========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
c:\program files\funkyemoticons\FunkyEmoticons.exe moved successfully.
File/Folder c:\documents and settings\thierry\local settings\application data\suogg.exe not found.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]suogg=\ not found.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\THIERRY\LOCALS~1\Temp\etilqs_ByDvgIkDOfC7nrTCV0Yt scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\THIERRY\LOCALS~1\Temp\Perflib_Perfdata_444.dat scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\THIERRY\LOCALS~1\Temp~DF73BA.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\THIERRY\LOCALS~1\Temp~DFA6F6.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\THIERRY\LOCALS~1\Temp~DFA7C3.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\THIERRY\LOCALS~1\Temp~DFA963.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\THIERRY\LOCALS~1\Temp~DFA98E.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\THIERRY\LOCALS~1\Temp~DFAD39.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\THIERRY\LOCALS~1\Temp~DFAE61.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\THIERRY\LOCALS~1\Temp~DFB141.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\THIERRY\LOCALS~1\Temp~DFB253.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\THIERRY\LOCALS~1\Temp~DFB4B8.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\THIERRY\LOCALS~1\Temp~DFB55C.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\THIERRY\LOCALS~1\Temp~DFBDE3.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\THIERRY\LOCALS~1\Temp~DFBEA1.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\THIERRY\LOCALS~1\Temp~DFC0BF.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\THIERRY\LOCALS~1\Temp~DFC104.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\THIERRY\LOCALS~1\Temp~DFC1B1.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\THIERRY\LOCALS~1\Temp~DFC1DA.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\THIERRY\LOCALS~1\Temp~DFC31C.tmp scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\THIERRY\LOCALS~1\Temp~DFC33F.tmp scheduled to be deleted on reboot.
User’s Temp folder emptied.
User’s Temporary Internet Files folder emptied.
User’s Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\History\History.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Fichiers Internet temporaires\Content.IE5\index.dat scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat scheduled to be deleted on reboot.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp_avast4_\Webshlock.txt scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_1a4.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_3c4.dat scheduled to be deleted on reboot.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_574.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\THIERRY\Local Settings\Application Data\Mozilla\Firefox\Profiles\asldp2ty.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully
OTMoveIt3 by OldTimer - Version 1.0.7.2 log created on 08312009_175548
Fix Navipromo version 4.0.2 commencé le 31/08/2009 18:22:31,50
!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!
Outil exécuté depuis C:\Program Files\navilog1
Mise à jour le 27.08.2009 à 11h00 par IL-MAFIOSO
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel® Pentium® 4 CPU 3.20GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : THIERRY ( Administrator )
BOOT : Normal boot
Antivirus : Avanquest Fix-It 3.1.2416 (Not Activated)
Firewall : Anti-Virus Personnel 2008 6.0.2.621 (Not Activated)
C:\ (Local Disk) - NTFS - Total:149 Go (Free:43 Go)
D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
E:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
F:\ (Local Disk) - NTFS - Total:465 Go (Free:323 Go)
I:\ (USB)
J:\ (USB)
K:\ (USB)
L:\ (USB)
U:\ (CD or DVD)
V:\ (CD or DVD)
W:\ (CD or DVD)
X:\ (CD or DVD)
Y:\ (CD or DVD)
Z:\ (CD or DVD)
Recherche executée en mode normal
Nettoyage exécuté au redémarrage de l’ordinateur
C:\Program Files\FunkyEmoticons supprimé !
C:\Program Files\Live-Player supprimé !
C:\Documents and Settings\All Users\menudm~1\progra~1\FunkyEmoticons supprimé !
C:\Documents and Settings\All Users\menudm~1\progra~1\Live-Player supprimé !
C:\Documents and Settings\THIERRY\applic~1\FunkyEmoticons supprimé !
C:\Documents and Settings\THIERRY\applic~1\Live-Player supprimé !
C:\DOCUME~1\MARQUIS\applic~1\FunkyEmoticons supprimé !
C:\WINDOWS\prefetch\FUNKYEMOTICONS.EXE-1AF52D6B.pf supprimé !
C:\WINDOWS\prefetch\suogg*.pf supprimé !
Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\THIERRY\locals~1\Temp effectué !
*** Sauvegarde du Registre vers dossier Safebackup ***
sauvegarde du Registre réalisée avec succès !
*** Nettoyage Registre ***
Nettoyage Registre Ok
*** Scan terminé 31/08/2009 18:38:16,70 ***
-----------\ ToolBar S&D 1.2.9 XP/Vista
Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel® Pentium® 4 CPU 3.20GHz )
BIOS : Phoenix - AwardBIOS v6.00PG
USER : THIERRY ( Administrator )
BOOT : Normal boot
Antivirus : Avanquest Fix-It 3.1.2416 (Not Activated)
C:\ (Local Disk) - NTFS - Total:149 Go (Free:43 Go)
D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
E:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
F:\ (Local Disk) - NTFS - Total:465 Go (Free:323 Go)
I:\ (USB)
J:\ (USB)
K:\ (USB)
L:\ (USB)
U:\ (CD or DVD)
V:\ (CD or DVD)
W:\ (CD or DVD)
X:\ (CD or DVD)
Y:\ (CD or DVD)
Z:\ (CD or DVD)
“C:\ToolBar SD” ( MAJ : 22-08-2009|18:42 )
Option : [2] ( 31/08/2009|18:44 )
-----------\ SUPPRESSION
Supprime! - C:\Program Files\GamesBar\Localization2-French.ini
Supprime! - C:\Program Files\GamesBar
-----------\ Recherche de Fichiers / Dossiers …
-----------\ Extensions
(THIERRY) - {20a82645-c095-46ed-80e3-08825760534b} => chrome_user
(THIERRY) - {40a1f5d7-afc2-498f-b264-02668d616ff6} => megamanager
(THIERRY) - {62760FD6-B943-48C9-AB09-F99C6FE96088} => ebaycompanion
(THIERRY) - {81BF1D23-5F17-408D-AC6B-BD6DF7CAF670} => imacros
(THIERRY) - {991A772A-BA13-4c1d-A9EF-F897F31DEC7D} => megaupload
(THIERRY) - {a089fffd-e0cb-431b-8d3a-ebb8afb26dcf} => platypus
(THIERRY) - {b9db16a4-6edc-47ec-a1f4-b86292ed211d} => dwhelper
(THIERRY) - {bcb4f322-a177-4ecd-9c80-835d96e1e595} => xmldsigffext
-----------\ […\Internet Explorer\Main]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
“Local Page”=“C:\WINDOWS\system32\blank.htm”
“Start Page”=“http://www.google.fr/”
“Search Page”=“http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch”
“Default_Page_URL”=“http://go.microsoft.com/fwlink/?LinkId=69157”
“Search Bar”=“http://search.msn.com/spbasic.htm”
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
“Default_Page_URL”=“http://go.microsoft.com/fwlink/?LinkId=69157”
“Default_Search_URL”=“http://go.microsoft.com/fwlink/?LinkId=54896”
“Search Page”=“http://go.microsoft.com/fwlink/?LinkId=54896”
“Local Page”=“C:\WINDOWS\system32\blank.htm”
“Start Page”=“http://www.msn.com/”
--------------------\ Recherche d’autres infections
Aucune autre infection trouvée !
1 - “C:\ToolBar SD\TB_1.txt” - 31/08/2009|18:46 - Option : [2]
-----------\ Fin du rapport a 18:46:43,64
Edité le 31/08/2009 à 18:43