Mon pc est infecté de Worm/Auto Run.DU Fermé

Question

Bonjour, 



Configuration: Windows 7 / Internet Explorer 8.0 Bonjour tout le monde. Je suis ici pour demander de l'aide: mon pc est trés lent. Avg a detecté  Worm/Auto Run.DU. J'aimerais savoir si vous pouvez m'aider. Je vous remerci.
Cordialement.
Ps: voici le rapport,
Logfile of random's system information tool 1.08 (written by random/random)
Run by admin at 2010-12-31 14:28:38
Microsoft Windows 7 Professionnel  
System drive C: has 181 GB (79%) free of 229 GB
Total RAM: 3069 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:28:49, on 31/12/2010
Platform: Windows 7  (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\AVG\AVG9\avgtray.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\AVG\AVG9\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files (x86)\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files (x86)\Internet Explorer\IELowutil.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10m_ActiveX.exe
C:\Program Files (x86)\AVG\AVG9\avgui.exe
C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\mswinext.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe
C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LVPI1VAS\RSIT[1].exe
C:\Program Files (x86)	rend micro\admin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0
pwinext.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: @C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0
pwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0
pwinext.dll
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~2\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Bing Bar] "C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\mswinext.exe"
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: @appmgmts.dll,-3250 (AppMgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (AudioSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files (x86)\AVG\AVG9\Toolbar\ToolbarBroker.exe
O23 - Service: AVG E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\avgemc.exe
O23 - Service: AVG WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe
O23 - Service: AVG9IDSAgent (AVGIDSAgent) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\cscsvc.dll,-200 (CscService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe
O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe
O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe
O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32
etlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32
etman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32
etprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32
lasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32
sisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32
vvsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\peerdistsvc.dll,-9000 (PeerDistSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\Windows\SysWow64\perfhost.exe
O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32asauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%Systemroot%\system32asmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\StorSvc.dll,-100 (StorSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32	apisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32	bssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32	ermsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32	hemeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32	rkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\umrdp.dll,-1000 (UmRdpService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe
O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe

kduc · Answer

Salut,

Dans l' ordre, ...

1/ Télécharge AD-R :
http://www.teamxscript.org/adremoverTelechargement.html (de Cyrildu17 / C_XX) sur ton Bureau.

Déconnecte-toi du net et ferme toutes applications en cours.

1. Double-clique sur le programme d'installation ; laisse-le 
s' installer par défaut (C:\Program files).

2. Double-clique sur l'icône AD-Remover située sur ton Bureau.
(Pour Vista et Win 7 : clique droit > "Exécuter en tant qu'administrateur")

3. Au menu principal, choisis l'option « [b]Nettoyer[/b] ».
L' outil débute le nettoyage ... Laisse-le travailler !

Le scan achevé, une fenêtre va s' afficher.
4. Poste (copie-colle) le rapport qui apparaît à la fin.

(Tu trouveras aussi le rapport sous C:\Ad-report(date).log)

Note : "Process.exe", une composante de l'outil peut être 
détecté par certains antivirus comme une infection ; donc, ne pas en tenir compte : il s'agit d'un faux positif.


2/ Télécharge, installe et mets à jour Malwarebytes Anti-Malwares ...
http://forum.telecharger.01net.com/microhebdo/6/tuto-securite/tuto-malwaresbytes-anti-malware-352008/messages-1.html
puis, lance un scan COMPLET et poste le rapport.

PS : si MalwareByte's a détecté des infections, clique sur Afficher les résultats, 
puis sur Supprimer la sélection.

respiresbien · Answer

Bonjour Kduc,

Merci pour ton aide. Voici les deux rapports:
======= RAPPORT D'AD-REMOVER 2.0.0.2,C | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 22/12/10 à 11:40
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files (x86)\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 15:41:39 le 31/12/2010, Mode normal

Microsoft Windows 7 Professionnel   (X64) 
admin@ADMIN-PC (Hewlett-Packard HP Pavilion dv7 Notebook PC) 
 
============== ACTION(S) ==============


Dossier supprimé: C:\Program Files (x86)\Ask.com
Dossier supprimé: C:\Users\admin\AppData\LocalLow\AskToolbar

(!) -- Fichiers temporaires supprimés.


Clé supprimée: HKCU\Software\Ask.com
Clé supprimée: HKCU\Software\AppDataLow\AskToolbarInfo
Clé supprimée: HKCU\Software\AppDataLow\Software\AskToolbar
Clé supprimée: HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}


============== SCAN ADDITIONNEL ==============

** Internet Explorer Version [8.0.7600.16385] **

[HKCU\Software\Microsoft\Internet Explorer\Main] 
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\Main] 
AutoHide: yes
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\Windows\SysWOW64\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] 
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files (x86)\Ad-Remover\Quarantine: 11 Fichier(s)
C:\Program Files (x86)\Ad-Remover\Backup: 14 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 31/12/2010 (2628 Octet(s)) 

Fin à: 15:42:52, 31/12/2010 
 
============== E.O.F ============== 
======= RAPPORT D'AD-REMOVER 2.0.0.2,C | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 22/12/10 à 11:40
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files (x86)\Ad-Remover\main.exe (CLEAN [2]) -> Lancé à 15:58:55 le 31/12/2010, Mode normal

Microsoft Windows 7 Professionnel   (X64) 
admin@ADMIN-PC (Hewlett-Packard HP Pavilion dv7 Notebook PC) 
 
============== ACTION(S) ==============



(!) -- Fichiers temporaires supprimés.




============== SCAN ADDITIONNEL ==============

** Internet Explorer Version [8.0.7600.16385] **

[HKCU\Software\Microsoft\Internet Explorer\Main] 
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\Main] 
AutoHide: yes
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\Windows\SysWOW64\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] 
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files (x86)\Ad-Remover\Quarantine: 11 Fichier(s)
C:\Program Files (x86)\Ad-Remover\Backup: 15 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 31/12/2010 (2758 Octet(s)) 
C:\Ad-Report-CLEAN[2].txt - 31/12/2010 (1847 Octet(s)) 

Fin à: 16:00:14, 31/12/2010 
 
============== E.O.F ============== 
======= RAPPORT D'AD-REMOVER 2.0.0.2,C | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 22/12/10 à 11:40
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files (x86)\Ad-Remover\main.exe (CLEAN [2]) -> Lancé à 15:58:55 le 31/12/2010, Mode normal

Microsoft Windows 7 Professionnel   (X64) 
admin@ADMIN-PC (Hewlett-Packard HP Pavilion dv7 Notebook PC) 
 
============== ACTION(S) ==============



(!) -- Fichiers temporaires supprimés.




============== SCAN ADDITIONNEL ==============

** Internet Explorer Version [8.0.7600.16385] **

[HKCU\Software\Microsoft\Internet Explorer\Main] 
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\Main] 
AutoHide: yes
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\Windows\SysWOW64\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] 
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files (x86)\Ad-Remover\Quarantine: 11 Fichier(s)
C:\Program Files (x86)\Ad-Remover\Backup: 15 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 31/12/2010 (2758 Octet(s)) 
C:\Ad-Report-CLEAN[2].txt - 31/12/2010 (1847 Octet(s)) 

Fin à: 16:00:14, 31/12/2010 
 
============== E.O.F ============== 
======= RAPPORT D'AD-REMOVER 2.0.0.2,C | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 22/12/10 à 11:40
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files (x86)\Ad-Remover\main.exe (CLEAN [2]) -> Lancé à 15:58:55 le 31/12/2010, Mode normal

Microsoft Windows 7 Professionnel   (X64) 
admin@ADMIN-PC (Hewlett-Packard HP Pavilion dv7 Notebook PC) 
 
============== ACTION(S) ==============



(!) -- Fichiers temporaires supprimés.




============== SCAN ADDITIONNEL ==============

** Internet Explorer Version [8.0.7600.16385] **

[HKCU\Software\Microsoft\Internet Explorer\Main] 
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\Main] 
AutoHide: yes
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\Windows\SysWOW64\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] 
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files (x86)\Ad-Remover\Quarantine: 11 Fichier(s)
C:\Program Files (x86)\Ad-Remover\Backup: 15 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 31/12/2010 (2758 Octet(s)) 
C:\Ad-Report-CLEAN[2].txt - 31/12/2010 (1847 Octet(s)) 

Fin à: 16:00:14, 31/12/2010 
 
============== E.O.F ==============

kduc · Answer

...

Manque le rapport de scan Malwarebytes !

respiresbien · Answer

- 6.0.793.824 Fri. December 31, 2010. 04:22 PM 294 - ActiveX and COM objects that are based on libraries no longer on your system. 74 Errors - Acrobat Search

The key HKEY_CLASSES_ROOT\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}\TypeLib for this object point to the missing type library {47A7A4B0-2723-41BA-865E-EBBB7081A602}. This subkey can be deleted for this object.

- AcrobatAccess Class

The key HKEY_CLASSES_ROOT\CLSID\{C523F39F-9C83-11D3-9094-00104BD0D535} points to the missing ApplicationID {8A523F4F-AB44-4477-BAB0-151E5936D144}.

- AcroBrokerLib

The key HKEY_CLASSES_ROOT\TypeLib\{41738EEA-442F-477F-92CF-2889BD6CD7E7}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- AcroBrokerLib

The key HKEY_CLASSES_ROOT\TypeLib\{41738EEA-442F-477F-92CF-2889BD6CD7E7}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- AcroIEHelperShim 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{2991F100-D9C3-4243-82A2-A718747FC0CF}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- AcroIEHelperShim 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{2991F100-D9C3-4243-82A2-A718747FC0CF}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- ColorSettings Class

The key HKEY_CLASSES_ROOT\CLSID\{22C03B0C-3222-4fac-8650-8A4D50EBFE54} points to the missing ApplicationID {22C03B0C-3222-4fac-8650-8A4D50EBFE54}.

- ColorSettings Class

The key HKEY_CLASSES_ROOT\CLSID\{22C03B0C-3222-4fac-8650-8A4D50EBFE54}\TypeLib for this object point to the missing type library {4E5FDDC2-3E70-4153-A926-CA45B11F1B57}. This subkey can be deleted for this object.

- DirectAccess Class

The key HKEY_CLASSES_ROOT\CLSID\{632AF209-7969-4f28-84A4-8174498C5A6F}\TypeLib for this object point to the missing type library {4E5FDDC2-3E70-4153-A926-CA45B11F1B57}. This subkey can be deleted for this object.

- DisplaySettings Class

The key HKEY_CLASSES_ROOT\CLSID\{8008CCE8-6616-4562-A69C-29CA9D42DD98}\TypeLib for this object point to the missing type library {4E5FDDC2-3E70-4153-A926-CA45B11F1B57}. This subkey can be deleted for this object.

- DisplaySettings Class

The key HKEY_CLASSES_ROOT\CLSID\{8008CCE8-6616-4562-A69C-29CA9D42DD98} points to the missing ApplicationID {8008CCE8-6616-4562-A69C-29CA9D42DD98}.

- ft60 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{9A5EC81C-23AD-4192-82C1-298B2058C444}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- ft60 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{9A5EC81C-23AD-4192-82C1-298B2058C444}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- Google Update Process Launcher Class

The key HKEY_CLASSES_ROOT\CLSID\{ABC01078-F197-4B0B-ADBC-CFE684B39C82}\TypeLib for this object point to the missing type library {7E6CD20B-8688-4960-96D9-B979471577B8}. This subkey can be deleted for this object.

- Google Updater Service 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{5924C60B-6D7F-4AD6-8084-24A59431C967}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- Google Updater Service 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{5924C60B-6D7F-4AD6-8084-24A59431C967}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- GoogleUpdate.OnDemandCOMClass

The key HKEY_CLASSES_ROOT\CLSID\{6F8BD55B-E83D-4A47-85BE-81FFA8057A69}\TypeLib for this object point to the missing type library {7E6CD20B-8688-4960-96D9-B979471577B8}. This subkey can be deleted for this object.

- IDBHO 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{FD609BF1-0E01-403F-8F20-EA238F5CDCC3}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- IDBHO 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{FD609BF1-0E01-403F-8F20-EA238F5CDCC3}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- IDHWDevice 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{23CBD637-D6BD-4A9B-B88B-CACA7881806B}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- IDHWDevice 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{23CBD637-D6BD-4A9B-B88B-CACA7881806B}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- IDLogicalDevice 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{5C123CBE-CD8D-4470-B113-4B90D378A2C8}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- IDLogicalDevice 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{5C123CBE-CD8D-4470-B113-4B90D378A2C8}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- IESiteBlocker 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- IESiteBlocker 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{5DAB1D4C-D020-41CD-936F-D63FF662E9F7}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- IEToolbar 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- IEToolbar 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- ISearch

The key HKEY_CLASSES_ROOT\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}\TypeLib for this interface points to the missing type library {47A7A4B0-2723-41BA-865E-EBBB7081A602}. This subkey can be deleted for this interface.

- ISPOpenDocuments

The key HKEY_CLASSES_ROOT\Interface\{7EA23D88-569E-4EFD-9851-A1528A7745F9}\ProxyStubClsid32 for this interface points to the missing CLSID {7EA23D88-569E-4EFD-9851-A1528A7745F9}. This subkey can be deleted for this interface.

- IStatusEvents

The key HKEY_CLASSES_ROOT\Interface\{46B89F5A-769D-4792-AD9A-E3755915CBC3}\TypeLib for this interface points to the missing type library {47A7A4B0-2723-41BA-865E-EBBB7081A602}. This subkey can be deleted for this interface.

- Messenger Class

The key HKEY_CLASSES_ROOT\CLSID\{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} points to the missing ApplicationID {E5D12C42-7B4F-11D3-B5C9-0050045C3C96}.

- Messenger Class

The key HKEY_CLASSES_ROOT\CLSID\{96F8C0C7-F106-437D-90DC-6C92793246C4}\TypeLib for this object point to the missing type library {661B6BCF-D5E8-42A6-A84D-0950ED57641D}. This subkey can be deleted for this object.

- Microsoft Silverlight

The key HKEY_CLASSES_ROOT\CLSID\{DFEAF541-F3E1-4c24-ACAC-99C30715084A} points to the missing ApplicationID {83B900D2-51E8-4B67-BD75-643C8F14BBD8}.

- MobileMeServices 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{B880BF6E-1646-47D0-96EB-E963AADA3740}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- MobileMeServices 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{B880BF6E-1646-47D0-96EB-E963AADA3740}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- PhotoShare 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{2C5D34C5-99DE-4F84-95BE-2F18DC3BE4AB}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- PhotoShare 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{2C5D34C5-99DE-4F84-95BE-2F18DC3BE4AB}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- protector_dllLib

The key HKEY_CLASSES_ROOT\TypeLib\{C7CB459A-7261-4AE6-A87A-17041EE98A40}\16.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- protector_dllLib

The key HKEY_CLASSES_ROOT\TypeLib\{C7CB459A-7261-4AE6-A87A-17041EE98A40}\16.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- SizePosition Class

The key HKEY_CLASSES_ROOT\CLSID\{1DFF7AF4-559F-4023-9D2D-8DB813317DEA}\TypeLib for this object point to the missing type library {4E5FDDC2-3E70-4153-A926-CA45B11F1B57}. This subkey can be deleted for this object.

- SizePosition Class

The key HKEY_CLASSES_ROOT\CLSID\{1DFF7AF4-559F-4023-9D2D-8DB813317DEA} points to the missing ApplicationID {1DFF7AF4-559F-4023-9D2D-8DB813317DEA}.

- SoftphoneDialer Class

The key HKEY_CLASSES_ROOT\CLSID\{FBE342DA-FCD4-49d8-A14E-AFA1F5CC4A85} points to the missing ApplicationID {DFB979A4-3182-475e-9300-1F77BC8CAB8C}.

- SoftphoneDialerWindow Class

The key HKEY_CLASSES_ROOT\CLSID\{0284338F-FDBA-4659-AFB6-7C10E1CDBF7F} points to the missing ApplicationID {DFB979A4-3182-475e-9300-1F77BC8CAB8C}.

- SoftphoneError Class

The key HKEY_CLASSES_ROOT\CLSID\{64D1E083-F63D-4297-85A0-2E4752FFC90F} points to the missing ApplicationID {DFB979A4-3182-475e-9300-1F77BC8CAB8C}.

- SoftphonePhoneContact Class

The key HKEY_CLASSES_ROOT\CLSID\{F4D926F0-E589-450f-B33B-8A14555E1330} points to the missing ApplicationID {DFB979A4-3182-475e-9300-1F77BC8CAB8C}.

- SoftphonePhoneNumber Class

The key HKEY_CLASSES_ROOT\CLSID\{0101014E-D958-4d10-82A1-9195E2220B66} points to the missing ApplicationID {DFB979A4-3182-475e-9300-1F77BC8CAB8C}.

- Windows Live HW Device

The key HKEY_CLASSES_ROOT\CLSID\{1C109E4C-2F30-4EA3-A57A-A290877A2303} points to the missing ApplicationID {47C4DDCF-73DE-4A8C-B3A8-EBCC6DB01FAF}.

- Windows Live HW Device

The key HKEY_CLASSES_ROOT\CLSID\{1C109E4C-2F30-4EA3-A57A-A290877A2303} points to the missing ApplicationID {47C4DDCF-73DE-4A8C-B3A8-EBCC6DB01FAF}.

- Windows Live Logical Device

The key HKEY_CLASSES_ROOT\CLSID\{B9F1D9B8-1DA6-4F17-962F-69EC82EA2704} points to the missing ApplicationID {83C4609B-7A93-4496-B467-21A906DCD9D0}.

- Windows Live Logical Device

The key HKEY_CLASSES_ROOT\CLSID\{B9F1D9B8-1DA6-4F17-962F-69EC82EA2704} points to the missing ApplicationID {83C4609B-7A93-4496-B467-21A906DCD9D0}.

- Windows Live Provider 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{CDA2915E-1593-4013-B8BB-6BAA188A9661}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- Windows Live Provider 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{CDA2915E-1593-4013-B8BB-6BAA188A9661}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- WlcUI.dll

The key HKEY_CLASSES_ROOT\Wow6432Node\AppID\WlcUI.dll points to the missing ApplicationID {DFB979A4-3182-475e-9300-1F77BC8CAB8C}.

- WlcUI.dll

The key HKEY_CLASSES_ROOT\AppID\WlcUI.dll points to the missing ApplicationID {DFB979A4-3182-475e-9300-1F77BC8CAB8C}.

- XPLPP 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- XPLPP 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{A0C8F0F1-DE25-4ADB-8F0B-508F6CA43DE9}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- yacscom 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{2B323CCC-50E3-11D3-9466-00A0C9700498}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- yacscom 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{2B323CCC-50E3-11D3-9466-00A0C9700498}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- yacsui 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{7D1E9C3C-BD6A-11D3-87A8-009027A35D73}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- yacsui 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{7D1E9C3C-BD6A-11D3-87A8-009027A35D73}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- Yahoo! Audio Slider

The key HKEY_CLASSES_ROOT\CLSID\{EC1831E0-C231-11D3-87A8-009027A35D73}\TypeLib for this object point to the missing type library {EC1831D2-C231-11D3-87A8-009027A35D73}. This subkey can be deleted for this object.

- Yahoo! Messenger TypeLib

The key HKEY_CLASSES_ROOT\TypeLib\{C6B279A3-D11F-41FB-9EA7-233B2938A7DC}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- Yahoo! Messenger TypeLib

The key HKEY_CLASSES_ROOT\TypeLib\{C6B279A3-D11F-41FB-9EA7-233B2938A7DC}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- Yahoo! VU Meter

The key HKEY_CLASSES_ROOT\CLSID\{EB54205E-BF1F-11D3-87A8-009027A35D73}\TypeLib for this object point to the missing type library {EB542051-BF1F-11D3-87A8-009027A35D73}. This subkey can be deleted for this object.

- Yahoo! Webcam Upload 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{DCE2F8A1-A520-11D4-8FD0-00D0B7730277}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- Yahoo! Webcam Upload 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{DCE2F8A1-A520-11D4-8FD0-00D0B7730277}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- Yahoo! Webcam Viewer 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{9D392231-AE8E-11D4-8FD3-00D0B7730277}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- Yahoo! Webcam Viewer 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{9D392231-AE8E-11D4-8FD3-00D0B7730277}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- YahooAUService 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{9F5C5784-A417-472C-81F6-336A2981B26E}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- YahooAUService 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{9F5C5784-A417-472C-81F6-336A2981B26E}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- ypager 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{E5D12C41-7B4F-11D3-B5C9-0050045C3C96}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- ypager 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{E5D12C41-7B4F-11D3-B5C9-0050045C3C96}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- YPagerChecker 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{B2865C5C-9F6D-4D28-B600-0BD6E15952C1}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- YPagerChecker 1.0 Type Library

The key HKEY_CLASSES_ROOT\TypeLib\{B2865C5C-9F6D-4D28-B600-0BD6E15952C1}\1.0\HELPDIR for this type library serves to indicate a help directory, but contains no data. This subkey can be deleted for this type library.

- The registry contains invalid search paths for a number of programs. These can be deleted. 2 Errors - migwiz.exe

The registry should contain an application path in the key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\migwiz.exe. The key contains no data and can be deleted.

- migwiz.exe

The registry should contain an application path in the key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\migwiz.exe. The key contains no data and can be deleted.

- Some entries in the Windows and program history lists refer to missing files and can be deleted. 4 Errors - Explorer history list: unneeded entry for the file type . file (*.)

The Windows function Open With created the key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\. when you wanted to open a file with the extension .. As no data has been written in the key, it can be deleted.

- Explorer history list: unneeded entry for the file type .DAT file (*.dat)

The Windows function Open With created the key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dat when you wanted to open a file with the extension .dat. As no data has been written in the key, it can be deleted.

- Explorer history list: unneeded entry for the file type .UPD file (*.upd)

The Windows function Open With created the key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.upd when you wanted to open a file with the extension .upd. As no data has been written in the key, it can be deleted.

- Explorer history list: unneeded entry for the file type .XLK file (*.xlk)

The Windows function Open With created the key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlk when you wanted to open a file with the extension .xlk. As no data has been written in the key, it can be deleted.

- References and pointers to files in use by more than one application that no longer exist. 2 Errors - Missing shared file AVG Find Extension.

The registry contains a reference to the missing shared file {9F97547E-460A-42C5-AE0C-81C61FFAEBC3} under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved.

- Missing shared file AVG Find Extension.

The registry contains a reference to the missing shared file {9F97547E-460A-42C5-AE0C-81C61FFAEBC3} under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved.

- Some shortcuts on your system refer to missing targets. 3 Errors - avg

The shortcut G:\ \avg.rar points to the missing target G:\ \avg.rar and can be deleted.

- RemoveWAT-2.2.5_

The shortcut G:\ \RemoveWAT-2.2.5_.rar points to the missing target G:\ \RemoveWAT-2.2.5_.rar and can be deleted.

- vlc player

The shortcut G:\ \vlc player.rar points to the missing target G:\ \vlc player.rar and can be deleted.

- Programs listed in the Control Panel are no longer installed, do not have uninstall programs, or have other configuration problems. 10 Errors - Apple Software Update

The registry contains an entry for the font InstallSource under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C41300B9-185D-475E-BFEC-39EF732F19B1} that points to the missing file C:\Users\admin\AppData\Local\Temp\IXP199.TMP\.

- Microsoft Visual C++ 2005 Redistributable

The registry contains an entry for the font InstallSource under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{837b34e3-7c30-493c-8f6a-2b0f04e2912c} that points to the missing file C:\Users\admin\AppData\Local\Temp\IXP000.TMP\.

- Missing File : c:\1508092bdc03b871f5155c3c5043\

The registry contains an entry for the font 1 under HKEY_CLASSES_ROOT\Installer\Products\153AA053AF120723B8A73845437E66DA\SourceList\Net that points to the missing file c:\1508092bdc03b871f5155c3c5043\.

- Missing File : c:\608e0a8cba4d949d51\

The registry contains an entry for the font 1 under HKEY_CLASSES_ROOT\Installer\Products\D7314F9862C648A4DB8BE2A5B47BE100\SourceList\Net that points to the missing file c:\608e0a8cba4d949d51\.

- Missing File : C:\Users\admin\AppData\Local\Temp\IXP000.TMP\

The registry contains an entry for the font 1 under HKEY_CLASSES_ROOT\Installer\Products\3e43b73803c7c394f8a6b2f0402e19c2\SourceList\Net that points to the missing file C:\Users\admin\AppData\Local\Temp\IXP000.TMP\.

- Missing File : C:\Users\admin\AppData\Local\Temp\IXP066.TMP\

The registry contains an entry for the font 3 under HKEY_CLASSES_ROOT\Installer\Products\E84E5F4E55179FC488DCF773E79CCA45\SourceList\Net that points to the missing file C:\Users\admin\AppData\Local\Temp\IXP066.TMP\.

- Missing File : C:\Users\admin\AppData\Local\Temp\IXP066.TMP\

The registry contains an entry for the font 3 under HKEY_CLASSES_ROOT\Installer\Products\E7EFB369053C64344BC30B328503A654\SourceList\Net that points to the missing file C:\Users\admin\AppData\Local\Temp\IXP066.TMP\.

- Missing File : C:\Users\admin\AppData\Local\Temp\IXP199.TMP\

The registry contains an entry for the font 1 under HKEY_CLASSES_ROOT\Installer\Products\9B00314CD581E574FBCE93FE37F2911B\SourceList\Net that points to the missing file C:\Users\admin\AppData\Local\Temp\IXP199.TMP\.

- Missing File : C:\Users\admin\AppData\Local\Temp\{AFFB928F-20E7-43E5-A6F1-36E9C7DE8CAE}\

The registry contains an entry for the font 1 under HKEY_CLASSES_ROOT\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF\SourceList\Net that points to the missing file C:\Users\admin\AppData\Local\Temp\{AFFB928F-20E7-43E5-A6F1-36E9C7DE8CAE}\.

- Missing File :c:\608e0a8cba4d949d51\

The registry contains an entry for the font 1 under HKEY_CLASSES_ROOT\Installer\Patches\1F83F2B8C3D678D4DAF259A46F498200\SourceList\Net that points to the missing file c:\608e0a8cba4d949d51\.

- Some startup items are no longer on your system. 1 Error -

The registry contains the startup entry in the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run, which points to the missing program . This invalid entry should be deleted.

- Invalid or orphaned references and pathways to system, application, and file settings. 154 Errors - Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID\pourraient key HKEY_LOCAL_MACHINE\software\Classes\AppID\pourraient for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID\pas key HKEY_LOCAL_MACHINE\software\Classes\AppID\pas for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID éparée key HKEY_LOCAL_MACHINE\software\Classes\AppID éparée for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID\pourrait key HKEY_LOCAL_MACHINE\software\Classes\AppID\pourrait for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID\logiciel key HKEY_LOCAL_MACHINE\software\Classes\AppID\logiciel for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID\l'utilise.' key HKEY_LOCAL_MACHINE\software\Classes\AppID\l'utilise.' for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID e key HKEY_LOCAL_MACHINE\software\Classes\AppID e for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID\lorsqu'aucun key HKEY_LOCAL_MACHINE\software\Classes\AppID\lorsqu'aucun for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\CID\ad10cee0-390e-48ee-a822-b64244163579\CustomProperties key HKEY_LOCAL_MACHINE\software\Classes\CID\ad10cee0-390e-48ee-a822-b64244163579\CustomProperties for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\CID\4be13006-41e9-4eb5-a9c3-fe82b3a1d5be\CustomProperties key HKEY_LOCAL_MACHINE\software\Classes\CID\4be13006-41e9-4eb5-a9c3-fe82b3a1d5be\CustomProperties for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\CID.Local\4be13006-41e9-4eb5-a9c3-fe82b3a1d5be\CustomProperties key HKEY_LOCAL_MACHINE\software\Classes\CID.Local\4be13006-41e9-4eb5-a9c3-fe82b3a1d5be\CustomProperties for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\CID.Local\0ac09950-a692-4b59-8ae3-5d5089bdb51c\CustomProperties key HKEY_LOCAL_MACHINE\software\Classes\CID.Local\0ac09950-a692-4b59-8ae3-5d5089bdb51c\CustomProperties for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID âche key HKEY_LOCAL_MACHINE\software\Classes\AppID âche for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID\se key HKEY_LOCAL_MACHINE\software\Classes\AppID\se for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\CID\0ac09950-a692-4b59-8ae3-5d5089bdb51c\CustomProperties key HKEY_LOCAL_MACHINE\software\Classes\CID\0ac09950-a692-4b59-8ae3-5d5089bdb51c\CustomProperties for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID\être key HKEY_LOCAL_MACHINE\software\Classes\AppID\être for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\TrendMicro\HijackThis key HKEY_LOCAL_MACHINE\software\TrendMicro\HijackThis for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\JMicron Technology Corp.\JMicron JMB38X Flash Media Controller\1.00.0000 key HKEY_LOCAL_MACHINE\software\JMicron Technology Corp.\JMicron JMB38X Flash Media Controller\1.00.0000 for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID\apparaître key HKEY_LOCAL_MACHINE\software\Classes\AppID\apparaître for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID\alors key HKEY_LOCAL_MACHINE\software\Classes\AppID\alors for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\Windows.XPSActiveDocument.1\DocObject key HKEY_LOCAL_MACHINE\software\Classes\Windows.XPSActiveDocument.1\DocObject for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\Windows Media\WMSDK\VideoDecode key HKEY_LOCAL_MACHINE\software\Classes\Windows Media\WMSDK\VideoDecode for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Apple Inc.\Bonjour\Services\SMB key HKEY_LOCAL_MACHINE\software\Apple Inc.\Bonjour\Services\SMB for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Apple Inc.\Bonjour\Power Management key HKEY_LOCAL_MACHINE\software\Apple Inc.\Bonjour\Power Management for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID\et key HKEY_LOCAL_MACHINE\software\Classes\AppID\et for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID\endommagées. key HKEY_LOCAL_MACHINE\software\Classes\AppID\endommagées. for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID\Google key HKEY_LOCAL_MACHINE\software\Classes\AppID\Google for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID\fonctionnalités key HKEY_LOCAL_MACHINE\software\Classes\AppID\fonctionnalités for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID\certaines key HKEY_LOCAL_MACHINE\software\Classes\AppID\certaines for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID\automatiquement key HKEY_LOCAL_MACHINE\software\Classes\AppID\automatiquement for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID\désinstalle key HKEY_LOCAL_MACHINE\software\Classes\AppID\désinstalle for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID\Cette key HKEY_LOCAL_MACHINE\software\Classes\AppID\Cette for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\CID.Local\5dd11875-42eb-46b4-bb72-5de543a24c72\CustomProperties key HKEY_LOCAL_MACHINE\software\Classes\CID.Local\5dd11875-42eb-46b4-bb72-5de543a24c72\CustomProperties for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\SVCID\488091f0-bff6-11ce-9de8-00aa00a3f464\Providers\1057b217-34fa-478c-8033-26e581d1e1e1 key HKEY_LOCAL_MACHINE\software\Classes\SVCID\488091f0-bff6-11ce-9de8-00aa00a3f464\Providers\1057b217-34fa-478c-8033-26e581d1e1e1 for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\SVCID\01366d42-c04e-11d1-b1c0-00c04fc2f3ef\Providers\0ac09950-a692-4b59-8ae3-5d5089bdb51c key HKEY_LOCAL_MACHINE\software\Classes\SVCID\01366d42-c04e-11d1-b1c0-00c04fc2f3ef\Providers\0ac09950-a692-4b59-8ae3-5d5089bdb51c for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\SVCID\ced2de40-bff6-11ce-9de8-00aa00a3f464\Providers\4be13006-41e9-4eb5-a9c3-fe82b3a1d5be key HKEY_LOCAL_MACHINE\software\Classes\SVCID\ced2de40-bff6-11ce-9de8-00aa00a3f464\Providers\4be13006-41e9-4eb5-a9c3-fe82b3a1d5be for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\SVCID\6407e780-7e5d-11d0-8ce6-00c04fdc877e\Providers\ad10cee0-390e-48ee-a822-b64244163579 key HKEY_LOCAL_MACHINE\software\Classes\SVCID\6407e780-7e5d-11d0-8ce6-00c04fdc877e\Providers\ad10cee0-390e-48ee-a822-b64244163579 for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\Package\Insertable key HKEY_LOCAL_MACHINE\software\Classes\Package\Insertable for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\LiveScript Author\OLEScript key HKEY_LOCAL_MACHINE\software\Classes\LiveScript Author\OLEScript for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\StickyNotes\Shell key HKEY_LOCAL_MACHINE\software\Classes\StickyNotes\Shell for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\Package2\Insertable key HKEY_LOCAL_MACHINE\software\Classes\Package2\Insertable for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\Windows Media\WMSDK\AudioDecode key HKEY_LOCAL_MACHINE\software\Classes\Windows Media\WMSDK\AudioDecode for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\SVCID.Local\ced2de40-bff6-11ce-9de8-00aa00a3f464\Providers\4be13006-41e9-4eb5-a9c3-fe82b3a1d5be key HKEY_LOCAL_MACHINE\software\Classes\SVCID.Local\ced2de40-bff6-11ce-9de8-00aa00a3f464\Providers\4be13006-41e9-4eb5-a9c3-fe82b3a1d5be for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\Windows.XPSActiveDocument.1\DocObject key HKEY_LOCAL_MACHINE\software\Classes\Windows.XPSActiveDocument.1\DocObject for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\Windows Media\WMSDK\VideoDecode key HKEY_LOCAL_MACHINE\software\Classes\Windows Media\WMSDK\VideoDecode for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\SVCID.Local\488091f0-bff6-11ce-9de8-00aa00a3f464\Providers\1057b217-34fa-478c-8033-26e581d1e1e1 key HKEY_LOCAL_MACHINE\software\Classes\SVCID.Local\488091f0-bff6-11ce-9de8-00aa00a3f464\Providers\1057b217-34fa-478c-8033-26e581d1e1e1 for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\SVCID.Local\01366d42-c04e-11d1-b1c0-00c04fc2f3ef\Providers\0ac09950-a692-4b59-8ae3-5d5089bdb51c key HKEY_LOCAL_MACHINE\software\Classes\SVCID.Local\01366d42-c04e-11d1-b1c0-00c04fc2f3ef\Providers\0ac09950-a692-4b59-8ae3-5d5089bdb51c for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\SVCID.Local\7f7b65b8-769f-4221-a079-d93a05a933df\Providers\5dd11875-42eb-46b4-bb72-5de543a24c72 key HKEY_LOCAL_MACHINE\software\Classes\SVCID.Local\7f7b65b8-769f-4221-a079-d93a05a933df\Providers\5dd11875-42eb-46b4-bb72-5de543a24c72 for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\SVCID.Local\6407e780-7e5d-11d0-8ce6-00c04fdc877e\Providers\ad10cee0-390e-48ee-a822-b64244163579 key HKEY_LOCAL_MACHINE\software\Classes\SVCID.Local\6407e780-7e5d-11d0-8ce6-00c04fdc877e\Providers\ad10cee0-390e-48ee-a822-b64244163579 for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\Equation.3\Insertable key HKEY_LOCAL_MACHINE\software\Classes\Equation.3\Insertable for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\Equation.2\NotInsertable key HKEY_LOCAL_MACHINE\software\Classes\Equation.2\NotInsertable for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\JavaScript\OLEScript key HKEY_LOCAL_MACHINE\software\Classes\JavaScript\OLEScript for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\Equations\NotInsertable key HKEY_LOCAL_MACHINE\software\Classes\Equations\NotInsertable for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\ECMAScript\OLEScript key HKEY_LOCAL_MACHINE\software\Classes\ECMAScript\OLEScript for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\CID.Local\ad10cee0-390e-48ee-a822-b64244163579\CustomProperties key HKEY_LOCAL_MACHINE\software\Classes\CID.Local\ad10cee0-390e-48ee-a822-b64244163579\CustomProperties for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\Equation\NotInsertable key HKEY_LOCAL_MACHINE\software\Classes\Equation\NotInsertable for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\ECMAScript Author\OLEScript key HKEY_LOCAL_MACHINE\software\Classes\ECMAScript Author\OLEScript for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\JavaScript1.3\OLEScript key HKEY_LOCAL_MACHINE\software\Classes\JavaScript1.3\OLEScript for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\JavaScript1.2 Author\OLEScript key HKEY_LOCAL_MACHINE\software\Classes\JavaScript1.2 Author\OLEScript for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\LiveScript\OLEScript key HKEY_LOCAL_MACHINE\software\Classes\LiveScript\OLEScript for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\JavaScript1.3 Author\OLEScript key HKEY_LOCAL_MACHINE\software\Classes\JavaScript1.3 Author\OLEScript for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\JavaScript1.1\OLEScript key HKEY_LOCAL_MACHINE\software\Classes\JavaScript1.1\OLEScript for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\JavaScript Author\OLEScript key HKEY_LOCAL_MACHINE\software\Classes\JavaScript Author\OLEScript for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\JavaScript1.2\OLEScript key HKEY_LOCAL_MACHINE\software\Classes\JavaScript1.2\OLEScript for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\JavaScript1.1 Author\OLEScript key HKEY_LOCAL_MACHINE\software\Classes\JavaScript1.1 Author\OLEScript for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID\lorsqu'aucun key HKEY_LOCAL_MACHINE\software\Classes\AppID\lorsqu'aucun for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\Equations\NotInsertable key HKEY_LOCAL_MACHINE\software\Classes\Equations\NotInsertable for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID\l'utilise.' key HKEY_LOCAL_MACHINE\software\Classes\AppID\l'utilise.' for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\AppID\logiciel key HKEY_LOCAL_MACHINE\software\Classes\AppID\logiciel for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\Equation\NotInsertable key HKEY_LOCAL_MACHINE\software\Classes\Equation\NotInsertable for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\ECMAScript Author\OLEScript key HKEY_LOCAL_MACHINE\software\Classes\ECMAScript Author\OLEScript for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\Equation.3\Insertable key HKEY_LOCAL_MACHINE\software\Classes\Equation.3\Insertable for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HKEY_LOCAL_MACHINE\software\Classes\Equation.2\NotInsertable key HKEY_LOCAL_MACHINE\software\Classes\Equation.2\NotInsertable for this object contains no data. This subkey can be deleted for this object.

- Empty Key

The HK

respiresbien · Answer

J'éspère que c'est ce que tu m'as demandé. 
Merci.

kduc · Answer

... 

Ce rapport est difficilement lisible ! 

Lance Malwarebytes et clique sur l'onglet "Rapports/Logs". 

Récupère le rapport (double-clique dessus : il va s'ouvrir). 

Poste-le (copie-colle dans ta réponse). 

------------- 
Ensuite, ... 

Télécharge Dr.Web CureIt! : ftp://ftp.drweb.com/pub/drweb/cureit/launch.exe  

Effectue plusieurs scans successifs jusqu'à avoir 0 virus détecté - Choisis "Désinfecter" comme option !  

Tutoriel : https://www.malekal.com/tutorial-et-guidedr-web-cureit/

respiresbien · Answer

Malheureusement je n'arrive pas à trouver "rapports logs"!!!!!!!!!!

respiresbien · Answer

Je suis entrain de télécharger Dr.Web CureIT. Est ce que je continue ou pas? Parce que je n'arrive toujours pas à trouver "rapports Logs".
Merci Kduc.

kduc · Answer

... 

Continue avec Dr.Web ...

Pour Malwarebytes, regarde en haut, sur l'écran d'accueil, tu as l'onglet Rapports/Logs ...

http://d.imagehost.org/view/0186/Malwarebytes

respiresbien · Answer

Voici le rapport:
Hack Tool.Wpa...  
Il est dans catégorie File
c'est un élement c:/Users/admin/AppaData/Local/Temp/remove

kduc · Answer

...

C'est un rapport tronqué que tu me livres !

Tu as bien posté le rapport AD-R au début ... Comment se fait-il que ça cloche pour les autres ?! 

Y a un problème ?

respiresbien · Answer

Bonne année,

En fait, c'est impossible d activer  le rapport log, je clique dessus sans resultat. Cela dit, le problème detecté est le  Hack Tool.Wpa...Après cela, j'ai fait le scan avec Dr Web Ltd, et le resultat est: pas d'infection!
La question: pourquoi le Hack a été detecté par Ad r alors que leeb Dr Web Ltd n'a rien trouvé?
Merci pour ton aide et encore une fois meilleurs voeux.

kduc · Answer

..

Et que dit AVG si tu relances un scan (après mise à jour) ?

Meilleurs Voeux pour 2011

respiresbien · Answer

Bonjour kduc,

Après mise à jour de AGV: 9.0.872, les résultats de l'analyse complète du pc sont:
55 avertissements, et que ces dernières ont été supprimées.

Merci et meilleurs voeux à toi aussi, ainsi qu'à toutes et tous ceux qui aident les autres.

kduc · Answer

Salut,

Pour les scans avec Dr.Web, cela a donné quoi ?

respiresbien · Answer

Salut,
Je viens de terminé l'analyse par Dr Web et le resultat: aucun virus detecté.
Tant mieux, j'espère.lol

Par contre ma question demeure:
pourquoi il a été detecté le hack auparavant par ad r? Est ce que cela signifie qu'un hacker est deriere ça?
Cela dit, le contenu de mon compte facebook ansi que celui de ma femme a été modifié ( plusieurs photos ont été supprimées, et que moi aussi été supprimé de de la liste de ses amis.

kduc · Answer

...

"le contenu de mon compte facebook ansi que celui de ma femme a été modifié ..."

D'ou la nécessité de changer le(s) mot(s) de passe !

"pourquoi il a été detecté le hack auparavant par ad r? Est ce que cela signifie qu'un hacker est deriere ça? "

Aucune idée. Pas nécessairement de hacker derrière tout ça.

-------------
Télécharge et installe UsbFix : http://www.teamxscript.org/usbfixTelechargement.html (par El Desaparecido, C_XX & Chimay8) sur le bureau.

! Branche tes sources de données externes au PC (clé USB, disque dur externe, etc ...) susceptibles d avoir été infectées et ce, sans les ouvrir !

Clique droit sur le raccourci UsbFix présent sur ton bureau et choisis "éxécuter en tant qu'administrateur".

Au menu principal, choisis l'option "Recherche".

Laisse l' outil travailler ...

Au final, poste (copie-colle) le rapport UsbFix.txt qui apparaîtra.

Note : Le rapport UsbFix.txt est aussi conservé à la racine du disque dur (C:\UsbFix.txt).

Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme
étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre
fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise
par ces antivirus.

respiresbien · Answer

Salut,

voici le rapport:
############################## | UsbFix 7.036 | [Recherche]

Utilisateur: admin (Administrateur) # ADMIN-PC [Hewlett-Packard HP Pavilion dv7 Notebook PC]
Mis à jour le 20/12/10 par El Desaparecido / C_XX
Lancé à 18:19:56 | 01/01/2011
Site Web: http://www.teamxscript.org
Contact: eldesaparecido@teamxscript.org

CPU: Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz
CPU 2: Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz
Microsoft Windows 7 Professionnel  (6.1.7600 64-Bit) # 
Internet Explorer 8.0.7600.16385

Pare-feu Windows: Activé
RAM -> 3069 Mo 
C:\ (%systemdrive%) -> Disque fixe # 223 Go (174 Go libre(s) - 78%) [] # NTFS
D:\ -> Disque fixe # 9 Go (5 Go libre(s) - 51%) [HP_RECOVERY] # NTFS
E:\ -> CD-ROM
F:\ -> Disque amovible # 4 Go (205 Mo libre(s) - 5%) [MAMAN 4G] # FAT32
G:\ -> Disque fixe # 373 Go (56 Go libre(s) - 15%) [BARIS] # FAT32
H:\ -> Disque amovible # 2 Go (1 Go libre(s) - 55%) [SAMIRA] # FAT
I:\ -> Disque amovible # 120 Mo (38 Mo libre(s) - 32%) [] # FAT

################## | Éléments infectieux |


Présent! C:\Users\admin\AppData\Local\Temp\IXP699.TMP

################## | Registre |


################## | Mountpoints2 |


################## | Vaccin |

(!) Cet ordinateur n'est pas vacciné!

################## | E.O.F |

Merci beaucoup.

kduc · Answer

...

(!) Branche tes sources de données externes au PC (clé USB, disque dur externe, etc ...) susceptibles d avoir été infectées et ce, sans les ouvrir. 

Clique droit sur le raccourci UsbFix  présent sur ton bureau et choisis "exécuter en tant qu'administrateur". 

Au menu principal, choisis l'option « Suppression ». 

* Ton bureau va disparaitre et le PC redémarrer. 

* Au redémarrage, UsbFix scannera le PC ... Laisse l' outil travailler ! 

Ensuite, poste le rapport UsbFix.txt qui s' affiche avec le bureau. 

PS : le rapport UsbFix.txt est conservé à la racine du disque (C:\UsbFix.txt)

respiresbien · Answer

Salut,

Voici le rapport:
############################## | UsbFix 7.036 | [Suppression]

Utilisateur: admin (Administrateur) # ADMIN-PC [Hewlett-Packard HP Pavilion dv7 Notebook PC]
Mis à jour le 20/12/10 par El Desaparecido / C_XX
Lancé à 18:30:33 | 01/01/2011
Site Web: http://www.teamxscript.org
Contact: eldesaparecido@teamxscript.org

CPU: Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz
CPU 2: Intel(R) Core(TM)2 Duo CPU T5800 @ 2.00GHz
Microsoft Windows 7 Professionnel  (6.1.7600 64-Bit) # 
Internet Explorer 8.0.7600.16385

Pare-feu Windows: Activé
RAM -> 3069 Mo 
C:\ (%systemdrive%) -> Disque fixe # 223 Go (174 Go libre(s) - 78%) [] # NTFS
D:\ -> Disque fixe # 9 Go (5 Go libre(s) - 51%) [HP_RECOVERY] # NTFS
E:\ -> CD-ROM
F:\ -> Disque amovible # 4 Go (205 Mo libre(s) - 5%) [MAMAN 4G] # FAT32
G:\ -> Disque fixe # 373 Go (56 Go libre(s) - 15%) [BARIS] # FAT32
H:\ -> Disque amovible # 2 Go (1 Go libre(s) - 55%) [SAMIRA] # FAT
I:\ -> Disque amovible # 120 Mo (38 Mo libre(s) - 32%) [] # FAT

################## | Éléments infectieux |


Supprimé! C:\Users\admin\AppData\Local\Temp\IXP699.TMP
Supprimé! C:\$RECYCLE.BIN\S-1-5-21-4259422041-724885898-1724697117-1000
Supprimé! D:\$RECYCLE.BIN\S-1-5-21-1264933024-1361747519-458174173-1000
Supprimé! D:\$RECYCLE.BIN\S-1-5-21-1264933024-1361747519-458174173-500
Supprimé! D:\$RECYCLE.BIN\S-1-5-21-3814284634-923541006-1217520015-1000
Supprimé! D:\$RECYCLE.BIN\S-1-5-21-3814284634-923541006-1217520015-500
Supprimé! D:\$RECYCLE.BIN\S-1-5-21-4259422041-724885898-1724697117-1000
Supprimé! D:\$RECYCLE.BIN\S-1-5-21-970949954-1128207338-815651905-1000
Supprimé! D:\$RECYCLE.BIN\S-1-5-21-970949954-1128207338-815651905-500

################## | Registre |


################## | Mountpoints2 |


################## | Listing |

[06/10/2010 - 15:55:13 | D ] 	C:\$AVG
[01/01/2011 - 18:31:18 | SHD ] 	C:\$Recycle.Bin
[31/12/2010 - 15:42:54 | N | 2758] 	C:\Ad-Report-CLEAN[1].txt
[31/12/2010 - 16:00:16 | N | 1977] 	C:\Ad-Report-CLEAN[2].txt
[31/12/2010 - 16:20:55 | D ] 	C:\Config.Msi
[14/07/2009 - 06:08:56 | SHD ] 	C:\Documents and Settings
[07/11/2007 - 07:00:40 | N | 17734] 	C:\eula.1028.txt
[07/11/2007 - 07:00:40 | N | 17734] 	C:\eula.1031.txt
[07/11/2007 - 07:00:40 | N | 10134] 	C:\eula.1033.txt
[07/11/2007 - 07:00:40 | N | 17734] 	C:\eula.1036.txt
[07/11/2007 - 07:00:40 | N | 17734] 	C:\eula.1040.txt
[07/11/2007 - 07:00:40 | N | 118] 	C:\eula.1041.txt
[07/11/2007 - 07:00:40 | N | 17734] 	C:\eula.1042.txt
[07/11/2007 - 07:00:40 | N | 17734] 	C:\eula.2052.txt
[07/11/2007 - 07:00:40 | N | 17734] 	C:\eula.3082.txt
[07/11/2007 - 07:00:40 | N | 1110] 	C:\globdata.ini
[01/01/2011 - 11:05:40 | ASH | 2413522944] 	C:\hiberfil.sys
[04/10/2010 - 17:48:27 | D ] 	C:\HP
[07/11/2007 - 07:44:20 | N | 855040] 	C:\install.exe
[07/11/2007 - 07:00:40 | N | 843] 	C:\install.ini
[07/11/2007 - 07:44:20 | N | 75280] 	C:\install.res.1028.dll
[07/11/2007 - 07:44:20 | N | 95248] 	C:\install.res.1031.dll
[07/11/2007 - 07:44:20 | N | 90128] 	C:\install.res.1033.dll
[07/11/2007 - 07:44:20 | N | 96272] 	C:\install.res.1036.dll
[07/11/2007 - 07:44:20 | N | 94224] 	C:\install.res.1040.dll
[07/11/2007 - 07:44:20 | N | 80400] 	C:\install.res.1041.dll
[07/11/2007 - 07:44:20 | N | 78864] 	C:\install.res.1042.dll
[07/11/2007 - 07:44:20 | N | 74768] 	C:\install.res.2052.dll
[07/11/2007 - 07:44:20 | N | 95248] 	C:\install.res.3082.dll
[04/10/2010 - 17:09:41 | RHD ] 	C:\MSOCache
[01/01/2011 - 11:05:42 | ASH | 3218034688] 	C:\pagefile.sys
[14/07/2009 - 04:20:08 | D ] 	C:\PerfLogs
[09/12/2010 - 17:25:37 | D ] 	C:\Program Files
[31/12/2010 - 17:18:54 | D ] 	C:\Program Files (x86)
[31/12/2010 - 17:18:54 | HD ] 	C:\ProgramData
[04/10/2010 - 17:02:42 | SHD ] 	C:\Recovery
[31/12/2010 - 14:28:50 | D ] 	C:\rsit
[04/10/2010 - 17:43:58 | D ] 	C:\swsetup
[31/12/2010 - 16:45:29 | SHD ] 	C:\System Volume Information
[01/01/2011 - 18:31:20 | D ] 	C:\UsbFix
[01/01/2011 - 18:30:45 | A | 3947] 	C:\UsbFix.txt
[04/10/2010 - 17:02:52 | D ] 	C:\Users
[07/11/2007 - 07:00:40 | N | 5686] 	C:\vcredist.bmp
[07/11/2007 - 07:50:40 | N | 1927956] 	C:\VC_RED.cab
[07/11/2007 - 07:53:12 | N | 242176] 	C:\VC_RED.MSI
[30/12/2010 - 23:03:38 | D ] 	C:\Windows
[01/01/2011 - 18:31:18 | SHD ] 	D:\$RECYCLE.BIN
[14/12/2008 - 17:44:32 | N | 13] 	D:\BLOCK.RIN
[04/10/2006 - 07:02:44 | N | 438328] 	D:\boo.mgr
[25/06/2010 - 17:35:40 | D ] 	D:\boot
[04/10/2006 - 00:02:44 | AH | 438328] 	D:\bootmgr
[26/03/2008 - 17:08:32 | SH | 1089] 	D:\Desktop.ini
[03/10/2010 - 14:49:33 | N | 24] 	D:\DRECOVERY
[03/10/2010 - 17:52:02 | D ] 	D:\FilesToKeepBackup
[10/09/2002 - 17:14:28 | N | 8134] 	D:\Folder.htt
[03/10/2010 - 17:06:59 | D ] 	D:\HP
[17/12/2008 - 18:55:22 | N | 32] 	D:\HPCD.sys
[03/10/2010 - 17:51:30 | N | 479] 	D:\Master.log
[03/10/2010 - 17:40:22 | D ] 	D:\preload
[16/09/2002 - 15:37:48 | N | 181898] 	D:\protect.chinese hong kong
[16/09/2002 - 15:37:40 | N | 181916] 	D:\protect.chinese simplified
[16/09/2002 - 15:37:48 | N | 181898] 	D:\protect.chinese traditional
[27/04/2006 - 17:19:40 | N | 181865] 	D:\protect.czech
[03/11/2005 - 16:21:26 | N | 181726] 	D:\protect.danish
[10/09/2002 - 14:56:12 | N | 181605] 	D:\protect.dutch
[10/09/2002 - 14:50:18 | N | 181651] 	D:\protect.ed
[22/11/2004 - 16:28:30 | N | 181648] 	D:\protect.english
[03/11/2005 - 16:20:20 | N | 181673] 	D:\protect.finnish
[03/11/2005 - 16:19:52 | N | 181736] 	D:\protect.french
[03/11/2005 - 16:18:10 | N | 181669] 	D:\protect.german
[23/11/2005 - 16:56:46 | N | 182689] 	D:\protect.greek
[23/01/2006 - 10:18:00 | N | 182605] 	D:\protect.hebrew
[28/08/2007 - 15:58:08 | N | 181696] 	D:\protect.hungarian
[03/11/2005 - 16:17:00 | N | 181554] 	D:\protect.italian
[19/06/2007 - 16:22:10 | N | 182351] 	D:\protect.japanese
[24/11/2005 - 12:24:44 | N | 218295] 	D:\protect.korean
[03/11/2005 - 16:15:12 | N | 181578] 	D:\protect.norwegian
[25/04/2006 - 15:44:10 | N | 181789] 	D:\protect.polish
[03/11/2005 - 16:13:12 | N | 181624] 	D:\protect.portuguese
[27/10/2005 - 20:24:10 | N | 181882] 	D:\protect.portuguese brazilian
[28/06/2004 - 09:52:46 | N | 211936] 	D:\protect.russian
[03/11/2005 - 16:11:46 | N | 181586] 	D:\protect.spanish
[10/09/2002 - 15:15:06 | N | 181602] 	D:\protect.swedish
[12/08/2003 - 11:37:30 | N | 181783] 	D:\protect.turkish
[25/06/2010 - 17:35:42 | RD ] 	D:\RECOVERY
[03/10/2010 - 17:06:59 | D ] 	D:\SOURCES
[03/10/2010 - 14:36:41 | SHD ] 	D:\System Volume Information
[25/06/2010 - 17:35:42 | D ] 	D:\Tools
[25/06/2010 - 17:35:42 | D ] 	D:\WINDOWS
[20/06/2010 - 22:42:58 | D ] 	F:\Lune de miel Cannes
[24/06/2010 - 16:46:20 | D ] 	F:\102_1306
[24/06/2010 - 16:47:30 | D ] 	F:\mariage Sam (mairie) lucie
[24/06/2010 - 16:48:24 | D ] 	F:\mariage Sam (religieux)
[30/07/2010 - 16:49:50 | N | 733394944] 	F:\Very Bad Trip.avi
[05/06/2010 - 12:47:34 | N | 1953952] 	F:\Ketchup Mayonnaise Harissa.mp3
[30/07/2010 - 16:27:10 | N | 734652416] 	F:\Michael Jackson This Is It.avi
[30/07/2010 - 17:26:04 | N | 735344640] 	F:\Un.Prophete.FRENCH.DVDRip.REPACK.1CD.SUBFORCED.XviD-toto313.avi
[08/08/2010 - 16:42:26 | N | 733528064] 	F:\Date.Night.FRENCH.BDRip.XviD-Levy.avi
[26/08/2010 - 23:03:58 | N | 296] 	F:\WMPInfo.xml
[09/06/2007 - 21:04:26 | SHD ] 	G:\System Volume Information
[09/06/2007 - 22:02:26 | D ] 	G:\Recycled
[15/11/2007 - 21:28:00 | SHD ] 	G:\$RECYCLE.BIN
[17/12/2007 - 20:25:42 | D ] 	G:\film
[25/04/2009 - 18:03:00 | D ] 	G:\Serie TV
[10/02/2010 - 21:43:50 | D ] 	G:\Nouveau dossier
[09/11/2009 - 21:40:36 | D ] 	G:\HASSAN ET MOI
[28/11/2009 - 18:58:54 | D ] 	G:\COSTUME
[12/12/2009 - 20:24:02 | D ] 	G:\contactes
[23/01/2010 - 22:04:58 | N | 451] 	G:\dwhelper (2).lnk
[28/10/2009 - 23:34:42 | D ] 	G:\ST RAPH
[10/09/2009 - 11:29:34 | D ] 	G:\Mes fichiers reçus
[02/07/2010 - 10:47:24 | N | 13426742] 	H:\Samira et Hassan-008.jpg
[02/07/2010 - 10:47:40 | N | 11205865] 	H:\Samira et Hassan-010.jpg
[02/07/2010 - 10:48:08 | N | 12845221] 	H:\Samira et Hassan-013.jpg
[02/07/2010 - 10:48:32 | N | 13334579] 	H:\Samira et Hassan-016.jpg
[02/07/2010 - 10:48:46 | N | 7571066] 	H:\Samira et Hassan-017.jpg
[02/07/2010 - 10:49:06 | N | 11812213] 	H:\Samira et Hassan-019.jpg
[02/07/2010 - 10:49:34 | N | 14564548] 	H:\Samira et Hassan-022.jpg
[02/07/2010 - 10:49:42 | N | 13300384] 	H:\Samira et Hassan-023.jpg
[02/07/2010 - 10:49:50 | N | 13812723] 	H:\Samira et Hassan-024.jpg
[02/07/2010 - 10:50:32 | N | 11800256] 	H:\Samira et Hassan-028.jpg
[02/07/2010 - 10:51:14 | N | 13826558] 	H:\Samira et Hassan-032.jpg
[02/07/2010 - 10:50:56 | N | 12410273] 	H:\Samira et Hassan-030.jpg
[02/07/2010 - 10:51:04 | N | 13508332] 	H:\Samira et Hassan-031.jpg
[02/07/2010 - 10:54:10 | N | 10445259] 	H:\Samira et Hassan-051.jpg
[02/07/2010 - 10:54:14 | N | 4450347] 	H:\Samira et Hassan-052.jpg
[02/07/2010 - 10:54:02 | N | 12361912] 	H:\Samira et Hassan-050.jpg
[02/07/2010 - 10:54:34 | N | 10711188] 	H:\Samira et Hassan-054.jpg
[02/07/2010 - 10:54:54 | N | 10902506] 	H:\Samira et Hassan-056.jpg
[02/07/2010 - 10:55:46 | N | 14844726] 	H:\Samira et Hassan-062.jpg
[02/07/2010 - 10:55:58 | N | 5288201] 	H:\Samira et Hassan-064.jpg
[02/07/2010 - 10:56:36 | N | 11088162] 	H:\Samira et Hassan-068.jpg
[02/07/2010 - 10:57:18 | N | 11828076] 	H:\Samira et Hassan-072.jpg
[02/07/2010 - 10:58:42 | N | 10395132] 	H:\Samira et Hassan-080.jpg
[02/07/2010 - 10:58:22 | N | 13348389] 	H:\Samira et Hassan-078.jpg
[02/07/2010 - 10:58:30 | N | 7216791] 	H:\Samira et Hassan-079.jpg
[02/07/2010 - 10:59:48 | N | 9754495] 	H:\Samira et Hassan-087.jpg
[02/07/2010 - 11:00:04 | N | 13390857] 	H:\Samira et Hassan-089.jpg
[02/07/2010 - 11:00:22 | N | 12133152] 	H:\Samira et Hassan-091.jpg
[02/07/2010 - 11:00:42 | N | 13520059] 	H:\Samira et Hassan-093.jpg
[02/07/2010 - 11:00:48 | N | 10126173] 	H:\Samira et Hassan-094.jpg
[02/07/2010 - 11:01:12 | N | 9816984] 	H:\Samira et Hassan-097.jpg
[02/07/2010 - 11:01:06 | N | 14802608] 	H:\Samira et Hassan-096.jpg
[02/07/2010 - 11:01:28 | N | 7488088] 	H:\Samira et Hassan-099.jpg
[02/07/2010 - 11:01:58 | N | 12922497] 	H:\Samira et Hassan-102.jpg
[02/07/2010 - 11:02:24 | N | 7341590] 	H:\Samira et Hassan-105.jpg
[02/07/2010 - 11:02:34 | N | 11019919] 	H:\Samira et Hassan-106.jpg
[02/07/2010 - 11:02:44 | N | 12316616] 	H:\Samira et Hassan-107.jpg
[02/07/2010 - 11:02:50 | N | 13144352] 	H:\Samira et Hassan-108.jpg
[02/07/2010 - 11:03:22 | N | 11049055] 	H:\Samira et Hassan-111.jpg
[02/07/2010 - 11:03:38 | N | 8688533] 	H:\Samira et Hassan-113.jpg
[02/07/2010 - 11:03:52 | N | 14866858] 	H:\Samira et Hassan-114.jpg
[02/07/2010 - 11:04:10 | N | 14748789] 	H:\Samira et Hassan-116.jpg
[02/07/2010 - 11:04:18 | N | 12418008] 	H:\Samira et Hassan-117.jpg
[02/07/2010 - 11:04:34 | N | 11208431] 	H:\Samira et Hassan-119.jpg
[02/07/2010 - 11:06:24 | N | 13928931] 	H:\Samira et Hassan-134.jpg
[02/07/2010 - 11:07:10 | N | 9701810] 	H:\Samira et Hassan-139.jpg
[02/07/2010 - 11:07:24 | N | 14741436] 	H:\Samira et Hassan-140.jpg
[02/07/2010 - 11:07:34 | N | 6615142] 	H:\Samira et Hassan-142.jpg
[02/07/2010 - 11:08:16 | N | 11682231] 	H:\Samira et Hassan-147.jpg
[02/07/2010 - 11:08:10 | N | 11923393] 	H:\Samira et Hassan-146.jpg
[02/07/2010 - 11:08:46 | N | 13643959] 	H:\Samira et Hassan-152.jpg
[02/07/2010 - 11:08:40 | N | 8606524] 	H:\Samira et Hassan-151.jpg
[02/07/2010 - 11:08:56 | N | 6859755] 	H:\Samira et Hassan-154.jpg
[02/07/2010 - 11:09:14 | N | 14933628] 	H:\Samira et Hassan-156.jpg
[02/07/2010 - 10:46:26 | N | 5689127] 	H:\Samira et Hassan-001.jpg
[02/07/2010 - 10:46:44 | N | 12191162] 	H:\Samira et Hassan-003.jpg
[02/07/2010 - 10:47:00 | N | 7513275] 	H:\Samira et Hassan-005.jpg
[02/07/2010 - 10:47:08 | N | 11282686] 	H:\Samira et Hassan-006.jpg
[02/07/2010 - 10:47:16 | N | 14354205] 	H:\Samira et Hassan-007.jpg
[12/06/2010 - 19:38:06 | N | 3360901] 	H:\IMGP0813.JPG
[12/06/2010 - 19:39:56 | N | 3382148] 	H:\IMGP0814.JPG
[12/06/2010 - 19:40:04 | N | 3204412] 	H:\IMGP0815.JPG
[12/06/2010 - 21:23:38 | N | 3375174] 	H:\IMGP0820.JPG
[23/06/2010 - 22:52:36 | N | 3619282] 	H:\IMGP0821.JPG
[23/06/2010 - 22:51:40 | N | 3456565] 	H:\IMGP0817.JPG
[23/06/2010 - 22:51:58 | N | 3598150] 	H:\IMGP0818.JPG
[12/06/2010 - 21:23:32 | N | 3432471] 	H:\IMGP0819.JPG
[13/06/2010 - 00:15:02 | N | 3292791] 	H:\IMGP0849.JPG
[13/06/2010 - 00:15:16 | N | 3259000] 	H:\IMGP0851.JPG
[13/06/2010 - 00:17:50 | N | 3289187] 	H:\IMGP0853.JPG
[13/06/2010 - 00:18:58 | N | 3777854] 	H:\IMGP0855.JPG
[13/06/2010 - 00:19:04 | N | 3283274] 	H:\IMGP0856.JPG
[23/06/2010 - 23:03:52 | N | 3480584] 	H:\IMGP0859.JPG
[23/06/2010 - 23:05:38 | N | 3732560] 	H:\IMGP0864.JPG
[13/06/2010 - 00:24:48 | N | 3269906] 	H:\IMGP0866.JPG
[23/06/2010 - 23:06:48 | N | 3342956] 	H:\IMGP0867.JPG
[23/06/2010 - 23:07:34 | N | 3427122] 	H:\IMGP0870.JPG
[23/06/2010 - 23:08:18 | N | 3481762] 	H:\IMGP0872.JPG
[13/06/2010 - 01:09:34 | N | 3537800] 	H:\IMGP0873.JPG
[23/06/2010 - 23:09:00 | N | 3261939] 	H:\IMGP0875.JPG
[13/06/2010 - 02:10:02 | N | 3231251] 	H:\IMGP0885.JPG
[13/06/2010 - 02:10:14 | N | 3598803] 	H:\IMGP0886.JPG
[13/06/2010 - 02:10:24 | N | 3455098] 	H:\IMGP0887.JPG
[13/06/2010 - 02:11:32 | N | 3168662] 	H:\IMGP0888.JPG
[23/06/2010 - 23:09:32 | N | 3697265] 	H:\IMGP0876.JPG
[23/06/2010 - 23:10:06 | N | 3431384] 	H:\IMGP0877.JPG
[13/06/2010 - 01:41:02 | N | 3175498] 	H:\IMGP0878.JPG
[13/06/2010 - 01:41:14 | N | 3320742] 	H:\IMGP0879.JPG
[13/06/2010 - 01:42:30 | N | 3648845] 	H:\IMGP0880.JPG
[13/06/2010 - 01:42:36 | N | 3558900] 	H:\IMGP0881.JPG
[13/06/2010 - 01:42:58 | N | 3563271] 	H:\IMGP0882.JPG
[23/06/2010 - 23:11:24 | N | 3460613] 	H:\IMGP0883.JPG
[13/06/2010 - 02:09:54 | N | 3224404] 	H:\IMGP0884.JPG
[13/06/2010 - 02:25:22 | N | 3638860] 	H:\IMGP0892.JPG
[12/06/2010 - 20:10:58 | N | 1648453] 	H:\DSCN2780.JPG
[23/06/2010 - 23:22:26 | N | 1744067] 	H:\DSCN2807.JPG
[12/06/2010 - 20:16:34 | N | 1600883] 	H:\DSCN2795.JPG
[23/06/2010 - 23:24:08 | N | 1533931] 	H:\DSCN2817.JPG
[13/06/2010 - 09:24:18 | N | 1830328] 	H:\DSCN2853.JPG
[23/06/2010 - 23:28:10 | N | 1889171] 	H:\DSCN2854.JPG
[23/06/2010 - 23:28:26 | N | 1835166] 	H:\DSCN2855.JPG
[23/06/2010 - 23:29:28 | N | 1997236] 	H:\DSCN2861.JPG
[23/06/2010 - 23:29:34 | N | 1047302] 	H:\DSCN2862.JPG
[23/06/2010 - 23:29:42 | N | 1762726] 	H:\DSCN2863.JPG
[23/06/2010 - 23:30:32 | N | 1593706] 	H:\DSCN2867.JPG
[23/06/2010 - 23:30:58 | N | 1991203] 	H:\DSCN2869.JPG
[13/06/2010 - 12:38:00 | N | 1883881] 	H:\DSCN2881.JPG
[06/06/2010 - 14:57:18 | N | 1809591] 	H:\DSCN2678.JPG
[06/06/2010 - 14:58:32 | N | 1911059] 	H:\DSCN2688.JPG
[02/07/2010 - 10:47:32 | N | 10628786] 	H:\Samira et Hassan-009.jpg
[02/07/2010 - 10:49:12 | N | 12225802] 	H:\Samira et Hassan-020.jpg
[02/07/2010 - 10:59:36 | N | 9892678] 	H:\Samira et Hassan-086.jpg
[02/07/2010 - 11:04:52 | N | 6568678] 	H:\Samira et Hassan-121.jpg
[02/07/2010 - 11:07:00 | N | 8446083] 	H:\Samira et Hassan-138.jpg
[02/07/2010 - 11:07:30 | N | 12659850] 	H:\Samira et Hassan-141.jpg
[02/07/2010 - 11:08:20 | N | 7726225] 	H:\Samira et Hassan-148.jpg
[02/07/2010 - 11:09:36 | N | 8389316] 	H:\Samira et Hassan-159.jpg
[23/06/2010 - 23:28:54 | N | 1812850] 	H:\DSCN2858.JPG
[23/06/2010 - 23:29:04 | N | 1799751] 	H:\DSCN2859.JPG
[05/08/2006 - 21:37:06 | D ] 	I:\DCIM
[26/11/2007 - 22:26:50 | N | 0] 	I:\.txt

################## | Vaccin |

C:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
D:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
F:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
G:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
H:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
I:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)

merci beaucoup.
################## | Upload |

Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_ADMIN-PC.zip
http://www.teamxscript.org/Upload.php
Merci de votre contribution.

################## | E.O.F |

Utilisateur anonyme · Answer

Bonjour 
C'était pas la peine de poster plusieurs fois le rapport d'USBFix 
Il faut rester sur ce sujet 
O.o°*??? Ex Nathandre aux 12938 messages depuis le 27.10.2008 °.Oø¤º°'°º¤ø

respiresbien · Answer

Bonjour,

Merci pour ta réponse. Est ce que tu peux repondre à ma question s'il te plait?
Cordialement.

respiresbien · Answer

Salut,

Y'a t il quelqu'un pour m'aider à savoir si oui où non mon pc est désinfecté? Tous les rapports sont postés dessus.
Cordialement.

Utilisateur anonyme · Answer

il faut nettoyer les outils qui ont servit à désinfecter le PC

Télécharge DelFix (d'Xplode) sur ton bureau.

Lance le, (avec Vista/Seven, clic droit dessus, et sur exécuter en tant qu'administrateur)
  
Sélectionne Suppression

Copie/colle le contenu du rapport qui s'ouvrira à l'écran dans ton prochain message.

Note : Le rapport est également sauvegardé à la racine du disque dur ( C:\DelFixSuppr.txt )

Une fois le rapport posté sur le forum, relance DelFix en sélectionnant Désinstallation.

kduc · Answer

Salut vous deux,

respiresbien,

Suis les conseils de Jawaryinti.

respiresbien · Answer

Bonsoir kduc et Jawaryinti,

Tout d'abord merci à vous deux pour votre aide, ainsi qu'au site" commentcamarche.net", sans oublier toutes et tous ceux qui aident les novices.
Voici le rapport:
########## DelFix - Nettoyeur d'outils de désinfection ##########
#
# DelFix v6.9 - Rapport créé le 04/01/2011 à 17:47
# Mis à jour le 19/12/10 à 16h40 par Xplode
# Système d'exploitation : Windows 7 Professional (64 bits) [version 6.1.7600] 
# Nom d'utilisateur : admin - ADMIN-PC (Administrateur)
# Exécuté depuis : C:\Users\admin\Desktop\DelFix.exe
# Option [Suppression]


~~~~~~ Dossier(s) ~~~~~~

Supprimé : C:\USBFix
Supprimé : C:\RSIT
Supprimé : C:\Program Files (x86)\Ad-Remover
Supprimé : C:\Users\admin\DoctorWeb

~~~~~~ Fichier(s) ~~~~~~

Supprimé : C:\UsbFix.txt
Supprimé : C:\UsbFix_Upload_Me_ADMIN-PC.zip
Supprimé : C:\Ad-Report-CLEAN[1].txt
Supprimé : C:\Ad-Report-CLEAN[2].txt
Supprimé : C:\Users\admin\Desktop\UsbFix.exe
Supprimé : C:\Users\admin\Desktop\AD-R.lnk

~~~~~~ Registre ~~~~~~

Clé Supprimée : HKCU\SOFTWARE\Ad-Remover
Clé Supprimée : HKCU\SOFTWARE\USBFix
Clé Supprimée : HKCU\SOFTWARE\IDAVLab
Clé Supprimée : HKLM\Software\TrendMicro
Clé Supprimée : HKLM\Software\IDAVLab
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ad-Remover
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\USBFix
Clé Supprimée : HKLM\System\ControlSet001\Enum\Root\LEGACY_DWPROT

~~~~~~ Autre ~~~~~~


########## EOF - "C:\DelFixSuppr.txt" - [1406 octets] ##########

Cordialement.

Utilisateur anonyme · Answer

Bonsoir respirebien
Tu dois supprimer les points de restauration infectés:

*Démarrer, clic droit sur ordinateur
*Clique sur propriétés
*Dans le volet gauche, clique sur protection du système (l'UAC nous met en garde si on est à l'origine de cette action)
*Dans la fenêtre propriétés système, va dans l'onglet protection du système
*Sélectionne le disque Système, puis clique sur configurer
*Dans protection système pour disque local (C), clique sur supprimer

Tu dois créer un point de restauration propre:

*Démarrer, clic droit sur ordinateur
*Dans le volet gauche, clique sur protection du système
*Dans propriétés du système, clique sur créer
*Dans la petite fenêtre qui s'ouvre, entre la date du point de restauration que tu vas créer, 
puis clique sur créer

respiresbien · Answer

Salut,

Si tu ne me demandes pas de poster un rapport, c'est que je suis arrivé à la dernière étape, et j'endéduis que c'est fini! Je te remercie encore une fois, tout comme kduc, le site et toute personne prenant de son temps et son savoir pour les autres.

Meilleurs voeux 2011.