Infection après mise à jour java

# AdwCleaner v2.301 - Rapport créé le 28/05/2013 à 11:49:27
# Mis à jour le 16/05/2013 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : Marie-France - BUREAU
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users\Marie-France\Downloads\adwcleaner.exe
# Option [Suppression]

***** [Services] *****

***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Program Files (x86)\Conduit
Dossier Supprimé : C:\Program Files (x86)\Viewpoint
Dossier Supprimé : C:\Users\Marie-France\AppData\Roaming\OpenCandy
Fichier Supprimé : C:\user.js
Fichier Supprimé : C:\Users\Marie-France\AppData\Roaming\Mozilla\Firefox\Profiles\pmb4zs9y.default\browsermngr_prefs.js

***** [Registre] *****

Clé Supprimée : HKCU\Software\APN PIP
Clé Supprimée : HKCU\Software\AppDataLow\Software\Crossrider
Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong
Clé Supprimée : HKCU\Software\AutocompletePro
Clé Supprimée : HKCU\Software\Cr_Installer
Clé Supprimée : HKCU\Software\DataMngr
Clé Supprimée : HKCU\Software\DataMngr_Toolbar
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\DealPly
Clé Supprimée : HKCU\Software\Nosibay
Clé Supprimée : HKCU\Software\PIP
Clé Supprimée : HKCU\Software\SmartBar
Clé Supprimée : HKCU\Software\Softonic
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Supprimée : HKLM\Software\Babylon
Clé Supprimée : HKLM\Software\BabylonToolbar
Clé Supprimée : HKLM\Software\Boxore
Clé Supprimée : HKLM\Software\BrowserMngr
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
Clé Supprimée : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2849852
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT3128284
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{9DBB28C1-1925-11D3-A498-00104B6EB52E}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Clé Supprimée : HKLM\Software\Conduit
Clé Supprimée : HKLM\Software\DataMngr
Clé Supprimée : HKLM\Software\Iminent
Clé Supprimée : HKLM\Software\MetaStream
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\boxore_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\boxore_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\I Want This_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\I Want This_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7555B87D-D711-48B2-B97D-04DF700652BA}
Clé Supprimée : HKLM\Software\PIP
Clé Supprimée : HKLM\Software\Viewpoint
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7555B87D-D711-48B2-B97D-04DF700652BA}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ehdmaehkiiampolokajdcelladmnopgp
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\elhjaoldnkkbifioodjndkijecdeinld
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fdloijijlkoblmigdofommgnheckmaki
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{65BCD620-07DD-012F-819F-073CF1B8F7C6}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7555B87D-D711-48B2-B97D-04DF700652BA}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FD8F79A0-D2E2-4FA2-AEAF-393EAC8064F7}
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Main [BrowserMngr Start Page]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow [*.crossrider.com]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [BrowserMngrDefaultScope]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{8E5025C2-8EA3-430D-80B8-A14151068A6D}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow [*.crossrider.com]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

***** [Navigateurs] *****

-\\ Internet Explorer v10.0.9200.16576

Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.babylon.com/?affID=108988&tt=120912_ccp_3812_8&babsrc=HP_ss&mntrId=142006b90000000000001c659d651f3d --> hxxp://www.google.com
Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://cloud-search.linkury.com/results.htm?cx=partner-pub-7890126930977991:1926905636&cof=FORID:11&q={searchTerms}&sa=Search&siteurl=search.linkury.com --> hxxp://www.google.com
Remplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?affID=108988&tt=120912_ccp_3812_8&babsrc=NT_ss&mntrId=142006b90000000000001c659d651f3d --> hxxp://www.google.com
Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://cloud-search.linkury.com/results.htm?cx=partner-pub-7890126930977991:1926905636&cof=FORID:11&q={searchTerms}&sa=Search&siteurl=search.linkury.com --> hxxp://www.google.com
Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://cloud-search.linkury.com/results.htm?cx=partner-pub-7890126930977991:1926905636&cof=FORID:11&q={searchTerms}&sa=Search&siteurl=search.linkury.com --> hxxp://www.google.com
Remplacé : [HKCU\Software\Microsoft\Internet Explorer\SearchUrl - Default] = hxxp://cloud-search.linkury.com/results.htm?cx=partner-pub-7890126930977991:1926905636&cof=FORID:11&q={searchTerms}&sa=Search&siteurl=search.linkury.com --> hxxp://www.google.com

-\\ Mozilla Firefox v19.0.2 (fr)

Fichier : C:\Users\Marie-France\AppData\Roaming\Mozilla\Firefox\Profiles\pmb4zs9y.default\prefs.js

C:\Users\Marie-France\AppData\Roaming\Mozilla\Firefox\Profiles\pmb4zs9y.default\user.js ... Supprimé !

Supprimée : user_pref("browser.search.defaultthis.engineName", "BittorrentBar_FR Customized Web Search");
Supprimée : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2849852&Sea[...]
Supprimée : user_pref("browser.search.order.1", "Ask.com");
Supprimée : user_pref("extensions.BabylonToolbar.admin", false);
Supprimée : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Supprimée : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
Supprimée : user_pref("extensions.BabylonToolbar.autoRvrt", "false");
Supprimée : user_pref("extensions.BabylonToolbar.babExt", "");
Supprimée : user_pref("extensions.BabylonToolbar.babTrack", "affID=108988&tt=120912_ccp_3812_8");
Supprimée : user_pref("extensions.BabylonToolbar.bbDpng", "19");
Supprimée : user_pref("extensions.BabylonToolbar.cntry", "FR");
Supprimée : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Supprimée : user_pref("extensions.BabylonToolbar.envrmnt", "production");
Supprimée : user_pref("extensions.BabylonToolbar.excTlbr", false);
Supprimée : user_pref("extensions.BabylonToolbar.hdrMd5", "DE0311FA98D2EFB4C02E530A1F0E2A25");
Supprimée : user_pref("extensions.BabylonToolbar.hmpg", false);
Supprimée : user_pref("extensions.BabylonToolbar.id", "142006b90000000000001c659d651f3d");
Supprimée : user_pref("extensions.BabylonToolbar.instlDay", "15602");
Supprimée : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Supprimée : user_pref("extensions.BabylonToolbar.isdcmntcmplt", true);
Supprimée : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.6.9.1217:49:37");
Supprimée : user_pref("extensions.BabylonToolbar.mntrvrsn", "1.3.1");
Supprimée : user_pref("extensions.BabylonToolbar.newTab", false);
Supprimée : user_pref("extensions.BabylonToolbar.pnu_base", "{\"newVrsn\":\"27\",\"lastVrsn\":\"27\",\"vrsnLoad\[...]
Supprimée : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Supprimée : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Supprimée : user_pref("extensions.BabylonToolbar.sg", "azb");
Supprimée : user_pref("extensions.BabylonToolbar.smplGrp", "azb");
Supprimée : user_pref("extensions.BabylonToolbar.srcExt", "ss");
Supprimée : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Supprimée : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=[...]
Supprimée : user_pref("extensions.BabylonToolbar.vrsn", "1.6.9.12");
Supprimée : user_pref("extensions.BabylonToolbar.vrsnTs", "1.6.9.1217:49:37");
Supprimée : user_pref("extensions.BabylonToolbar.vrsni", "1.6.9.12");
Supprimée : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Supprimée : user_pref("extensions.BabylonToolbar_i.babExt", "");
Supprimée : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=108988&tt=120912_ccp_3812_8");
Supprimée : user_pref("extensions.BabylonToolbar_i.hardId", "142006b90000000000001c659d651f3d");
Supprimée : user_pref("extensions.BabylonToolbar_i.id", "142006b90000000000001c659d651f3d");
Supprimée : user_pref("extensions.BabylonToolbar_i.instlDay", "15382");
Supprimée : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Supprimée : user_pref("extensions.BabylonToolbar_i.newTab", false);
Supprimée : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Supprimée : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Supprimée : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Supprimée : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Supprimée : user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9");
Supprimée : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Supprimée : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.6.9.1217:49:37");
Supprimée : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Supprimée : user_pref("extensions.funmoods.admin", false);
Supprimée : user_pref("extensions.funmoods.aflt", "pvl");
Supprimée : user_pref("extensions.funmoods.cntry", "FR");
Supprimée : user_pref("extensions.funmoods.dfltLng", "");
Supprimée : user_pref("extensions.funmoods.dfltSrch", true);
Supprimée : user_pref("extensions.funmoods.excTlbr", false);
Supprimée : user_pref("extensions.funmoods.hdrMd5", "EAB74FDCB936208511CB834F77A4365E");
Supprimée : user_pref("extensions.funmoods.hmpg", true);
Supprimée : user_pref("extensions.funmoods.id", "142006b90000000000001c659d651f3d");
Supprimée : user_pref("extensions.funmoods.instlDay", "15398");
Supprimée : user_pref("extensions.funmoods.instlRef", "");
Supprimée : user_pref("extensions.funmoods.isDcmntCmplt", true);
Supprimée : user_pref("extensions.funmoods.lastVrsnTs", "1.5.11.1612:31:50");
Supprimée : user_pref("extensions.funmoods.newTab", true);
Supprimée : user_pref("extensions.funmoods.newTabUrl", "hxxp://start.funmoods.com/?f=2&a=pvl");
Supprimée : user_pref("extensions.funmoods.noFFXTlbr", false);
Supprimée : user_pref("extensions.funmoods.prdct", "funmoods");
Supprimée : user_pref("extensions.funmoods.prtnrId", "funmoods");
Supprimée : user_pref("extensions.funmoods.sg", "none");
Supprimée : user_pref("extensions.funmoods.smplGrp", "none");
Supprimée : user_pref("extensions.funmoods.srchPrvdr", "Search");
Supprimée : user_pref("extensions.funmoods.tlbrId", "base");
Supprimée : user_pref("extensions.funmoods.tlbrSrchUrl", "hxxp://start.funmoods.com/results.php?f=3&a=pvl&q=");
Supprimée : user_pref("extensions.funmoods.vrsn", "1.5.11.16");
Supprimée : user_pref("extensions.funmoods.vrsnTs", "1.5.11.1612:31:50");
Supprimée : user_pref("extensions.funmoods.vrsni", "1.5.11.16");
Supprimée : user_pref("extensions.funmoods_i.aflt", "pvl");
Supprimée : user_pref("extensions.funmoods_i.dfltLng", "");
Supprimée : user_pref("extensions.funmoods_i.dfltSrch", true);
Supprimée : user_pref("extensions.funmoods_i.dnsErr", true);
Supprimée : user_pref("extensions.funmoods_i.excTlbr", false);
Supprimée : user_pref("extensions.funmoods_i.hmpg", true);
Supprimée : user_pref("extensions.funmoods_i.hmpgUrl", "hxxp://start.funmoods.com/?f=1&a=pvl");
Supprimée : user_pref("extensions.funmoods_i.id", "142006b90000000000001c659d651f3d");
Supprimée : user_pref("extensions.funmoods_i.instlDay", "15398");
Supprimée : user_pref("extensions.funmoods_i.instlRef", "");
Supprimée : user_pref("extensions.funmoods_i.newTab", true);
Supprimée : user_pref("extensions.funmoods_i.newTabUrl", "hxxp://start.funmoods.com/?f=2&a=pvl");
Supprimée : user_pref("extensions.funmoods_i.prdct", "funmoods");
Supprimée : user_pref("extensions.funmoods_i.prtnrId", "funmoods");
Supprimée : user_pref("extensions.funmoods_i.smplGrp", "none");
Supprimée : user_pref("extensions.funmoods_i.srchPrvdr", "Search");
Supprimée : user_pref("extensions.funmoods_i.tlbrId", "base");
Supprimée : user_pref("extensions.funmoods_i.tlbrSrchUrl", "hxxp://start.funmoods.com/results.php?f=3&a=pvl&q=")[...]
Supprimée : user_pref("extensions.funmoods_i.vrsn", "1.5.11.16");
Supprimée : user_pref("extensions.funmoods_i.vrsnTs", "1.5.11.1612:31:50");
Supprimée : user_pref("extensions.funmoods_i.vrsni", "1.5.11.16");
Supprimée : user_pref("extensions.helperbar.SmartbarDisabled", false);
Supprimée : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);

*************************

AdwCleaner[R1].txt - [25506 octets] - [28/05/2013 11:48:57]
AdwCleaner[R4].txt - [25186 octets] - [27/05/2013 08:42:25]
AdwCleaner[S1].txt - [25471 octets] - [28/05/2013 11:49:27]
AdwCleaner[S2].txt - [25217 octets] - [27/05/2013 08:43:29]

########## EOF - C:\AdwCleaner[S1].txt - [25593 octets] ##########

salut

Télécharge et enregistre ADWCleaner sur ton bureau :

(la grosse flèche verte en milieu de page)

Lance le,(Pour vista/7/8 => clic droit "executer en tant qu'administrateur")

clique sur suppression et poste C:\Adwcleaner[Sx].txt

Télécharge ici :OTL

▶ enregistre le sur ton Bureau.

si tu as XP => double clique
si tu as Vista ou windows 7 / 8 => clic droit "executer en tant que...."

sur OTL.exe pour le lancer.

▶ => Clique ici pour voir la Configuration

▶ Copie et colle le contenu de ce qui suit en gras dans la partie inférieure d'OTL "Personnalisation"


HKCU\Software
HKLM\Software
%Homedrive%\*
%Homedrive%\*.
%LocalAppData%\*
%LocalAppData%\*.
%programFiles%\*
%programFiles%\*.
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\*.exe /lockedfiles
%systemroot%\system32\*.in*
%systemroot%\Tasks\*
%systemroot%\system32\Tasks\*
%systemroot%\system32\drivers\*.sy* /lockedfiles
%systemroot%\system32\config\*.exe /s
%Systemroot%\ServiceProfiles\*.exe /s
%systemroot%\system32\*.sys
/md5start
explorer.exe
winlogon.exe
wininit.exe
volsnap.sys
atapi.sys
ndisuio.sys
ndis.sys
cdrom.sys
i8042prt.sys
iastor.sys
tdx.sys
netbt.sys
afd.sys
/md5stop
netsvcs
safebootminimal
safebootnetwork
CREATERESTOREPOINT

▶ Clic sur Analyse.

A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).

Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\<Bureau ou Desktop>\OTL.txt)

▶▶▶ NE LE POSTE PAS SUR LE FORUM (il est trop long)

heberge OTL.txt et extra.txt sur https://www.cjoint.com/ et donne les liens

http://cjoint.com/?CECmIlqhjiy

https://www.cjoint.com/c/CECnd4POhj2

fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.

▶ Télécharge ici :

Malwarebytes

▶ Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

relance malwarebytes en suivant scrupuleusement ces consignes :

! Déconnecte toi et ferme toutes applications en cours !

▶ Lance Malwarebyte's .

Fais un examen dit "Complet" .

▶ Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
▶ à la fin tu cliques sur "résultat" .
▶ Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .

▶ Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

▶ Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)

Malwarebytes Anti-Malware (Essai) 1.75.0.1300
www.malwarebytes.org

Version de la base de données: v2013.05.28.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16576
Marie-France :: BUREAU [administrateur]

Protection: Désactivé

28/05/2013 13:30:22
mbam-log-2013-05-28 (13-30-22).txt

Type d'examen: Examen complet (C:\|D:\|G:\|I:\|Q:\|)
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 490983
Temps écoulé: 2 heure(s), 8 minute(s), 13 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VLC classic (Trojan.FakeVLC) -> Mis en quarantaine et supprimé avec succès.

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 4
C:\Program Files (x86)\Vlcclassic\Uninstall.exe (Trojan.FakeVLC) -> Mis en quarantaine et supprimé avec succès.
C:\Users\Marie-France\Downloads\PiloteHunter(1).exe (PUP.BundleInstaller.IB) -> Mis en quarantaine et supprimé avec succès.
C:\Users\Marie-France\Downloads\PiloteHunter.exe (PUP.BundleInstaller.IB) -> Mis en quarantaine et supprimé avec succès.
C:\Users\Marie-France\Downloads\Setup.exe (PUP.IBryte) -> Mis en quarantaine et supprimé avec succès.

(fin)

ne telecharge les logiciels que chez le site de l'editeur, je sais pas ou tu as telechargé PiloteHunter mais bon tu vois que....

refais OTL selon les memes principes

OK je refais OTL
Mais je n'ai pas téléchargé Pilote Hunter, je ne sais pas ce que c'est.A moins que ça soit mon fils!!!!

https://www.cjoint.com/c/CECrvLiCIpW

http://cjoint.com/?CECrwIZBfaQ

ATTENTION !!! : Script personnalisé pour cette machine uniquement , ne pas reproduire !!

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."

sur OTL.exe pour le lancer.

▶Copie la liste qui se trouve en gras ci-dessous,

▶ colle-la dans la zone sous "Personnalisation" :

:processes
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
Teatimer.exe

:OTL
IE - HKU\S-1-5-21-315621274-151502726-3574829184-1001\..\URLSearchHook: {ef79f67a-6ad7-4715-a0f8-932fca442023} - No CLSID value found
IE - HKU\S-1-5-21-315621274-151502726-3574829184-1001\..\SearchScopes\{6B83D83A-8EDA-4AA8-BA55-0629DE04A768}: "URL" = http://www.search.ask.com/?l=dis{searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=9674902D-6965-4285-9836-AB83D2705FB2&apn_sauid=E6B4B017-8226-483B-8CC4-EA9CF8B3D67F
IE - HKU\S-1-5-21-315621274-151502726-3574829184-1001\..\SearchScopes\{DEDDA8C3-C139-49FA-BD96-D8934B1C3A48}: "URL" = http://start.funmoods.com/results.php?f=4&a=pvl&q={searchTerms}
IE - HKU\S-1-5-21-315621274-151502726-3574829184-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKU\S-1-5-21-315621274-151502726-3574829184-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=localhost:44413
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll File not found
[2013/05/26 20:27:49 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-315621274-151502726-3574829184-1001\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 10.17.2)
[2013/04/29 19:53:10 | 000,000,000 | -HSD | C] -- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[174 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[2013/04/29 19:29:46 | 000,000,162 | -H-- | M] () -- C:\Users\Marie-France\Desktop\~$Doc2.rtf
[2013/04/14 20:17:48 | 000,479,598 | ---- | C] () -- C:\ProgramData\*.bdinstall.bin
[2012/03/19 12:05:05 | 000,005,081 | ---- | C] () -- C:\ProgramData\hnbdehzc.pfe
[2012/04/12 19:15:43 | 000,000,000 | ---D | M] -- C:\Users\Marie-France\AppData\Local\Software
[174 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]
[2012/04/22 09:51:38 | 000,032,482 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU(61).TXT
[2012/02/07 07:53:36 | 000,032,594 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU(63).TXT
@Alternate Data Stream - 144 bytes -> C:\ProgramData\Temp:373E1720

:Reg
[HKEY_LOCAL\MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"=-
"iTunesHelper"=-
""=-
[-HKEY_CURRENT_USER\Software\FVDToolbar]
[-HKEY_CURRENT_USER\Software\VIO ;)]

:commands
[emptytemp]
[start explorer]
[reboot]

▶ Clique sur "Correction" pour lancer la suppression.

▶ Poste le rapport qui logiquement s'ouvrira tout seul en fin de travail appres le redemarrage.

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
No active process named iexplore.exe was found!
Process firefox.exe killed successfully!
No active process named msnmsgr.exe was found!
No active process named Teatimer.exe was found!
========== OTL ==========
Registry value HKEY_USERS\S-1-5-21-315621274-151502726-3574829184-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\\{ef79f67a-6ad7-4715-a0f8-932fca442023} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ef79f67a-6ad7-4715-a0f8-932fca442023}\ not found.
Registry key HKEY_USERS\S-1-5-21-315621274-151502726-3574829184-1001\Software\Microsoft\Internet Explorer\SearchScopes\{6B83D83A-8EDA-4AA8-BA55-0629DE04A768}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6B83D83A-8EDA-4AA8-BA55-0629DE04A768}\ not found.
Registry key HKEY_USERS\S-1-5-21-315621274-151502726-3574829184-1001\Software\Microsoft\Internet Explorer\SearchScopes\{DEDDA8C3-C139-49FA-BD96-D8934B1C3A48}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DEDDA8C3-C139-49FA-BD96-D8934B1C3A48}\ not found.
HKU\S-1-5-21-315621274-151502726-3574829184-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKU\S-1-5-21-315621274-151502726-3574829184-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@adobe.com/FlashPlayer\ deleted successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}\chrome\content\ffjcext folder moved successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}\chrome\content folder moved successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}\chrome folder moved successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} folder moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked not found.
Registry value HKEY_USERS\S-1-5-21-315621274-151502726-3574829184-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} folder moved successfully.
C:\Windows\SysWow64\FAP1251.tmp deleted successfully.
C:\Windows\SysWow64\FAP12CA.tmp deleted successfully.
C:\Windows\SysWow64\FAP1614.tmp deleted successfully.
C:\Windows\SysWow64\FAP19FF.tmp deleted successfully.
C:\Windows\SysWow64\FAP1B69.tmp deleted successfully.
C:\Windows\SysWow64\FAP1C1.tmp deleted successfully.
C:\Windows\SysWow64\FAP1C12.tmp deleted successfully.
C:\Windows\SysWow64\FAP1FC7.tmp deleted successfully.
C:\Windows\SysWow64\FAP205D.tmp deleted successfully.
C:\Windows\SysWow64\FAP22A.tmp deleted successfully.
C:\Windows\SysWow64\FAP22ED.tmp deleted successfully.
C:\Windows\SysWow64\FAP267E.tmp deleted successfully.
C:\Windows\SysWow64\FAP293E.tmp deleted successfully.
C:\Windows\SysWow64\FAP2977.tmp deleted successfully.
C:\Windows\SysWow64\FAP2CF3.tmp deleted successfully.
C:\Windows\SysWow64\FAP2E8C.tmp deleted successfully.
C:\Windows\SysWow64\FAP2EFF.tmp deleted successfully.
C:\Windows\SysWow64\FAP313E.tmp deleted successfully.
C:\Windows\SysWow64\FAP31FC.tmp deleted successfully.
C:\Windows\SysWow64\FAP3421.tmp deleted successfully.
C:\Windows\SysWow64\FAP3491.tmp deleted successfully.
C:\Windows\SysWow64\FAP3640.tmp deleted successfully.
C:\Windows\SysWow64\FAP38D9.tmp deleted successfully.
C:\Windows\SysWow64\FAP39F1.tmp deleted successfully.
C:\Windows\SysWow64\FAP3BAA.tmp deleted successfully.
C:\Windows\SysWow64\FAP3D27.tmp deleted successfully.
C:\Windows\SysWow64\FAP3D3F.tmp deleted successfully.
C:\Windows\SysWow64\FAP3D78.tmp deleted successfully.
C:\Windows\SysWow64\FAP3D8.tmp deleted successfully.
C:\Windows\SysWow64\FAP3D90.tmp deleted successfully.
C:\Windows\SysWow64\FAP3DC3.tmp deleted successfully.
C:\Windows\SysWow64\FAP400A.tmp deleted successfully.
C:\Windows\SysWow64\FAP429.tmp deleted successfully.
C:\Windows\SysWow64\FAP43B9.tmp deleted successfully.
C:\Windows\SysWow64\FAP4B77.tmp deleted successfully.
C:\Windows\SysWow64\FAP4F75.tmp deleted successfully.
C:\Windows\SysWow64\FAP5293.tmp deleted successfully.
C:\Windows\SysWow64\FAP5496.tmp deleted successfully.
C:\Windows\SysWow64\FAP54E7.tmp deleted successfully.
C:\Windows\SysWow64\FAP590F.tmp deleted successfully.
C:\Windows\SysWow64\FAP59EC.tmp deleted successfully.
C:\Windows\SysWow64\FAP5A6.tmp deleted successfully.
C:\Windows\SysWow64\FAP5AB9.tmp deleted successfully.
C:\Windows\SysWow64\FAP5BC3.tmp deleted successfully.
C:\Windows\SysWow64\FAP5C14.tmp deleted successfully.
C:\Windows\SysWow64\FAP5C7E.tmp deleted successfully.
C:\Windows\SysWow64\FAP5D71.tmp deleted successfully.
C:\Windows\SysWow64\FAP60C.tmp deleted successfully.
C:\Windows\SysWow64\FAP6426.tmp deleted successfully.
C:\Windows\SysWow64\FAP6476.tmp deleted successfully.
C:\Windows\SysWow64\FAP64B7.tmp deleted successfully.
C:\Windows\SysWow64\FAP65E3.tmp deleted successfully.
C:\Windows\SysWow64\FAP6634.tmp deleted successfully.
C:\Windows\SysWow64\FAP68AC.tmp deleted successfully.
C:\Windows\SysWow64\FAP6966.tmp deleted successfully.
C:\Windows\SysWow64\FAP69DB.tmp deleted successfully.
C:\Windows\SysWow64\FAP6B14.tmp deleted successfully.
C:\Windows\SysWow64\FAP6B25.tmp deleted successfully.
C:\Windows\SysWow64\FAP6B75.tmp deleted successfully.
C:\Windows\SysWow64\FAP6C51.tmp deleted successfully.
C:\Windows\SysWow64\FAP6C92.tmp deleted successfully.
C:\Windows\SysWow64\FAP6CB.tmp deleted successfully.
C:\Windows\SysWow64\FAP7175.tmp deleted successfully.
C:\Windows\SysWow64\FAP71B7.tmp deleted successfully.
C:\Windows\SysWow64\FAP7208.tmp deleted successfully.
C:\Windows\SysWow64\FAP7750.tmp deleted successfully.
C:\Windows\SysWow64\FAP77A1.tmp deleted successfully.
C:\Windows\SysWow64\FAP79C6.tmp deleted successfully.
C:\Windows\SysWow64\FAP7F33.tmp deleted successfully.
C:\Windows\SysWow64\FAP7F7F.tmp deleted successfully.
C:\Windows\SysWow64\FAP7FC0.tmp deleted successfully.
C:\Windows\SysWow64\FAP80AD.tmp deleted successfully.
C:\Windows\SysWow64\FAP816B.tmp deleted successfully.
C:\Windows\SysWow64\FAP81BC.tmp deleted successfully.
C:\Windows\SysWow64\FAP8204.tmp deleted successfully.
C:\Windows\SysWow64\FAP8404.tmp deleted successfully.
C:\Windows\SysWow64\FAP843C.tmp deleted successfully.
C:\Windows\SysWow64\FAP8513.tmp deleted successfully.
C:\Windows\SysWow64\FAP871C.tmp deleted successfully.
C:\Windows\SysWow64\FAP8BF3.tmp deleted successfully.
C:\Windows\SysWow64\FAP8F5F.tmp deleted successfully.
C:\Windows\SysWow64\FAP8FD4.tmp deleted successfully.
C:\Windows\SysWow64\FAP9035.tmp deleted successfully.
C:\Windows\SysWow64\FAP912C.tmp deleted successfully.
C:\Windows\SysWow64\FAP92B7.tmp deleted successfully.
C:\Windows\SysWow64\FAP9488.tmp deleted successfully.
C:\Windows\SysWow64\FAP95B3.tmp deleted successfully.
C:\Windows\SysWow64\FAP95CF.tmp deleted successfully.
C:\Windows\SysWow64\FAP95F2.tmp deleted successfully.
C:\Windows\SysWow64\FAP9643.tmp deleted successfully.
C:\Windows\SysWow64\FAP96B3.tmp deleted successfully.
C:\Windows\SysWow64\FAP96F5.tmp deleted successfully.
C:\Windows\SysWow64\FAP9DD1.tmp deleted successfully.
C:\Windows\SysWow64\FAP9FA8.tmp deleted successfully.
C:\Windows\SysWow64\FAP9FE6.tmp deleted successfully.
C:\Windows\SysWow64\FAPA0C2.tmp deleted successfully.
C:\Windows\SysWow64\FAPA15D.tmp deleted successfully.
C:\Windows\SysWow64\FAPA266.tmp deleted successfully.
C:\Windows\SysWow64\FAPA398.tmp deleted successfully.
C:\Windows\SysWow64\FAPA40F.tmp deleted successfully.
C:\Windows\SysWow64\FAPA44A.tmp deleted successfully.
C:\Windows\SysWow64\FAPA47B.tmp deleted successfully.
C:\Windows\SysWow64\FAPA7D0.tmp deleted successfully.
C:\Windows\SysWow64\FAPA8.tmp deleted successfully.
C:\Windows\SysWow64\FAPA9AA.tmp deleted successfully.
C:\Windows\SysWow64\FAPAA94.tmp deleted successfully.
C:\Windows\SysWow64\FAPAC3D.tmp deleted successfully.
C:\Windows\SysWow64\FAPAE3B.tmp deleted successfully.
C:\Windows\SysWow64\FAPB07F.tmp deleted successfully.
C:\Windows\SysWow64\FAPB0D0.tmp deleted successfully.
C:\Windows\SysWow64\FAPB225.tmp deleted successfully.
C:\Windows\SysWow64\FAPB276.tmp deleted successfully.
C:\Windows\SysWow64\FAPB2F6.tmp deleted successfully.
C:\Windows\SysWow64\FAPB305.tmp deleted successfully.
C:\Windows\SysWow64\FAPB32.tmp deleted successfully.
C:\Windows\SysWow64\FAPB347.tmp deleted successfully.
C:\Windows\SysWow64\FAPB398.tmp deleted successfully.
C:\Windows\SysWow64\FAPB3D8.tmp deleted successfully.
C:\Windows\SysWow64\FAPB420.tmp deleted successfully.
C:\Windows\SysWow64\FAPB534.tmp deleted successfully.
C:\Windows\SysWow64\FAPB6B7.tmp deleted successfully.
C:\Windows\SysWow64\FAPB80E.tmp deleted successfully.
C:\Windows\SysWow64\FAPB89E.tmp deleted successfully.
C:\Windows\SysWow64\FAPB94C.tmp deleted successfully.
C:\Windows\SysWow64\FAPBFB9.tmp deleted successfully.
C:\Windows\SysWow64\FAPC466.tmp deleted successfully.
C:\Windows\SysWow64\FAPC4F6.tmp deleted successfully.
C:\Windows\SysWow64\FAPC769.tmp deleted successfully.
C:\Windows\SysWow64\FAPC78B.tmp deleted successfully.
C:\Windows\SysWow64\FAPC9AF.tmp deleted successfully.
C:\Windows\SysWow64\FAPCA10.tmp deleted successfully.
C:\Windows\SysWow64\FAPCD6D.tmp deleted successfully.
C:\Windows\SysWow64\FAPD009.tmp deleted successfully.
C:\Windows\SysWow64\FAPD370.tmp deleted successfully.
C:\Windows\SysWow64\FAPD3A2.tmp deleted successfully.
C:\Windows\SysWow64\FAPD3C4.tmp deleted successfully.
C:\Windows\SysWow64\FAPD3E1.tmp deleted successfully.
C:\Windows\SysWow64\FAPD4.tmp deleted successfully.
C:\Windows\SysWow64\FAPD59B.tmp deleted successfully.
C:\Windows\SysWow64\FAPD5DC.tmp deleted successfully.
C:\Windows\SysWow64\FAPD629.tmp deleted successfully.
C:\Windows\SysWow64\FAPD7D2.tmp deleted successfully.
C:\Windows\SysWow64\FAPDAC6.tmp deleted successfully.
C:\Windows\SysWow64\FAPDF79.tmp deleted successfully.
C:\Windows\SysWow64\FAPE0A3.tmp deleted successfully.
C:\Windows\SysWow64\FAPE1DE.tmp deleted successfully.
C:\Windows\SysWow64\FAPE335.tmp deleted successfully.
C:\Windows\SysWow64\FAPE569.tmp deleted successfully.
C:\Windows\SysWow64\FAPE5AB.tmp deleted successfully.
C:\Windows\SysWow64\FAPE5E7.tmp deleted successfully.
C:\Windows\SysWow64\FAPE61.tmp deleted successfully.
C:\Windows\SysWow64\FAPE629.tmp deleted successfully.
C:\Windows\SysWow64\FAPE669.tmp deleted successfully.
C:\Windows\SysWow64\FAPE6B8.tmp deleted successfully.
C:\Windows\SysWow64\FAPE746.tmp deleted successfully.
C:\Windows\SysWow64\FAPE860.tmp deleted successfully.
C:\Windows\SysWow64\FAPE885.tmp deleted successfully.
C:\Windows\SysWow64\FAPEA2.tmp deleted successfully.
C:\Windows\SysWow64\FAPEA57.tmp deleted successfully.
C:\Windows\SysWow64\FAPEAF6.tmp deleted successfully.
C:\Windows\SysWow64\FAPEB57.tmp deleted successfully.
C:\Windows\SysWow64\FAPED6F.tmp deleted successfully.
C:\Windows\SysWow64\FAPED9B.tmp deleted successfully.
C:\Windows\SysWow64\FAPEDC0.tmp deleted successfully.
C:\Windows\SysWow64\FAPEE02.tmp deleted successfully.
C:\Windows\SysWow64\FAPEE43.tmp deleted successfully.
C:\Windows\SysWow64\FAPEEF2.tmp deleted successfully.
C:\Windows\SysWow64\FAPEF17.tmp deleted successfully.
C:\Windows\SysWow64\FAPEF78.tmp deleted successfully.
C:\Windows\SysWow64\FAPEFB1.tmp deleted successfully.
C:\Windows\SysWow64\FAPF0A3.tmp deleted successfully.
C:\Windows\SysWow64\FAPF933.tmp deleted successfully.
C:\Windows\SysWow64\FAPFA.tmp deleted successfully.
C:\Windows\SysWow64\FAPFC17.tmp deleted successfully.
C:\Windows\msdownld.tmp folder deleted successfully.
C:\Users\Marie-France\Desktop\~$Doc2.rtf moved successfully.
File C:\ProgramData\*.bdinstall.bin not found.
C:\ProgramData\hnbdehzc.pfe moved successfully.
C:\Users\Marie-France\AppData\Local\Software\CrashReports folder moved successfully.
C:\Users\Marie-France\AppData\Local\Software folder moved successfully.
C:\Windows\Tasks\SCHEDLGU(61).TXT moved successfully.
C:\Windows\Tasks\SCHEDLGU(63).TXT moved successfully.
ADS C:\ProgramData\Temp:373E1720 deleted successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL\MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found.
Registry key HKEY_LOCAL\MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found.
Registry key HKEY_LOCAL\MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found.
Registry key HKEY_CURRENT_USER\Software\FVDToolbar\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\VIO ;)\ deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 164242 bytes
->Flash cache emptied: 56475 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Marie-France
->Temp folder emptied: 35527 bytes
->Temporary Internet Files folder emptied: 513455383 bytes
->Java cache emptied: 11730664 bytes
->FireFox cache emptied: 193526382 bytes
->Flash cache emptied: 58682 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1202214 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 42305163 bytes
RecycleBin emptied: 596118 bytes

Total Files Cleaned = 728,00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 05282013_175708

Files\Folders moved on Reboot...
C:\Users\Marie-France\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
File\Folder C:\Windows\temp\~bd8D11.tmp not found!

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Les images sont réapparues dans les mails, voilà un pb de résolu!
Par contre Word et Excel ne s'ovrent toujours pas.

Par contre à chaque fois que j'ouvre WLM j'ai le message suivant:
le serveur auquel vous êtes connecte utilise un certificat de sécurité qui ne peut pas être vérifié.
La signature du certificat ne peut pas être vérifiée.
Voulez-vous continuer à utiliser ce serveur?

c'est fini windows live messenger faut passer sur skype maintenant

J'ai Skype mais Windows Live Mail, c'est pour regrouper toutes mes boites mails(free, gmail..)

J'ai relancé la réparation de Microsoft Office Starter 2010 et Word et Excel fonctionnent.
Il reste encore le petit problème de ma boite mail, je ne sais pas si il peut être résolu.
Merci beaucoup pour ton aide et pour ton travail .

tu peux me faire une capture de cette petite fenetre ?

https://www.cjoint.com/c/CECteuQS0wi

dis oui au pire je suis là