pubs et virus : grand nettoyage Résolu/Fermé

Question

Bonjour, àtous quelqu'un pourrait il m'aider à faire un grand nettoyage de mon portable,car j'ai quelques problème avec lui.

connection longue ou qui saute sans arret

problème avec les pub

problème de fichiers infectes proteges par un mot de passe que mon antivirus n'arrive pas à reparrer
merci de votre aide.
nemausus 
ps:je n'y connais rien en informatique.





Configuration: Windows Vista / Firefox 22.0

Malekal_morte- · Answer

Salut,     



Télécharge http://general-changelog-team.fr/telechargements/logiciels/viewdownload/75-outils-de-xplode/28-adwcleaner AdwCleaner ( d'Xplode ) sur ton bureau.  
Lance le, clique sur [Suppression] puis patiente le temps du scan (Pas besoin de faire de Recherche avant).  
Une fois le scan fini, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt  


puis:


Faire un scan OTL pour diagnostiquer les programmes qui tournent et déceler des infections - Le programme va générer deux rapports OTL.txt et Extras.txt 
Fournir les deux rapports :

Tu peux suivre les indications de cette page pour t'aider : https://www.malekal.com/tutorial-otl/    

* Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau.    
(Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)    

Dans le cas d'Avast!, ne pas lancer le programme dans la Sandbox (voir lien d'aide ci-dessus).

* Lance OTL    
* En haut à droite de Analyse rapide, coche "tous les utilisateurs"
* Sur OTL, sous Personnalisation, copie-colle le script ci-dessous :    



netsvcs   
msconfig   
safebootminimal   
safebootnetwork   
activex   
drivers32   
%ALLUSERSPROFILE%\Application Data\*.   
%ALLUSERSPROFILE%\Application Data\*.exe /s   
%APPDATA%\*.   
%APPDATA%\*.exe /s   
%temp%\*.exe /s   
%SYSTEMDRIVE%\*.exe   
%systemroot%\*. /mp /s
%systemroot%\system32\consrv.dll
%systemroot%\system32\*.dll /lockedfiles   
%windir%\Tasks\*.job /lockedfiles   
%systemroot%\system32\drivers\*.sys /lockedfiles   
%systemroot%\System32\config\*.sav   
/md5start   
explorer.exe   
winlogon.exe
services.exe
wininit.exe
/md5stop
HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32 /s
HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls /s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList /s
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor /s
HKEY_CURRENT_USER\Software\Microsoft\Command Processor /s
CREATERESTOREPOINT   
nslookup https://www.google.fr/?gws_rd=ssl /c   
SAVEMBR:0   
hklm\software\clients\startmenuinternet|command /rs   
hklm\software\clients\startmenuinternet|command /64 /rs



* Clique sur le bouton Analyse.

* Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer le rapport OTL.txt (et Extra.txt si présent).
Donne le ou les liens pjjoint qui pointent vers ces rapports ici dans un nouveau message.
Je répète : donne le lien du rapport pjjoint ici dans un nouveau message.

NE PAS COPIER/COLLER LE RAPPORT ICI - DONNER LE LIEN PJJOINT DANS UN NOUVEAU MESSAGE

nemausus30 · Answer

bonsoir Malekal ,les problèmes commences,j'ai essaye de telecharger Adw Cleaner ça ne marche pas j'ai ce message impossible d'enregistrer Adw Cleanener car un problème inatendu est survenu.

Malekal_morte- · Answer

et en mode sans échec ?

Redémarre en mode sans échec, pour cela, redémarre l'ordinateur, avant le logo Windows, tapote sur la touche F8, un menu va apparaître, choisis Mode sans échec avec prise en charge du réseau et appuye sur la touche entrée du clavier.

nemausus30 · Answer

voici le rapport 
# AdwCleaner v2.306 - Rapport créé le 28/07/2013 à 20:20:33
# Mis à jour le 19/07/2013 par Xplode
# Système d'exploitation : Windows Vista (TM) Home Basic Service Pack 2 (32 bits)
# Nom d'utilisateur : gab - PC-DE-GAB
# Mode de démarrage : Mode sans échec avec prise en charge réseau
# Exécuté depuis : C:\Users\gab\Downloads\adwcleaner(4).exe
# Option [Suppression]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\ProgramData\eSafe

***** [Registre] *****

Clé Supprimée : HKLM\Software\eSafeSecControl

***** [Navigateurs] *****

-\ Internet Explorer v9.0.8112.16496

[OK] Le registre ne contient aucune entrée illégitime.

-\ Mozilla Firefox v22.0 (fr)

Fichier : C:\Users\gab\AppData\Roaming\Mozilla\Firefox\Profiles\1hoelnf4.default\prefs.js

[OK] Le fichier ne contient aucune entrée illégitime.

Fichier : C:\Users\gab\AppData\Roaming\Mozilla\Firefox\Profiles\53pekcwm.default\prefs.js

[OK] Le fichier ne contient aucune entrée illégitime.

Fichier : C:\Users\gab\AppData\Roaming\Mozilla\Firefox\Profilesuqve71n.default\prefs.js

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[S2].txt - [6493 octets] - [24/07/2013 12:02:40]
AdwCleaner[S3].txt - [1485 octets] - [24/07/2013 14:08:49]
AdwCleaner[S4].txt - [2036 octets] - [28/07/2013 18:37:29]
AdwCleaner[S5].txt - [1382 octets] - [28/07/2013 20:20:33]

########## EOF - C:\AdwCleaner[S5].txt - [1442 octets] ##########

nemausus30 · Answer

les deux rapports otl OTL Extras logfile created on: 28/07/2013 20:37:45 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\gab\Downloads Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 1,99 Gb Total Physical Memory | 0,95 Gb Available Physical Memory | 47,87% Memory free 4,21 Gb Paging File | 3,06 Gb Available in Paging File | 72,65% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 111,78 Gb Total Space | 73,12 Gb Free Space | 65,41% Space Free | Partition Type: NTFS Computer Name: PC-DE-GAB | User Name: gab | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) .vbe [@ = VBEFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation) .vbs [@ = VBSFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation) .wsf [@ = WSFFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htafile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. http [open] -- Reg Error: Value error. https [open] -- Reg Error: Value error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. vbefile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation) vbsfile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation) wsffile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation) Unknown [openas] -- Reg Error: Key error. Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN) Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 "VistaSp1" = Reg Error: Unknown registry data type -- File not found "VistaSp2" = Reg Error: Unknown registry data type -- File not found [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\OrangeHSS\Connectivity\ConnectivityManager.exe" = C:\Program Files\OrangeHSS\Connectivity\ConnectivityManager.exe:*:enabled:CSS -- (France Telecom SA) [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{019C8559-3EEF-46C7-A496-3C3B70D5570E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{020C8668-4CF9-445D-9B92-C1F3E8EF3721}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{06431866-5022-4345-ACBA-918C397774E0}" = lport=3587 | protocol=6 | dir=in | svc=p2psvc | app=%systemroot%\system32\svchost.exe | "{097B9CB7-881B-405F-8ADA-87E91710CFB7}" = rport=445 | protocol=6 | dir=out | app=system | "{0A14964A-8213-452B-8BBA-CCBE88D034EB}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{1246C62B-4EAF-4B60-A298-8E7FEC31A62A}" = lport=3702 | protocol=17 | dir=in | app=%systemroot%\system32\p2phost.exe | "{151B7986-8B84-4D8A-A2B3-2CE07D2AA997}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{1E640A04-B231-4FCC-A1C9-4E1D845CF78D}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | "{22B1870B-4E00-4AE1-B2C6-17EE29046F4B}" = lport=3587 | protocol=6 | dir=in | svc=p2psvc | app=%systemroot%\system32\svchost.exe | "{24B1A34F-32C3-440E-BD68-07C130454299}" = lport=445 | protocol=6 | dir=in | app=system | "{2798A1E5-42AC-47CD-8D23-70D4F8137E68}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | "{288C3F6A-FFC5-4842-AD8E-EDF19C788E2B}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{2B590935-8263-4D3F-B2A9-2C6DB6323ABF}" = lport=5722 | protocol=6 | dir=in | svc=dfsr | app=%systemroot%\system32\dfsr.exe | "{2E6CE991-7564-4F8A-9B09-E851FA0C2862}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{2FAFA60D-2FB6-41DC-B3CF-BEC09E9DF60E}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{30F31008-6930-4D5E-8212-04279F178109}" = lport=3540 | protocol=17 | dir=in | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe | "{319B8495-D728-4857-B42A-E10766C901D3}" = rport=139 | protocol=6 | dir=out | app=system | "{322CE13C-0192-414C-802D-91DF7A10A9A5}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | "{332DF4DE-3DE0-410E-B4D0-BF63AD7AF47D}" = lport=138 | protocol=17 | dir=in | app=system | "{348C7715-C633-4EB9-88EF-3DC8C2010B8D}" = rport=10243 | protocol=6 | dir=out | app=system | "{41BF6931-7FE8-4A12-BCAF-1FF647215796}" = rport=138 | protocol=17 | dir=out | app=system | "{43F1C0B1-B630-46D1-9C8E-1A5550737211}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{470D59F5-FC28-48DF-8C4B-F51CDD362831}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{4AE0E1F0-560B-45B6-998D-114819D35F18}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{54D24C92-CCE7-4375-AA25-18778FB7C707}" = rport=3540 | protocol=17 | dir=out | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe | "{56511F84-D712-4C4C-85EF-E7943C2D2A36}" = rport=3540 | protocol=17 | dir=out | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe | "{57FCC993-455F-4723-9334-4E47E15A3844}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe | "{668056A9-8962-4197-8C96-8C59C05951C5}" = lport=2869 | protocol=6 | dir=in | app=system | "{7C314503-8F6F-482C-9731-36F8823B61A6}" = lport=10243 | protocol=6 | dir=in | app=system | "{7C6491C4-1C9D-4377-B063-84D42E4DC854}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{84265B1C-912D-4EE3-9A39-22C6DAF3BB4D}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{89556248-79B6-41C1-BFB0-516F8FF5A364}" = lport=5722 | protocol=6 | dir=in | svc=dfsr | app=%systemroot%\system32\dfsr.exe | "{947878B1-EDBE-4C6F-8FE5-60F955D9F2A8}" = rport=5722 | protocol=6 | dir=out | svc=dfsr | app=%systemroot%\system32\dfsr.exe | "{95674FBE-FBD6-491E-90FC-509D10B572AC}" = lport=3702 | protocol=17 | dir=in | app=%systemroot%\system32\p2phost.exe | "{9E620341-B9DE-49C5-9AEB-2CCEC633EAE6}" = lport=2869 | protocol=6 | dir=in | app=system | "{A452D0F5-54F7-40CC-9444-BCA753133D4D}" = lport=137 | protocol=17 | dir=in | app=system | "{A569DF9F-30C1-46DF-A32F-B3B31AC0CA99}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | "{A62647E9-AAC1-45AF-9F30-B03EFA587C76}" = rport=3702 | protocol=17 | dir=out | app=%systemroot%\system32\p2phost.exe | "{A67D2FA0-B6B9-43AC-8E75-6A7F3FDDE2C1}" = lport=2869 | protocol=6 | dir=in | app=system | "{A70F8F7A-D98E-4C0B-AA7F-BF0E48D4F0BB}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{A74DD1BC-31F7-4E91-8189-81F42A5BCE10}" = rport=3587 | protocol=6 | dir=out | svc=p2psvc | app=%systemroot%\system32\svchost.exe | "{AFEFB9E8-05EB-43C4-BFFB-32AF92B52EFE}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | "{B0306035-9216-4CDA-9596-EEE6B0D2392D}" = rport=3702 | protocol=17 | dir=out | app=%systemroot%\system32\p2phost.exe | "{B3F548CF-7A21-4905-817D-9C1EBDFB323E}" = lport=139 | protocol=6 | dir=in | app=system | "{BEFB7555-A605-4FDF-84E6-B2A09EA7AF31}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{C2E6FE99-5ED9-44B0-A9AF-CC0B02BC0FAA}" = rport=5722 | protocol=6 | dir=out | svc=dfsr | app=%systemroot%\system32\dfsr.exe | "{C42EAAFE-2DB8-45AA-B213-ED22CBB684D0}" = rport=2869 | protocol=6 | dir=out | app=system | "{C86C3F08-AA63-4A0C-9D3B-89F6EB824FE1}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{C8FB5D76-8B67-473A-BA63-0A4F76D552DC}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | "{D385664A-0DFB-4ACE-85AB-818AFEF2ACC7}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | "{D6799A8C-10A5-4B88-8B6C-781B99932DBE}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | "{D6A21F52-5B04-4709-9722-CAF7936F75D8}" = rport=3587 | protocol=6 | dir=out | svc=p2psvc | app=%systemroot%\system32\svchost.exe | "{DE692F9F-48CB-45B6-842F-728706C2923F}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{E25590B3-B6A2-4DDA-A681-67A49E661E69}" = rport=137 | protocol=17 | dir=out | app=system | "{E3CED31D-84D5-40D0-B2E3-2F57382F5A1D}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | "{E5EF919F-069A-4F2D-AA0E-94AB6110CB7F}" = lport=3540 | protocol=17 | dir=in | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe | "{F8ED2C33-D652-4A06-AB7E-5D83D04C8376}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{FCC43DD6-1E75-432B-B15A-7860EB78143D}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{04CA51C6-9B31-4A36-984E-66C647590851}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{056E0D02-C769-4703-8D0C-F7AC943FAB0C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{0844C419-C1AB-4A19-871C-0582428210E7}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{0846AB27-29D6-4168-80EE-0A01C2FEC187}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{0AC343CB-DE03-44E1-A755-8195FB740429}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{0BE01564-E2C2-4EEC-8623-E1EAEB76F145}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe | "{176A2935-25F3-4D8A-9A3D-7618801ADE90}" = protocol=17 | dir=out | app=%programfiles%\windows collaboration\wincollab.exe | "{2950AE08-5EEC-47E2-8AF2-FBD8D818C1A3}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{2E5E9647-89DA-4714-83CC-11690AC608AF}" = protocol=17 | dir=out | app=%programfiles%\windows collaboration\wincollab.exe | "{31C8FC59-30E1-4FAC-BB55-3D0B5E280622}" = protocol=6 | dir=in | app=%systemroot%\system32\p2phost.exe | "{3721CC98-08AA-474C-B309-B124C339F835}" = protocol=6 | dir=in | app=%programfiles%\windows collaboration\wincollab.exe | "{3A1CFD6C-B823-453D-B198-897B05764DAD}" = protocol=6 | dir=in | app=%systemroot%\system32\p2phost.exe | "{3A328865-2967-49F9-941E-D4AC12DD9C99}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{40A17A59-8FBA-4A18-8AC0-B447FB384D89}" = protocol=6 | dir=out | app=%systemroot%\system32\p2phost.exe | "{44BD4991-26F5-4EA5-A73C-39969A069B8F}" = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | "{4C4A08BF-B2FF-47F3-A42C-EB3F80D2AD3A}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{5B80449E-76DA-468C-9264-260027767576}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{5F5EA73A-577B-4869-B588-F3687B1CE51E}" = protocol=6 | dir=out | app=system | "{61D06140-9DFC-4AA8-8A8B-CC3994BADA0E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{65CF9662-3BD3-432E-8CA1-F998AC5E78C1}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{685E8D39-6279-4FFD-80D1-62EA24C044BF}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{68C0A367-867D-4B27-9224-DFF9235652DA}" = protocol=6 | dir=in | app=%programfiles%\windows collaboration\wincollab.exe | "{700B5E9E-47A7-4B7C-9D2E-7D69C48B4001}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{774D4369-98CB-437F-866F-5EB5C610407F}" = protocol=17 | dir=in | app=c:\windows\system32\msiexec.exe | "{8290AB4F-40A5-459A-99A9-63C6A257FBAA}" = dir=in | app=c:\program files\windows live\mesh\moe.exe | "{829D7F34-0B72-44AB-B766-B9C37F363262}" = protocol=17 | dir=in | app=%programfiles%\windows collaboration\wincollab.exe | "{889D2E37-7AE8-42FA-A932-D381B42DAF56}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{942660C1-3C92-4155-9050-756EF65B60D5}" = protocol=6 | dir=out | app=%programfiles%\windows collaboration\wincollab.exe | "{9B641E94-00E4-4F95-9C5D-2124573187E0}" = protocol=6 | dir=out | app=%programfiles%\windows collaboration\wincollab.exe | "{9FFE0915-B169-4958-B813-C364D12AFBA1}" = protocol=6 | dir=in | app=c:\programdata\esafe\egdpsvc.exe | "{BC794D68-7BF7-4373-8ACC-30067DEECC08}" = protocol=6 | dir=in | app=c:\program files\veetle\player\veetlenet.exe | "{C584DA92-4899-4270-8840-34179A80C1E4}" = protocol=58 | dir=in | name=@hnetcfg.dll,-148 | "{CC974C81-EEEF-48D8-834E-26DCDF1D6E48}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{CD8F969D-9D94-4E0A-8093-C21492D613AD}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{DDF94381-83BC-410E-8BEB-72EC60AF074E}" = protocol=17 | dir=in | app=%programfiles%\windows collaboration\wincollab.exe | "{DDF99165-27B3-4368-81A7-739A970AE7F8}" = protocol=6 | dir=out | app=%systemroot%\system32\p2phost.exe | "{E12A4316-4560-4856-B2B5-516C468F05F4}" = protocol=6 | dir=in | app=c:\program files\veetle\player\veetlenet.exe | "{EC45742B-9B4D-4966-82BE-36CB294F50E5}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{F1CED552-AD5E-4D80-8893-656C0DC64F42}" = protocol=6 | dir=in | app=c:\windows\system32\msiexec.exe | "TCP Query User{4D9B03EF-D8DE-4D59-9A46-00D4FEDBA58C}C:\users\gab\appdata\roaming\cacaoweb\cacaoweb.exe" = protocol=6 | dir=in | app=c:\users\gab\appdata\roaming\cacaoweb\cacaoweb.exe | "TCP Query User{82AA72D6-0C7A-4075-A183-D0C3AAF3C982}C:\program files\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files\videolan\vlc\vlc.exe | "TCP Query User{8D2D0CE0-BDFE-4AD2-87C6-A48A8ABD6547}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | "UDP Query User{3BA17991-74AF-478D-A8BA-A5F302812539}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | "UDP Query User{3D71B983-D423-44D2-9134-D0ADED4BE6FA}C:\program files\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files\videolan\vlc\vlc.exe | "UDP Query User{B314A532-A65F-429E-B632-169DF50504CF}C:\users\gab\appdata\roaming\cacaoweb\cacaoweb.exe" = protocol=17 | dir=in | app=c:\users\gab\appdata\roaming\cacaoweb\cacaoweb.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 "{05E379CC-F626-4E7D-8354-463865B303BF}" = Windows Live UX Platform Language Pack "{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer "{0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}" = Microsoft .NET Framework 4 Client Profile FRA Language Pack "{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions "{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service "{2D6E3D97-1FDF-4993-AC75-72F59EC445C5}" = Windows Live Family Safety "{32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8}" = Microsoft Antimalware Service FR-FR Language Pack "{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery "{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live "{38E1CA6C-2121-4B5C-A3A5-0B0003794EFF}" = Sony Media Manager 2.2 "{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{3DADB23F-94E6-4E4D-AFE8-15DE4395E8F3}" = Microsoft Security Client "{3E31821C-7917-367E-938E-E65FC413EA31}" = Microsoft .NET Framework 3.5 Language Pack SP1 - fra "{43E8D9E7-AFC9-4BA3-8106-B95E02B87AB7}" = EZdrummer "{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live "{50779A29-834E-4E36-BBEB-B7CABC67A825}" = Microsoft Security Client FR-FR Language Pack "{55D003F4-9599-44BF-BA9E-95D060730DD3}" = Contrôle ActiveX Windows Live Mesh pour connexions à distance "{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI "{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM "{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE "{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker "{6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}" = Complément Messenger "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core "{79FE297D-E8D5-4FDE-B015-7799871F0058}" = Etiquettes CD DVD "{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform "{8411FA28-D32D-4518-92F0-3FBD80A702BC}" = Sony Vegas 7.0 "{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}" = Windows Live Mesh "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT "{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker "{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195 "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9C05B2CC-68D0-4B46-A9C8-40CC4BF10C33}" = Windows Live Family Safety "{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail "{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail "{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common "{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer "{AB93C51F-71F9-4A28-8134-FE1B5B9373E9}" = Windows Live Remote Service Resources "{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter "{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}" = PMB "{C06EFB22-B5DB-46C5-9215-BCB5C19C0858}" = LauncherMA "{C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}" = Windows Live ID Sign-in Assistant "{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform "{CF1D7323-8A0A-49C7-83B0-088DB90721E2}" = AmpegSVX "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform "{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh "{DFDBE1F9-04CE-4645-BB6C-4590EABC7A9C}" = Windows Live Remote Client Resources "{E09B48B5-E141-427A-AB0C-D3605127224A}" = Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR) "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10 "{EFB21DE7-8C19-4A88-BB28-A766E16493BC}" = Adobe Photoshop CS "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{ORAHSS}.Bas_Debit_CustoUpdate" = "{ORAHSS}.Browser" = Navigateur Orange "{ORAHSS}.UninstallSuite" = Orange - Logiciels Internet "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 11.6 "avast" = avast! Free Antivirus "AviSynth" = AviSynth 2.5 "Broadcom 802.11b Network Adapter" = Carte réseau local sans fil 802.11 Broadcom "CCleaner" = CCleaner "Celtx (2.9)" = Celtx (2.9) "Glary Utilities_is1" = Glary Utilities 2.54.0.1759 "HDMI" = Intel(R) Graphics Media Accelerator Driver "LameACM" = Lame ACM MP3 Codec "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300 "Microsoft .NET Framework 3.5 Language Pack SP1 - fra" = Module linguistique Microsoft .NET Framework 3.5 SP1- fra "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile FRA Language Pack" = Module linguistique Microsoft .NET Framework 4 Client Profile FRA "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Microsoft Security Client" = Microsoft Security Essentials "Mozilla Firefox 22.0 (x86 fr)" = Mozilla Firefox 22.0 (x86 fr) "MozillaMaintenanceService" = Mozilla Maintenance Service "Online Games Manager" = Online Games Manager v1.20 "Pack Tux XP" = Pack Tux XP 3.0 "PokerStars.fr" = PokerStars.fr "Timeworks Equalizer" = Timeworks Equalizer "Veetle TV" = Veetle TV "VLC media player" = VLC media player 2.0.2 "WinLiveSuite" = Windows Live "WsysControl" = Wsys Control 1.0.0.2557 [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "fTalk" = fTalk "Video Converter" = Video Converter [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 24/07/2013 15:07:00 | Computer Name = PC-de-gab | Source = Windows Search Service | ID = 3013 Description = Error - 24/07/2013 15:07:00 | Computer Name = PC-de-gab | Source = Windows Search Service | ID = 3013 Description = Error - 24/07/2013 15:07:00 | Computer Name = PC-de-gab | Source = Windows Search Service | ID = 3013 Description = Error - 24/07/2013 15:07:00 | Computer Name = PC-de-gab | Source = Windows Search Service | ID = 3013 Description = Error - 25/07/2013 07:27:45 | Computer Name = PC-de-gab | Source = Windows Search Service | ID = 3013 Description = Error - 28/07/2013 06:51:16 | Computer Name = PC-de-gab | Source = Application Hang | ID = 1002 Description = Le programme nu.exe version 15.0.0.122 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans l'application Rapports et solutions aux problèmes du Panneau de configuration. ID de processus : ab8 Heure de début : 01ce8b7fabb29cc0 Heure de fin : 18 Error - 28/07/2013 06:55:28 | Computer Name = PC-de-gab | Source = Application Hang | ID = 1002 Description = Le programme nu.exe version 15.0.0.122 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans l'application Rapports et solutions aux problèmes du Panneau de configuration. ID de processus : 154c Heure de début : 01ce8b80685a5bb0 Heure de fin : 18 Error - 28/07/2013 07:07:10 | Computer Name = PC-de-gab | Source = Application Hang | ID = 1002 Description = Le programme nu.exe version 15.0.0.122 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans l'application Rapports et solutions aux problèmes du Panneau de configuration. ID de processus : 1268 Heure de début : 01ce8b81020001c0 Heure de fin : 38 Error - 28/07/2013 07:25:12 | Computer Name = PC-de-gab | Source = Application Hang | ID = 1002 Description = Le programme nu.exe version 15.0.0.122 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans l'application Rapports et solutions aux problèmes du Panneau de configuration. ID de processus : 1604 Heure de début : 01ce8b849c462630 Heure de fin : 39 Error - 28/07/2013 13:42:10 | Computer Name = PC-de-gab | Source = EventSystem | ID = 4609 Description = [ System Events ] Error - 28/07/2013 13:38:18 | Computer Name = PC-de-gab | Source = ipnathlp | ID = 31004 Description = L'agent proxy DNS n'a pas pu allouer 0 octets de mémoire. Ceci peut indiquer que le système n'a plus beaucoup de mémoire virtuelle, ou que le gestionnaire de mémoire a rencontré une erreur interne. Error - 28/07/2013 13:42:01 | Computer Name = PC-de-gab | Source = DCOM | ID = 10005 Description = Error - 28/07/2013 13:42:10 | Computer Name = PC-de-gab | Source = DCOM | ID = 10005 Description = Error - 28/07/2013 13:42:16 | Computer Name = PC-de-gab | Source = DCOM | ID = 10005 Description = Error - 28/07/2013 13:42:28 | Computer Name = PC-de-gab | Source = Service Control Manager | ID = 7001 Description = Error - 28/07/2013 13:42:28 | Computer Name = PC-de-gab | Source = Service Control Manager | ID = 7026 Description = Error - 28/07/2013 14:20:36 | Computer Name = PC-de-gab | Source = DCOM | ID = 10005 Description = Error - 28/07/2013 14:23:07 | Computer Name = PC-de-gab | Source = Service Control Manager | ID = 7000 Description = Error - 28/07/2013 14:23:07 | Computer Name = PC-de-gab | Source = Service Control Manager | ID = 7026 Description = Error - 28/07/2013 14:27:24 | Computer Name = PC-de-gab | Source = ACPI | ID = 327693 Description = : le contrôleur embarqué n'a pas répondu dans le délai imparti. Cette erreur peut indiquer que le matériel ou le microprogramme du contrôleur embarqué présente une erreur ou que le BIOS accède au contrôleur embarqué de manière incorrecte. Contactez le fabricant de votre ordinateur afin de savoir si un BIOS mis à niveau est disponible. Dans certains cas, cette erreur peut provoquer un fonctionnement incorrect de l'application. < End of report > OTL Extras logfile created on: 28/07/2013 20:37:45 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\gab\Downloads Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 1,99 Gb Total Physical Memory | 0,95 Gb Available Physical Memory | 47,87% Memory free 4,21 Gb Paging File | 3,06 Gb Available in Paging File | 72,65% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 111,78 Gb Total Space | 73,12 Gb Free Space | 65,41% Space Free | Partition Type: NTFS Computer Name: PC-DE-GAB | User Name: gab | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) .vbe [@ = VBEFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation) .vbs [@ = VBSFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation) .wsf [@ = WSFFile] -- C:\Windows\System32\CScript.exe (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htafile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. http [open] -- Reg Error: Value error. https [open] -- Reg Error: Value error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. vbefile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation) vbsfile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation) wsffile [open] -- %SystemRoot%\System32\CScript.exe "%1" %* (Microsoft Corporation) Unknown [openas] -- Reg Error: Key error. Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN) Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 "VistaSp1" = Reg Error: Unknown registry data type -- File not found "VistaSp2" = Reg Error: Unknown registry data type -- File not found [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\OrangeHSS\Connectivity\ConnectivityManager.exe" = C:\Program Files\OrangeHSS\Connectivity\ConnectivityManager.exe:*:enabled:CSS -- (France Telecom SA) [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{019C8559-3EEF-46C7-A496-3C3B70D5570E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{020C8668-4CF9-445D-9B92-C1F3E8EF3721}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{06431866-5022-4345-ACBA-918C397774E0}" = lport=3587 | protocol=6 | dir=in | svc=p2psvc | app=%systemroot%\system32\svchost.exe | "{097B9CB7-881B-405F-8ADA-87E91710CFB7}" = rport=445 | protocol=6 | dir=out | app=system | "{0A14964A-8213-452B-8BBA-CCBE88D034EB}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{1246C62B-4EAF-4B60-A298-8E7FEC31A62A}" = lport=3702 | protocol=17 | dir=in | app=%systemroot%\system32\p2phost.exe | "{151B7986-8B84-4D8A-A2B3-2CE07D2AA997}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{1E640A04-B231-4FCC-A1C9-4E1D845CF78D}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | "{22B1870B-4E00-4AE1-B2C6-17EE29046F4B}" = lport=3587 | protocol=6 | dir=in | svc=p2psvc | app=%systemroot%\system32\svchost.exe | "{24B1A34F-32C3-440E-BD68-07C130454299}" = lport=445 | protocol=6 | dir=in | app=system | "{2798A1E5-42AC-47CD-8D23-70D4F8137E68}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | "{288C3F6A-FFC5-4842-AD8E-EDF19C788E2B}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{2B590935-8263-4D3F-B2A9-2C6DB6323ABF}" = lport=5722 | protocol=6 | dir=in | svc=dfsr | app=%systemroot%\system32\dfsr.exe | "{2E6CE991-7564-4F8A-9B09-E851FA0C2862}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{2FAFA60D-2FB6-41DC-B3CF-BEC09E9DF60E}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{30F31008-6930-4D5E-8212-04279F178109}" = lport=3540 | protocol=17 | dir=in | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe | "{319B8495-D728-4857-B42A-E10766C901D3}" = rport=139 | protocol=6 | dir=out | app=system | "{322CE13C-0192-414C-802D-91DF7A10A9A5}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | "{332DF4DE-3DE0-410E-B4D0-BF63AD7AF47D}" = lport=138 | protocol=17 | dir=in | app=system | "{348C7715-C633-4EB9-88EF-3DC8C2010B8D}" = rport=10243 | protocol=6 | dir=out | app=system | "{41BF6931-7FE8-4A12-BCAF-1FF647215796}" = rport=138 | protocol=17 | dir=out | app=system | "{43F1C0B1-B630-46D1-9C8E-1A5550737211}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{470D59F5-FC28-48DF-8C4B-F51CDD362831}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{4AE0E1F0-560B-45B6-998D-114819D35F18}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{54D24C92-CCE7-4375-AA25-18778FB7C707}" = rport=3540 | protocol=17 | dir=out | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe | "{56511F84-D712-4C4C-85EF-E7943C2D2A36}" = rport=3540 | protocol=17 | dir=out | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe | "{57FCC993-455F-4723-9334-4E47E15A3844}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe | "{668056A9-8962-4197-8C96-8C59C05951C5}" = lport=2869 | protocol=6 | dir=in | app=system | "{7C314503-8F6F-482C-9731-36F8823B61A6}" = lport=10243 | protocol=6 | dir=in | app=system | "{7C6491C4-1C9D-4377-B063-84D42E4DC854}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{84265B1C-912D-4EE3-9A39-22C6DAF3BB4D}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{89556248-79B6-41C1-BFB0-516F8FF5A364}" = lport=5722 | protocol=6 | dir=in | svc=dfsr | app=%systemroot%\system32\dfsr.exe | "{947878B1-EDBE-4C6F-8FE5-60F955D9F2A8}" = rport=5722 | protocol=6 | dir=out | svc=dfsr | app=%systemroot%\system32\dfsr.exe | "{95674FBE-FBD6-491E-90FC-509D10B572AC}" = lport=3702 | protocol=17 | dir=in | app=%systemroot%\system32\p2phost.exe | "{9E620341-B9DE-49C5-9AEB-2CCEC633EAE6}" = lport=2869 | protocol=6 | dir=in | app=system | "{A452D0F5-54F7-40CC-9444-BCA753133D4D}" = lport=137 | protocol=17 | dir=in | app=system | "{A569DF9F-30C1-46DF-A32F-B3B31AC0CA99}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | "{A62647E9-AAC1-45AF-9F30-B03EFA587C76}" = rport=3702 | protocol=17 | dir=out | app=%systemroot%\system32\p2phost.exe | "{A67D2FA0-B6B9-43AC-8E75-6A7F3FDDE2C1}" = lport=2869 | protocol=6 | dir=in | app=system | "{A70F8F7A-D98E-4C0B-AA7F-BF0E48D4F0BB}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{A74DD1BC-31F7-4E91-8189-81F42A5BCE10}" = rport=3587 | protocol=6 | dir=out | svc=p2psvc | app=%systemroot%\system32\svchost.exe | "{AFEFB9E8-05EB-43C4-BFFB-32AF92B52EFE}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | "{B0306035-9216-4CDA-9596-EEE6B0D2392D}" = rport=3702 | protocol=17 | dir=out | app=%systemroot%\system32\p2phost.exe | "{B3F548CF-7A21-4905-817D-9C1EBDFB323E}" = lport=139 | protocol=6 | dir=in | app=system | "{BEFB7555-A605-4FDF-84E6-B2A09EA7AF31}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{C2E6FE99-5ED9-44B0-A9AF-CC0B02BC0FAA}" = rport=5722 | protocol=6 | dir=out | svc=dfsr | app=%systemroot%\system32\dfsr.exe | "{C42EAAFE-2DB8-45AA-B213-ED22CBB684D0}" = rport=2869 | protocol=6 | dir=out | app=system | "{C86C3F08-AA63-4A0C-9D3B-89F6EB824FE1}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{C8FB5D76-8B67-473A-BA63-0A4F76D552DC}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | "{D385664A-0DFB-4ACE-85AB-818AFEF2ACC7}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | "{D6799A8C-10A5-4B88-8B6C-781B99932DBE}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | "{D6A21F52-5B04-4709-9722-CAF7936F75D8}" = rport=3587 | protocol=6 | dir=out | svc=p2psvc | app=%systemroot%\system32\svchost.exe | "{DE692F9F-48CB-45B6-842F-728706C2923F}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{E25590B3-B6A2-4DDA-A681-67A49E661E69}" = rport=137 | protocol=17 | dir=out | app=system | "{E3CED31D-84D5-40D0-B2E3-2F57382F5A1D}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | "{E5EF919F-069A-4F2D-AA0E-94AB6110CB7F}" = lport=3540 | protocol=17 | dir=in | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe | "{F8ED2C33-D652-4A06-AB7E-5D83D04C8376}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{FCC43DD6-1E75-432B-B15A-7860EB78143D}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{04CA51C6-9B31-4A36-984E-66C647590851}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{056E0D02-C769-4703-8D0C-F7AC943FAB0C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{0844C419-C1AB-4A19-871C-0582428210E7}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{0846AB27-29D6-4168-80EE-0A01C2FEC187}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{0AC343CB-DE03-44E1-A755-8195FB740429}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{0BE01564-E2C2-4EEC-8623-E1EAEB76F145}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe | "{176A2935-25F3-4D8A-9A3D-7618801ADE90}" = protocol=17 | dir=out | app=%programfiles%\windows collaboration\wincollab.exe | "{2950AE08-5EEC-47E2-8AF2-FBD8D818C1A3}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{2E5E9647-89DA-4714-83CC-11690AC608AF}" = protocol=17 | dir=out | app=%programfiles%\windows collaboration\wincollab.exe | "{31C8FC59-30E1-4FAC-BB55-3D0B5E280622}" = protocol=6 | dir=in | app=%systemroot%\system32\p2phost.exe | "{3721CC98-08AA-474C-B309-B124C339F835}" = protocol=6 | dir=in | app=%programfiles%\windows collaboration\wincollab.exe | "{3A1CFD6C-B823-453D-B198-897B05764DAD}" = protocol=6 | dir=in | app=%systemroot%\system32\p2phost.exe | "{3A328865-2967-49F9-941E-D4AC12DD9C99}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{40A17A59-8FBA-4A18-8AC0-B447FB384D89}" = protocol=6 | dir=out | app=%systemroot%\system32\p2phost.exe | "{44BD4991-26F5-4EA5-A73C-39969A069B8F}" = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | "{4C4A08BF-B2FF-47F3-A42C-EB3F80D2AD3A}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{5B80449E-76DA-468C-9264-260027767576}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{5F5EA73A-577B-4869-B588-F3687B1CE51E}" = protocol=6 | dir=out | app=system | "{61D06140-9DFC-4AA8-8A8B-CC3994BADA0E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{65CF9662-3BD3-432E-8CA1-F998AC5E78C1}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{685E8D39-6279-4FFD-80D1-62EA24C044BF}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{68C0A367-867D-4B27-9224-DFF9235652DA}" = protocol=6 | dir=in | app=%programfiles%\windows collaboration\wincollab.exe | "{700B5E9E-47A7-4B7C-9D2E-7D69C48B4001}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{774D4369-98CB-437F-866F-5EB5C610407F}" = protocol=17 | dir=in | app=c:\windows\system32\msiexec.exe | "{8290AB4F-40A5-459A-99A9-63C6A257FBAA}" = dir=in | app=c:\program files\windows live\mesh\moe.exe | "{829D7F34-0B72-44AB-B766-B9C37F363262}" = protocol=17 | dir=in | app=%programfiles%\windows collaboration\wincollab.exe | "{889D2E37-7AE8-42FA-A932-D381B42DAF56}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{942660C1-3C92-4155-9050-756EF65B60D5}" = protocol=6 | dir=out | app=%programfiles%\windows collaboration\wincollab.exe | "{9B641E94-00E4-4F95-9C5D-2124573187E0}" = protocol=6 | dir=out | app=%programfiles%\windows collaboration\wincollab.exe | "{9FFE0915-B169-4958-B813-C364D12AFBA1}" = protocol=6 | dir=in | app=c:\programdata\esafe\egdpsvc.exe | "{BC794D68-7BF7-4373-8ACC-30067DEECC08}" = protocol=6 | dir=in | app=c:\program files\veetle\player\veetlenet.exe | "{C584DA92-4899-4270-8840-34179A80C1E4}" = protocol=58 | dir=in | name=@hnetcfg.dll,-148 | "{CC974C81-EEEF-48D8-834E-26DCDF1D6E48}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{CD8F969D-9D94-4E0A-8093-C21492D613AD}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{DDF94381-83BC-410E-8BEB-72EC60AF074E}" = protocol=17 | dir=in | app=%programfiles%\windows collaboration\wincollab.exe | "{DDF99165-27B3-4368-81A7-739A970AE7F8}" = protocol=6 | dir=out | app=%systemroot%\system32\p2phost.exe | "{E12A4316-4560-4856-B2B5-516C468F05F4}" = protocol=6 | dir=in | app=c:\program files\veetle\player\veetlenet.exe | "{EC45742B-9B4D-4966-82BE-36CB294F50E5}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{F1CED552-AD5E-4D80-8893-656C0DC64F42}" = protocol=6 | dir=in | app=c:\windows\system32\msiexec.exe | "TCP Query User{4D9B03EF-D8DE-4D59-9A46-00D4FEDBA58C}C:\users\gab\appdata\roaming\cacaoweb\cacaoweb.exe" = protocol=6 | dir=in | app=c:\users\gab\appdata\roaming\cacaoweb\cacaoweb.exe | "TCP Query User{82AA72D6-0C7A-4075-A183-D0C3AAF3C982}C:\program files\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files\videolan\vlc\vlc.exe | "TCP Query User{8D2D0CE0-BDFE-4AD2-87C6-A48A8ABD6547}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | "UDP Query User{3BA17991-74AF-478D-A8BA-A5F302812539}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | "UDP Query User{3D71B983-D423-44D2-9134-D0ADED4BE6FA}C:\program files\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files\videolan\vlc\vlc.exe | "UDP Query User{B314A532-A65F-429E-B632-169DF50504CF}C:\users\gab\appdata\roaming\cacaoweb\cacaoweb.exe" = protocol=17 | dir=in | app=c:\users\gab\appdata\roaming\cacaoweb\cacaoweb.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 "{05E379CC-F626-4E7D-8354-463865B303BF}" = Windows Live UX Platform Language Pack "{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer "{0F5B4A82-9DAF-3D13-8CB8-AEB25E4A614E}" = Microsoft .NET Framework 4 Client Profile FRA Language Pack "{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions "{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service "{2D6E3D97-1FDF-4993-AC75-72F59EC445C5}" = Windows Live Family Safety "{32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8}" = Microsoft Antimalware Service FR-FR Language Pack "{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery "{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live "{38E1CA6C-2121-4B5C-A3A5-0B0003794EFF}" = Sony Media Manager 2.2 "{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{3DADB23F-94E6-4E4D-AFE8-15DE4395E8F3}" = Microsoft Security Client "{3E31821C-7917-367E-938E-E65FC413EA31}" = Microsoft .NET Framework 3.5 Language Pack SP1 - fra "{43E8D9E7-AFC9-4BA3-8106-B95E02B87AB7}" = EZdrummer "{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live "{50779A29-834E-4E36-BBEB-B7CABC67A825}" = Microsoft Security Client FR-FR Language Pack "{55D003F4-9599-44BF-BA9E-95D060730DD3}" = Contrôle ActiveX Windows Live Mesh pour connexions à distance "{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI "{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM "{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE "{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker "{6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}" = Complément Messenger "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core "{79FE297D-E8D5-4FDE-B015-7799871F0058}" = Etiquettes CD DVD "{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform "{8411FA28-D32D-4518-92F0-3FBD80A702BC}" = Sony Vegas 7.0 "{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}" = Windows Live Mesh "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT "{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker "{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195 "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9C05B2CC-68D0-4B46-A9C8-40CC4BF10C33}" = Windows Live Family Safety "{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail "{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail "{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common "{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer "{AB93C51F-71F9-4A28-8134-FE1B5B9373E9}" = Windows Live Remote Service Resources "{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter "{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}" = PMB "{C06EFB22-B5DB-46C5-9215-BCB5C19C0858}" = LauncherMA "{C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}" = Windows Live ID Sign-in Assistant "{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform "{CF1D7323-8A0A-49C7-83B0-088DB90721E2}" = AmpegSVX "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform "{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh "{DFDBE1F9-04CE-4645-BB6C-4590EABC7A9C}" = Windows Live Remote Client Resources "{E09B48B5-E141-427A-AB0C-D3605127224A}" = Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR) "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10 "{EFB21DE7-8C19-4A88-BB28-A766E16493BC}" = Adobe Photoshop CS "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{ORAHSS}.Bas_Debit_CustoUpdate" = "{ORAHSS}.Browser" = Navigateur Orange "{ORAHSS}.UninstallSuite" = Orange - Logiciels Internet "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 11.6 "avast" = avast! Free Antivirus "AviSynth" = AviSynth 2.5 "Broadcom 802.11b Network Adapter" = Carte réseau local sans fil 802.11 Broadcom "CCleaner" = CCleaner "Celtx (2.9)" = Celtx (2.9) "Glary Utilities_is1" = Glary Utilities 2.54.0.1759 "HDMI" = Intel(R) Graphics Media Accelerator Driver "LameACM" = Lame ACM MP3 Codec "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300 "Microsoft .NET Framework 3.5 Language Pack SP1 - fra" = Module linguistique Microsoft .NET Framework 3.5 SP1- fra "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile FRA Language Pack" = Module linguistique Microsoft .NET Framework 4 Client Profile FRA "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Microsoft Security Client" = Microsoft Security Essentials "Mozilla Firefox 22.0 (x86 fr)" = Mozilla Firefox 22.0 (x86 fr) "MozillaMaintenanceService" = Mozilla Maintenance Service "Online Games Manager" = Online Games Manager v1.20 "Pack Tux XP" = Pack Tux XP 3.0 "PokerStars.fr" = PokerStars.fr "Timeworks Equalizer" = Timeworks Equalizer "Veetle TV" = Veetle TV "VLC media player" = VLC media player 2.0.2 "WinLiveSuite" = Windows Live "WsysControl" = Wsys Control 1.0.0.2557 [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "fTalk" = fTalk "Video Converter" = Video Converter [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 24/07/2013 15:07:00 | Computer Name = PC-de-gab | Source = Windows Search Service | ID = 3013 Description = Error - 24/07/2013 15:07:00 | Computer Name = PC-de-gab | Source = Windows Search Service | ID = 3013 Description = Error - 24/07/2013 15:07:00 | Computer Name = PC-de-gab | Source = Windows Search Service | ID = 3013 Description = Error - 24/07/2013 15:07:00 | Computer Name = PC-de-gab | Source = Windows Search Service | ID = 3013 Description = Error - 25/07/2013 07:27:45 | Computer Name = PC-de-gab | Source = Windows Search Service | ID = 3013 Description = Error - 28/07/2013 06:51:16 | Computer Name = PC-de-gab | Source = Application Hang | ID = 1002 Description = Le programme nu.exe version 15.0.0.122 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans l'application Rapports et solu

Malekal_morte- · Answer

Les rapports OTL sur pjjoint - Lire les instructions.

nemausus30 · Answer

voici les rapports je ne sais pas si ça a tout pris tiens moi au courrant
https://pjjoint.malekal.com/files.php?id=OLT_extras_20130728_o5x106b14I16

nemausus30 · Answer

j'ai trois rapports dans le bloc note je vais essayer de te les faire passer un apres l'autre via le lien que tu m'as passe ok?

nemausus30 · Answer

OK

nemausus30 · Answer

voici le nouveau lien
https://pjjoint.malekal.com/files.php?id=OTL20130728_913b8v15f12w13

Malekal_morte- · Answer

Relance OTL. 
o sous Personnalisation (Custom Scan), copie_colle le contenu du cadre ci dessous (bien prendre :OTL en début).
Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:  

:OTL
SRV - File not found [Auto | Stopped] -- C:\ProgramData\eSafe\eGdpSvc.exe -- (WsysSvc) 
2013/05/28 21:08:04 | 000,000,000 | ---D | M] (Special Savings) -- C:\Users\gab\AppData\Roaming\mozilla\Extensions\specialsavings@vshsolutions.com  
[2013/05/28 21:08:04 | 000,000,000 | ---D | M] (Smiley Bar for Facebook) -- C:\Users\gab\AppData\Roaming\mozilla\Extensions\statuswinks@StatusWinks 
[2013/07/28 18:38:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\gab\AppData\Roaming\mozilla\Firefox\Profiles\1hoelnf4.default\extensions 
[2013/07/28 18:38:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\gab\AppData\Roaming\mozilla\Firefox\Profiles\ruqve71n.default\Extensions 
[2013/07/04 19:30:30 | 000,000,000 | ---D | M] (DnsBasic) -- C:\Program Files\mozilla firefox\extensions\{650EED71-89E2-453B-8DCF-2AA1B4AE6EF3}
[2013/04/28 16:47:02 | 000,000,000 | ---- | C] () -- C:\ProgramData\382a5e302a5f3e292b_c 
[2012/10/22 08:35:59 | 000,082,868 | ---- | C] () -- C:\ProgramData\igdxilyhsnlhfpt 
[2012/08/12 12:14:10 | 000,001,644 | ---- | C] () -- C:\Windows\System32\ASOROSet.bin 
[2012/07/20 16:40:14 | 000,000,051 | ---- | C] () -- C:\ProgramData\roxohfhjdpvefgt 
[2012/05/18 03:56:00 | 000,000,448 | ---- | C] () -- C:\ProgramData\qxfnpaergmymjtd 
[2011/05/17 09:58:24 | 000,000,208 | ---- | C] () -- C:\ProgramData\f5560IoIdMdD1814
 
 
* redemarre le pc sous windows et poste le rapport ici 


~~

Passe un coup de TDSSKiller : https://forum.malekal.com/viewtopic.php?t=28637&start= 
Fais skip sur les détections.
Envoie le rapport sur http://pjjoint.malekal.com
Donne le lien du rapport pjjoint ici dans un nouveau message.

nemausus30 · Answer

je poste le nouveau rapport ou j'ai pas bien compris

nemausus30 · Answer

je veux bien mais je fais comment si je ne peux pas copier coller?
ça coincide avec l'alerte d'avast de cette nuit.merci d'avoir repondu.

Malekal_morte- · Answer

plus de pubs?

nemausus30 · Answer

pour le moment plus de pub y a t'il autre chose à faire?en tout cas merci de ta patience .

Malekal_morte- · Answer

c'est bon :)



Pour ne plus te faire avoir.
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/

nemausus30 · Answer

Encore un grand merci pour tout.

Malekal_morte- · Answer

pas de prb :)

Pubs et virus : grand nettoyage

18 réponses

Discussions similaires