Virus ou pas sur mon ordi? Résolu/Fermé

Question

Bonjour, à tous!

J'ai depuis quelques semaines des problèmes avec mon ordinateur. Il rame à MORT!!! à certains moments de la journée surtout le soir (je ne sais pas si ça a un rapport). Très long au démarrage et à l'éteignage...il ne supporte pas du tout l'ouverture ou le passage d'une session à une autre. J'ai la wi-fi qui marche très bien. Je nettoie régulièrement l'ordi avec CCleaner, Spybot, Malwarbyte's anti-malware...Il lui arrive aussi e ne pas vouloir s'éteindre...bref la loose...
Quelqu'un peut il me dire ce que je dois faire et me donner un coup de main?
Merci d'avance pour vos réponses!

Utilisateur anonyme · Answer

Bonsoir

Inscris toi avant tout ,sinon je ne pourrais lire ce rapport demandé. 

Pour de plus amples informations, fait ceci stp

Ouvre ce lien et télécharge ZHPDiag de Nicolas Coolman : 

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

Ou

https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

Serveur N°2

Ou

http://www.premiumorange.com/zeb-help-process/zhpdiag.html 
en bas de la page ZHP avec un numéro de version.
 
Une fois le téléchargement achevé, dé zippe le fichier obtenu et place ZHPDiag.exe sur ton Bureau.

Double-clique sur l'icône pour lancer le programme. Sous Vista ou Seven clic droit «  exécuter en tant que administrateur »


Clique sur la loupe pour lancer l'analyse.

Laisse l'outil travailler, il peut être assez long. 

Ferme ZHPDiag en fin d'analyse. 


Pour transmettre le rapport clique sur ce lien : 

http://www.cijoint.fr/index.php

http://pjjoint.malekal.com/

Clique sur Parcourir et cherche le répertoire où est installé ZHPDiag (en général C:\Program Files\ZHPDiag). 

Sélectionne le fichier ZHPDiag.txt. 

Clique sur "Cliquez ici pour déposer le fichier". 

Un lien de cette forme : 

http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt 

est ajouté dans la page. 

Copie ce lien dans ta réponse.

Merci

A+

Olivette84 · Answer

Bonjour,

Merci pour tout ca!
J'ai fais l'analyse mais j'ai ZHProotkit.txt ou ZHPscan.txt
Je sélectionne le 2ème?
Et en faisant ça tout le monde peut voir tout ce qui a dans mon ordi non?

Utilisateur anonyme · Answer

Bonjour

Il y a également un fichier ZHPDiag.txt.
C'est celui là que je veux voir.
Poste le via ci-joint;merci.


@+

Olivette84 · Answer

Bonjour,

Je l'ai trouvé! il était sur mon bureau...

http://www.cijoint.fr/cjlink.php?file=cj201110/cijtcN0rJr.txt

Merci de ton aide

Utilisateur anonyme · Answer

Re


1) # Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. 
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. 
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus. 


Télécharge et installe UsbFix de El Desaparecido , C_XX & Chimay8
Ici :  http://eldesaparecido.com/tools/UsbFix.exe

Tutoriel de Malekal_Morte si besoin, merci à lui : https://www.malekal.com/usbfix-supprimer-virus-usb/ 

 Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d avoir été infectés sans les ouvrir 


# Double clic sur le raccourci UsbFix présent sur ton bureau. 

# Choisi   Suppression  

# Laisse travailler l outil. 

# Ensuite post le rapport UsbFix.txt qui apparaîtra. 

# Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. (C:\UsbFix.txt) 

(CTRL+A Pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)



2)* Télécharge Ad-remover ( de C_XX ) sur ton bureau : 

http://www.teamxscript.org/adremoverTelechargement.html

! Déconnecte toi et ferme toutes applications en cours ! 

* Double clique ou clic droit (exécuter en tant que admin...sur Vista et Windows7)  sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut. 

* Double-clique ou clic droit (exécuter en tant que admin...sur Vista et Windows 7) sur le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .
 
* Au menu principal choisis l'option  "Nettoyer"
  et sur [entrée]  .

* Laisse travailler l'outil et ne touche à rien ... 

--> Poste le rapport qui apparaît à la fin , sur le forum ...

( Le rapport est sauvegardé aussi sous C:\Ad-report.log ) 
( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller ) 

Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. 
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. 
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus. 


Les toolbars, c'est pas obligatoire ( par Malekal ) :https://forum.malekal.com/viewtopic.php?t=6173&start=



Poste moi les rapports au fur et à mesure;merci.

@+

Olivette84 · Answer

Rapport USBFix : 

############################## | UsbFix V 7.061 | [Suppression]

Utilisateur: Olive (Administrateur) # FIALON
Mis à jour le 05/10/2011 par El Desaparecido
Lancé à 11:11:36 | 08/10/2011

Site Web: https://www.sosvirus.net/
Fichier suspect ? : http://eldesaparecido.com/support.php
Contact: contact@eldesaparecido.com

PC: Compaq Presario 061 (EV958AA-ABF SR1804FR FR620) (X86-based PC) # Desktop Computer
CPU: AMD Athlon(tm) 64 Processor 3200+ (1989)
RAM -> [ Total : 958 | Free : 87 ]
BIOS: Phoenix - Award BIOS v6.00PG
BOOT: Normal boot

OS: Microsoft Windows XP Édition familiale (5.1.2600 32-Bit) # Service Pack 3
WB: Windows Internet Explorer 8.0.6001.18702

SC: Security Center Service [ Enabled ]
WU: Windows Update Service [ Enabled ]
FW: Windows FireWall Service [ Enabled ]

C:\ (%systemdrive%) -> Disque fixe # 181 Go (126 Go libre(s) - 69%) [PRESARIO] # NTFS
D:\ -> Disque fixe # 5 Go (435 Mo libre(s) - 8%) [PRESARIO_RP] # FAT32
E:\ -> CD-ROM
J:\ -> Disque amovible # 967 Mo (2 Mo libre(s) - 0%) [] # FAT

################## | Processus Actif |

C:\WINDOWS\System32\smss.exe (856)
C:\WINDOWS\system32\winlogon.exe (1268)
C:\WINDOWS\system32\services.exe (1312)
C:\WINDOWS\system32\lsass.exe (1328)
C:\Program Files\Emsisoft Anti-Malware\a2service.exe (1496)
C:\WINDOWS\system32\Ati2evxx.exe (1596)
C:\WINDOWS\system32\svchost.exe (1620)
C:\WINDOWS\System32\svchost.exe (1816)
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (664)
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (716)
C:\WINDOWS\system32\Ati2evxx.exe (1848)
C:\WINDOWS\Explorer.EXE (356)
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe (912)
C:\Program Files\Alwil Software\Avast5\avastUI.exe (940)
C:\Program Files\iTunes\iTunesHelper.exe (1000)
C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe (1016)
C:\WINDOWS\system32undll32.exe (960)
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (1020)
C:\PROGRA~1\Nero\NEROPH~1\data\xtras\mssysmgr.exe (1040)
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe (1060)
C:\WINDOWS\system32\ctfmon.exe (1760)
C:\WINDOWS\system32\spoolsv.exe (1984)
C:\Program Files\TRENDnet\TEW-648UB\WlanCU.exe (2636)
C:\Program Files\Micro Application\LauncherMA.exe (2748)
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE (2836)
c:\program files\a-squared free\a2service.exe (2848)
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe (2888)
C:\Program Files\Bonjour\mDNSResponder.exe (2924)
C:\WINDOWS\system32\drivers\CDAC11BA.EXE (3136)
C:\WINDOWS\system32\E_S00RP1.EXE (3188)
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe (3212)
C:\Program Files\Java\jre6\bin\jqs.exe (3252)
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe (3324)
C:\Program Files\CyberLink\Shared files\RichVideo.exe (3404)
C:\WINDOWS\system32\svchost.exe (3580)
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe (564)
C:\Program Files\iPod\bin\iPodService.exe (2172)
C:\WINDOWS\system32\wbem\wmiapsrv.exe (2372)
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe (3788)
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (4020)
C:\Program Files\Mozilla Firefox\firefox.exe (3772)
C:\Program Files\Windows Live\Contacts\wlcomm.exe (2088)
C:\Program Files\Fichiers communs\Java\Java Update\jucheck.exe (2676)
C:\Program Files\Mozilla Firefox\plugin-container.exe (2556)
C:\Documents and Settings\Olive\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (420)
C:\Documents and Settings\Olive\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (980)
C:\Documents and Settings\Olive\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (1068)
C:\UsbFix\Go.exe (2444)

################## | Processus Stoppés |

Stoppé! C:\Program Files\Emsisoft Anti-Malware\a2service.exe (1496)
Stoppé! C:\WINDOWS\system32\Ati2evxx.exe (1596)
Stoppé! C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (664)
Stoppé! C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (716)
Stoppé! C:\WINDOWS\system32\Ati2evxx.exe (1848)
Stoppé! C:\WINDOWS\Explorer.EXE (356)
Stoppé! C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe (912)
Stoppé! C:\Program Files\Alwil Software\Avast5\avastUI.exe (940)
Stoppé! C:\Program Files\iTunes\iTunesHelper.exe (1000)
Stoppé! C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe (1016)
Stoppé! C:\WINDOWS\system32undll32.exe (960)
Stoppé! C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (1020)
Stoppé! C:\PROGRA~1\Nero\NEROPH~1\data\xtras\mssysmgr.exe (1040)
Stoppé! C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe (1060)
Stoppé! C:\WINDOWS\system32\ctfmon.exe (1760)
Stoppé! C:\WINDOWS\system32\spoolsv.exe (1984)
Stoppé! C:\Program Files\TRENDnet\TEW-648UB\WlanCU.exe (2636)
Stoppé! C:\Program Files\Micro Application\LauncherMA.exe (2748)
Stoppé! C:\Program Files\SUPERAntiSpyware\SASCORE.EXE (2836)
Stoppé! c:\program files\a-squared free\a2service.exe (2848)
Stoppé! C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe (2888)
Stoppé! C:\Program Files\Bonjour\mDNSResponder.exe (2924)
Stoppé! C:\WINDOWS\system32\drivers\CDAC11BA.EXE (3136)
Stoppé! C:\WINDOWS\system32\E_S00RP1.EXE (3188)
Stoppé! C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe (3212)
Stoppé! C:\Program Files\Java\jre6\bin\jqs.exe (3252)
Stoppé! C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe (3324)
Stoppé! C:\Program Files\CyberLink\Shared files\RichVideo.exe (3404)
Stoppé! C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe (564)
Stoppé! C:\Program Files\iPod\bin\iPodService.exe (2172)
Stoppé! C:\WINDOWS\system32\wbem\wmiapsrv.exe (2372)
Stoppé! C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe (3788)
Stoppé! C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (4020)
Stoppé! C:\Program Files\Mozilla Firefox\firefox.exe (3772)
Stoppé! C:\Program Files\Windows Live\Contacts\wlcomm.exe (2088)
Stoppé! C:\Program Files\Fichiers communs\Java\Java Update\jucheck.exe (2676)
Stoppé! C:\Program Files\Mozilla Firefox\plugin-container.exe (2556)
Stoppé! C:\Documents and Settings\Olive\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (420)
Stoppé! C:\Documents and Settings\Olive\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (980)
Stoppé! C:\Documents and Settings\Olive\Local Settings\Application Data\Google\Chrome\Application\chrome.exe (1068)

################## | Éléments infectieux |

Supprimé! C:\Documents and Settings\Olive\Application Data\ezpinst.exe
Supprimé! C:\Documents and Settings\Olive\Application Data\Facebook
Supprimé! C:\WINDOWS\system32	empBatFile.bat
Supprimé! C:\WINDOWS\fonts\RandFont.dll
Supprimé! C:\Recycler\S-1-5-21-1538752516-3890874188-122093788-1008
Supprimé! C:\Recycler\S-1-5-21-1538752516-3890874188-122093788-1009
Supprimé! D:\IP.exe

(!) Fichiers temporaires supprimés.

################## | Registre |

Supprimé! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools
Supprimé! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableTaskMgr

################## | Mountpoints2 |

Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{a9402a24-1909-11dd-9fe4-0013d3fcc4d2}

################## | Listing |

[15/11/2006 - 16:06:08 | D ] 	C:\23f413e5982018f591fb5712
[09/08/2009 - 23:30:42 | D ] 	C:\36c165b96c94c6e221ddaed4b70da3
[13/01/2010 - 23:46:52 | D ] 	C:\42e2e90e875ea33354aa59
[08/10/2011 - 10:23:31 | N | 208200] 	C:\aaw7boot.log
[08/02/2008 - 17:49:18 | D ] 	C:\Age Of Empires II
[07/10/2011 - 15:36:03 | N | 0] 	C:\AILog.txt
[23/11/2004 - 16:21:48 | N | 0] 	C:\AUTOEXEC.BAT
[21/07/2006 - 17:17:15 | N | 298] 	C:\boot.ini
[04/08/2004 - 23:00:00 | N | 4952] 	C:\Bootfont.bin
[21/07/2006 - 17:17:12 | D ] 	C:\cmdcons
[04/08/2004 - 23:00:00 | N | 263488] 	C:\cmldr
[03/10/2011 - 18:17:36 | D ] 	C:\ComboFix
[03/10/2011 - 18:04:58 | D ] 	C:\Config.Msi
[23/11/2004 - 16:21:48 | N | 0] 	C:\CONFIG.SYS
[22/07/2006 - 11:39:24 | D ] 	C:\Documents and Settings
[13/10/2009 - 11:25:34 | D ] 	C:\Données Ciel
[15/02/2011 - 15:32:39 | D ] 	C:\Downloads
[17/11/2008 - 12:16:18 | D ] 	C:\games
[08/10/2011 - 10:23:35 | ASH | 1005113344] 	C:\hiberfil.sys
[06/08/2010 - 14:08:52 | D ] 	C:\hp
[06/08/2007 - 21:01:18 | D ] 	C:\InformatikReformat
[23/10/2009 - 11:49:24 | N | 192] 	C:\InstallHelper.log
[23/11/2004 - 16:21:48 | N | 0] 	C:\IO.SYS
[29/08/2006 - 10:28:40 | N | 321] 	C:\IPH.PH
[23/11/2004 - 16:21:48 | N | 0] 	C:\MSDOS.SYS
[26/10/2007 - 12:26:21 | D ] 	C:\Multimedia Files
[04/08/2004 - 23:00:00 | N | 47564] 	C:\NTDETECT.COM
[05/09/2008 - 12:16:22 | N | 252240] 	C:
tldr
[08/10/2011 - 10:23:31 | ASH | 1509949440] 	C:\pagefile.sys
[07/10/2011 - 19:21:59 | N | 512] 	C:\PhysicalDisk0_MBR.bin
[07/10/2011 - 19:05:25 | D ] 	C:\Program Files
[20/03/2009 - 15:35:19 | D ] 	C:\Python22
[10/04/2008 - 21:28:22 | D ] 	C:\QooBox
[21/02/2007 - 20:56:14 | N | 1880] 	C:apport.txt
[21/02/2007 - 20:58:13 | N | 648] 	C:apport_clean.txt
[08/10/2011 - 11:17:41 | SHD ] 	C:\RECYCLER
[06/08/2010 - 14:31:43 | N | 6904] 	C:esetlog.txt
[20/09/2006 - 22:18:10 | D ] 	C:\SIMTOWER
[17/09/2009 - 15:16:56 | N | 232] 	C:\sqmdata00.sqm
[17/09/2009 - 19:56:24 | N | 232] 	C:\sqmdata01.sqm
[17/09/2009 - 23:19:30 | N | 232] 	C:\sqmdata02.sqm
[18/09/2009 - 10:03:21 | N | 232] 	C:\sqmdata03.sqm
[18/09/2009 - 12:53:40 | N | 232] 	C:\sqmdata04.sqm
[18/09/2009 - 19:40:54 | N | 232] 	C:\sqmdata05.sqm
[04/10/2009 - 16:04:51 | N | 232] 	C:\sqmdata06.sqm
[18/10/2009 - 20:01:13 | N | 232] 	C:\sqmdata07.sqm
[18/10/2009 - 21:30:36 | N | 232] 	C:\sqmdata08.sqm
[19/10/2009 - 13:30:23 | N | 232] 	C:\sqmdata09.sqm
[19/10/2009 - 14:38:41 | N | 232] 	C:\sqmdata10.sqm
[19/10/2009 - 16:55:10 | N | 232] 	C:\sqmdata11.sqm
[19/10/2009 - 20:01:20 | N | 232] 	C:\sqmdata12.sqm
[08/04/2008 - 19:24:05 | N | 232] 	C:\sqmdata13.sqm
[09/04/2008 - 13:30:22 | N | 232] 	C:\sqmdata14.sqm
[10/05/2009 - 17:24:08 | N | 232] 	C:\sqmdata15.sqm
[10/05/2009 - 19:32:56 | N | 232] 	C:\sqmdata16.sqm
[18/08/2009 - 13:48:20 | N | 232] 	C:\sqmdata17.sqm
[18/08/2009 - 14:33:30 | N | 232] 	C:\sqmdata18.sqm
[16/09/2009 - 13:10:05 | N | 232] 	C:\sqmdata19.sqm
[17/09/2009 - 15:16:56 | N | 244] 	C:\sqmnoopt00.sqm
[17/09/2009 - 19:56:24 | N | 244] 	C:\sqmnoopt01.sqm
[17/09/2009 - 23:19:30 | N | 244] 	C:\sqmnoopt02.sqm
[18/09/2009 - 10:03:21 | N | 244] 	C:\sqmnoopt03.sqm
[18/09/2009 - 12:53:40 | N | 244] 	C:\sqmnoopt04.sqm
[18/09/2009 - 19:40:54 | N | 244] 	C:\sqmnoopt05.sqm
[04/10/2009 - 16:04:51 | N | 244] 	C:\sqmnoopt06.sqm
[18/10/2009 - 20:01:12 | N | 244] 	C:\sqmnoopt07.sqm
[18/10/2009 - 21:30:35 | N | 244] 	C:\sqmnoopt08.sqm
[19/10/2009 - 13:30:23 | N | 244] 	C:\sqmnoopt09.sqm
[19/10/2009 - 14:38:40 | N | 244] 	C:\sqmnoopt10.sqm
[19/10/2009 - 16:55:10 | N | 244] 	C:\sqmnoopt11.sqm
[19/10/2009 - 20:01:20 | N | 244] 	C:\sqmnoopt12.sqm
[08/04/2008 - 19:24:05 | N | 244] 	C:\sqmnoopt13.sqm
[09/04/2008 - 13:30:22 | N | 244] 	C:\sqmnoopt14.sqm
[10/05/2009 - 17:24:08 | N | 244] 	C:\sqmnoopt15.sqm
[10/05/2009 - 19:32:56 | N | 244] 	C:\sqmnoopt16.sqm
[18/08/2009 - 13:48:20 | N | 244] 	C:\sqmnoopt17.sqm
[18/08/2009 - 14:33:30 | N | 244] 	C:\sqmnoopt18.sqm
[16/09/2009 - 13:10:05 | N | 244] 	C:\sqmnoopt19.sqm
[28/08/2008 - 20:35:02 | N | 230432] 	C:\StiImg.dat
[31/10/2005 - 17:56:00 | N | 700416] 	C:\StubInstaller.exe
[21/07/2006 - 16:00:11 | SHD ] 	C:\System Volume Information
[01/01/2005 - 20:04:16 | D ] 	C:\system.sav
[13/11/2008 - 14:53:28 | D ] 	C:	emp
[24/05/2001 - 12:59:30 | N | 162304] 	C:\UNWISE.EXE
[08/10/2011 - 11:17:41 | D ] 	C:\UsbFix
[08/10/2011 - 11:19:30 | A | 7259] 	C:\UsbFix.txt
[08/10/2011 - 10:25:11 | D ] 	C:\WINDOWS
[12/04/2007 - 18:16:27 | D ] 	C:\XSDEMO
[07/10/2011 - 19:21:28 | D ] 	C:\ZHP
[15/07/2011 - 15:37:15 | D ] 	C:\Zylom Games
[27/07/2001 - 15:07:38 | N | 0] 	D:\AUTOEXEC.BAT
[09/01/2002 - 18:52:30 | N | 244] 	D:\BOOT.INI
[10/12/2005 - 03:00:14 | D ] 	D:\cmdcons
[16/08/2001 - 18:26:26 | N | 237728] 	D:\CMLDR
[28/07/2001 - 06:07:38 | N | 0] 	D:\CONFIG.SYS
[25/05/2005 - 03:48:26 | SH | 102] 	D:\Desktop.ini
[10/09/2002 - 09:21:08 | N | 7850] 	D:\Folder.htt
[17/06/2001 - 16:31:08 | N | 0] 	D:\GRAPH
[25/01/2002 - 09:21:24 | N | 0] 	D:\GRAPH16
[30/11/2004 - 04:01:50 | N | 73728] 	D:\Info.exe
[28/07/2001 - 06:07:38 | N | 0] 	D:\IO.SYS
[19/01/2006 - 08:06:14 | D ] 	D:\MiniNT
[28/07/2001 - 06:07:38 | N | 0] 	D:\MSDOS.SYS
[25/07/2001 - 22:00:00 | N | 45124] 	D:\NTDETECT.COM
[17/12/2007 - 20:37:12 | D ] 	D:\WINSETUP
[25/07/2001 - 22:00:00 | N | 222880] 	D:\NTLDR
[10/12/2005 - 06:02:48 | D ] 	D:\PRELOAD
[03/03/2003 - 05:46:06 | N | 111377] 	D:\protect.ed
[01/01/2005 - 12:58:48 | N | 36] 	D:\SAVEFILE.DIR
[17/12/2007 - 20:37:12 | D ] 	D:\ardata
[03/03/2003 - 05:41:48 | N | 88038] 	D:\Warning.bmp
[01/01/2005 - 12:59:28 | D ] 	D:\I386
[01/01/2005 - 13:02:44 | D ] 	D:\HP
[01/01/2005 - 13:03:56 | D ] 	D:\TOOLS
[30/07/2006 - 09:35:12 | N | 978] 	D:\MASTER.LOG
[17/08/2001 - 07:32:24 | N | 0] 	D:\NTFS
[23/05/2001 - 20:19:06 | N | 0] 	D:\SVGA
[18/08/2001 - 07:00:00 | N | 10] 	D:\WIN51
[22/01/2001 - 06:00:00 | N | 11] 	D:\WIN51.B2
[25/07/2001 - 07:00:00 | N | 11] 	D:\WIN51.RC1
[25/07/2001 - 12:47:04 | N | 11] 	D:\WIN51.RC2
[18/08/2001 - 07:00:00 | N | 10] 	D:\WIN51IC
[20/03/2001 - 06:00:00 | N | 11] 	D:\WIN51IC.B2
[25/07/2001 - 07:00:00 | N | 11] 	D:\WIN51IC.RC1
[25/07/2001 - 07:00:00 | N | 11] 	D:\WIN51IC.RC2
[17/08/2001 - 07:00:00 | N | 10] 	D:\WIN51IP
[22/01/2001 - 06:00:00 | N | 11] 	D:\WIN51IP.B2
[25/07/2001 - 12:47:04 | N | 11] 	D:\WIN51IP.RC2
[17/08/2001 - 05:17:02 | N | 184] 	D:\WINBOM.INI
[01/01/2005 - 13:20:08 | N | 6] 	D:\BLOCK.RIN
[17/12/2007 - 20:37:12 | D ] 	D:\DOSSETUP
[17/12/2007 - 20:37:12 | D ] 	D:\edocs
[01/01/2005 - 13:20:42 | N | 938] 	D:\USER
[01/01/2005 - 13:23:30 | D ] 	D:\Réinstallation Système
[01/11/2006 - 17:12:54 | D ] 	D:\HP Photosmart Premier Backups
[17/12/2007 - 20:37:12 | D ] 	D:\ereg
[17/12/2007 - 20:37:12 | D ] 	D:\gateway
[01/02/2006 - 01:59:58 | N | 1552] 	D:\BATCH.LOG
[17/12/2007 - 20:37:12 | D ] 	D:\HOSP
[21/07/2006 - 16:13:26 | SHD ] 	D:\System Volume Information
[17/12/2007 - 20:37:12 | D ] 	D:\Patch
[17/12/2007 - 20:37:12 | D ] 	D:\REDIST
[17/12/2007 - 20:37:12 | D ] 	D:\acrowin
[12/11/1997 - 01:10:00 | N | 150016] 	D:\automenu.exe
[20/07/1998 - 15:06:54 | N | 2789] 	D:\automenu.ini
[29/01/1997 - 14:35:22 | N | 26624] 	D:\AUTOSET.EXE
[01/05/1995 - 11:01:06 | N | 3] 	D:\DISK1.ID
[22/07/2006 - 12:20:16 | SHD ] 	D:\Recycled
[23/07/2006 - 10:30:18 | N | 26] 	D:\RCBoot.sys
[30/07/2006 - 11:12:36 | N | 22] 	D:\HPCD.sys
[31/05/1994 - 22:00:32 | N | 265396] 	D:\DOS4GW.EXE
[13/07/1998 - 18:31:18 | N | 8628] 	D:\eahelp.GID
[04/09/1997 - 08:45:06 | N | 306607] 	D:\EAHELP.HLP
[30/06/1998 - 12:59:48 | N | 7078] 	D:\hospital.ico
[13/07/1998 - 18:34:22 | N | 121] 	D:\IP.CFG
[23/07/1998 - 13:49:50 | N | 720] 	D:\Readme.txt
[29/01/1997 - 15:10:20 | N | 26112] 	D:\SETUP.EXE
[04/10/2011 - 15:12:14 | D ] 	J:\Septembre 2011 Disneyland Paris

################## | Vaccin |

C:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
J:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

################## | Upload |

Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_FIALON.zip
http://eldesaparecido.com/support.php
Merci de votre contribution.

################## | E.O.F |

Olivette84 · Answer

Rapport Ad-Report:

======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 11:26:24 le 08/10/2011, Mode normal

Microsoft Windows XP Édition familiale Service Pack 3 (X86) 
Olive@FIALON ( ) 
 
============== ACTION(S) ==============


Fichier supprimé: C:\Program Files\Mozilla FireFox\Components\AskSearch.js
Fichier supprimé: C:\Documents and Settings\Olive\Application Data\Mozilla\FireFox\Profiles\6p4fw7gg.default\searchplugins\ask.xml
Dossier supprimé: C:\Program Files\AskSearch
Dossier supprimé: C:\Documents and Settings\Olive\Application Data\Toolbar4
Dossier supprimé: C:\Documents and Settings\Compaq_Propriétaire\Application Data\Toolbar4
Dossier supprimé: C:\Documents and Settings\All Users\Application Data\Trymedia

(!) -- Fichiers temporaires supprimés.


-- Fichier ouvert: C:\Documents and Settings\Olive\Application Data\Mozilla\FireFox\Profiles\6p4fw7gg.default\Prefs.js --
Ligne supprimée: user_pref("browser.search.defaultenginename", "Ask"); 
Ligne supprimée: user_pref("browser.search.order.1", "Ask"); 
Ligne supprimée: user_pref("extensions.snipit.chromeURL", "hxxp://toolbar.ask.com/toolbarv/askRedirect?o=101699&gct=&... 
-- Fichier Fermé --
 

Clé supprimée: HKLM\Software\Classes\Interface\{6E4C89CF-3061-4EE4-B22A-B7A8AAEA5CB3}
Clé supprimée: HKLM\Software\AskBarDis
Clé supprimée: HKLM\Software\Conduit
Clé supprimée: HKLM\Software\Trymedia Systems
Clé supprimée: HKCU\Software\PartyGaming
Clé supprimée: HKCU\Software\PopCap
Clé supprimée: HKCU\Software\AppDataLow\AskSA
Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}

Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{CA3EB689-8F09-4026-AA10-B9534C691CE0}
Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{C94E154B-1459-4A47-966B-4B843BEFC7DB}


============== SCAN ADDITIONNEL ==============

**** Mozilla Firefox Version [7.0.1 (fr)] ****

Plugins\MannequinPlayer2.dll (VB2S)
Plugins
pFoxitReaderPlugin.dll (Foxit Software Company)
Plugins
predoute.dll (?)
Plugins
psnapfish.dll ( )
HKLM_MozillaPlugins\@zylom.com/ZylomGamesPlayer (x)
HKLM_MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1 (x)
Searchplugins\bing.xml (    hxxp://www.bing.com/search)
Components\browsercomps.dll (Mozilla Foundation)
Extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} (Skype extension		)

-- C:\Documents and Settings\Olive\Application Data\Mozilla\FireFox\Profiles\6p4fw7gg.default --
Extensions\2020Player@2020Technologies.com (20-20 3D Viewer)
Extensions\fr@dictionaries.addons.mozilla.org (Dictionnaire HunSpell en Français (réforme 1990))
Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}(2) (DownloadHelper)
User.js - keyword.URL, hxxp://redirecterror.sfr.fr/?q=
Prefs.js - browser.download.lastDir, C:\Documents and Settings\Olive\Bureau
Prefs.js - browser.search.defaulturl, hxxp://fr.search.yahoo.com/search?ei=UTF-8&fr=ytff-&p=
Prefs.js - browser.search.selectedEngine, Google
Prefs.js - browser.startup.homepage, hxxp://www.yahoo.fr
Prefs.js - browser.startup.homepage_override.buildID, 20110928134238
Prefs.js - browser.startup.homepage_override.mstone, rv:7.0.1
Prefs.js - keyword.URL, hxxp://redirecterror.sfr.fr/?q=

-- C:\Documents and Settings\Compaq_Propriétaire\Application Data\Mozilla\FireFox\Profiles\m7zjsi10.default --
Extensions\fr@dictionaries.addons.mozilla.org (Dictionnaire MySpell en Français (réforme 1990))
Searchplugins\search.xml (?)
Prefs.js - browser.download.lastDir, C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Mes images
Prefs.js - browser.startup.homepage, hxxp://www.msn.fr/
Prefs.js - browser.startup.homepage_override.buildID, 20110928134238
Prefs.js - browser.startup.homepage_override.mstone, rv:7.0.1
Prefs.js - keyword.URL, hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=

========================================

**** Google Chrome Version [14.0.835.202] ****


-- C:\Documents and Settings\Olive\Local Settings\Application Data\Google\Chrome\User Data\Default --
Preferences - default_search_provider: "Google" (Activé: true) (?)
Preferences - homepage: hxxp://fr.yahoo.com/
Preferences - homepage_is_newtabpage: false
Plugin - Remoting Viewer (Activé: true) (internal-remoting-viewer) (x)
Plugin - Native Client (Activé: true) (C:\Documents and Settings\Olive\Local Settings\Application Data\Google\Chrome\Application\14.0.835.202\ppGoogleNaClPluginChrome.dll)
Plugin - RealJukebox NS Plugin (Activé: true) (C:\Program Files\Real\RealPlayer\Netscape6
prjplug.dll)
Plugin - "Java" (Activé: true)
Plugin - "Silverlight" (Activé: true)
Plugin - "Remoting Viewer" (Activé: true)
Plugin - "Native Client" (Activé: true)
Plugin - "Foxit Reader Plugin for Mozilla" (Activé: true)
Plugin - "Mannequin Virtuel" (Activé: true)
Plugin - "Snapfish Plugin for Firefox" (Activé: true)
Plugin - "Zylom Plugin" (Activé: true)
Plugin - "Facebook Plugin" (Activé: true)
Plugin - "RealJukebox NS Plugin" (Activé: true)
Plugin - "Yahoo! activeX Plug-in Bridge" (Activé: true)

========================================

**** Internet Explorer Version [8.0.6001.18702] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e} - "Search" (hxxp://www.bigseekpro.com/search/browser/burn4free/{51F00DB8-D827-4593-9285-9ABC...)
HKCU_Toolbar\ShellBrowser|{C4069E3A-68F1-403E-B40E-20066696354B} (x)
HKCU_Toolbar\WebBrowser|{31CF9EBE-5755-4A1D-AC25-2834D952D9B4} (C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll)
HKCU_Toolbar\WebBrowser|{338B4DFE-2E2C-4338-9E41-E176D497299E} (x)
HKLM_Toolbar|{31CF9EBE-5755-4A1D-AC25-2834D952D9B4} (C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll)
HKLM_ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291} - C:\Program Files\Burn4Free DB Toolbar\TbHelper2.exe (x)
HKLM_ElevationPolicy\{A6E2003F-95C5-4591-BA9A-0093080FDB5C} - C:\Program Files\Fichiers communs\Oberon Media\OberonBroker\1.0.0.63\OberonBroker.exe (?)
HKLM_ElevationPolicy\{B2321D2F-1154-4d97-AD3E-2FE0BAE2897B} - C:\Program Files\SFR\Kit\9launch.exe (SFR)
HKLM_ElevationPolicy\{DCAAA846-F9B9-4E1C-B2FE-CD0045097E76} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1esources\pdfutil.exe (?)
HKLM_Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - "?" (?)
HKLM_Extensions\{E2D4D26B-0180-43a4-B05F-462D6D54C789} - "Aide à la connexion" (C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\conn_support.ico)
HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
BHO\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - "Objet d'aide à la navigation SFR" (C:\Program Files\SFR\Kit\SFRNavErrorHelper.dll)
BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)

========================================

C:\Program Files\Ad-Remover\Quarantine: 84 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 13 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 08/10/2011 11:26:30 (7036 Octet(s)) 

Fin à: 11:27:23, 08/10/2011 
 
============== E.O.F ==============

Utilisateur anonyme · Answer

Re

1)Désinstalle Spybot et Ad aware

2)Il y a trop de programmes qui démarrent avec Windows ;et ta mémoire vive est quasiment saturée;d'où tes problèmes de lenteur.

@+

Olivette84 · Answer

Ok je fais ça!
Pour nettoyer l'ordinateur de temps en temps Ccleaner et Malware anti-Malware suffisent?

Olivette84 · Answer

Alors j'ai J2SE Runtime Environement 5.0 et JAVA(TM) 6
Je supprime les ancienne versions des deux? Sachant que j'ai 4 ou 5 fichiers update pour chacun des deux.

Olivette84 · Answer

Rapport JAVA :

JavaRa 1.16 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Sat Oct 08 15:24:30 2011

Found and removed: C:\Program Files\Java\jre1.5.0_05

Found and removed: C:\Program Files\Java\jre1.5.0_06

Found and removed: C:\Program Files\Java\jre1.5.0_09

Found and removed: C:\Program Files\Java\jre1.5.0_10

Found and removed: C:\Program Files\Java\jre1.5.0_11

Found and removed: C:\Program Files\Java\jre1.6.0_04

Found and removed: C:\Program Files\Java\jre1.6.0_07

Found and removed: C:\Documents and Settings\Olive\Application Data\Sun\Java\jre1.6.0_04

Found and removed: C:\Documents and Settings\Olive\Application Data\Sun\Java\jre1.6.0_11

Found and removed: C:\Documents and Settings\Olive\Application Data\Sun\Java\jre1.6.0_15

Found and removed: C:\Documents and Settings\Olive\Application Data\Sun\Java\jre1.6.0_17

Found and removed: C:\Documents and Settings\Olive\Application Data\Sun\Java\jre1.6.0_20

Found and removed: C:\Documents and Settings\Olive\Application Data\Sun\Java\jre1.6.0_21

Found and removed: C:\Documents and Settings\Olive\Application Data\Sun\Java\jre1.6.0_22

Found and removed: C:\Documents and Settings\Olive\Application Data\Sun\Java\jre1.6.0_23

Found and removed: C:\Documents and Settings\Olive\Application Data\Sun\Java\jre1.6.0_24

Found and removed: Applications\java.exe

Found and removed: Applications\javaw.exe

Found and removed: JavaPlugin.FamilyVersionSupport

Found and removed: Installer\Products\8A0F842331866D117AB7000B0D610007

Found and removed: CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}

Found and removed: JavaScript

Found and removed: JavaScript Author

Found and removed: JavaScript1.1

Found and removed: JavaScript1.1 Author

Found and removed: JavaScript1.2

Found and removed: JavaScript1.2 Author

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}

Found and removed: Software\Classes\JavaPlugin.150_06

Found and removed: Software\Classes\JavaPlugin.150_09

Found and removed: Software\Classes\JavaPlugin.150_10

Found and removed: Software\Classes\JavaPlugin.150_11

Found and removed: Software\Classes\JavaPlugin.160_04

Found and removed: Software\Classes\JavaPlugin.160_07

Found and removed: Software\JavaSoft\Java Update

Found and removed: Software\JavaSoft\Java Runtime Environment\1.5.0_05

Found and removed: Software\JavaSoft\Java Runtime Environment\1.5.0_06

Found and removed: Software\JavaSoft\Java Runtime Environment\1.5.0_09

Found and removed: Software\JavaSoft\Java Runtime Environment\1.5.0_10

Found and removed: Software\JavaSoft\Java Runtime Environment\1.5.0_11

Found and removed: Software\JavaSoft\Java Runtime Environment\1.6.0_07

Found and removed: Software\JavaSoft\Java Runtime Environment\1.6.0_24

Found and removed: Software\JavaSoft\Java2D\1.5.0_05

Found and removed: Software\JavaSoft\Java2D\1.5.0_06

Found and removed: Software\JavaSoft\Java2D\1.5.0_09

Found and removed: Software\JavaSoft\Java2D\1.5.0_10

Found and removed: Software\JavaSoft\Java2D\1.5.0_11

Found and removed: SOFTWARE\Classes\JavaPlugin

Found and removed: SOFTWARE\Classes\JavaPlugin.150_05

Found and removed: SOFTWARE\Classes\JavaPlugin.150_06

Found and removed: SOFTWARE\Classes\JavaPlugin.150_09

Found and removed: SOFTWARE\Classes\JavaPlugin.150_10

Found and removed: SOFTWARE\Classes\JavaPlugin.150_11

Found and removed: SOFTWARE\Classes\JavaPlugin.160_04

Found and removed: SOFTWARE\Classes\JavaPlugin.160_07

Found and removed: SOFTWARE\Classes\JavaPlugin.160_24

Found and removed: SOFTWARE\Classes\JavaWebStart.isInstalled.1.5.0.0

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_06

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_09

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_10

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_11

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_04

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_07

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_24

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_06

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_09

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_10

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_11

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_04

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_07

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_24

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.5.0_06

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.5.0_09

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.5.0_10

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.5.0_11

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_07

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_24

Found and removed: SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Java\jre1.5.0_05\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Java\jre1.5.0_06\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Java\jre1.5.0_09\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Java\jre1.5.0_10\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Java\jre1.5.0_11\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Java\jre1.6.0_04\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Java\jre1.6.0_07\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10}

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1.2

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1.3

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.2

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.2.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.3

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.3.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.4

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.4.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.4.2

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.5

JavaRa 1.16 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Sat Oct 08 15:25:09 2011

Found and removed: CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}

------------------------------------

Finished reporting.

Olivette84 · Answer

Voilà j'ai installé la nouvelle version, merci pour toutes tes explications c'est vraiment sympa!

Utilisateur anonyme · Answer

Re

Tu disposes de Malwaresbytes;met le à jour et lance une analyse rapide et supprime bien tout cez qu'il trouve.

Poste moi son rapport;merci.

@+

Olivette84 · Answer

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Version de la base de données: 7901

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

2011-10-08 17:31:14
mbam-log-2011-10-08 (17-31-14).txt

Type d'examen: Examen rapide
Elément(s) analysé(s): 209211
Temps écoulé: 14 minute(s), 18 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Utilisateur anonyme · Answer

Bonjour


Poste moi un nouveau rapport ZHPDiag;merci.

@+

Olivette84 · Answer

http://www.cijoint.fr/cjlink.php?file=cj201110/cijcZlwkDC.txt

L'ordinateur a l'air en meilleur forme pour l'instant...et le passage d'une session à une autre est beaucoup moins horrible!

Utilisateur anonyme · Answer

Re

Utilisation de l'outil ZHPFix : 

* Copie  tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C ) 
-------------------------------------------------------------------------------------------------


R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} . (...) (No version) -- (.not file.)    
OPT: O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe     
OPT: O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe     
STOP: SR - | Auto 2011-10-09 345376 |  (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe    
[HKLM\Software\Classes\.b4f] 
[HKLM\Software\Classes\burn4free project] 
[HKCU\Software\pdfforge.org]     
[HKLM\Software\pdfforge.org]     
[HKCU\Software\Somoto Toolbar]     
[HKCU\Software\Somoto Toolbar]     
C:\Program Files\b4ficons     
C:\Documents and Settings\Olive\Application Data\iWin     
O43 - CFD: 2009-07-10 - 17:55:20 - [14114] ----D- C:\Documents and Settings\Olive\Application Data\iWin     
O43 - CFD: 2007-02-23 - 13:36:22 - [0] ----D- C:\Program Files\Common Files\Companion Wizard     
O43 - CFD: 2006-09-16 - 18:52:28 - [69120] ----D- C:\Program Files\Fichiers Communs\BOONTY Shared     
O43 - CFD: 2011-10-08 - 12:12:28 - [2111315] ----D- C:\Program Files\Spybot - Search & Destroy     
O43 - CFD: 2011-03-18 - 16:57:20 - [192826] ----D- C:\Program Files\b4ficons     
O42 - Logiciel: Skype Toolbars - (.Skype Technologies S.A..) [HKLM] -- {CD95D125-2992-4858-B3EF-5F6FB52FBAD6}    
O42 - Logiciel: Java 6 Update 4 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160040}     
O42 - Logiciel: Java 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160070}     
O42 - Logiciel: J2SE Runtime Environment 5.0 Update 10 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150100}     
O42 - Logiciel: J2SE Runtime Environment 5.0 Update 11 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150110}     
O42 - Logiciel: J2SE Runtime Environment 5.0 Update 5 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150050}     
O42 - Logiciel: J2SE Runtime Environment 5.0 Update 6 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150060}     
O42 - Logiciel: J2SE Runtime Environment 5.0 Update 9 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150090}     
O42 - Logiciel: Adobe Reader 7.0.8 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A70000000000}     
O4 - Global Startup: C:\Documents And Settings\Olive\Menu Démarrer\Programmes\Multi-channel Sound Manager.lnk - Clé orpheline 
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\News du Web.url.lnk . (...)  -- C:\Program Files\Lavasoft\Ad-Aware SE Personal\News du Web.url (.not file.) 
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Multi-channel Sound Manager.lnk - Clé orpheline 
FirewallRAZ
Emptytemp

--------------------------------------------------------------------------------------------
Puis lance  ZHPFix depuis le raccourci du bureau. Sous Vista :Clic droit sur l'icône ZHPFix.exe  
 « Exécuter en tant qu'administrateur »
. 

* Une fois l'outil ZHPFix ouvert, clique sur le bouton [ H ] ( "coller les lignes Helper" ) . 

*Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.

*Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes  
- Clique sur le bouton « GO » pour lancer le nettoyage, 


-> laisse travailler l'outil et ne touche à rien ... 


-> Si il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le ! 

Une fois terminé, un nouveau rapport s'affiche : poste le contenu de ce dernier dans ta prochaine réponse ... 

( ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ ZHPFixReport.txt ) 



A+

Olivette84 · Answer

Alors, cette dernière analyse n'a pas trop plus à mon ordi...ça a ouvert plusieurs fois des fenêtres pour skype toolbar, java et java runtime environnement pour des modifications ou des mises à jours que je n'ai pas faites...et puis à la fin de l'analyse l'ordi a planté. Je te laisse le rapport:

Rapport de ZHPFix 1.12.3363 par Nicolas Coolman, Update du 05/10/2011
Fichier d'export Registre : 
Run by Olive at 2011-10-09 15:06:16
Windows XP Home Edition Service Pack 3 (Build 2600)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Logiciel(s) ==========
SUPPRIME O42 - Logiciel: Skype Toolbars - (.Skype Technologies S.A..) [HKLM] -- {CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
SUPPRIME O42 - Logiciel: Java 6 Update 4 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160040}
SUPPRIME O42 - Logiciel: Java 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160070}
SUPPRIME O42 - Logiciel: J2SE Runtime Environment 5.0 Update 10 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150100}
SUPPRIME O42 - Logiciel: J2SE Runtime Environment 5.0 Update 11 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150110}
SUPPRIME O42 - Logiciel: J2SE Runtime Environment 5.0 Update 5 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150050}
SUPPRIME O42 - Logiciel: J2SE Runtime Environment 5.0 Update 6 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150060}
SUPPRIME O42 - Logiciel: J2SE Runtime Environment 5.0 Update 9 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0150090}
SUPPRIME O42 - Logiciel: Adobe Reader 7.0.8 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A70000000000}

========== Clé(s) du Registre ==========
SUPPRIME [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}]
SUPPRIME [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160040}]
SUPPRIME [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160070}]
SUPPRIME [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150100}]
SUPPRIME [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150110}]
SUPPRIME [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150050}]
SUPPRIME [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150060}]
SUPPRIME [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150090}]
SUPPRIME [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-7AD7-1036-7B44-A70000000000}]
SUPPRIME Key: HKLM\Software\Classes\.b4f
SUPPRIME Key: HKLM\Software\Classes\burn4free project
SUPPRIME Key: HKCU\Software\pdfforge.org
SUPPRIME Key: HKLM\Software\pdfforge.org
SUPPRIME Key: HKCU\Software\Somoto Toolbar

========== Valeur(s) du Registre ==========
SUPPRIME URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88}
SUPPRIME RunValue: iTunesHelper
SUPPRIME RunValue: QuickTime Task
SUPPRIME FirewallRaz (SP) : C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
SUPPRIME FirewallRaz (SP) : C:\Program Files\eMule\emule.exe
Aucune valeur présente dans la clé d'exception du registre (FirewallRaz)

========== Dossier(s) ==========
SUPPRIME Folder: c:\program files\b4ficons
SUPPRIME Folder: c:\documents and settings\olive\application data\iwin
ABSENT C:\Documents and Settings\Olive\Application Data\iWin
SUPPRIME Folder: C:\Program Files\Common Files\Companion Wizard
SUPPRIME Folder: C:\Program Files\Fichiers Communs\BOONTY Shared
SUPPRIME Folder: C:\Program Files\Spybot - Search & Destroy
ABSENT C:\Program Files\b4ficons
SUPPRIME Temporaires Windows: : 402

========== Fichier(s) ==========
SUPPRIME File: c:\documents and settings\olive\menu démarrer\programmes\multi-channel sound manager.lnk
SUPPRIME File: c:\documents and settings\all users\menu démarrer\programmes
ews du web.url.lnk
ABSENT File: c:\program files\lavasoft\ad-aware se personal
ews du web.url (.not file.)
SUPPRIME File: c:\documents and settings\all users\menu démarrer\programmes\multi-channel sound manager.lnk
SUPPRIME Temporaires Windows: : 250

========== Etat des services ==========
(Bonjour Service) . (Bonjour Service) de Apple Inc.Arrêté:


========== Récapitulatif ==========
14 : Clé(s) du Registre
6 : Valeur(s) du Registre
8 : Dossier(s)
5 : Fichier(s)
9 : Logiciel(s)
1 : Etat des services


End of clean in 03mn 34s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 2011-10-09 15:06:16 [4452]

Utilisateur anonyme · Answer

Re 

Procède à la mise à jour de Avast>>> version 6 

Lance une analyse et dit moi si il a trouvé quelque chose;merci. 

@+ 
---------Contributeur Sécurité--------- 
On a tous été un jour débutant dans quelque chose. 
Mais le savoir est la récompense de l'assiduité.

Olivette84 · Answer

J'ai fais un scan rapide et il n'a rien trouvé. Aucun virus détecté.

Utilisateur anonyme · Answer

Re

As tu encore des problèmes de lenteur?

@+

Olivette84 · Answer

Ben pour l'instant je trouve qu'il y a une nette amélioration! Je te remercie vraiment de ton aide.

Utilisateur anonyme · Answer

Re

Et bien finalisons.

1) Télécharge DelFix de Xplode
Ou si problème sur ce site : http://sd-1.archive-host.com/membres/up/17959594961240255/DelFix.exe

Ou encore : https://www.commentcamarche.net/download/s/delfix

* Lance le.
* A l'invite,  [Suppression]  
* Un rapport va s'ouvrir à la fin, colle le dans la réponse

Ensuite pour le désinstaller ; tu relances et tu passes à l'option  [Désinstallation] 


2)Tu disposes de Ccleaner;met le à jour et lance le avec ces réglages.
.double-cliques sur l'icône  de Ccleaner pour l'ouvrir 
.une fois ouvert tu cliques sur option  et puis avancé  
.tu décoches  effacer uniquement les fichiers, du dossier temp de windows plus vieux que 24 heures 
.cliques sur nettoyeur  
.cliques sur windows et dans la colonne avancé  
. coches  la première case vieilles données du perfetch  ce qui te donnes la case vielles données du perfetch et la case avancé qui c'est coché automatiquement mais que celle-la  
.cliques sur analyse  une fois l'analyse terminé 
.cliques sur lancer le nettoyage  et sur la demande de confirmation OK  il vas falloir que tu le refasses une autre fois une fois fini vérifies en appuyant de nouveau sur analyse pour être sur qu'il n'y est plus rien 
.clique maintenant sur registre  et puis sur rechercher les erreurs 
.laisse tout coché et clique sur réparer les erreurs sélectionnées 
.il te demande de sauvegarder OUI 
.tu lui donnes un nom pour pouvoir la retrouver et enregistre 
.clique sur corriger toutes les erreurs sélectionnées  et sur la demande de confirmation OK   
.il supprime et une fois fermé   tu vérifies en relançant rechercher les erreurs  
.tu retournes dans option  et tu recoches la case effacer uniquement les fichiers, du dossier temp de windows plus vieux que 48 heures et sur nettoyeur, windows sous avancé tu décoches la première case vieilles données du perfetch  
.tu peux fermer Ccleaner.

Tuto : https://jesses.pagesperso-orange.fr/Docs/Logiciels/CCleaner.htm


3)Purge la restauration comme ceci :
http://service1.symantec.com/support/inter/tsgeninfointl.Nsf/fr_docid/20020830101856924

Cela supprime toutes traces des diverses infections ;et permettra une éventuelle restauration sans infections


@+

Olivette84 · Answer

# DelFix v8.1 - Rapport créé le 09/10/2011 à 18:35
# Mis à jour le 20/06/11 à 19h par Xplode
# Système d'exploitation : Microsoft Windows XP (32 bits) [version 5.1.2600] Service Pack 3
# Nom d'utilisateur : Olive - FIALON (Administrateur)
# Exécuté depuis : C:\Documents and Settings\Olive\Mes documents\Téléchargements\DelFix-8.1.exe
# Option [Suppression]


~~~~~~ Dossier(s) ~~~~~~

Supprimé : C:\Combofix
Supprimé : C:\Qoobox
Supprimé : C:\USBFix
Supprimé : C:\Program Files\Ad-Remover
Supprimé : C:\Program Files\ZHPDiag
Non supprimé (1) : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Hijackthis
Supprimé : C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ZHP

~~~~~~ Fichier(s) ~~~~~~

Supprimé : C:\Ad-Report-CLEAN[1].txt
Supprimé : C:\JavaRa.log
Supprimé : C:\PhysicalDisk0_MBR.bin
Supprimé : C:apport.txt
Supprimé : C:apport_clean.txt
Supprimé : C:\UsbFix.txt
Supprimé : C:\UsbFix_Upload_Me_FIALON.zip
Supprimé : C:\WINDOWS\grep.exe
Supprimé : C:\WINDOWS\Nircmd.exe
Supprimé : C:\WINDOWS\sed.exe
Supprimé : C:\WINDOWS\swreg.exe
Supprimé : C:\WINDOWS\swsc.exe
Supprimé : C:\WINDOWS\swxcacls.exe
Supprimé : C:\WINDOWS\zip.exe
Supprimé : C:\WINDOWS\System32\dumphive.exe
Supprimé : C:\WINDOWS\System32\SrchSTS.exe
Supprimé : C:\WINDOWS\System32	mp.reg
Supprimé : C:\WINDOWS\System32	mp.txt
Supprimé : C:\Documents and Settings\Olive\Bureau\Ad-Remover.lnk
Supprimé : C:\Documents and Settings\Olive\Bureau\JavaRa.exe
Supprimé : C:\Documents and Settings\Olive\Bureau\ZHPDiag.txt
Supprimé : C:\Documents and Settings\Olive\Bureau\ZHPFixReport.txt
Supprimé : C:\Documents and Settings\All Users\Bureau\MBRCheck.lnk
Supprimé : C:\Documents and Settings\All Users\Bureau\ZHPDiag.lnk
Supprimé : C:\Documents and Settings\All Users\Bureau\ZHPFix.lnk
Supprimé : C:\Documents and Settings\Olive\Mes documents\Téléchargements\AD-R.exe
Supprimé : C:\Documents and Settings\Olive\Mes documents\Téléchargements\JavaRa.zip
Supprimé : C:\Documents and Settings\Olive\Mes documents\Téléchargements\UsbFix.exe
Supprimé : C:\Documents and Settings\Olive\Mes documents\Téléchargements\ZHPDiag2.exe

~~~~~~ Registre ~~~~~~

Clé Supprimée : HKCU\SOFTWARE\Ad-Remover
Clé Supprimée : HKCU\SOFTWARE\USBFix
Clé Supprimée : HKLM\Software\Soeperman Enterprises Ltd.
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Hijackthis
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\USBFix
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\HijackThis.exe
Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe
ACL -> [F] & Clé Supprimée : HKLM\SOFTWARE\Swearware

~~~~~~ Autre ~~~~~~

-> Prefetch vidé

########## EOF - "C:\DelFixSuppr.txt" - [2972 octets] ##########

Olivette84 · Answer

Par contre Ccleaner ca rame à mort!

Olivette84 · Answer

Ca fait 1/4 d'heure que j'essaye de faire la mise à jour mais je n'y arrive pas tellement ca rame!!!

Olivette84 · Answer

Impossible de faire la mise à jour de Ccleaner, j'ai du redémarrer mon ordi 2 fois qu'est ce que je dois faire??

Utilisateur anonyme · Answer

Bonjour 

Démarre ton PC et utilise une seule session. 

Tiens moi au courant. 
Relance la mise à jour de Ccleaner 

@+

---------Contributeur Sécurité--------- 
On a tous été un jour débutant dans quelque chose. 
Mais le savoir est la récompense de l'assiduité.

Olivette84 · Answer

Bonjour,

rien à faire...dès que je clic sur accéder au site de Piriform ou sur rechercher les mises à jour je ne peux plus rien faire de mon ordinateur...est ce que ça vaudrait pas le coup que je désinstalle complètement Ccleaner et que j'aille chercher la nouvelle version ensuite?

Olivette · Answer

C'est bon j'ai réussi et il a trouvé pleins de trucs à nettoyer!
Par contre pour purger la restauration je la désactive et la réactive c'est ça?

Olivette · Answer

Voilà c'est fait.
Un grand merci à toi pour toute l'aide que tu m'as apporté! 
Je pensais que mon ordi était en fin de vie et tu lui a redonné une nouvelle jeunesse! Je revis merci!
Bonne journée

Virus ou pas sur mon ordi?

31 réponses

Discussions similaires