Trojan horse Solved

Question

Hello, I currently have a Trojan horse on my computer; for the moment it's in quarantine, but my PC is running very poorly. Can you tell me how to get rid of this nasty thing? Thank you in advance.

Configuration: Windows Vista / Internet Explorer 8.0

--
jacques

lilidurhone · Answer

Hello

* Download ZHPDiag (by Nicolas Coolman)
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html or https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

* In case the first link doesn't work, click on the one below
ftp://zebulon.fr/ZHPDiag2.exe

* Follow the on-screen instructions during installation, it will launch automatically at the end.

* Don't forget to install its icon on the desktop; the icon looks like a parchment
https://www.cjoint.com/13sp/CIvuQfap3YY_zhpdiag.png

* When you open the software, you will be presented with two options: "search" and "configure"

* Click on configure

* Screwdriver then all

* Click on the icon representing a magnifying glass + ("Start the diagnosis")

* Save the report on your Desktop using the icon that looks like a floppy disk

* To host the report, go to cjoint.com
* Click on choose a file and find the report on your PC.

* The report is hosted:
- For XP: C:\Documents and Settings\username\Local Settings\Application Data\ZHP
- Since Vista: C:\Users\username\AppData\Roaming\ZHP

* Once the report is found, select it, and click Open

* Choose the type of sharing (I recommend private for 4 days, it will be deleted)

* Then click on create the cjoint link

* Once you have obtained the link, copy and paste it into your next reply

* For help https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers

--
If there is a problem, there is always a solution
~~~~~~ Cs ~~~~~~

idnoder · Answer

Thank you for your reply, I will do this on Sunday and Monday I will give all the results, thank you, have a nice day, Jacques  -- Jacques

idnoder · Answer

https://www.cjoint.com/?3CjlvLUU3lg

--hello, in computer science there are people who navigate but I swim, swim, swim please be lenient, thank you. here is the report, I hope it will be enough
jacques

lilidurhone · Answer

We will use this easy-to-use tool

* Download this easy-to-use tool http://general-changelog-team.fr/fr/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner (by Xplode) to your desktop.

* Run it (For Vista/Seven/8 right-click on it and select Run as administrator) if you are on XP double-click it

* Then click on Clean.

* Save all ongoing work and then accept the closure of running programs.

* Wait while the cleaning is in progress.

* Once the scan is finished, you will be prompted to restart.

* Upon restarting the PC, a report will open.
* Post its contents in your next reply.

Note: The report is also saved under C:\AdwCleaner[S1].txt

--
If there is a problem, there is always a solution
~~~~~~ Cs ~~~~~~

idnoder · Answer

# AdwCleaner v3.020 - Report created on 09/03/2014 at 18:04:21
# Updated on 27/02/2014 by Xplode
# Operating system: Windows Vista (TM) Home Premium Service Pack 2 (32-bit)
# Username: Jacques - PC-DE-JACQUES
# Executed from: C:\Users\Jacques\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PIF467A3\2-adwcleaner[1].exe
# Option: Clean

***** [ Services ] *****

Service Removed: Allin1Convert_8hService

***** [ Files / Folders ] *****

Folder Removed: C:\ProgramData\Babylon
Folder Removed: C:\ProgramData\BoxUpdChk
Folder Removed: C:\ProgramData\Conduit
Folder Removed: C:\ProgramData\DealPlyLive
Folder Removed: C:\ProgramData\Systweak
Folder Removed: C:\ProgramData\Tarma Installer
Folder Removed: C:\Program Files\Allin1Convert_8h
Folder Removed: C:\Program Files\AskTBar
Folder Removed: C:\Program Files\Conduit
Folder Removed: C:\Program Files\Duuqu
Folder Removed: C:\Program Files\HomeTab
Folder Removed: C:\Program Files\PriceGong
Folder Removed: C:\Program Files\SweetIM
Folder Removed: C:\Windows\system32\AI_RecycleBin
[#] Folder Removed: C:\Users\Jacques\AppData\Local\Allin1Convert_8h
Folder Removed: C:\Users\Jacques\AppData\Local\Conduit
Folder Removed: C:\Users\Jacques\AppData\Local\ConduitEngine
Folder Removed: C:\Users\Jacques\AppData\Local\DealPlyLive
Folder Removed: C:\Users\Jacques\AppData\Local\Duuqu
Folder Removed: C:\Users\Jacques\AppData\Local\EoRezo
Folder Removed: C:\Users\Jacques\AppData\Local\lollipop
Folder Removed: C:\Users\Jacques\AppData\Local\PackageAware
Folder Removed: C:\Users\Jacques\AppData\Local\tuto4pc_fr_60
Folder Removed: C:\Users\Jacques\AppData\LocalLow\Allin1Convert_8h
Folder Removed: C:\Users\Jacques\AppData\LocalLow\Conduit
Folder Removed: C:\Users\Jacques\AppData\LocalLow\dalesearch
Folder Removed: C:\Users\Jacques\AppData\LocalLow\Delta
Folder Removed: C:\Users\Jacques\AppData\LocalLow\HomeTab
Folder Removed: C:\Users\Jacques\AppData\LocalLow\iac
Folder Removed: C:\Users\Jacques\AppData\LocalLow\PriceGong
Folder Removed: C:\Users\Jacques\AppData\LocalLow\SimplyTech
Folder Removed: C:\Users\Jacques\AppData\LocalLow\SweetIM
Folder Removed: C:\Users\Jacques\AppData\Roaming\BabSolution
Folder Removed: C:\Users\Jacques\AppData\Roaming\Babylon
Folder Removed: C:\Users\Jacques\AppData\Roaming\DealPly
Folder Removed: C:\Users\Jacques\AppData\Roaming\Delta
Folder Removed: C:\Users\Jacques\AppData\Roaming\file scout
Folder Removed: C:\Users\Jacques\AppData\Roaming\HomeTab
Folder Removed: C:\Users\Jacques\AppData\Roaming\Mysearchdial
Folder Removed: C:\Users\Jacques\AppData\Roaming\SearchProtect
Folder Removed: C:\Users\Jacques\AppData\Roaming\SimplyTech
Folder Removed: C:\Users\Jacques\AppData\Roaming\SpecialSavings
Folder Removed: C:\Users\Jacques\AppData\Roaming\Systweak
Folder Removed: C:\Users\Jacques\AppData\Roaming\thinstall
Folder Removed: C:\Users\Jacques\AppData\Roaming\Tlapia
Folder Removed: C:\Program Files\Software
Folder Removed: C:\Users\Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfcpnihmbfoaeoakalclfalkdepgiaje
Folder Removed: C:\Users\Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Folder Removed: C:\Users\Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdkednngfjmpnljkolbapdednncafhen
Folder Removed: C:\Users\Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff
[!] Folder Removed: C:\Users\Jacques\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdkednngfjmpnljkolbapdednncafhen
File Removed: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\lollipop.lnk
File Removed: C:\Windows\system32\conduitEngine.tmp
File Removed: C:\Windows\system32\roboot.exe
File Removed: C:\Users\Jacques\AppData\Local\mysearchdial_speedial_v9.0.2.crx
File Removed: C:\Users\Jacques\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage
File Removed: C:\Windows\System32\Tasks\BoxSoftwareUpdate
File Removed: C:\Windows\System32\Tasks\Browser Updater
File Removed: C:\Windows\Tasks\Dealply.job
File Removed: C:\Windows\System32\Tasks\Dealply
File Removed: C:\Windows\System32\Tasks\EPUpdater
File Removed: C:\Windows\System32\Tasks\ProtectedSearch

***** [ Shortcuts ] *****

***** [ Registry ] *****

Value Removed: HKCU\Software\Mozilla\Firefox\Extensions [{8A9386B4-E958-4C4C-ADF4-8F26DB3E4829}]
Value Removed: HKCU\Software\Mozilla\Firefox\Extensions [SpecialSavings@SpecialSavings.com]
Value Removed: HKLM\SOFTWARE\Mozilla\Firefox\Extensions [SpecialSavings@SpecialSavings.com]
Key Removed: HKLM\SOFTWARE\Google\Chrome\Extensions\bfcpnihmbfoaeoakalclfalkdepgiaje
Key Removed: HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Key Removed: HKCU\Software\Google\Chrome\Extensions\fdkednngfjmpnljkolbapdednncafhen
Key Removed: HKLM\SOFTWARE\Google\Chrome\Extensions\fdkednngfjmpnljkolbapdednncafhen
Key Removed: HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Key Removed: HKCU\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Key Removed: HKLM\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
[#] Key Removed: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{83E0D75C-E6A6-422B-8AE6-DF8A613773FF}
[#] Key Removed: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{83E0D75C-E6A6-422B-8AE6-DF8A613773FF}
[#] Key Removed: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DBC37A64-3697-4336-85A5-93B2AC830EEC}
[#] Key Removed: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8CBEB5D9-4735-4802-8FF7-6993C50B1A38}
[#] Key Removed: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8CBEB5D9-4735-4802-8FF7-6993C50B1A38}
[#] Key Removed: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{14C894C4-2247-4B90-B5ED-EF56DF7AB3EE}
[#] Key Removed: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{14C894C4-2247-4B90-B5ED-EF56DF7AB3EE}
[#] Key Removed: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7A359782-F348-4A02-923C-BE40B97F75BC}
Key Removed: HKCU\Software\Classes\Applications\lollipop.exe
Key Removed: HKCU\Software\Microsoft\Internet Explorer\MenuExt\Search the Web
Key Removed: HKCU\Toolbar
Key Removed: HKLM\SOFTWARE\Classes\*\shell\filescout
Key Removed: HKLM\SOFTWARE\Classes\allin1convert_8h.feedmanager
Key Removed: HKLM\SOFTWARE\Classes\allin1convert_8h.feedmanager.1
Key Removed: HKLM\SOFTWARE\Classes\allin1convert_8h.htmlmenu
Key Removed: HKLM\SOFTWARE\Classes\allin1convert_8h.htmlmenu.1
Key Removed: HKLM\SOFTWARE\Classes\allin1convert_8h.htmlpanel
Key Removed: HKLM\SOFTWARE\Classes\allin1convert_8h.htmlpanel.1
Key Removed: HKLM\SOFTWARE\Classes\allin1convert_8h.multiplebutton
Key Removed: HKLM\SOFTWARE\Classes\allin1convert_8h.multiplebutton.1
Key Removed: HKLM\SOFTWARE\Classes\allin1convert_8h.pseudotransparentplugin
Key Removed: HKLM\SOFTWARE\Classes\allin1convert_8h.pseudotransparentplugin.1
Key Removed: HKLM\SOFTWARE\Classes\allin1convert_8h.radio
Key Removed: HKLM\SOFTWARE\Classes\allin1convert_8h.radio.1
Key Removed: HKLM\SOFTWARE\Classes\allin1convert_8h.radiosettings
Key Removed: HKLM\SOFTWARE\Classes\allin1convert_8h.radiosettings.1
Key Removed: HKLM\SOFTWARE\Classes\allin1convert_8h.scriptbutton
Key Removed: HKLM\SOFTWARE\Classes\allin1convert_8h.scriptbutton.1
Key Removed: HKLM\SOFTWARE\Classes\allin1convert_8h.settingsplugin
Key Removed: HKLM\SOFTWARE\Classes\allin1convert_8h.settingsplugin.1
Key Removed: HKLM\SOFTWARE\Classes\allin1convert_8h.thirdpartyinstaller
Key Removed: HKLM\SOFTWARE\Classes\allin1convert_8h.thirdpartyinstaller.1
Key Removed: HKLM\SOFTWARE\Classes\Allin1Convert_8h.ToolbarProtector
Key Removed: HKLM\SOFTWARE\Classes\Allin1Convert_8h.ToolbarProtector.1
Key Removed: HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Removed: HKLM\SOFTWARE\Classes\AppID\HomeTab.DLL
Key Removed: HKLM\SOFTWARE\Classes\AppID\PriceGongIE.DLL
Key Removed: HKLM\SOFTWARE\Classes\AppID\PropertySync.EXE
Key Removed: HKLM\SOFTWARE\Classes\Conduit.Engine
Key Removed: HKLM\SOFTWARE\Classes\delta.deltaappCore
Key Removed: HKLM\SOFTWARE\Classes\delta.deltaappCore.1
Key Removed: HKLM\SOFTWARE\Classes\delta.deltadskBnd
Key Removed: HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
Key Removed: HKLM\SOFTWARE\Classes\delta.deltaHlpr
Key Removed: HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
Key Removed: HKLM\SOFTWARE\Classes\esrv.deltaESrvc
Key Removed: HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
Key Removed: HKLM\SOFTWARE\Classes\esrv.mysearchdialesrvc
Key Removed: HKLM\SOFTWARE\Classes\esrv.mysearchdialesrvc.1
Key Removed: HKLM\SOFTWARE\Classes\IMsiDe1egate.Application.1
Key Removed: HKLM\SOFTWARE\Classes\Prod.cap
Key Removed: HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Removed: HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Removed: HKLM\SOFTWARE\Classes\SearchBar.Client
Key Removed: HKLM\SOFTWARE\Classes\speedupmypc
Key Removed: HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
Key Removed: HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
Key Removed: HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
Key Removed: HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
Key Removed: HKLM\SOFTWARE\Classes\toolband.eb_explorerbar
Key Removed: HKLM\SOFTWARE\Classes\toolband.eb_explorerbar.1
Key Removed: HKLM\SOFTWARE\Classes\toolband.fh_hookeventsink
Key Removed: HKLM\SOFTWARE\Classes\toolband.fh_hookeventsink.1
Key Removed: HKLM\SOFTWARE\Classes\toolband.ipm_printlistitem
Key Removed: HKLM\SOFTWARE\Classes\toolband.ipm_printlistitem.1
Key Removed: HKLM\SOFTWARE\Classes\toolband.pm_dialogeventshandler
Key Removed: HKLM\SOFTWARE\Classes\toolband.pm_dialogeventshandler.1
Key Removed: HKLM\SOFTWARE\Classes\toolband.pm_launcher
Key Removed: HKLM\SOFTWARE\Classes\toolband.pm_launcher.1
Key Removed: HKLM\SOFTWARE\Classes\toolband.pm_printmanager
Key Removed: HKLM\SOFTWARE\Classes\toolband.pm_printmanager.1
Key Removed: HKLM\SOFTWARE\Classes\toolband.pr_bindstatuscallback
Key Removed: HKLM\SOFTWARE\Classes\toolband.pr_bindstatuscallback.1
Key Removed: HKLM\SOFTWARE\Classes\toolband.pr_cancelbuttoneventhandler
Key Removed: HKLM\SOFTWARE\Classes\toolband.pr_cancelbuttoneventhandler.1
Key Removed: HKLM\SOFTWARE\Classes\toolband.pr_printdialogcallback
Key Removed: HKLM\SOFTWARE\Classes\toolband.pr_printdialogcallback.1
Key Removed: HKLM\SOFTWARE\Classes\toolband.tbtoolband
Key Removed: HKLM\SOFTWARE\Classes\toolband.tbtoolband.1
Key Removed: HKLM\SOFTWARE\Classes\toolband.useroptions
Key Removed: HKLM\SOFTWARE\Classes\toolband.useroptions.1
Key Removed: HKLM\SOFTWARE\Classes\Toolbar3.sweetie
Key Removed: HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
Key Removed: HKLM\SOFTWARE\Classes\wtb.Band
Key Removed: HKLM\SOFTWARE\Classes\wtb.Band.1
Key Removed: HKLM\SOFTWARE\Classes\wtb.NotificationSource
Key Removed: HKLM\SOFTWARE\Classes\wtb.NotificationSource.1
Key Removed: HKLM\SOFTWARE\Classes\wtb.SourceSinkImpl
Key Removed: HKLM\SOFTWARE\Classes\wtb.SourceSinkImpl.1
Key Removed: HKLM\SOFTWARE\Classes\wtb.ToolbarInfo
Key Removed: HKLM\SOFTWARE\Classes\wtb.ToolbarInfo.1
Value Removed: HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs [bProtectTabs]
Key Removed: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dealplylive.exe
Value Removed: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
Value Removed: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]
Key Removed: HKLM\SOFTWARE\MozillaPlugins\@Allin1Convert_8h.com/Plugin
Value Removed: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [tuto4pc_fr_60]
Key Removed: HKCU\Software\52558ddab43ced43
Key Removed: HKLM\SOFTWARE\52558ddab43ced43
Key Removed: HKLM\SOFTWARE\Classes\Toolbar.CT2724386
Key Removed: HKLM\SOFTWARE\Classes\Toolbar.CT2878731
Key Removed: HKLM\SOFTWARE\Classes\Toolbar.CT3298566
Value Removed: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Allin1Convert Search Scope Monitor]
Value Removed: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Allin1Convert_8h Browser Plugin Loader]
Key Removed: HKLM\SOFTWARE\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}
Key Removed: HKLM\SOFTWARE\Classes\AppID\{33CB14BC-58BB-4B3A-9877-7946A3F41BAE}
Key Removed: HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Key Removed: HKLM\SOFTWARE\Classes\AppID\{3FC27B34-0C19-49DA-875E-1875DDD4A6B2}
Key Removed: HKLM\SOFTWARE\Classes\AppID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}
Key Removed: HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Key Removed: HKLM\SOFTWARE\Classes\AppID\{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}
Key Removed: HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{1D970ED5-3EDA-438D-BFFD-715931E2775B}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{248B3E95-17A4-482D-A8A8-6B3DF4D05C35}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{27F49273-DE3A-4111-90F9-6C474C37AEFB}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{327C2873-E90D-4C37-AA9D-10AC9BABA46C}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{39D4F1A1-A94D-4B7D-BF1D-7446308800ED}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{443321F7-E46C-42F8-812B-F35E98CBB44F}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{5CDE4714-32DC-473C-8194-0645E62C2E96}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{7CAEFAFC-9A1E-4BCC-94DD-BC7D8D52717A}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{7EB7381C-FB01-47FC-9C42-ED64122C1B92}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{889F49D2-6CEA-40BE-BE5F-7217485F9745}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{8F83D657-5993-4FFA-9AEE-DA0B20D828A7}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{A928E66C-F501-4E66-9953-855C712F93B2}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{C8EF8F70-3807-424A-83F7-DA06FD4DACF9}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{C9A6357B-25CC-4BCF-96C1-78736985D412}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{CD1A63BA-A08C-431B-9A34-F240AADC728D}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{DE0F6787-9D1C-42B7-A0B9-EAC630F87902}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{E4EF697F-434B-4DC7-A464-4412462206DB}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{EF3F28C8-0330-4D18-B901-D24CB83E5AA1}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{EF5DB804-585B-472E-B415-BC63F8F01BF6}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{F2C368C5-9F44-4D43-89F3-A1CC87F1DA96}
Key Removed: HKLM\SOFTWARE\Classes\CLSID\{F99DDD9A-07D0-47AB-86F1-193533DD2C60}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Key Removed: HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Key Removed: HKLM\SOFTWARE\Classes\TypeLib\{16976E15-10EA-44FD-804A-6ECBC9EBBFC7}
Key Removed: HKLM\SOFTWARE\Classes\TypeLib\{2561FD25-FE31-4E56-A120-AF7FEAAE3124}
Key Removed: HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Key Removed: HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
Key Removed: HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
Key Removed: HKLM\SOFTWARE\Classes\TypeLib\{4BD0FCFF-AD64-4315-9F2C-960EF3C21623}
Key Removed: HKLM\SOFTWARE\Classes\TypeLib\{507C73BB-FC69-425E-8A49-9204F886B328}
Key Removed: HKLM\SOFTWARE\Classes\TypeLib\{6EC57031-1740-4151-93C5-C465D6063DD2}
Key Removed: HKLM\SOFTWARE\Classes\TypeLib\{76FC1003-0825-48BD-B59B-3B7A5754972C}
Key Removed: HKLM\SOFTWARE\Classes\TypeLib\{9D217B94-6FC9-44FE-94B1-30C711871266}
Key Removed: HKLM\SOFTWARE\Classes\TypeLib\{B48AC2CD-9662-47E0-A3C0-3B01BB3F463E}
Key Removed: HKLM\SOFTWARE\Classes\TypeLib\{BE698E51-830B-447A-954D-901D6E05DDE2}
Key Removed: HKLM\SOFTWARE\Classes\TypeLib\{BFCF748F-A56E-451F-AA45-0D7EB699E416}
Key Removed: HKLM\SOFTWARE\Classes\TypeLib\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Key Removed: HKLM\SOFTWARE\Classes\TypeLib\{D617CF84-B0BC-441F-9984-B676AFBA1E8D}
Key Removed: HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Key Removed: HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
Key Removed: HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
Key Removed: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1D970ED5-3EDA-438D-BFFD-715931E2775B}
Key Removed: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Removed: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D970ED5-3EDA-438D-BFFD-715931E2775B}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{327C2873-E90D-4C37-AA9D-10AC9BABA46C}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7CAEFAFC-9A1E-4BCC-94DD-BC7D8D52717A}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{81F88FCF-3CB0-4D17-84E1-9A6CEDEE192A}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8F814E51-9FB6-4A8A-B137-D4485C8D6DDA}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B9507101-E464-4B3B-A4CB-291AAEDD94F2}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C9A6357B-25CC-4BCF-96C1-78736985D412}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CD1A63BA-A08C-431B-9A34-F240AADC728D}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1D970ED5-3EDA-438D-BFFD-715931E2775B}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{327C2873-E90D-4C37-AA9D-10AC9BABA46C}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3EA8D036-C9E7-4721-BCDF-C13D00C4CC39}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{81F88FCF-3CB0-4D17-84E1-9A6CEDEE192A}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8F814E51-9FB6-4A8A-B137-D4485C8D6DDA}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{938958E8-355C-49FF-92B0-53C1B87ACEA9}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9CB65201-89C4-402C-BA80-02D8C59F9B1D}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B9507101-E464-4B3B-A4CB-291AAEDD94F2}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C9A6357B-25CC-4BCF-96C1-78736985D412}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CD1A63BA-A08C-431B-9A34-F240AADC728D}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Removed: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}

lilidurhone · Answer

Refais un zhpdiag  -- If there is a problem, there is always a solution ~~~~~~ Cs ~~~~~~

idnoder · Answer

~ ZHPDiag report v2014.3.2.6 - Nicolas Coolman (03/03/2014) ~ Launched by Jacques (10/03/2014 07:55:10) ~ Website address https://nicolascoolman.webs.com/ ~ Free forums for disinfection assistance: https://nicolascoolman.webs.com/ ~ Translated by Nicolas Coolman ~ Version status: ~ Whitelist: Enabled by the program ~ Privilege Escalation: OK ~ User Account Control (UAC): Deactivate by program   ---\ Internet Browsers MSIE: Internet Explorer v8.0.6001.19499 (Default)  ---\ Windows Product Information ~ Language: French Windows Vista (TM) Home Premium, 32-bit Service Pack 2 (Build 6002) Windows Server License Manager Script: OK ~ Vista, OEM_COA_NSLP channel Windows ID Activation: OK ~ Windows Partial Key: QCP8P Windows License: OK Windows Automatic Updates: OK  ---\ System Protection Software Microsoft Security Client v4.4.0304.0  ---\ System Optimization Software CCleaner v4.01 =>Piriform Ltd  ---\ PeerToPeer Sharing Software  ---\ Software Monitoring Adobe Flash Player 12 Plugin  ---\ System Information ~ Processor: x86 Family 15 Model 79 Stepping 2, AuthenticAMD ~ Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 958 MB (14% free) System Restore: Enabled (Enable) System drive C: has 92 GB (59%) free of 153 GB  ---\ System Connection Mode ~ Computer Name: PC-DE-JACQUES ~ User Name: Jacques ~ All Users Names: Jacques, Administrateur, ~ Unselected Option: None Logged in as Administrator  ---\ Environment Variables ~ System Unit: C:\ ~ %AppZHP%: C:\Users\Jacques\AppData\Roaming\ZHP\ ~ %AppData%: C:\Users\Jacques\AppData\Roaming\ ~ %Desktop%: C:\Users\Jacques\Desktop\ ~ %Favorites%: C:\Users\Jacques\Favorites\ ~ %LocalAppData%: C:\Users\Jacques\AppData\Local\ ~ %StartMenu%: C:\Users\Jacques\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir%: C:\Windows\ ~ %System%: C:\Windows\System32\  ---\ Disk Drives Enumeration A: Floppy drive, Flash card reader, USB Key (Not Inserted) C: Hard drive, Flash drive, Thumb drive (Free 92 Go of 153 Go) D: CD-ROM drive (Not Inserted)    ---\ Windows Security Center Status ~ Security Center: 42 Legitimates Filtered in 00mn 00s    ---\ Specific Search for Generic Files [MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Windows Explorer.) (.11/04/2009 - 07:27:36.) -- C:\Windows\Explorer.exe [2926592] [MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Windows Startup Application.) (.19/01/2008 - 08:33:37.) -- C:\Windows\System32\Wininit.exe [96768] [MD5.5CE024AD2C4AA64F1589AC39109F07F8] - (.Microsoft Corporation - Internet Extensions for Win32.) (.02/02/2014 - 21:10:57.) -- C:\Windows\System32\wininet.dll [916992] [MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Windows Logon Application.) (.11/04/2009 - 07:28:13.) -- C:\Windows\System32\Winlogon.exe [314368] [MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.21/04/2011 - 14:58:27.) -- C:\Windows\system32\Drivers\AFD.sys [273408] [MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.11/04/2009 - 07:32:26.) -- C:\Windows\system32\Drivers\atapi.sys [19944] [MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.19/01/2008 - 06:28:02.) -- C:\Windows\system32\Drivers\Cdfs.sys [70144] [MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.11/04/2009 - 05:39:17.) -- C:\Windows\system32\Drivers\Cdrom.sys [67072] [MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.14/04/2011 - 15:59:03.) -- C:\Windows\system32\Drivers\DfsC.sys [75264] [MD5.5FD053F305B77EBE97F284B20D89DC1C] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.02/11/2006 - 08:36:49.) -- C:\Windows\system32\Drivers\HDAudBus.sys [53248] [MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - i8042 Port Driver.) (.19/01/2008 - 06:49:18.) -- C:\Windows\system32\Drivers\i8042prt.sys [54784] [MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.19/01/2008 - 06:56:28.) -- C:\Windows\system32\Drivers\IpNat.sys [100864] [MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.29/04/2011 - 14:24:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [106496] [MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.11/04/2009 - 05:45:37.) -- C:\Windows\system32\Drivers
etBT.sys [185856] [MD5.2C1121F2B87E9A6B12485DF53CD848C7] - (.Microsoft Corporation - NT File System Driver.) (.03/03/2013 - 20:07:52.) -- C:\Windows\system32\Drivers
tfs.sys [1082232] [MD5.8A79FDF04A73428597E2CAF9D0D67850] - (.Microsoft Corporation - Parallel Port Driver.) (.19/01/2008 - 06:49:33.) -- C:\Windows\system32\Drivers\Parport.sys [79360] [MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.19/01/2008 - 06:56:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [76288] [MD5.E8BD98D46F2ED77132BA927FCCB47D8B] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.02/11/2006 - 10:03:00.) -- C:\Windows\system32\Driversdpdr.sys [242688] [MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.11/04/2009 - 05:45:22.) -- C:\Windows\system32\Drivers\smb.sys [66560] [MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.11/04/2009 - 05:45:56.) -- C:\Windows\system32\Drivers	dx.sys [72192] [MD5.786DB5771F05EF300390399F626BF30A] - (.Microsoft Corporation - Volume Shadow Copy Driver.) (.21/08/2012 - 12:47:42.) -- C:\Windows\system32\Drivers\volsnap.sys [224640] ~ Generic Processes: Scanned in 00mn 17s    ---\ Status of Hidden Files (Hidden/Total) ~ My Pictures: 2/409 ~ My Musics: 1/2 ~ My Videos: 1/2 ~ My Favorites: 1/12 ~ My Documents: 1/16 ~ My Desktop: 1/256 ~ Start Menu: 1/27 ~ Hidden Files: Scanned in 00mn 18s    ---\ Running Processes [MD5.F5948132D8A0DFA7390F7B1E58BB6057] - (.Creative Technology Ltd. - Live! Cam Console Auto Launcher.) -- C:\Windows\V0420Mon.exe [32768] [PID.3424] [MD5.A41A73F3D1BE4350CBA9125247EFF330] - (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\Windows\SOUNDMAN.exe [598016] [PID.3448] [MD5.E8814D080E5689AE11144586150328C2] - (.C-Media Electronic Inc. (www.cmedia.com.tw) - Mixer.) -- C:\Windows\mixer.exe [1855488] [PID.3464] [MD5.BF08674925F151BD4537B89A493E3E0C] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125952] [PID.3484] [MD5.DFB13D3470844B6770FFB87DFC9FD340] - (.Orange - MailNotifier.) -- C:\Program Files\Orange\MailNotifier\MailNotifier.exe [884744] [PID.3696] [MD5.BC9C9BE7BB74D629362608ACE470E7DA] - (.Microsoft Corporation - MSN Gift Notification.) -- C:\Users\Jacques\AppData\Roaming\Microsoft\MSN Gift Notification\lsnfier.exe [135680] [PID.3772] [MD5.0F4195B9B348DE5CF9B822F81704B20E] - (.Microsoft Corporation - Media Center Media Status Aggregator Service.) -- C:\Windows\ehome\ehmsas.exe [37376] [PID.2304] [MD5.66EA3B698F9A7EA2DBF0E4B246B6C958] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8349696] [PID.2472] [MD5.B0F49DA36F30922F5DDC3B623B778FCE] - (.Microsoft Corporation - Antimalware Service Executable.) -- c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208] [PID.920] [MD5.862BB4CBC05D80C5B45BE430E5EF872F] - (.Microsoft Corporation - Microsoft License Management Service.) -- C:\Windows\system32\SLsvc.exe [3408896] [PID.1292] [MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.1468] [MD5.9D519AAA21E622DF7DF27041E0917499] - (.No Owner - DedicarzService.) -- C:\Program Files\Orange\Assistance Livebox\dedicarz\DedicarzService.exe [1966960] [PID.1216] [MD5.42D33042371BFB1A7D40834590CAFD30] - (.Microsoft Corporation - Microsoft Network Realtime Inspection Service.) -- c:\Program Files\Microsoft Security Client\NisSrv.exe [280288] [PID.2164] [MD5.97D9D6A04E3AD9B6C626B9931DB78DBA] - (.Microsoft Corporation - Windows Modules Installer.) -- C:\Windows\servicing\TrustedInstaller.exe [39424] [PID.3544] ~ Processes Running: Scanned in 00mn 32s    ---\ Google Chrome, Startup,Search,Extensions (G0,G1,G2) C:\Users\Jacques\AppData\Local\Google\Chrome\User Data\Default\Preferences G2 - GCE: Preference [User Data\Default] [bfcpnihmbfoaeoakalclfalkdepgiaje] SpecialSavings v.2.0.0.1 (Disabled) =>PUP.SpecialSavings G2 - GCE: Preference [User Data\Default] [eooncjejnppfjjklapaamhcdmjbilmde] Delta Toolbar v.1.4 (Disabled) =>Toolbar.DeltaSearch G2 - GCE: Preference [User Data\Default] [fdkednngfjmpnljkolbapdednncafhen] MixiDJ V30 v.10.20.1.8, (Disabled) =>Toolbar.MixiDJ G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Enabled) G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Enabled) G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Wallet v.0.0.6.1 (Enabled) G2 - GCE: Preference [User Data\Default] [oihiaojfckjaconbjjpanjechlighodn] HomeTab v.5.7, (Disabled) =>PUP.CertifiedToolbar G2 - GCE: Preference [User Data\Default] [pflphaooapbgpeakohlggbpidpppgdff] New Tab v.9.0.2, (Disabled) =>Adware.SearchYa ~ Google Browser: 14 Legitimates Filtered in 00mn 01s    ---\ Internet Explorer, Startup, Search, URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:newtab R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 1 ~ IE Browser: 19 Legitimates Filtered in 00mn 00s    ---\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local> R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 ~ Proxy management: Scanned in 00mn 00s    ---\ Analysis of lines F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ~ Keys: Scanned in 00mn 00s    ---\ Hosts file redirection (O1) ~ The hosts file is clean. ~ Hosts File: Scanned in 00mn 00s ~ Number of lines: 20    ---\ Browser Helper Objects (O2) O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} . (...No owner - Easy-WebPrint EWPBrowseLoader Module.) -- C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll ~ BHO: 18 Legitimates Filtered in 00mn 01s    ---\ Internet Explorer Toolbars (O3) O3 - Toolbar: HomeTab - [HKLM]{1c98a3ee-3194-4309-8715-ad4c57183160} . (...) -- C:\Program Files\HomeTab\IE\HomeTab.dll =>PUP.CertifiedToolbar O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google O3 - Toolbar\WebBrowser: (no name) - [HKCU]{D3028143-6145-4318-99D3-3EDCE54A95A9} Orphan key O3 - Toolbar\WebBrowser: (no name) - [HKCU]{21FA44EF-376D-4D53-9B0F-8A89D3229068} Orphan key O3 - Toolbar\WebBrowser: (no name) - [HKCU]{90EEE664-34B1-422A-A782-779AF65CDF6D} Orphan key O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11d4-9B18-009027A5CD4F} Orphan key O3 - Toolbar\WebBrowser: (no name) - [HKCU]{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} Orphan key ~ Toolbar: Scanned in 00mn 00s    ---\ Other User Links (O4) O4 - GS\Desktop [Public]: Orange Portail.lnk . (...) -- C:\Program Files\Orange\Orange Portail.exe O4 - GS\Program [Public]: Acrobat Reader 5.0.lnk . (.Adobe Systems Incorporated - Acrobat Reader 5.0.) -- C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe O4 - GS\Program [Public]: Listen to the radio.lnk . (.Microsoft Corporation - Windows Media Player.) -- C:\Program Files\Windows Media Player\wmplayer.exe =>.Microsoft Corporation O4 - GS\QuickLaunch [Jacques]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\QuickLaunch [Jacques]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\QuickLaunch [Jacques]: Weather in France.lnk - Orphan key O4 - GS\QuickLaunch [Jacques]: Orange Portail.lnk . (...) -- C:\Program Files\Orange\Orange Portail big.exe O4 - GS\Program [Jacques]: Internet Explorer (2).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\Program [Jacques]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\SystemTools [Jacques]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\Desktop [Jacques]: Assistance Livebox.lnk . (.Orange - Assistance Livebox.) -- C:\Program Files\Orange\Assistance Livebox\AssistanceLivebox.exe O4 - GS\Desktop [Jacques]: Audacity.lnk . (...) -- C:\Program Files\Audacity\audacity.exe O4 - GS\Desktop [Jacques]: Browser Choice (2).lnk . (.Microsoft Corporation - Browser Choice.) -- C:\Windows\System32\browserchoice.exe O4 - GS\Desktop [Jacques]: Recycle Bin - Shortcut.lnk - Orphan key O4 - GS\Desktop [Jacques]: Microsoft Works Task Launcher.lnk . (.Microsoft® Corporation - Microsoft Works Task Launcher.) -- C:\Program Files\Microsoft Works\msworks.exe O4 - GS\Desktop [Jacques]: Computer - Shortcut.lnk - Orphan key O4 - GS\Desktop [Jacques]: ZHPFix.lnk . (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files\ZHPDiag\ZHPFix\ZHPhep.exe =>.Nicolas Coolman ~ Global Startup: 73 Legitimates Filtered in 00mn 22s    ---\ Applications launched at system startup (O4) O4 - GS\Startup

idnoder · Answer

Hello, big thanks to lilidurhonemon, my computer is working well. I checked the antivirus history and there’s nothing in quarantine anymore, so the Trojan has disappeared. Thanks again.
I would like to apologize to Nabilou, with whom I was a bit harsh in my remarks; it seems that at 77 years old, one sometimes has funny reactions.
Thanks again for your help.

--
Jacques

lilidurhone · Answer

It's not resolved :/  -- If there is a problem, there is always a solution ~~~~~~ Cs ~~~~~~

idnoder · Answer

Hello, not resolved? Why???  -- Jacques

lilidurhone · Answer

Could you redo a zhpdiag by hosting it on cjoint  -- If there is a problem, there is always a solution ~~~~~~ Cs ~~~~~~

idnoder · Answer

Here is the result of the ZHPDiag. Thank you for responding.  -- jacques~ ZHPDiag Report v2014.3.2.6 - Nicolas Coolman (03/03/2014) ~ Launched by Jacques (19/03/2014 09:42:15) ~ Website Address https://nicolascoolman.webs.com/ ~ Free Disinfection Assistance Forums: https://nicolascoolman.webs.com/ ~ Translated by Nicolas Coolman ~ Version status: ~ Whitelist: Enabled by the program ~ Privilege Escalation: OK ~ User Account Control (UAC): Activated by user   ---\ Internet Browsers MSIE: Internet Explorer v8.0.6001.19507 (Default)  ---\ Windows Product Information ~ Language: French Windows Vista (TM) Home Premium, 32-bit Service Pack 2 (Build 6002) Windows Server License Manager Script: OK ~ Vista, OEM_COA_NSLP channel Windows ID Activation: OK ~ Windows Partial Key: QCP8P Windows License: OK Windows Automatic Updates: OK  ---\ System Protection Software Microsoft Security Client v4.4.0304.0  ---\ System Optimization Software CCleaner v4.01 =>Piriform Ltd  ---\ PeerToPeer Sharing Software  ---\ Software Monitoring Adobe Flash Player 12 Plugin  ---\ System Information ~ Processor: x86 Family 15 Model 79 Stepping 2, AuthenticAMD ~ Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 958 MB (23% free) System Restore: Enabled System drive C: has 91 GB (59%) free of 153 GB  ---\ System connection mode ~ Computer Name: PC-DE-JACQUES ~ User Name: Jacques ~ All Users Names: Jacques, Administrator, ~ Unselected Option: None Logged in as Administrator  ---\ Environment Variables ~ System Unit: C:\ ~ %AppZHP%: C:\Users\Jacques\AppData\Roaming\ZHP\ ~ %AppData%: C:\Users\Jacques\AppData\Roaming\ ~ %Desktop%: C:\Users\Jacques\Desktop\ ~ %Favorites%: C:\Users\Jacques\Favorites\ ~ %LocalAppData%: C:\Users\Jacques\AppData\Local\ ~ %StartMenu%: C:\Users\Jacques\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir%: C:\Windows\ ~ %System%: C:\Windows\System32\  ---\ Disk Drives Enumeration A: Floppy drive, Flash card reader, USB Key (Not Inserted) C: Hard drive, Flash drive, Thumb drive (Free 91 Go of 153 Go) D: CD-ROM drive (Not Inserted)    ---\ Windows Security Center State ~ Security Center: 42 Legitimates Filtered in 00mn 00s    ---\ Special Search for Generic Files [MD5.D07D4C3038F3578FFCE1C0237F2A1253] - (.Microsoft Corporation - Windows Explorer.) (.11/04/2009 - 07:27:36.) -- C:\Windows\Explorer.exe [2926592] [MD5.101BA3EA053480BB5D957EF37C06B5ED] - (.Microsoft Corporation - Windows Startup Application.) (.19/01/2008 - 08:33:37.) -- C:\Windows\System32\Wininit.exe [96768] [MD5.7EA68697ABA21A39DA09BDDB832F8040] - (.Microsoft Corporation - Internet Extensions for Win32.) (.23/02/2014 - 18:44:43.) -- C:\Windows\System32\wininet.dll [916992] [MD5.898E7C06A350D4A1A64A9EA264D55452] - (.Microsoft Corporation - Windows Logon Application.) (.11/04/2009 - 07:28:13.) -- C:\Windows\System32\Winlogon.exe [314368] [MD5.3911B972B55FEA0478476B2E777B29FA] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.21/04/2011 - 14:58:27.) -- C:\Windows\system32\Drivers\AFD.sys [273408] [MD5.1F05B78AB91C9075565A9D8A4B880BC4] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.11/04/2009 - 07:32:26.) -- C:\Windows\system32\Drivers\atapi.sys [19944] [MD5.7ADD03E75BEB9E6DD102C3081D29840A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.19/01/2008 - 06:28:02.) -- C:\Windows\system32\Drivers\Cdfs.sys [70144] [MD5.6B4BFFB9BECD728097024276430DB314] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.11/04/2009 - 05:39:17.) -- C:\Windows\system32\Drivers\Cdrom.sys [67072] [MD5.622C41A07CA7E6DD91770F50D532CB6C] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.14/04/2011 - 15:59:03.) -- C:\Windows\system32\Drivers\DfsC.sys [75264] [MD5.5FD053F305B77EBE97F284B20D89DC1C] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.02/11/2006 - 08:36:49.) -- C:\Windows\system32\Drivers\HDAudBus.sys [53248] [MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - (.Microsoft Corporation - i8042 Port Driver.) (.19/01/2008 - 06:49:18.) -- C:\Windows\system32\Drivers\i8042prt.sys [54784] [MD5.8793643A67B42CEC66490B2A0CF92D68] - (.Microsoft Corporation - IP Network Address Translator.) (.19/01/2008 - 06:56:28.) -- C:\Windows\system32\Drivers\IpNat.sys [100864] [MD5.1E94971C4B446AB2290DEB71D01CF0C2] - (.Microsoft Corporation - Windows NT SMB Minidriver.) (.29/04/2011 - 14:24:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [106496] [MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - (.Microsoft Corporation - MBT Transport driver.) (.11/04/2009 - 05:45:37.) -- C:\Windows\system32\Drivers
etBT.sys [185856] [MD5.2C1121F2B87E9A6B12485DF53CD848C7] - (.Microsoft Corporation - NT File System Driver.) (.03/03/2013 - 20:07:52.) -- C:\Windows\system32\Drivers
tfs.sys [1082232] [MD5.8A79FDF04A73428597E2CAF9D0D67850] - (.Microsoft Corporation - Parallel Port Driver.) (.19/01/2008 - 06:49:33.) -- C:\Windows\system32\Drivers\Parport.sys [79360] [MD5.A214ADBAF4CB47DD2728859EF31F26B0] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.19/01/2008 - 06:56:34.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [76288] [MD5.E8BD98D46F2ED77132BA927FCCB47D8B] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.02/11/2006 - 10:03:00.) -- C:\Windows\system32\Driversdpdr.sys [242688] [MD5.7B75299A4D201D6A6533603D6914AB04] - (.Microsoft Corporation - SMB Transport driver.) (.11/04/2009 - 05:45:22.) -- C:\Windows\system32\Drivers\smb.sys [66560] [MD5.76B06EB8A01FC8624D699E7045303E54] - (.Microsoft Corporation - TDI Translation Driver.) (.11/04/2009 - 05:45:56.) -- C:\Windows\system32\Drivers	dx.sys [72192] [MD5.786DB5771F05EF300390399F626BF30A] - (.Microsoft Corporation - Volume Shadow Copy Driver.) (.21/08/2012 - 12:47:42.) -- C:\Windows\system32\Drivers\volsnap.sys [224640] ~ Generic Processes: Scanned in 00mn 08s    ---\ State of Hidden Files (Hidden/Total) ~ My Pictures: 2/419 ~ My Musics: 1/2 ~ My Videos: 1/2 ~ My Favorites: 1/12 ~ My Documents: 1/16 ~ My Desktop: 1/260 ~ Start Menu: 1/27 ~ Hidden Files: Scanned in 00mn 15s    ---\ Running Processes [MD5.F5948132D8A0DFA7390F7B1E58BB6057] - (.Creative Technology Ltd. - Live! Cam Console Auto Launcher.) -- C:\Windows\V0420Mon.exe [32768] [PID.1988] [MD5.A41A73F3D1BE4350CBA9125247EFF330] - (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\Windows\SOUNDMAN.exe [598016] [PID.2004] [MD5.E8814D080E5689AE11144586150328C2] - (.C-Media Electronic Inc. (www.cmedia.com.tw) - Mixer.) -- C:\Windows\mixer.exe [1855488] [PID.2012] [MD5.BF08674925F151BD4537B89A493E3E0C] - (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe [125952] [PID.2028] [MD5.DFB13D3470844B6770FFB87DFC9FD340] - (.Orange - MailNotifier.) -- C:\Program Files\Orange\MailNotifier\MailNotifier.exe [884744] [PID.1140] [MD5.BC9C9BE7BB74D629362608ACE470E7DA] - (.Microsoft Corporation - MSN Gift Notification.) -- C:\Users\Jacques\AppData\Roaming\Microsoft\MSN Gift Notification\lsnfier.exe [135680] [PID.764] [MD5.0F4195B9B348DE5CF9B822F81704B20E] - (.Microsoft Corporation - Media Center Media Status Aggregator Service.) -- C:\Windows\ehome\ehmsas.exe [37376] [PID.2912] [MD5.66EA3B698F9A7EA2DBF0E4B246B6C958] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [8349696] [PID.1324] [MD5.B0F49DA36F30922F5DDC3B623B778FCE] - (.Microsoft Corporation - Antimalware Service Executable.) -- c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208] [PID.864] [MD5.862BB4CBC05D80C5B45BE430E5EF872F] - (.Microsoft Corporation - Microsoft License Management Service.) -- C:\Windows\system32\SLsvc.exe [3408896] [PID.1228] [MD5.DB5BEA73EDAF19AC68B2C0FAD0F92B1A] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [390504] [PID.952] [MD5.9D519AAA21E622DF7DF27041E0917499] - (.No Owner - DedicarzService.) -- C:\Program Files\Orange\Assistance Livebox\dedicarz\DedicarzService.exe [1966960] [PID.1780] [MD5.97D9D6A04E3AD9B6C626B9931DB78DBA] - (.Microsoft Corporation - Windows Module Installer.) -- C:\Windows\servicing\TrustedInstaller.exe [39424] [PID.1036] [MD5.42D33042371BFB1A7D40834590CAFD30] - (.Microsoft Corporation - Microsoft Network Realtime Inspection Service.) -- c:\Program Files\Microsoft Security Client\NisSrv.exe [280288] [PID.3424] ~ Processes Running: Scanned in 00mn 34s    ---\ Google Chrome, Startup, Search, Extensions (G0, G1, G2) C:\Users\Jacques\AppData\Local\Google\Chrome\User Data\Default\Preferences G2 - GCE: Preference [User Data\Default] [bfcpnihmbfoaeoakalclfalkdepgiaje] SpecialSavings v.2.0.0.1 (Disabled) =>PUP.SpecialSavings G2 - GCE: Preference [User Data\Default] [eooncjejnppfjjklapaamhcdmjbilmde] Delta Toolbar v.1.4 (Disabled) =>Toolbar.DeltaSearch G2 - GCE: Preference [User Data\Default] [fdkednngfjmpnljkolbapdednncafhen] MixiDJ V30 v.10.20.1.8, (Disabled) =>Toolbar.MixiDJ G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Enabled) G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Hangout Services v.1.0 (Enabled) G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] GoogleÂ Wallet v.0.0.6.1 (Enabled) G2 - GCE: Preference [User Data\Default] [oihiaojfckjaconbjjpanjechlighodn] HomeTab v.5.7, (Disabled) =>PUP.CertifiedToolbar G2 - GCE: Preference [User Data\Default] [pflphaooapbgpeakohlggbpidpppgdff] New Tab v.9.0.2, (Disabled) =>Adware.SearchYa ~ Google Browser: 14 Legitimates Filtered in 00mn 01s    ---\ Internet Explorer, Startup, Search, URLSearchHook, Phishing (R0, R1, R3, R4) R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:newtab R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 1 ~ IE Browser: 19 Legitimates Filtered in 00mn 00s    ---\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local> R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 ~ Proxy management: Scanned in 00mn 00s    ---\ Analysis of lines F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ~ Keys: Scanned in 00mn 00s    ---\ Hosts File Redirection (O1) ~ The hosts file is clean. ~ Hosts File: Scanned in 00mn 00s ~ Number of lines (Lines number): 20    ---\ Browser Helper Objects (O2) O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE}. (.No owner - Easy-WebPrint EWPBrowseLoader Module.) -- C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll ~ BHO: 18 Legitimates Filtered in 00mn 01s    ---\ Internet Explorer Toolbars (O3) O3 - Toolbar: HomeTab - [HKLM]{1c98a3ee-3194-4309-8715-ad4c57183160}. (...) -- C:\Program Files\HomeTab\IE\HomeTab.dll =>PUP.CertifiedToolbar O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F}. (.Google Inc. - Google Toolbar.) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google O3 - Toolbar\WebBrowser: (no name) - [HKCU]{D3028143-6145-4318-99D3-3EDCE54A95A9} Orphan key O3 - Toolbar\WebBrowser: (no name) - [HKCU]{21FA44EF-376D-4D53-9B0F-8A89D3229068} Orphan key O3 - Toolbar\WebBrowser: (no name) - [HKCU]{90EEE664-34B1-422A-A782-779AF65CDF6D} Orphan key O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Orphan key O3 - Toolbar\WebBrowser: (no name) - [HKCU]{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} Orphan key ~ Toolbars: Scanned in 00mn 00s    ---\ Other User Links (O4) O4 - GS\Desktop [Public]: Orange Portail.lnk. (...) -- C:\Program Files\Orange\Orange Portail.exe O4 - GS\Program [Public]: Acrobat Reader 5.0.lnk. (.Adobe Systems Incorporated - Acrobat Reader 5.0.) -- C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe O4 - GS\Program [Public]: Listen to the Radio.lnk. (.Microsoft Corporation - Windows Media Player.) -- C:\Program Files\Windows Media Player\wmplayer.exe =>.Microsoft Corporation O4 - GS\QuickLaunch [Jacques]: Internet Explorer.lnk. (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\QuickLaunch [Jacques]: Launch Internet Explorer Browser.lnk. (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\QuickLaunch [Jacques]: Weather in France.lnk - Orphan key O4 - GS\QuickLaunch [Jacques]: Orange Portail.lnk. (...) -- C:\Program Files\Orange\Orange Portail big.exe O4 - GS\Program [Jacques]: Internet Explorer (2).lnk. (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\Program [Jacques]: Internet Explorer.lnk. (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\SystemTools [Jacques]: Internet Explorer (No Add-ons).lnk. (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O4 - GS\Desktop [Jacques]: Assistance Livebox.lnk. (.Orange - Assistance Livebox.) -- C:\Program Files\Orange\Assistance Livebox\AssistanceLivebox.exe O4 - GS\Desktop [Jacques]: Audacity.lnk. (...) -- C:\Program Files\Audacity\audacity.exe O4 - GS\Desktop [Jacques]: Browser Choice (2).lnk. (.Microsoft Corporation - Browser Choice.) -- C:\Windows\System32\browserchoice.exe O4 - GS\Desktop [Jacques]: Recycle Bin - Shortcut.lnk - Orphan key O4 - GS\Desktop [Jacques]: Microsoft Works Task Launcher.lnk. (.Microsoft® Corporation - Microsoft Works Task Launcher.) -- C:\Program Files\Microsoft Works\msworks.exe O4 - GS\Desktop [Jacques]: Computer - Shortcut.lnk - Orphan key O4 - GS\Desktop [Jacques]: ZHPFix.lnk. (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Program Files\ZHPDiag\ZHPFix\ZHPhep.exe =>.Nicolas Coolman ~ Global Startup: 77 Legitimates Filtered in 00mn 22s

lilidurhone · Answer

* To host the report, go to cjoint.com
* Click on choose a file and find the report on your PC.

* The report is hosted:
- For XP: C:\Documents and Settings\username\Local Settings\Application Data\ZHP
- Since Vista: C:\Users\username\AppData\Roaming\ZHP

* Once you find the report, select it and click Open

* Choose the type of sharing (I recommend private for 4 days it will be deleted)

* Then click on create the cjoint link

* Once you have obtained the link, copy and paste it in your next reply

* To help you https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers

--
If there is a problem, there is always a solution
~~~~~~ Cs ~~~~~~

idnoder · Answer

https://www.cjoint.com/?3Ctt0vZ8hA5  Second attempt, thank you, have a good evening. -- Jacques

lilidurhone · Answer

Install IE9 for Vista

https://www.commentcamarche.net/telecharger/web-internet/12481-internet-explorer-9/

* Download Junkware Removal Tool at this address (don't click on download, the download will start automatically): https://www.bleepingcomputer.com/download/junkware-removal-tool/dl/131/

* Save it to your desktop.

* Close all running applications.

* Open JRT.exe and press Enter: if you are using Windows Vista, 7, or 8, open it by right-clicking => Run as administrator.

* Wait while the tool works: the desktop will disappear for a few moments, this is completely normal.

* At the end of the scan, a report named JRT.txt will open. Host it as follows and post the obtained link in your next reply.

Tutorial: http://www.forum-entraide-informatique.com/support/junkware-removal-tool-tutoriel-t8260.html

--
If there is a problem, there is always a solution
~~~~~~ Cs ~~~~~~

idnoder · Answer

Hello, I think I'm going to give up. I installed IE9 which doesn't want to work, so I went back to Chrome and deleted IE8, but Internet Explorer 9 still won't work. On the other hand, Chrome is fine, so I'm going to reinstall IE8 and delete IE9. Have a good day, Jacques

--
jacques

lilidurhone · Answer

But no, you must not give up -- If there is a problem, there is always a solution ~~~~~~ Cs ~~~~~~

idnoder · Answer

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) par Thisisu
Version : 6.1.3 (03.23.2014:1)
OS : Windows Vista (TM) Home Premium x86
Exécuté par Jacques le 30/03/2014 à 15:01:11,47
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

--
jacques~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) par Thisisu
Version : 6.1.3 (03.23.2014:1)
OS : Windows Vista (TM) Home Premium x86
Exécuté par Jacques le 30/03/2014 à 15:01:11,47
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Valeurs de registre

~~~ Clés de registre

Supprimé avec succès : [Clé de Registre] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Supprimé avec succès : [Clé de Registre] HKEY_CLASSES_ROOT\CLSID\{A4C2FB10-84C3-44EB-9F9E-860FA1D9A797}
Supprimé avec succès : [Clé de Registre] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3427145887-3382394487-291425998-1000\Software\sweetim
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\1c875dde39636004ca8cdaec335b4160
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Classes\softwareupdate.coreclass
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Classes\softwareupdate.coreclass.1
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Classes\softwareupdate.ondemandcomclassmachine
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Classes\softwareupdate.ondemandcomclassmachine.1.0
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Classes\speedupmypc
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E58CDA9-3B21-4611-A859-26EE28950E61}
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6C5561B6-3DD2-46B5-83BE-EAE744366046}
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88E44198-D164-4EC0-B2C0-F679D866C6DA}
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F671C1B3-9776-426D-A350-55FB2D9B53F7}
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\1c875dde39636004ca8cdaec335b4160
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\allin1convert_8hbar uneninstaller internet explorer
Supprimé avec succès : [Clé de Registre] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0651AC3E-2473-4C0D-B0E9-5B8323FF8F56}
Supprimé avec succès : [Clé de Registre] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{3981DBFC-B1B6-A160-30D7-1FB1E7C2581B}
Supprimé avec succès : [Clé de Registre] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{75b4241f-171e-44a3-bf44-23613b6e3e03}
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0651AC3E-2473-4C0D-B0E9-5B8323FF8F56}
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{75b4241f-171e-44a3-bf44-23613b6e3e03}
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A4C2FB10-84C3-44EB-9F9E-860FA1D9A797}
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FBCBC43A-DCA9-4192-A4C8-B57FD0F77D4D}
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1c98a3ee-3194-4309-8715-ad4c57183160}
Supprimé avec succès : [Clé de Registre] HKEY_CLASSES_ROOT\CLSID\{1c98a3ee-3194-4309-8715-ad4c57183160}

~~~ Fichiers

Désinfecté avec succès : [Raccourci] C:\Users\Jacques\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Internet Explorer.lnk
Désinfecté avec succès : [Raccourci] C:\Users\Jacques\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Désinfecté avec succès : [Raccourci] C:\Users\Jacques\AppData\Roaming\microsoft\windows\start menu\Programs\Internet Explorer (2).lnk
Désinfecté avec succès : [Raccourci] C:\Users\Jacques\AppData\Roaming\microsoft\windows\start menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Réparé avec succès : [Raccourci] C:\Users\Jacques\desktop\Internet Explorer.lnk

~~~ Dossiers

Supprimé avec succès : [Dossier] "C:\Users\Jacques\appdata\local\cre"
Supprimé avec succès : [Dossier] "C:\Users\Jacques\appdata\local\software"
Supprimé avec succès : [Dossier] "C:\Program Files\boxore"
Supprimé avec succès : [Dossier] "C:\Program Files\software"
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{01E7F016-29BA-4E7A-BA86-84AFD6209416}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{057BD7A2-8615-4688-BC43-12111B248F63}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{063849AB-E6C5-4E93-A9B9-6512F3998701}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{09212B68-53B9-4890-B04B-5FC49EF8BD01}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{0C498FCE-65FA-4832-894C-105519C1E333}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{13D5A1EF-0D5A-47CA-BC40-C05182AEDC7B}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{13FDC486-DA2E-4B3E-BE01-C3017D8A29C6}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{140071F0-C2EB-4249-B052-2034E7B3A42F}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{14988FAB-0316-475C-9F14-32E4A73670FF}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{1A7AFF41-E072-4370-A985-28B1A66B7737}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{1A98CCC9-B7C2-42FF-9211-44AFEDB8B283}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{1DFE320A-2EB7-41A6-A70A-7724347E60F8}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{210F7187-A56C-4A03-BCA8-8B1686A007DF}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{217FF84F-E9DB-41CB-B433-C0433BBC4522}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{25229CFB-68BA-4C70-9BD6-CF498FAC7040}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{27D8AE7C-A707-41BD-BB8F-F03DC67A5D6B}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{2E21703D-E66A-472D-BB5E-E8041D413883}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{3054D972-FDFB-4254-A95D-140297FCB317}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{30D9C11E-DE81-4381-A177-DAA70E2ED447}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{3212AA58-75D5-4291-8257-AEB2487B0BA7}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{33B90844-6BDB-478A-9173-7FE33B3AEEB6}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{36406365-1985-40FD-9316-0E8BB0BF471B}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{38C94F4D-684C-4F90-80C4-299DBC667A54}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{3A643E76-C38C-471C-A72A-DE6FB90A5748}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{3A6D08A9-9290-4116-8D4F-9535EAE57775}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{3A98D29F-6776-4926-92DD-9B14D471B1AC}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{41EAA0CE-E76F-4E71-A1C7-D1E77390470F}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{4430739D-F0A3-4F69-8AF0-37DEE628B650}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{460116EA-D6B4-4C39-9956-8093658786E0}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{46D2D0E5-77BC-4560-9ECB-B44FB624ADA1}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{4755683F-F5A9-4F56-AD2E-0463D079EDE8}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{4864167F-E62E-4BF6-BC20-FCDA4A5985F5}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{4B91DF22-76B0-4B99-BAF8-DDF50152E462}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{4BC68837-F86A-4C53-8D3B-13DED6FFE8F7}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{500FF3BC-48DF-4015-A3FC-8D9C0C3056A0}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{504E5B4B-E8AF-4925-BFF1-DD217E9444F7}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{5395C426-B060-49DB-8404-C87204E02CC5}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{54366BC0-7073-40DF-8C1B-ADC7CC335704}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{56847286-7189-4DDC-9310-966E9E55CBE7}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{5764025E-A586-4DD9-ACAC-4C5C67A8D191}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{588AB10F-B506-4583-A9F5-FC3FF183ED44}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{5AAD3E24-4D5A-460B-9B55-52CD18BDC567}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{5BD0080D-A23A-48A7-BCD1-3F3319874C10}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{5C87B355-AB31-4BA5-9817-AF14C8959076}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{5C8DB346-A98B-44DF-9E0B-44CA76F9B1C5}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{5CA8BBA6-51F8-4565-BA54-C5764B92C246}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{5D79CC25-393B-444C-B0A8-A3677F77BB09}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{5EDCEFD4-20C3-4B6A-8FF9-E3635ACB32ED}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{5FC46330-7C1A-4E57-80AD-591B70D2AD30}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{60674E39-62FF-49BF-BD83-4918BFF86A7C}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{63B2F188-0D91-471B-9444-09020555B6CA}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{64FC933E-9D78-4925-ABF0-9EA5092F1F92}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{6564C632-C196-4282-BA95-4FC58462EFA5}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{65E58271-D861-491F-BA95-1101C94FD95F}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{666A3064-BCDE-422B-A099-C160ECA151AD}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{675C1C22-222C-4EC2-8CC6-C741500D7693}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{69B447C0-0C4A-4835-B61F-5E2937F1A385}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{6A8FD71D-6F4A-4B54-8C4E-A22DC782309F}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{6F1CF484-8D2D-43A3-8834-2E9616B82E5F}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{73ED45B9-A7E1-4571-93BB-23DE3E930753}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{7528B688-2CF3-48BC-AE62-F81982E85A5D}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{78153B6C-93C4-4A72-B993-FC43D052378C}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{7931A875-A81D-4FA8-8EA9-3D6641277748}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{7F57E6D1-F87E-4E9D-8055-8A58EA1013CF}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{832A853D-B379-412D-AB62-EA4FFCB5CD10}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{836EC47F-B32E-4499-8E13-B80A02EA057A}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{86A4D325-0FC3-4BAA-9A07-1FF3545B29FD}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{86BA9EEA-1BEC-4A50-92ED-B68D0C0720B4}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{8923E6BC-920F-4B30-98E2-8F71A033A05A}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{8999541C-9A29-49C5-9897-BC97B953E425}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{89F9C749-4EB1-4B3A-8780-0A68F832C2D2}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{8F5A3A87-9FFB-4F5F-B916-EEBAF98A89EC}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{93DF4788-8699-42F6-B8D8-B8290A962D30}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{9530CA26-47EF-4174-AA72-C2142EB242E2}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{95AAAE5A-A20C-4099-9CD7-BE37918F53E5}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{95C49698-D88E-4BD3-B079-5A9FB697D014}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{97173A42-F207-4D76-9151-820D71380D9F}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{9813C023-C50E-4589-9ADB-487FC4DD1368}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{9A657171-881C-4B87-84D6-104AFCF09D20}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{9B9810DC-C688-45BF-9F3D-9B34666EEF29}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{9ED5ACE0-27F5-4984-8320-6D1DA04795CD}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{9F228AB5-9560-48A6-A1B9-12BC23BF9852}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{9FA9A4B3-B84F-4A45-8A03-8E3325EAC8E4}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{A072AD34-EED0-4F29-9F92-12499AD3118F}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{A1BA40F8-35E1-4A14-9FBC-A4B0227592E5}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{A24CAB60-593E-4453-8A5D-FB9C9D57FDA5}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{A4254E9B-0905-4636-989C-3B70852FB21B}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{A6827AAC-F3B2-420B-B2C3-BC249CBA467E}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{A6BEB3C4-5E16-4D44-BC18-BC6F02B1044D}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{AA5C3384-6830-40E0-829D-AA40E9042A97}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{ACD6F398-8F6B-4D34-ADD7-A13F38884ADD}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{B0EA5373-E091-431F-BEBE-4F60D46E1732}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{B2930FA7-136F-4131-9A51-6B07FBCD1825}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{B470298F-240A-4EE6-BF83-AA5BDE019303}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{B4E97E2D-F923-41E8-ADA4-8A53A8A6836A}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{B5180595-87C8-406F-B2DF-E16BF8441512}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{B8E77358-B562-4065-8A14-E155D1464F5A}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{C1682FF6-17AD-4352-9F8C-6E0312FF04EF}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{C1E7F210-C30D-44F8-81EA-7A572BA02472}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{C28976A1-4105-4B08-8345-F7EEAE61A593}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{C414A272-A5C3-437A-B816-FD57FAF4FB74}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{CD095F2E-27F3-4A0A-8330-A7DA5282F0DA}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{CD614758-3484-446E-BDAB-22A8F7D6487A}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{CEF8AE2E-DB48-4EA6-8E55-F53241BD917E}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{CFDCB476-2948-4030-B1BC-8E22A568555A}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{D08EEC6E-6826-4D65-9129-11470CFF0BD2}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{D171EC99-A056-4560-A57B-01A739852B08}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{D2701FB0-4758-4620-B04F-974A16D790B3}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{D3DA4BFA-A741-49F3-8C90-419FD8A2C969}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{DBDC41D8-2354-42E0-A669-DA86F583480A}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{DF376CB2-63B1-4EC2-9DA7-A48CA0676BE3}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{DFC4CACB-5A6E-495A-A514-3088DEDA5287}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{E5D99570-12BB-4406-A1E4-E497B6007CDC}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{E759BAB0-98D1-43A0-A013-23343DBF6C64}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{EC53B885-D525-4487-84C8-A16F7A4324B1}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{ED1017D6-1EB5-4D9E-9EDE-59A1C3F912D7}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{EEDFF521-EC8D-43BA-83CD-7D206BB1C5F0}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{EF6DED65-E500-4D65-8E1B-EA6C7AD5D83F}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{F0CB3FCC-760F-4D79-801B-BB0A0BDA12D4}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{F11A8798-B8C3-4C9B-8069-BABC72FFEF06}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{F167F07C-91A8-47AB-A1B4-039D47FB7E55}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{F1C73B4A-9417-4014-825C-AD7313303A68}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{F25C4A52-D707-4E1F-99AF-6A97DB1FBE10}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{F329779A-5A85-4DAE-A473-030B7BE1EA85}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{F35F8B8B-8522-4490-822E-B4B716CC7CD7}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{F5CC07B4-C507-4B5F-A9D7-CB871E0A4EA9}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{F84BE750-6BF7-470E-BF0C-C3C01814E109}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{F9273EF0-C105-4A5A-8DFB-DB53F2BA2CC3}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{FAFC7C3B-F1A1-4F1B-B1D4-922ADF7BEB2F}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{FC0E21F7-0416-41A8-B532-277EC0CCDBE5}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{FDC1258C-12B5-4533-A942-02669CBDDA59}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{FFE088C4-C779-4CA8-BD06-DAEA3DEB986B}

~~~ Les journaux de l'Observateur d'événements ont été effacés

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
La numérisation a été terminée le 30/03/2014 à 15:08:33,53
L'ordinateur a été redémarré
Fin du journal JRT
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Bonjour voici le résultat de mon (pauvre) travail comme je ne comprends pas l'Anglais il me faut faire les traductions j'espère que cela va marcher, merci Jacques

~~~ Valeurs de registre

~~~ Clés de registre

Supprimé avec succès : [Clé de Registre] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Supprimé avec succès : [Clé de Registre] HKEY_CLASSES_ROOT\CLSID\{A4C2FB10-84C3-44EB-9F9E-860FA1D9A797}
Supprimé avec succès : [Clé de Registre] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3427145887-3382394487-291425998-1000\Software\sweetim
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\1c875dde39636004ca8cdaec335b4160
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Classes\softwareupdate.coreclass
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Classes\softwareupdate.coreclass.1
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Classes\softwareupdate.ondemandcomclassmachine
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Classes\softwareupdate.ondemandcomclassmachine.1.0
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Classes\speedupmypc
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E58CDA9-3B21-4611-A859-26EE28950E61}
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6C5561B6-3DD2-46B5-83BE-EAE744366046}
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{88E44198-D164-4EC0-B2C0-F679D866C6DA}
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F671C1B3-9776-426D-A350-55FB2D9B53F7}
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\1c875dde39636004ca8cdaec335b4160
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\allin1convert_8hbar uninstall internet explorer
Supprimé avec succès : [Clé de Registre] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0651AC3E-2473-4C0D-B0E9-5B8323FF8F56}
Supprimé avec succès : [Clé de Registre] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{3981DBFC-B1B6-A160-30D7-1FB1E7C2581B}
Supprimé avec succès : [Clé de Registre] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{75b4241f-171e-44a3-bf44-23613b6e3e03}
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0651AC3E-2473-4C0D-B0E9-5B8323FF8F56}
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{75b4241f-171e-44a3-bf44-23613b6e3e03}
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A4C2FB10-84C3-44EB-9F9E-860FA1D9A797}
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FBCBC43A-DCA9-4192-A4C8-B57FD0F77D4D}
Supprimé avec succès : [Clé de Registre] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1c98a3ee-3194-4309-8715-ad4c57183160}
Supprimé avec succès : [Clé de Registre] HKEY_CLASSES_ROOT\CLSID\{1c98a3ee-3194-4309-8715-ad4c57183160}

~~~ Fichiers

Supprimé avec succès : [Raccourci] C:\Users\Jacques\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Internet Explorer.lnk
Supprimé avec succès : [Raccourci] C:\Users\Jacques\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Supprimé avec succès : [Raccourci] C:\Users\Jacques\AppData\Roaming\microsoft\windows\start menu\Programs\Internet Explorer (2).lnk
Supprimé avec succès : [Raccourci] C:\Users\Jacques\AppData\Roaming\microsoft\windows\start menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Réparé avec succès : [Raccourci] C:\Users\Jacques\desktop\Internet Explorer.lnk

~~~ Dossiers

Supprimé avec succès : [Dossier] "C:\Users\Jacques\appdata\local\cre"
Supprimé avec succès : [Dossier] "C:\Users\Jacques\appdata\local\software"
Supprimé avec succès : [Dossier] "C:\Program Files\boxore"
Supprimé avec succès : [Dossier] "C:\Program Files\software"
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{01E7F016-29BA-4E7A-BA86-84AFD6209416}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{057BD7A2-8615-4688-BC43-12111B248F63}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{063849AB-E6C5-4E93-A9B9-6512F3998701}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{09212B68-53B9-4890-B04B-5FC49EF8BD01}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{0C498FCE-65FA-4832-894C-105519C1E333}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{13D5A1EF-0D5A-47CA-BC40-C05182AEDC7B}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{13FDC486-DA2E-4B3E-BE01-C3017D8A29C6}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{140071F0-C2EB-4249-B052-2034E7B3A42F}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{14988FAB-0316-475C-9F14-32E4A73670FF}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{1A7AFF41-E072-4370-A985-28B1A66B7737}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{1A98CCC9-B7C2-42FF-9211-44AFEDB8B283}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{1DFE320A-2EB7-41A6-A70A-7724347E60F8}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{210F7187-A56C-4A03-BCA8-8B1686A007DF}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{217FF84F-E9DB-41CB-B433-C0433BBC4522}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{25229CFB-68BA-4C70-9BD6-CF498FAC7040}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{27D8AE7C-A707-41BD-BB8F-F03DC67A5D6B}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{2E21703D-E66A-472D-BB5E-E8041D413883}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{3054D972-FDFB-4254-A95D-140297FCB317}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{30D9C11E-DE81-4381-A177-DAA70E2ED447}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{3212AA58-75D5-4291-8257-AEB2487B0BA7}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{33B90844-6BDB-478A-9173-7FE33B3AEEB6}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{36406365-1985-40FD-9316-0E8BB0BF471B}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{38C94F4D-684C-4F90-80C4-299DBC667A54}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{3A643E76-C38C-471C-A72A-DE6FB90A5748}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{3A6D08A9-9290-4116-8D4F-9535EAE57775}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{3A98D29F-6776-4926-92DD-9B14D471B1AC}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{41EAA0CE-E76F-4E71-A1C7-D1E77390470F}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{4430739D-F0A3-4F69-8AF0-37DEE628B650}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{460116EA-D6B4-4C39-9956-8093658786E0}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{46D2D0E5-77BC-4560-9ECB-B44FB624ADA1}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{4755683F-F5A9-4F56-AD2E-0463D079EDE8}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{4864167F-E62E-4BF6-BC20-FCDA4A5985F5}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{4B91DF22-76B0-4B99-BAF8-DDF50152E462}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{4BC68837-F86A-4C53-8D3B-13DED6FFE8F7}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{500FF3BC-48DF-4015-A3FC-8D9C0C3056A0}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{504E5B4B-E8AF-4925-BFF1-DD217E9444F7}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{5395C426-B060-49DB-8404-C87204E02CC5}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{54366BC0-7073-40DF-8C1B-ADC7CC335704}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{56847286-7189-4DDC-9310-966E9E55CBE7}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{5764025E-A586-4DD9-ACAC-4C5C67A8D191}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{588AB10F-B506-4583-A9F5-FC3FF183ED44}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{5AAD3E24-4D5A-460B-9B55-52CD18BDC567}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{5BD0080D-A23A-48A7-BCD1-3F3319874C10}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{5C87B355-AB31-4BA5-9817-AF14C8959076}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{5C8DB346-A98B-44DF-9E0B-44CA76F9B1C5}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{5CA8BBA6-51F8-4565-BA54-C5764B92C246}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{5D79CC25-393B-444C-B0A8-A3677F77BB09}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{5EDCEFD4-20C3-4B6A-8FF9-E3635ACB32ED}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{5FC46330-7C1A-4E57-80AD-591B70D2AD30}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{60674E39-62FF-49BF-BD83-4918BFF86A7C}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{63B2F188-0D91-471B-9444-09020555B6CA}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{64FC933E-9D78-4925-ABF0-9EA5092F1F92}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{6564C632-C196-4282-BA95-4FC58462EFA5}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{65E58271-D861-491F-BA95-1101C94FD95F}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{666A3064-BCDE-422B-A099-C160ECA151AD}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{675C1C22-222C-4EC2-8CC6-C741500D7693}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{69B447C0-0C4A-4835-B61F-5E2937F1A385}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{6A8FD71D-6F4A-4B54-8C4E-A22DC782309F}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{6F1CF484-8D2D-43A3-8834-2E9616B82E5F}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{73ED45B9-A7E1-4571-93BB-23DE3E930753}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{7528B688-2CF3-48BC-AE62-F81982E85A5D}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{78153B6C-93C4-4A72-B993-FC43D052378C}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{7931A875-A81D-4FA8-8EA9-3D6641277748}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{7F57E6D1-F87E-4E9D-8055-8A58EA1013CF}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{832A853D-B379-412D-AB62-EA4FFCB5CD10}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{836EC47F-B32E-4499-8E13-B80A02EA057A}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{86A4D325-0FC3-4BAA-9A07-1FF3545B29FD}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{86BA9EEA-1BEC-4A50-92ED-B68D0C0720B4}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{8923E6BC-920F-4B30-98E2-8F71A033A05A}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{8999541C-9A29-49C5-9897-BC97B953E425}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{89F9C749-4EB1-4B3A-8780-0A68F832C2D2}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{8F5A3A87-9FFB-4F5F-B916-EEBAF98A89EC}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{93DF4788-8699-42F6-B8D8-B8290A962D30}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{9530CA26-47EF-4174-AA72-C2142EB242E2}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{95AAAE5A-A20C-4099-9CD7-BE37918F53E5}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{95C49698-D88E-4BD3-B079-5A9FB697D014}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{97173A42-F207-4D76-9151-820D71380D9F}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{9813C023-C50E-4589-9ADB-487FC4DD1368}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{9A657171-881C-4B87-84D6-104AFCF09D20}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{9B9810DC-C688-45BF-9F3D-9B34666EEF29}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{9ED5ACE0-27F5-4984-8320-6D1DA04795CD}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{9F228AB5-9560-48A6-A1B9-12BC23BF9852}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{9FA9A4B3-B84F-4A45-8A03-8E3325EAC8E4}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{A072AD34-EED0-4F29-9F92-12499AD3118F}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{A1BA40F8-35E1-4A14-9FBC-A4B0227592E5}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{A24CAB60-593E-4453-8A5D-FB9C9D57FDA5}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{A4254E9B-0905-4636-989C-3B70852FB21B}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{A6827AAC-F3B2-420B-B2C3-BC249CBA467E}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{A6BEB3C4-5E16-4D44-BC18-BC6F02B1044D}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{AA5C3384-6830-40E0-829D-AA40E9042A97}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{ACD6F398-8F6B-4D34-ADD7-A13F38884ADD}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{B0EA5373-E091-431F-BEBE-4F60D46E1732}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{B2930FA7-136F-4131-9A51-6B07FBCD1825}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{B470298F-240A-4EE6-BF83-AA5BDE019303}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{B4E97E2D-F923-41E8-ADA4-8A53A8A6836A}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{B5180595-87C8-406F-B2DF-E16BF8441512}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{B8E77358-B562-4065-8A14-E155D1464F5A}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{C1682FF6-17AD-4352-9F8C-6E0312FF04EF}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{C1E7F210-C30D-44F8-81EA-7A572BA02472}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{C28976A1-4105-4B08-8345-F7EEAE61A593}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{C414A272-A5C3-437A-B816-FD57FAF4FB74}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{CD095F2E-27F3-4A0A-8330-A7DA5282F0DA}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{CD614758-3484-446E-BDAB-22A8F7D6487A}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{CEF8AE2E-DB48-4EA6-8E55-F53241BD917E}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{CFDCB476-2948-4030-B1BC-8E22A568555A}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{D08EEC6E-6826-4D65-9129-11470CFF0BD2}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{D171EC99-A056-4560-A57B-01A739852B08}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{D2701FB0-4758-4620-B04F-974A16D790B3}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{D3DA4BFA-A741-49F3-8C90-419FD8A2C969}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{DBDC41D8-2354-42E0-A669-DA86F583480A}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{DF376CB2-63B1-4EC2-9DA7-A48CA0676BE3}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{DFC4CACB-5A6E-495A-A514-3088DEDA5287}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{E5D99570-12BB-4406-A1E4-E497B6007CDC}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{E759BAB0-98D1-43A0-A013-23343DBF6C64}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{EC53B885-D525-4487-84C8-A16F7A4324B1}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{ED1017D6-1EB5-4D9E-9EDE-59A1C3F912D7}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{EEDFF521-EC8D-43BA-83CD-7D206BB1C5F0}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{EF6DED65-E500-4D65-8E1B-EA6C7AD5D83F}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{F0CB3FCC-760F-4D79-801B-BB0A0BDA12D4}
Supprimé avec succès : [Dossier vide] C:\Users\Jacques\appdata\local\{F11A8798-B8C3-4C9B-8069-BABC72FFEF06}
Supprimé avec succès : [Dossier vide] C

lilidurhone · Answer

Hello

Impeccable

However, I won't be able to continue

Indeed, a hardware problem has made my only computer unusable

Big RAM issue or hard drive failure (on my computer)

--
If there is a problem, there is always a solution
~~~~~~ Cs ~~~~~~

idnoder · Answer

Hello, you tell me impeccable, thank you, but my computer is still dragging, it freezes, it's slow, can you recommend a software to completely clean this computer (there are so many it's hard to make a choice) anyway thank you for your help and good luck with the repair of your computer, have a nice day, Jacques
--
jacques

lilidurhone · Answer

You are waiting for another CS :)   -- If there is a problem, there is always a solution ~~~~~~ Cs ~~~~~~

billmaxime · Answer

Hello idnoder,  at Lili's request, who has a problem with her PC, I'm taking over to finish the  disinfection of your PC  please do this and post the report  Download roguekiller to your desktop  take this one, look at the image >> click here  The link https://www.luanagames.com/index.fr.html  The tutorial http://tigzyrk.blogspot.be/2012/10/fr-roguekiller-tutoriel-officiel.html  Close all your running programs  Run roguekiller (Vista-W7-W8 users run as administrator - right-click)  Let the prescan run and accept the Eula, see the image >> click here  Click on scan  The report will be displayed on your desktop and in C: RKReport[#].txt  Post the report via copy/paste  thank you  @+   the radiation level is higher at the employment office than at Chernobyl

idnoder · Answer

RogueKiller V8.8.15 [Mar 27 2014] by Adlice Software email: https://www.adlice.com/contact/ Feedback: https://forum.adlice.com/ Website: http://www.surlatoile.org/RogueKiller/ Blog: https://www.adlice.com/  Operating System: Windows Vista (6.0.6002 Service Pack 2) 32 bit version Boot Mode: Normal mode User: Jacques [Admin Rights] Mode: Scan -- Date: 03/31/2014 18:11:16 | ARK || FAK || MBR |  ¤¤¤ Malicious Processes: 0 ¤¤¤  ¤¤¤ Registry Entries: 13 ¤¤¤ [RUN][SUSP PATH] HKLM\[...]\Run : C-Media Mixer (Mixer.exe /startup [7]) -> FOUND [PROXY IE][PUM] HKCU\[...]\Internet Settings : ProxyServer (hxxp=127.0.0.1:49167;hxxps=127.0.0.1:49167; [Country: (Private Address) (XX), City: (Private Address)]) -> FOUND [PROXY IE][PUM] HKCU\[...]\Internet Settings : ProxyEnable (1) -> FOUND [HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> FOUND [HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> FOUND [HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND [HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND [HJ DESK][PUM] HKCU\[...]\ClassicStartMenu : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> FOUND [HJ DESK][PUM] HKCU\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND [HJ DESK][PUM] HKCU\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND [HJ DESK][PUM] HKCU\[...]\NewStartPanel : {645FF040-5081-101B-9F08-00AA002F954E} (1) -> FOUND [HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND [HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND  ¤¤¤ Scheduled Tasks: 2 ¤¤¤ [V1][ROGUE ST] Weather It Up-firefoxinstaller.job : C:\Program Files\Weather It Up\Weather It Up-firefoxinstaller.exe - /installxpi /agentregpath='Weather It Up' /extensionfilepath='C:\Program Files\Weather It Up\49136.xpi' /appid=49136 /srcid='001101' /subid='0' /zdata='0' /bic=466DAF398D184B32823696145A8F0714IE /verifier=9343920cce8629641ebab91953801463 /installerversion=1_34_3_6 /installerfullversion=1.34.3.6 /installationtime=1396248094 /statsdomain=hxxp://stats.srvstatsdata.com /errorsdomain=hxxp://errors.srvstatsdata.com /waitforbrowser=300 /extensionid=18c3bc7a-b2aa-43c1-885a-665d2f25cf89@d6802e59-3519-4428-bef7-bce888d550bb.com /extensionversion=0.94 /prefsbranch=a18c3bc7ab2aa43c1885a665d2f25cf89d6802e5935194428bef7bce888d550bbcom49136 /updateurl=hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/ff/update/49136.rdf /extensionname='Weather It Up' /extensiondesc='Weather it up is a simple browser extension that provides the latest weather information.' /publishername='Phoenix Media' /defbro=ie /allusers /allprofiles /checkfflist /autoupdateulr='hxxp://update.srvstatsdata.com/ff_agent_updates/{CAMP_ID}/update.json' /runfrom='task' /externallog='' [-][x][x][x][x][x][x][x][x][x][x][x][x][x][x][x][x] -> FOUND [V2][ROGUE ST] Weather It Up-firefoxinstaller : C:\Program Files\Weather It Up\Weather It Up-firefoxinstaller.exe - /installxpi /agentregpath='Weather It Up' /extensionfilepath='C:\Program Files\Weather It Up\49136.xpi' /appid=49136 /srcid='001101' /subid='0' /zdata='0' /bic=466DAF398D184B32823696145A8F0714IE /verifier=9343920cce8629641ebab91953801463 /installerversion=1_34_3_6 /installerfullversion=1.34.3.6 /installationtime=1396248094 /statsdomain=hxxp://stats.srvstatsdata.com /errorsdomain=hxxp://errors.srvstatsdata.com /waitforbrowser=300 /extensionid=18c3bc7a-b2aa-43c1-885a-665d2f25cf89@d6802e59-3519-4428-bef7-bce888d550bb.com /extensionversion=0.94 /prefsbranch=a18c3bc7ab2aa43c1885a665d2f25cf89d6802e5935194428bef7bce888d550bbcom49136 /updateurl=hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/ff/update/49136.rdf /extensionname='Weather It Up' /extensiondesc='Weather it up is a simple browser extension that provides the latest weather information.' /publishername='Phoenix Media' /defbro=ie /allusers /allprofiles /checkfflist /autoupdateulr='hxxp://update.srvstatsdata.com/ff_agent_updates/{CAMP_ID}/update.json' /runfrom='task' /externallog='' [-][x][x][x][x][x][x][x][x][x][x][x][x][x][x][x][x] -> FOUND  ¤¤¤ Startup Entries: 0 ¤¤¤  ¤¤¤ Web Browsers: 0 ¤¤¤  ¤¤¤ Browser Addons: 0 ¤¤¤  ¤¤¤ Specific Files / Folders: ¤¤¤  ¤¤¤ Driver: [LOAD] ¤¤¤ [Address] EAT @explorer.exe (DllCanUnloadNow) : wlanutil.dll -> HOOKED (C:\Windows\System32\SndVolSSO.dll @ 0x735D155F) [Address] EAT @explorer.exe (DllGetClassObject) : wlanutil.dll -> HOOKED (C:\Windows\System32\SndVolSSO.dll @ 0x735D4852) [Address] EAT @explorer.exe (DllMain) : wlanutil.dll -> HOOKED (C:\Windows\System32\SndVolSSO.dll @ 0x735D12FB) [Address] IAT @iexplore.exe (GetProcAddress) : KERNEL32.dll -> HOOKED (C:\Program Files\Canon\Easy-WebPrint\EWPCore.dll @ 0x021B4C50) [Address] IAT @iexplore.exe (LoadLibraryA) : KERNEL32.dll -> HOOKED (C:\Program Files\Canon\Easy-WebPrint\EWPCore.dll @ 0x021B2000) [Address] IAT @iexplore.exe (LoadLibraryW) : KERNEL32.dll -> HOOKED (C:\Program Files\Canon\Easy-WebPrint\EWPCore.dll @ 0x021B2030) [Address] IAT @iexplore.exe (LoadLibraryExW) : KERNEL32.dll -> HOOKED (C:\Program Files\Canon\Easy-WebPrint\EWPCore.dll @ 0x021B20B0)  ¤¤¤ External Routines: ¤¤¤  ¤¤¤ Infection: ¤¤¤  ¤¤¤ HOSTS File: ¤¤¤ ---> %SystemRoot%\System32\drivers\etc\hosts   127.0.0.1 localhost ::1 localhost   ¤¤¤ MBR Check: ¤¤¤  +++++ PhysicalDrive0: (\.\PHYSICALDRIVE0 @ IDE) Hitachi HDS721616PLA380 ATA Device +++++ --- User --- [MBR] 681add1742775c3b051c7c13f50a8958 [BSP] 855b5aaea752edba6aa8805dcb802c62 : Windows Vista MBR Code Partition table: 0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 157064 MB User = LL1 ... OK! User = LL2 ... OK!  Finished: >     Here is the report, I hope everything will be fine....thank you, have a good evening. -- Jacques

billmaxime · Answer

re  ok, relaunch roguekiller, let it do the pre-scan then click on scan  when the scan is finished, click on delete and on proxy reset  look at this  delete proxy reset  post the reports via 1 copy/paste  thank you  @+  the radiation level is higher at the employment agency than at Chernobyl

idnoder · Answer

Hello, there has been a change in my PC, I'm getting ads like (trojan horse) and double icons on my desktop, this morning it's in full form. Yesterday I did a scan but it's impossible to copy and paste, so I'm doing it manually, there are two lines for Explorer 1st) status(deleted) type(PUM) key type(IE proxy) global(HKEY current user) user(none) key(software\microsoft\windows\current version\internet SE) value(proxy server) data(127.0.0.1;49167;https=127.0.0.1;49167;) 2nd) status(replaced) type(PUM) key type(IE proxy) global(HKEY current user) key(software\microsoft\windows\current version\internetSE) value(proxy enable) data(1). That's the result, now this morning on my desktop I found three roguekiller reports from last night at 7 PM, they are different if that helps!!!! Have a good day, and thanks again.  -- jacques

billmaxime · Answer

Hi idnoder,  yesterday I did the scan but it's impossible to copy and paste, so I'm doing it by hand  try again one more time to post the 3 reports via one copy/paste please  if it doesn't work, host them via cjoint >> https://www.cjoint.com/  thanks  @+  -- the radiation level is higher at the employment center than in Chernobyl

lilidurhone · Answer

Hello  Starting tomorrow evening, I can resume :)  Take care  -- If there is a problem, there is always a solution ~~~~~~ Cs ~~~~~~

billmaxime · Answer

Hi Lili,  Okay, no problem  See you later  -- The radiation level is higher at the employment center than at Chernobyl.

idnoder · Answer

here is the first of three, Jacques -- jacquesRogueKiller V8.8.15 [Mar 27 2014] by Adlice Software email: https://www.adlice.com/contact/ Feedback: https://forum.adlice.com/ Website: http://www.surlatoile.org/RogueKiller/ Blog: https://www.adlice.com/ Operating System: Windows Vista (6.0.6002 Service Pack 2) 32-bit version Boot: Normal mode User: Jacques [Admin rights] Mode: Scan -- Date: 03/31/2014 19:54:36 | ARK || FAK || MBR | ¤¤¤ Malicious Processes: 0 ¤¤¤ ¤¤¤ Registry Entries: 2 ¤¤¤ [PROXY IE][PUM] HKCU\[...]\Internet Settings: ProxyServer (hxxp=127.0.0.1:49167;hxxps=127.0.0.1:49167; [Country: (Private Address) (XX), City: (Private Address)]) -> FOUND [PROXY IE][PUM] HKCU\[...]\Internet Settings: ProxyEnable (1) -> FOUND ¤¤¤ Scheduled Tasks: 0 ¤¤¤ ¤¤¤ Startup Entries: 0 ¤¤¤ ¤¤¤ Web Browsers: 0 ¤¤¤ ¤¤¤ Browser Addons: 0 ¤¤¤ ¤¤¤ Specific Files / Folders: ¤¤¤ ¤¤¤ Driver: [LOADED] ¤¤¤ [Address] EAT @explorer.exe (DllCanUnloadNow): wlanutil.dll -> HOOKED (C:\Windows\System32\SndVolSSO.dll @ 0x735D155F) [Address] EAT @explorer.exe (DllGetClassObject): wlanutil.dll -> HOOKED (C:\Windows\System32\SndVolSSO.dll @ 0x735D4852) [Address] EAT @explorer.exe (DllMain): wlanutil.dll -> HOOKED (C:\Windows\System32\SndVolSSO.dll @ 0x735D12FB) ¤¤¤ External Traffic: ¤¤¤ ¤¤¤ Infection: ¤¤¤ ¤¤¤ HOSTS File: ¤¤¤ --> %SystemRoot%\System32\drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ¤¤¤ MBR Check: ¤¤¤ +++++ PhysicalDrive0: (\.\PHYSICALDRIVE0 @ IDE) Hitachi HDS721616PLA380 ATA Device +++++ --- User --- [MBR] 681add1742775c3b051c7c13f50a8958 [BSP] 855b5aaea752edba6aa8805dcb802c62: Windows Vista MBR Code Partition table: 0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 157064 MB User = LL1 ... OK! User = LL2 ... OK! Finished: << RKreport[0]_S_03312014_195436.txt >> RKreport[0]_D_03312014_182539.txt;RKreport[0]_S_03312014_181116.txt

idnoder · Answer

here is the second one, Jacques -- jacquesRogueKiller V8.8.15 [Mar 27 2014] by Adlice Software email : https://www.adlice.com/contact/ Feedback: https://forum.adlice.com/ Website: http://www.surlatoile.org/RogueKiller/ Blog: https://www.adlice.com/ Operating System: Windows Vista (6.0.6002 Service Pack 2) 32-bit version Boot: Normal Mode User: Jacques [Admin Rights] Mode: Removal -- Date: 03/31/2014 19:54:57 | ARK || FAK || MBR | ¤¤¤ Malicious Processes: 0 ¤¤¤ ¤¤¤ Registry Entries: 0 ¤¤¤ ¤¤¤ Scheduled Tasks: 0 ¤¤¤ ¤¤¤ Startup Entries: 0 ¤¤¤ ¤¤¤ Web Browsers: 0 ¤¤¤ ¤¤¤ Browser Addons: 0 ¤¤¤ ¤¤¤ Specific Files / Folders: ¤¤¤ ¤¤¤ Driver: [LOADED] ¤¤¤ [Address] EAT @explorer.exe (DllCanUnloadNow): wlanutil.dll -> HOOKED (C:\Windows\System32\SndVolSSO.dll @ 0x735D155F) [Address] EAT @explorer.exe (DllGetClassObject): wlanutil.dll -> HOOKED (C:\Windows\System32\SndVolSSO.dll @ 0x735D4852) [Address] EAT @explorer.exe (DllMain): wlanutil.dll -> HOOKED (C:\Windows\System32\SndVolSSO.dll @ 0x735D12FB) ¤¤¤ External Routines: ¤¤¤ ¤¤¤ Infection: ¤¤¤ ¤¤¤ HOSTS File: ¤¤¤ --> %SystemRoot%\System32\drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ¤¤¤ MBR Verification: ¤¤¤ +++++ PhysicalDrive0: (\.\PHYSICALDRIVE0 @ IDE) Hitachi HDS721616PLA380 ATA Device +++++ --- User --- [MBR] 681add1742775c3b051c7c13f50a8958 [BSP] 855b5aaea752edba6aa8805dcb802c62: Windows Vista MBR Code Partition table: 0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 157064 MB User = LL1 ... OK! User = LL2 ... OK! Finished: << RKreport[0]_D_03312014_195454.txt >> RKreport[0]_D_03312014_182539.txt;RKreport[0]_S_03312014_181116.txt;RKreport[0]_S_03312014_195436.txt

idnoder · Answer

now the third one, thank you, Jacques -- jacquesRogueKiller V8.8.15 [Mar 27 2014] by Adlice Software email: https://www.adlice.com/contact/ Feedback: https://forum.adlice.com/ Website: http://www.surlatoile.org/RogueKiller/ Blog: https://www.adlice.com/ Operating system: Windows Vista (6.0.6002 Service Pack 2) 32 bit version Boot mode: Normal User: Jacques [Admin rights] Mode: Proxy RAZ -- Date: 03/31/2014 19:55:02 | ARK || FAK || MBR | ¤¤¤ Malicious processes: 0 ¤¤¤ ¤¤¤ Registry entries: 2 ¤¤¤ [PROXY IE][PUM] HKCU\[...]\Internet Settings: ProxyServer (hxxp=127.0.0.1:49167;hxxps=127.0.0.1:49167; [Country: (Private Address) (XX), City: (Private Address)]) -> DELETED [PROXY IE][PUM] HKCU\[...]\Internet Settings: ProxyEnable (1) -> REPLACED (0) ¤¤¤ Web browsers: 0 ¤¤¤ ¤¤¤ Driver: [LOAD] ¤¤¤ ¤¤¤ External hives: ¤¤¤ ¤¤¤ Infection: ¤¤¤ Finished: << RKreport[0]_PR_03312014_195500.txt >> RKreport[0]_D_03312014_182539.txt;RKreport[0]_D_03312014_195454.txt;RKreport[0]_S_03312014_181116.txt RKreport[0]_S_03312014_195436.txt

billmaxime · Answer

Hi Jacques,  let me know how the PC is doing  thanks  @+  -- the radiation level is higher at the job center than at Chernobyl

idnoder · Answer

Hello, I waited this morning to see how it worked. So, one minute to access the Orange portal, then it is a bit faster but still slow. I have new ads appearing right now (Groupon which I don't know!!) and Bubble Dock at startup. For the rest, I'll see today. I can no longer access Facebook even through YouTube. I removed Chrome to see if it worked better but with no results, I’ll be able to put it back. That's where I stand for now. This morning I have work to do in the workshop so I’ll check around noon how it’s working. Thank you, have a good day. Jacques  -- jacques

billmaxime · Answer

Hi Jacques,  please do this and post the report  the link to host/post the report >> https://www.cjoint.com/  the software to run on your PC >> http://www.sosvirus.net/canned-speech-shortcut-module-t613.html  thank you  see you  -- the radiation level is higher at the employment agency than at Chernobyl

idnoder · Answer

Good evening, I think the (Trojans have landed) my computer is no longer working, I have ads continuously, the more I clean it, the less it works, I contacted sosvirus and I'm waiting, but since it's a forum I don't see what they're going to do better!! Can you tell me if it's possible to fix this problem (a month ago my computer doctor told me it was dead) thank you for your reply, Jacques  -- jacques

billmaxime · Answer

Hi Jacques,  I contacted sosvirus and I'm waiting  Let me know if you're registered on the site, as I don't see the username you use on CCM  WARNING, you must not follow two disinfections simultaneously (risk of crashing the PC)  If you haven't followed any instructions on sosvirus yet, try running  Shortcut_Module in safe mode with network support  http://www.sosvirus.net/mode-sans-echec-canned-speech-mode-sans-echec-t1391.html  Awaiting your response  Thank you  @+  -- The radiation level is higher at the employment agency than at Chernobyl.

idnoder · Answer

Hi, I didn't use sosvirus for disinfection, I'm waiting for a response, but I just went into (safe mode without results) I found a screen with my icons but nothing worked so I went back to normal mode and everything went back to normal, so for now no disinfection, well I’m not working on my computer, you know! At 77 years old it's retirement, but the computer passes the time, have a good evening, Jacques  -- jacques

billmaxime · Answer

Hi Jacques,   let me know if you managed to execute Shortcut_Module on your PC   thanks   @+   --  the radiation level is higher at the unemployment office than in Chernobyl

idnoder · Answer

Good evening, no, I wasn't able to succeed, and as on sosvirus, el desaparecido asked me to download OTL from Old Timer (which I couldn't place on my desktop, but I did the analysis that I sent) (I will try once again to put it on the desktop). It's not easy because when I'm on a page, ads pop up on their own, which is very annoying. My identification on sosvirus is (lenuleninformatique) and that's true. Have a good evening, Jacques.

idnoder · Answer

Hello lilidurhone, for me it's not resolved at all, on the contrary I have two additional viruses, and there (sosvirus) they don't do much or I don't know how to get it to work!! I don't know what to do anymore because I switch pages and I get an ad, if I try to access a site IE does not respond, how can I do a complete cleanup once and for all? Have a nice day Jacques  -- jacques

Trojan horse

40 réponses

Windows spotlight is not working.

Samsung j5 unable to answer

Scam of the suvedene highway

Remove 360 antivirus

My pc's screen is flickering.

Fujitsu siemens laptop won't start anymore

Wearline: what do you think?

Eko tank smartwatch

Ibiza sound reviews

Only one of my iphone headphones works. what to do?