B.exe / msa.exe [Résolu/Fermé]

Luu' !

=> Procède comme ceci :

✲ Installe Hijackthis

►►► Pour installer Hijackthis clique ici ◄◄◄

● Installe le sur ton bureaux
● Clique sur l'icone Hijackthis qui se trouve sur ton bureaux
● L'option à choisirs est "Do a system scan and save a logfile"
● Un fichier texte s'ouvre, si ce n'est pas le cas celui-ci se trouve dans le meme dossier que hijackthis.exe.
● Copie son intégralité et envoie le dans ta prochaine reponse stp

Tuto : http://www.malekal.com/tutorial_HijackThis.php ce tuto

désolé mais il n'y a aucun dossier texte qui s'ouvre et aucun n'apparaît sur le bureau

Lis bien le tuto et tu verras ;-)

j'ai lu le tutoriel, j'ai je peux faire un scan, mais la fenetre de HiJackThis disparait avant que je puisse save log et ensuite je ne peu plus accéder a HiJack

je suis un peu embêter

Ont essaye autrement

◆ Télécharge sur ton bureaux RSIT ( Random's Systeme Information Tools ) de Random/Random :
http://images.malwareremoval.com/random/RSIT.exe

◆ Double clique sur RSIT.exe qui se trouve sur ton bureau pour le lancer
◆ Une fenetre intitulé " Disclaimer of Warranty " s'ouvre clique sur continue Le rapport commence ...



* Les rapports ce trouvent à cet endroit : C:\rsit\info.txt C:\rsit\log.txt Tu dois fusionner les deux rapports. Pour en faire un seul info.txt
+ log.txt .

Voici le fichier Log.......aucune trace du fichier info


Logfile of random's system information tool 1.06 (written by random/random)
Run by Jean-François at 2009-09-29 15:19:37
Microsoft Windows XP Professionnel Service Pack 2
System drive C: has 23 GB (25%) free of 93 GB
Total RAM: 895 MB (34% free)


======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\ctglixsh.job
C:\WINDOWS\tasks\{7B02EF0B-A410-4938-8480-9BA26420A627}.job
C:\WINDOWS\tasks\{BB65B0FB-5712-401b-B616-E69AC55E2757}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Aide pour le lien d'Adobe PDF Reader - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9394EDE7-C8B5-483E-8773-474BF36AF6E4}]
ST - C:\Program Files\MSN Apps\ST\01.02.3000.1001\en-xu\stmain.dll [2004-08-13 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-09-11 256112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll [2009-09-24 762864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
MSNToolBandBHO - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll [2006-01-17 282624]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2009-09-11 458736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - MSN - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll [2006-01-17 282624]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-09-11 256112]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray"=C:\WINDOWS\ehome\ehtray.exe [2005-08-05 64512]
"LaunchApp"=Alaunch []
"High Definition Audio Property Page Shortcut"=C:\WINDOWS\system32\HDAShCut.exe [2005-01-07 61952]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2005-09-22 14854144]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784]
"ntiMUI"=c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe [2005-05-11 45056]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2004-11-02 32768]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-10 208952]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2004-08-10 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-10 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-10 455168]
"SMSERIAL"=C:\WINDOWS\sm56hlpr.exe [2005-06-06 544768]
"eRecoveryService"=C:\Acer\Empowering Technology\eRecovery\Monitor.exe [2005-11-16 397312]
"TkBellExe"=C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe [2006-12-17 185896]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-03-28 413696]
"ArcSoft Connection Service"=C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACDaemon.exe [2007-10-11 31232]
"D-Link RangeBooster G WUA-2340"=C:\Program Files\D-Link\RangeBooster G WUA-2340\AirPlusCFG.exe [2006-09-01 1880064]
"ANIWZCS2Service"=C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe [2006-06-29 49152]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"MSConfig"=C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.EXE [2004-08-10 160768]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-09-15 81000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"=C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2007-10-18 5724184]
"BitTorrent"=C:\Program Files\BitTorrent\bittorrent.exe [2006-10-10 43520]
"Gestionnaire Antidote.exe"=C:\PROGRA~1\Druide\Antidote\Gestionnaire Antidote.exe [2006-09-10 439992]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-07-26 68856]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-11-03 204288]
"PopRock"=C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\b.exe [2009-09-28 147968]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PopRock]
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\b.exe [2009-09-28 147968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2005-04-14 46080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2006-06-19 702768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2004-08-10 240128]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\mIRC\mirc.exe"="C:\Program Files\mIRC\mirc.exe:*:Disabled:mIRC"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\Program Fi

Applique toi dans les manip'

C:\rsit\info.txt C:\rsit\log.txt

c'est ce que je t,ai dit, il n'y a aucune trace du fichier info.....

lorsque je lance RSIT, un message apparaît : Windows ne parvient pas à accéder au périphérique, au chemin d'accès ou au fichier spécifié. Vous ne disposez peut-être pas des autorisations appropriées pour avoir accès à l'élément.

et dans C:Rsit il n'y a que le log.txt

j'ai fait une recherche et il n'y a aucune info.txt nul part

T'est Admin ?

Oui c'est mon PC perso à la maison

Essaye de désinstaller et réinstaller hijackthis pour voir ...

si j'essaie de supprimer HiJackThis sa dit :

Accès Refusé.
Vérifiez que le disque n'est pas plein ou protégé en écriture, et que le fichier n'est pas utilisé actuellement.

Je sais pas comment vérifiez sa........y'a d'autre moyen de s'en débarrasser?

Salut Helper,


[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PopRock]
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\b.exe [2009-09-28 147968]


Au cas ou tu serais passé à côté

alors on fait quoi avec ce truc?

merci

Tu le supprime manuellement ..

Merci Xplode

je suis pas sur de savoir comment :(

- Télécharge OTMoveIt (de Old_Timer) http://up.sur-la-toile.com/ik3a sur ton Bureau.
- Double-clique sur OTMoveIt.exe
- Assure toi que la case Unregister Dll's and Ocx's soit bien cochée
- Copie le texte en gras ci dessous et colle le dans le cadre de gauche de OTMoveIt nommé Paste List of Files/Folders to be moved

:processes
explorer.exe
b.exe

:reg
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PopRock]

:files
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\*.*

:commands
[emptytemp]
[purity]
[start explorer]


- Clique sur MoveIt! pour lancer la suppression.
- Si OTMoveIt propose de redémarrer ton PC, accepte.
- Lorsque un résultat apparaît dans le cadre Results, clique sur Exit.
- Dans ta future réponse, envoie le rapport de OTMoveIt situé sur C:\_OTMoveIt\MovedFiles

------------------------

Je laisse helper s'occuper de la suite ;)

========== PROCESSES ==========
Process explorer.exe killed successfully.
Unable to kill process: b.exe
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PopRock\\ deleted successfully.
========== FILES ==========
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\a.dat moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\AC164.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\b.exe moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\c.exe moved successfully.
File move failed. C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\etilqs_sGEtw8bb2vYuOyvMQaQi scheduled to be moved on reboot.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\IMT17.xml moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\IMT18.xml moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\IMT19.xml moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\IMT1A.xml moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\IMT1B.xml moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\jusched.log moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\MPC3.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\M_R7p2Pv.html.part moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR1A7.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR1A8.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR1AA.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR1AB.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR1AD.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR1AF.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR1B0.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR1B1.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR231.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR232.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR234.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR235.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR236.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR238.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR23A.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR23B.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR2C9.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR2CA.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR2CC.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR2CE.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR2D0.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR2D1.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR2D2.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR2D3.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR39F.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR3A0.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR3A2.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR3A3.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR3A4.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR3A5.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR3A6.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\TFR3A8.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\wlsetup-cvr.exe moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\wmplog00.sqm moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\wmplog01.sqm moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\wmplog02.sqm moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\wmplog03.sqm moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\wmplog04.sqm moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\wmplog05.sqm moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\wmplog06.sqm moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\Z4q5Tob1.html.part moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\~DF15B.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\~DF1743.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\~DF1B35.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\~DF1FC9.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\~DF287.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\~DF4CB.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\~DF5C19.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\~DF6675.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\~DF723D.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\~DF74C9.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\~DF8AD5.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\~DFA233.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\~DFB87D.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\~DFB93E.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\~DFDB42.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\~DFE03B.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\~DFE218.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\~DFE4C1.tmp moved successfully.
C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\~DFEA0A.tmp moved successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\etilqs_sGEtw8bb2vYuOyvMQaQi scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Historique\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_654.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\Jean-François\Local Settings\Application Data\Mozilla\Firefox\Profiles\yuxyrtxg.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Jean-François\Local Settings\Application Data\Mozilla\Firefox\Profiles\yuxyrtxg.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Jean-François\Local Settings\Application Data\Mozilla\Firefox\Profiles\yuxyrtxg.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Jean-François\Local Settings\Application Data\Mozilla\Firefox\Profiles\yuxyrtxg.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Jean-François\Local Settings\Application Data\Mozilla\Firefox\Profiles\yuxyrtxg.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Jean-François\Local Settings\Application Data\Mozilla\Firefox\Profiles\yuxyrtxg.default\XUL.mfl scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.7.0 log created on 09292009_165904

Files moved on Reboot...
File C:\DOCUME~1\JEAN-F~1\LOCALS~1\Temp\etilqs_sGEtw8bb2vYuOyvMQaQi not found!
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Historique\History.IE5\index.dat scheduled to be moved on reboot.
File move failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be moved on reboot.
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat moved successfully.
C:\WINDOWS\temp\Perflib_Perfdata_654.dat moved successfully.
C:\Documents and Settings\Jean-François\Local Settings\Application Data\Mozilla\Firefox\Profiles\yuxyrtxg.default\Cache\_CACHE_001_ moved successfully.
C:\Documents and Settings\Jean-François\Local Settings\Application Data\Mozilla\Firefox\Profiles\yuxyrtxg.default\Cache\_CACHE_002_ moved successfully.
C:\Documents and Settings\Jean-François\Local Settings\Application Data\Mozilla\Firefox\Profiles\yuxyrtxg.default\Cache\_CACHE_003_ moved successfully.
C:\Documents and Settings\Jean-François\Local Settings\Application Data\Mozilla\Firefox\Profiles\yuxyrtxg.default\Cache\_CACHE_MAP_ moved successfully.
C:\Documents and Settings\Jean-François\Local Settings\Application Data\Mozilla\Firefox\Profiles\yuxyrtxg.default\urlclassifier3.sqlite moved successfully.
C:\Documents and Settings\Jean-François\Local Settings\Application Data\Mozilla\Firefox\Profiles\yuxyrtxg.default\XUL.mfl moved successfully.

Ont demande à notre amis le robot ? xD

Fait ceci :

◆ Clique ici pour installer Genproc


► Installe sur ton bureaux GenProc en suivant le lien d'en haut
► Double clique sur le raccourci GenProc.exe
► Poste le contenu du rapport qui s'ouvre


# Si le rapport ne s'ouvre pas :

- Démarrer > Poste de travail > Disque local > GenProc > Arguments ; GenProc[1].txt
Ou alors
- Démarrer > Poste de travail > Disque local > GenProc > Page ; GenProc[1].html

( CTRL + A pour sélectionner le rapport, CTRL + C pour le copier, CTRL + V pour le coller )

bon

dans Arguments il y a 2 txt : Argument.txt et Debug.txt mais aucune trace de GenProc[1].txt

dans Page il n'y a que des Gif.