\Program Files\DVDVideoSoft
2010-03-05 16:49:59 ----D---- C:\Program Files\iColorFolder
2010-03-02 17:36:34 ----D---- C:\Documents and Settings\All Users\Application Data\Trymedia
2010-02-27 23:00:00 ----D---- C:\Documents and Settings\All Users\Application Data\PopCap
2010-02-27 22:59:54 ----D---- C:\Program Files\PopCap Games
2010-02-27 22:45:06 ----A---- C:\WINDOWS\progman.ini
2010-02-27 22:45:05 ----D---- C:\CEL
2010-02-27 22:45:05 ----A---- C:\WINDOWS\CEL.INI
2010-02-27 19:58:46 ----D---- C:\Documents and Settings\UTILISATEUR\Application Data\Soft2PC
2010-02-27 19:58:42 ----D---- C:\Program Files\Soft2PC
2010-02-27 19:43:58 ----D---- C:\Program Files\Ubisoft
2010-02-24 19:00:25 ----HDC---- C:\WINDOWS\$NtUninstallKB979306$

======List of files/folders modified in the last 1 months======

2010-03-22 21:16:46 ----D---- C:\WINDOWS\Prefetch
2010-03-22 20:38:45 ----AD---- C:\WINDOWS
2010-03-22 20:29:21 ----D---- C:\Documents and Settings
2010-03-22 20:27:18 ----D---- C:\WINDOWS\temp
2010-03-22 20:26:50 ----D---- C:\WINDOWS\system32
2010-03-22 20:21:05 ----A---- C:\WINDOWS\Iedit_.INI
2010-03-22 20:11:44 ----D---- C:\Program Files\Mozilla Firefox
2010-03-22 18:25:42 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-03-22 17:24:21 ----D---- C:\WINDOWS\system32\CatRoot2
2010-03-22 12:10:06 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-03-21 22:30:13 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-03-21 22:30:13 ----D---- C:\WINDOWS\system32\drivers
2010-03-21 22:29:08 ----D---- C:\Documents and Settings\UTILISATEUR\Application Data\Desktopicon
2010-03-21 18:16:13 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-03-21 16:16:46 ----D---- C:\Documents and Settings\UTILISATEUR\Application Data\uTorrent
2010-03-21 16:16:12 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2010-03-21 14:55:06 ----SD---- C:\WINDOWS\Tasks
2010-03-21 12:51:24 ----D---- C:\WINDOWS\system32\config
2010-03-21 12:49:38 ----D---- C:\WINDOWS\system32\wbem
2010-03-21 12:49:35 ----D---- C:\WINDOWS\Registration
2010-03-21 12:48:44 ----D---- C:\WINDOWS\system
2010-03-21 12:48:38 ----SHD---- C:\Config.Msi
2010-03-21 12:47:43 ----HD---- C:\WINDOWS\inf
2010-03-21 12:46:12 ----D---- C:\Program Files\Movie Maker
2010-03-21 12:46:04 ----SHD---- C:\WINDOWS\Installer
2010-03-21 12:42:03 ----D---- C:\Program Files\Corel
2010-03-21 12:42:02 ----D---- C:\Program Files\Fichiers communs\Corel
2010-03-21 12:37:13 ----D---- C:\Program Files\Fichiers communs\Real
2010-03-21 12:36:04 ----D---- C:\Program Files\CDBurnerXP
2010-03-21 12:25:13 ----DC---- C:\WINDOWS\system32\dllcache
2010-03-21 12:12:10 ----D---- C:\Documents and Settings\UTILISATEUR\Application Data\Macromedia
2010-03-20 19:08:06 ----D---- C:\Program Files
2010-03-20 18:39:58 ----D---- C:\WINDOWS\Help
2010-03-20 12:06:05 ----D---- C:\WINDOWS\Debug
2010-03-20 10:37:33 ----HDC---- C:\WINDOWS\$NtUninstallKB978251$
2010-03-20 07:59:48 ----D---- C:\WINDOWS\system32\CatRoot
2010-03-19 11:22:57 ----D---- C:\Program Files\eMule
2010-03-18 15:46:15 ----D---- C:\Program Files\Mozilla Thunderbird
2010-03-17 08:49:31 ----D---- C:\Documents and Settings\UTILISATEUR\Application Data\Adobe
2010-03-17 08:36:53 ----D---- C:\WINDOWS\WinSxS
2010-03-17 08:36:52 ----D---- C:\Program Files\Fichiers communs
2010-03-14 11:32:35 ----D---- C:\Documents and Settings\UTILISATEUR\Application Data\Real
2010-03-14 11:30:52 ----D---- C:\Documents and Settings\All Users\Application Data\Real
2010-03-14 11:30:10 ----D---- C:\Program Files\Real
2010-03-11 19:07:27 ----HD---- C:\WINDOWS\$hf_mig$
2010-03-11 19:07:15 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2010-03-09 18:01:56 ----A---- C:\WINDOWS\iltwain.ini
2010-03-08 16:26:31 ----D---- C:\Documents and Settings\UTILISATEUR\Application Data\Vso
2010-03-08 16:19:29 ----D---- C:\Program Files\Fichiers communs\DVDVideoSoft
2010-02-27 22:44:00 ----D---- C:\WINDOWS\Noslip
2010-02-27 19:59:35 ----D---- C:\Documents and Settings\UTILISATEUR\Application Data\EoRezo
2010-02-27 19:43:57 ----HD---- C:\Program Files\InstallShield Installation Information
2010-02-24 17:49:55 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2008-03-04 79424]
R1 fwdrv;Firewall Driver; C:\WINDOWS\system32\drivers\fwdrv.sys [2007-04-26 302000]
R1 khips;Kerio HIPS Driver; C:\WINDOWS\system32\drivers\khips.sys [2007-04-26 72624]
R1 PCLEPCI;PCLEPCI; \??\C:\WINDOWS\system32\drivers\pclepci.sys []
R1 SiSkp;SiSkp; C:\WINDOWS\system32\DRIVERS\srvkp.sys [2006-05-05 12288]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-03-01 28352]
R1 Tcpip6;Pilote du protocole IPv6 Microsoft; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2008-06-20 225856]
R2 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2006-04-22 8064]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-17 13059]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2006-03-31 3960896]
R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
R3 DsAudioDevice_207;DsAudioDevice_207; C:\WINDOWS\system32\drivers\DsAudioDevice_207.sys [2009-01-08 16640]
R3 ElbyDelay;ElbyDelay; C:\WINDOWS\System32\Drivers\ElbyDelay.sys [2005-04-12 4608]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2004-09-29 1036928]
R3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\system32\DRIVERS\HSFHWBS2.sys [2004-09-29 219136]
R3 MODEMCSA;Périphérique de filtrage de flux Unimodem; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2008-06-21 47360]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-12-05 10368]
R3 Point32;Microsoft IntelliPoint Filter Driver; C:\WINDOWS\system32\DRIVERS\point32.sys [2005-12-02 21760]
R3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2006-05-08 254976]
R3 SISNIC;Pilote de carte Fast Ethernet PCI SiS; C:\WINDOWS\system32\DRIVERS\sisnic.sys [2004-08-03 32768]
R3 tunmp;Pilote de carte miniport Tun Microsoft; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-13 12288]
R3 usbehci;Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Concentrateur USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Pilote miniport de contrôleur hôte ouvert USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2004-09-29 702592]
S3 alcan5wn;SpeedTouch USB ADSL PPP Networking Driver (NDISWAN); C:\WINDOWS\system32\DRIVERS\alcan5wn.sys [2003-12-08 53600]
S3 alcaudsl;SpeedTouch ADSL Modem ATM Transport; C:\WINDOWS\system32\DRIVERS\alcaudsl.sys [2003-12-08 70688]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 grmnusb;grmnusb; C:\WINDOWS\system32\drivers\grmnusb.sys [2006-09-06 7296]
S3 PCAMPR5;PCAMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCAMPR5.SYS []
S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS []
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\WINDOWS\system32\DRIVERS\ss_bus.sys [2005-08-30 58320]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys [2005-08-30 8304]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\WINDOWS\system32\DRIVERS\ss_mdm.sys [2005-08-30 94000]
S3 ssm_bus;SAMSUNG Mobile USB Device II 1.0 driver (WDM); C:\WINDOWS\system32\DRIVERS\ssm_bus.sys [2007-05-02 83592]
S3 ssm_mdfl;SAMSUNG Mobile USB Modem II 1.0 Filter; C:\WINDOWS\system32\DRIVERS\ssm_mdfl.sys [2007-05-02 15112]
S3 ssm_mdm;SAMSUNG Mobile USB Port II 1.0 Drivers; C:\WINDOWS\system32\DRIVERS\ssm_mdm.sys [2007-05-02 109704]
S3 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2009-11-12 7168]
S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 6to4;Service d'application d'assistance IPv6; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 AntiVirScheduler;Avira AntiVir Personal – Free Antivirus Scheduler; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-03-07 68865]
R2 AntiVirService;Avira AntiVir Personal – Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-03-26 147201]
R2 ASTSRV;Nalpeiron Licensing Service; C:\WINDOWS\system32\ASTSRV.EXE [2008-05-19 57344]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 Capture Device Service;Capture Device Service; C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe [2007-03-06 198168]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe [2005-10-03 65536]
R2 FTRTSVC;France Telecom Routing Table Service; C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [2007-12-11 65536]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe [2006-10-19 61440]
R2 MDM;Machine Debug Manager; C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe [2003-06-19 322120]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2009-11-12 71096]
R2 ProtexisLicensing;ProtexisLicensing; C:\WINDOWS\system32\PSIService.exe [2006-11-02 174656]
R2 SPF4;Sunbelt Personal Firewall 4; C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe [2007-04-26 1234480]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe [2007-03-03 67056]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe [2005-10-03 1527893]
S2 cic32;CIC - MMC controls for Taskpad; cic32.dll,uqah []
S3 aspnet_state;Service d'état ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-04-07 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 getPlus(R) Helper;getPlus(R) Helper; C:\Program Files\NOS\bin\getPlus_HelperSvc.exe [2009-03-03 33176]
S3 GoogleDesktopManager;GoogleDesktopManager; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2007-08-14 1838592]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-01-26 138168]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 UPnPService;UPnPService; C:\Program Files\Fichiers communs\MAGIX Shared\UPnPService\UPnPService.exe [2006-12-14 544768]
S3 wampapache;wampapache; c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe [2008-12-10 24636]
S3 wampmysqld;wampmysqld; c:\wamp\bin\mysql\mysql5.1.33\bin\mysqld.exe [2009-03-16 6562432]
S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-03 918016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[bernard53]

OK après 3 heures cela suffit.

fait ceci en premier.


télécharge ST_Fix_Beta [/b](de Batch_Man) sur ton bureau
http://batchdhelus.open-web.fr/programme/ST_Fix.bat

Une fois le fichier télécharger...
double clique sur l'icone pour le lancer

Ensuite tu obtiens cette fenêtre, cliques sur "exécuter"


Ensuite tu obtiens cette fenêtre



fait le choix "3"(désinfection IE et Firefox) puis tape sur la touche "entrée" de ton clavier.

poste le rapport qui s'ouvre et dit nous si ta page d'accueil est restaurer :bien:



Puis:



Télécharge >>OTM<< (de Old_Timer) sur ton Bureau.


>> Pour VISTA : Clic-droit et choisis "Exécuter en tant qu'administrateur".

>> AVAST reconnait ce logiciel comme un intrus, donc le désactiver le temps des manipulations.

Double-clique sur OTM pour le lancer.

Copie la liste qui se trouve en citation ci-dessous:

:Reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3475D2C4-BBD1-4255-A70D-4125A4D30956}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"soft2PC"=-
"Helper"=-


:Files
C:\Windows\Tasks\At?.job
C:\Windows\Tasks\At??.job
C:\Program Files\Soft2PC
C:\Documents and Settings\UTILISATEUR\Application Data\Soft2PC
C:\Documents and Settings\UTILISATEUR\Application Data\EoRezo

:Commands
[purity]
[emptytemp]
[Reboot]

et colle-la dans le cadre de gauche de OTM sous ceci:



Clique sur pour lancer la suppression.
attendre la fin du travail de l'outil puis fermer OTM

Le résultat apparaitra dans le cadre Results.
Clique sur Exit pour fermer.
Poste le rapport situé dans C:\_OTM\MovedFiles\06092009_130526.log "Exemple"

NB: Il te sera peut-être demandé de redémarrer le pc pour achever la suppression.
si c'est le cas accepte par Oui/Yes.

[nasco]

alors j'ai téléchargé ST Fix sur mon bureau mais je n'ai aps eu la fenêtre que tu m'as indiqué c'est une fenêtre bleue qui eest apparue et qui disait "suppression veuillez patientez..." ensuite un rapport s'est ouvert que voici et firefox n'est pas revenu à la normal il a toujours l'apparence de IE

########################################################################
#
# ST_Fix v.2.05 par Batch_Man
# Mise à jour le 06/08/2009
# Début a 22:12 le 22/03/2010
# Système d'exploitation: Microsoft Windows XP
# Service Pack: Service Pack 3
# Mode de boot: Normal
# Lancé de C:\Documents and Settings\UTILISATEUR\Bureau\ST_Fix.bat
#
################################ Suppression ###############################
#
# SUPPRIMÉ - C:\Documents and Settings\HelpAssistant.STATION.001\Application Data\EoRezo
# SUPPRIMÉ - C:\Documents and Settings\HelpAssistant.STATION.001\Application Data\ItsLabel
# SUPPRIMÉ - C:\Documents and Settings\UTILISATEUR\Application Data\EoRezo
# SUPPRIMÉ - C:\Documents and Settings\UTILISATEUR\Application Data\ItsLabel
#
################################## Terminé ################################

[nasco]

alors j'ai fait comme tu m'as dit le pc a redémarrer toujours aussi lent et voici le rapport de OTM

All processes killed
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3475D2C4-BBD1-4255-A70D-4125A4D30956}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3475D2C4-BBD1-4255-A70D-4125A4D30956}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\soft2PC deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Helper deleted successfully.
========== FILES ==========
C:\Windows\Tasks\At1.job moved successfully.
C:\Windows\Tasks\At2.job moved successfully.
C:\Windows\Tasks\At3.job moved successfully.
C:\Windows\Tasks\At4.job moved successfully.
C:\Windows\Tasks\At5.job moved successfully.
C:\Windows\Tasks\At6.job moved successfully.
C:\Windows\Tasks\At7.job moved successfully.
C:\Windows\Tasks\At8.job moved successfully.
C:\Windows\Tasks\At9.job moved successfully.
C:\Windows\Tasks\At10.job moved successfully.
C:\Windows\Tasks\At11.job moved successfully.
C:\Windows\Tasks\At12.job moved successfully.
C:\Windows\Tasks\At13.job moved successfully.
C:\Windows\Tasks\At14.job moved successfully.
C:\Windows\Tasks\At15.job moved successfully.
C:\Windows\Tasks\At16.job moved successfully.
C:\Windows\Tasks\At17.job moved successfully.
C:\Windows\Tasks\At18.job moved successfully.
C:\Windows\Tasks\At19.job moved successfully.
C:\Windows\Tasks\At20.job moved successfully.
C:\Windows\Tasks\At21.job moved successfully.
C:\Windows\Tasks\At22.job moved successfully.
C:\Windows\Tasks\At23.job moved successfully.
C:\Windows\Tasks\At24.job moved successfully.
C:\Windows\Tasks\At25.job moved successfully.
C:\Windows\Tasks\At26.job moved successfully.
C:\Windows\Tasks\At27.job moved successfully.
C:\Windows\Tasks\At28.job moved successfully.
C:\Windows\Tasks\At29.job moved successfully.
C:\Windows\Tasks\At30.job moved successfully.
C:\Windows\Tasks\At31.job moved successfully.
C:\Windows\Tasks\At32.job moved successfully.
C:\Windows\Tasks\At33.job moved successfully.
C:\Windows\Tasks\At34.job moved successfully.
C:\Windows\Tasks\At35.job moved successfully.
C:\Windows\Tasks\At36.job moved successfully.
C:\Windows\Tasks\At37.job moved successfully.
C:\Windows\Tasks\At38.job moved successfully.
C:\Windows\Tasks\At39.job moved successfully.
C:\Windows\Tasks\At40.job moved successfully.
C:\Windows\Tasks\At41.job moved successfully.
C:\Windows\Tasks\At42.job moved successfully.
C:\Windows\Tasks\At43.job moved successfully.
C:\Windows\Tasks\At44.job moved successfully.
C:\Windows\Tasks\At45.job moved successfully.
C:\Windows\Tasks\At46.job moved successfully.
C:\Windows\Tasks\At47.job moved successfully.
C:\Windows\Tasks\At48.job moved successfully.
C:\Program Files\Soft2PC folder moved successfully.
C:\Documents and Settings\UTILISATEUR\Application Data\Soft2PC\Software folder moved successfully.
C:\Documents and Settings\UTILISATEUR\Application Data\Soft2PC folder moved successfully.
File/Folder C:\Documents and Settings\UTILISATEUR\Application Data\EoRezo not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrateur
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: HelpAssistant
->Temp folder emptied: 9406259 bytes
->Temporary Internet Files folder emptied: 71411262 bytes
->Java cache emptied: 114833 bytes
->FireFox cache emptied: 314667607 bytes
->Opera cache emptied: 23906169 bytes
->Flash cache emptied: 7826 bytes

User: HelpAssistant.STATION
->Temp folder emptied: 9607904 bytes
->Temporary Internet Files folder emptied: 180327227 bytes
->Java cache emptied: 114833 bytes
->FireFox cache emptied: 216784949 bytes
->Opera cache emptied: 23906169 bytes
->Flash cache emptied: 7983 bytes

User: HelpAssistant.STATION.000
->Temporary Internet Files folder emptied: 32768 bytes

User: HelpAssistant.STATION.001
->Temp folder emptied: 1324617 bytes
->Temporary Internet Files folder emptied: 63980528 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 235360247 bytes
->Opera cache emptied: 27700538 bytes
->Flash cache emptied: 1615 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 47982754 bytes
->Flash cache emptied: 597 bytes

User: UTILISATEUR
->Temp folder emptied: 4634156 bytes
->Temporary Internet Files folder emptied: 22923614 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 401671159 bytes
->Opera cache emptied: 44325178 bytes
->Flash cache emptied: 434 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2128634 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 221262 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 23968854 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 1 647,00 mb


OTM by OldTimer - Version 3.1.10.1 log created on 03222010_222110

[bernard53]

Mets moi un nouveau rapport RSIT s.t.p