enormes ralentissements et gros bugs Résolu

Question

Bonjour, 

voila, je viens de récupérer l'ordinateur d'un ami mais celui-ci est dans un état déplorable. en effet l'ordinateur est sujet à d'énorme ralentissements, de gros bugs et je suis obligé de redémarrer. de plus je me suis apercu que la licence de mon  antivirus ne se mettait pas à jour.
j'ai donc fait un rapport zhpdiag : http://www.cijoint.fr/cjlink.php?file=cj201109/cijJbFw12Q.txt 

merci d'avance à tout ceux qui vont m'aider et me répondre

Fish66 · Answer

Salut,
1/
Télécharge AdwCleaner (merci à Xplode) 
Ou  ADWCleaner ici
Lance AdwCleaner
Clique sur le bouton [ Suppression ] 
Patiente... 
Poste le rapport qui apparait en fin de recherche. 
Il se trouve également à C:\AdwCleaner[SX] (où X est un chiffre)

2/
* Télécharge de AD-Remover sur ton Bureau. 
http://www.teamxscript.org/adremoverTelechargement.html 

/!\ Ferme toutes applications en cours /!\ 

- Double  sur l'icône Ad-remover située sur ton Bureau. 
-Pour vista/Seven : clique avec le bouton droit de la souris  et choisis « exécuter en tant qu'administrateur » 
- Sur la page, clique sur le bouton « Nettoyer » 
- Confirme lancement du scan 
- Laisse travailler l'outil. 
- Poste le rapport qui apparaît à la fin. 

(Le rapport est sauvegardé aussi sous C:\Ad-report(Scan/clean).Txt) 

(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour c

3/
/!\ ATTENTION : cette analyse peut durer quelques heures /!\

* Télécharge MBAM et installe le selon l'emplacement par défaut  
https://www.malwarebytes.com/mwb-download/ 
* Lance Malwarebytes' Anti-Malware  
* Fais la mise à jour  
* Clique dans l'onglet  "Recherche"  
* Coche l'option "Exécuter un examen complet" puis sur le bouton "Rechercher"  
* Choisis de scanner tous tes disques durs, puis clique sur 'Lancer l'examen"  

A la fin de l'analyse, si MBAM n'a rien trouvé :  

* Clique sur OK, le rapport s'ouvre spontanément  

Si des menaces ont été détectées :  

* Clique sur OK puis "Afficher les résultats"  
*Vérifie que toutes les lignes sont cochées 
* Choisis l'option "Supprimer la sélection"  
* Si MBAM demande le redémarrage de Windows : Clique sur "Oui"  
* Le rapport s'ouvre automatiquement après la suppression, il se trouve aussi dans l'onglet "Rapports/Logs"  

* Copie/colle le rapport dans le prochain message  


Remarque : 
- S'il y'a un problème de mise à jour de mbam, tu peux la faire manuellement en téléchargeant  ce fichier puis en l'exécutant.

angedesenfers · Answer

1) # AdwCleaner v1.307 - Rapport créé le 24/09/2011 à 16:43:47
# Mis à jour le 19/09/11 à 09h par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
# Nom d'utilisateur : wo-ow - ACER-FE8B363750 (Administrateur)
# Exécuté depuis : C:\Documents and Settings\wo-ow\Local Settings\Temporary Internet Files\Content.IE5\LFIXKOA9\adwcleaner0[1].exe
# Option [Suppression]


***** [KillNav] *****

# iexplore.exe [PID:1804] -> Tué

***** [Processus] *****

Tué : [PID:1388] DATAMN~1.EXE
Tué : [PID:1240] sweetim.exe

***** [Services] *****


***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Documents and Settings\All Users\Application Data\SweetIM
Dossier Supprimé : C:\Documents and Settings\wo-ow\Application Data\PriceGong

***** [Registre] *****

Clé Supprimée : HKCU\Software\DataMngr
Clé Supprimée : HKCU\Software\PriceGong
Clé Supprimée : HKLM\SOFTWARE\DataMngr
Clé Supprimée : HKLM\SOFTWARE\SweetIM
Clé Supprimée : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
Clé Supprimée : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
Clé Supprimée : HKLM\SOFTWARE\Classes\sim-packages
Clé Supprimée : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
Clé Supprimée : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1631550F-191D-4826-B069-D9439253D926}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1631550F-191D-4826-B069-D9439253D926}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A81A974F-8A22-43E6-9243-5198FF758DA1}
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{EEE6C35D-6118-11DC-9C72-001320C79847}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SweetIM]

***** [Navigateurs] *****

-\ Internet Explorer v8.0.6001.18702

Remplacé : [HKLM\..\Main - Start Page] = hxxp://home.sweetim.com/?st=1&barid={7C5067D6-F03A-4B7F-B26E-CF75DADBC927} --> hxxp://www.google.fr

-\ Google Chrome v [Impossible d'obtenir la version]

Fichier : C:\Documents and Settings\wo-ow\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[S1].txt - [3572 octets] - [24/09/2011 16:43:47]

*************************

Dossier Temporaire : 26 dossier(s) et 199 fichier(s) supprimé(s)

########## EOF - C:\AdwCleaner[S1].txt - [3797 octets] ##########

angedesenfers · Answer

2) ======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 16:48:36 le 24/09/2011, Mode normal

Microsoft Windows XP Édition familiale Service Pack 3 (X86) 
wo-ow@ACER-FE8B363750 ( ) 
 
============== ACTION(S) ==============


Dossier supprimé: C:\Program Files\iMesh Applications

(!) -- Fichiers temporaires supprimés.


Clé supprimée: HKLM\Software\Classes\CLSID\{28387537-e3f9-4ed7-860c-11e69af4a8a0}
Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28387537-e3f9-4ed7-860c-11e69af4a8a0}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{28387537-e3f9-4ed7-860c-11e69af4a8a0}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{28387537-e3f9-4ed7-860c-11e69af4a8a0}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{28387537-e3f9-4ed7-860c-11e69af4a8a0}
Clé supprimée: HKLM\Software\Classes\CLSID\{474597C5-AB09-49d6-A4D5-2E8D7341384E}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{474597C5-AB09-49d6-A4D5-2E8D7341384E}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{474597C5-AB09-49d6-A4D5-2E8D7341384E}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{474597C5-AB09-49d6-A4D5-2E8D7341384E}
Clé supprimée: HKLM\Software\Classes\CLSID\{950F80EF-32C2-47dd-9C35-9576E21EE66E}
Clé supprimée: HKLM\Software\Classes\Interface\{6E4C89CF-3061-4EE4-B22A-B7A8AAEA5CB3}
Clé supprimée: HKLM\Software\Classes\TypeLib\{A147AA03-820F-4A0F-9F34-D6CB4004A2F9}
Clé supprimée: HKLM\Software\Classes\iMeshIEHelper.DNSGuard
Clé supprimée: HKLM\Software\Classes\iMeshIEHelper.DNSGuard.1
Clé supprimée: HKCU\Software\iMesh
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\PriceGong
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\iMesh
Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}
Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{845506E4-B0FD-4DEB-81E5-08BD57F68166}


============== SCAN ADDITIONNEL ==============

**** Internet Explorer Version [8.0.6001.18702] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21} - "?" (?)
HKCU_Toolbar|{1E796980-9CC5-11D1-A83F-00C04FC99D61} (x)
HKCU_Toolbar\ShellBrowser|{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} (x)
HKCU_Toolbar\WebBrowser|{EEE6C35B-6118-11DC-9C72-001320C79847} (C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll) (x)
HKLM_Toolbar|{EEE6C35B-6118-11DC-9C72-001320C79847} (C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll) (x)
HKLM_Toolbar|{28387537-e3f9-4ed7-860c-11e69af4a8a0} (x)
HKLM_ElevationPolicy\{B2321D2F-1154-4d97-AD3E-2FE0BAE2897B} - C:\Program Files\SFR\Kit\9launch.exe (SFR)
HKLM_ElevationPolicy\{C8FE2181-CAE7-49EE-9B04-DB7EB4DA544A} - C:\Program Files\Java\jre7\bin\ssvagent.exe (Oracle Corporation)
HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
BHO\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - "Objet d'aide à la navigation SFR" (C:\Program Files\SFR\Kit\SFRNavErrorHelper.dll)
BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)
BHO\{EEE6C35C-6118-11DC-9C72-001320C79847} - "SweetIM Toolbar Helper" (C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll) (x)

========================================

C:\Program Files\Ad-Remover\Quarantine: 614 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 12 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 24/09/2011 16:48:42 (539 Octet(s)) 

Fin à: 16:49:53, 24/09/2011 
 
============== E.O.F ==============

Fish66 · Answer

Re,

Après avoir posté le rapport Malwarebytes, tu peux faire ceci :

pour la détection des bons pilotes et leur téléchargement
http://www.touslesdrivers.com/index.php?v_page=29
et cliquer sur "Lancer la détection" ( en bas de la fenêtre )
accepter le contrôle des actives-x
laisser tourner et une page va s'afficher avec des fichiers en bleu
en cliquant sur le lien , tu vas télécharger les bons drivers
- déjà bien installer les chipsets de la carte mère
- relancer une recherche pour finir
- un chipset de mal installé , et tu as un fichier pour le restant qui n'est pas bon ou qui n'apparait pas 

@+

angedesenfers · Answer

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Version de la base de données: 7790

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

24/09/2011 18:09:00
mbam-log-2011-09-24 (18-09-00).txt

Type d'examen: Examen complet (C:\|D:\|)
Elément(s) analysé(s): 252534
Temps écoulé: 29 minute(s), 30 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Fish66 · Answer

Re,

Lance ZHPDiag depuis le bureau puis prépare stp un nouveau rappot ZHPDiag

@+

angedesenfers · Answer

voila

http://www.cijoint.fr/cjlink.php?file=cj201109/cijExdFWHy.txt

Fish66 · Answer

Salut,
1/
Désinstalle ces loguciels stp :
- Softonic_France Toolbar 
- imeshbandmltbpi

2/
* Télécharge OTM (OldTimer) sur ton Bureau 

ICI >> OTM (OldTimer) 
* Double clic "OTMoveIt3.exe" 
* Utilisateurs Windows Vista / 7 Clic droit sur "OTMoveIt3.exe" choisis "exécuter en tant qu'administrateur" afin de le lancer. 

- Copie (Ctrl+C) le texte suivant en gras ci-dessous : 



 :files 
C:\Documents and Settings\wo-ow\Application Data\imeshbandmltbpi    
C:\Program Files\Softonic_France    
C:\Program Files\SweetIM  

:Reg 
[-HKLM\Software\iMeshMediabarTb]    
[-HKLM\Software\Classes\sweetim_urlsearchhook.toolbarurlsearchhook]
[-HKLM\Software\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1]
[-HKLM\Software\Classes\Toolbar3.sweetie]
[-HKLM\Software\Classes\Toolbar3.sweetie.1]
[-HKLM\Software\Classes\Interface\{eee6c358-6118-11dc-9c72-001320c79847}]    
[-HKLM\Software\Classes\Interface\{eee6c35a-6118-11dc-9c72-001320c79847}]    
[-HKLM\Software\Classes\CLSID\{eee6c35b-6118-11dc-9c72-001320c79847}]    
[-HKLM\Software\Classes\TypeLib\{eee6c35e-6118-11dc-9c72-001320c79847}]   
[-HKLM\Software\Classes\TypeLib\{eee6c35f-6118-11dc-9c72-001320c79847}]    
[-HKCU\Software\Softonic_France]    => Toolbar.Conduit
[-HKCU\Software\SweetIM]    
[-HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Softonic_France Toolbar]
[-HKLM\Software\iMeshMediabarTB]    

:commands 
[emptytemp] 
[purity]
[Reboot]


- Colle (Ctrl+V) le texte précédemment copié dans le cadre: Paste Instructions for Items to be Moved. 
- Clique maintenant sur le bouton MoveIt! 
Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer. 
Accepte en cliquant sur YES. 
- Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\ 
Le nom du rapport correspond au moment de sa création : date_heure.log


3/
Copie tout le texte présent en gras ci-dessous ( tu le selectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C ) 


O3 - Toolbar: (no name) - {28387537-e3f9-4ed7-860c-11e69af4a8a0} . (...) --  (.not file.)    => Infection PUP (PUP.iMesh)
O20 - AppInit_DLLs: . (...) - C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\datamngr.dll (.not file.)    => Infection PUP (PUP.iMesh)
O43 - CFD: 18/09/2011 - 10:37:36 - [0] ----D- C:\Documents and Settings\wo-ow\Application Data\imeshbandmltbpi    => Infection PUP (PUP.iMesh)
O47 - AAKE:Key Export SP - "C:\Program Files\iMesh Applications\iMesh\iMesh.exe" [Enabled] .(...) -- C:\Program Files\iMesh Applications\iMesh\iMesh.exe (.not file.)    => Infection PUP (PUP.iMesh)
O47 - AAKE:Key Export SP - "C:\Program Files\iMesh Applications\MediaBar\Datamngr\ToolBar\dtUser.exe" [Enabled] .(...) -- C:\Program Files\iMesh Applications\MediaBar\Datamngr\ToolBar\dtUser.exe (.not file.)    => Infection PUP (PUP.iMesh)
O47 - AAKE:Key Export DP - "C:\Program Files\iMesh Applications\iMesh\iMesh.exe" [Enabled] .(...) -- C:\Program Files\iMesh Applications\iMesh\iMesh.exe (.not file.)    => Infection PUP (PUP.iMesh)
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} . (...) -- C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O8 - Extra context menu item: Rechercher sur le Web - (.not file.) - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html    => SweetIM Toolbar
O42 - Logiciel: Softonic_France Toolbar - (.Pas de propriétaire.) [HKLM] -- Softonic_France Toolbar    => Toolbar.Conduit

FirewallRAZ
EmptyTemp
EmptyFlash



Puis Lance ZHPFix depuis le raccourci du bureau . 

* Une fois l'outil ZHPFix ouvert , clique sur le bouton [ H ] ( "coller les lignes Helper" ) . 

* Dans l'encadré principal tu verras donc les lignes que tu as copié précédemment apparaitrent . 

Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre. 

Clique sur le bouton  GO

Copie/Colle le rapport à l'écran dans ton prochain message.

angedesenfers · Answer

All processes killed
========== FILES ==========
C:\Documents and Settings\wo-ow\Application Data\imeshbandmltbpi folder moved successfully.
C:\Program Files\Softonic_France folder moved successfully.
C:\Program Files\SweetIM\Messenger\resources\sqlite folder moved successfully.
C:\Program Files\SweetIM\Messenger\resources\images folder moved successfully.
C:\Program Files\SweetIM\Messenger\resources folder moved successfully.
C:\Program Files\SweetIM\Messenger folder moved successfully.
C:\Program Files\SweetIM folder moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\Software\iMeshMediabarTb\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\sweetim_urlsearchhook.toolbarurlsearchhook\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Toolbar3.sweetie\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Toolbar3.sweetie.1\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{eee6c358-6118-11dc-9c72-001320c79847}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{eee6c358-6118-11dc-9c72-001320c79847}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\Interface\{eee6c35a-6118-11dc-9c72-001320c79847}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{eee6c35a-6118-11dc-9c72-001320c79847}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{eee6c35b-6118-11dc-9c72-001320c79847}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{eee6c35b-6118-11dc-9c72-001320c79847}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{eee6c35e-6118-11dc-9c72-001320c79847}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{eee6c35e-6118-11dc-9c72-001320c79847}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{eee6c35f-6118-11dc-9c72-001320c79847}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{eee6c35f-6118-11dc-9c72-001320c79847}\ not found.
Registry key HKEY_CURRENT_USER\Software\Softonic_France] => Toolbar.Condui\ not found.
Registry key HKEY_CURRENT_USER\Software\SweetIM\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Softonic_France Toolbar\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\iMeshMediabarTB\ not found.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
 
User: All Users
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 763182 bytes
 
User: wo-ow
->Temp folder emptied: 4525880 bytes
->Temporary Internet Files folder emptied: 48003585 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 2972992 bytes
 
User: LogMeInRemoteUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32768 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 146545 bytes
%systemroot%\System32 .tmp files removed: 4835472 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 51239 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 187871569 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 238,00 mb
 
 
OTM by OldTimer - Version 3.1.18.0 log created on 09252011_185351

Files moved on Reboot...

Registry entries deleted on Reboot...

angedesenfers · Answer

Rapport de ZHPFix 1.12.3361 par Nicolas Coolman, Update du 06/09/2011
Fichier d'export Registre : 
Run by wo-ow at 25/09/2011 19:27:14
Windows XP Home Edition Service Pack 3 (Build 2600)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Logiciel(s) ==========
ABSENT Software Key: Softonic_France Toolbar

========== Clé(s) du Registre ==========
SUPPRIME Key: Menu Contextuel: Rechercher sur le Web

========== Valeur(s) du Registre ==========
SUPPRIME Toolbar: {28387537-e3f9-4ed7-860c-11e69af4a8a0}
SUPPRIME AAKE KeyValue: C:\Program Files\iMesh Applications\iMesh\iMesh.exe
SUPPRIME AAKE KeyValue: C:\Program Files\iMesh Applications\MediaBar\Datamngr\ToolBar\dtUser.exe
SUPPRIME Toolbar: {EEE6C35B-6118-11DC-9C72-001320C79847}
SUPPRIME FirewallRaz (SP) : C:\Program Files\Messenger\msmsgs.exe
SUPPRIME FirewallRaz (SP) : C:\Documents and Settings\WO-OW\Local Settings\Temporary Internet Files\Content.IE5\GO2ZR2R3\SweetImSetup[1].exe
Aucune valeur présente dans la clé d'exception du registre (FirewallRaz)

========== Elément(s) de donnée du Registre ==========
SUPPRIME AppInit: \PROGRA~1\IMESHA~1\MediaBar\Datamngr\datamngr.dll

========== Dossier(s) ==========
ABSENT C:\Documents and Settings\wo-ow\Application Data\imeshbandmltbpi
SUPPRIME Temporaires Windows: : 8
SUPPRIME Flash Cookies: 1

========== Fichier(s) ==========
ABSENT File: \progra~1\imesha~1\mediabar\datamngr\datamngr.dll
ABSENT File: c:\program files\imesh applications\imesh\imesh.exe
ABSENT File: c:\program files\imesh applications\mediabar\datamngr	oolbar\dtuser.exe
ABSENT File: c:\program files\sweetim	oolbars\internet explorer\mgtoolbarie.dll
ABSENT File: c:\program files\sweetim	oolbars\internet exploreresources\menuext.html
SUPPRIME Temporaires Windows: : 3
SUPPRIME Flash Cookies: 0


========== Récapitulatif ==========
1 : Clé(s) du Registre
7 : Valeur(s) du Registre
1 : Elément(s) de donnée du Registre
3 : Dossier(s)
7 : Fichier(s)
1 : Logiciel(s)


End of clean in 00mn 02s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 25/09/2011 19:27:14 [2107]

Fish66 · Answer

Re,

Lance ZHPDiag et prépare stp un nouveau rapport ZHPDiag pour voir ce qui nous reste

angedesenfers · Answer

http://www.cijoint.fr/cjlink.php?file=cj201109/cijXKHmXf5.txt

angedesenfers · Answer

Il nous restera aussi la carte graphique à voir.
Si tu veux bien ...

Fish66 · Answer

Re, 1/ Tu as des traces de : Norton Security Scan ========== Téléchargez l'outil Norton Removal Tool. Enregistrez le fichier sur le bureau Windows. Sur le bureau Windows, cliquez deux fois (Exécuter en tant qu'administrateur pour vista/seven) sur l'icône Norton Removal Tool. Suivez les instructions affichées à l'écran. Redémarrez l'ordinateur. *****Aide >>>ICI<<< 2/ Avant d'utiliser ComboFix : Les logiciels d'émulation de CD comme Daemon Tools peuvent gêner les outils de désinfection. Utilise Defogger pour les désactiver temporairement : si tu as ce genre de d'outils sur ton pc Utilise Defogger pour les désactiver temporairement : sinon passe directement à combofix . Télécharge Defogger (de jpshortstuff) sur ton Bureau . Lance le Une fenêtre apparait : clique sur "Disable" . Fais redémarrer l'ordinateur si l'outil te le demande Note : Quand nous aurons terminé la désinfection, tu pourras réactiver ces logiciels en relançant Defogger et en cliquant sur "Re-enable" Attention, avant de commencer, lit attentivement la procédure /!\ Ne pas utiliser ce logiciel en dehors du cadre de cette désinfection : DANGEUREUX /!\ ? Fais un clic droit sur ce lien, enregistre le dans ton bureau Voici Aide combofix * /!\ Déconnecte-toi du net et ARRÊTE TES LOGICIELS DE PROTECTION /!\ *Double-clique sur ComboFix.exe (ou exécuter en tant qu'administrateur pour vista et seven) Un "pop-up" va apparaître qui dit que ComboFix est utilisé à vos risques et avec aucune garantie... Clique sur oui pour accepter ** SURTOUT INSTALLES LA CONSOLE DE RECUPERATION (si il te propose de l'installer remets internet) ? Ne touche à rien(souris, clavier) tant que le scan n'est pas terminé, car tu risques de planter ton PC *En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire. * Une fois le scan achevé, un rapport va s'afficher : Poste son contenu ** /!\ Réactive la protection en temps réel de ton antivirus et de ton antispyware avant de te reconnecter à Internet. /!\ *Note : Le rapport se trouve également là : C:\ComboFix.txt @+

Fish66 · Answer

Bonjour, Aide >>>ICI<<< pour désinstaller proprement Northon @+

angedesenfers · Answer

Bon j'abandonne pour Norton qui ne se lance décidemment pas.
Je passe donc à ComboFix.

Fish66 · Answer

Re,

D'accord .. mais en suivant les instructions  

@+

angedesenfers · Answer

voila le rapport que vous attendiez tant :

ComboFix 11-10-09.01 - wo-ow 09/10/2011  17:31:28.1.1 - FAT32x86
Microsoft Windows XP Édition familiale  5.1.2600.3.1252.33.1036.18.1983.1460 [GMT 2:00]
Lancé depuis: c:\documents and settings\wo-ow\Bureau\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
FW: COMODO Firewall *Enabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}
.
.
((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\wo-ow\WINDOWS
.
.
(((((((((((((((((((((((((((((((((((((((   Pilotes/Services   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
-------\Service_NPF
.
.
(((((((((((((((((((((((((((((   Fichiers créés du 2011-09-09 au 2011-10-09  ))))))))))))))))))))))))))))))))))))
.
.
2011-10-09 15:40 . 2011-10-09 15:40	56200	----a-w-	c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{E1A8AAFF-F73E-4D61-81A6-8BEB7A37A8F7}\offreg.dll
2011-10-09 08:13 . 2011-10-09 08:13	1409	----a-w-	c:\windows\QTFont.for
2011-10-09 08:10 . 2011-09-12 14:14	7269712	----a-w-	c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-10-09 08:09 . 2011-09-12 14:14	7269712	----a-w-	c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{E1A8AAFF-F73E-4D61-81A6-8BEB7A37A8F7}\mpengine.dll
2011-10-07 17:53 . 2010-10-19 20:51	222080	------w-	c:\windows\system32\MpSigStub.exe
2011-10-07 17:45 . 2011-10-07 17:45	--------	d-----w-	c:\program files\Microsoft Security Client
2011-09-25 16:53 . 2011-09-25 16:53	--------	d-----w-	C:\_OTM
2011-09-24 14:57 . 2011-09-24 14:57	--------	d-----w-	c:\documents and settings\wo-ow\Application Data\Malwarebytes
2011-09-24 14:57 . 2011-09-24 14:57	--------	d-----w-	c:\documents and settings\All Users\Application Data\Malwarebytes
2011-09-24 14:57 . 2011-08-31 15:00	22216	----a-w-	c:\windows\system32\drivers\mbam.sys
2011-09-24 14:57 . 2011-09-24 14:57	--------	d-----w-	c:\program files\Malwarebytes' Anti-Malware
2011-09-24 14:48 . 2011-09-24 14:48	--------	d-----w-	c:\program files\Ad-Remover
2011-09-24 12:57 . 2011-09-25 18:05	512	----a-w-	C:\PhysicalDisk0_MBR.bin
2011-09-23 16:52 . 2011-09-23 16:52	--------	d-----w-	C:\FOUND.019
2011-09-18 12:18 . 2011-09-18 12:18	--------	d-----w-	C:\ZHP
2011-09-18 10:07 . 2011-09-18 10:07	--------	d-----w-	c:\program files\haricots verts
2011-09-18 09:52 . 2011-09-18 09:52	--------	d-----w-	c:\program files\ZHPDiag
2011-09-18 08:37 . 2011-09-18 08:37	--------	d-----w-	c:\documents and settings\wo-ow\AppData
2011-09-18 08:19 . 2011-09-18 08:19	--------	d-----w-	c:\documents and settings\wo-ow\Application Data\mediabarim
2011-09-18 08:19 . 2011-09-18 08:19	--------	d-----w-	c:\documents and settings\All Users\Application Data\8280
2011-09-14 17:42 . 2011-09-14 17:42	--------	d-----w-	c:\documents and settings\All Users\Application Data\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42}
2011-09-14 16:45 . 2011-09-14 16:45	--------	d-----w-	c:\program files\Uniblue
2011-09-14 16:45 . 2011-09-14 16:45	--------	d-----w-	c:\documents and settings\wo-ow\Local Settings\Application Data\PackageAware
2011-09-13 16:28 . 2011-09-13 16:28	--------	d-----w-	C:\FOUND.018
.
.
.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-07 17:24 . 2010-10-10 14:28	83360	----a-w-	c:\windows\system32\LMIRfsClientNP.dll
2011-10-07 17:24 . 2010-10-10 14:28	52096	----a-w-	c:\windows\system32\Spool\prtprocs\w32x86\LMIproc.dll
2011-10-07 17:24 . 2010-10-10 14:28	30592	----a-w-	c:\windows\system32\LMIport.dll
2011-10-07 17:24 . 2010-10-10 14:27	87424	----a-w-	c:\windows\system32\LMIinit.dll
2011-09-09 09:12 . 2004-08-05 03:00	606208	----a-w-	c:\windows\system32\crypt32.dll
2011-08-23 14:53 . 2010-11-26 18:30	128000	----a-w-	c:\windows\system32\javacpl.cpl
2011-08-23 14:53 . 2010-10-10 16:18	544656	----a-w-	c:\windows\system32\deployJava1.dll
2011-07-24 15:02 . 2010-09-10 21:41	285256	----a-w-	c:\windows\system32\guard32.dll
2011-07-24 15:02 . 2010-09-10 21:40	97504	----a-w-	c:\windows\system32\drivers\inspect.sys
2011-07-24 15:02 . 2010-09-10 21:40	29400	----a-w-	c:\windows\system32\drivers\cmdhlp.sys
2011-07-24 15:02 . 2010-09-10 21:40	17416	----a-w-	c:\windows\system32\drivers\cmderd.sys
2011-07-24 15:02 . 2010-09-10 21:40	242600	----a-w-	c:\windows\system32\drivers\cmdGuard.sys
2011-07-15 13:29 . 2006-05-05 09:41	456320	----a-w-	c:\windows\system32\drivers\mrxsmb.sys
2010-10-10 14:04 . 2010-10-10 14:04	75595	----a-w-	c:\program files\Uninstal.exe
2008-07-04 07:20 . 2008-07-07 08:26	163432	----a-w-	c:\program files\Viper.exe
2008-07-04 07:20 . 2008-07-07 08:26	171624	----a-w-	c:\program files\Viper Vista.exe
2008-07-04 05:48 . 2008-07-07 08:26	52840	----a-w-	c:\program files\Utilitaire BeWAN Powerline.exe
2008-06-26 02:03 . 2008-07-07 08:39	86	----a-w-	c:\program files\install_wpcap_64.bat
2008-06-26 02:03 . 2008-07-07 08:39	42000	----a-w-	c:\program files\aztech_npf32.sys
2008-06-26 02:03 . 2008-07-07 08:39	86	----a-w-	c:\program files\install_wpcap_32.bat
2008-06-26 02:03 . 2008-07-07 08:39	54784	----a-w-	c:\program files
pptools.dll
2008-06-26 02:03 . 2008-07-07 08:39	40208	----a-w-	c:\program files\aztech_npf64.sys
2008-06-26 02:03 . 2008-07-07 08:26	94208	----a-w-	c:\program files\PLCLIB.dll
2008-06-26 02:03 . 2008-07-07 08:26	88952	----a-w-	c:\program files\Packet.dll
2008-06-26 02:03 . 2008-07-07 08:26	68480	----a-w-	c:\program files\WanPacket.dll
2008-06-26 02:03 . 2008-07-07 08:26	240496	----a-w-	c:\program files\wpcap.dll
2008-06-26 02:03 . 2008-07-07 08:26	17584	----a-w-	c:\program files\PLCNDIS4.SYS
2008-06-26 02:03 . 2008-07-07 08:26	17280	----a-w-	c:\program files\PLCNDIS5.SYS
2008-06-26 02:03 . 2008-07-07 08:26	16001	----a-w-	c:\program files\PLCNDIS3.VXD
2007-01-30 04:42 . 2008-07-07 08:26	4624384	----a-w-	c:\program files\HomePlug AV Utility.exe
.
.
(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}]
2009-10-15 08:53	165184	----a-w-	c:\program files\SFR\Kit\SFRNavErrorHelper.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-02-09 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LaunchApp"="Alaunch" [X]
"ntiMUI"="c:\program files\NewTech Infosystems\NTI CD & DVD-Maker 7
tiMUI.exe" [2005-05-11 45056]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-05 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-05 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-05 455168]
"SiSPower"="SiSPower.dll" [2005-07-13 49152]
"SoundMan"="SOUNDMAN.EXE" [2005-08-17 90112]
"LogMeIn GUI"="c:\program files\LogMeIn\x86\LogMeInSystray.exe" [2010-05-31 63048]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2011-07-24 2554696]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OBealsched.exe" [2010-10-13 202256]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-16 13529088]
"nwiz"="nwiz.exe" [2008-05-16 1630208]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2007-12-11 286720]
"SunJavaUpdateSched"="c:\program files\Fichiers communs\Java\Java Update\jusched.exe" [2011-05-04 252136]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-05-16 86016]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2011-06-15 997920]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\
Utility Tray.lnk - c:\windows\system32\sistray.exe [2005-7-13 262144]
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon
otify\LMIinit]
2011-10-07 17:24	87424	----a-w-	c:\windows\system32\LMIinit.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk]
path=c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnk
backup=c:\windows\pss\Utilitaire réseau pour SAGEM Wi-Fi 11g USB adapter.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^wo-ow^Menu Démarrer^Programmes^Démarrage^OpenOffice.org 3.0.lnk]
path=c:\documents and settings\wo-ow\Menu Démarrer\Programmes\Démarrage\OpenOffice.org 3.0.lnk
backup=c:\windows\pss\OpenOffice.org 3.0.lnkStartup
.
[HKLM\~\startupfolder\C:^Documents and Settings^wo-ow^Menu Démarrer^Programmes^Démarrage^Wallpaper Changer.lnk]
path=c:\documents and settings\wo-ow\Menu Démarrer\Programmes\Démarrage\Wallpaper Changer.lnk
backup=c:\windows\pss\Wallpaper Changer.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-09-21 17:37	932288	----a-w-	c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2009-10-03 02:08	35696	----a-w-	c:\program files\Adobe\Reader 9.0\Readereader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service]
2010-03-18 09:19	207360	----a-w-	c:\program files\Fichiers communs\ArcSoft\Connection Service\Bin\ACDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Backup NOW! Scheduler]
2005-03-24 14:22	86016	----a-w-	c:\program files\NewTech Infosystems\NTI Backup NOW! 4\Schdlr32.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
2010-04-16 20:12	3872080	----a-w-	c:\program files\Windows Live\Messenger\msnmsgr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nikon Transfer Monitor]
2009-09-15 16:47	479232	----a-w-	c:\program files\Fichiers communs\Nikon\Monitor\NkMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Picasa Media Detector]
2008-08-21 01:18	443968	----a-w-	c:\program files\Picasa2\PicasaMediaDetector.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2007-12-11 08:56	286720	----a-w-	c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
2004-11-02 18:24	32768	----a-w-	c:\program files\CyberLink\PowerDVD\PDVDServ.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2011-02-09 17:48	39408	----a-w-	c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
2008-08-03 23:02	36352	----a-w-	c:\program files\Winamp\winampa.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe"=
"%windir%\Network Diagnostic\xpnetdiag.exe"=
"c:\Program Files\TmNationsForever\TmForever.exe"=
"c:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe"=
"c:\Program Files\TrackMania Sunrise Extreme Demo\TmSunriseExtremeDemo.exe"=
"c:\Program Files\Windows Live\Messenger\wlcsdk.exe"=
"c:\Program Files\Windows Live\Messenger\msnmsgr.exe"=
"c:\Program Files\Google\Google Earth\client\googleearth.exe"=
.
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdGuard.sys [10/09/2010 23:40 242600]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [10/09/2010 23:40 29400]
R2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\LogMeIn\x86\LMIGuardianSvc.exe [27/09/2010 14:47 374152]
R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\LogMeIn\x86ainfo.sys [31/05/2010 11:31 12856]
S1 MpKsl7b2f6bcf;MpKsl7b2f6bcf;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{E1A8AAFF-F73E-4D61-81A6-8BEB7A37A8F7}\MpKsl7b2f6bcf.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{E1A8AAFF-F73E-4D61-81A6-8BEB7A37A8F7}\MpKsl7b2f6bcf.sys [?]
S2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [03/11/2010 19:29 136176]
S3 3dfxvs;3dfxvs;c:\windows\system32\drivers\3dfxvsm.sys [31/03/2010 15:02 148352]
S3 gupdatem;Service Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [03/11/2010 19:29 136176]
S3 maconfservice;Ma-Config Service;c:\program files\ma-config.com\maconfservice.exe [09/07/2011 16:03 311928]
S3 MBAMSwissArmy;MBAMSwissArmy;\??\c:\windows\system32\drivers\mbamswissarmy.sys --> c:\windows\system32\drivers\mbamswissarmy.sys [?]
S3 WFIOCTL;WFIOCTL;\??\c:\program files\WinFast\WFTVFM\WFIOCTL.SYS --> c:\program files\WinFast\WFTVFM\WFIOCTL.SYS [?]
.
--- Autres Services/Pilotes en mémoire ---
.
*NewlyCreated* - LMIINFO
.
Contenu du dossier 'Tâches planifiées'
.
2011-10-09 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2799467384-737519369-2163962634-1006.job
- c:\program files\Real\RealUpgradeealupgrade.exe [2010-06-03 01:02]
.
2011-10-09 c:\windows\Tasks\User_Feed_Synchronization-{FBF10C93-3A2D-45B1-A69F-B3F1D9911712}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]
.
2011-10-09 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2799467384-737519369-2163962634-1006.job
- c:\program files\Real\RealUpgradeealupgrade.exe [2010-06-03 01:02]
.
2011-10-09 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Microsoft Security Client\Antimalware\MpCmdRun.exe [2011-04-27 13:39]
.
2011-10-09 c:\windows\Tasks\MpIdleTask.job
- c:\program files\Microsoft Security Client\Antimalware\MpCmdRun.exe [2011-04-27 13:39]
.
2011-10-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-11-03 17:29]
.
2011-10-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-11-03 17:29]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
uInternet Connection Wizard,ShellNext = iexplore
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
TCP: Interfaces\{9F8B528F-6C2E-47A4-823B-A9CE2F0CC3F1}: NameServer = 156.154.70.25,156.154.71.25
DPF: {50DC58D0-C870-4BE6-BC41-971ED2D5F022} - hxxp://www.super-messenger.fr/tab/HookWlmEx.exe
.
- - - - ORPHELINS SUPPRIMES - - - -
.
BHO-{EEE6C35C-6118-11DC-9C72-001320C79847} - c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
Toolbar-10 - (no file)
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
AddRemove-iMesh 1 MediaBar - c:\program files\iMesh Applications\MediaBar\uninstall.exe
AddRemove-{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA} - c:\documents and settings\All Users\Application Data\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42}\bm_installer.exe
AddRemove-Kellogg's Afrique - c:\program files\Kellogg's Afrique\Uninstal.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-10-09 17:41
Windows 5.1.2600 Service Pack 3 FAT NTAPI
.
detected NTDLL code modification:
ZwClose
.
Recherche de processus cachés ... 
.
Recherche d'éléments en démarrage automatique cachés ... 
.
Recherche de fichiers cachés ... 
.
Scan terminé avec succès
Fichiers cachés: 0
.
**************************************************************************
.
--------------------- DLLs chargées dans les processus actifs ---------------------
.
- - - - - - - > 'winlogon.exe'(556)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\LMIinit.dll
c:\windows\system32\LMIRfsClientNP.dll
.
- - - - - - - > 'lsass.exe'(612)
c:\windows\system32\guard32.dll
.
- - - - - - - > 'explorer.exe'(3884)
c:\windows\system32\guard32.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\windows\system32\eappprxy.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\program files\COMODO\COMODO Internet Security\cmdagent.exe
c:\program files\Microsoft Security Client\Antimalware\MsMpEng.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\LogMeIn\x86\RaMaint.exe
c:\program files\LogMeIn\x86\LogMeIn.exe
c:\windows\system32\SearchIndexer.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32undll32.exe
c:\windows\SOUNDMAN.EXE
c:\program files\Windows Live\Contacts\wlcomm.exe
c:\windows\system32\wbem\wmiapsrv.exe
.
**************************************************************************
.
Heure de fin: 2011-10-09  17:44:39 - La machine a redémarré
ComboFix-quarantined-files.txt  2011-10-09 15:44
.
Avant-CF: 8 490 614 784 octets libres
Après-CF: 8 374 255 616 octets libres
.
WindowsXP-KB310994-SP2-Home-BootDisk-FRA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP  dition familiale" /noexecute=optin /fastdetect
.
- - End Of File - - DD61E268E263CBB313CF567616E0CD36

Fish66 · Answer

Re,
1/
 * Télécharge sur le bureau RogueKiller (par tigzy)  
https://www.luanagames.com/index.fr.html  


*( Sous Vista/Seven,clique droit, lancer en tant qu'administrateur )  

* Quitte tous tes programmes en cours  
* Lance RogueKiller.exe.  
* Lorsque demandé, tape 2 et valide  
*Si le rogue empêche le lancement du programme, Renomme (RogueKiller) en "winlogon" ou "firefox". Sinon renomme le  en winlogon.exe ou firefox.exe (rajouter l'extension .exe) 
* Un rapport (RKreport.txt) a du se créer à côté de l'exécutable, colle son contenu dans la réponse  
* Si le programme a été bloqué, ne pas hésiter a essayer plusieurs fois.  

2/
* Télécharge OTM (OldTimer) sur ton Bureau 

ICI >> OTM (OldTimer) 
* Double clic "OTMoveIt3.exe" 
* Utilisateurs Windows Vista / 7 Clic droit sur "OTMoveIt3.exe" choisis "exécuter en tant qu'administrateur" afin de le lancer. 

- Copie (Ctrl+C) le texte suivant en gras ci-dessous : 



:files 
c:\program files\Uninstal.exe     
c:\program files\Packet.dll     
c:\program files\wpcap.dll     




- Colle (Ctrl+V) le texte précédemment copié dans le cadre: Paste Instructions for Items to be Moved. 
- Clique maintenant sur le bouton MoveIt! 
Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer. 
Accepte en cliquant sur YES. 
- Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\ 
Le nom du rapport correspond au moment de sa création : date_heure.log

angedesenfers · Answer

voila le rapport roguekiller : RogueKiller V6.1.2 [07/10/2011] par Tigzy contact sur https://www.luanagames.com/index.fr.html mail: tigzyRKgmailcom Remontees: https://www.luanagames.com/index.fr.html Systeme d'exploitation: Windows XP (5.1.2600 Service Pack 3) 32 bits version Demarrage : Mode normal Utilisateur: wo-ow [Droits d'admin] Mode: Suppression -- Date : 10/10/2011 19:01:00 Processus malicieux: 0 Entrees de registre: 1 [HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0) Fichiers / Dossiers particuliers: Driver: [LOADED] SSDT[258] : NtTerminateThread @ 0x80584966 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB4949918) SSDT[257] : NtTerminateProcess @ 0x8058E8B1 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB4949B2A) SSDT[255] : NtSystemDebugControl @ 0x80651A75 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494A2A0) SSDT[249] : NtShutdownSystem @ 0x8064F29B -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494A07A) SSDT[247] : NtSetValueKey @ 0x80580088 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494B3F4) SSDT[240] : NtSetSystemInformation @ 0x805BFDB1 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494CEE8) SSDT[237] : NtSetSecurityObject @ 0x805E8694 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494AEEE) SSDT[210] : NtSecureConnectPort @ 0x80587E0A -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494C940) SSDT[200] : NtRequestWaitReplyPort @ 0x8057D13B -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494C68C) SSDT[192] : NtRenameKey @ 0x8065684C -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494B67C) SSDT[177] : NtQueryValueKey @ 0x80572F19 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494BEDA) SSDT[161] : NtQueryMultipleValueKey @ 0x806563CF -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494C11C) SSDT[160] : NtQueryKey @ 0x8057EC02 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494BCC8) SSDT[128] : NtOpenThread @ 0x80596743 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494934C) SSDT[125] : NtOpenSection @ 0x80579192 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494A3B4) SSDT[122] : NtOpenProcess @ 0x8057F93A -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB4949148) SSDT[119] : NtOpenKey @ 0x80572BDF -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494B116) SSDT[116] : NtOpenFile @ 0x8057A095 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494A6F4) SSDT[105] : NtMakeTemporaryObject @ 0x805AD8A3 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494A110) SSDT[97] : NtLoadDriver @ 0x805B52F0 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494CBF0) SSDT[73] : NtEnumerateValueKey @ 0x80590232 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494BABA) SSDT[71] : NtEnumerateKey @ 0x8057F002 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494B864) SSDT[68] : NtDuplicateObject @ 0x8057F18D -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494951A) SSDT[65] : NtDeleteValueKey @ 0x805991E8 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494AC9E) SSDT[63] : NtDeleteKey @ 0x8059A5C9 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494AA9E) SSDT[53] : NtCreateThread @ 0x80584D39 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB4949714) SSDT[52] : NtCreateSymbolicLinkObject @ 0x805AD5D4 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494D568) SSDT[50] : NtCreateSection @ 0x8056DB66 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494D1E0) SSDT[46] : NtCreatePort @ 0x805A13A0 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB4949D28) SSDT[41] : NtCreateKey @ 0x80578AB4 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494B126) SSDT[37] : NtCreateFile @ 0x80573DFB -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494A518) SSDT[31] : NtConnectPort @ 0x80590E53 -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB4949E48) SSDT[11] : NtAdjustPrivilegesToken @ 0x8059741F -> HOOKED (\SystemRoot\System32\DRIVERS\cmdguard.sys @ 0xB494A8B2) S_SSDT[0] : -> HOOKED ( @ 0x00000000) Fichier HOSTS: 127.0.0.1 localhost Termine : << RKreport[1].txt >> RKreport[1].txt

angedesenfers · Answer

et voici otm : 

========== FILES ==========
c:\program files\Uninstal.exe moved successfully.
LoadLibrary failed for c:\program files\Packet.dll
c:\program files\Packet.dll moved successfully.
LoadLibrary failed for c:\program files\wpcap.dll
c:\program files\wpcap.dll moved successfully.
 
OTM by OldTimer - Version 3.1.18.0 log created on 10102011_190811

Fish66 · Answer

Salut,

Lance ZHPDiag depuis le bureau, clique sur l'onglet vert (flèche bas) pour faire la mise à jour et prépare stp un nouveau rapport ZHPDiag

@+

angedesenfers · Answer

http://www.cijoint.fr/cjlink.php?file=cj201110/cijgSYxkv8.txt 



voila

Fish66 · Answer

Salut,
1/
* Télécharge le fichier : ZHPFixScript.txt sur ton bureau 
depuis ce lien : http://www.cijoint.fr/cjlink.php?file=cj201110/cijTskIDUr.txt
* Enregistre le sur le bureau de ton PC                                           
*Lance ZHPFix et clique sur le H (coller les lignes helpers) 
* Fait un glisser/déposer de ZHPFixScript.txt (existant sur ton bureau) dans ZHPFix 
* Clique sur le bouton GO 
* Héberge le rapport et donne le lien

2/
Comment se comporte ton PC stp ?

angedesenfers · Answer

1) http://www.cijoint.fr/cjlink.php?file=cj201110/cij5mJkzTc.txt 
2) L'ordi ne bogue pratiquement plus voir plus du tout ( à part les bugs habituels de windows ^^)

Fish66 · Answer

Re,
1/
System drive C: has 8 GB (21%) free of 35 GB 

Je te conseille de désinstaller les logiciels de jeux ci-dessous  pour alléger ton PC et si nécessaire d'investir un DD externe 
O42 - Logiciel: Arkanoid 4000 - (.Pas de propriétaire.)
O42 - Logiciel: Toyland Racing - (.Pas de propriétaire.) 
O42 - Logiciel: Turbo Schtroumpf ! - (.Pas de propriétaire.) 

2/
. télécharges Ccleaner à partir de cette adresse et enregistres le sur le bureau 

https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/ 

.double-cliques sur le fichier pour lancer l'installation 

.sur la fenêtre de l'installation langage bien choisir français et OK 
.cliques sur suivant 
.lis la licence et j'accepte 
.cliques sur suivant 
.la tu ne gardes de coché que mettre un raccourci sur le bureau et puis contrôler automatiquement les mises à jour de Ccleaner 
.cliques sur installer 
.cliques sur fermer 
.double-cliques sur l'icône de Ccleaner pour l'ouvrir 
.une fois ouvert tu cliques sur option et puis avancé 
.tu décoches effacer uniquement les fichiers, du dossier temp de windows plus vieux que 24 heures 
.cliques sur nettoyeur 
.cliques sur windows et dans la colonne avancé 
.coches la première case vieilles données du perfetch que celle-la ce qui te donnes la case vielles données du perfetch et la case avancé qui c'est coché automatiquement mais que celle-la 
.cliques sur analyse une fois l'analyse terminé 
.cliques sur lancer le nettoyage et sur la demande de confirmation OK il vas falloir que tu le refasses une autre fois une fois fini vériffis en appuiant de nouveau sur analyse pour être sur qu'il n'y est plus rien 
.cliques maintenant sur registre et puis sur rechercher les erreurs 
.laisses tout cochées et cliques sur réparrer les erreurs sélectionnées 
.il te demande de sauvegarder OUI 
.tu lui donnes un nom pour pouvoir la retrouver et enregistre 
.cliques sur corriger toutes les erreurs sélectionnées et sur la demande de confirmation OK 
.il supprime et fermer tu vérifies en relançant rechercher les erreurs 
.tu retournes dans option et tu recoches la case effacer uniquement les fichiers, du dossier temp de windows plus vieux que 48 heures et sur nettoyeur, windows sous avancé tu décoches la première case vieilles données du perfetch 
.tu peux fermer Ccleaner 

tuto installation & nettoyage : 
https://www.donnemoilinfo.com/tuto/CCleaner/

3/
Prépare stp un dernier rapport ZHPDiag avant de finaliser

@+

angedesenfers · Answer

http://www.cijoint.fr/cjlink.php?file=cj201110/cijWzJbIfg.txt

Voila.
Que dois-je faire maintenant ?

Fish66 · Answer

Salut, Il existe encore de trace de Northon! As tu lancé l'utilitaire de désinstallation de Northon comme je t'ai expliqué : >>> ICI en 1/ <<< ?

angedesenfers · Answer

Oui et comme je te lai dis ca na pas marché....
Je vais cependant réessayer !

Fish66 · Answer

Re,

Tu peux essayer...

======================
Copie tout le texte présent  ci-dessous ( tu le selectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C ) 


O43 - CFD: 15/10/2011 - 17:17:48 - [3837048] ----D- C:\Program Files\Norton Internet Security    => Symantec NIS
OPT:O4 - HKLM\..\Run: [MSPY2002] . (...) -- C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe     
OPT:OPT:O4 - HKLM\..\Run: [PHIME2002ASync] . (.Microsoft Corporation - ???????? 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe     
OPT:O4 - HKLM\..\Run: [PHIME2002A] . (.Microsoft Corporation - ???????? 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe     
OPT:O4 - HKLM\..\Run: [nwiz] . (...) -- C:\WINDOWS\system32
wiz.exe     
OPT:O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\qttask.exe     
[HKLM\Software\BrowserChoice]     
O45 - LFCP:[MD5.D1D12D8B217E4314541CDD614239BAE2] - 12/10/2011 - 16:49:34 ---A- - C:\WINDOWS\Prefetch\JUSCHED.EXE-0E6FA1F7.pf 
O45 - LFCP:[MD5.B9D26BA752DDB2CE5BD8149B7FC71C11] - 12/10/2011 - 16:49:34 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3CAE7316.pf 
O45 - LFCP:[MD5.55EE65192A9088FDB332A56957C2BC77] - 12/10/2011 - 16:49:34 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-42568035.pf 
O45 - LFCP:[MD5.7F24A28AC1D96090CBC695C02AD3D998] - 12/10/2011 - 16:49:34 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-5F120771.pf 
O45 - LFCP:[MD5.7EB9F52E50FFE4F279BC898AB1C3FAD4] - 12/10/2011 - 16:54:16 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-5749CA01.pf 
O45 - LFCP:[MD5.400AB776F174AB6118623E0290C7664B] - 12/10/2011 - 17:02:16 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-5D57BE00.pf 
O45 - LFCP:[MD5.3E414DD2BF8F409AE5CA05AF0321327D] - 12/10/2011 - 17:22:20 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-476E8B37.pf 
O45 - LFCP:[MD5.531FFC639C9988D516699A7C5589F750] - 12/10/2011 - 17:33:24 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-744CD546.pf 
O45 - LFCP:[MD5.00D8EF09070DE67B77CB6C59F67EA68C] - 12/10/2011 - 17:35:24 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-54941A3F.pf 
O45 - LFCP:[MD5.5F181C7327A927F344454B1A21CD2AAE] - 12/10/2011 - 17:37:24 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-68397F74.pf 
O45 - LFCP:[MD5.E43080F0DAFBD786BFB1B497AFA0D303] - 12/10/2011 - 17:41:28 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-617F1004.pf 
O45 - LFCP:[MD5.D135B526F95775F964494AC60BE67C25] - 12/10/2011 - 17:45:32 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-57451A8A.pf 
O45 - LFCP:[MD5.5C360004E53E97C6B6FA4FC4A9C227B8] - 12/10/2011 - 17:46:36 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4B17A44F.pf 
O45 - LFCP:[MD5.BB82C7076C8AA0C46889FB79E374895B] - 12/10/2011 - 17:51:40 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-5FB5ABFD.pf 
O45 - LFCP:[MD5.0BED0A4CEFC1771781E77E46F80E29FB] - 12/10/2011 - 17:56:44 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-5A76E7A0.pf 
O45 - LFCP:[MD5.7162DB6488EDBA483947D3A9697859E5] - 12/10/2011 - 18:07:24 ---A- - C:\WINDOWS\Prefetch\REALPLAY.EXE-05411014.pf 
O45 - LFCP:[MD5.ED6D7C4CEC7C0E4F7A95F5269734D811] - 12/10/2011 - 18:10:54 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-70D0D8C7.pf 
O45 - LFCP:[MD5.9CEBDC53C1B63128FF578DB119B4F530] - 12/10/2011 - 18:11:56 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-66C92001.pf 
O45 - LFCP:[MD5.78FBEBD77EB745006CF23E6E902DB8C7] - 12/10/2011 - 18:18:02 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-622F9F8E.pf 
O45 - LFCP:[MD5.AEC76F5EC082EF6EED620B60A621B3C9] - 12/10/2011 - 18:30:06 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-47981D63.pf 
O45 - LFCP:[MD5.6AF587C3F2A38884E3488A56B0F77F48] - 12/10/2011 - 19:25:30 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3B920CEC.pf 
O45 - LFCP:[MD5.319273917160891D3CB78F3268B27710] - 13/10/2011 - 17:20:42 ---A- - C:\WINDOWS\Prefetch\MSSECES.EXE-314A90C6.pf 
O45 - LFCP:[MD5.E381746A0D38226BDF45E74EFC38C3C9] - 13/10/2011 - 17:20:42 ---A- - C:\WINDOWS\Prefetch\WSCNTFY.EXE-0B14C27D.pf 
O45 - LFCP:[MD5.8A2CD4D83ACD6AED48E494ADA36B3C05] - 13/10/2011 - 17:29:22 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-3A7537FA.pf 
O45 - LFCP:[MD5.5B7B9C0B2636EC597D39FE151B2898BA] - 13/10/2011 - 17:30:08 ---A- - C:\WINDOWS\Prefetch\AM_DELTA_PATCH1.EXE-2DB6D8E5.pf 
O45 - LFCP:[MD5.672295264278AB17FA8B616FB596A5DC] - 13/10/2011 - 17:30:44 ---A- - C:\WINDOWS\Prefetch\AM_DELTA.EXE-24A3CEB4.pf 
O45 - LFCP:[MD5.11BB506406B9B2B0F1ADBD786CD5686D] - 13/10/2011 - 18:01:06 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-43FA6341.pf 
O45 - LFCP:[MD5.F24C38533C17145BA533D07348195EB6] - 13/10/2011 - 18:03:10 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-42EC00B9.pf 
O45 - LFCP:[MD5.F5CFAD55FE677D044FB118AAD699CD70] - 13/10/2011 - 18:04:18 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-5EBB7798.pf 
O45 - LFCP:[MD5.35E82D8854BD47CB7B8390BCA9384D62] - 13/10/2011 - 18:08:22 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-5899C7A8.pf 
O45 - LFCP:[MD5.8BCC094E0972267567B46F204F7E310B] - 13/10/2011 - 18:21:34 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4D36AFBD.pf 
O45 - LFCP:[MD5.DFE067B20541BCA5FF3DEE62C001A2A1] - 13/10/2011 - 18:31:38 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-469660B6.pf 
O45 - LFCP:[MD5.FEC73F64F15FD33A51D1199E698F496A] - 13/10/2011 - 18:36:40 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-7343C99A.pf 
O45 - LFCP:[MD5.B2AFC95E0C12813BC6A0D3B9F3865C36] - 13/10/2011 - 18:39:12 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-41A873BA.pf 
O45 - LFCP:[MD5.1803BD475D911D66675B74C4D6D14C96] - 13/10/2011 - 18:42:12 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-40435D69.pf 
O45 - LFCP:[MD5.18DB9FF3778B7F275CE7A5FF6BF639AF] - 13/10/2011 - 18:44:16 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-72062EE1.pf 
O45 - LFCP:[MD5.1427FD29DF9C5CC85F407BAECDE1BDAF] - 13/10/2011 - 18:54:20 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-5F85D5E8.pf 
O45 - LFCP:[MD5.5E4175A7AD2095DC87468B2C42AD33F1] - 13/10/2011 - 19:14:08 ---A- - C:\WINDOWS\Prefetch\DFRGFAT.EXE-22605FE5.pf 
O45 - LFCP:[MD5.F66BD9FFBF3F360057DD21BC309EB302] - 13/10/2011 - 19:15:44 ---A- - C:\WINDOWS\Prefetch\HELPSVC.EXE-1C192440.pf 
O45 - LFCP:[MD5.CDD7EC94BF3CC08DC41FC4F3C4959839] - 13/10/2011 - 19:22:36 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3C66C0B8.pf 
O45 - LFCP:[MD5.DCB342696637B5590A71EB3B7FFBFB4A] - 13/10/2011 - 19:22:56 ---A- - C:\WINDOWS\Prefetch\NDP1.1SP1-KB2572067-X86.EXE-23C915CD.pf 
O45 - LFCP:[MD5.BFB695CAB64E7B6E60CD49A2BC757C6D] - 13/10/2011 - 19:23:56 ---A- - C:\WINDOWS\Prefetch\GACUTIL.EXE-053ECDA4.pf 
O45 - LFCP:[MD5.D4FBE1862848D244A815BD0A815061AB] - 13/10/2011 - 19:23:56 ---A- - C:\WINDOWS\Prefetch\MSI90.TMP-287857EB.pf 
O45 - LFCP:[MD5.95F1319A81690ED55F8F5DF0BDC6E706] - 13/10/2011 - 19:24:08 ---A- - C:\WINDOWS\Prefetch\NETFXUPDATE.EXE-1E08356E.pf 
O45 - LFCP:[MD5.6D20A5107BBDCC67FC3F4A84E8B43803] - 13/10/2011 - 19:24:18 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-2424246A.pf 
O45 - LFCP:[MD5.9EF740CBE71A569037E879F4C431071A] - 13/10/2011 - 19:24:40 ---A- - C:\WINDOWS\Prefetch\NGEN.EXE-0FE278E5.pf 
O45 - LFCP:[MD5.45B631568367F7EE516C141A16757D4A] - 13/10/2011 - 19:25:44 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-151B157C.pf 
O45 - LFCP:[MD5.38214DDAF6129382A335BD5B507EE52B] - 13/10/2011 - 19:25:52 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-0AF334AA.pf 
O45 - LFCP:[MD5.2F2E3F3CE80F4D811862E813ACEDB630] - 13/10/2011 - 19:25:54 ---A- - C:\WINDOWS\Prefetch\MRTSTUB.EXE-20B5C875.pf 
O45 - LFCP:[MD5.BF8EE7663C3EA8E76862D7B7281AFA4A] - 13/10/2011 - 19:26:02 ---A- - C:\WINDOWS\Prefetch\MRT.EXE-161A5291.pf 
O45 - LFCP:[MD5.75B40A3CC4867E523945A4CF3C62F787] - 13/10/2011 - 19:26:02 ---A- - C:\WINDOWS\Prefetch\WINDOWS-KB890830-V4.1-DELTA.E-21230283.pf 
O45 - LFCP:[MD5.28AE4B157C28FF7E9E273109DB62935E] - 13/10/2011 - 19:30:10 ---A- - C:\WINDOWS\Prefetch\MSIPATCHREGFIX-X86.EXE-3093F27B.pf 
O45 - LFCP:[MD5.228CB185BFD3204E8C33B53AB6AAC3C3] - 13/10/2011 - 19:30:12 ---A- - C:\WINDOWS\Prefetch\NDP20SP2-KB2572073-X86.EXE-14EEF216.pf 
O45 - LFCP:[MD5.A96A81410EB32096D0548E4ECF1FFE4F] - 13/10/2011 - 19:30:14 ---A- - C:\WINDOWS\Prefetch\HOTFIXINSTALLER.EXE-1E452332.pf 
O45 - LFCP:[MD5.381B064A74D717C654E270FA7E1090F9] - 13/10/2011 - 19:32:26 ---A- - C:\WINDOWS\Prefetch\REGTLIBV12.EXE-010D5E29.pf 
O45 - LFCP:[MD5.DA19A52D1C0E9B388FF17D64C3136D86] - 13/10/2011 - 19:33:12 ---A- - C:\WINDOWS\Prefetch\MOFCOMP.EXE-266B2314.pf 
O45 - LFCP:[MD5.34025FD4F8260AABC0C6537C7C1DC863] - 13/10/2011 - 19:33:14 ---A- - C:\WINDOWS\Prefetch\ASPNET_REGIIS.EXE-0240A7FC.pf 
O45 - LFCP:[MD5.DE3D682EDB9F79DAB8650C2937ED3C3F] - 13/10/2011 - 19:33:20 ---A- - C:\WINDOWS\Prefetch\REGSVCS.EXE-0EADA066.pf 
O45 - LFCP:[MD5.EF1C4189ED5C7C7AAB9B843F37857A42] - 13/10/2011 - 19:33:24 ---A- - C:\WINDOWS\Prefetch\NGEN.EXE-20BDC4FB.pf 
O45 - LFCP:[MD5.2BBAFCFF9A8FD0F9B1AAB13099ACEF47] - 13/10/2011 - 19:33:30 ---A- - C:\WINDOWS\Prefetch\LODCTR.EXE-03F34D45.pf 
O45 - LFCP:[MD5.7E71D6B614783E4AED9FA6875C88BBDB] - 13/10/2011 - 19:33:40 ---A- - C:\WINDOWS\Prefetch\UPDATE.EXE-0C075775.pf 
O45 - LFCP:[MD5.C42FD6E4A159809E20CDEF1FC94A0349] - 13/10/2011 - 19:33:46 ---A- - C:\WINDOWS\Prefetch\SILVERLIGHT.EXE-0819148A.pf 
O45 - LFCP:[MD5.E29A5BBC8BE09C1A12A720F918014526] - 13/10/2011 - 19:33:48 ---A- - C:\WINDOWS\Prefetch\INSTALL.EXE-03D5EF61.pf 
O45 - LFCP:[MD5.F1AF4431BACFB656869BAC038DE7BC76] - 13/10/2011 - 19:33:54 ---A- - C:\WINDOWS\Prefetch\MSI1D2.TMP-01C8F0CA.pf 
O45 - LFCP:[MD5.A21AB9C148E848E3402F0E1FDD1C4393] - 13/10/2011 - 19:34:16 ---A- - C:\WINDOWS\Prefetch\MSI1D4.TMP-28306B5F.pf 
O45 - LFCP:[MD5.8E9E58FBF21EB1B13D25EA823DA8B614] - 13/10/2011 - 19:34:22 ---A- - C:\WINDOWS\Prefetch\WMIADAP.EXE-32F99497.pf 
O45 - LFCP:[MD5.7E73FED97B6B4D6893AB5861D960A9C1] - 13/10/2011 - 19:34:48 ---A- - C:\WINDOWS\Prefetch\COREGEN.EXE-0723A266.pf 
O45 - LFCP:[MD5.8660BC6E0481E22143F8423D13E35A34] - 14/10/2011 - 17:20:42 ---A- - C:\WINDOWS\Prefetch\GOOGLETOOLBARNOTIFIER.EXE-0047A1C5.pf 
O45 - LFCP:[MD5.1ADC970EBC60145C767B5314597F4C38] - 14/10/2011 - 17:30:06 ---A- - C:\WINDOWS\Prefetch\CTFMON.EXE-05E57A5E.pf 
O45 - LFCP:[MD5.4124EBE88DA8A7C9A5216AA20AD7CCC4] - 14/10/2011 - 17:30:06 ---A- - C:\WINDOWS\Prefetch\FXSSVC.EXE-140862E7.pf 
O45 - LFCP:[MD5.80F4F1E000827D9B7DEC6488423316CC] - 14/10/2011 - 17:30:06 ---A- - C:\WINDOWS\Prefetch\NVSVC32.EXE-0756FC6B.pf 
O45 - LFCP:[MD5.DDD9AD4DBE77BE9ABE5B6017B0F66D15] - 14/10/2011 - 17:30:06 ---A- - C:\WINDOWS\Prefetch\SEARCHINDEXER.EXE-00DB35DB.pf 
O45 - LFCP:[MD5.EB5FD617ABD8B8F88E64E0D0C434FB20] - 14/10/2011 - 17:30:06 ---A- - C:\WINDOWS\Prefetch\SISTRAY.EXE-02982C96.pf 
O45 - LFCP:[MD5.B908523CFFC3337047AC7DB30FD0FA12] - 14/10/2011 - 17:30:06 ---A- - C:\WINDOWS\Prefetch\WGATRAY.EXE-350D4455.pf 
O45 - LFCP:[MD5.99121357BD7C706BA1A799FA5664A561] - 14/10/2011 - 17:30:06 ---A- - C:\WINDOWS\Prefetch\WINDOWSSEARCH.EXE-297AD9CA.pf 
O45 - LFCP:[MD5.75E9A747D169CD1AC1F41C8BEC1947F5] - 14/10/2011 - 17:30:20 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-7295BD1F.pf 
O45 - LFCP:[MD5.BE12C3E8797F1BE433C907CBFF27871A] - 14/10/2011 - 17:31:58 ---A- - C:\WINDOWS\Prefetch\9LAUNCH.EXE-0853DB87.pf 
O45 - LFCP:[MD5.362755E431C0722A80EE6AD23B4516D6] - 14/10/2011 - 17:32:16 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4165B4CB.pf 
O45 - LFCP:[MD5.74EB5EEAD249C8040726CAD0A74BD1F8] - 14/10/2011 - 17:39:58 ---A- - C:\WINDOWS\Prefetch\DW20.EXE-31F7F56F.pf 
O45 - LFCP:[MD5.7554A8E3AFDE6573F4C83178555CA830] - 14/10/2011 - 17:42:18 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-650F4F98.pf 
O45 - LFCP:[MD5.97DA16D593B5E19FBA4C8C94197CE4ED] - 14/10/2011 - 17:45:22 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-73BCFAC7.pf 
O45 - LFCP:[MD5.8901D89D0F89DBB9628F1E8C2C6E8305] - 14/10/2011 - 17:46:24 ---A- - C:\WINDOWS\Prefetch\FSVIEWER.EXE-352E2EEE.pf 
O45 - LFCP:[MD5.0AFF75796E0DF08022D6A8D29AC13BF4] - 14/10/2011 - 17:52:26 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-5CFADEA8.pf 
O45 - LFCP:[MD5.AB5D4F1DF57B33FE4DB7B1C6D9B12A67] - 14/10/2011 - 17:54:30 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-3ED15490.pf 
O45 - LFCP:[MD5.7FD2C2D208A78AFB84CB50E6C363BEDD] - 14/10/2011 - 18:00:02 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-5F785B5A.pf 
O45 - LFCP:[MD5.7733F0D453D112FE9B210D6534DFE70A] - 14/10/2011 - 18:00:54 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-6E8D4657.pf 
O45 - LFCP:[MD5.B80E68D3A9C62431850B6CAB7D76842E] - 14/10/2011 - 18:02:06 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-43EF4F52.pf 
O45 - LFCP:[MD5.482E3A618410303F1B1453AD09434D0F] - 14/10/2011 - 18:55:02 ---A- - C:\WINDOWS\Prefetch\GOOGLECRASHHANDLER.EXE-29CC6E6F.pf 
O45 - LFCP:[MD5.B21B94D30EC1C0AC99E263708A8A548B] - 15/10/2011 - 11:17:40 ---A- - C:\WINDOWS\Prefetch\IMAPI.EXE-201490BB.pf 
O45 - LFCP:[MD5.F89FE9829780802F507B02BCDE20ABDA] - 15/10/2011 - 11:17:40 ---A- - C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf 
O45 - LFCP:[MD5.310DDDAF27F3D86049F6FC166F0AE16F] - 15/10/2011 - 11:17:40 ---A- - C:\WINDOWS\Prefetch\REGSVR32.EXE-396DEA2C.pf 
O45 - LFCP:[MD5.2C84D6E864A0E3861D0E916ABF430178] - 15/10/2011 - 11:17:44 ---A- - C:\WINDOWS\Prefetch\ALG.EXE-275708CF.pf 
O45 - LFCP:[MD5.9503F10E5DDB1869E24765294C465AB2] - 15/10/2011 - 11:18:02 ---A- - C:\WINDOWS\Prefetch\WLCOMM.EXE-2F4516F1.pf 
O45 - LFCP:[MD5.5D76E6AD6A6E7D3B139751CDFEEB3D24] - 15/10/2011 - 11:18:06 ---A- - C:\WINDOWS\Prefetch\WMIAPSRV.EXE-02740A4B.pf 
O45 - LFCP:[MD5.8CE5B20F1A53BCD208F0ADD57581481D] - 15/10/2011 - 11:30:06 ---A- - C:\WINDOWS\Prefetch\MPSIGSTUB.EXE-31D916DD.pf 
O45 - LFCP:[MD5.65F3CD475B23D36327E3AF6F77CB5961] - 15/10/2011 - 11:44:30 ---A- - C:\WINDOWS\Prefetch\MSCORSVW.EXE-310BC412.pf 
O45 - LFCP:[MD5.D74A98AEC34A2BFCEAA0DB30B0946A07] - 15/10/2011 - 12:11:10 ---A- - C:\WINDOWS\Prefetch\GOOGLETOOLBARMANAGER_4E7D715D-129BACEB.pf 
O45 - LFCP:[MD5.11B36218AD45BAF5592D7E076BC0A2FE] - 15/10/2011 - 12:11:10 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATEONDEMAND.EXE-1AA2B57F.pf 
O45 - LFCP:[MD5.AD68174E14FB584AF3D278559915D4CF] - 15/10/2011 - 12:43:04 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-70A27549.pf 
O45 - LFCP:[MD5.F65BFBA338A2E91D77C48C22988430A8] - 15/10/2011 - 12:44:06 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-498F2891.pf 
O45 - LFCP:[MD5.BE8B4FF0C67C68519AABD27F9C3AD99A] - 15/10/2011 - 13:07:24 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-4BC436B4.pf 
O45 - LFCP:[MD5.AFD691B3D8F430AFF465FFF87C5F6EC8] - 15/10/2011 - 15:24:30 ---A- - C:\WINDOWS\Prefetch\CFPUPDAT.EXE-33654641.pf 
O45 - LFCP:[MD5.F926E3A31EB868C8DEBBCE72832079F8] - 15/10/2011 - 16:28:18 ---A- - C:\WINDOWS\Prefetch\LOGMEINTOOLKIT.EXE-187E573A.pf 
O45 - LFCP:[MD5.EFEFE314DE808175A5C39B5BA9277DC5] - 15/10/2011 - 16:28:26 ---A- - C:\WINDOWS\Prefetch\LOGMEINSYSTRAY.EXE-0D0E68BB.pf 
O45 - LFCP:[MD5.D7F67F2D99F21E5666FC1ED7FB71D460] - 15/10/2011 - 16:28:40 ---A- - C:\WINDOWS\Prefetch\RAMAINT.EXE-021CB2EE.pf 
O45 - LFCP:[MD5.59C3D972892C9745278CD342D4E5BB2C] - 15/10/2011 - 16:35:06 ---A- - C:\WINDOWS\Prefetch\LOGMEIN.EXE-158F625C.pf 
O45 - LFCP:[MD5.CD72C73E994CC38E47C6B0DE5F3D03FD] - 15/10/2011 - 16:36:30 ---A- - C:\WINDOWS\Prefetch\WUAUCLT.EXE-1360D60A.pf 
O45 - LFCP:[MD5.AFEF82EAFFEF07BFE7BA1AD6714EAA0F] - 15/10/2011 - 16:48:10 ---A- - C:\WINDOWS\Prefetch\VERCLSID.EXE-28F52AD2.pf 
O45 - LFCP:[MD5.3F4F3887B9DC393906B594D31ECE513F] - 15/10/2011 - 16:55:02 ---A- - C:\WINDOWS\Prefetch\GOOGLEUPDATE.EXE-160E1F62.pf 
O45 - LFCP:[MD5.4C6D9CBC729DAFFB7EFE2B39C97BE844] - 15/10/2011 - 16:58:36 ---A- - C:\WINDOWS\Prefetch\MSNMSGR.EXE-0EBDBC56.pf 
O45 - LFCP:[MD5.477CF254F46AF7C6FA81BB8185D1DCCF] - 15/10/2011 - 17:01:44 ---A- - C:\WINDOWS\Prefetch\REALUPGRADE.EXE-1CAD92F6.pf 
O45 - LFCP:[MD5.58C57601E07E01463D18252CED8AC533] - 15/10/2011 - 17:01:52 ---A- - C:\WINDOWS\Prefetch\RUNDLL32.EXE-408235D5.pf 
O45 - LFCP:[MD5.ECF3FA77B379ECE1107080B33AFBA2F4] - 15/10/2011 - 17:05:08 ---A- - C:\WINDOWS\Prefetch\IEXPLORE.EXE-2D97EBE6.pf 

FirewallRAZ
EmptyTemp
EmptyFlash



Puis Lance ZHPFix depuis le raccourci du bureau . 

* Une fois l'outil ZHPFix ouvert , clique sur le bouton [ H ] ( "coller les lignes Helper" ) . 

* Dans l'encadré principal tu verras donc les lignes que tu as copié précédemment apparaitrent . 

Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre. 

Clique sur le bouton  GO

Copie/Colle le rapport à l'écran dans ton prochain message.


@+

angedesenfers · Answer

Rapport de ZHPFix 1.12.3363 par Nicolas Coolman, Update du 05/10/2011 
Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-16-10-2011-18-47-18.txt 
Run by wo-ow at 16/10/2011 18:47:18 
Windows XP Home Edition Service Pack 3 (Build 2600) 
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html 

========== Clé(s) du Registre ========== 
SUPPRIME Key: HKLM\Software\BrowserChoice 

========== Valeur(s) du Registre ========== 
SUPPRIME RunValue: MSPY2002 
SUPPRIME RunValue: PHIME2002A 
SUPPRIME RunValue: nwiz 
SUPPRIME RunValue: QuickTime Task 
SUPPRIME FirewallRaz (SP) : C:\Program Files\TrackMania Sunrise Extreme Demo\TmSunriseExtremeDemo.exe 
SUPPRIME FirewallRaz (SP) : C:\Program Files\ma-config.com\maconfservice.exe 
SUPPRIME FirewallRaz (SP) : C:\Documents and Settings\WO-OW\Bureau\jeux mp3.exe 
Aucune valeur présente dans la clé d'exception du registre (FirewallRaz) 

========== Dossier(s) ========== 
ABSENT C:\Program Files\Norton Internet Security 
SUPPRIME Temporaires Windows: : 8 
SUPPRIME Flash Cookies: 3 

========== Fichier(s) ========== 
SUPPRIME File: c:\windows\prefetch\jusched.exe-0e6fa1f7.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-3cae7316.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-42568035.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-5f120771.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-5749ca01.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-5d57be00.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-476e8b37.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-744cd546.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-54941a3f.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-68397f74.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-617f1004.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-57451a8a.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-4b17a44f.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-5fb5abfd.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-5a76e7a0.pf 
SUPPRIME File: c:\windows\prefetchealplay.exe-05411014.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-70d0d8c7.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-66c92001.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-622f9f8e.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-47981d63.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-3b920cec.pf 
SUPPRIME File: c:\windows\prefetch\msseces.exe-314a90c6.pf 
SUPPRIME File: c:\windows\prefetch\wscntfy.exe-0b14c27d.pf 
SUPPRIME File: c:\windows\prefetch\update.exe-3a7537fa.pf 
SUPPRIME File: c:\windows\prefetch\am_delta_patch1.exe-2db6d8e5.pf 
SUPPRIME File: c:\windows\prefetch\am_delta.exe-24a3ceb4.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-43fa6341.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-42ec00b9.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-5ebb7798.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-5899c7a8.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-4d36afbd.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-469660b6.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-7343c99a.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-41a873ba.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-40435d69.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-72062ee1.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-5f85d5e8.pf 
SUPPRIME File: c:\windows\prefetch\dfrgfat.exe-22605fe5.pf 
SUPPRIME File: c:\windows\prefetch\helpsvc.exe-1c192440.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-3c66c0b8.pf 
SUPPRIME File: c:\windows\prefetch
dp1.1sp1-kb2572067-x86.exe-23c915cd.pf 
SUPPRIME File: c:\windows\prefetch\gacutil.exe-053ecda4.pf 
SUPPRIME File: c:\windows\prefetch\msi90.tmp-287857eb.pf 
SUPPRIME File: c:\windows\prefetch
etfxupdate.exe-1e08356e.pf 
SUPPRIME File: c:\windows\prefetch\update.exe-2424246a.pf 
SUPPRIME File: c:\windows\prefetch
gen.exe-0fe278e5.pf 
SUPPRIME File: c:\windows\prefetch\update.exe-151b157c.pf 
SUPPRIME File: c:\windows\prefetch\update.exe-0af334aa.pf 
SUPPRIME File: c:\windows\prefetch\mrtstub.exe-20b5c875.pf 
SUPPRIME File: c:\windows\prefetch\mrt.exe-161a5291.pf 
SUPPRIME File: c:\windows\prefetch\windows-kb890830-v4.1-delta.e-21230283.pf 
SUPPRIME File: c:\windows\prefetch\msipatchregfix-x86.exe-3093f27b.pf 
SUPPRIME File: c:\windows\prefetch
dp20sp2-kb2572073-x86.exe-14eef216.pf 
SUPPRIME File: c:\windows\prefetch\hotfixinstaller.exe-1e452332.pf 
SUPPRIME File: c:\windows\prefetchegtlibv12.exe-010d5e29.pf 
SUPPRIME File: c:\windows\prefetch\mofcomp.exe-266b2314.pf 
SUPPRIME File: c:\windows\prefetch\aspnet_regiis.exe-0240a7fc.pf 
SUPPRIME File: c:\windows\prefetchegsvcs.exe-0eada066.pf 
SUPPRIME File: c:\windows\prefetch
gen.exe-20bdc4fb.pf 
SUPPRIME File: c:\windows\prefetch\lodctr.exe-03f34d45.pf 
SUPPRIME File: c:\windows\prefetch\update.exe-0c075775.pf 
SUPPRIME File: c:\windows\prefetch\silverlight.exe-0819148a.pf 
SUPPRIME File: c:\windows\prefetch\install.exe-03d5ef61.pf 
SUPPRIME File: c:\windows\prefetch\msi1d2.tmp-01c8f0ca.pf 
SUPPRIME File: c:\windows\prefetch\msi1d4.tmp-28306b5f.pf 
SUPPRIME File: c:\windows\prefetch\wmiadap.exe-32f99497.pf 
SUPPRIME File: c:\windows\prefetch\coregen.exe-0723a266.pf 
SUPPRIME File: c:\windows\prefetch\googletoolbarnotifier.exe-0047a1c5.pf 
SUPPRIME File: c:\windows\prefetch\ctfmon.exe-05e57a5e.pf 
SUPPRIME File: c:\windows\prefetch\fxssvc.exe-140862e7.pf 
SUPPRIME File: c:\windows\prefetch
vsvc32.exe-0756fc6b.pf 
SUPPRIME File: c:\windows\prefetch\searchindexer.exe-00db35db.pf 
SUPPRIME File: c:\windows\prefetch\sistray.exe-02982c96.pf 
SUPPRIME File: c:\windows\prefetch\wgatray.exe-350d4455.pf 
SUPPRIME File: c:\windows\prefetch\windowssearch.exe-297ad9ca.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-7295bd1f.pf 
SUPPRIME File: c:\windows\prefetch\9launch.exe-0853db87.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-4165b4cb.pf 
SUPPRIME File: c:\windows\prefetch\dw20.exe-31f7f56f.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-650f4f98.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-73bcfac7.pf 
SUPPRIME File: c:\windows\prefetch\fsviewer.exe-352e2eee.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-5cfadea8.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-3ed15490.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-5f785b5a.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-6e8d4657.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-43ef4f52.pf 
SUPPRIME File: c:\windows\prefetch\googlecrashhandler.exe-29cc6e6f.pf 
SUPPRIME File: c:\windows\prefetch\imapi.exe-201490bb.pf 
SUPPRIME File: c:\windows\prefetch
tosboot-b00dfaad.pf 
SUPPRIME File: c:\windows\prefetchegsvr32.exe-396dea2c.pf 
SUPPRIME File: c:\windows\prefetch\alg.exe-275708cf.pf 
SUPPRIME File: c:\windows\prefetch\wlcomm.exe-2f4516f1.pf 
SUPPRIME File: c:\windows\prefetch\wmiapsrv.exe-02740a4b.pf 
SUPPRIME File: c:\windows\prefetch\mpsigstub.exe-31d916dd.pf 
SUPPRIME File: c:\windows\prefetch\mscorsvw.exe-310bc412.pf 
SUPPRIME File: c:\windows\prefetch\googletoolbarmanager_4e7d715d-129baceb.pf 
SUPPRIME File: c:\windows\prefetch\googleupdateondemand.exe-1aa2b57f.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-70a27549.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-498f2891.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-4bc436b4.pf 
SUPPRIME File: c:\windows\prefetch\cfpupdat.exe-33654641.pf 
SUPPRIME File: c:\windows\prefetch\logmeintoolkit.exe-187e573a.pf 
SUPPRIME File: c:\windows\prefetch\logmeinsystray.exe-0d0e68bb.pf 
SUPPRIME File: c:\windows\prefetchamaint.exe-021cb2ee.pf 
SUPPRIME File: c:\windows\prefetch\logmein.exe-158f625c.pf 
SUPPRIME File: c:\windows\prefetch\wuauclt.exe-1360d60a.pf 
SUPPRIME File: c:\windows\prefetch\verclsid.exe-28f52ad2.pf 
SUPPRIME File: c:\windows\prefetch\googleupdate.exe-160e1f62.pf 
SUPPRIME File: c:\windows\prefetch\msnmsgr.exe-0ebdbc56.pf 
SUPPRIME File: c:\windows\prefetchealupgrade.exe-1cad92f6.pf 
SUPPRIME File: c:\windows\prefetchundll32.exe-408235d5.pf 
SUPPRIME File: c:\windows\prefetch\iexplore.exe-2d97ebe6.pf 
SUPPRIME Temporaires Windows: : 5 
SUPPRIME Flash Cookies: 4 

========== Autre ========== 
NON TRAITE OPT:O4 - HKLM\..\Run: [PHIME2002ASync] . (.Microsoft Corporation - ???????? 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe 


========== Récapitulatif ========== 
1 : Clé(s) du Registre 
8 : Valeur(s) du Registre 
3 : Dossier(s) 
115 : Fichier(s) 
1 : Autre 


End of clean in 00mn 12s 

========== Chemin de fichier rapport ========== 
C:\ZHP\ZHPFix[R1].txt - 06/10/2011 18:27:16 [2159] 
C:\ZHP\ZHPFix[R2].txt - 11/10/2011 18:36:14 [8076] 
C:\ZHP\ZHPFix[R3].txt - 16/10/2011 18:47:18 [8579]

Fish66 · Answer

Re,

Copie tout le texte présent en gras ci-dessous ( tu le selectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C ) 


OPT:O4 - HKLM\..\Run: [PHIME2002ASync] . (.Microsoft Corporation - ???????? 2002a.) -- C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.exe   




Puis Lance ZHPFix depuis le raccourci du bureau . 

* Une fois l'outil ZHPFix ouvert , clique sur le bouton [ H ] ( "coller les lignes Helper" ) . 

* Dans l'encadré principal tu verras donc les lignes que tu as copié précédemment apparaitrent . 

Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre. 

Clique sur le bouton  GO

Copie/Colle le rapport à l'écran dans ton prochain message.

===============================

As tu de souci avant de finaliser stp ?

@+

angedesenfers · Answer

Ca lui arrive d'être un peu lent. Mais rien de grave.
Le rapport devrais suivre bientôt.

angedesenfers · Answer

Rapport de ZHPFix 1.12.3363 par Nicolas Coolman, Update du 05/10/2011
Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-16-10-2011-21-00-09.txt
Run by wo-ow at 16/10/2011 21:00:09
Windows XP Home Edition Service Pack 3 (Build 2600)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Valeur(s) du Registre ==========
SUPPRIME RunValue: PHIME2002ASync


========== Récapitulatif ==========
1 : Valeur(s) du Registre


End of clean in 00mn 00s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 06/10/2011 18:27:16 [2159]
C:\ZHP\ZHPFix[R2].txt - 11/10/2011 18:36:14 [8076]
C:\ZHP\ZHPFix[R3].txt - 16/10/2011 17:47:20 [8631]
C:\ZHP\ZHPFix[R4].txt - 16/10/2011 21:00:09 [648]

Fish66 · Answer

Re, Mise à jour Adobe reader * Télécharge Adobe reader à partir :>>>>Ce lien<<<< en décochant la case : installer McAfee Security Scan Plus (facultatif) * Désinstalle ta version d'adobe par : ajout/suppression de programme * Exécute le fichier téléchargé pour installation en suivant les instructions. Mise à jour de Java: * Tu peux vérifier ta Console Java en cliquant sur ce lien :https://www.java.com/fr/download/uninstalltool.jsp * Installe la nouvelle version si besoin (dans ce cas désinstalle avant l'ancienne version). voici pour desinstaller JavaRa: * Télécharge ce fichier à partir ce lien : http://raproducts.org/click/click.php?id=1 * Décompresse JavaRa sur le Bureau (Clic droit > Extraire tout). * Double-clique (clic droit "en tant qu'administrateur" pour Vista) sur le répertoire JavaRa. * Puis double-clique sur le fichier JavaRa.exe (le exe peut ne pas s'afficher). * Choisis Français puis clique sur Select. * Clique sur Recherche de mises à jour. * Sélectionne Mettre à jour via jucheck.exe puis clique sur Rechercher. * Autorise le processus à se connecter s'il le demande, clique sur Installer et suis les instructions d'installation qui prennent quelques minutes. * L'installation est terminée, reviens à l'écran de JavaRa et clique sur Effacer les anciennes versions. * Clique sur Oui pour confirmer. Laisse travailler et clique ensuite sur OK, puis une deuxième fois sur OK. * Un rapport va s'ouvrir. Poste-le dans ta prochaine réponse. * Ferme l'application. Note : le rapport se trouve aussi dans C:\ sous le nom JavaRa.log. =========================================== Updatechecker : Téléchage updatechecker pour t'indiquer les logiciels qui ne sont pas à jour et te permet aussi d'effectuer ces mises à jour =========================================== PurRa (éditeur de JavaRa) : Telecharge ici : PureRa (par l'editeur de JavaRa) Lance-le (clic droit "executer en tant qu'administrateur" pour Vista/7) => Configuration clique sur "Clean" L'outil va faire son scan puis son nettoyage à la fin du rapport tu auras une ligne comme ca : Total space cleaned: xxxxxxxx bytes transmets juste cette ligne . =========================================== **Nettoyage Suppression des outils de désinfections: * Télécharge Delfix sur ton bureau. * Lance le, tape suppression puis valide * Patiente pendant le scan jusqu'à l'ouverture du rapport. * Copie/Colle le contenu du rapport dans ta prochaine réponse. Note : Le rapport se trouve également sous C:\DelFix.txt * Tu peux le desinstaller =========================================== Nettoyage des fichiers et des clés de registre : * Télécharge et installe CCleaner version Slim * Lance-le.(clic droit "en tant qu'administrateur" pour Vista et Seven) Va dans Options puis * Avancé et décoche la case Effacer uniquement les fichiers etc.... * Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage. * Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs tant de fois qu il en trouve a l analyse . ** Aide ici : https://www.malekal.com/tutoriel-ccleaner/ Tu peux utiliser Ccleaner une fois par semaine =========================================== Purger les points de restauration système: * Désactive et réactive la restauration de système en suivant les procédures indiquées dans ces liens : Windows XP Windows Vista Windows 7 * Après avoir vidé la restauration du système, il est nécessaire de créer un nouveau point de restauration ... =========================================== Conseils : 1/ Je te conseille d'utiliser le navigateur Firefox et d'installer les modules complémentaires WOT pour t'indiquer les fichiers douteux et Adblock plus pour bloquer les publicités... 2/ Aussi tu peux garder Malwarebytes et l'utiliser aussi une fois par semaine. 3/ Un peu de lecture : * Les dangers du Peer-To-Peer, Emule etc.. * Comment Sécuriser son ordinateur... *Pourquoi et comment je me fais infecter 4/ Défragmente tes disques dur par defraggler

angedesenfers · Answer

Ok cela va bientôt arriver...

Pour la carte graphique, comment je fais ? Je poste dans un autre sujet ? Ou alors je réinstalle les drivers ?

Fish66 · Answer

Salut, Pour la vérification des drivers, tu peux suivre les procédures indiquées >>>ICI<<< @+

angedesenfers · Answer

JavaRa 1.16 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Sat May 14 19:32:24 2011

Found and removed: C:\Program Files\Java\jre1.5.0_05

Found and removed: C:\Program Files\Java\jre1.6.0_04

Found and removed: C:\Program Files\Java\jre1.6.0_07

Found and removed: C:\Documents and Settings\wo-ow\Application Data\Sun\Java\jre1.6.0_04

Found and removed: C:\Documents and Settings\wo-ow\Application Data\Sun\Java\jre1.6.0_11

Found and removed: C:\Documents and Settings\wo-ow\Application Data\Sun\Java\jre1.6.0_21

Found and removed: C:\Documents and Settings\wo-ow\Application Data\Sun\Java\jre1.6.0_22

Found and removed: Applications\java.exe

Found and removed: Applications\javaw.exe

Found and removed: JavaPlugin.FamilyVersionSupport

Found and removed: Installer\Products\8A0F842331866D117AB7000B0D610007

Found and removed: CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}

Found and removed: JavaScript

Found and removed: JavaScript Author

Found and removed: JavaScript1.1

Found and removed: JavaScript1.1 Author

Found and removed: JavaScript1.2

Found and removed: JavaScript1.2 Author

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}

Found and removed: Software\Classes\JavaPlugin.150_05

Found and removed: Software\Classes\JavaPlugin.160_04

Found and removed: Software\Classes\JavaPlugin.160_07

Found and removed: Software\Classes\JavaPlugin.160_24

Found and removed: Software\JavaSoft\Java Update

Found and removed: Software\JavaSoft\Java2D\1.5.0_05

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}

Found and removed: SOFTWARE\Classes\JavaPlugin

Found and removed: SOFTWARE\Classes\JavaPlugin.150_05

Found and removed: SOFTWARE\Classes\JavaPlugin.160_04

Found and removed: SOFTWARE\Classes\JavaPlugin.160_07

Found and removed: SOFTWARE\Classes\JavaPlugin.160_24

Found and removed: SOFTWARE\Classes\JavaWebStart.isInstalled.1.5.0.0

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_05

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_04

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_07

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_24

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_05

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_04

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_07

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_24

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.5.0_05

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_07

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_24

Found and removed: SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Java\jre1.5.0_05\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Java\jre1.6.0_04\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Java\jre1.6.0_07\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\JRE\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3412062B02

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3612062B02

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10}

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1.2

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1.3

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.2

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.2.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.3

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.3.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.4

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.4.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.4.2

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.5

JavaRa 1.16 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Sat Oct 15 17:49:00 2011

JavaRa 1.16 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Sat Oct 15 17:49:33 2011

JavaRa 1.16 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Tue Oct 18 19:19:33 2011

Found and removed: C:\Program Files\Java\jre6

Found and removed: C:\Documents and Settings\wo-ow\Application Data\Sun\Java\jre1.6.0_24

Found and removed: Applications\java.exe

Found and removed: Applications\javaw.exe

Found and removed: JavaPlugin.FamilyVersionSupport

Found and removed: CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}

Found and removed: JavaScript

Found and removed: JavaScript Author

Found and removed: JavaScript1.1

Found and removed: JavaScript1.1 Author

Found and removed: JavaScript1.2

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}

Found and removed: Software\JavaSoft\Java Update

Found and removed: SOFTWARE\Classes\JavaPlugin

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10}

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1.2

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1.3

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.2

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.2.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.3

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.3.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.4

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.4.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.4.2

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.5

------------------------------------

Finished reporting.

angedesenfers · Answer

341258317 bytes

angedesenfers · Answer

# DelFix v8.6 - Rapport créé le 18/10/2011 à 19:36:25
# Mis à jour le 13/10/11 à 18h par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
# Nom d'utilisateur : wo-ow - ACER-FE8B363750 (Administrateur)
# Exécuté depuis : C:\Documents and Settings\wo-ow\Local Settings\Temporary Internet Files\Content.IE5\EV8OOKZF\delfix[1].exe
# Option [Suppression]


~~~~~~ Dossiers(s) ~~~~~~

Supprimé : C:\Qoobox
Supprimé : C:\_OTM
Supprimé : C:\Combofix
Supprimé : C:\ZHP
Supprimé : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ZHP
Supprimé : C:\Documents and Settings\wo-ow\Bureau\RK_Quarantine
Supprimé : C:\Program Files\Ad-Remover
Supprimé : C:\Program Files\ZHPDiag

~~~~~~ Fichier(s) ~~~~~~

Supprimé : C:\ComboFix.txt
Supprimé : C:\PhysicalDisk0_MBR.bin
Supprimé : C:\AdwCleaner[S1].txt
Supprimé : C:\JavaRa.log
Supprimé : C:\Documents and Settings\wo-ow\Bureau\ComboFix.exe
Supprimé : C:\Documents and Settings\wo-ow\Bureau\RogueKiller.exe
Supprimé : C:\Documents and Settings\wo-ow\Bureau\OTM.exe
Supprimé : C:\Documents and Settings\wo-ow\Bureau\ZHPFixReport.txt
Supprimé : C:\Documents and Settings\All Users\Bureau\ZHPDiag.lnk
Supprimé : C:\Documents and Settings\All Users\Bureau\ZHPFix.lnk
Supprimé : C:\Documents and Settings\All Users\Bureau\MBRCheck.lnk
Supprimé : C:\WINDOWS\grep.exe
Supprimé : C:\WINDOWS\PEV.exe
Supprimé : C:\WINDOWS\NIRCMD.exe
Supprimé : C:\WINDOWS\MBR.exe
Supprimé : C:\WINDOWS\SED.exe
Supprimé : C:\WINDOWS\SWREG.exe
Supprimé : C:\WINDOWS\SWSC.exe
Supprimé : C:\WINDOWS\SWXCACLS.exe
Supprimé : C:\WINDOWS\Zip.exe

~~~~~~ Registre ~~~~~~

Clé Supprimée : HKCU\Software\Ad-Remover
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\ZHP
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ad-Remover
Clé Supprimée : HKLM\SOFTWARE\OldTimer Tools
Clé Supprimée : HKLM\SOFTWARE\AdwCleaner
Clé Supprimée : HKLM\SOFTWARE\Swearware
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe

~~~~~~ Autres ~~~~~~

-> Prefetch Vidé

*************************

DelFix[S1].txt - [2269 octets] - [18/10/2011 19:36:25]

########## EOF - C:\DelFix[S1].txt - [2393 octets] ##########

Fish66 · Answer

Re,

Bon surf et si tu n'as pas de souci pense à mettre ton sujet comme résolu

@+

angedesenfers · Answer

oki.

Enormes ralentissements et gros bugs

42 réponses

Votre réponse

Discussions similaires