Mon portable ASUS redémarre sans cesse

juralandes -
Utilisateur anonyme - 1 déc. 2011 à 16:02

Bonjour,

Mon portable ASUS a sans doute un virus ou un truc du genre car il redémarre sans cesse. Cela m est déjà arrivé et j avais du tout reformater et reinitialiser. Si je pouvais éviter cette fois ci... Il est en plus très très lent... Pourriez-vous m'aider ?
PAr avance, merci !!!!

Afficher la suite

A voir également:

Mon portable ASUS redémarre sans cesse
Réinitialiser pc portable - Guide
Hwmonitor portable - Télécharger - Informations & Diagnostic
Activer pave tactile pc portable asus - Guide
Asus ai suite - Télécharger - Optimisation
Nettoyer ordinateur portable lent - Guide

12 réponses

Réponse 1 / 12
Utilisateur anonyme

Bonsoir

Et comment cela se passe t-il si tu tentes de démarrer en mode sans echec avec prise en charge réseau?

@+
0
1. juralandes
  
  ok, pardon, j avais pas vu le lien. J essaie ce soir en rentrant du boulot.
  Merci !
  
  0
2. juralandes
  
  Bonsoir,
  En mode ss echec avec prise en charge réseau, il semblerait qu'il soit plus rapide. Et je n'ai pas encore vu de redémarrage...
  
  0
Réponse 2 / 12
Utilisateur anonyme

Bonjour

Dans ce mode sans echec avec prise en charge reseau ,fait ceci:

Inscris toi avant tout ,sinon je ne pourrais lire ce rapport demandé.

Pour de plus amples informations, fait ceci stp

Ouvre ce lien et télécharge ZHPDiag de Nicolas Coolman :

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

Ou

https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

Serveur N°2

Ou

http://www.premiumorange.com/zeb-help-process/zhpdiag.html
en bas de la page ZHP avec un numéro de version.

Une fois le téléchargement achevé, dé zippe le fichier obtenu et place ZHPDiag.exe sur ton Bureau.

Double-clique sur l'icône pour lancer le programme. Sous Vista ou Seven clic droit « exécuter en tant que administrateur »

Clique sur la loupe pour lancer l'analyse.

Laisse l'outil travailler, il peut être assez long.

Ferme ZHPDiag en fin d'analyse.

Pour transmettre le rapport clique sur ce lien :

http://pjjoint.malekal.com/

https://www.cjoint.com/

Clique sur Parcourir et cherche le répertoire où est installé ZHPDiag (en général C:\Program Files\ZHPDiag).

Sélectionne le fichier ZHPDiag.txt.

Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt

est ajouté dans la page.

Copie ce lien dans ta réponse.

Merci

A+
0
1. juralandes
  
  BOnjour, voici le lien : http://cjoint.com/?AKtng1cwAtC
  
  Je n'ai pas compris ou je devais m'inscrire... J espère que ca sera ok comme ca
  
  0
2. juralandes
  
  Malwarebytes' Anti-Malware 1.51.2.1300
  www.malwarebytes.org
  
  Version de la base de données: 8198
  
  Windows 6.0.6002 Service Pack 2 (Safe Mode)
  Internet Explorer 9.0.8112.16421
  
  20/11/2011 09:45:43
  mbam-log-2011-11-20 (09-45-43).txt
  
  Type d'examen: Examen complet (C:\|)
  Elément(s) analysé(s): 319076
  Temps écoulé: 1 heure(s), 0 minute(s), 39 seconde(s)
  
  Processus mémoire infecté(s): 0
  Module(s) mémoire infecté(s): 0
  Clé(s) du Registre infectée(s): 0
  Valeur(s) du Registre infectée(s): 0
  Elément(s) de données du Registre infecté(s): 0
  Dossier(s) infecté(s): 0
  Fichier(s) infecté(s): 0
  
  Processus mémoire infecté(s):
  (Aucun élément nuisible détecté)
  
  Module(s) mémoire infecté(s):
  (Aucun élément nuisible détecté)
  
  Clé(s) du Registre infectée(s):
  (Aucun élément nuisible détecté)
  
  Valeur(s) du Registre infectée(s):
  (Aucun élément nuisible détecté)
  
  Elément(s) de données du Registre infecté(s):
  (Aucun élément nuisible détecté)
  
  Dossier(s) infecté(s):
  (Aucun élément nuisible détecté)
  
  Fichier(s) infecté(s):
  (Aucun élément nuisible détecté)
  
  0
Réponse 3 / 12
Utilisateur anonyme

Re

Toujours dans ce mode

1)Télécharge AdwCleaner ( d'Xplode ) sur ton bureau.
Lance le, clique sur [Suppression] puis patiente le temps du scan.
Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

2)Télécharge Malwaresbytes anti malware ici
http://www.malwarebytes.org/mbam.php

Bouton »Download free version »

* Installe le (choisis bien "français" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

(NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : https://www.malekal.com/tutorial-aboutbuster/

* Potasse le tuto pour te familiariser avec le prg :

https://forum.pcastuces.com/sujet.asp?f=31&s=3

(cela dis, il est très simple d'utilisation).

relance Malwaresbytes en suivant scrupuleusement ces consignes :

! Déconnecte toi et ferme toutes applications en cours !

* Lance Malwarebyte's. Sous Vista et Seven (clic droit de la souris « exécuter en tant que administrateur »)

Fais un examen dit "Complet"

--> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
--> à la fin tu cliques sur "Afficher les résultats" " .
--> Vérifie que tous les objets infectés soient validés, puis clique sur " supprimer la sélection " .

Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwaresbytes, le dernier en date)

@+
0
1. juralandes
  
  Bonjour, je n arrive pas poster la suite... Le forum me demande le titre du sujet et je ne sais pas ou le renseigner... Ou alors, est ce parce que le rappport est trop long ?
  J ai posté le rapport de malware plus haut mais impossible de poster celui de adwcleaner...
  
  0
Réponse 4 / 12
Utilisateur anonyme

Bonjour

Ce n'est pas grave;poste moi un nouveau rapport ZHPDiag;merci.

@+
0
1. juralandes
  
  Bonjour,
  voici le lien : http://pjjoint.malekal.com/files.php?id=ZHPDiag_d12d15x13g6h15t14w14v14s14p9y15e14p11s5r14q6r13h6q15z9
  
  a bientot
  
  0
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Réponse 5 / 12
Utilisateur anonyme

Bonsoir

Utilisation de l'outil ZHPFix :

* Copie tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C )
-------------------------------------------------------------------------------------------------

O42 - Logiciel: Fissa - (.Secure Digital Services.) [HKLM] -- Fissa
O42 - Logiciel: OfferBox - (.Secure Digital Services.) [HKLM] -- {2C8574B5-6935-4FCE-860E-F4E8602378FF}
O42 - Logiciel: pdfforge Toolbar v4.7 - (.Spigot, Inc..) [HKLM] -- {22CFB202-3D2D-44E2-BB7C-6F703B99919B}
[HKCU\Software\Spointer]
[HKCU\Software\WideStream]
O43 - CFD: 14/01/2011 - 13:38:12 - [0] ----D- C:\Program Files\Widestream6
O43 - CFD: 29/07/2010 - 18:03:30 - [614] ----D- C:\Users\Juralandes\AppData\Roaming\widestream
O43 - CFD: 14/01/2011 - 13:36:58 - [340750] ----D- C:\Users\Juralandes\AppData\Local\widestream6 Air
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Fissa]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{2C8574B5-6935-4FCE-860E-F4E8602378FF}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2C8574B5-6935-4FCE-860E-F4E8602378FF}]
[HKLM\Software\Classes\Installer\Features\5B4758C25396ECF468E04F8E063287FF]
[HKLM\Software\Classes\Installer\Products\5B4758C25396ECF468E04F8E063287FF]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5B4758C25396ECF468E04F8E063287FF]
[HKCU\Software\Spointer]
[HKCU\Software\WideStream]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Fissa]
C:\Program Files\Widestream6
C:\Users\Juralandes\AppData\Roaming\Widestream
C:\Users\Juralandes\AppData\Local\widestream6 Air
O4 - HKLM\..\Run: [TaskTray] Clé orpheline
O23 - Service: (gpsvc) - Clé orpheline
STOP: SR - | Auto 14/10/2011 390504 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRAZ
Emptytemp

--------------------------------------------------------------------------------------------
Puis lance ZHPFix depuis le raccourci du bureau. Sous Vista :Clic droit sur l'icône ZHPFix.exe
« Exécuter en tant qu'administrateur »
.

* Une fois l'outil ZHPFix ouvert, clique sur le bouton [ H ] ( "coller les lignes Helper" ) .

*Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.

*Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes
- Clique sur le bouton « GO » pour lancer le nettoyage,

-> laisse travailler l'outil et ne touche à rien ...

-> Si il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le !

Une fois terminé, un nouveau rapport s'affiche : poste le contenu de ce dernier dans ta prochaine réponse ...

( ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ ZHPFixReport.txt )

A+
0
1. juralandes
  
  BOnjour,
  
  J ai suivi les insturctions mais pas en mode ss échec, est ce que ça a une importance ?
  Dès que j ai commencé le traitement, l outil m a proposé de supprimer orangepremium, j ai dit non. est ce que j ai bien fait ?
  Voici le rapport :
  Rapport de ZHPFix 1.12.3370 par Nicolas Coolman, Update du 17/11/2011
  Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-23-11-2011-08-41-53.txt
  Run by Juralandes at 23/11/2011 08:41:53
  Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)
  Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
  
  ========== Logiciel(s) ==========
  ABSENT Uninstall Process: c:\users\juralandes\appdata\roaming\fissasearch\fissauninstaller.exe
  SUPPRIME O42 - Logiciel: OfferBox - (.Secure Digital Services.) [HKLM] -- {2C8574B5-6935-4FCE-860E-F4E8602378FF}
  SUPPRIME O42 - Logiciel: pdfforge Toolbar v4.7 - (.Spigot, Inc..) [HKLM] -- {22CFB202-3D2D-44E2-BB7C-6F703B99919B}
  
  ========== Clé(s) du Registre ==========
  SUPPRIME [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Fissa]
  SUPPRIME [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2C8574B5-6935-4FCE-860E-F4E8602378FF}]
  SUPPRIME [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{22CFB202-3D2D-44E2-BB7C-6F703B99919B}]
  SUPPRIME Key: HKCU\Software\Spointer
  SUPPRIME Key: HKCU\Software\WideStream
  SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Fissa
  SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{2C8574B5-6935-4FCE-860E-F4E8602378FF}
  ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2C8574B5-6935-4FCE-860E-F4E8602378FF}
  SUPPRIME Key: HKLM\Software\Classes\Installer\Features\5B4758C25396ECF468E04F8E063287FF
  SUPPRIME Key: HKLM\Software\Classes\Installer\Products\5B4758C25396ECF468E04F8E063287FF
  SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5B4758C25396ECF468E04F8E063287FF
  ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Fissa
  ABSENT Key: Service: gpsvc
  
  ========== Valeur(s) du Registre ==========
  SUPPRIME RunValue: TaskTray
  ABSENT Valeur Standard Profile: FirewallRaz :
  ABSENT Valeur Domain Profile: FirewallRaz :
  SUPPRIME FirewallRaz (Domain) : WinCollab-DFSR-In-TCP
  SUPPRIME FirewallRaz (Domain) : WinCollab-DFSR-Out-TCP
  SUPPRIME FirewallRaz (Public) : {7A522B59-9E68-4192-AFE2-9D2872332609}
  SUPPRIME FirewallRaz (Public) : {E47E0690-7255-40D4-95D9-B4CD632CD734}
  SUPPRIME FirewallRaz (None) : {64607402-2A8F-41F7-A8A4-22A82C87AA71}
  SUPPRIME FirewallRaz (Public) : {0016044F-AD2E-474F-BCDC-07D994ECA922}
  SUPPRIME FirewallRaz (Public) : {9D5FDCBB-EE8F-4B4D-8002-A9FD9A598F0E}
  
  ========== Dossier(s) ==========
  SUPPRIME Folder: C:\Program Files\Widestream6
  SUPPRIME Folder: C:\Users\Juralandes\AppData\Roaming\widestream
  SUPPRIME Folder: C:\Users\Juralandes\AppData\Local\widestream6 Air
  SUPPRIME Temporaires Windows: : 84
  
  ========== Fichier(s) ==========
  ABSENT Folder/File: c:\program files\widestream6
  ABSENT Folder/File: c:\users\juralandes\appdata\roaming\widestream
  ABSENT Folder/File: c:\users\juralandes\appdata\local\widestream6 air
  SUPPRIME Temporaires Windows: : 293
  
  ========== Etat des services ==========
  (Bonjour Service) . (Bonjour Service) de Apple Inc.Arrêté:
  
  ========== Récapitulatif ==========
  13 : Clé(s) du Registre
  10 : Valeur(s) du Registre
  4 : Dossier(s)
  4 : Fichier(s)
  3 : Logiciel(s)
  1 : Etat des services
  
  End of clean in 00mn 39s
  
  ========== Chemin de fichier rapport ==========
  C:\ZHP\ZHPFix[R1].txt - 23/11/2011 08:41:53 [3304]
  
  0
Réponse 6 / 12
Utilisateur anonyme

Bonsoir

Vérifions quelque chose.

Télécharge TDSSKiller

*Créez un nouveau dossier sur votre bureau puis décompressez l'archive dedans
* Lancez le programme en cliquant sur TDSSKiller.exe, l'analyse se fait automatiquement, si l'infection est détectée, des éléments cachés (= hidden) seront alors affichés.

Si TDSS.tdl2 est détecté: l'option delete sera cochée par défaut.
Si TDSS.tdl3 est détecté: assure toi que Cure est bien cochée.
Si TDSS.tdl4(\HardDisk0\MBR) est détecté: assure toi que Cure est bien cochée.
Si Rootkit.Win32.ZAccess.* est détecté : règle sur "cure" en haut , et "delete" en bas
Si Suspicious file est indiqué, laisse l''option cochée sur Skip
une fois qu'il a terminé , redémarre s'il te le demande pour finir de nettoyer

sinon , ferme TDSSKiller et le rapport s'affichera sur le bureau

Poste moi son rapport à l'issue; merci

@+
0
1. juralandes
  
  Bonsoir, voici le rapport :
  20:56:21.0917 4972 TDSS rootkit removing tool 2.6.21.0 Nov 24 2011 12:32:44
  20:56:22.0201 4972 ============================================================
  20:56:22.0201 4972 Current date / time: 2011/11/24 20:56:22.0201
  20:56:22.0201 4972 SystemInfo:
  20:56:22.0201 4972
  20:56:22.0201 4972 OS Version: 6.0.6002 ServicePack: 2.0
  20:56:22.0201 4972 Product type: Workstation
  20:56:22.0201 4972 ComputerName: PC-DE-JURALANDE
  20:56:22.0202 4972 UserName: Juralandes
  20:56:22.0202 4972 Windows directory: C:\Windows
  20:56:22.0202 4972 System windows directory: C:\Windows
  20:56:22.0202 4972 Processor architecture: Intel x86
  20:56:22.0202 4972 Number of processors: 2
  20:56:22.0202 4972 Page size: 0x1000
  20:56:22.0202 4972 Boot type: Normal boot
  20:56:22.0202 4972 ============================================================
  20:56:25.0248 4972 Initialize success
  20:56:29.0521 5968 ============================================================
  20:56:29.0521 5968 Scan started
  20:56:29.0521 5968 Mode: Manual;
  20:56:29.0521 5968 ============================================================
  20:56:31.0040 5968 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys
  20:56:31.0045 5968 ACPI - ok
  20:56:31.0606 5968 adp94xx (2edc5bbac6c651ece337bde8ed97c9fb) C:\Windows\system32\drivers\adp94xx.sys
  20:56:31.0612 5968 adp94xx - ok
  20:56:31.0817 5968 adpahci (b84088ca3cdca97da44a984c6ce1ccad) C:\Windows\system32\drivers\adpahci.sys
  20:56:31.0826 5968 adpahci - ok
  20:56:31.0980 5968 adpu160m (7880c67bccc27c86fd05aa2afb5ea469) C:\Windows\system32\drivers\adpu160m.sys
  20:56:32.0060 5968 adpu160m - ok
  20:56:32.0700 5968 adpu320 (9ae713f8e30efc2abccd84904333df4d) C:\Windows\system32\drivers\adpu320.sys
  20:56:32.0703 5968 adpu320 - ok
  20:56:32.0985 5968 AFD (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys
  20:56:32.0990 5968 AFD - ok
  20:56:33.0159 5968 agp440 (ef23439cdd587f64c2c1b8825cead7d8) C:\Windows\system32\drivers\agp440.sys
  20:56:33.0162 5968 agp440 - ok
  20:56:33.0313 5968 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
  20:56:33.0317 5968 aic78xx - ok
  20:56:33.0381 5968 aliide (90395b64600ebb4552e26e178c94b2e4) C:\Windows\system32\drivers\aliide.sys
  20:56:33.0384 5968 aliide - ok
  20:56:33.0602 5968 amdagp (2b13e304c9dfdfa5eb582f6a149fa2c7) C:\Windows\system32\drivers\amdagp.sys
  20:56:33.0605 5968 amdagp - ok
  20:56:33.0786 5968 amdide (0577df1d323fe75a739c787893d300ea) C:\Windows\system32\drivers\amdide.sys
  20:56:33.0789 5968 amdide - ok
  20:56:34.0265 5968 AmdK7 (dc487885bcef9f28eece6fac0e5ddfc5) C:\Windows\system32\drivers\amdk7.sys
  20:56:34.0276 5968 AmdK7 - ok
  20:56:34.0897 5968 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\DRIVERS\amdk8.sys
  20:56:34.0900 5968 AmdK8 - ok
  20:56:35.0458 5968 arc (5f673180268bb1fdb69c99b6619fe379) C:\Windows\system32\drivers\arc.sys
  20:56:35.0461 5968 arc - ok
  20:56:35.0757 5968 arcsas (957f7540b5e7f602e44648c7de5a1c05) C:\Windows\system32\drivers\arcsas.sys
  20:56:35.0763 5968 arcsas - ok
  20:56:36.0061 5968 AsDsm (0adfaaecc36cbe604f4efd0829eebb89) C:\Windows\system32\drivers\AsDsm.sys
  20:56:36.0064 5968 AsDsm - ok
  20:56:36.0187 5968 ASMMAP (7b4d08d2017ac06689d422e06c43f0aa) C:\Program Files\ATKGFNEX\ASMMAP.sys
  20:56:36.0189 5968 ASMMAP - ok
  20:56:36.0434 5968 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
  20:56:36.0437 5968 AsyncMac - ok
  20:56:36.0727 5968 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys
  20:56:36.0729 5968 atapi - ok
  20:56:37.0388 5968 athr (11a2f8d47e6208a6f68711aacdedbd48) C:\Windows\system32\DRIVERS\athr.sys
  20:56:37.0402 5968 athr - ok
  20:56:38.0033 5968 AtiHdmiService (f48d470154cc58cd6520771464fbec3f) C:\Windows\system32\drivers\AtiHdmi.sys
  20:56:38.0036 5968 AtiHdmiService - ok
  20:56:38.0826 5968 atikmdag (7db96c2801a78513bdc133c25d07929e) C:\Windows\system32\DRIVERS\atikmdag.sys
  20:56:38.0871 5968 atikmdag - ok
  20:56:39.0182 5968 avgntflt (1e4114685de1ffa9675e09c6a1fb3f4b) C:\Windows\system32\DRIVERS\avgntflt.sys
  20:56:39.0186 5968 avgntflt - ok
  20:56:39.0339 5968 avipbb (0f78d3dae6dedd99ae54c9491c62adf2) C:\Windows\system32\DRIVERS\avipbb.sys
  20:56:39.0366 5968 avipbb - ok
  20:56:39.0470 5968 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
  20:56:39.0473 5968 Beep - ok
  20:56:39.0567 5968 blbdrive - ok
  20:56:39.0914 5968 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys
  20:56:39.0919 5968 bowser - ok
  20:56:40.0087 5968 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
  20:56:40.0091 5968 BrFiltLo - ok
  20:56:40.0186 5968 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
  20:56:40.0221 5968 BrFiltUp - ok
  20:56:40.0316 5968 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
  20:56:40.0321 5968 Brserid - ok
  20:56:40.0432 5968 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
  20:56:40.0436 5968 BrSerWdm - ok
  20:56:40.0555 5968 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
  20:56:40.0560 5968 BrUsbMdm - ok
  20:56:40.0591 5968 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
  20:56:40.0595 5968 BrUsbSer - ok
  20:56:40.0653 5968 BthEnum (a820438255f37ab8baa2bd59753a8d81) C:\Windows\system32\DRIVERS\BthEnum.sys
  20:56:40.0696 5968 BthEnum - ok
  20:56:40.0839 5968 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
  20:56:40.0842 5968 BTHMODEM - ok
  20:56:40.0959 5968 BthPan (b8c3d9ddf85fd197c3e5f849fef71144) C:\Windows\system32\DRIVERS\bthpan.sys
  20:56:40.0963 5968 BthPan - ok
  20:56:41.0000 5968 BTHPORT (4a74bbb2b6761789f42a6613479bdb1d) C:\Windows\system32\Drivers\BTHport.sys
  20:56:41.0008 5968 BTHPORT - ok
  20:56:41.0082 5968 BTHUSB (1a407f9b707a06f55aa150f9aa072b09) C:\Windows\system32\Drivers\BTHUSB.sys
  20:56:41.0090 5968 BTHUSB - ok
  20:56:41.0181 5968 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
  20:56:41.0186 5968 cdfs - ok
  20:56:41.0490 5968 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys
  20:56:41.0494 5968 cdrom - ok
  20:56:41.0632 5968 circlass (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\DRIVERS\circlass.sys
  20:56:41.0636 5968 circlass - ok
  20:56:41.0737 5968 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys
  20:56:41.0750 5968 CLFS - ok
  20:56:41.0927 5968 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys
  20:56:41.0931 5968 CmBatt - ok
  20:56:42.0110 5968 cmdide (45201046c776ffdaf3fc8a0029c581c8) C:\Windows\system32\drivers\cmdide.sys
  20:56:42.0113 5968 cmdide - ok
  20:56:42.0181 5968 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys
  20:56:42.0184 5968 Compbatt - ok
  20:56:42.0208 5968 crcdisk (2a213ae086bbec5e937553c7d9a2b22c) C:\Windows\system32\drivers\crcdisk.sys
  20:56:42.0212 5968 crcdisk - ok
  20:56:42.0272 5968 Crusoe (22a7f883508176489f559ee745b5bf5d) C:\Windows\system32\drivers\crusoe.sys
  20:56:42.0276 5968 Crusoe - ok
  20:56:42.0418 5968 DfsC (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys
  20:56:42.0423 5968 DfsC - ok
  20:56:43.0173 5968 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys
  20:56:43.0178 5968 disk - ok
  20:56:43.0257 5968 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
  20:56:43.0261 5968 drmkaud - ok
  20:56:43.0333 5968 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys
  20:56:43.0343 5968 DXGKrnl - ok
  20:56:43.0486 5968 E1G60 (f88fb26547fd2ce6d0a5af2985892c48) C:\Windows\system32\DRIVERS\E1G60I32.sys
  20:56:43.0491 5968 E1G60 - ok
  20:56:43.0659 5968 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys
  20:56:43.0664 5968 Ecache - ok
  20:56:43.0785 5968 elxstor (e8f3f21a71720c84bcf423b80028359f) C:\Windows\system32\drivers\elxstor.sys
  20:56:43.0966 5968 elxstor - ok
  20:56:44.0163 5968 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys
  20:56:44.0172 5968 exfat - ok
  20:56:44.0208 5968 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys
  20:56:44.0213 5968 fastfat - ok
  20:56:44.0256 5968 fdc (63bdada84951b9c03e641800e176898a) C:\Windows\system32\DRIVERS\fdc.sys
  20:56:44.0261 5968 fdc - ok
  20:56:44.0432 5968 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
  20:56:44.0437 5968 FileInfo - ok
  20:56:44.0523 5968 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
  20:56:44.0559 5968 Filetrace - ok
  20:56:44.0622 5968 flpydisk (6603957eff5ec62d25075ea8ac27de68) C:\Windows\system32\DRIVERS\flpydisk.sys
  20:56:44.0661 5968 flpydisk - ok
  20:56:44.0754 5968 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys
  20:56:44.0763 5968 FltMgr - ok
  20:56:44.0992 5968 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
  20:56:44.0996 5968 Fs_Rec - ok
  20:56:45.0060 5968 gagp30kx (4e1cd0a45c50a8882616cae5bf82f3c5) C:\Windows\system32\drivers\gagp30kx.sys
  20:56:45.0064 5968 gagp30kx - ok
  20:56:45.0153 5968 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
  20:56:45.0302 5968 GEARAspiWDM - ok
  20:56:45.0628 5968 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys
  20:56:45.0634 5968 HdAudAddService - ok
  20:56:45.0700 5968 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys
  20:56:45.0738 5968 HDAudBus - ok
  20:56:45.0801 5968 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
  20:56:45.0805 5968 HidBth - ok
  20:56:45.0873 5968 HidIr (d8df3722d5e961baa1292aa2f12827e2) C:\Windows\system32\DRIVERS\hidir.sys
  20:56:45.0878 5968 HidIr - ok
  20:56:45.0951 5968 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys
  20:56:45.0955 5968 HidUsb - ok
  20:56:46.0015 5968 HpCISSs (df353b401001246853763c4b7aaa6f50) C:\Windows\system32\drivers\hpcisss.sys
  20:56:46.0020 5968 HpCISSs - ok
  20:56:46.0083 5968 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys
  20:56:46.0092 5968 HTTP - ok
  20:56:46.0142 5968 i2omp (324c2152ff2c61abae92d09f3cca4d63) C:\Windows\system32\drivers\i2omp.sys
  20:56:46.0146 5968 i2omp - ok
  20:56:46.0194 5968 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
  20:56:46.0199 5968 i8042prt - ok
  20:56:46.0258 5968 iaStorV (c957bf4b5d80b46c5017bf0101e6c906) C:\Windows\system32\drivers\iastorv.sys
  20:56:46.0311 5968 iaStorV - ok
  20:56:46.0555 5968 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
  20:56:46.0561 5968 iirsp - ok
  20:56:46.0765 5968 IntcAzAudAddService (aef2fa29204056b81bc4cbf30260dee1) C:\Windows\system32\drivers\RTKVHDA.sys
  20:56:46.0788 5968 IntcAzAudAddService - ok
  20:56:46.0930 5968 intelide (97469037714070e45194ed318d636401) C:\Windows\system32\drivers\intelide.sys
  20:56:46.0971 5968 intelide - ok
  20:56:47.0104 5968 intelppm (ce44cc04262f28216dd4341e9e36a16f) C:\Windows\system32\DRIVERS\intelppm.sys
  20:56:47.0172 5968 intelppm - ok
  20:56:47.0422 5968 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
  20:56:47.0432 5968 IpFilterDriver - ok
  20:56:48.0131 5968 IpInIp - ok
  20:56:48.0418 5968 IPMIDRV (40f34f8aba2a015d780e4b09138b6c17) C:\Windows\system32\drivers\ipmidrv.sys
  20:56:48.0459 5968 IPMIDRV - ok
  20:56:48.0527 5968 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
  20:56:48.0533 5968 IPNAT - ok
  20:56:48.0803 5968 irda (e50a95179211b12946f7e035d60af560) C:\Windows\system32\DRIVERS\irda.sys
  20:56:48.0811 5968 irda - ok
  20:56:48.0844 5968 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
  20:56:48.0850 5968 IRENUM - ok
  20:56:48.0905 5968 irsir (5896b5ff6332ab2be1582523e9656a67) C:\Windows\system32\DRIVERS\irsir.sys
  20:56:48.0910 5968 irsir - ok
  20:56:48.0954 5968 isapnp (350fca7e73cf65bcef43fae1e4e91293) C:\Windows\system32\drivers\isapnp.sys
  20:56:48.0960 5968 isapnp - ok
  20:56:49.0059 5968 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys
  20:56:49.0073 5968 iScsiPrt - ok
  20:56:49.0154 5968 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
  20:56:49.0160 5968 iteatapi - ok
  20:56:49.0237 5968 itecir (a9e05e4dab315e38d30b1729ba94fe66) C:\Windows\system32\DRIVERS\itecir.sys
  20:56:49.0243 5968 itecir - ok
  20:56:49.0286 5968 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
  20:56:49.0291 5968 iteraid - ok
  20:56:49.0356 5968 JGOGO (c995c0e8b4503fac38793bb0236ad246) C:\Windows\system32\DRIVERS\JGOGO.sys
  20:56:49.0361 5968 JGOGO - ok
  20:56:49.0395 5968 JRAID (fe372fde0afc9f724ed9393a33ac9aa7) C:\Windows\system32\DRIVERS\jraid.sys
  20:56:49.0402 5968 JRAID - ok
  20:56:49.0479 5968 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
  20:56:49.0515 5968 kbdclass - ok
  20:56:49.0566 5968 kbdhid (ede59ec70e25c24581add1fbec7325f7) C:\Windows\system32\DRIVERS\kbdhid.sys
  20:56:49.0571 5968 kbdhid - ok
  20:56:49.0614 5968 kbfiltr (cc2a86d7bbf14977340dca61bbcba771) C:\Windows\system32\DRIVERS\kbfiltr.sys
  20:56:49.0620 5968 kbfiltr - ok
  20:56:49.0726 5968 KSecDD (86165728af9bf72d6442a894fdfb4f8b) C:\Windows\system32\Drivers\ksecdd.sys
  20:56:49.0735 5968 KSecDD - ok
  20:56:49.0860 5968 LHidFilt (7f9c7b28cf1c859e1c42619eea946dc8) C:\Windows\system32\DRIVERS\LHidFilt.Sys
  20:56:49.0865 5968 LHidFilt - ok
  20:56:49.0907 5968 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
  20:56:49.0913 5968 lltdio - ok
  20:56:50.0055 5968 LMouFilt (ab33792a87285344f43b5ce23421bab0) C:\Windows\system32\DRIVERS\LMouFilt.Sys
  20:56:50.0063 5968 LMouFilt - ok
  20:56:50.0124 5968 LSI_FC (a2262fb9f28935e862b4db46438c80d2) C:\Windows\system32\drivers\lsi_fc.sys
  20:56:50.0129 5968 LSI_FC - ok
  20:56:50.0170 5968 LSI_SAS (30d73327d390f72a62f32c103daf1d6d) C:\Windows\system32\drivers\lsi_sas.sys
  20:56:50.0176 5968 LSI_SAS - ok
  20:56:50.0236 5968 LSI_SCSI (e1e36fefd45849a95f1ab81de0159fe3) C:\Windows\system32\drivers\lsi_scsi.sys
  20:56:50.0241 5968 LSI_SCSI - ok
  20:56:50.0337 5968 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
  20:56:50.0343 5968 luafv - ok
  20:56:50.0425 5968 LUsbFilt (77030525cd86a93f1af34fa9b96d33ce) C:\Windows\system32\Drivers\LUsbFilt.Sys
  20:56:50.0430 5968 LUsbFilt - ok
  20:56:50.0514 5968 MBAMProtector (69a6268d7f81e53d568ab4e7e991caf3) C:\Windows\system32\drivers\mbam.sys
  20:56:50.0521 5968 MBAMProtector - ok
  20:56:50.0738 5968 megasas (d153b14fc6598eae8422a2037553adce) C:\Windows\system32\drivers\megasas.sys
  20:56:50.0743 5968 megasas - ok
  20:56:50.0805 5968 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
  20:56:50.0812 5968 Modem - ok
  20:56:50.0946 5968 MODEMCSA (cbb59c41f19efea1a000793e08070a62) C:\Windows\system32\drivers\MODEMCSA.sys
  20:56:51.0025 5968 MODEMCSA - ok
  20:56:51.0098 5968 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
  20:56:51.0104 5968 monitor - ok
  20:56:51.0172 5968 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
  20:56:51.0178 5968 mouclass - ok
  20:56:51.0223 5968 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
  20:56:51.0228 5968 mouhid - ok
  20:56:51.0289 5968 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
  20:56:51.0299 5968 MountMgr - ok
  20:56:51.0369 5968 mpio (583a41f26278d9e0ea548163d6139397) C:\Windows\system32\drivers\mpio.sys
  20:56:51.0379 5968 mpio - ok
  20:56:51.0424 5968 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
  20:56:51.0431 5968 mpsdrv - ok
  20:56:51.0631 5968 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
  20:56:51.0695 5968 Mraid35x - ok
  20:56:51.0789 5968 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys
  20:56:51.0797 5968 MRxDAV - ok
  20:56:51.0833 5968 mrxsmb (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys
  20:56:51.0840 5968 mrxsmb - ok
  20:56:51.0919 5968 mrxsmb10 (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys
  20:56:51.0928 5968 mrxsmb10 - ok
  20:56:51.0962 5968 mrxsmb20 (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
  20:56:51.0969 5968 mrxsmb20 - ok
  20:56:52.0006 5968 msahci (742aed7939e734c36b7e8d6228ce26b7) C:\Windows\system32\drivers\msahci.sys
  20:56:52.0012 5968 msahci - ok
  20:56:52.0070 5968 msdsm (3fc82a2ae4cc149165a94699183d3028) C:\Windows\system32\drivers\msdsm.sys
  20:56:52.0079 5968 msdsm - ok
  20:56:52.0140 5968 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
  20:56:52.0146 5968 Msfs - ok
  20:56:52.0199 5968 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
  20:56:52.0208 5968 msisadrv - ok
  20:56:52.0253 5968 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
  20:56:52.0259 5968 MSKSSRV - ok
  20:56:52.0300 5968 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
  20:56:52.0345 5968 MSPCLOCK - ok
  20:56:52.0416 5968 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
  20:56:52.0422 5968 MSPQM - ok
  20:56:52.0869 5968 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys
  20:56:52.0893 5968 MsRPC - ok
  20:56:53.0075 5968 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
  20:56:53.0082 5968 mssmbios - ok
  20:56:53.0141 5968 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
  20:56:53.0147 5968 MSTEE - ok
  20:56:53.0211 5968 MTsensor (97affa9d95ffe20eee6229bc6be166cf) C:\Windows\system32\DRIVERS\ATKACPI.sys
  20:56:53.0213 5968 MTsensor - ok
  20:56:53.0285 5968 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys
  20:56:53.0296 5968 Mup - ok
  20:56:53.0605 5968 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys
  20:56:53.0613 5968 NativeWifiP - ok
  20:56:53.0739 5968 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys
  20:56:53.0750 5968 NDIS - ok
  20:56:53.0799 5968 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
  20:56:53.0808 5968 NdisTapi - ok
  20:56:53.0855 5968 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
  20:56:53.0862 5968 Ndisuio - ok
  20:56:53.0914 5968 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys
  20:56:53.0926 5968 NdisWan - ok
  20:56:54.0148 5968 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
  20:56:54.0155 5968 NDProxy - ok
  20:56:54.0450 5968 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
  20:56:54.0458 5968 NetBIOS - ok
  20:56:54.0666 5968 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys
  20:56:54.0676 5968 netbt - ok
  20:56:54.0829 5968 NETw3v32 (a15f219208843a5a210c8cb391384453) C:\Windows\system32\DRIVERS\NETw3v32.sys
  20:56:54.0857 5968 NETw3v32 - ok
  20:56:54.0899 5968 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
  20:56:54.0912 5968 nfrd960 - ok
  20:56:54.0959 5968 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys
  20:56:54.0966 5968 Npfs - ok
  20:56:55.0088 5968 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
  20:56:55.0096 5968 nsiproxy - ok
  20:56:55.0169 5968 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys
  20:56:55.0189 5968 Ntfs - ok
  20:56:55.0297 5968 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
  20:56:55.0304 5968 ntrigdigi - ok
  20:56:55.0347 5968 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
  20:56:55.0354 5968 Null - ok
  20:56:55.0776 5968 nvlddmkm (cfddedc1151839dd71f78472645214a5) C:\Windows\system32\DRIVERS\nvlddmkm.sys
  20:56:55.0969 5968 nvlddmkm - ok
  20:56:56.0089 5968 nvraid (e69e946f80c1c31c53003bfbf50cbb7c) C:\Windows\system32\drivers\nvraid.sys
  20:56:56.0097 5968 nvraid - ok
  20:56:56.0121 5968 nvstor (9e0ba19a28c498a6d323d065db76dffc) C:\Windows\system32\drivers\nvstor.sys
  20:56:56.0132 5968 nvstor - ok
  20:56:56.0194 5968 nv_agp (07c186427eb8fcc3d8d7927187f260f7) C:\Windows\system32\drivers\nv_agp.sys
  20:56:56.0204 5968 nv_agp - ok
  20:56:56.0222 5968 NwlnkFlt - ok
  20:56:56.0240 5968 NwlnkFwd - ok
  20:56:56.0336 5968 ohci1394 (6f310e890d46e246e0e261a63d9b36b4) C:\Windows\system32\DRIVERS\ohci1394.sys
  20:56:56.0345 5968 ohci1394 - ok
  20:56:56.0437 5968 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys
  20:56:56.0445 5968 Parport - ok
  20:56:56.0515 5968 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys
  20:56:56.0523 5968 partmgr - ok
  20:56:56.0672 5968 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys
  20:56:56.0679 5968 Parvdm - ok
  20:56:56.0747 5968 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys
  20:56:56.0755 5968 pci - ok
  20:56:56.0818 5968 pciide (1636d43f10416aeb483bc6001097b26c) C:\Windows\system32\drivers\pciide.sys
  20:56:56.0826 5968 pciide - ok
  20:56:56.0885 5968 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
  20:56:56.0894 5968 pcmcia - ok
  20:56:56.0978 5968 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
  20:56:57.0022 5968 PEAUTH - ok
  20:56:57.0240 5968 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
  20:56:57.0262 5968 PptpMiniport - ok
  20:56:57.0309 5968 Processor (0e3cef5d28b40cf273281d620c50700a) C:\Windows\system32\drivers\processr.sys
  20:56:57.0316 5968 Processor - ok
  20:56:57.0467 5968 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys
  20:56:57.0475 5968 PSched - ok
  20:56:58.0252 5968 ql2300 (ccdac889326317792480c0a67156a1ec) C:\Windows\system32\drivers\ql2300.sys
  20:56:58.0268 5968 ql2300 - ok
  20:56:58.0386 5968 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
  20:56:58.0395 5968 ql40xx - ok
  20:56:58.0446 5968 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
  20:56:58.0456 5968 QWAVEdrv - ok
  20:56:58.0525 5968 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
  20:56:58.0533 5968 RasAcd - ok
  20:56:58.0596 5968 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
  20:56:58.0604 5968 Rasl2tp - ok
  20:56:58.0674 5968 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys
  20:56:58.0722 5968 RasPppoe - ok
  20:56:58.0817 5968 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys
  20:56:58.0825 5968 RasSstp - ok
  20:56:58.0903 5968 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys
  20:56:58.0913 5968 rdbss - ok
  20:56:59.0013 5968 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
  20:56:59.0020 5968 RDPCDD - ok
  20:56:59.0147 5968 rdpdr (e8bd98d46f2ed77132ba927fccb47d8b) C:\Windows\system32\drivers\rdpdr.sys
  20:56:59.0158 5968 rdpdr - ok
  20:56:59.0268 5968 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
  20:56:59.0279 5968 RDPENCDD - ok
  20:56:59.0358 5968 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys
  20:56:59.0370 5968 RDPWD - ok
  20:56:59.0426 5968 RFCOMM (7ec90c316177ba3f1bce92005264b447) C:\Windows\system32\DRIVERS\rfcomm.sys
  20:56:59.0439 5968 RFCOMM - ok
  20:56:59.0582 5968 rimmptsk (355aac141b214bef1dbc1483afd9bd50) C:\Windows\system32\DRIVERS\rimmptsk.sys
  20:56:59.0596 5968 rimmptsk - ok
  20:56:59.0703 5968 rimsptsk (a4216c71dd4f60b26418ccfd99cd0815) C:\Windows\system32\DRIVERS\rimsptsk.sys
  20:56:59.0744 5968 rimsptsk - ok
  20:56:59.0817 5968 rismxdp (d231b577024aa324af13a42f3a807d10) C:\Windows\system32\DRIVERS\rixdptsk.sys
  20:56:59.0858 5968 rismxdp - ok
  20:56:59.0938 5968 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
  20:56:59.0946 5968 rspndr - ok
  20:57:00.0081 5968 RTL8169 (a1adc7b4c074744662207da6edcdfbb0) C:\Windows\system32\DRIVERS\Rtlh86.sys
  20:57:00.0090 5968 RTL8169 - ok
  20:57:00.0236 5968 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
  20:57:00.0280 5968 sbp2port - ok
  20:57:00.0536 5968 sdbus (8f36b54688c31eed4580129040c6a3d3) C:\Windows\system32\DRIVERS\sdbus.sys
  20:57:00.0545 5968 sdbus - ok
  20:57:00.0630 5968 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
  20:57:00.0638 5968 secdrv - ok
  20:57:00.0678 5968 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys
  20:57:00.0687 5968 Serenum - ok
  20:57:00.0762 5968 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys
  20:57:00.0771 5968 Serial - ok
  20:57:00.0932 5968 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
  20:57:00.0943 5968 sermouse - ok
  20:57:00.0957 5968 MBR (0x1B8) (64b1e91c5c6c2157642651010728f90f) \Device\Harddisk0\DR0
  20:57:00.0972 5968 \Device\Harddisk0\DR0 - ok
  20:57:00.0974 5968 Boot (0x1200) (a491fa8ae3420bfce23c61358a4c1f49) \Device\Harddisk0\DR0\Partition0
  20:57:00.0975 5968 \Device\Harddisk0\DR0\Partition0 - ok
  20:57:00.0979 5968 ============================================================
  20:57:00.0979 5968 Scan finished
  20:57:00.0979 5968 ============================================================
  20:57:01.0005 2008 Detected object count: 0
  20:57:01.0005 2008 Actual detected object count: 0
  
  0
Réponse 7 / 12
Utilisateur anonyme

Bonsoir

Télécharge combofix : http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Ou ici : https://forospyware.com
>Renomme le pour l'enregistrer sur ton bureau en asdehi (tout simplement pour que l'infection ne le contre pas)
-> Double clique combofix.exe.(ou clic droit sous vista « exécuter en tant que... » )
-> Tape sur la touche 1 (Yes) pour démarrer le scan.
-> Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

Avant d'utiliser ComboFix :

-> Déconnecte toi d'Internet et referme les fenêtres de tous les programmes en cours.

-> Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil.

Une fois fait, sur ton bureau double-clic sur Combofix.exe ; (ou clic droit sous vista « exécuter en tant que... »)

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.

- Installe le console de récupération comme demandé ;utile en cas de plantage

- Attention Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programme. Risque de figer l'ordinateur

- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire.

- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

-> Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet.

-> Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

/!\ Ne touche à rien tant que le scan n'est pas terminé. /!\ : risque de figer l'ordinateur (plantage complet)

::Si combofix détecte quelque chose et de demande a redémarrer tu acceptes

@+
0
1. juralandes
  
  Bonjour, Voici le rapport de combofix :
  
  ComboFix 11-11-25.01 - Juralandes 25/11/2011 8:07.1.2 - x86
  Microsoft® Windows Vista(TM) Édition Familiale Premium 6.0.6002.2.1252.33.1036.18.1790.710 [GMT 1:00]
  Lancé depuis: c:\users\Juralandes\Desktop\ComboFix.exe
  AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
  SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
  SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
  .
  .
  (((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  .
  c:\preload\multiframe\DESKTOP_.INI
  c:\windows\system32\ijl11.dll
  .
  .
  ((((((((((((((((((((((((((((( Fichiers créés du 2011-10-25 au 2011-11-25 ))))))))))))))))))))))))))))))))))))
  .
  .
  2011-11-25 07:34 . 2011-11-25 07:34 -------- d-----w- c:\users\Default\AppData\Local\temp
  2011-11-25 06:53 . 2011-11-25 06:53 -------- d-----w- c:\users\Juralandes\AppData\Roaming\Avira
  2011-11-24 18:29 . 2011-11-25 05:04 56200 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{77F98BFC-D00C-4DEB-AACF-CEAF22DF5566}\offreg.dll
  2011-11-22 07:30 . 2011-10-07 03:48 6668624 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{77F98BFC-D00C-4DEB-AACF-CEAF22DF5566}\mpengine.dll
  2011-11-20 16:29 . 2011-11-20 16:29 -------- d-----w- c:\programdata\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}
  2011-11-20 07:20 . 2011-11-20 07:20 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
  2011-11-20 07:20 . 2011-08-31 16:00 22216 ----a-w- c:\windows\system32\drivers\mbam.sys
  2011-11-19 11:32 . 2011-11-21 07:03 512 ----a-w- C:\PhysicalDisk0_MBR.bin
  2011-11-19 11:27 . 2011-11-23 07:41 -------- d-----w- C:\ZHP
  2011-11-19 11:25 . 2011-11-21 07:03 -------- d-----w- c:\program files\ZHPDiag
  2011-11-16 17:27 . 2011-11-07 08:26 939368 ----a-w- c:\windows\system32\flash.ocx
  2011-11-16 08:16 . 2011-11-16 08:16 -------- d-----w- c:\program files\QuickTime
  2011-11-16 08:10 . 2011-11-16 08:10 -------- d-----w- c:\program files\iPod
  2011-11-16 08:10 . 2011-11-16 08:11 -------- d-----w- c:\program files\iTunes
  2011-11-08 19:24 . 2011-10-17 11:41 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
  2011-11-08 19:24 . 2011-09-20 21:02 905088 ----a-w- c:\windows\system32\drivers\tcpip.sys
  2011-11-08 19:24 . 2011-09-30 15:57 707584 ----a-w- c:\program files\Common Files\System\wab32.dll
  .
  .
  .
  (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  2011-11-25 05:04 . 2009-07-08 06:00 45056 ----a-w- c:\windows\system32\acovcnt.exe
  2011-10-24 13:29 . 2011-10-24 13:29 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
  2011-10-24 13:29 . 2011-10-24 13:29 69632 ----a-w- c:\windows\system32\QuickTime.qts
  2011-09-06 13:30 . 2011-10-14 07:32 2043392 ----a-w- c:\windows\system32\win32k.sys
  2011-09-01 02:35 . 2011-10-15 01:20 1798144 ----a-w- c:\windows\system32\jscript9.dll
  2011-09-01 02:28 . 2011-10-15 01:20 1126912 ----a-w- c:\windows\system32\wininet.dll
  2011-09-01 02:22 . 2011-10-15 01:20 2382848 ----a-w- c:\windows\system32\mshtml.tlb
  2011-08-30 21:05 . 2011-08-30 21:05 83816 ----a-w- c:\windows\system32\dns-sd.exe
  2011-08-30 21:05 . 2011-08-30 21:05 73064 ----a-w- c:\windows\system32\dnssd.dll
  2011-11-10 17:02 . 2011-10-02 12:46 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
  .
  .
  ((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
  .
  .
  *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
  REGEDIT4
  .
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
  "{9ec204df-0e48-4c32-816e-2e928a4fd9c2}"= "mscoree.dll" [2009-11-08 297808]
  .
  [HKEY_CLASSES_ROOT\clsid\{9ec204df-0e48-4c32-816e-2e928a4fd9c2}]
  [HKEY_CLASSES_ROOT\IEToolbar.Toolbar]
  .
  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
  @="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
  [HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
  2007-06-02 00:08 143360 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll
  .
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
  "Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-09-12 17351304]
  .
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "ATKMEDIA"="c:\program files\ASUS\ATK Media\DMEDIA.EXE" [2006-11-02 61440]
  "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-03-01 857648]
  "ASUS Camera ScreenSaver"="c:\windows\ASScrProlog.exe" [2009-07-08 37232]
  "ASUS Screen Saver Protector"="c:\windows\ASScrPro.exe" [2009-07-08 33136]
  "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
  "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
  "SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-11-22 630784]
  "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2011-04-21 281768]
  "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240]
  "AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-10-05 59240]
  "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-11-12 421736]
  "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-10-24 421888]
  "Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-08-31 449608]
  .
  [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
  "EnableUIADesktopToggle"= 0 (0x0)
  .
  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
  "aux"=wdmaud.drv
  .
  [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
  "DisableMonitoring"=dword:00000001
  .
  [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
  "DisableMonitoring"=dword:00000001
  .
  [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
  "DisableMonitoring"=dword:00000001
  .
  [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
  "AntiVirusOverride"=dword:00000001
  .
  R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
  R2 Orange update Core Service;Orange update Core Service;c:\program files\Orange\OrangeUpdate\Service\OUCore.exe [2011-05-20 1055872]
  R3 WPFFontCache_v0400;Cache de police de Windows Presentation Foundation 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
  S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
  S2 AntiVirSchedulerService;Avira AntiVir Planificateur;c:\program files\Avira\AntiVir Desktop\sched.exe [2011-04-21 136360]
  S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2011-08-31 366152]
  S2 StkSSrv;Syntek AVStream USB2.0 WebCam Service;c:\windows\System32\StkCSrv.exe [2007-02-07 24576]
  S3 itecir;ITECIR Infrared Receiver;c:\windows\system32\DRIVERS\itecir.sys [2006-11-24 45568]
  S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-08-31 22216]
  S3 StkCMini;Syntek AVStream USB2.0 1.3M WebCam;c:\windows\system32\Drivers\StkCMini.sys [2007-02-13 1245056]
  .
  .
  [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
  bthsvcs REG_MULTI_SZ BthServ
  LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
  rsmsvcs REG_MULTI_SZ ntmssvc
  .
  .
  ------- Examen supplémentaire -------
  .
  uStart Page = hxxp://r.orange.fr/r/Ohome_portail?ref=O_OI_defaultPage
  uDefault_Search_URL = hxxp://www.durable.com/recherche
  uSearchMigratedDefaultURL = hxxp://www.durable.com/result?cx=partner-pub-7902900401080901%3Azbljezwsgul&cof=FORID%3A10&ie=UTF-8&q={searchTerms}
  mStart Page = hxxp://www.durable.com/recherche
  uInternet Settings,ProxyOverride = *.local
  uSearchAssistant = hxxp://www.durable.com/recherche
  uSearchURL,(Default) = hxxp://www.durable.com/recherche
  IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
  IE: ajouter cette page à vos favoris Orange - c:\users\JURALA~1\AppData\Local\Temp\cce6C20.html
  IE: envoyer le texte sélectionné par sms - c:\users\Juralandes\AppData\Roaming\Orange\OrangeInside\src\sendsmsselectedtext_html\sendsmsselectedtext.html
  IE: envoyer par sms - c:\users\Juralandes\AppData\Roaming\Orange\OrangeInside\src\sendsms_html\sendsms.html
  IE: envoyer un mail - c:\users\Juralandes\AppData\Roaming\Orange\OrangeInside\src\sendmail_html\sendmail.html
  IE: orange.fr - c:\users\Juralandes\AppData\Roaming\Orange\OrangeInside\src\orange_html\orange.html
  IE: rechercher le texte sélectionné - c:\users\Juralandes\AppData\Roaming\Orange\OrangeInside\src\selectedsearch_html\selectedsearch.html
  IE: traduire la page - c:\users\JURALA~1\AppData\Local\Temp\cce6BC0.html
  IE: traduire le texte sélectionné - c:\users\JURALA~1\AppData\Local\Temp\cce6BF0.html
  Trusted Zone: m6vod.fr
  Trusted Zone: orange.fr\logicielsgratuits
  TCP: DhcpNameServer = 192.168.1.1
  FF - ProfilePath - c:\users\Juralandes\AppData\Roaming\Mozilla\Firefox\Profiles\u5l5u9yk.default\
  FF - prefs.js: browser.search.defaulturl - hxxp://www.durable.com/result?cx=partner-pub-7902900401080901%3Azbljezwsgul&cof=FORID%3A10&ie=UTF-8&q=
  FF - prefs.js: browser.search.selectedEngine - Orange
  FF - prefs.js: browser.startup.homepage - hxxp://r.orange.fr/r/Ohome_portail?ref=O_OI_defaultPage
  FF - prefs.js: keyword.URL - hxxp://rws.search.ke.voila.fr/RW/S/opensearch_orange?rdata=
  .
  - - - - ORPHELINS SUPPRIMES - - - -
  .
  SafeBoot-91713968.sys
  MSConfigStartUp-M6VOD - c:\program files\M6VOD\M6VOD.exe
  AddRemove-{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA} - c:\programdata\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}\bm_installer.exe
  .
  .
  .
  **************************************************************************
  .
  catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
  Rootkit scan 2011-11-25 08:35
  Windows 6.0.6002 Service Pack 2 NTFS
  .
  Recherche de processus cachés ...
  .
  Recherche d'éléments en démarrage automatique cachés ...
  .
  Recherche de fichiers cachés ...
  .
  .
  C:\ADSM_PData_0150
  .
  Scan terminé avec succès
  Fichiers cachés: 1
  .
  **************************************************************************
  .
  --------------------- CLES DE REGISTRE BLOQUEES ---------------------
  .
  [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
  @Denied: (A) (Users)
  @Denied: (A) (Everyone)
  @Allowed: (B 1 2 3 4 5) (S-1-5-20)
  "BlindDial"=dword:00000000
  "MSCurrentCountry"=dword:000000b5
  .
  Heure de fin: 2011-11-25 08:44:33
  ComboFix-quarantined-files.txt 2011-11-25 07:44
  .
  Avant-CF: 31 174 533 120 octets libres
  Après-CF: 32 941 154 304 octets libres
  .
  - - End Of File - - 512A90E1A76E6AE3A64F974ECAFC88FC
  
  0
Réponse 8 / 12
Utilisateur anonyme

Bonsoir

As tu encore des soucis de redémarrage?

@+
0
1. juralandes
  
  Oui, j ai l'impression et il est toujours lent :-(
  Que pourrais je faire de plus ???
  
  0
Réponse 9 / 12
Utilisateur anonyme

Bonjour

En mode normal;poste moi un nouveau rapport ZHPDiag

Merci

@+
0
1. juralandes
  
  Voici le rapport :
  http://cjoint.com/?AKAmaVGp3FX
  
  0
2. juralandes
  
  Bonsoir,
  J'avais oublié de préciser, non seulement, il redémarre inopinément, mais il refuse de s'éteindre (il redémarre en fait...).
  
  0
Réponse 10 / 12
Utilisateur anonyme

Bonsoir

Rien de particulier.
Un problème de pilote de périphérique.

1)Pour java utilises JavaRa

et un autre tutoriel javaRa http://www.libellules.ch/dotclear/index.php?post/2008/07/13/2689-javara

Décompresse le fichier sur le Bureau (Clic droit > Extraire tout).
* Double-cliques ou clic droit sous Vista sur le répertoire JavaRa.
* Puis double-cliques sur le fichier JavaRa.exe (le exe peut ne pas s'afficher).
* Choisis Français puis cliques sur Select.
* Cliques sur Effacer les anciennes versions
* Cliques sur Oui pour confirmer. Laisses travailler et cliques ensuite sur OK, puis une deuxième fois sur OK.
* Un rapport va s'ouvrir. Postes-le dans ta prochaine réponse.
* Ferme l'application.

*Va sur ce site ensuite pour récupérer cette dernière version : https://www.java.com/fr/

Note : le rapport se trouve aussi dans C:\ sous le nom JavaRa.log.

2) Télécharge DelFix de Xplode
Ou si problème sur ce site : http://sd-1.archive-host.com/membres/up/17959594961240255/DelFix.exe

Ou encore : https://www.commentcamarche.net/download/s/delfix

* Lance le.
* A l'invite, [Suppression]
* Un rapport va s'ouvrir à la fin, colle le dans la réponse

Ensuite pour le désinstaller ; tu relances et tu passes à l'option [Désinstallation]

3)Tu disposes de Ccleaner;met le à jour et ensuite lance le avec ces réglages:
.double-cliques sur l'icône de Ccleaner pour l'ouvrir
.une fois ouvert tu cliques sur option et puis avancé
.tu décoches effacer uniquement les fichiers, du dossier temp de windows plus vieux que 24 heures
.cliques sur nettoyeur
.cliques sur windows et dans la colonne avancé
. coches la première case vieilles données du perfetch ce qui te donnes la case vielles données du perfetch
.cliques sur analyse une fois l'analyse terminé
.cliques sur lancer le nettoyage et sur la demande de confirmation OK il vas falloir que tu le refasses une autre fois une fois fini vérifies en appuyant de nouveau sur analyse pour être sur qu'il n'y est plus rien
.clique maintenant sur registre et puis sur rechercher les erreurs
.laisse tout coché et clique sur réparer les erreurs sélectionnées
.il te demande de sauvegarder OUI
.tu lui donnes un nom pour pouvoir la retrouver et enregistre
.clique sur corriger toutes les erreurs sélectionnées et sur la demande de confirmation OK
.il supprime et une fois fermé tu vérifies en relançant rechercher les erreurs
.tu retournes dans option et tu recoches la case effacer uniquement les fichiers, du dossier temp de windows plus vieux que 48 heures et sur nettoyeur, windows sous avancé tu décoches la première case vieilles données du perfetch
.tu peux fermer Ccleaner.

4)Purge la restauration sur Vista.
Comment faire :

https://www.commentcamarche.net/faq/13214-vista-desactiver-reactiver-la-restauration-systeme-de-vista

Cela supprime toutes traces des diverses infections ;et permettra une éventuelle restauration sans infections

@+
0
1. juralandes
  
  Je suis en train de suivre la procédure que tu m'a indiquée...
  Voici le rapprt :
  JavaRa 1.16 Removal Log.
  
  Report follows after line.
  
  ------------------------------------
  
  The JavaRa removal process was started on Wed Nov 30 16:49:46 2011
  
  Found and removed: C:\Users\Juralandes\AppData\LocalLow\Sun\Java\jre1.6.0_14
  
  Found and removed: C:\Users\Juralandes\AppData\LocalLow\Sun\Java\jre1.6.0_15
  
  Found and removed: C:\Users\Juralandes\AppData\LocalLow\Sun\Java\jre1.6.0_22
  
  Found and removed: C:\Users\Juralandes\AppData\LocalLow\Sun\Java\jre1.6.0_23
  
  Found and removed: C:\Users\Juralandes\AppData\LocalLow\Sun\Java\jre1.6.0_25
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0001-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0002-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0003-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0004-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0005-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0006-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0007-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0008-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0009-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0010-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0011-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0012-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0013-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0014-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0015-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0016-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0017-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0018-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0019-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0020-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0021-ABCDEFFDCBA}. The error returned was 124.
  
  There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0022-ABCDEFFDCBA}. The error returned was 124.
  
  Found and removed: Applications\java.exe
  
  Found and removed: Applications\javaw.exe
  
  Found and removed: JavaPlugin.FamilyVersionSupport
  
  Found and removed: CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}
  
  Found and removed: CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}
  
  Found and removed: JavaScript
  
  Found and removed: JavaScript Author
  
  Found and removed: JavaScript1.1
  
  Found and removed: JavaScript1.1 Author
  
  Found and removed: JavaScript1.2
  
  Found and removed: JavaScript1.2 Author
  
  Found and removed: Software\Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}
  
  Found and removed: Software\Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}
  
  Found and removed: Software\JavaSoft\Java Update
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}
  
  Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}
  
  Found and removed: SOFTWARE\Classes\JavaPlugin
  
  Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6
  
  Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1
  
  Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02
  
  Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03
  
  Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04
  
  Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2
  
  Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01
  
  Found and removed: SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}
  
  Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3412062B02
  
  Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3412062B03
  
  Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3612062B02
  
  Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3612062B03
  
  Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10}
  
  Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1
  
  Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1.1
  
  Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1.2
  
  Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1.3
  
  Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.2
  
  Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.2.1
  
  Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.3
  
  Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.3.1
  
  Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.4
  
  Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.4.1
  
  Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.4.2
  
  Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.5
  
  A bientot pour la suite !
  
  0
2. juralandes
  
  Rapport delfix :
  # DelFix v8.6 - Rapport créé le 30/11/2011 à 16:57:32
  # Mis à jour le 13/10/11 à 18h par Xplode
  # Système d'exploitation : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
  # Nom d'utilisateur : Juralandes - PC-DE-JURALANDE (Administrateur)
  # Exécuté depuis : C:\Users\Juralandes\Downloads\delfix.exe
  # Option [Suppression]
  
  ~~~~~~ Dossiers(s) ~~~~~~
  
  Supprimé : C:\Qoobox
  Supprimé : C:\Combofix
  Supprimé : C:\ZHP
  Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
  Supprimé : C:\Program Files\ZHPDiag
  
  ~~~~~~ Fichier(s) ~~~~~~
  
  Supprimé : C:\AdwCleaner[S1].txt
  Supprimé : C:\ComboFix.txt
  Supprimé : C:\JavaRa.log
  Supprimé : C:\PhysicalDisk0_MBR.bin
  Supprimé : C:\TDSSKiller.2.6.21.0_24.11.2011_19.10.02_log.txt
  Supprimé : C:\TDSSKiller.2.6.21.0_24.11.2011_19.11.25_log.txt
  Supprimé : C:\TDSSKiller.2.6.21.0_24.11.2011_20.56.21_log.txt
  Supprimé : C:\Users\Juralandes\Desktop\JavaRa.def
  Non Supprimé : C:\Users\Juralandes\Desktop\JavaRa.exe
  Supprimé : C:\Users\Juralandes\Desktop\TDSSKiller.exe
  Supprimé : C:\Users\Juralandes\Desktop\ZHPDiag.txt
  Supprimé : C:\Users\Juralandes\Downloads\adwcleaner0.exe
  Supprimé : C:\Users\Juralandes\Downloads\ZHPDiag2.exe
  Supprimé : C:\Users\Public\Desktop\ZHPDiag.lnk
  Supprimé : C:\Users\Public\Desktop\ZHPFix.lnk
  Supprimé : C:\Users\Public\Desktop\MBRCheck.lnk
  Supprimé : C:\Windows\grep.exe
  Supprimé : C:\Windows\PEV.exe
  Supprimé : C:\Windows\NIRCMD.exe
  Supprimé : C:\Windows\MBR.exe
  Supprimé : C:\Windows\SED.exe
  Supprimé : C:\Windows\SWREG.exe
  Supprimé : C:\Windows\SWSC.exe
  Supprimé : C:\Windows\SWXCACLS.exe
  Supprimé : C:\Windows\Zip.exe
  
  ~~~~~~ Registre ~~~~~~
  
  Clé Supprimée : HKLM\SOFTWARE\AdwCleaner
  Clé Supprimée : HKLM\SOFTWARE\Swearware
  Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1
  Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe
  
  ~~~~~~ Autres ~~~~~~
  
  -> Prefetch Vidé
  
  *************************
  
  DelFix[S1].txt - [2005 octets] - [30/11/2011 16:57:32]
  
  ########## EOF - C:\DelFix[S1].txt - [2129 octets] ##########
  
  0
Réponse 11 / 12
Utilisateur anonyme

Bonsoir

As tu procédé à la purge de la restauration.

Je te propose de clore ce post et d'ouvrir un nouveau sujet dans la rubrique
Matériel/Hardware de ce forum.

@+
0
1. juralandes
  
  oui,j ai suivi toutes les instructions. Enfin, je pense. Mais rien n'y fait. Je ne peux pas éteindre mon portable correctement (je suis obligée de le forcer) et il y a toujours des rémarrages intempestifs :-(
  Que puis je faire d'autre ?
  
  0
Réponse 12 / 12
Utilisateur anonyme

Bonjour

Comme précisé plus haut;j'opte pour un problème matériel ou logiciel;donc tu ouvres un nouveau sujet dans la rubrique Matériel/Hardware de ce forum.

@+
0

Mon portable ASUS redémarre sans cesse

12 réponses

Discussions similaires

Newsletters