Impossible de faire les mise à jour Fermé

Question

Bonjour, 
J'ai pas mal de problemes avec mon ordi.
Depuis plusieurs semaines, il m'est impossible de faire les mises à jour de mes logiciels. De plus mon anti virus ne fonctionne plus, j'ai tenter de le changer mais c'est pareil avec tous. du coup mon ordi n'as plus de protection. Je peux pas non plus faire de scan en ligne (je viens d'essayer) et mon navigateur firefox ne fonctionne plus (je suis donc sous internet explorer)
Sinon mon ordi surchauffe tres vite, j'ai tenter de le nettoyer mais c'est toujours pareil. Je sais pas à quoi c'est du.
Je pensais formater mon ordi, histoire de tout regler mais j'ai pu le cd d'installation donner lors de l'achat de mon pc et comme je suis une bille en informatique, j'ai pas envie de le foutre en l'air.
Voilà si quelqu'un pouvait m'aider ce serait vraiment genial

Merci à vous.



Configuration: Windows Vista / Internet Explorer 8.0

gen-hackman · Answer

salut

bah dis donc ! si on jette un pc parce qu'une install plante je vais faire eboueur !!!

* Télécharge ici : USBFIX sur ton bureau 



/!\ Désactive provisoirement et seulement le temps de l'utilisation d'USBFIX, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...." 

sur l'icône Usbfix située sur ton Bureau.
Sur la page, clique sur le bouton :

« Recherche »

/!\ Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectées sans les ouvrir

- puis clique sur OK
- Laisse travailler l'outil.
- Poste le rapport qui apparaît à la fin.
le rapport se trouve sur C:\ UsbFix.txt



 Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. 
          Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. 
          Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

bulle_imbuvable · Answer

salut

heeeeey j'ai jamais dis que je voulais le jeter, quand je disais "j'ai pas envie de le foutre en l'air" c'était faire une mauvaise manip' en voulait le formater.

Sinon voilà le rapport:

############################## | UsbFix 7.023 | [Recherche]

Utilisateur: Leeloo (Administrateur) # PC-DE-LEELOO [eMachines E520]
Mis à jour le 02/09/10 par El Desaparecido / C_XX
Lancé à 06:51:35 | 07/09/2010
Site Web: http://www.teamxscript.org
Contact: FindyKill.Contact@gmail.com

CPU: Genuine Intel(R) CPU 575 @ 2.00GHz
Microsoft® Windows Vista(TM) Édition Familiale Basique  (6.0.6002 32-Bit) # Service Pack 2
Internet Explorer 8.0.6001.18943

Pare-feu Windows: Désactivé /!\
RAM -> 1977 Mo 
C:\ (%systemdrive%) -> Disque fixe # 139 Go (36 Go libre(s) - 26%) [OS] # NTFS
D:\ -> CD-ROM
F:\ -> CD-ROM

################## | Éléments infectieux |

Présent! F:\Autorun.inf

################## | Registre |


################## | Mountpoints2 |

HKCU\.\.\.\.\Explorer\MountPoints2\E
Shell\AutoRun\Command = E:\SFR.exe

HKCU\.\.\.\.\Explorer\MountPoints2\F
Shell\AutoRun\Command = F:\SFR.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{37eb2ab6-7bb1-11de-9413-001eecd79d0d}
Shell\AutoRun\Command = E:\SFR.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{49414024-7a0a-11de-8ae1-001eecd79d0d}
Shell\AutoRun\Command = E:\SFR.exe

HKCU\.\.\.\.\Explorer\MountPoints2\{512c957b-b46c-11df-a27e-00a0c6000000}
Shell\AutoRun\Command = E:\SFR.exe


################## | Vaccin |

(!) Cet ordinateur n'est pas vacciné!

################## | E.O.F |

merci pour ton aide.

gen-hackman · Answer

&#9654 Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptibles d avoir été infectés sans les ouvrir


&#9654 Fais un clic droit sur le raccourci UsbFix présent sur ton bureau et choisi éxécuter en tant qu'administrateur .

&#9654 choisi l option 2 ( Suppression )

&#9654 UsbFix scannera ton pc , laisse travailler l outil.

&#9654 Ensuite post le rapport UsbFix.txt qui apparaitra avec le bureau .

&#9654 Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )

( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller ) 

######### | Désinstallation | #########


&#9654 Fais un clic droit sur le raccourci UsbFix présent sur ton bureau et choisi éxécuter en tant qu'administrateur .

&#9654 Choisi l option  Désinstaller ....

bulle_imbuvable · Answer

attends, tu veux que je clique sur suppression ce qui en fait supprimera ca:  
################## | Éléments infectieux |  

Présent! F:\Autorun.inf  

c'est exact? 

parce que ca c'est sur ma clé 3g, et je sais pas si c'était dessus à l'origine ni si c'est important ou non alors je prefere verifier si je pourrais perdre ma connection internet avant de cliquer. 


Fin voilà

gen-hackman · Answer

on ne la voit pas ta clé 3G dans le listing des peripheriques....

bulle_imbuvable · Answer

littlecoelho : c'est ca qui apparait en dessous:  
"[autorun] 
open=SFR.exe 
icon=key.ico" 

gen-hackman: bah elle est brancher pourtant, tout les trucs dans le rapport où c'est inscrit "sfr" tout ca , c'est ma clé

bulle_imbuvable · Answer

ouai je pense aussi que formater serait mieux, je vais essayer de voir ca dans ls jours à venir.
Merci en tout cas

gen-hackman · Answer

attends

fais l option vaccination avec usbfix , puis option desinstaller

ensuite :

Télécharge ici :OTL

&#9654 enregistre le sur ton Bureau.

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...." 

sur OTL.exe pour le lancer.

&#9654 Coche les 2 cases Lop et Purity

&#9654 Coche la case devant tous les utilisateurs

&#9654 règle age du fichier sur "60 jours"

&#9654 dans la moitié gauche , mets tout sur "tous"

ne modifie pas ceci : 

"fichiers créés" et "fichiers Modifiés" 

&#9654Clic sur Analyse.

A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).

Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\OTL.txt)

&#9654&#9654&#9654 NE LE POSTE PAS SUR LE FORUM

Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/

&#9654 Clique sur Parcourir et cherche le fichier ci-dessus.

&#9654 Clique sur Ouvrir.

&#9654 Clique sur "Cliquez ici pour déposer le fichier".

juste au niveau du bouton , en fin de chargement du fichier , Un lien de cette forme apparaitra :

http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt

&#9654 Copie ce lien dans ta réponse.

&#9654&#9654 Tu feras la meme chose avec le "Extra.txt" qui logiquement sera aussi sur ton bureau.

bulle_imbuvable · Answer

http://www.cijoint.fr/cjlink.php?file=cj201009/cijEKSEDXr.txt 

http://www.cijoint.fr/cjlink.php?file=cj201009/cij94eDi9u.txt 

voilà

gen-hackman · Answer

desinstalle Spybot il vaut rien

ensuite :


&#9654 Télécharge ici : Ad-remover sur ton bureau : 


&#9654 Déconnecte toi et ferme toutes applications en cours ! 

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...." 

&#9654 sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut . 

&#9654 clique le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .
 
&#9654 Au menu principal choisis "option Nettoyer" et tape sur [entrée] .

&#9654 Laisse travailler l'outil et ne touche à rien ... 

&#9654 Poste le rapport qui apparait à la fin , sur le forum ...

( Le rapport est sauvegardé aussi sous C:\Ad-report.log ) 
( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller ) 

&#9654 Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. 
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. 
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

bulle_imbuvable · Answer

voilà

======= RAPPORT D'AD-REMOVER 2.0.0.1,E | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par C_XX le 06/09/10 à 15:20
Contact: AdRemover.contact[AT]gmail.com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 20:00:05 le 07/09/2010, Mode normal

Microsoft® Windows Vista(TM) Édition Familiale Basique  Service Pack 2 (X86) 
Cécilou@PC-DE-CÉCILOU (eMachines E520) 
 
============== ACTION(S) ==============


0,Fichier supprimé: C:\Program Files\Mozilla FireFox\Components\AskSearch.js
0,Dossier supprimé: C:\Users\Cécilou\AppData\Roaming\Mozilla\FireFox\Profiles\pke4wl17.default\extensions\{346DE098-61F9-4B42-89DA-6DFBA7091BB6}
0,Fichier supprimé: C:\Users\Cécilou\AppData\Roaming\Mozilla\FireFox\Profiles\pke4wl17.default\prefs.js.ask.bak
0,Fichier supprimé: C:\Users\Cécilou\AppData\Roaming\Mozilla\FireFox\Profiles\pke4wl17.default\searchplugins\ask.uk.xml
0,Dossier supprimé: C:\Users\Cécilou\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ask Search Assistant
0,Dossier supprimé: C:\Program Files\Ask Search Assistant
0,Dossier supprimé: C:\Users\Cécilou\AppData\LocalLow\Conduit
0,Dossier supprimé: C:\Program Files\Conduit
3,Fichier supprimé: C:\Users\Cécilou\AppData\Local\uciuumg.bat
0,Fichier supprimé: C:\Users\Cécilou\Documents\Contacts\Downloads\IMBoosterSetup.g9mgh9ziglbjampqnyadiftt.exe

(!) -- Fichiers temporaires supprimés.


-- Fichier ouvert: C:\Users\Cécilou\AppData\Roaming\Mozilla\FireFox\Profiles\pke4wl17.default\Prefs.js --
Ligne supprimée: user_pref("CT2032792.CT2023834.SearchEngine", "Recherche||hxxp://search.conduit.com/Results.aspx?q=U... 
Ligne supprimée: user_pref("CT2032792.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT203... 
Ligne supprimée: user_pref("CT2032792.myStuffSearchUrl", "hxxp://search.conduit.com/Results.aspx?q=SEARCH_TERM&ctid=E... 
Ligne supprimée: user_pref("CT2567681.SearchEngine", "Recherche||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_... 
Ligne supprimée: user_pref("CT2567681.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT256... 
Ligne supprimée: user_pref("CT2567681.ct2567681.SearchEngine", "Recherche||hxxp://search.conduit.com/Results.aspx?q=U... 
Ligne supprimée: user_pref("browser.search.defaultthis.engineName", "Messenger Plus Live France Customized Web Search... 
Ligne supprimée: user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2567681&Sea... 
-- Fichier Fermé --
 

1,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
1,Clé supprimée: HKLM\Software\Classes\Interface\{0CA97EEE-C8C4-4B10-A332-10AF1FBEB534}
1,Clé supprimée: HKLM\Software\Classes\Interface\{12FB9C3D-0875-4CAA-B3B1-9DCCCE749DE5}
1,Clé supprimée: HKLM\Software\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}
1,Clé supprimée: HKLM\Software\Classes\TypeLib\{2C6674DB-EFB5-464A-A715-3E770B9C8A94}
1,Clé supprimée: HKLM\Software\Classes\TypeLib\{77860007-19AE-4C29-B26D-AEA48F3A05C5}
0,Clé supprimée: HKLM\Software\Classes\Toolbar.CT2124320
0,Clé supprimée: HKLM\Software\Classes\Toolbar.CT2501863
0,Clé supprimée: HKLM\Software\Classes\Toolbar.CT2567681
0,Clé supprimée: HKLM\Software\America Online\AIM\Plugins\{696E3174-4F6C-4777-7834-654C4A705677}
0,Clé supprimée: HKLM\Software\Conduit
0,Clé supprimée: HKLM\Software\iAvatars.com
0,Clé supprimée: HKLM\Software\Iminent
0,Clé supprimée: HKCU\Software\AskSearchAsst
0,Clé supprimée: HKCU\Software\Conduit
0,Clé supprimée: HKCU\Software\Iminent
0,Clé supprimée: HKCU\Software\AppDataLow\Software\Conduit
3,Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
3,Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
3,Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
3,Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\2bd34d32-03f8-4bf9-9c88-ed6acd5f2a94
0,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0D06637C-6624-433C-A807-C34D45DAB184}
0,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ask.com Search Assistant
0,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWeb
0,Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Extensions\{3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF}
0,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\AskSearchAsst.exe


============== SCAN ADDITIONNEL ==============

** Mozilla Firefox Version [3.6.3 (fr)] **

-- C:\Users\Cécilou\AppData\Roaming\Mozilla\FireFox\Profiles\pke4wl17.default\Prefs.js --
browser.download.lastDir, C:\Users\Cécilou\Documents\Contacts\Downloads
browser.search.selectedEngine, Ask
browser.startup.homepage, hxxp://www.plusnetwork.com
browser.startup.homepage_override.mstone, rv:1.9.2.3

========================================

** Internet Explorer Version [8.0.6001.18943] **

[HKCU\Software\Microsoft\Internet Explorer\Main] 
AutoHide: yes
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Use Search Asst: no

[HKLM\Software\Microsoft\Internet Explorer\Main] 
AutoHide: yes
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Enable Browser Extensions: yes
Local Page: C:\Windows\System32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
Use Search Asst: no

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] 
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files\Ad-Remover\Quarantine: 36 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 16 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 07/09/2010 (6616 Octet(s)) 

Fin à: 20:02:32, 07/09/2010 
 
============== E.O.F ==============

gen-hackman · Answer

bien refais OTL stp

bulle_imbuvable · Answer

http://www.cijoint.fr/cjlink.php?file=cj201009/cijYMCkOrW.txt 
http://www.cijoint.fr/cjlink.php?file=cj201009/cijf8uXrTd.txt

gen-hackman · Answer

/!\ ATTENTION SUIVRE A LA LETTRE CES INDICATIONS/!\

__________________________________________________________
>Ce logiciel n'est à utiliser que prescrit par un helper qualifié et formé à l'outil.<
>>>>>>>Ne pas utiliser en dehors de ce cas de figure : dangereux!<<<<<<<<
=====================================================

▶ Surtout , pense à l'enregistrement à renommer Combofix en "ton prenom.exe" avant qu'il soit enregistré sur ton disque dur

Telecharge ici : Combofix

Avant d'utiliser ComboFix :

Les logiciels d'émulation de CD comme Daemon Tools peuvent gêner les outils de désinfection. Utilise Defogger pour les désactiver temporairement :

▶ Télécharge Defogger (de jpshortstuff) sur ton Bureau

▶ Lance le

Une fenêtre apparait : clique sur "Disable"

▶ Fais redémarrer l'ordinateur si l'outil te le demande

Note : Quand nous aurons terminé la désinfection, tu pourras réactiver ces logiciels en relançant Defogger et en cliquant sur "Re-enable"

________________________________________________________
>> referme les fenêtres de tous les programmes en cours.
>> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix,
>>la protection en temps réel de ton Antivirus et de tes Antispywares,
>>qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.
°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°°

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."

sur combofix renommé

▶ !!!!!NE TOUCHE A RIEN PENDANT LE TRAVAIL DE COMBOFIX (SOURIS/CLAVIER.....)!!!!!

▶ n'oublie pas de reactiver la garde de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

▶▶ Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

bulle_imbuvable · Answer

ComboFix 10-09-07.03 - Cécilou 08/09/2010  19:07:53.1.1 - x86
Microsoft® Windows Vista(TM) Édition Familiale Basique   6.0.6002.2.1252.33.1036.18.1977.1224 [GMT 2:00]
Lancé depuis: c:\users\Cécilou\Documents\Contacts\Downloads\leeloo.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\users\Cécilou\AppData\Roaming\Microsoft\Windows\Recent\Mess with MSN Messenger msn emoticons nicknames skins download addons bots.url

.
(((((((((((((((((((((((((((((   Fichiers créés du 2010-08-08 au 2010-09-08  ))))))))))))))))))))))))))))))))))))
.

2010-09-08 17:17 . 2010-09-08 17:17	--------	d-----w-	c:\users\Default\AppData\Local	emp
2010-09-07 18:00 . 2010-09-07 18:02	--------	d-----w-	c:\program files\Ad-Remover
2010-09-06 21:20 . 2010-09-07 17:14	--------	d-----w-	C:\UsbFix
2010-09-06 20:41 . 2010-09-06 20:41	--------	d-----w-	c:\program files\ESET
2010-08-13 00:54 . 2010-06-08 17:35	3600768	----a-w-	c:\windows\system32
tkrnlpa.exe
2010-08-13 00:54 . 2010-06-08 17:35	3548040	----a-w-	c:\windows\system32
toskrnl.exe
2010-08-13 00:54 . 2010-06-11 16:15	1248768	----a-w-	c:\windows\system32\msxml3.dll
2010-08-13 00:54 . 2010-06-18 15:04	302080	----a-w-	c:\windows\system32\drivers\srv.sys
2010-08-13 00:54 . 2010-06-18 15:04	144896	----a-w-	c:\windows\system32\drivers\srv2.sys
2010-08-13 00:54 . 2010-06-16 16:04	905088	----a-w-	c:\windows\system32\drivers	cpip.sys
2010-08-11 03:36 . 2010-08-30 19:23	--------	d-----w-	c:\program files\4shared Desktop

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-07 19:52 . 2008-08-28 08:07	--------	d-----w-	c:\programdata\Microsoft Help
2010-09-07 18:14 . 2010-01-25 08:43	--------	d-----w-	c:\program files\Spybot - Search & Destroy
2010-09-07 17:59 . 2010-01-25 08:43	--------	d-----w-	c:\programdata\Spybot - Search & Destroy
2010-09-07 14:58 . 2010-05-14 23:56	976950	----a-w-	c:\windows\Internet Logs	vDebug.Zip
2010-09-03 16:13 . 2010-09-03 16:55	165888	----a-w-	c:\windows\Internet Logs\xDB7FF8.tmp
2010-08-30 21:46 . 2008-01-21 07:23	679042	----a-w-	c:\windows\system32\perfh00C.dat
2010-08-30 21:46 . 2008-01-21 07:23	126626	----a-w-	c:\windows\system32\perfc00C.dat
2010-08-30 19:23 . 2010-05-23 21:33	--------	d-----w-	c:\program files\SEAF
2010-08-30 19:23 . 2009-12-17 01:55	--------	d-----w-	c:\program files\SFR
2010-08-30 19:23 . 2009-11-21 23:33	--------	d-----w-	c:\program files\Avira
2010-08-27 15:46 . 2009-11-21 23:33	--------	d-----w-	c:\programdata\Avira
2010-08-23 16:17 . 2010-08-23 16:17	326144	----a-w-	c:\windows\Internet Logs\xDB7196.tmp
2010-08-22 15:44 . 2010-08-22 16:11	323072	----a-w-	c:\windows\Internet Logs\xDB757C.tmp
2010-08-18 02:27 . 2010-08-18 02:28	316416	----a-w-	c:\windows\Internet Logs\xDB7280.tmp
2010-08-13 23:33 . 2010-02-05 22:15	--------	d-----w-	c:\program files\Messenger Plus! Live
2010-08-13 01:06 . 2008-08-28 08:10	--------	d-----w-	c:\program files\Microsoft Works
2010-08-13 01:02 . 2006-11-02 11:18	--------	d-----w-	c:\program files\Windows Mail
2010-07-28 19:36 . 2010-07-28 19:38	266752	----a-w-	c:\windows\Internet Logs\xDB706E.tmp
2010-07-26 13:18 . 2010-07-26 18:08	262144	----a-w-	c:\windows\Internet Logs\xDB7500.tmp
2010-07-25 15:51 . 2010-07-25 17:16	260608	----a-w-	c:\windows\Internet Logs\xDB7290.tmp
2010-07-24 11:50 . 2010-07-24 13:06	259584	----a-w-	c:\windows\Internet Logs\xDB77AE.tmp
2010-07-24 03:44 . 2010-07-24 08:33	259072	----a-w-	c:\windows\Internet Logs\xDB750F.tmp
2010-07-19 18:55 . 2010-07-19 19:30	250880	----a-w-	c:\windows\Internet Logs\xDB77EC.tmp
2010-07-11 14:51 . 2009-07-11 18:36	--------	d-----w-	c:\program files\Windows Live
2010-07-11 14:50 . 2010-07-11 14:50	--------	d-----w-	c:\program files\Windows Live SkyDrive
2010-07-11 12:52 . 2010-07-11 12:53	229888	----a-w-	c:\windows\Internet Logs\xDB73A8.tmp
2010-07-11 05:49 . 2009-11-20 02:26	73536	----a-w-	c:\windows\system32\GDIPFONTCACHEV1.DAT
2010-07-06 03:02 . 2010-07-06 03:03	213504	----a-w-	c:\windows\Internet Logs\xDB7000.tmp
2010-06-26 06:05 . 2010-08-13 00:55	916480	----a-w-	c:\windows\system32\wininet.dll
2010-06-26 06:02 . 2010-08-13 00:55	109056	----a-w-	c:\windows\system32\iesysprep.dll
2010-06-26 06:02 . 2010-08-13 00:55	71680	----a-w-	c:\windows\system32\iesetup.dll
2010-06-26 04:25 . 2010-08-13 00:55	133632	----a-w-	c:\windows\system32\ieUnatt.exe
2010-06-23 02:16 . 2010-06-23 02:16	501936	----a-w-	c:\programdata\Google\Google Toolbar\Update\gtb59AF.tmp.exe
2010-06-23 02:16 . 2010-06-23 02:16	501936	----a-w-	c:\programdata\Application Data\Google\Google Toolbar\Update\gtb59AF.tmp.exe
2010-06-23 02:16 . 2010-06-23 02:16	501936	----a-w-	c:\programdata\Application Data\Application Data\Google\Google Toolbar\Update\gtb59AF.tmp.exe
2010-06-23 02:16 . 2010-06-23 02:16	501936	----a-w-	c:\programdata\Application Data\Application Data\Application Data\Google\Google Toolbar\Update\gtb59AF.tmp.exe
2010-06-23 02:16 . 2010-06-23 02:16	501936	----a-w-	c:\programdata\Application Data\Application Data\Application Data\Application Data\Google\Google Toolbar\Update\gtb59AF.tmp.exe
2010-06-23 02:16 . 2010-06-23 02:16	501936	----a-w-	c:\programdata\Application Data\Application Data\Application Data\Application Data\Application Data\Google\Google Toolbar\Update\gtb59AF.tmp.exe
2010-06-23 02:16 . 2010-06-23 02:16	501936	----a-w-	c:\programdata\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Google\Google Toolbar\Update\gtb59AF.tmp.exe
2010-06-23 02:16 . 2010-06-23 02:16	501936	----a-w-	c:\programdata\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Google\Google Toolbar\Update\gtb59AF.tmp.exe
2010-06-23 02:16 . 2010-06-23 02:16	501936	----a-w-	c:\programdata\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Google\Google Toolbar\Update\gtb59AF.tmp.exe
2010-06-23 02:16 . 2010-06-23 02:16	501936	----a-w-	c:\programdata\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Google\Google Toolbar\Update\gtb59AF.tmp.exe
2010-06-23 02:16 . 2010-06-23 02:16	501936	----a-w-	c:\programdata\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Google\Google Toolbar\Update\gtb59AF.tmp.exe
2010-06-23 02:16 . 2010-06-23 02:16	501936	----a-w-	c:\programdata\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Google\Google Toolbar\Update\gtb59AF.tmp.exe
2010-06-21 13:37 . 2010-08-13 00:55	2037760	----a-w-	c:\windows\system32\win32k.sys
2010-06-18 17:31 . 2010-08-13 00:55	36864	----a-w-	c:\windows\system32tutils.dll
2010-06-16 16:21 . 2010-06-16 16:22	188416	----a-w-	c:\windows\Internet Logs\xDB7D49.tmp
2010-06-11 16:16 . 2010-08-13 00:55	274944	----a-w-	c:\windows\system32\schannel.dll
.

(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{9b339f6e-ddcd-401b-8764-230adbd01761}"= "c:\program files\Messenger_Plus_Live	bMess.dll" [2009-12-31 2349080]
"{59994074-c06d-4a75-9768-49e5a8c21264}"= "c:\program files\Messenger_Plus_Live_France	bMess.dll" [2010-03-09 2355224]

[HKEY_CLASSES_ROOT\clsid\{9b339f6e-ddcd-401b-8764-230adbd01761}]

[HKEY_CLASSES_ROOT\clsid\{59994074-c06d-4a75-9768-49e5a8c21264}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{59994074-c06d-4a75-9768-49e5a8c21264}]
2010-03-09 09:06	2355224	----a-w-	c:\program files\Messenger_Plus_Live_France	bMess.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5fdc8508-0dc6-4ce5-b4ef-5825ffd68981}]
2010-06-03 16:24	2736736	----a-w-	c:\program files\ClipToMP3	bClip.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9b339f6e-ddcd-401b-8764-230adbd01761}]
2009-12-31 10:53	2349080	----a-w-	c:\program files\Messenger_Plus_Live	bMess.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{9b339f6e-ddcd-401b-8764-230adbd01761}"= "c:\program files\Messenger_Plus_Live	bMess.dll" [2009-12-31 2349080]
"{59994074-c06d-4a75-9768-49e5a8c21264}"= "c:\program files\Messenger_Plus_Live_France	bMess.dll" [2010-03-09 2355224]
"{5fdc8508-0dc6-4ce5-b4ef-5825ffd68981}"= "c:\program files\ClipToMP3	bClip.dll" [2010-06-03 2736736]

[HKEY_CLASSES_ROOT\clsid\{9b339f6e-ddcd-401b-8764-230adbd01761}]

[HKEY_CLASSES_ROOT\clsid\{59994074-c06d-4a75-9768-49e5a8c21264}]

[HKEY_CLASSES_ROOT\clsid\{5fdc8508-0dc6-4ce5-b4ef-5825ffd68981}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{9B339F6E-DDCD-401B-8764-230ADBD01761}"= "c:\program files\Messenger_Plus_Live	bMess.dll" [2009-12-31 2349080]
"{59994074-C06D-4A75-9768-49E5A8C21264}"= "c:\program files\Messenger_Plus_Live_France	bMess.dll" [2010-03-09 2355224]
"{5FDC8508-0DC6-4CE5-B4EF-5825FFD68981}"= "c:\program files\ClipToMP3	bClip.dll" [2010-06-03 2736736]

[HKEY_CLASSES_ROOT\clsid\{9b339f6e-ddcd-401b-8764-230adbd01761}]

[HKEY_CLASSES_ROOT\clsid\{59994074-c06d-4a75-9768-49e5a8c21264}]

[HKEY_CLASSES_ROOT\clsid\{5fdc8508-0dc6-4ce5-b4ef-5825ffd68981}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-06-20 39408]
"4shared Desktop"="c:\program files\4shared Desktop\desktop.exe" [2010-07-02 3544064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-07-16 150040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-07-16 170520]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-07-16 145944]
"BkupTray"="c:\program files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe" [2008-04-06 34040]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2008-07-25 768520]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2007-07-21 159744]
"RtHDVCpl"="RtHDVCpl.exe" [2008-06-27 6244896]
"WarReg_PopUp"="c:\program files\eMachines\WR_PopUp\WarReg_PopUp.exe" [2008-05-09 49152]
"Google Quick Search Box"="c:\program files\Google\Quick Search Box\GoogleQuickSearchBox.exe" [2009-06-20 68592]
"Skytel"="Skytel.exe" [2008-06-27 1826816]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"Microsoft Default Manager"="c:\program files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" [2010-05-10 439568]

c:\users\C'cilou\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 - Capture d''cran et lancement.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversionun-]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe"
"TkBellExe"="c:\program files\Common Files\Real\Update_OBealsched.exe"  -osboot

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):97,18,60,a7,15,6a,ca,01

R2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-01-30 135664]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-04-04 131072]
R3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys [2008-10-29 7680]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [2010-01-04 3404560]
R3 vsdatant7;vsdatant7;c:\windows\system32\drivers\vsdatant.win7.sys [x]
R3 WPFFontCache_v0400;Cache de police de Windows Presentation Foundation 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
R3 ZTEusbnet;ZTE USB-NDIS miniport;c:\windows\system32\DRIVERS\ZTEusbnet.sys [2008-10-13 110080]
R3 ZTEusbvoice;ZTE VoUSB Port;c:\windows\system32\DRIVERS\ZTEusbvoice.sys [2008-10-15 104960]
S0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [2009-06-30 28552]
S2 BUNAgentSvc;NTI Backup Now 5 Agent Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [2008-03-03 16384]
S2 ETService;Empowering Technology Service;c:\program files\EMACHINES\eMachines Recovery Management\Service\ETService.exe [2008-06-11 24576]
S2 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-04-06 50424]
S2 regi;regi;c:\windows\system32\driversegi.sys [2007-04-17 11032]
S2 ServiceSFRABCD;Service SFR Gestionnaire Connexion;c:\program files\SFR\Gestionnaire de Connexion SFR\SFRABCDService.exe [2009-03-20 621184]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork	REG_MULTI_SZ   	PLA DPS BFE mpssvc
LocalServiceAndNoImpersonation	REG_MULTI_SZ   	FontCache
.
Contenu du dossier 'Tâches planifiées'

2010-09-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-30 12:30]

2010-09-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-30 12:30]
.
.
------- Examen supplémentaire -------
.
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
FF - ProfilePath - c:\users\Cécilou\AppData\Roaming\Mozilla\Firefox\Profiles\pke4wl17.default\
FF - prefs.js: browser.search.selectedEngine - Ask
FF - prefs.js: browser.startup.homepage - hxxp://www.plusnetwork.com
FF - component: c:\program files\Real\RealPlayer\browserrecord\firefox\ext\components
prpffbrowserrecordext.dll
FF - plugin: c:\program files\Google\Picasa3
pPicasa3.dll
FF - plugin: c:\program files\Google\Update\1.2.183.23
pGoogleOneClick8.dll
FF - plugin: c:\program files\Microsoft\Office Live
pOLW.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - ORPHELINS SUPPRIMES - - - -

URLSearchHooks-CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
URLSearchHooks-fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - (no file)
URLSearchHooks-fe37be35-b028-49f9-bb0c-6a38c4e55b97} - (no file)
Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
AddRemove-ZoneAlarm Security Suite - c:\program files\Zone Labs\ZoneAlarm\zauninst.exe
AddRemove-Notification de cadeaux MSN - c:\users\Cécilou\AppData\Roaming\Microsoft\Notification de cadeaux MSN\lsnfier.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-09-08 19:17
Windows 6.0.6002 Service Pack 2 NTFS

Recherche de processus cachés ... 

Recherche d'éléments en démarrage automatique cachés ... 

Recherche de fichiers cachés ... 

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services
pggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Heure de fin: 2010-09-08  19:22:00
ComboFix-quarantined-files.txt  2010-09-08 17:21

Avant-CF: 60 453 076 992 octets libres
Après-CF: 60 401 840 128 octets libres

- - End Of File - - C89F09F63F336047E6CD22A5268C4BA5

gen-hackman · Answer

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...." 

sur OTL.exe pour le lancer.


&#9654Copie la liste qui se trouve en gras ci-dessous,

&#9654 colle-la dans la zone sous "Personnalisation" :


:processes
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
Teatimer.exe

:OTL
IE - HKLM\..\URLSearchHook: {59994074-c06d-4a75-9768-49e5a8c21264} - C:\Program Files\Messenger_Plus_Live_France	bMess.dll (Conduit Ltd.) 
IE - HKLM\..\URLSearchHook: {5fdc8508-0dc6-4ce5-b4ef-5825ffd68981} - C:\Program Files\ClipToMP3	bClip.dll (Conduit Ltd.)  
IE - HKLM\..\URLSearchHook: {9b339f6e-ddcd-401b-8764-230adbd01761} - C:\Program Files\Messenger_Plus_Live	bMess.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-546193382-1497632094-297539317-1000\..\URLSearchHook: {59994074-c06d-4a75-9768-49e5a8c21264} - C:\Program Files\Messenger_Plus_Live_France	bMess.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-546193382-1497632094-297539317-1000\..\URLSearchHook: {9b339f6e-ddcd-401b-8764-230adbd01761} - C:\Program Files\Messenger_Plus_Live	bMess.dll (Conduit Ltd.) 
IE - HKU\S-1-5-21-546193382-1497632094-297539317-1000\..\URLSearchHook: CFBFAE00-17A6-11D0-99CB-00C04FD64497} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-546193382-1497632094-297539317-1000\..\URLSearchHook: fe37be35-b028-49f9-bb0c-6a38c4e55b97} - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-546193382-1497632094-297539317-1000\..\URLSearchHook: fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - Reg Error: Key error. File not found
FF - prefs.js..browser.search.selectedEngine: "Ask"  
FF - prefs.js..extensions.enabledItems: {59994074-c06d-4a75-9768-49e5a8c21264}:2.5.8.6    
O2 - BHO: (ClipToMP3 Toolbar) - {5fdc8508-0dc6-4ce5-b4ef-5825ffd68981} - C:\Program Files\ClipToMP3	bClip.dll (Conduit Ltd.)  
O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No CLSID value found. 
O2 - BHO: (Messenger Plus Live Toolbar) - {9b339f6e-ddcd-401b-8764-230adbd01761} - C:\Program Files\Messenger_Plus_Live	bMess.dll (Conduit Ltd.)  
O3 - HKLM\..\Toolbar: (Messenger Plus Live France Toolbar) - {59994074-c06d-4a75-9768-49e5a8c21264} - C:\Program Files\Messenger_Plus_Live_France	bMess.dll (Conduit Ltd.) 
O3 - HKLM\..\Toolbar: (ClipToMP3 Toolbar) - {5fdc8508-0dc6-4ce5-b4ef-5825ffd68981} - C:\Program Files\ClipToMP3	bClip.dll (Conduit Ltd.)  
O3 - HKLM\..\Toolbar: (Messenger Plus Live Toolbar) - {9b339f6e-ddcd-401b-8764-230adbd01761} - C:\Program Files\Messenger_Plus_Live	bMess.dll (Conduit Ltd.) 
O3 - HKU\S-1-5-21-546193382-1497632094-297539317-1000\..\Toolbar\WebBrowser: (Messenger Plus Live France Toolbar) - {59994074-C06D-4A75-9768-49E5A8C21264} - C:\Program Files\Messenger_Plus_Live_France	bMess.dll (Conduit Ltd.) 
O3 - HKU\S-1-5-21-546193382-1497632094-297539317-1000\..\Toolbar\WebBrowser: (ClipToMP3 Toolbar) - {5FDC8508-0DC6-4CE5-B4EF-5825FFD68981} - C:\Program Files\ClipToMP3	bClip.dll (Conduit Ltd.)  
O3 - HKU\S-1-5-21-546193382-1497632094-297539317-1000\..\Toolbar\WebBrowser: (Messenger Plus Live Toolbar) - {9B339F6E-DDCD-401B-8764-230ADBD01761} - C:\Program Files\Messenger_Plus_Live	bMess.dll (Conduit Ltd.) 
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)  
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)  
O33 - MountPoints2\{37eb2ab6-7bb1-11de-9413-001eecd79d0d}\Shell - "" = AutoRun  
O33 - MountPoints2\{37eb2ab6-7bb1-11de-9413-001eecd79d0d}\Shell\AutoRun\command - "" = E:\SFR.exe -- File not found 
O33 - MountPoints2\{49414024-7a0a-11de-8ae1-001eecd79d0d}\Shell - "" = AutoRun  
O33 - MountPoints2\{49414024-7a0a-11de-8ae1-001eecd79d0d}\Shell\AutoRun\command - "" = E:\SFR.exe -- File not found   
O33 - MountPoints2\{512c957b-b46c-11df-a27e-00a0c6000000}\Shell - "" = AutoRun  
O33 - MountPoints2\{512c957b-b46c-11df-a27e-00a0c6000000}\Shell\AutoRun\command - "" = E:\SFR.exe -- File not found 
O33 - MountPoints2\E\Shell - "" = AutoRun  
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\SFR.exe -- File not found  
O33 - MountPoints2\F\Shell - "" = AutoRun  
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\SFR.exe -- [2009/03/20 19:52:35 | 001,164,800 | R--- | M] (SFR)    

:Reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145

:Files
C:\Users\Cécilou\AppData\Local\ikysu.exe  
C:\Users\Cécilou\AppData\Local\wqesa.exe  
C:\Users\Cécilou\AppData\Local\ueamq.exe  
C:\Users\Cécilou\AppData\Local\ccama.exe  
C:\Users\Cécilou\AppData\Local\uoayw.exe  
C:\Users\Cécilou\AppData\Local\emmkokg.exe  
C:\Users\Cécilou\AppData\Local\mcgqq.exe  
C:\Users\Cécilou\AppData\Local\kqagg.exe  
C:\Users\Cécilou\AppData\Local\ogcymcq.exe  
C:\Users\Cécilou\AppData\Local\caoyu.exe  
C:\Users\Cécilou\AppData\Local\iuyqice.exe  
C:\Users\Cécilou\AppData\Roaming\wklnhst.dat  
@Alternate Data Stream - 99 bytes -> C:\ProgramData\TEMP:C46995DA
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:CF5C4195
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:A696643D
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:9F683177
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:4F636E25
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:793F316E
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:8AB6C1D7
@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:861A898F
@Alternate Data Stream - 115 bytes -> C:\ProgramData\TEMP:580E04D8
@Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:4D066AD2
@Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:B623B5B8
@Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:9B52F176
@Alternate Data Stream - 110 bytes -> C:\ProgramData\TEMP:4BB26BE9
@Alternate Data Stream - 107 bytes -> C:\ProgramData\TEMP:E36F5B57
@Alternate Data Stream - 106 bytes -> C:\ProgramData\TEMP:798A3728
@Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:DB365884
@Alternate Data Stream - 101 bytes -> C:\ProgramData\TEMP:9E22BBE8

:commands
[emptytemp]
[start explorer]
[reboot]


&#9654 Clique sur "Correction" pour lancer la suppression.


&#9654 Poste le rapport qui logiquement s'ouvrira tout seul en fin de travail appres le redemarrage.

bulle_imbuvable · Answer

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
Process iexplore.exe killed successfully!
No active process named firefox.exe was found!
Process msnmsgr.exe killed successfully!
No active process named Teatimer.exe was found!
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{59994074-c06d-4a75-9768-49e5a8c21264} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{59994074-c06d-4a75-9768-49e5a8c21264}\ deleted successfully.
C:\Program Files\Messenger_Plus_Live_France	bMess.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{5fdc8508-0dc6-4ce5-b4ef-5825ffd68981} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5fdc8508-0dc6-4ce5-b4ef-5825ffd68981}\ deleted successfully.
C:\Program Files\ClipToMP3	bClip.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{9b339f6e-ddcd-401b-8764-230adbd01761} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9b339f6e-ddcd-401b-8764-230adbd01761}\ deleted successfully.
C:\Program Files\Messenger_Plus_Live	bMess.dll moved successfully.
Registry value HKEY_USERS\S-1-5-21-546193382-1497632094-297539317-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{59994074-c06d-4a75-9768-49e5a8c21264} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{59994074-c06d-4a75-9768-49e5a8c21264}\ not found.
File C:\Program Files\Messenger_Plus_Live_France	bMess.dll not found.
Registry value HKEY_USERS\S-1-5-21-546193382-1497632094-297539317-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{9b339f6e-ddcd-401b-8764-230adbd01761} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9b339f6e-ddcd-401b-8764-230adbd01761}\ not found.
File C:\Program Files\Messenger_Plus_Live	bMess.dll not found.
Registry value HKEY_USERS\S-1-5-21-546193382-1497632094-297539317-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\CFBFAE00-17A6-11D0-99CB-00C04FD64497} not found.
Registry value HKEY_USERS\S-1-5-21-546193382-1497632094-297539317-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\fe37be35-b028-49f9-bb0c-6a38c4e55b97} not found.
Registry value HKEY_USERS\S-1-5-21-546193382-1497632094-297539317-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} not found.
Prefs.js: "Ask" removed from browser.search.selectedEngine
Prefs.js: {59994074-c06d-4a75-9768-49e5a8c21264}:2.5.8.6 removed from extensions.enabledItems
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5fdc8508-0dc6-4ce5-b4ef-5825ffd68981}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5fdc8508-0dc6-4ce5-b4ef-5825ffd68981}\ not found.
File C:\Program Files\ClipToMP3	bClip.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9b339f6e-ddcd-401b-8764-230adbd01761}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9b339f6e-ddcd-401b-8764-230adbd01761}\ not found.
File C:\Program Files\Messenger_Plus_Live	bMess.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{59994074-c06d-4a75-9768-49e5a8c21264} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{59994074-c06d-4a75-9768-49e5a8c21264}\ not found.
File C:\Program Files\Messenger_Plus_Live_France	bMess.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{5fdc8508-0dc6-4ce5-b4ef-5825ffd68981} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5fdc8508-0dc6-4ce5-b4ef-5825ffd68981}\ not found.
File C:\Program Files\ClipToMP3	bClip.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\{9b339f6e-ddcd-401b-8764-230adbd01761} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9b339f6e-ddcd-401b-8764-230adbd01761}\ not found.
File C:\Program Files\Messenger_Plus_Live	bMess.dll not found.
Registry value HKEY_USERS\S-1-5-21-546193382-1497632094-297539317-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{59994074-C06D-4A75-9768-49E5A8C21264} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{59994074-C06D-4A75-9768-49E5A8C21264}\ not found.
File C:\Program Files\Messenger_Plus_Live_France	bMess.dll not found.
Registry value HKEY_USERS\S-1-5-21-546193382-1497632094-297539317-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{5FDC8508-0DC6-4CE5-B4EF-5825FFD68981} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5FDC8508-0DC6-4CE5-B4EF-5825FFD68981}\ not found.
File C:\Program Files\ClipToMP3	bClip.dll not found.
Registry value HKEY_USERS\S-1-5-21-546193382-1497632094-297539317-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{9B339F6E-DDCD-401B-8764-230ADBD01761} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9B339F6E-DDCD-401B-8764-230ADBD01761}\ not found.
File C:\Program Files\Messenger_Plus_Live	bMess.dll not found.
Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{37eb2ab6-7bb1-11de-9413-001eecd79d0d}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{37eb2ab6-7bb1-11de-9413-001eecd79d0d}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{37eb2ab6-7bb1-11de-9413-001eecd79d0d}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{37eb2ab6-7bb1-11de-9413-001eecd79d0d}\ not found.
File E:\SFR.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{49414024-7a0a-11de-8ae1-001eecd79d0d}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{49414024-7a0a-11de-8ae1-001eecd79d0d}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{49414024-7a0a-11de-8ae1-001eecd79d0d}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{49414024-7a0a-11de-8ae1-001eecd79d0d}\ not found.
File E:\SFR.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{512c957b-b46c-11df-a27e-00a0c6000000}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{512c957b-b46c-11df-a27e-00a0c6000000}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{512c957b-b46c-11df-a27e-00a0c6000000}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{512c957b-b46c-11df-a27e-00a0c6000000}\ not found.
File E:\SFR.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E\ not found.
File E:\SFR.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F\ not found.
File F:\SFR.exe not found.
========== REGISTRY ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\"NoDriveTypeAutoRun"|145 /E : value set successfully!
========== FILES ==========
C:\Users\Cécilou\AppData\Local\ikysu.exe moved successfully.
C:\Users\Cécilou\AppData\Local\wqesa.exe moved successfully.
C:\Users\Cécilou\AppData\Local\ueamq.exe moved successfully.
C:\Users\Cécilou\AppData\Local\ccama.exe moved successfully.
C:\Users\Cécilou\AppData\Local\uoayw.exe moved successfully.
C:\Users\Cécilou\AppData\Local\emmkokg.exe moved successfully.
C:\Users\Cécilou\AppData\Local\mcgqq.exe moved successfully.
C:\Users\Cécilou\AppData\Local\kqagg.exe moved successfully.
C:\Users\Cécilou\AppData\Local\ogcymcq.exe moved successfully.
C:\Users\Cécilou\AppData\Local\caoyu.exe moved successfully.
C:\Users\Cécilou\AppData\Local\iuyqice.exe moved successfully.
C:\Users\Cécilou\AppData\Roaming\wklnhst.dat moved successfully.
ADS C:\ProgramData\TEMP:C46995DA deleted successfully.
ADS C:\ProgramData\TEMP:CF5C4195 deleted successfully.
ADS C:\ProgramData\TEMP:A696643D deleted successfully.
ADS C:\ProgramData\TEMP:9F683177 deleted successfully.
ADS C:\ProgramData\TEMP:4F636E25 deleted successfully.
ADS C:\ProgramData\TEMP:793F316E deleted successfully.
ADS C:\ProgramData\TEMP:8AB6C1D7 deleted successfully.
ADS C:\ProgramData\TEMP:861A898F deleted successfully.
ADS C:\ProgramData\TEMP:580E04D8 deleted successfully.
ADS C:\ProgramData\TEMP:4D066AD2 deleted successfully.
ADS C:\ProgramData\TEMP:B623B5B8 deleted successfully.
ADS C:\ProgramData\TEMP:9B52F176 deleted successfully.
ADS C:\ProgramData\TEMP:4BB26BE9 deleted successfully.
ADS C:\ProgramData\TEMP:E36F5B57 deleted successfully.
ADS C:\ProgramData\TEMP:798A3728 deleted successfully.
ADS C:\ProgramData\TEMP:DB365884 deleted successfully.
ADS C:\ProgramData\TEMP:9E22BBE8 deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Cécilou
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 143601699 bytes
->Java cache emptied: 53719796 bytes
->FireFox cache emptied: 5606797 bytes
->Google Chrome cache emptied: 6239367 bytes
->Opera cache emptied: 27585324 bytes
->Flash cache emptied: 151046 bytes
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 41620 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Invité
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 1167001 bytes
->Flash cache emptied: 75 bytes
 
User: Public
->Temp folder emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1528 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 227,00 mb
 
 
OTL by OldTimer - Version 3.2.11.0 log created on 09082010_233609

Files\Folders moved on Reboot...
File\Folder C:\Windows	emp\ZLT0003a.TMP not found!

Registry entries deleted on Reboot...

gen-hackman · Answer

DESACTIVE TON ANTIVIRUS ET TON PAREFEU SI PRESENTS !!!!!(car il est detecté a tort comme infection)

&#9654 Télécharge ici :List_Kill'em

 et enregistre le sur ton bureau 

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...." 

sur le raccourci sur ton bureau pour lancer l'installation

Laisse coché :

&#9830 Executer List_Kill'em

une fois terminée , clic sur "terminer" et le programme se lancera seul

Il commencera par telecharger et installer ses mises à jour , puis te donnera son menu

choisis l'option Search

&#9654 laisse travailler l'outil

il se peut qu'une boite de dialogue s'ouvre , dans ce cas clique sur "ok" ou "Agree"

à l'apparition de la fenetre blanche , c'est un peu long , c'est normal ,c'est une recherche supplementaire de fichiers cachés , le programme n'est pas bloqué.

&#9654 Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'ecran "COMPLETED"

&#9654&#9654&#9654 NE LE POSTE PAS SUR LE FORUM 

Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/ 

&#9654 Clique sur Parcourir et cherche le fichier C:\List'em.txt 

&#9654 Clique sur Ouvrir. 

&#9654 Clique sur "Cliquez ici pour déposer le fichier". 

Un lien de cette forme : 

http://www.cijoint.fr/cjlink.php?file=265368/cijSKAP5fU.txt 

est ajouté dans la page. 

&#9654 Copie ce lien dans ta réponse. 

&#9654 Fais de même avec more.txt qui se trouve sur ton bureau

bulle_imbuvable · Answer

je viens de le telecharger et apres
"Laisse coché : 

? Executer List_Kill'em 

une fois terminée , clic sur "terminer" et le programme se lancera seul" 
j'ai cliquer sur terminer et ceci est apparu 

" impossible d'executer le fichier: C:\Program Files\List_kill'em\Get_Upd.exe
CreateProcess a échoué; code 740.
L'operation demandée nécessite une élevation. "

et même si je relance le programme ce message apparait

gen-hackman · Answer

si tu as Vista ou windows 7 => clic droit "executer en tant que...."

bulle_imbuvable · Answer

http://www.cijoint.fr/cjlink.php?file=cj201009/cijOlKfbOH.txt 
http://www.cijoint.fr/cjlink.php?file=cj201009/cijvdW4bU8.txt

gen-hackman · Answer

bonjour

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...." 

&#9654 Relance List_Kill'em,avec le raccourci sur ton bureau.

mais cette fois-ci :

&#9654 choisis l'Option Clean

laisse travailler l'outil.

en fin de scan la fenetre se ferme , et tu as un rapport du nom de Kill'em.txt sur ton bureau ,

&#9654 colle le contenu dans ta reponse

bulle_imbuvable · Answer

¤¤¤¤¤¤¤¤¤¤ Kill'em by g3n-h@ckm@n 2.1.0.3 ¤¤¤¤¤¤¤¤¤¤ 
 
User : Cécilou (Administrateurs) 
Update on 05/09/2010 by g3n-h@ckm@n ::::: 08.15
Start at: 19:12:10 | 09/09/2010

Genuine Intel(R) CPU             575  @ 2.00GHz
Microsoft® Windows Vista(TM) Édition Familiale Basique  (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18943
Windows Firewall Status : Disabled

C:\ -> Disque fixe local | 139,04 Go (49,94 Go free) [OS] | NTFS
D:\ -> Disque CD-ROM
 

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes ------- Memory(Ko)

C:\Windows\System32\smss.exe ----644 Ko
C:\Windows\system32\csrss.exe ----5732 Ko
C:\Windows\system32\wininit.exe ----3712 Ko
C:\Windows\system32\csrss.exe ----8148 Ko
C:\Windows\system32\winlogon.exe ----5332 Ko
C:\Windows\system32\services.exe ----6256 Ko
C:\Windows\system32\lsass.exe ----3564 Ko
C:\Windows\system32\lsm.exe ----3648 Ko
C:\Windows\system32\svchost.exe ----5140 Ko
C:\Windows\system32\svchost.exe ----5760 Ko
C:\Windows\System32\svchost.exe ----38300 Ko
C:\Windows\System32\svchost.exe ----11140 Ko
C:\Windows\System32\svchost.exe ----41928 Ko
C:\Windows\system32\svchost.exe ----24224 Ko
C:\Windows\system32\svchost.exe ----4404 Ko
C:\Windows\system32\SLsvc.exe ----9048 Ko
C:\Windows\system32\svchost.exe ----9780 Ko
C:\Windows\system32\svchost.exe ----11388 Ko
C:\Windows\System32\ZoneLabs\vsmon.exe ----10408 Ko
C:\Windows\system32\WLANExt.exe ----4792 Ko
C:\Windows\System32\spoolsv.exe ----9440 Ko
C:\Windows\system32\svchost.exe ----14412 Ko
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe ----4324 Ko
C:\Program Files\EMACHINES\eMachines Recovery Management\Service\ETService.exe ----11444 Ko
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe ----3060 Ko
C:\Program Files\Common Files\LightScribe\LSSrvc.exe ----3212 Ko
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe ----6644 Ko
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe ----5112 Ko
C:\Windows\system32\svchost.exe ----5020 Ko
C:\Program Files\SFR\Gestionnaire de Connexion SFR\SFRABCDService.exe ----4016 Ko
C:\Windows\system32\svchost.exe ----5772 Ko
C:\Windows\System32\svchost.exe ----2048 Ko
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE ----8676 Ko
C:\Windows\system32\SearchIndexer.exe ----34500 Ko
C:\Windows\system32\Dwm.exe ----28044 Ko
C:\Windows\Explorer.EXE ----42300 Ko
C:\Program Files\Windows Defender\MSASCui.exe ----7800 Ko
C:\Windows\System32\hkcmd.exe ----4424 Ko
C:\Windows\System32\igfxpers.exe ----4108 Ko
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe ----3140 Ko
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe ----2608 Ko
C:\Windows\system32	askeng.exe ----3904 Ko
C:\Windows\system32\igfxsrvc.exe ----4612 Ko
C:\Program Files\Launch Manager\LManager.exe ----7400 Ko
C:\Program Files\Apoint2K\Apoint.exe ----8420 Ko
C:\Windows\RtHDVCpl.exe ----12916 Ko
C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe ----22148 Ko
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE ----748 Ko
C:\Windows\system32	askeng.exe ----8692 Ko
C:\Windows\system32\igfxext.exe ----3640 Ko
C:\Windows\system32\igfxsrvc.exe ----3996 Ko
C:\Program Files\Apoint2K\ApMsgFwd.exe ----2636 Ko
C:\Program Files\Apoint2K\Apntex.exe ----3624 Ko
C:\Windows\system32\SearchProtocolHost.exe ----9412 Ko
C:\Windows\system32\SearchFilterHost.exe ----5492 Ko
C:\Windows\system32\cmd.exe ----2528 Ko
C:\Windows\system32\wbem\wmiprvse.exe ----8364 Ko
C:\Program Files\List_Kill'em\ERUNT.EXE ----5500 Ko
C:\Program Files\List_Kill'em\pv.exe ----5536 Ko
 
¤¤¤¤¤¤¤¤¤¤ Files/folders : 

Quarantined & Deleted !! : C:\ProgramData\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6} 
Quarantined & Deleted !! : C:\ProgramData\LauncherAccess.dt 
Quarantined & Deleted !! : C:\ProgramData\N360BUOptions.ini 
 
Quarantined & Deleted !! : C:\Windows\System32ezumatenoi.dat 
Quarantined & Deleted !! : C:\Windows\Temp\BIT1D79.tmp 
Quarantined & Deleted !! : C:\Windows\Temp\BIT4CC4.tmp 
Quarantined & Deleted !! : C:\Windows\Temp\BIT99DF.tmp 
Quarantined & Deleted !! : C:\Windows\Temp\BIT9BD3.tmp 
Quarantined & Deleted !! : C:\Windows\Temp\BITE13A.tmp 
Quarantined & Deleted !! : C:\Windows\Temp\BITE245.tmp 
Quarantined & Deleted !! : C:\Windows\Temp\CabB73D.tmp 
Quarantined & Deleted !! : C:\Windows\Temp\CabC3DA.tmp 
Quarantined & Deleted !! : C:\Windows\Temp\TarB74E.tmp 
Quarantined & Deleted !! : C:\Windows\Temp\TarC3DB.tmp 
Quarantined & Deleted !! : C:\Windows\Temp\ZLT0425b.TMP 
Quarantined & Deleted !! : C:\Windows\Temp\ZLT042d9.TMP 
Quarantined & Deleted !! : C:\Users\C'cilou\AppData\Local\d3d9caps.dat 
Quarantined & Deleted !! : C:\Users\C'cilou\AppData\Local\GDIPFONTCACHEV1.DAT 
Quarantined & Deleted !! : C:\Users\C'cilou\AppData\Local\yagwuai.exe 
Quarantined & Deleted !! : C:\Users\C'cilou\Local Settings\Temp\log.txt 
 
¤¤¤¤¤¤¤¤¤¤ Hosts ¤¤¤¤¤¤¤¤¤¤

127.0.0.1       localhost   

¤¤¤¤¤¤¤¤¤¤ Registry ¤¤¤¤¤¤¤¤¤¤

Deleted : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer : NoDrives  
Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer : NoDrives  
Deleted : "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59994074-c06d-4a75-9768-49e5a8c21264}"  
Deleted : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}  

¤¤¤¤¤¤¤¤¤¤ Internet Explorer ¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page	=         	https://www.msn.com/fr-fr/?ocid=iehp
Local Page	=         	C:\WINDOWS\system32\blank.htm
Default_Search_URL	=         	https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
Default_Page_URL	=         	https://www.msn.com/fr-fr/?ocid=iehp
Search Page	=         	https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page	=         	https://www.google.com/?gws_rd=ssl
Local Page	=         	C:\WINDOWS\system32\blank.htm
Search Page	=         	http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

¤¤¤¤¤¤¤¤¤¤ Security Center ¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] 
cval	=      	1 () 
FirewallDisableNotify	=      	0 (0x0) 
AntiVirusDisableNotify	=      	0 (0x0) 
UpdatesDisableNotify	=      	0 (0x0) 
FirstRunDisabled	=      	1 () 
AntiVirusOverride	=      	0 (0x0) 
FirewallOverride	=      	0 (0x0) 
 
¤¤¤¤¤¤¤¤¤¤ Services ¤¤¤¤¤¤¤¤¤¤

 Ndisuio : Start = 3   
 EapHost : Start = 2   
 Wlansvc : Start = 2   
 SharedAccess : Start = 2   
 windefend : Start = 2   
 wuauserv : Start = 2   
 wscsvc : Start = 2   

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
Disk Cleaned
anti-ver blaster : OK 
Prefetch cleaned 
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ 

FEATURE_BROWSER_EMULATION | svchost : 
====================================
 

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS PCIIDEX.SYS msahci.sys 
kernel: MBR read successfully
user & kernel MBR OK 
 
 
 
 
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ( EOF ) ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

gen-hackman · Answer

ok tu peux refaire un scan OTL ?

bulle_imbuvable · Answer

http://www.cijoint.fr/cjlink.php?file=cj201009/cijyVRFM0x.txt 

http://www.cijoint.fr/cjlink.php?file=cj201009/cijm8lxw3t.txt

gen-hackman · Answer

toujours des soucis de mise à jour ?

bulleimbuvable. · Answer

desolé mauvaise manip'
hier je t'ai repondu mais mon message est pas passé 2 fois je crois alors je le reecris encore


donc nan ca marche toujours pas.

En fait ca a commencer avec un pare feu que j'avais dl et pendant l'installation mon pc avait reboot et quand il s'est rallumer je pouvais ni finir l'installation ni le supprimer. mon firfefox marchait pu et les mise a jour non plus. J'avais reussis a le virer  je sais plus comment mais ca fais merder ma connection internet je sais pas pourquoi
du coup  j'avais fais une restauration systeme ma connection marchait de nouveau et le pare feu etai revenu
je sais pas si c'est lui qui fais tout merder, parce qu'il est pas actif tte facon, fin je le vois pas activé moi vu que l'installation s'était pas terminé

le pare feu c'est ZoneAlarm security

gen-hackman · Answer

salut Zone Alarm m'a planté pas mal de pc....

bulleimbuvable. · Answer

arf c'est ptete ca et c'est pour ca que je peux pu faire de mise a jours ni atteindre Firefox.
Je fais comment du coup?

gen-hackman · Answer

ben faut le virer

bulleimbuvable. · Answer

mais je le vire comment? Quand je vais dans desinstaller programme il me dis que j'ai pas les droit d'administrateur. J'ai essayer de virer les clé du registre, il refuse de les virer et puis j'avais supprimer le programme dans le disque dur mais ca change rien c'est toujours là.

Et comme je peux pas non plus finir l'installation pour ensuite le supp' je vois pas comment faire

gen-hackman · Answer

essaie avec ceci :

tu le mets en mode chasseur et tu glisses la cible sur un morceau du program

https://www.commentcamarche.net/telecharger/utilitaires/19405-revo-uninstaller/

bulleimbuvable. · Answer

ouai sauf que j'ai aucun composants du programme, il est là sans être là du coup j'ai rien a cibler

gen-hackman · Answer

Et comme je peux pas non plus finir l'installation 

ca ne te mets aucun fichier dans C:\programmes ?

bulleimbuvable. · Answer

bah nan j'avais supprimer le dossier là

gen-hackman · Answer

essaie la reinstall meme si elle plante , puis envoie la cible du mode chasseur sur un fichier/dossier 

tu veux un tutoriel pour l utilisation de revo ou tu le connais bien ?

bulleimbuvable. · Answer

peut pas il refuse carrement de lancer le programme pour installer

nan c'est bon je le connais

bulleimbuvable. · Answer

je viens de voir j'ai un dossier de fichier "zonealarm toolbar" ca peut le faire?

gen-hackman · Answer

fais toujours....

s'il ne trouve pas l installeur , pas grave fais "suivant"

bulleimbuvable. · Answer

Nan ca marche pas il me dis de viser autre chose, ya pas "suivant" qui apparait

gen-hackman · Answer

il va pas nous emm*** longtemps celui-là : 

Télécharge SeaF.exe


*Double clique sur SF.exe (Exécuter en tant qu'administrateur pour Vista/7) .

*Une fenêtre "cmd" va s'ouvrir .

*Tape Zonealarm dans cette fenêtre et [Entrée].

coche rechercher aussi dans le registre

*Patiente pendant la recherche.

*Une fenêtre avec un log.txt va s'afficher.

*Copie/colle ce rapport dans ta prochaine réponse.

¤¤¤¤¤¤?G3?-?@¢??@?(TM)©®?¤¤¤¤¤&#164

bulleimbuvable. · Answer

si attends, en ouvrant  revo mais en etant sur "desinstalleur" et non "mode chasseur" je vois "ZoneAlarm security suite" et si je clique il me demande si je veux desinstaller puis de choisir un mode. Je fais comme ca? Et si oui je prends quel mode entre les quatre?

gen-hackman · Answer

mode avancé

bulleimbuvable. · Answer

Quand je le lance il mee met "echec du demarrage du desinstalleur d'application! il est possible que la commande soit invalide" mais il me permet quand meme de continuer donc je le fais, il trouve des element de zonealarm dans le registre, je coche puis met supprimer, il me dis c'est desinstaller avec succes sauf que.... je relance revo et c'est toujours là donc je refais et c'est toujours pareil

gen-hackman · Answer

ca alors !!

bulleimbuvable. · Answer

j'essaye l'autre truc alors?

gen-hackman · Answer

oui ca :

https://forums.commentcamarche.net/forum/affich-19108934-impossible-de-faire-les-mise-a-jour?page=3#47

bulleimbuvable. · Answer

1. ========================= SEAF 1.0.0.7 - C_XX
2. 
3. Commencé à: 23:30:11 le 10/09/2010
4. 
5. Valeur(s) recherchée(s):
6. 
7. Zonealarm
8. 
9. (!) --- Recherche registre
10. 
11. ====== Fichier(s) (TC: Date de création, TM: Date de modification, DA, Dernier accès) ======
12. 
13. "c:\Users\Invité\Desktop\ZoneAlarm Security.lnk" [ ----A---- | 873 ]
14. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
15. 
16. =========================
17. 
18. "c:\Users\Cécilou\Favorites\Links\[Windows] Réinstallation complète de ZoneAlarm.url" [ ----A---- | 371 ]
19. TC: 10/09/2010,20:50:57 | TM: 10/09/2010,20:50:57 | DA: 10/09/2010,20:50:57
20. 
21. =========================
22. 
23. "c:\Users\Cécilou\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\.version" [ ----A---- | 9 ]
24. TC: 23/01/2010,21:54:44 | TM: 25/01/2010,20:31:47 | DA: 23/01/2010,21:54:44
25. 
26. =========================
27. 
28. "c:\Users\Cécilou\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\sites" [ ----A---- | 0 ]
29. TC: 23/01/2010,21:53:32 | TM: 25/01/2010,20:24:50 | DA: 25/01/2010,20:24:50
30. 
31. =========================
32. 
33. "c:\Users\Cécilou\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\PTPCACHE\3512EA53567234CB57EDF6FA7BCBB1DD" [ ----N---- | 485 ]
34. TC: 11/03/2009,13:31:30 | TM: 11/03/2009,13:31:30 | DA: 23/01/2010,21:53:39
35. 
36. =========================
37. 
38. "c:\Users\Cécilou\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\PTPCACHE\5B40DBFD11868CBCDD088228DBF1EE63" [ ----N---- | 882 ]
39. TC: 27/10/2009,17:46:20 | TM: 27/10/2009,17:46:20 | DA: 23/01/2010,21:53:38
40. 
41. =========================
42. 
43. "c:\Users\Cécilou\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\PTPCACHE\86D670050DA6EE1ECBF1607CF04571D4" [ ----N---- | 13312 ]
44. TC: 30/09/2009,13:44:12 | TM: 30/09/2009,13:44:12 | DA: 23/01/2010,21:53:43
45. 
46. =========================
47. 
48. "c:\Users\Cécilou\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\PTPCACHE\A3E75D1A6128C290181B832ED642BE69" [ ----N---- | 825 ]
49. TC: 11/03/2009,13:31:32 | TM: 11/03/2009,13:31:32 | DA: 23/01/2010,21:53:43
50. 
51. =========================
52. 
53. "c:\Users\Cécilou\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\PTPCACHE\EDF17C4FE201853537E9B49E9C8C1CEC" [ ----N---- | 2791 ]
54. TC: 30/09/2009,18:39:56 | TM: 30/09/2009,18:39:56 | DA: 23/01/2010,21:53:43
55. 
56. =========================
57. 
58. "c:\Users\All Users\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
59. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
60. 
61. =========================
62. 
63. "c:\Users\All Users\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
64. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
65. 
66. =========================
67. 
68. "c:\Users\All Users\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
69. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
70. 
71. =========================
72. 
73. "c:\Users\All Users\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
74. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
75. 
76. =========================
77. 
78. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
79. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
80. 
81. =========================
82. 
83. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
84. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
85. 
86. =========================
87. 
88. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
89. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
90. 
91. =========================
92. 
93. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
94. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
95. 
96. =========================
97. 
98. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
99. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
100. 
101. =========================
102. 
103. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
104. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
105. 
106. =========================
107. 
108. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
109. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
110. 
111. =========================
112. 
113. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
114. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
115. 
116. =========================
117. 
118. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
119. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
120. 
121. =========================
122. 
123. "c:\Qoobox\Quarantine\Registry_backups\AddRemove-ZoneAlarm Security Suite.reg.dat" [ ----A---- | 518 ]
124. TC: 08/09/2010,19:21:16 | TM: 08/09/2010,19:21:16 | DA: 08/09/2010,19:21:16
125. 
126. =========================
127. 
128. "c:\ProgramData\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
129. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
130. 
131. =========================
132. 
133. "c:\ProgramData\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
134. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
135. 
136. =========================
137. 
138. "c:\ProgramData\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
139. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
140. 
141. =========================
142. 
143. "c:\ProgramData\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
144. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
145. 
146. =========================
147. 
148. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
149. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
150. 
151. =========================
152. 
153. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
154. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
155. 
156. =========================
157. 
158. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
159. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
160. 
161. =========================
162. 
163. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
164. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
165. 
166. =========================
167. 
168. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
169. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
170. 
171. =========================
172. 
173. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
174. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
175. 
176. =========================
177. 
178. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
179. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
180. 
181. =========================
182. 
183. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
184. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
185. 
186. =========================
187. 
188. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
189. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
190. 
191. =========================
192. 
193. ====== Dossier(s) (TC: Date de création, TM: Date de modification, DA, Dernier accès) ======
194. 
195. "c:\Users\Cécilou\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar" [ ----D---- ]
196. TC: 23/01/2010,21:53:28 | TM: 25/01/2010,20:24:51 | DA: 25/01/2010,20:24:51
197. 
198. =========================
199. 
200. "c:\Users\Cécilou\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\PTPCACHE" [ ----D---- ]
201. TC: 23/01/2010,21:53:38 | TM: 23/01/2010,21:53:43 | DA: 23/01/2010,21:53:43
202. 
203. =========================
204. 
205. "c:\Users\Cécilou\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\TrustChecker" [ ----D---- ]
206. TC: 25/01/2010,20:24:51 | TM: 25/01/2010,20:24:51 | DA: 25/01/2010,20:24:51
207. 
208. =========================
209. 
210. "c:\Users\All Users\CheckPoint\ZoneAlarm" [ ----D---- ]
211. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
212. 
213. =========================
214. 
215. "c:\Users\All Users\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
216. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
217. 
218. =========================
219. 
220. "c:\Users\All Users\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
221. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
222. 
223. =========================
224. 
225. "c:\Users\All Users\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
226. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
227. 
228. =========================
229. 
230. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
231. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
232. 
233. =========================
234. 
235. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
236. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
237. 
238. =========================
239. 
240. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
241. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
242. 
243. =========================
244. 
245. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
246. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
247. 
248. =========================
249. 
250. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
251. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
252. 
253. =========================
254. 
255. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
256. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
257. 
258. =========================
259. 
260. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
261. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
262. 
263. =========================
264. 
265. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
266. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
267. 
268. =========================
269. 
270. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
271. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
272. 
273. =========================
274. 
275. "c:\ProgramData\CheckPoint\ZoneAlarm" [ ----D---- ]
276. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
277. 
278. =========================
279. 
280. "c:\ProgramData\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
281. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
282. 
283. =========================
284. 
285. "c:\ProgramData\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
286. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
287. 
288. =========================
289. 
290. "c:\ProgramData\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
291. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
292. 
293. =========================
294. 
295. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
296. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
297. 
298. =========================
299. 
300. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
301. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
302. 
303. =========================
304. 
305. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
306. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
307. 
308. =========================
309. 
310. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
311. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
312. 
313. =========================
314. 
315. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
316. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
317. 
318. =========================
319. 
320. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
321. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
322. 
323. =========================
324. 
325. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
326. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
327. 
328. =========================
329. 
330. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
331. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
332. 
333. =========================
334. 
335. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
336. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
337. 
338. =========================
339. 
340. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
341. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
342. 
343. =========================
344. 
345. 
346. ====== Entrée(s) du registre ======
347. 
348. 
349. 
350. [HKEY_CLASSES_ROOT\CheckPoint.ForceFieldToolbar]
351. ""="ZoneAlarm Toolbar"
352. 
353. [HKEY_CLASSES_ROOT\CheckPoint.ForceFieldToolbar.1]
354. ""="ZoneAlarm Toolbar"
355. 
356. [HKEY_CLASSES_ROOT\CheckPoint.ForceFieldToolbarRegistrar]
357. ""="ZoneAlarm Toolbar Registrar"
358. 
359. [HKEY_CLASSES_ROOT\CheckPoint.ForceFieldToolbarRegistrar.1]
360. ""="ZoneAlarm Toolbar Registrar"
361. 
362. [HKEY_CLASSES_ROOT\CLSID\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}]
363. ""="ZoneAlarm Toolbar Registrar"
364. 
365. [HKEY_CLASSES_ROOT\CLSID\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}]
366. ""="ZoneAlarm Toolbar"
367. 
368. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CheckPoint.ForceFieldToolbar]
369. ""="ZoneAlarm Toolbar"
370. 
371. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CheckPoint.ForceFieldToolbar.1]
372. ""="ZoneAlarm Toolbar"
373. 
374. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CheckPoint.ForceFieldToolbarRegistrar]
375. ""="ZoneAlarm Toolbar Registrar"
376. 
377. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CheckPoint.ForceFieldToolbarRegistrar.1]
378. ""="ZoneAlarm Toolbar Registrar"
379. 
380. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}]
381. ""="ZoneAlarm Toolbar Registrar"
382. 
383. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}]
384. ""="ZoneAlarm Toolbar"
385. 
386. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm Security Suite]
387. "DisplayName"="ZoneAlarm Security Suite"
388. 
389. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm Security Suite]
390. "UninstallString"="C:\Program Files\Zone Labs\ZoneAlarm\zauninst.exe"
391. 
392. [HKEY_LOCAL_MACHINE\SOFTWARE\Zone Labs\ZoneAlarm\Diagnostics]
393. "BangPath"="C:\Program Files\Zone Labs\ZoneAlarm\Diagnostics\osrbang.exe"
394. 
395. [HKEY_LOCAL_MACHINE\SOFTWARE\Zone Labs\ZoneAlarm\Diagnostics]
396. "CPInfoPath"="C:\Program Files\Zone Labs\ZoneAlarm\Diagnostics\cpinfo.exe"
397. 
398. [HKEY_LOCAL_MACHINE\SOFTWARE\Zone Labs\ZoneAlarm\Diagnostics]
399. "UploadURL"="http://lockup.zonealarm.com/upload"
400. 
401. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ISWKL\0000]
402. "DeviceDesc"="ZoneAlarm Toolbar ISWKL"
403. 
404. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Vsdatant\Parameters]
405. "InstallDirDevice"="\Device\HarddiskVolume2\Program Files\Zone Labs\ZoneAlarm"
406. 
407. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Vsdatant\Parameters]
408. "InstallDirDrive"="C:\Program Files\Zone Labs\ZoneAlarm"
409. 
410. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_ISWKL\0000]
411. "DeviceDesc"="ZoneAlarm Toolbar ISWKL"
412. 
413. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Vsdatant\Parameters]
414. "InstallDirDevice"="\Device\HarddiskVolume2\Program Files\Zone Labs\ZoneAlarm"
415. 
416. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Vsdatant\Parameters]
417. "InstallDirDrive"="C:\Program Files\Zone Labs\ZoneAlarm"
418. 
419. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ISWKL\0000]
420. "DeviceDesc"="ZoneAlarm Toolbar ISWKL"
421. 
422. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Vsdatant\Parameters]
423. "InstallDirDevice"="\Device\HarddiskVolume2\Program Files\Zone Labs\ZoneAlarm"
424. 
425. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Vsdatant\Parameters]
426. "InstallDirDrive"="C:\Program Files\Zone Labs\ZoneAlarm"
427. 
428. =========================
429. 
430. Fin à: 23:34:44 le 10/09/2010 ( E.O.F )

gen-hackman · Answer

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...." 

sur OTL.exe pour le lancer.


&#9654Copie la liste qui se trouve en gras ci-dessous,

&#9654 colle-la dans la zone sous "Personnalisation" :


:processes
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
Teatimer.exe

:Reg
[-HKEY_CLASSES_ROOT\CheckPoint.ForceFieldToolbar]
[-HKEY_CLASSES_ROOT\CheckPoint.ForceFieldToolbar.1]
[-HKEY_CLASSES_ROOT\CheckPoint.ForceFieldToolbarRegistrar]
[-HKEY_CLASSES_ROOT\CheckPoint.ForceFieldToolbarRegistrar.1]
[-HKEY_CLASSES_ROOT\CLSID\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}]
[-HKEY_CLASSES_ROOT\CLSID\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CheckPoint.ForceFieldToolbar]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CheckPoint.ForceFieldToolbar.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CheckPoint.ForceFieldToolbarRegistrar]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CheckPoint.ForceFieldToolbarRegistrar.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm Security Suite]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Zone Labs\ZoneAlarm]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ISWKL\0000]
"DeviceDesc"=""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Vsdatant\Parameters]
"InstallDirDevice"=""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Vsdatant\Parameters]
"InstallDirDrive"=""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_ISWKL\0000]
"DeviceDesc"=""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Vsdatant\Parameters]
"InstallDirDevice"=""
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Vsdatant\Parameters]
"InstallDirDrive"=""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ISWKL\0000]
"DeviceDesc"=""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Vsdatant\Parameters]
"InstallDirDevice"=""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Vsdatant\Parameters]
"InstallDirDrive"=""

:Files
c:\Users\Invité\Desktop\ZoneAlarm Security.lnk
c:\Users\Cécilou\Favorites\Links\[Windows] Réinstallation complète de ZoneAlarm.url
c:\Users\Cécilou\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar
c:\Users\All Users\CheckPoint\ZoneAlarm
c:\Users\All Users\Application Data\CheckPoint\ZoneAlarm
c:\Users\All Users\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\Users\All Users\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\ProgramData\CheckPoint\ZoneAlarm
c:\ProgramData\Application Data\CheckPoint\ZoneAlarm
c:\ProgramData\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\ProgramData\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\ProgramData\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm
c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm


:commands
[emptytemp]
[start explorer]
[reboot]


&#9654 Clique sur "Correction" pour lancer la suppression.


&#9654 Poste le rapport qui logiquement s'ouvrira tout seul en fin de travail appres le redemarrage.

bulleimbuvable · Answer

ca marche pas, je lance la correction et au bout de deux minutes c'est marquer le programme ne repond pas. J'ai essayer deux fois et c'est toujours pareil

gen-hackman · Answer

laisse-le travailler le temps qu il faut

tu le lances bien clic droit "executer en tant qu'administrateur" ?

bulleimbuvable · Answer

Oui je l'ai lancer en cliquant comme mais il se bloque apres 5 min, puis ca affiche que ca repond pu alors j'attends mais ca revient pas

bulleimbuvable · Answer

salut
alors bah je l'ai laisser travailler toute une nuit et ca marche toujours pas. ca met toujours le programme ne repond pas
je vois pas comment faire :/

gen-hackman · Answer

salut desolé absent 2 jours.....

des nouvelles de ZA ?

bulleimbuvable · Answer

pas grave moi aussi j'ai été un peu occupée

non ca marche toujours pas donc je vois pu comment faire

gen-hackman · Answer

refais un seaf ??????

bulleimbuvable · Answer

1. ========================= SEAF 1.0.0.7 - C_XX
2. 
3. Commencé à: 23:08:22 le 20/09/2010
4. 
5. Valeur(s) recherchée(s):
6. 
7. Zonealarm
8. 
9. (!) --- Recherche registre
10. 
11. ====== Fichier(s) (TC: Date de création, TM: Date de modification, DA, Dernier accès) ======
12. 
13. "c:\Users\Invité\Desktop\ZoneAlarm Security.lnk" [ ----A---- | 873 ]
14. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
15. 
16. =========================
17. 
18. "c:\Users\Cécilou\Favorites\Links\[Windows] Réinstallation complète de ZoneAlarm.url" [ ----A---- | 371 ]
19. TC: 10/09/2010,20:50:57 | TM: 10/09/2010,20:50:57 | DA: 10/09/2010,20:50:57
20. 
21. =========================
22. 
23. "c:\Users\Cécilou\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\.version" [ ----A---- | 9 ]
24. TC: 23/01/2010,21:54:44 | TM: 25/01/2010,20:31:47 | DA: 23/01/2010,21:54:44
25. 
26. =========================
27. 
28. "c:\Users\Cécilou\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\sites" [ ----A---- | 0 ]
29. TC: 23/01/2010,21:53:32 | TM: 25/01/2010,20:24:50 | DA: 25/01/2010,20:24:50
30. 
31. =========================
32. 
33. "c:\Users\Cécilou\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\PTPCACHE\3512EA53567234CB57EDF6FA7BCBB1DD" [ ----N---- | 485 ]
34. TC: 11/03/2009,13:31:30 | TM: 11/03/2009,13:31:30 | DA: 23/01/2010,21:53:39
35. 
36. =========================
37. 
38. "c:\Users\Cécilou\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\PTPCACHE\5B40DBFD11868CBCDD088228DBF1EE63" [ ----N---- | 882 ]
39. TC: 27/10/2009,17:46:20 | TM: 27/10/2009,17:46:20 | DA: 23/01/2010,21:53:38
40. 
41. =========================
42. 
43. "c:\Users\Cécilou\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\PTPCACHE\86D670050DA6EE1ECBF1607CF04571D4" [ ----N---- | 13312 ]
44. TC: 30/09/2009,13:44:12 | TM: 30/09/2009,13:44:12 | DA: 23/01/2010,21:53:43
45. 
46. =========================
47. 
48. "c:\Users\Cécilou\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\PTPCACHE\A3E75D1A6128C290181B832ED642BE69" [ ----N---- | 825 ]
49. TC: 11/03/2009,13:31:32 | TM: 11/03/2009,13:31:32 | DA: 23/01/2010,21:53:43
50. 
51. =========================
52. 
53. "c:\Users\Cécilou\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\PTPCACHE\EDF17C4FE201853537E9B49E9C8C1CEC" [ ----N---- | 2791 ]
54. TC: 30/09/2009,18:39:56 | TM: 30/09/2009,18:39:56 | DA: 23/01/2010,21:53:43
55. 
56. =========================
57. 
58. "c:\Users\All Users\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
59. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
60. 
61. =========================
62. 
63. "c:\Users\All Users\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
64. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
65. 
66. =========================
67. 
68. "c:\Users\All Users\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
69. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
70. 
71. =========================
72. 
73. "c:\Users\All Users\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
74. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
75. 
76. =========================
77. 
78. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
79. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
80. 
81. =========================
82. 
83. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
84. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
85. 
86. =========================
87. 
88. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
89. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
90. 
91. =========================
92. 
93. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
94. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
95. 
96. =========================
97. 
98. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
99. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
100. 
101. =========================
102. 
103. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
104. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
105. 
106. =========================
107. 
108. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
109. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
110. 
111. =========================
112. 
113. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
114. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
115. 
116. =========================
117. 
118. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
119. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
120. 
121. =========================
122. 
123. "c:\Qoobox\Quarantine\Registry_backups\AddRemove-ZoneAlarm Security Suite.reg.dat" [ ----A---- | 518 ]
124. TC: 08/09/2010,19:21:16 | TM: 08/09/2010,19:21:16 | DA: 08/09/2010,19:21:16
125. 
126. =========================
127. 
128. "c:\ProgramData\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
129. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
130. 
131. =========================
132. 
133. "c:\ProgramData\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
134. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
135. 
136. =========================
137. 
138. "c:\ProgramData\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
139. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
140. 
141. =========================
142. 
143. "c:\ProgramData\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
144. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
145. 
146. =========================
147. 
148. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
149. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
150. 
151. =========================
152. 
153. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
154. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
155. 
156. =========================
157. 
158. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
159. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
160. 
161. =========================
162. 
163. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
164. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
165. 
166. =========================
167. 
168. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
169. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
170. 
171. =========================
172. 
173. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
174. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
175. 
176. =========================
177. 
178. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
179. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
180. 
181. =========================
182. 
183. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
184. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
185. 
186. =========================
187. 
188. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm\zllictbl.dat" [ ----AH---- | 4212 ]
189. TC: 23/01/2010,21:53:03 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
190. 
191. =========================
192. 
193. ====== Dossier(s) (TC: Date de création, TM: Date de modification, DA, Dernier accès) ======
194. 
195. "c:\Users\Cécilou\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar" [ ----D---- ]
196. TC: 23/01/2010,21:53:28 | TM: 25/01/2010,20:24:51 | DA: 25/01/2010,20:24:51
197. 
198. =========================
199. 
200. "c:\Users\Cécilou\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\PTPCACHE" [ ----D---- ]
201. TC: 23/01/2010,21:53:38 | TM: 23/01/2010,21:53:43 | DA: 23/01/2010,21:53:43
202. 
203. =========================
204. 
205. "c:\Users\Cécilou\AppData\Roaming\CheckPoint\ZoneAlarm Toolbar\TrustChecker" [ ----D---- ]
206. TC: 25/01/2010,20:24:51 | TM: 25/01/2010,20:24:51 | DA: 25/01/2010,20:24:51
207. 
208. =========================
209. 
210. "c:\Users\All Users\CheckPoint\ZoneAlarm" [ ----D---- ]
211. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
212. 
213. =========================
214. 
215. "c:\Users\All Users\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
216. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
217. 
218. =========================
219. 
220. "c:\Users\All Users\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
221. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
222. 
223. =========================
224. 
225. "c:\Users\All Users\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
226. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
227. 
228. =========================
229. 
230. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
231. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
232. 
233. =========================
234. 
235. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
236. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
237. 
238. =========================
239. 
240. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
241. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
242. 
243. =========================
244. 
245. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
246. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
247. 
248. =========================
249. 
250. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
251. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
252. 
253. =========================
254. 
255. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
256. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
257. 
258. =========================
259. 
260. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
261. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
262. 
263. =========================
264. 
265. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
266. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
267. 
268. =========================
269. 
270. "c:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
271. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
272. 
273. =========================
274. 
275. "c:\ProgramData\CheckPoint\ZoneAlarm" [ ----D---- ]
276. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
277. 
278. =========================
279. 
280. "c:\ProgramData\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
281. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
282. 
283. =========================
284. 
285. "c:\ProgramData\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
286. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
287. 
288. =========================
289. 
290. "c:\ProgramData\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
291. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
292. 
293. =========================
294. 
295. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
296. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
297. 
298. =========================
299. 
300. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
301. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
302. 
303. =========================
304. 
305. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
306. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
307. 
308. =========================
309. 
310. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
311. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
312. 
313. =========================
314. 
315. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
316. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
317. 
318. =========================
319. 
320. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
321. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
322. 
323. =========================
324. 
325. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
326. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
327. 
328. =========================
329. 
330. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
331. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
332. 
333. =========================
334. 
335. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
336. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
337. 
338. =========================
339. 
340. "c:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\CheckPoint\ZoneAlarm" [ ----D---- ]
341. TC: 23/01/2010,21:51:39 | TM: 23/01/2010,21:53:03 | DA: 23/01/2010,21:53:03
342. 
343. =========================
344. 
345. 
346. ====== Entrée(s) du registre ======
347. 
348. 
349. 
350. [HKEY_CLASSES_ROOT\CheckPoint.ForceFieldToolbar]
351. ""="ZoneAlarm Toolbar"
352. 
353. [HKEY_CLASSES_ROOT\CheckPoint.ForceFieldToolbar.1]
354. ""="ZoneAlarm Toolbar"
355. 
356. [HKEY_CLASSES_ROOT\CheckPoint.ForceFieldToolbarRegistrar]
357. ""="ZoneAlarm Toolbar Registrar"
358. 
359. [HKEY_CLASSES_ROOT\CheckPoint.ForceFieldToolbarRegistrar.1]
360. ""="ZoneAlarm Toolbar Registrar"
361. 
362. [HKEY_CLASSES_ROOT\CLSID\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}]
363. ""="ZoneAlarm Toolbar Registrar"
364. 
365. [HKEY_CLASSES_ROOT\CLSID\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}]
366. ""="ZoneAlarm Toolbar"
367. 
368. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CheckPoint.ForceFieldToolbar]
369. ""="ZoneAlarm Toolbar"
370. 
371. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CheckPoint.ForceFieldToolbar.1]
372. ""="ZoneAlarm Toolbar"
373. 
374. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CheckPoint.ForceFieldToolbarRegistrar]
375. ""="ZoneAlarm Toolbar Registrar"
376. 
377. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CheckPoint.ForceFieldToolbarRegistrar.1]
378. ""="ZoneAlarm Toolbar Registrar"
379. 
380. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}]
381. ""="ZoneAlarm Toolbar Registrar"
382. 
383. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107}]
384. ""="ZoneAlarm Toolbar"
385. 
386. [HKEY_LOCAL_MACHINE\SOFTWARE\Zone Labs\ZoneAlarm\Diagnostics]
387. "BangPath"="C:\Program Files\Zone Labs\ZoneAlarm\Diagnostics\osrbang.exe"
388. 
389. [HKEY_LOCAL_MACHINE\SOFTWARE\Zone Labs\ZoneAlarm\Diagnostics]
390. "CPInfoPath"="C:\Program Files\Zone Labs\ZoneAlarm\Diagnostics\cpinfo.exe"
391. 
392. [HKEY_LOCAL_MACHINE\SOFTWARE\Zone Labs\ZoneAlarm\Diagnostics]
393. "UploadURL"="http://lockup.zonealarm.com/upload"
394. 
395. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ISWKL\0000]
396. "DeviceDesc"="ZoneAlarm Toolbar ISWKL"
397. 
398. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Vsdatant\Parameters]
399. "InstallDirDevice"="\Device\HarddiskVolume2\Program Files\Zone Labs\ZoneAlarm"
400. 
401. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Vsdatant\Parameters]
402. "InstallDirDrive"="C:\Program Files\Zone Labs\ZoneAlarm"
403. 
404. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_ISWKL\0000]
405. "DeviceDesc"="ZoneAlarm Toolbar ISWKL"
406. 
407. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Vsdatant\Parameters]
408. "InstallDirDevice"="\Device\HarddiskVolume2\Program Files\Zone Labs\ZoneAlarm"
409. 
410. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Vsdatant\Parameters]
411. "InstallDirDrive"="C:\Program Files\Zone Labs\ZoneAlarm"
412. 
413. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ISWKL\0000]
414. "DeviceDesc"="ZoneAlarm Toolbar ISWKL"
415. 
416. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Vsdatant\Parameters]
417. "InstallDirDevice"="\Device\HarddiskVolume2\Program Files\Zone Labs\ZoneAlarm"
418. 
419. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Vsdatant\Parameters]
420. "InstallDirDrive"="C:\Program Files\Zone Labs\ZoneAlarm"
421. 
422. =========================
423. 
424. Fin à: 23:13:15 le 20/09/2010 ( E.O.F )

Impossible de faire les mise à jour

57 réponses

Discussions similaires