Bonjour,je suis sous windows 7,je pense être infecté par un virus,et j'ai besoin d'aide j'ai téléchargé OTL,voici les rapports: OTL Extras logfile created on: 6/18/2013 8:03:21 PM - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Figo\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16614) Locale: 00000409 | Country: France | Language: FRA | Date Format: dd/MM/yyyy 3.98 Gb Total Physical Memory | 2.42 Gb Available Physical Memory | 60.70% Memory free 7.96 Gb Paging File | 6.10 Gb Available in Paging File | 76.59% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 451.95 Gb Total Space | 374.00 Gb Free Space | 82.75% Space Free | Partition Type: NTFS Drive D: | 13.72 Gb Total Space | 1.69 Gb Free Space | 12.33% Space Free | Partition Type: NTFS Computer Name: FIGO-HP | User Name: Figo | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (All) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .chm[@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation) .cpl[@ = cplfile] -- C:\Windows\SysNative\control.exe (Microsoft Corporation) .hlp[@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) .hta[@ = htafile] -- C:\Windows\SysWOW64\mshta.exe (Microsoft Corporation) .html[@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) .inf[@ = inffile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation) .ini[@ = inifile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation) .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) .js[@ = JSFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation) .jse[@ = JSEFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation) .reg[@ = regfile] -- C:\Windows\regedit.exe (Microsoft Corporation) .txt[@ = txtfile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation) .vbe[@ = VBEFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation) .vbs[@ = VBSFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation) .wsf[@ = WSFFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation) .wsh[@ = WSHFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .bat [@ = batfile] -- "%1" %* .chm [@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation) .cmd [@ = cmdfile] -- "%1" %* .com [@ = comfile] -- "%1" %* .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .exe [@ = exefile] -- "%1" %* .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) .hta [@ = htafile] -- C:\Windows\SysWOW64\mshta.exe (Microsoft Corporation) .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) .inf [@ = inffile] -- C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation) .ini [@ = inifile] -- C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation) .url [@ = InternetShortcut] -- C:\Windows\SysWow64\rundll32.exe (Microsoft Corporation) .js [@ = JSFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation) .jse [@ = JSEFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation) .pif [@ = piffile] -- "%1" %* .reg [@ = regfile] -- C:\Windows\SysWow64\regedit.exe (Microsoft Corporation) .scr [@ = scrfile] -- "%1" /S .txt [@ = txtfile] -- C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation) .vbe [@ = VBEFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation) .vbs [@ = VBSFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation) .wsf [@ = WSFFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation) .wsh [@ = WSHFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation) [HKEY_USERS\S-1-5-21-3498185556-3063449371-3276448349-1000\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation) batfile [open] -- "%1" %* batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation) chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation) cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation) cmdfile [open] -- "%1" %* cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation) comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htafile [open] -- C:\Windows\SysWOW64\mshta.exe "%1" %* (Microsoft Corporation) htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation) https [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) inffile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation) inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation) inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation) jsfile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation) jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation) jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation) jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation) jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation) piffile [open] -- "%1" %* regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation) regfile [open] -- regedit.exe "%1" (Microsoft Corporation) regfile [merge] -- Reg Error: Key error. regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation) scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation) txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation) vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) vbefile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) vbsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation) batfile [open] -- "%1" %* batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation) chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation) cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation) cmdfile [open] -- "%1" %* cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation) comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htafile [open] -- C:\Windows\SysWOW64\mshta.exe "%1" %* (Microsoft Corporation) htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation) https [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) inffile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation) inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation) inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation) jsfile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation) jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation) jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation) jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation) jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation) piffile [open] -- "%1" %* regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation) regfile [open] -- regedit.exe "%1" (Microsoft Corporation) regfile [merge] -- Reg Error: Key error. regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation) scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation) txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation) vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) vbefile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) vbsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error. [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{2C36BD37-F3FD-4B73-A817-1DA9A3FBFB48}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | "{346A97FA-7A63-4A01-8A0D-C49F17A34899}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{3D3E6D8B-C22F-4B4E-9DE0-5623C936F85B}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | "{503D6BB5-2BF3-425C-9C35-FB3BB3B991B6}" = rport=445 | protocol=6 | dir=out | app=system | "{66A7DA6E-A515-4FA0-933D-BAE596741E39}" = rport=139 | protocol=6 | dir=out | app=system | "{6A8C28BC-C1C0-4C3F-89F9-7D08B8CDCC1F}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{906D9934-B53A-4CAC-9340-1A4233C35A9F}" = lport=138 | protocol=17 | dir=in | app=system | "{991EBB3B-38A4-4538-9557-AC64776C5E61}" = lport=445 | protocol=6 | dir=in | app=system | "{AEDC915B-D96D-424D-96C1-BE78A599C5A3}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{BBE92182-11A9-4E50-8578-82BA1FE78969}" = rport=138 | protocol=17 | dir=out | app=system | "{C73FE82A-73C6-49F1-AB65-1EF88AC8EB66}" = lport=139 | protocol=6 | dir=in | app=system | "{EF84FED6-AF55-4A63-8871-1AD1676FDEE1}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{F4C4F415-A9FD-4426-879E-CAD98D5093C9}" = rport=137 | protocol=17 | dir=out | app=system | "{F77F329A-6930-415C-BDAD-DEB5BD988BED}" = lport=137 | protocol=17 | dir=in | app=system | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{02D69385-38EB-4638-AFB9-40E1757B4A9A}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{07B34C1F-42BB-4077-A32C-AABAE8428EA8}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{1035AC9E-DD77-4BB9-922A-DE5AF043425D}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{1BFFA3F3-2244-4694-A2E4-517CA4BE9EA3}" = dir=in | app=c:\program files (x86)\cyberlink\powerdirector\pdr8.exe | "{3B002B95-EA2E-4364-8102-4ECBA33BF860}" = protocol=6 | dir=in | app=c:\program files (x86)\easybits for kids\programs\my first browser\myfirstbrowser.exe | "{4700DA1B-CDF2-4EB8-B49A-80626BF225AB}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{5483A29C-56AE-4684-A0D8-3C34A2E5ACB0}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\tsmagent.exe | "{55497DD9-BA57-432D-9521-165FC1B58B95}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\music\hptouchsmartmusic.exe | "{733CD1A2-CEB5-49F3-984F-110C97FD7DD8}" = dir=in | app=c:\program files (x86)\hewlett-packard\mediasmart\photo\hpmediasmartphoto.exe | "{77D4714D-9EA9-4C39-B015-946C8393F738}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{89827213-3EA2-4EF2-8A93-38878CFDE381}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{9155051A-33BF-4490-A635-987F20419E51}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hptouchsmartmusic.exe | "{98290499-FBD5-4ED9-9100-C59DF4061728}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe | "{9863C277-9E08-44A8-8FC6-CB205323A249}" = dir=in | app=c:\program files (x86)\hewlett-packard\mediasmart\video\hpmediasmartvideo.exe | "{9A44123C-3FB9-4CC6-A923-0E271644ED63}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{9EE38561-39DD-42CE-A89E-35F46629665F}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe | "{A196CDBC-B2BA-4AB0-9657-BD4E91C54EBC}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{A2FE0FF3-E7A0-4C27-84A0-5319F94B4AD9}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\kernel\clml\clmlsvc.exe | "{A81C6D9C-C90E-45AE-AF7E-C7A5DA57E531}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hptouchsmartvideo.exe | "{AE8A4250-FC4E-440E-A24D-6BEFA60747A1}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{B7F9F20C-8526-47E3-A748-B6E1862E8559}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{C43D2001-E6AD-4405-8055-EFBC16EE9270}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hpdvdsmart.exe | "{E78BA523-3E58-4B5A-B6A7-E5F42D732E8A}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{E93F82C9-1AF0-4767-B518-4E43889E7976}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{F328A02F-E258-4CF8-B3E1-BD96706D92E0}" = protocol=17 | dir=in | app=c:\program files (x86)\easybits for kids\programs\my first browser\myfirstbrowser.exe | "{F83799ED-1B3E-4014-BD6B-0CDCFCCF9D7E}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hptouchsmartphoto.exe | "TCP Query User{084721C6-27E3-472E-B957-49BBB00CB461}C:\program files (x86)\tmnationsforever\tmforever.exe" = protocol=6 | dir=in | app=c:\program files (x86)\tmnationsforever\tmforever.exe | "TCP Query User{1832B200-858D-4415-B44D-0EF5C6A8EE32}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=6 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe | "TCP Query User{500AEF91-12F2-445D-AE46-08E48844DDDB}C:\games\world_of_tanks\wotlauncher.exe" = protocol=6 | dir=in | app=c:\games\world_of_tanks\wotlauncher.exe | "TCP Query User{5F3B985F-7425-4C35-9061-96D38462BE12}C:\games\world_of_tanks\worldoftanks.exe" = protocol=6 | dir=in | app=c:\games\world_of_tanks\worldoftanks.exe | "TCP Query User{8A010A3E-1E6B-4EC0-8747-21C109590854}C:\program files (x86)\tmnationsforever\tmforever.exe" = protocol=6 | dir=in | app=c:\program files (x86)\tmnationsforever\tmforever.exe | "TCP Query User{A52CEDFF-0A0C-4F54-92EA-D9D0A4DFAA3C}C:\users\figo\appdata\roaming\ehuc\epwoa.exe" = protocol=6 | dir=in | app=c:\users\figo\appdata\roaming\ehuc\epwoa.exe | "UDP Query User{2B9F25AE-5430-47A9-BF3A-AA6BC5396F3E}C:\program files (x86)\tmnationsforever\tmforever.exe" = protocol=17 | dir=in | app=c:\program files (x86)\tmnationsforever\tmforever.exe | "UDP Query User{665A5869-1C04-4160-B429-23AE01C1FA07}C:\games\world_of_tanks\wotlauncher.exe" = protocol=17 | dir=in | app=c:\games\world_of_tanks\wotlauncher.exe | "UDP Query User{6DB10B63-EF72-4B9B-B5B3-2A6F5C2105BA}C:\games\world_of_tanks\worldoftanks.exe" = protocol=17 | dir=in | app=c:\games\world_of_tanks\worldoftanks.exe | "UDP Query User{7A231699-EA01-4C98-90B8-ED79214CBE4E}C:\program files (x86)\tmnationsforever\tmforever.exe" = protocol=17 | dir=in | app=c:\program files (x86)\tmnationsforever\tmforever.exe | "UDP Query User{8FC50590-ED6A-417A-8807-12DDE5278287}C:\users\figo\appdata\roaming\ehuc\epwoa.exe" = protocol=17 | dir=in | app=c:\users\figo\appdata\roaming\ehuc\epwoa.exe | "UDP Query User{DD08A70D-1364-41F6-97F1-FFA7177EE875}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=17 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64) "{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant "{2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2}" = HP Client Services "{4B5F58F7-C7D1-3CE3-9B37-B657F0852643}" = Microsoft .NET Framework 4 Client Profile FRA Language Pack "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime "{58F369B9-E0E8-A7D0-E25B-E2661E33AACC}" = AMD Catalyst Install Manager "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 "{63E44BFE-0E8E-FCDA-D074-D044B8C6FA7F}" = ccc-utility64 "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{90140000-006D-040C-1000-0000000FF1CE}" = Microsoft Office « Démarrer en un clic » 2010 "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{A40F60B1-F1E1-452E-96A5-FF97F9A2D102}" = HP MediaSmart SmartMenu "{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64) "{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 "{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64 "{CC4D56B7-6F18-470B-8734-ABCD75BCF4F1}" = HP Auto "{D79A02E9-6713-4335-9668-AAC7474C0C0E}" = HP Vision Hardware Diagnostics "{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter "{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile FRA Language Pack" = Module linguistique Microsoft .NET Framework 4 Client Profile FRA [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{02A73CC0-14AD-ACBB-2228-6171E6CC9F0B}" = CCC Help English "{05E379CC-F626-4E7D-8354-463865B303BF}" = Windows Live UX Platform Language Pack "{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements "{0A6C5904-5F82-02D1-F179-CD39E57A8175}" = CCC Help French "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer "{0B571E35-11CE-C580-5336-854A0E67752A}" = CCC Help Dutch "{0D3B83D2-CB54-3E79-EAB9-D237C8F86B8B}" = CCC Help Spanish "{155BE7B4-AF9B-CE38-77B1-7CB2E5A3503B}" = CCC Help Turkish "{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker "{1C9226E9-2E60-0596-E174-81F178E6BBF6}" = CCC Help Chinese Traditional "{1E45D838-CCBE-5100-FCD6-35AD40376333}" = CCC Help Polish "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update "{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite Deluxe "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions "{24AB4470-F397-F384-DF60-751662BBE6D7}" = CCC Help Korean "{264FE20A-757B-492a-B0C3-4009E2997D8A}" = PictureMover "{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 21 "{2A3FC24C-6EC0-4519-A52B-FDA4EA9B2D24}" = Windows Live Messenger "{3023EBDA-BF1B-4831-B347-E5018555F26E}" = Movie Theme Pack for HP MediaSmart Video "{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery "{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live "{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery "{38BD84CF-3B1D-2982-096F-FC2080818AA3}" = CCC Help Norwegian "{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer "{3DB77A89-EBD3-780F-9C1A-209803B13E5F}" = Catalyst Control Center "{3E6F1CD9-5BCE-DA11-B4B4-5946688B11FB}" = CCC Help Chinese Standard "{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}" = Norton Online Backup "{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go "{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = Recovery Manager "{468D22C0-8080-11E2-B86E-B8AC6F98CCE3}" = Google Earth "{48549B35-722F-981C-6FA8-60BAF5C9F0AC}" = HydraVision "{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4EAFEF8A-7480-C41C-AA08-479A7D48289D}" = Catalyst Control Center Graphics Previews Common "{53469506-A37E-4314-A9D9-38724EC23A75}" = HP Setup "{53BE2698-3558-77EE-471E-B602DDC9E0E0}" = CCC Help Finnish "{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack "{61EDBE71-5D3E-4AB7-AD95-E53FEAF68C17}" = Bing Rewards Client Installer "{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE "{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}" = HP MediaSmart Photo "{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker "{6F340107-F9AA-47C6-B54C-C3A19F11553F}" = Hewlett-Packard ACLM.NET v1.2.1.1 "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{78867899-E5F6-1CCF-D05C-F2A1F024D24E}" = CCC Help Czech "{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1" = Need For Speed(TM) World "{7F2A11F4-EAE8-4325-83EC-E3E99F85169E}" = HP Support Information "{809C0EEE-4B79-463E-6A0C-C0868811F837}" = Catalyst Control Center Localization All "{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT "{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}" = Ralink RT2860 Wireless LAN Card "{90140011-0066-040C-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - Français "{912CED74-88D3-4C5B-ACB0-13231864975E}" = PressReader "{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}" = HP MediaSmart Music "{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker "{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010 "{969CB4FB-C9DC-CADB-2AEB-704C9C290A35}" = Catalyst Control Center Profiles Desktop "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail "{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail "{A436F67F-687E-4736-BD2B-537121A804CF}" = HP Product Detection "{A56FFFCA-F2FD-F15D-4DAD-11CD99976972}" = Catalyst Control Center InstallProxy "{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common "{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer "{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer "{AB61A2E9-37D3-485D-9085-19FBDF8CEF4A}" = Windows Live Messenger "{ACDE3E85-CB61-48D8-B19B-F6D6AA0AA62A}" = Catalyst Control Center - Branding "{AE856388-AFAD-4753-81DF-D96B19D0A17C}" = HP Setup Manager "{B8AC1A89-FFD1-4F97-8051-E505A160F562}" = HP Odometer "{C37D1497-5158-F05D-2157-C9FDD9F6F981}" = CCC Help German "{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint "{C5B8EDBB-A327-443B-5DC6-72E8D6039568}" = CCC Help Swedish "{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail "{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common "{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector "{CBAB8128-0A44-4A40-24FA-B0FD9A813D51}" = CCC Help Thai "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform "{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64 "{D12E3E7F-1B13-4933-A915-16C7DD37A095}" = HP MediaSmart Video "{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow! "{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform "{D6C3C9E7-D334-4918-BD57-5B1EF14C207D}" = Bing Bar "{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD "{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources "{DE77FE3F-A33D-499A-87AD-5FC406617B40}" = HP Update "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10 "{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio "{E3CBF4E2-3867-7F36-BEEF-034855248651}" = CCC Help Portuguese "{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger "{E8E8283E-5FEF-3B4F-77CB-0A2E308E927B}" = CCC Help Hungarian "{EABEDA07-9421-0B47-EAA9-325377963238}" = CCC Help Greek "{EE202411-2C26-49E8-9784-1BC1DBF7DE96}" = HP Support Assistant "{EF540BDF-00EF-5607-5ADF-CF7635ABAA74}" = CCC Help Japanese "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F2371B1C-C4B8-E13E-F151-DE295FBF8C0F}" = CCC Help Danish "{F5A846C4-7970-7C65-352B-606C8D376EDB}" = CCC Help Italian "{FA5CC407-E4B8-FEFD-B03C-2058C7FF20F7}" = CCC Help Russian "{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}" = DVD Menu Pack for HP MediaSmart Video "{FD7F0DB8-0E96-4D64-AD4D-9B5A936AF2A8}" = LightScribe System Software "{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "avast" = avast! Free Antivirus "EasyBits Magic Desktop" = Magic Desktop "InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite Deluxe "InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}" = Movie Theme Pack for HP MediaSmart Video "InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go "InstallShield_{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}" = HP MediaSmart Photo "InstallShield_{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}" = HP MediaSmart Music "InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint "InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector "InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095}" = HP MediaSmart Video "InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow! "InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD "InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}" = DVD Menu Pack for HP MediaSmart Video "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300 "Mozilla Firefox 21.0 (x86 fr)" = Mozilla Firefox 21.0 (x86 fr) "MozillaMaintenanceService" = Mozilla Maintenance Service "MusicStationNetstaller" = MusicStation "My HP Game Console" = HP Game Console "Office14.Click2Run" = Microsoft Office « Démarrer en un clic » 2010 "PDF Complete" = PDF Complete Special Edition "TmNationsForever_is1" = TmNationsForever "WildTangent hp Master Uninstall" = HP Games "WinLiveSuite" = Windows Live "WT087330" = Bounce Symphony "WT087361" = FATE "WT087380" = John Deere Drive Green "WT087394" = Penguins! "WT087396" = Polar Bowler "WT087428" = Bejeweled 2 Deluxe "WT087453" = Chuzzle Deluxe "WT087480" = Insaniquarium Deluxe "WT087485" = Jewel Quest II "WT087490" = Jewel Quest Solitaire "WT087501" = Plants vs. Zombies "WT087510" = Slingo Deluxe "WT087513" = Virtual Villagers - The Secret City "WT087519" = Wedding Dash "WT087533" = Zuma Deluxe "WT087536" = Diner Dash 2 Restaurant Rescue "WT089303" = Build-a-Lot - The Elizabethan Era "WT089308" = Blasterball 3 "WT089328" = Farm Frenzy "WT089359" = Cake Mania "WT089362" = Agatha Christie - Peril at End House [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2/23/2013 5:16:25 PM | Computer Name = Figo-HP | Source = CVHSVC | ID = 100 Description = Pour information uniquement. (Patch task for {90140011-0066-040C-0000-0000000FF1CE}): DownloadLatest Failed: Error - 2/26/2013 11:12:08 AM | Computer Name = Figo-HP | Source = CVHSVC | ID = 100 Description = Pour information uniquement. (Patch task for {90140011-0066-040C-0000-0000000FF1CE}): DownloadLatest Failed: Error - 2/26/2013 7:30:55 PM | Computer Name = Figo-HP | Source = Application Error | ID = 1000 Description = Nom de l'application défaillante firefox.exe, version : 19.0.0.4794, horodatage : 0x511ed1c1 Nom du module défaillant : xul.dll, version : 19.0.0.4794, horodatage : 0x511ed0fe Code d'exception : 0xc0000005 Décalage d'erreur : 0x00155858 ID du processus défaillant : 0xe58 Heure de début de l'application défaillante : 0x01ce1476391c1db5 Chemin d'accès de l'application défaillante : C:\Program Files (x86)\Mozilla Firefox\firefox.exe Chemin d'accès du module défaillant: C:\Program Files (x86)\Mozilla Firefox\xul.dll ID de rapport : 905d0602-806c-11e2-a8fd-e06995438015 Error - 2/27/2013 7:09:01 PM | Computer Name = Figo-HP | Source = Application Error | ID = 1000 Description = Nom de l'application défaillante iexplore.exe, version : 9.0.8112.16464, horodatage : 0x50ec971b Nom du module défaillant : jscript9.dll, version : 9.0.8112.16464, horodatage : 0x50ec9979 Code d'exception : 0xc0000005 Décalage d'erreur : 0x00046b04 ID du processus défaillant : 0x1f6a8 Heure de début de l'application défaillante : 0x01ce151026a80a7a Chemin d'accès de l'application défaillante : C:\Program Files (x86)\Internet Explorer\iexplore.exe Chemin d'accès du module défaillant: C:\Windows\SysWOW64\jscript9.dll ID de rapport : abf7bcfd-8132-11e2-a8fd-e06995438015 Error - 3/13/2013 11:49:21 PM | Computer Name = Figo-HP | Source = Application Error | ID = 1000 Description = Nom de l'application défaillante firefox.exe, version : 19.0.2.4814, horodatage : 0x5138a1d3 Nom du module défaillant : xul.dll, version : 19.0.2.4814, horodatage : 0x5138a0ed Code d'exception : 0xc0000005 Décalage d'erreur : 0x00172818 ID du processus défaillant : 0x574 Heure de début de l'application défaillante : 0x01ce2063afef4c7f Chemin d'accès de l'application défaillante : C:\Program Files (x86)\Mozilla Firefox\firefox.exe Chemin d'accès du module défaillant: C:\Program Files (x86)\Mozilla Firefox\xul.dll ID de rapport : 273932cd-8c5a-11e2-a2ce-e06995438015 Error - 4/10/2013 9:22:48 PM | Computer Name = Figo-HP | Source = Application Hang | ID = 1002 Description = Le programme firefox.exe version 19.0.2.4814 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le Centre de maintenance. ID de processus : 480 Heure de début : 01ce3652cd646c33 Heure de fin : 32 Chemin d'accès de l'application : C:\Program Files (x86)\Mozilla Firefox\firefox.exe ID de rapport : 4e64f038-a246-11e2-af90-e06995438015 Error - 4/14/2013 5:57:51 PM | Computer Name = Figo-HP | Source = Application Hang | ID = 1002 Description = Le programme dwarclientfr.exe version 2.33.0.6 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le Centre de maintenance. ID de processus : 3250 Heure de début : 01ce394e81953672 Heure de fin : 16 Chemin d'accès de l'application : C:\Program Files (x86)\Mail.Ru\DragonsFr\dwarclientfr.exe ID de rapport : Error - 5/22/2013 8:20:55 PM | Computer Name = Figo-HP | Source = Application Error | ID = 1000 Description = Nom de l'application défaillante video_hd.exe, version : 0.0.0.0, horodatage : 0x519d228d Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000 Code d'exception : 0xc0000005 Décalage d'erreur : 0x020f05e7 ID du processus défaillant : 0x1a0 Heure de début de l'application défaillante : 0x01ce574b6416134e Chemin d'accès de l'application défaillante : C:\Users\Figo\AppData\Local\Temp\Temp2_video_hd.zip\video_hd.exe Chemin d'accès du module défaillant: unknown ID de rapport : a1fd1fa3-c33e-11e2-8aa9-e06995438015 Error - 5/22/2013 9:14:49 PM | Computer Name = Figo-HP | Source = CVHSVC | ID = 100 Description = Pour information uniquement. (Patch task for {90140011-0066-040C-0000-0000000FF1CE}): DownloadLatest Failed: Error - 5/30/2013 5:18:44 AM | Computer Name = Figo-HP | Source = MsiInstaller | ID = 1013 Description = [ Hewlett-Packard Events ] Error - 5/10/2012 8:49:04 AM | Computer Name = Figo-HP | Source = HPSF_Tasks.exe | ID = 2000 Description = HP Error ID: -2146232000 à System.Xml.XmlTextReaderImpl.Throw(Exception e) à System.Xml.XmlTextReaderImpl.Throw(String res, String arg) à System.Xml.XmlTextReaderImpl.ParseAttributes() à System.Xml.XmlTextReaderImpl.ParseElement() à System.Xml.XmlTextReaderImpl.ParseElementContent() à System.Xml.XmlTextReaderImpl.Read() à System.Xml.XmlLoader.LoadNode(Boolean skipOverWhitespace) à System.Xml.XmlLoader.ParsePartialContent(XmlNode parentNode, String innerxmltext, XmlNodeType nt) à System.Xml.XmlDocumentFragment.set_InnerXml(String value) à HP.SupportAssistant.Common.CustomerExperience.HPSASession.AddActionInfo() Message: 'outil' est un jeton inattendu. Espace blanc attendu. Ligne 1, position 145. StackTrace: à System.Xml.XmlTextReaderImpl.Throw(Exception e) à System.Xml.XmlTextReaderImpl.Throw(String res, String arg) à System.Xml.XmlTextReaderImpl.ParseAttributes() à System.Xml.XmlTextReaderImpl.ParseElement() à System.Xml.XmlTextReaderImpl.ParseElementContent() à System.Xml.XmlTextReaderImpl.Read() à System.Xml.XmlLoader.LoadNode(Boolean skipOverWhitespace) à System.Xml.XmlLoader.ParsePartialContent(XmlNode parentNode, String innerxmltext, XmlNodeType nt) à System.Xml.XmlDocumentFragment.set_InnerXml(String value) à HP.SupportAssistant.Common.CustomerExperience.HPSASession.AddActionInfo() Source: System.Xml Name: HPSF_Tasks.exe Version: 06.00.01.01 Path: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF_Tasks.exe Format: fr-FR RAM: 4078 Ram Utilization: 40 TargetSite: Void Throw(System.Exception) Error - 7/9/2012 2:05:06 AM | Computer Name = Figo-HP | Source = HPSFMsgr.exe | ID = 4000 Description = HP Error ID: -2147221164 à System.RuntimeTypeHandle.CreateInstance(RuntimeType type, Boolean publicOnly, Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle& ctor, Boolean& bNeedSecurityCheck) à System.RuntimeType.CreateInstanceSlow(Boolean publicOnly, Boolean fillCache) à System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean skipVisibilityChecks, Boolean fillCache) à System.Activator.CreateInstance(Type type, Boolean nonPublic) à HPSA_Messenger.MessengerCom.TrayDeskBand.isTaskbarDisplayed() StackTrace: à System.RuntimeTypeHandle.CreateInstance(RuntimeType type, Boolean publicOnly, Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle& ctor, Boolean& bNeedSecurityCheck) à System.RuntimeType.CreateInstanceSlow(Boolean publicOnly, Boolean fillCache) à System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean skipVisibilityChecks, Boolean fillCache) à System.Activator.CreateInstance(Type type, Boolean nonPublic) à HPSA_Messenger.MessengerCom.TrayDeskBand.isTaskbarDisplayed() Source: mscorlib Name: HPSFMsgr.exe Version: 01.00.00.00 Path: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFMsgr.exe Format: fr-FR RAM: 4078 Ram Utilization: 30 TargetSite: System.Object CreateInstance(System.RuntimeType, Boolean, Boolean, Boolean ByRef, System.RuntimeMethodHandle ByRef, Boolean ByRef) Error - 7/9/2012 2:05:07 AM | Computer Name = Figo-HP | Source = HPSFMsgr.exe | ID = 4000 Description = HP Error ID: -2147221164HPSFMsgr.exe à System.RuntimeTypeHandle.CreateInstance(RuntimeType type, Boolean publicOnly, Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle& ctor, Boolean& bNeedSecurityCheck) à System.RuntimeType.CreateInstanceSlow(Boolean publicOnly, Boolean fillCache) à System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean skipVisibilityChecks, Boolean fillCache) à System.Activator.CreateInstance(Type type, Boolean nonPublic) à HPSA_Messenger.MessengerCom.TrayDeskBand.ShowTaskBar() StackTrace: à System.RuntimeTypeHandle.CreateInstance(RuntimeType type, Boolean publicOnly, Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle& ctor, Boolean& bNeedSecurityCheck) à System.RuntimeType.CreateInstanceSlow(Boolean publicOnly, Boolean fillCache) à System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean skipVisibilityChecks, Boolean fillCache) à System.Activator.CreateInstance(Type type, Boolean nonPublic) à HPSA_Messenger.MessengerCom.TrayDeskBand.ShowTaskBar() Source: mscorlib Name: HPSFMsgr.exe Version: 01.00.00.00 Path: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFMsgr.exe Format: fr-FR RAM: 4078 Ram Utilization: 30 TargetSite: System.Object CreateInstance(System.RuntimeType, Boolean, Boolean, Boolean ByRef, System.RuntimeMethodHandle ByRef, Boolean ByRef) Error - 7/9/2012 2:12:17 AM | Computer Name = Figo-HP | Source = HPSFMsgr.exe | ID = 4000 Description = HP Error ID: -2147221164 à System.RuntimeTypeHandle.CreateInstance(RuntimeType type, Boolean publicOnly, Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle& ctor, Boolean& bNeedSecurityCheck) à System.RuntimeType.CreateInstanceSlow(Boolean publicOnly, Boolean fillCache) à System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean skipVisibilityChecks, Boolean fillCache) à System.Activator.CreateInstance(Type type, Boolean nonPublic) à HPSA_Messenger.MessengerCom.TrayDeskBand.isTaskbarDisplayed() StackTrace: à System.RuntimeTypeHandle.CreateInstance(RuntimeType type, Boolean publicOnly, Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle& ctor, Boolean& bNeedSecurityCheck) à System.RuntimeType.CreateInstanceSlow(Boolean publicOnly, Boolean fillCache) à System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean skipVisibilityChecks, Boolean fillCache) à System.Activator.CreateInstance(Type type, Boolean nonPublic) à HPSA_Messenger.MessengerCom.TrayDeskBand.isTaskbarDisplayed() Source: mscorlib Name: HPSFMsgr.exe Version: 01.00.00.00 Path: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFMsgr.exe Format: fr-FR RAM: 4078 Ram Utilization: 20 TargetSite: System.Object CreateInstance(System.RuntimeType, Boolean, Boolean, Boolean ByRef, System.RuntimeMethodHandle ByRef, Boolean ByRef) Error - 7/9/2012 2:12:18 AM | Computer Name = Figo-HP | Source = HPSFMsgr.exe | ID = 4000 Description = HP Error ID: -2147221164HPSFMsgr.exe à System.RuntimeTypeHandle.CreateInstance(RuntimeType type, Boolean publicOnly, Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle& ctor, Boolean& bNeedSecurityCheck) à System.RuntimeType.CreateInstanceSlow(Boolean publicOnly, Boolean fillCache) à System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean skipVisibilityChecks, Boolean fillCache) à System.Activator.CreateInstance(Type type, Boolean nonPublic) à HPSA_Messenger.MessengerCom.TrayDeskBand.ShowTaskBar() StackTrace: à System.RuntimeTypeHandle.CreateInstance(RuntimeType type, Boolean publicOnly, Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle& ctor, Boolean& bNeedSecurityCheck) à System.RuntimeType.CreateInstanceSlow(Boolean publicOnly, Boolean fillCache) à System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean skipVisibilityChecks, Boolean fillCache) à System.Activator.CreateInstance(Type type, Boolean nonPublic) à HPSA_Messenger.MessengerCom.TrayDeskBand.ShowTaskBar() Source: mscorlib Name: HPSFMsgr.exe Version: 01.00.00.00 Path: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFMsgr.exe Format: fr-FR RAM: 4078 Ram Utilization: 20 TargetSite: System.Object CreateInstance(System.RuntimeType, Boolean, Boolean, Boolean ByRef, System.RuntimeMethodHandle ByRef, Boolean ByRef) Error - 7/9/2012 4:38:59 AM | Computer Name = Figo-HP | Source = HPSFMsgr.exe | ID = 4000 Description = HP Error ID: -2147221164 à System.RuntimeTypeHandle.CreateInstance(RuntimeType type, Boolean publicOnly, Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle& ctor, Boolean& bNeedSecurityCheck) à System.RuntimeType.CreateInstanceSlow(Boolean publicOnly, Boolean fillCache) à System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean skipVisibilityChecks, Boolean fillCache) à System.Activator.CreateInstance(Type type, Boolean nonPublic) à HPSA_Messenger.MessengerCom.TrayDeskBand.isTaskbarDisplayed() StackTrace: à System.RuntimeTypeHandle.CreateInstance(RuntimeType type, Boolean publicOnly, Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle& ctor, Boolean& bNeedSecurityCheck) à System.RuntimeType.CreateInstanceSlow(Boolean publicOnly, Boolean fillCache) à System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean skipVisibilityChecks, Boolean fillCache) à System.Activator.CreateInstance(Type type, Boolean nonPublic) à HPSA_Messenger.MessengerCom.TrayDeskBand.isTaskbarDisplayed() Source: mscorlib Name: HPSFMsgr.exe Version: 01.00.00.00 Path: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFMsgr.exe Format: fr-FR RAM: 4078 Ram Utilization: 20 TargetSite: System.Object CreateInstance(System.RuntimeType, Boolean, Boolean, Boolean ByRef, System.RuntimeMethodHandle ByRef, Boolean ByRef) Error - 7/9/2012 4:39:00 AM | Computer Name = Figo-HP | Source = HPSFMsgr.exe | ID = 4000 Description = HP Error ID: -2147221164HPSFMsgr.exe à System.RuntimeTypeHandle.CreateInstance(RuntimeType type, Boolean publicOnly, Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle& ctor, Boolean& bNeedSecurityCheck) à System.RuntimeType.CreateInstanceSlow(Boolean publicOnly, Boolean fillCache) à System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean skipVisibilityChecks, Boolean fillCache) à System.Activator.CreateInstance(Type type, Boolean nonPublic) à HPSA_Messenger.MessengerCom.TrayDeskBand.ShowTaskBar() StackTrace: à System.RuntimeTypeHandle.CreateInstance(RuntimeType type, Boolean publicOnly, Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle& ctor, Boolean& bNeedSecurityCheck) à System.RuntimeType.CreateInstanceSlow(Boolean publicOnly, Boolean fillCache) à System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean skipVisibilityChecks, Boolean fillCache) à System.Activator.CreateInstance(Type type, Boolean nonPublic) à HPSA_Messenger.MessengerCom.TrayDeskBand.ShowTaskBar() Source: mscorlib Name: HPSFMsgr.exe Version: 01.00.00.00 Path: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFMsgr.exe Format: fr-FR RAM: 4078 Ram Utilization: 20 TargetSite: System.Object CreateInstance(System.RuntimeType, Boolean, Boolean, Boolean ByRef, System.RuntimeMethodHandle ByRef, Boolean ByRef) Error - 7/9/2012 5:47:51 AM | Computer Name = Figo-HP | Source = HPSFMsgr.exe | ID = 4000 Description = HP Error ID: -2147221164 à System.RuntimeTypeHandle.CreateInstance(RuntimeType type, Boolean publicOnly, Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle& ctor, Boolean& bNeedSecurityCheck) à System.RuntimeType.CreateInstanceSlow(Boolean publicOnly, Boolean fillCache) à System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean skipVisibilityChecks, Boolean fillCache) à System.Activator.CreateInstance(Type type, Boolean nonPublic) à HPSA_Messenger.MessengerCom.TrayDeskBand.isTaskbarDisplayed() StackTrace: à System.RuntimeTypeHandle.CreateInstance(RuntimeType type, Boolean publicOnly, Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle& ctor, Boolean& bNeedSecurityCheck) à System.RuntimeType.CreateInstanceSlow(Boolean publicOnly, Boolean fillCache) à System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean skipVisibilityChecks, Boolean fillCache) à System.Activator.CreateInstance(Type type, Boolean nonPublic) à HPSA_Messenger.MessengerCom.TrayDeskBand.isTaskbarDisplayed() Source: mscorlib Name: HPSFMsgr.exe Version: 01.00.00.00 Path: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFMsgr.exe Format: fr-FR RAM: 4078 Ram Utilization: 20 TargetSite: System.Object CreateInstance(System.RuntimeType, Boolean, Boolean, Boolean ByRef, System.RuntimeMethodHandle ByRef, Boolean ByRef) Error - 7/9/2012 5:47:52 AM | Computer Name = Figo-HP | Source = HPSFMsgr.exe | ID = 4000 Description = HP Error ID: -2147221164HPSFMsgr.exe à System.RuntimeTypeHandle.CreateInstance(RuntimeType type, Boolean publicOnly, Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle& ctor, Boolean& bNeedSecurityCheck) à System.RuntimeType.CreateInstanceSlow(Boolean publicOnly, Boolean fillCache) à System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean skipVisibilityChecks, Boolean fillCache) à System.Activator.CreateInstance(Type type, Boolean nonPublic) à HPSA_Messenger.MessengerCom.TrayDeskBand.ShowTaskBar() StackTrace: à System.RuntimeTypeHandle.CreateInstance(RuntimeType type, Boolean publicOnly, Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle& ctor, Boolean& bNeedSecurityCheck) à System.RuntimeType.CreateInstanceSlow(Boolean publicOnly, Boolean fillCache) à System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean skipVisibilityChecks, Boolean fillCache) à System.Activator.CreateInstance(Type type, Boolean nonPublic) à HPSA_Messenger.MessengerCom.TrayDeskBand.ShowTaskBar() Source: mscorlib Name: HPSFMsgr.exe Version: 01.00.00.00 Path: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFMsgr.exe Format: fr-FR RAM: 4078 Ram Utilization: 20 TargetSite: System.Object CreateInstance(System.RuntimeType, Boolean, Boolean, Boolean ByRef, System.RuntimeMethodHandle ByRef, Boolean ByRef) Error - 11/23/2012 7:12:04 PM | Computer Name = Figo-HP | Source = HPSF.exe | ID = 2000 Description = HP Error ID: -2147467261 à HP.SupportFramework.Utilities.CustomerExperience.HPSASession.AddNavigationProperties() Message: La référence d'objet n'est pas définie à une instance d'un objet. StackTrace: à HP.SupportFramework.Utilities.CustomerExperience.HPSASession.AddNavigationProperties() Source: HP.SupportFramework.Utilities Name: HPSF.exe Version: 07.00.01.01 Path: C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe Format: fr-FR RAM: 4078 Ram Utilization: 40 TargetSite: HP.SupportFramework.HPSFReporting._Property[] AddNavigationProperties() < End of report > puis OTL logfile created on: 6/18/2013 8:03:21 PM - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Figo\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16614) Locale: 00000409 | Country: France | Language: FRA | Date Format: dd/MM/yyyy 3.98 Gb Total Physical Memory | 2.42 Gb Available Physical Memory | 60.70% Memory free 7.96 Gb Paging File | 6.10 Gb Available in Paging File | 76.59% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 451.95 Gb Total Space | 374.00 Gb Free Space | 82.75% Space Free | Partition Type: NTFS Drive D: | 13.72 Gb Total Space | 1.69 Gb Free Space | 12.33% Space Free | Partition Type: NTFS Computer Name: FIGO-HP | User Name: Figo | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (All) ==========[/color] PRC - [2013/06/18 19:57:18 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Figo\Downloads\OTL.exe PRC - [2013/06/12 17:12:12 | 001,855,880 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe PRC - [2013/05/22 05:44:17 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe PRC - [2013/05/22 05:44:16 | 000,017,304 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe PRC - [2013/05/09 10:58:30 | 004,858,968 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2013/05/09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2013/03/12 07:32:50 | 000,253,816 | ---- | M] (Oracle Corporation) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe PRC - [2012/02/10 11:28:06 | 000,240,408 | -

Infecté win32:Downloader-TPW [PUP]

Réponse 21 / 38

Utilisateur anonyme

les fichiers translucides et le cadenas, fais moi une impression d'ecran pour voir !

pour ton client jeu, désactive Avast ou passe le en mode jeu et installe ton client !

Réponse 22 / 38

FigoFigo Messages postés 26 Statut Membre

Bonjour,alors les fichiers translucides et ceux avec cadenas ne sont plus là,je ne comprends pas pk .Je n'arrive pas a telecharger mon client de jeu,je ne sais pas comment desactiver avast,ni le mettre en mode jeu.
Par contre j'ai remarqué,un nouveau disque (Q:)Microsoft office demarrer en un clic 2010 (protégé),que je n'avais pas avant,je voudrais le supprimer.

Réponse 23 / 38

Utilisateur anonyme

bonjour,

la partition Q: est une partie de pack office !

si tu la vire, tu ne pourras plus utiliser office !

essaie de désinstalle entièrement avant et voir si tu arrives à installer ton client jeu !

autrement, il faut poser ta question sur le forum du client jeu en question !

Réponse 24 / 38

FigoFigo Messages postés 26 Statut Membre

Coucou,merci des tes conseils,le truc c'est que Q: est (protégé),je n'y ai pas accé donc peux pas m'en servir et surtout je ne l'avais pas avant et je n'en veux pas,je voudrais vraiment le supprimer.

Cette nuit j'ai fait un scan au demarrage avec avast et j'ai coché supprimer tout,il a trouvé plein de truc infecté par win32 dowloader et a supprimé.Par contre il a trouvé 2 fichiers winrar corrompue et ne leur a rien fait,on peut y faire quelque chose ?

Je voudrais aussi completement effacé TOUS ce qui concerne mon jeu,je l'ai desinstallé mais il reste plein de truc a ce que j'ai pu voir :(

Réponse 25 / 38

Utilisateur anonyme

pour la partition Q:, du moment ou tu as office, il n'y a plus rien à faire !

on ne peut pas la virer si facilement !

pour te jeux désinstallés, aide toi de ceci pour virer les traces :

http://www.forum-vista.net/forum/

pour le reste, passe ceci :

* Télécharge ZHPDiag sur ton bureau :

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

ou
http://www.premiumorange.com/zeb-help-process/zhpdiag.html

* Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.

/!\Utilisateur de Vista, Seven et W8 :

* Clique droit sur le logo de ZHPdiag, « exécuter en tant qu'Administrateur »

=> L'icône est sous forme de parchemin.

* Clique sur le tourne vis , sélectionne tous les modules.

* Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
* Héberge le rapport ZHPDiag.txt sur Cjoint, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum :

https://www.cjoint.com/ => https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers

Réponse 26 / 38

FigoFigo Messages postés 26 Statut Membre

Revo desinstaller est pour windows 7 aussi ?ce n'est pas indiqué que c'est compatible pour .

Réponse 27 / 38

FigoFigo Messages postés 26 Statut Membre

Voilà le lien du rapport Zhpdiag: https://www.cjoint.com/?3FAvHDjj1rf

Réponse 28 / 38

Utilisateur anonyme

* /!\ Avertissement /!\,
* ce script est seulement valable pour ce pc, en cours du nettoyage, à ne pas utiliser sur un autre pc, risque de plantage !

* Lance ZHPFix via le raccourci sur ton Bureau, l'icône est sous forme de seringue.

/!\Utilisateur de Vista, Seven et W8 :

* Clique droit sur le logo de ZHPfix, « exécuter en tant qu'Administrateur »

* * Copie ( Ctrl + C ) et colle ( Ctrl + V ) les lignes suivantes en gras dans Zhpfix :
---------------------------------------------------------

[MD5.171F1BB73D0238A7A56126D3459ECDCD] [SPRF][15/10/2008] (...) -- C:\Users\Figo\AppData\Local\Temp\Extract.exe [50432]
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Bing Bar - (.Microsoft Corporation.) [HKLM][64Bits] -- {D6C3C9E7-D334-4918-BD57-5B1EF14C207D}
O42 - Logiciel: Bing Rewards Client Installer - (.Microsoft Corporation.) [HKLM][64Bits] -- {61EDBE71-5D3E-4AB7-AD95-E53FEAF68C17}
Emptytemp
EmptyClsid

----------------------------------------------------------

- Si tu ne trouves pas le bouton GO, clique sur l'icone représentant le presse-papier (L'icone entre l'appareil photo et le parchemin, en haut à gauche de la page d'outil)

- Clique sur le bouton « GO » pour lancer le nettoyage,
- confirme le nettoyage
- Copie/colle la totalité du rapport dans ta prochaine réponse

Réponse 29 / 38

FigoFigo Messages postés 26 Statut Membre

Salut,
Voilou:

Rapport de ZHPFix 2013.6.12.3 par Nicolas Coolman, Update du 12/06/2013
Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-27-06-2013-21-50-07.txt
Run by Figo at 27/06/2013 21:50:07
High Elevated Privileges : OK
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)

Corbeille vidée

========== Logiciel(s) ==========
SUPPRIME Google Update Helper
SUPPRIME Bing Bar
SUPPRIME Bing Rewards Client Installer

========== Processus mémoire ==========
SUPPRIME Memory Process: C:\Users\Figo\AppData\Local\Temp\Extract.exe

========== Clé(s) du Registre ==========
SUPPRIME [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}]
SUPPRIME [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D6C3C9E7-D334-4918-BD57-5B1EF14C207D}]
SUPPRIME [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{61EDBE71-5D3E-4AB7-AD95-E53FEAF68C17}]

========== Dossier(s) ==========
Aucun dossiers CLSID Local utilisateur vide

========== Fichier(s) ==========
SUPPRIME File: c:\users\figo\appdata\local\temp\extract.exe
SUPPRIME Temporaires Windows

========== Récapitulatif ==========
1 : Processus mémoire
3 : Clé(s) du Registre
1 : Dossier(s)
2 : Fichier(s)
3 : Logiciel(s)

End of clean in 00mn 20s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 27/06/2013 21:50:07 [1328]

Réponse 30 / 38

Utilisateur anonyme

bonjour,

redémarre ton pc et dis moi si tu as autres soucis !

Réponse 31 / 38

FigoFigo Messages postés 26 Statut Membre

Coucou,ça a l'air d'aller,j'ai vider la quarantaine d'avast,j'ai reussi a telecharger mon client,une fois telechargé j'ai utilisé revo uninstaller pour le desinstaller ainsi que tout ce qui trainait de l'ancien,puis je l'ai retelechargé,il fonctionne impec.

Réponse 32 / 38

Utilisateur anonyme

re,

* pour désinstaller les outils de désinfection
:
Télecharge Delfix sur ton bureau :

ICI

ou

Coche les cases suivantes :
=> Réactive l'Uac (juste pour Vista, Seven et W8)
=> Supprimer les outils de désinfection (coché par défaut)
=> Purger la restauration système
=> Réinitialisation des paramètres système

* Clique ensuite sur Exécuter puis patiente pendant le processus de suppression.
* Lorsque les procédures seront terminées, l'outil va se fermer et disparaître du bureau
* Un rapport est sauvegardé dans le presse-papier : il te suffit de faire un clic droit et "coller" dans ta prochaine réponse pour me poster le rapport
** le rapport est stocké à cet emplacement : C:\DelFix.txt
Attention : Le rapport est unique et est supprimé à chaque fois que l'on ré-exécute une ou plusieurs options de DelFix.

Réponse 33 / 38

FigoFigo Messages postés 26 Statut Membre

Voilou:

DelFix v10.3 - Rapport créé le 29/06/2013 à 22:03:47
# Mis à jour le 08/06/2013 par Xplode
# Nom d'utilisateur : Figo - FIGO-HP
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Activation de l'UAC ... OK

~ Suppression des outils de désinfection ...

Supprimé : C:\ZHP
Supprimé : C:\Program Files (x86)\ZHPDiag
Supprimé : C:\PhysicalDisk0_MBR.bin
Supprimé : C:\Users\Figo\Desktop\ZHPDiag.txt
Supprimé : C:\Users\Figo\Desktop\ZHPFixReport.txt
Supprimé : C:\Users\Public\Desktop\MBRCheck.lnk
Supprimé : C:\Users\Public\Desktop\ZHPDiag.lnk
Supprimé : C:\Users\Public\Desktop\ZHPFix.lnk
Supprimé : C:\Users\Figo\Downloads\ZHPDiag2.exe
Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1

~ Purge de la restauration système ...

Supprimé : RP #311 [Windows Update | 06/18/2013 14:32:31]
Supprimé : RP #312 [OTL Restore Point - 6/18/2013 8:04:01 PM | 06/18/2013 18:04:03]
Supprimé : RP #313 [HPSF Applying updates | 06/20/2013 08:34:32]
Supprimé : RP #314 [HPSF Applying updates | 06/20/2013 08:34:32]
Supprimé : RP #315 [Installed Java 7 Update 25 | 06/25/2013 12:20:01]
Supprimé : RP #316 [Windows Update | 06/25/2013 13:31:51]
Supprimé : RP #317 [Removed Google Earth. | 06/26/2013 18:34:56]
Supprimé : RP #318 [Revo Uninstaller's restore point - Legend - Legacy Of The Dragons (Chrome)(Chrome), version 3.0.12 | 06/28/2013 01:00:42]
Supprimé : RP #319 [Revo Uninstaller's restore point - Legend - Legacy Of The Dragons (Chrome)(Chrome), version 3.0.12 | 06/28/2013 01:06:21]

Nouveau point de restauration créé !

~ Réinitialisation des paramètres système ... OK

########## - EOF - ##########

Réponse 34 / 38

Utilisateur anonyme

* fais une mise à jour de ton antivirus, lance un scan complet de ton pc, tiens moi au courant du résultat :-)

Réponse 35 / 38

FigoFigo Messages postés 26 Statut Membre

Scan effectué avec avast,aucun virus détecté :)

Réponse 36 / 38

Utilisateur anonyme

super,

sur ce, bon surf ;-)

Réponse 37 / 38

FigoFigo Messages postés 26 Statut Membre

Merci beaucoup pour ton aide,bonne continuation,t'es un génie:)

Réponse 38 / 38

Utilisateur anonyme

;-)

Infecté win32:Downloader-TPW [PUP] - Page 2

Discussions similaires

Newsletters