Boxore Client [Résolu]

Réponse 1 / 25

cabrier Messages postés 5591 Date d'inscription Statut Contributeur sécurité Dernière intervention 702

jacobus, bonjour,

Utilise AdwCleaner (développé par Xplode) qui est un outil de désinfection spécifique aux logiciels publicitaires :

*Il est à télécharger ICI pour obtenir la dernière version.

* Une fois téléchargé et lancé (clic droit : "Exécuter en tant qu'administrateur") clique sur [Scanner], laisse l'outil travailler.

* Lorsque le scan est terminé, dans les différents onglets apparaissent les infections trouvées.

* Clique sur l'onglet [Nettoyer], tous les éléments infectieux trouvés vont être supprimés.

* Clique sur [Rapport], le rapport apparait, tu peux le copier/coller dans ta prochaine réponse.
Sinon héberge le sur :
cijoint ou pjoint ou Up2Share et transmet moi le lien obtenu.

-----------------------------------------
* Une fois AdwCleaner utilisé et posté son rapport :

Utilise cet autre outil pour vérification :Télécharge: Junkware Removal Tool à partir ce lien : JRT

!!! Ne clique pas sur Download !!! , attends simplement que la fenêtre de téléchargement arrive pour confirmation

* Enregistre ce fichier sur le bureau et ferme tous tes navigateurs

Sous XP, double-clique sur l'icône et presse une touche lorsque cela te sera demandé.
Sous Vista/7/8, clic droit et Exécuter en temps qu'administrateur.

* NB: Le bureau disparaitra un instant, c'est normal.
* Laisse le programme travailler ne touche à rien

* Poste le rapport généré à la fin de l'analyse.

Tuto : http://hackinginterdit.blogspot.fr/2013/02/junkware-removal-tool.html

A+

Réponse 2 / 25

jacobus13 Messages postés 111 Date d'inscription Statut Membre Dernière intervention 35

Merci cabrier, voici le rapport.
@ +

# AdwCleaner v3.103 - Rapport créé le 22/04/2014 à 10:10:39
# Mis à jour le 21/04/2014 par Xplode
# Système d'exploitation : Windows 7 Ultimate (32 bits)
# Nom d'utilisateur : Bill - BILL-PC
# Exécuté depuis : C:\Users\Bill\Downloads\AdwCleaner.exe
# Option : Nettoyer

***** [ Services ] *****

***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\Users\Bill\AppData\Local\Software

***** [ Raccourcis ] *****

***** [ Registre ] *****

***** [ Navigateurs ] *****

-\\ Internet Explorer v9.0.8112.16533

-\\ Mozilla Firefox v28.0 (fr)

[ Fichier : C:\Users\Bill\AppData\Roaming\Mozilla\Firefox\Profiles\0n8xa47t.default\prefs.js ]

*************************

AdwCleaner[R0].txt - [17430 octets] - [20/04/2014 20:05:16]
AdwCleaner[R19].txt - [1046 octets] - [11/11/2013 22:17:42]
AdwCleaner[R1].txt - [10581 octets] - [21/04/2014 20:18:41]
AdwCleaner[R20].txt - [1095 octets] - [14/11/2013 18:17:48]
AdwCleaner[R21].txt - [4155 octets] - [15/11/2013 15:44:31]
AdwCleaner[R22].txt - [1445 octets] - [16/11/2013 17:36:53]
AdwCleaner[R23].txt - [1401 octets] - [16/11/2013 18:53:32]
AdwCleaner[R24].txt - [2962 octets] - [18/11/2013 14:59:39]
AdwCleaner[R25].txt - [1584 octets] - [20/11/2013 14:17:42]
AdwCleaner[R26].txt - [2176 octets] - [21/11/2013 18:58:47]
AdwCleaner[R27].txt - [1767 octets] - [23/11/2013 20:51:30]
AdwCleaner[R28].txt - [2098 octets] - [26/11/2013 18:10:43]
AdwCleaner[R29].txt - [1950 octets] - [27/11/2013 10:43:55]
AdwCleaner[R2].txt - [5310 octets] - [22/04/2014 08:44:37]
AdwCleaner[R30].txt - [2011 octets] - [27/11/2013 10:45:20]
AdwCleaner[R31].txt - [2133 octets] - [27/11/2013 11:15:54]
AdwCleaner[R32].txt - [3531 octets] - [27/11/2013 20:23:28]
AdwCleaner[R33].txt - [2785 octets] - [05/12/2013 17:01:19]
AdwCleaner[R34].txt - [2499 octets] - [06/12/2013 20:34:53]
AdwCleaner[R35].txt - [2560 octets] - [08/12/2013 04:11:39]
AdwCleaner[R36].txt - [14166 octets] - [08/12/2013 14:07:39]
AdwCleaner[R37].txt - [2649 octets] - [11/12/2013 10:59:54]
AdwCleaner[R38].txt - [2771 octets] - [12/12/2013 12:03:58]
AdwCleaner[R39].txt - [2832 octets] - [12/12/2013 12:08:04]
AdwCleaner[R3].txt - [5417 octets] - [22/04/2014 10:08:35]
AdwCleaner[R40].txt - [2932 octets] - [16/12/2013 19:08:08]
AdwCleaner[R41].txt - [3015 octets] - [17/12/2013 20:06:54]
AdwCleaner[R42].txt - [3076 octets] - [18/12/2013 18:57:22]
AdwCleaner[R43].txt - [3218 octets] - [27/12/2013 12:55:26]
AdwCleaner[R44].txt - [3257 octets] - [27/12/2013 19:21:59]
AdwCleaner[R45].txt - [3318 octets] - [28/12/2013 13:28:22]
AdwCleaner[R46].txt - [3379 octets] - [28/12/2013 20:14:58]
AdwCleaner[R47].txt - [3523 octets] - [30/12/2013 20:18:41]
AdwCleaner[R48].txt - [3562 octets] - [31/12/2013 21:58:19]
AdwCleaner[R49].txt - [3623 octets] - [02/01/2014 10:07:34]
AdwCleaner[R50].txt - [3684 octets] - [08/01/2014 16:28:29]
AdwCleaner[R51].txt - [3783 octets] - [08/01/2014 19:47:34]
AdwCleaner[R52].txt - [3867 octets] - [09/01/2014 12:48:29]
AdwCleaner[R53].txt - [3989 octets] - [17/01/2014 10:51:33]
AdwCleaner[R54].txt - [4050 octets] - [26/01/2014 19:08:01]
AdwCleaner[R55].txt - [4172 octets] - [13/02/2014 19:46:48]
AdwCleaner[R56].txt - [4233 octets] - [15/02/2014 20:43:27]
AdwCleaner[R57].txt - [4296 octets] - [19/02/2014 17:26:17]
AdwCleaner[R58].txt - [4357 octets] - [19/02/2014 19:44:46]
AdwCleaner[R59].txt - [4479 octets] - [24/02/2014 21:28:32]
AdwCleaner[R60].txt - [4540 octets] - [27/02/2014 15:43:15]
AdwCleaner[R61].txt - [4662 octets] - [22/03/2014 20:34:52]
AdwCleaner[R62].txt - [4818 octets] - [05/04/2014 11:08:04]
AdwCleaner[R63].txt - [4843 octets] - [07/04/2014 12:53:20]
AdwCleaner[R64].txt - [4904 octets] - [07/04/2014 12:56:08]
AdwCleaner[R65].txt - [10144 octets] - [13/04/2014 10:52:45]
AdwCleaner[S0].txt - [16961 octets] - [20/04/2014 20:06:29]
AdwCleaner[S13].txt - [4094 octets] - [15/11/2013 15:46:19]
AdwCleaner[S14].txt - [1509 octets] - [16/11/2013 17:38:44]
AdwCleaner[S15].txt - [1563 octets] - [19/11/2013 23:32:26]
AdwCleaner[S16].txt - [2038 octets] - [21/11/2013 19:01:02]
AdwCleaner[S17].txt - [2162 octets] - [26/11/2013 18:12:03]
AdwCleaner[S18].txt - [2073 octets] - [27/11/2013 10:46:14]
AdwCleaner[S19].txt - [2195 octets] - [27/11/2013 11:16:59]
AdwCleaner[S1].txt - [10782 octets] - [21/04/2014 20:19:45]
AdwCleaner[S20].txt - [3015 octets] - [27/11/2013 20:24:58]
AdwCleaner[S21].txt - [2851 octets] - [05/12/2013 17:03:01]
AdwCleaner[S22].txt - [2622 octets] - [08/12/2013 04:13:06]
AdwCleaner[S23].txt - [14087 octets] - [08/12/2013 14:09:24]
AdwCleaner[S24].txt - [2711 octets] - [11/12/2013 11:01:56]
AdwCleaner[S25].txt - [2995 octets] - [16/12/2013 19:10:37]
AdwCleaner[S26].txt - [3283 octets] - [27/12/2013 12:56:53]
AdwCleaner[S27].txt - [3588 octets] - [30/12/2013 20:20:05]
AdwCleaner[S28].txt - [3846 octets] - [08/01/2014 19:49:41]
AdwCleaner[S29].txt - [3929 octets] - [09/01/2014 12:50:14]
AdwCleaner[S2].txt - [5374 octets] - [22/04/2014 08:47:12]
AdwCleaner[S30].txt - [4112 octets] - [26/01/2014 19:09:25]
AdwCleaner[S31].txt - [4419 octets] - [19/02/2014 19:46:04]
AdwCleaner[S32].txt - [4602 octets] - [27/02/2014 15:44:28]
AdwCleaner[S33].txt - [4883 octets] - [05/04/2014 11:10:18]
AdwCleaner[S34].txt - [8535 octets] - [13/04/2014 10:53:53]
AdwCleaner[S3].txt - [5341 octets] - [22/04/2014 10:10:39]

########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [5401 octets] ##########

Réponse 3 / 25

jacobus13 Messages postés 111 Date d'inscription Statut Membre Dernière intervention 35

cabrier voici l'autre rapport.
@ ++

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows 7 Ultimate x86
Ran by Bill on 22/04/2014 at 10:33:04,18
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\1c875dde39636004ca8cdaec335b4160

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\pc1data"
Successfully deleted: [Empty Folder] C:\Users\Bill\appdata\local\{7984FEB9-21FC-4E02-8243-5A83A0627A16}

~~~ FireFox

Emptied folder: C:\Users\Bill\AppData\Roaming\mozilla\firefox\profiles\0n8xa47t.default\minidumps [1 files]

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 22/04/2014 at 10:39:01,95
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Réponse 4 / 25

cabrier Messages postés 5591 Date d'inscription Statut Contributeur sécurité Dernière intervention 702

Rien là dedans,

On fait un scan plus approfondi !

* Télécharge http://general-changelog-team.fr/fr/downloads/viewdownload/49-outils-de-nicolas-coolman/124-zhpdiag (de Nicolas Coolman) sur ton bureau,
/!\Il est très important de l'enregistrer sur le bureau / !\
* Une fois le téléchargement achevé, double clique sur ZHPDiag.exe et laisse se dérouler l'installation
/!\L'outil a créé 2 icônes ZHPDiag , ZHPFix /!\
/!\Utilisateurs de Vista et Windows 7 : Clic droit sur le logo de ZHPDiag.exe, « exécuter en tant qu'Administrateur » /!\
* A l'ouverture le programme te proposes plusieurs options, cliques sur "Complet" et laisse travailler l'outil.

* ZHPDiag va alors analyser le contenu de ton ordinateur à la recherche d'informations sur ton système d'exploitation, la base de registre... Patiente jusqu'à la fin de l'analyse. Il peut arriver que le logiciel donne l'impression d'être bloqué ; patiente !
* Laisse l'outil travailler, il peut être assez long.
* Le rapport s'ouvre dans le bloc note, ferme le car il est aussi enregistré sur ton bureau sous le nom ZHPDiag.txt et dans le dossier où est installé ZHPDiag (en général C:\ZHP\).
* Transmets moi le lien du fichier par l'intermédiaire d'un dépôt de fichiers.
* Rappel des dépôts : cijoint ou pjoint

PS Voici un tuto pour t'aider si besoin !
http://nicolascoolman.webs.com/tutorials.htm

A+

Réponse 5 / 25

jacobus13 Messages postés 111 Date d'inscription Statut Membre Dernière intervention 35

Voici le résultat,
@ +
https://pjjoint.malekal.com/files.php?id=ZHPDiag_20140422_d136i6r5x12

Réponse 6 / 25

cabrier Messages postés 5591 Date d'inscription Statut Contributeur sécurité Dernière intervention 702

jacobus,

J'examine ton rapport et je reviens, ne t'impatiente pas !

A+

Réponse 7 / 25

jacobus13 Messages postés 111 Date d'inscription Statut Membre Dernière intervention 35

Ok, merci

Réponse 8 / 25

cabrier Messages postés 5591 Date d'inscription Statut Contributeur sécurité Dernière intervention 702

jacobus,

Tu es infecté essentiellement par des Rogues !

Ceci est une version non officielle de windows.

Je peux nettoyer les logiciels publicitaires mais pas les fichiers système de windows car ils ont été modifiés et les remettre en état risque de "planter" ta machine.

On continue ?

A+
--------Contributeur Sécurité---------
Heureux ceux qui peuvent donner sans s'en souvenir et prendre sans oublier !

Réponse 9 / 25

jacobus13 Messages postés 111 Date d'inscription Statut Membre Dernière intervention 35

J'ai pourtant la clé d'activation de windows 7.
On arrête là pour l'instant.
Merci cabrier.
Je vais finir d'installer mes autres programmes qui étaient sur xp.
@ +

Réponse 10 / 25

cabrier Messages postés 5591 Date d'inscription Statut Contributeur sécurité Dernière intervention 702

jacobus,

Je t'engage tout de même à virer les Rogues !

Télécharge sur le bureau Roguekiller (by tigzy)
Choisis la version correspondant à ta machine (x64 si 64 bits)
* Quitte tous les programmes en cours
* Lance RogueKiller.exe.
* Attends que le Prescan ait fini ...
Une fenêtre apparait sur l'accord de licence "Accepte"
* Clique sur Scan.

Clique sur Rapport et copie/colle le contenu du notepad

(le rapport est également sur le bureau)

* Si le programme a été bloqué, ne pas hésiter à essayer plusieurs fois, ou renomme le en winlogon.exe

Et si ça ne marche toujours pas , lance le en mode sans échec avec prise en charge du réseau.

Plus d'info sur RogueKiller : ICI

A+

Réponse 11 / 25

jacobus13 Messages postés 111 Date d'inscription Statut Membre Dernière intervention 35

Bonjour cabrier,

Voici le rapport de RogueKiller.
Hier j'ai lancé Malwarebyte et il a mis en quarantaine un fichier "Adware.Boxore" , mais dans la fenêtre "désinstaller un programme il y a toujours "Boxore Client", et impossible à supprimer.

RogueKiller V8.8.15 [Mar 27 2014] par Adlice Software
mail : https://www.adlice.com/contact/
Remontees : https://forum.adlice.com/
Site Web : http://www.surlatoile.org/RogueKiller/
Blog : https://www.adlice.com/

Systeme d'exploitation : Windows 7 (6.1.7600 ) 32 bits version
Demarrage : Mode normal
Utilisateur : Bill [Droits d'admin]
Mode : Recherche -- Date : 04/23/2014 09:06:53
| ARK || FAK || MBR |

¤¤¤ Processus malicieux : 0 ¤¤¤

¤¤¤ Entrees de registre : 5 ¤¤¤
[IFEO] HKLM\[...]\DatamngrCoordinator.exe : Debugger (tasklist.exe [7]) -> TROUVÉ
[HJ POL][PUM] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> TROUVÉ
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowRecentDocs (0) -> TROUVÉ
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> TROUVÉ
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> TROUVÉ

¤¤¤ Tâches planifiées : 0 ¤¤¤

¤¤¤ Entrées Startup : 0 ¤¤¤

¤¤¤ Navigateurs web : 0 ¤¤¤

¤¤¤ Addons navigateur : 0 ¤¤¤

¤¤¤ Fichiers / Dossiers particuliers: ¤¤¤

¤¤¤ Driver : [CHARGE] ¤¤¤
[Address] EAT @explorer.exe (BeginBufferedAnimation) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A209AE)
[Address] EAT @explorer.exe (BeginBufferedPaint) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A149A1)
[Address] EAT @explorer.exe (BeginPanningFeedback) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A40731)
[Address] EAT @explorer.exe (BufferedPaintClear) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A16395)
[Address] EAT @explorer.exe (BufferedPaintInit) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1940E)
[Address] EAT @explorer.exe (BufferedPaintRenderAnimation) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A208ED)
[Address] EAT @explorer.exe (BufferedPaintSetAlpha) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A2E6B3)
[Address] EAT @explorer.exe (BufferedPaintStopAllAnimations) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A2D395)
[Address] EAT @explorer.exe (BufferedPaintUnInit) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A194AB)
[Address] EAT @explorer.exe (CloseThemeData) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A16A18)
[Address] EAT @explorer.exe (DrawThemeBackground) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A13982)
[Address] EAT @explorer.exe (DrawThemeBackgroundEx) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A2D9DA)
[Address] EAT @explorer.exe (DrawThemeEdge) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A33B52)
[Address] EAT @explorer.exe (DrawThemeIcon) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A435E7)
[Address] EAT @explorer.exe (DrawThemeParentBackground) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A153E5)
[Address] EAT @explorer.exe (DrawThemeParentBackgroundEx) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A151BF)
[Address] EAT @explorer.exe (DrawThemeText) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A14EA1)
[Address] EAT @explorer.exe (DrawThemeTextEx) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A163E6)
[Address] EAT @explorer.exe (EnableThemeDialogTexture) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1FCAF)
[Address] EAT @explorer.exe (EnableTheming) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A42FEB)
[Address] EAT @explorer.exe (EndBufferedAnimation) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A13F9A)
[Address] EAT @explorer.exe (EndBufferedPaint) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A13F9A)
[Address] EAT @explorer.exe (EndPanningFeedback) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A406CC)
[Address] EAT @explorer.exe (GetBufferedPaintBits) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A14BAF)
[Address] EAT @explorer.exe (GetBufferedPaintDC) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A204BC)
[Address] EAT @explorer.exe (GetBufferedPaintTargetDC) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A20473)
[Address] EAT @explorer.exe (GetBufferedPaintTargetRect) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A42E7F)
[Address] EAT @explorer.exe (GetCurrentThemeName) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A205DD)
[Address] EAT @explorer.exe (GetThemeAppProperties) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A20FB1)
[Address] EAT @explorer.exe (GetThemeBackgroundContentRect) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1CD2E)
[Address] EAT @explorer.exe (GetThemeBackgroundExtent) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1F8BF)
[Address] EAT @explorer.exe (GetThemeBackgroundRegion) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A2165D)
[Address] EAT @explorer.exe (GetThemeBitmap) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1BF93)
[Address] EAT @explorer.exe (GetThemeBool) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A17C1F)
[Address] EAT @explorer.exe (GetThemeColor) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1616C)
[Address] EAT @explorer.exe (GetThemeDocumentationProperty) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A42932)
[Address] EAT @explorer.exe (GetThemeEnumValue) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1616C)
[Address] EAT @explorer.exe (GetThemeFilename) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A42412)
[Address] EAT @explorer.exe (GetThemeFont) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1FF21)
[Address] EAT @explorer.exe (GetThemeInt) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1616C)
[Address] EAT @explorer.exe (GetThemeIntList) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A423B1)
[Address] EAT @explorer.exe (GetThemeMargins) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A186E9)
[Address] EAT @explorer.exe (GetThemeMetric) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A206E2)
[Address] EAT @explorer.exe (GetThemePartSize) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1CDB1)
[Address] EAT @explorer.exe (GetThemePosition) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A42350)
[Address] EAT @explorer.exe (GetThemePropertyOrigin) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A33FBB)
[Address] EAT @explorer.exe (GetThemeRect) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A23611)
[Address] EAT @explorer.exe (GetThemeStream) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A239D9)
[Address] EAT @explorer.exe (GetThemeString) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A422E4)
[Address] EAT @explorer.exe (GetThemeSysBool) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A43172)
[Address] EAT @explorer.exe (GetThemeSysColor) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A33274)
[Address] EAT @explorer.exe (GetThemeSysColorBrush) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A4301E)
[Address] EAT @explorer.exe (GetThemeSysFont) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A429C4)
[Address] EAT @explorer.exe (GetThemeSysInt) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A42BD3)
[Address] EAT @explorer.exe (GetThemeSysSize) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A4320B)
[Address] EAT @explorer.exe (GetThemeSysString) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A42B3F)
[Address] EAT @explorer.exe (GetThemeTextExtent) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A12D57)
[Address] EAT @explorer.exe (GetThemeTextMetrics) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1F992)
[Address] EAT @explorer.exe (GetThemeTransitionDuration) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A21081)
[Address] EAT @explorer.exe (GetWindowTheme) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1DF46)
[Address] EAT @explorer.exe (HitTestThemeBackground) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A23CE3)
[Address] EAT @explorer.exe (IsAppThemed) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1F869)
[Address] EAT @explorer.exe (IsCompositionActive) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A12E9A)
[Address] EAT @explorer.exe (IsThemeActive) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1F785)
[Address] EAT @explorer.exe (IsThemeBackgroundPartiallyTransparent) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A160AB)
[Address] EAT @explorer.exe (IsThemeDialogTextureEnabled) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A4312B)
[Address] EAT @explorer.exe (IsThemePartDefined) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A185B4)
[Address] EAT @explorer.exe (OpenThemeData) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A173D2)
[Address] EAT @explorer.exe (OpenThemeDataEx) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A33D43)
[Address] EAT @explorer.exe (SetThemeAppProperties) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A43296)
[Address] EAT @explorer.exe (SetWindowTheme) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A20134)
[Address] EAT @explorer.exe (SetWindowThemeAttribute) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A2CFE6)
[Address] EAT @explorer.exe (ThemeInitApiHook) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1B176)
[Address] EAT @explorer.exe (UpdatePanningFeedback) : PROPSYS.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A4068D)
[Address] EAT @explorer.exe (WerAddExcludedApplication) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC19CDA)
[Address] EAT @explorer.exe (WerRemoveExcludedApplication) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC19E1E)
[Address] EAT @explorer.exe (WerReportAddDump) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC00805)
[Address] EAT @explorer.exe (WerReportAddFile) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC19C25)
[Address] EAT @explorer.exe (WerReportCloseHandle) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BBFA882)
[Address] EAT @explorer.exe (WerReportCreate) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC00B51)
[Address] EAT @explorer.exe (WerReportSetParameter) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BBFE726)
[Address] EAT @explorer.exe (WerReportSetUIOption) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC0073D)
[Address] EAT @explorer.exe (WerReportSubmit) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BBFB761)
[Address] EAT @explorer.exe (WerSysprepCleanup) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC19C4A)
[Address] EAT @explorer.exe (WerSysprepGeneralize) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC19F4A)
[Address] EAT @explorer.exe (WerSysprepSpecialize) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC19FCA)
[Address] EAT @explorer.exe (WerUnattendedSetup) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC19FDE)
[Address] EAT @explorer.exe (WerpAddAppCompatData) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1C3A4)
[Address] EAT @explorer.exe (WerpAddFile) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1AC8A)
[Address] EAT @explorer.exe (WerpAddMemoryBlock) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1AD24)
[Address] EAT @explorer.exe (WerpAddRegisteredDataToReport) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC00E70)
[Address] EAT @explorer.exe (WerpAddSecondaryParameter) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1B571)
[Address] EAT @explorer.exe (WerpAddTextToReport) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1AEF6)
[Address] EAT @explorer.exe (WerpArchiveReport) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1CCFD)
[Address] EAT @explorer.exe (WerpCancelResponseDownload) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1A6AE)
[Address] EAT @explorer.exe (WerpCancelUpload) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1B30A)
[Address] EAT @explorer.exe (WerpCloseStore) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BBF7843)
[Address] EAT @explorer.exe (WerpCreateIntegratorReportId) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC00E01)
[Address] EAT @explorer.exe (WerpCreateMachineStore) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC0AAF4)
[Address] EAT @explorer.exe (WerpDeleteReport) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1A4C7)
[Address] EAT @explorer.exe (WerpDestroyWerString) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC087A8)
[Address] EAT @explorer.exe (WerpDownloadResponse) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC081D1)
[Address] EAT @explorer.exe (WerpDownloadResponseTemplate) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1C2F9)
[Address] EAT @explorer.exe (WerpEnumerateStoreNext) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BBF7A2B)
[Address] EAT @explorer.exe (WerpEnumerateStoreStart) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BBF79EF)
[Address] EAT @explorer.exe (WerpExtractReportFiles) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1B4E3)
[Address] EAT @explorer.exe (WerpFreeString) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC03951)
[Address] EAT @explorer.exe (WerpGetBucketId) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1A821)
[Address] EAT @explorer.exe (WerpGetBucketString) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC09EF9)
[Address] EAT @explorer.exe (WerpGetDynamicParameter) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1AE2A)
[Address] EAT @explorer.exe (WerpGetEventType) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1A51D)
[Address] EAT @explorer.exe (WerpGetFileByIndex) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1ABB6)
[Address] EAT @explorer.exe (WerpGetFilePathByIndex) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1AA6F)
[Address] EAT @explorer.exe (WerpGetIntegratorReportId) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1BB77)
[Address] EAT @explorer.exe (WerpGetLoadedModuleByIndex) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1AB24)
[Address] EAT @explorer.exe (WerpGetNumFiles) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1A97B)
[Address] EAT @explorer.exe (WerpGetNumLoadedModules) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1AA0F)
[Address] EAT @explorer.exe (WerpGetNumSecParams) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1A88A)
[Address] EAT @explorer.exe (WerpGetNumSigParams) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1A57F)
[Address] EAT @explorer.exe (WerpGetReportConsent) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1B1C5)
[Address] EAT @explorer.exe (WerpGetReportFinalConsent) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1B2A8)
[Address] EAT @explorer.exe (WerpGetReportFlags) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1B9D3)
[Address] EAT @explorer.exe (WerpGetReportInformation) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1AFEC)
[Address] EAT @explorer.exe (WerpGetReportSettings) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1BAE7)
[Address] EAT @explorer.exe (WerpGetReportTime) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1A707)
[Address] EAT @explorer.exe (WerpGetReportType) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1B15C)
[Address] EAT @explorer.exe (WerpGetResponseId) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC097E7)
[Address] EAT @explorer.exe (WerpGetResponseUrl) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC09E85)
[Address] EAT @explorer.exe (WerpGetSecParamByIndex) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1A8E7)
[Address] EAT @explorer.exe (WerpGetSigParamByIndex) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1A5E1)
[Address] EAT @explorer.exe (WerpGetStoreLocation) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC04A43)
[Address] EAT @explorer.exe (WerpGetStorePath) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BBF6AAF)
[Address] EAT @explorer.exe (WerpGetStoreType) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1B0BF)
[Address] EAT @explorer.exe (WerpGetTextFromReport) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1AF8E)
[Address] EAT @explorer.exe (WerpGetUIParamByIndex) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1A649)
[Address] EAT @explorer.exe (WerpGetUploadTime) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1A765)
[Address] EAT @explorer.exe (WerpGetWerStringData) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC08772)
[Address] EAT @explorer.exe (WerpGetWow64Process) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1BD72)
[Address] EAT @explorer.exe (WerpIsDisabled) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BBF69CD)
[Address] EAT @explorer.exe (WerpIsTransportAvailable) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC0060A)
[Address] EAT @explorer.exe (WerpLaunchResponse) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1BDD0)
[Address] EAT @explorer.exe (WerpLoadReport) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC09F82)
[Address] EAT @explorer.exe (WerpOpenMachineArchive) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC08790)
[Address] EAT @explorer.exe (WerpOpenMachineQueue) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BBF78AD)
[Address] EAT @explorer.exe (WerpOpenUserArchive) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BBFAE39)
[Address] EAT @explorer.exe (WerpOpenUserQueue) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BBF7924)
[Address] EAT @explorer.exe (WerpPromtUser) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1B1B5)
[Address] EAT @explorer.exe (WerpReportCancel) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1BA5D)
[Address] EAT @explorer.exe (WerpRestartApplication) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1C74B)
[Address] EAT @explorer.exe (WerpSetCallBack) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC00D4D)
[Address] EAT @explorer.exe (WerpSetDefaultUserConsent) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1BBDF)
[Address] EAT @explorer.exe (WerpSetDynamicParameter) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BBFD56D)
[Address] EAT @explorer.exe (WerpSetEventName) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1B92D)
[Address] EAT @explorer.exe (WerpSetIntegratorReportId) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC00D99)
[Address] EAT @explorer.exe (WerpSetReportFlags) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1B97F)
[Address] EAT @explorer.exe (WerpSetReportInformation) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1B047)
[Address] EAT @explorer.exe (WerpSetReportTime) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1A7C3)
[Address] EAT @explorer.exe (WerpSetReportUploadContextToken) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1ADA8)
[Address] EAT @explorer.exe (WerpShowUpsellUI) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1BA4D)
[Address] EAT @explorer.exe (WerpSubmitReportFromStore) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1BFD8)
[Address] EAT @explorer.exe (WerpSvcReportFromMachineQueue) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1B6E5)
[Address] EAT @explorer.exe (WerpUpdateReportResponse) : shdocvw.dll -> HOOKED (C:\Windows\System32\wer.dll @ 0x6BC1BE21)
[Address] EAT @firefox.exe (BeginBufferedAnimation) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A209AE)
[Address] EAT @firefox.exe (BeginBufferedPaint) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A149A1)
[Address] EAT @firefox.exe (BeginPanningFeedback) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A40731)
[Address] EAT @firefox.exe (BufferedPaintClear) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A16395)
[Address] EAT @firefox.exe (BufferedPaintInit) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1940E)
[Address] EAT @firefox.exe (BufferedPaintRenderAnimation) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A208ED)
[Address] EAT @firefox.exe (BufferedPaintSetAlpha) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A2E6B3)
[Address] EAT @firefox.exe (BufferedPaintStopAllAnimations) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A2D395)
[Address] EAT @firefox.exe (BufferedPaintUnInit) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A194AB)
[Address] EAT @firefox.exe (CloseThemeData) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A16A18)
[Address] EAT @firefox.exe (DrawThemeBackground) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A13982)
[Address] EAT @firefox.exe (DrawThemeBackgroundEx) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A2D9DA)
[Address] EAT @firefox.exe (DrawThemeEdge) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A33B52)
[Address] EAT @firefox.exe (DrawThemeIcon) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A435E7)
[Address] EAT @firefox.exe (DrawThemeParentBackground) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A153E5)
[Address] EAT @firefox.exe (DrawThemeParentBackgroundEx) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A151BF)
[Address] EAT @firefox.exe (DrawThemeText) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A14EA1)
[Address] EAT @firefox.exe (DrawThemeTextEx) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A163E6)
[Address] EAT @firefox.exe (EnableThemeDialogTexture) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1FCAF)
[Address] EAT @firefox.exe (EnableTheming) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A42FEB)
[Address] EAT @firefox.exe (EndBufferedAnimation) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A13F9A)
[Address] EAT @firefox.exe (EndBufferedPaint) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A13F9A)
[Address] EAT @firefox.exe (EndPanningFeedback) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A406CC)
[Address] EAT @firefox.exe (GetBufferedPaintBits) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A14BAF)
[Address] EAT @firefox.exe (GetBufferedPaintDC) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A204BC)
[Address] EAT @firefox.exe (GetBufferedPaintTargetDC) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A20473)
[Address] EAT @firefox.exe (GetBufferedPaintTargetRect) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A42E7F)
[Address] EAT @firefox.exe (GetCurrentThemeName) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A205DD)
[Address] EAT @firefox.exe (GetThemeAppProperties) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A20FB1)
[Address] EAT @firefox.exe (GetThemeBackgroundContentRect) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1CD2E)
[Address] EAT @firefox.exe (GetThemeBackgroundExtent) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1F8BF)
[Address] EAT @firefox.exe (GetThemeBackgroundRegion) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A2165D)
[Address] EAT @firefox.exe (GetThemeBitmap) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1BF93)
[Address] EAT @firefox.exe (GetThemeBool) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A17C1F)
[Address] EAT @firefox.exe (GetThemeColor) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1616C)
[Address] EAT @firefox.exe (GetThemeDocumentationProperty) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A42932)
[Address] EAT @firefox.exe (GetThemeEnumValue) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1616C)
[Address] EAT @firefox.exe (GetThemeFilename) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A42412)
[Address] EAT @firefox.exe (GetThemeFont) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1FF21)
[Address] EAT @firefox.exe (GetThemeInt) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1616C)
[Address] EAT @firefox.exe (GetThemeIntList) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A423B1)
[Address] EAT @firefox.exe (GetThemeMargins) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A186E9)
[Address] EAT @firefox.exe (GetThemeMetric) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A206E2)
[Address] EAT @firefox.exe (GetThemePartSize) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1CDB1)
[Address] EAT @firefox.exe (GetThemePosition) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A42350)
[Address] EAT @firefox.exe (GetThemePropertyOrigin) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A33FBB)
[Address] EAT @firefox.exe (GetThemeRect) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A23611)
[Address] EAT @firefox.exe (GetThemeStream) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A239D9)
[Address] EAT @firefox.exe (GetThemeString) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A422E4)
[Address] EAT @firefox.exe (GetThemeSysBool) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A43172)
[Address] EAT @firefox.exe (GetThemeSysColor) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A33274)
[Address] EAT @firefox.exe (GetThemeSysColorBrush) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A4301E)
[Address] EAT @firefox.exe (GetThemeSysFont) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A429C4)
[Address] EAT @firefox.exe (GetThemeSysInt) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A42BD3)
[Address] EAT @firefox.exe (GetThemeSysSize) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A4320B)
[Address] EAT @firefox.exe (GetThemeSysString) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A42B3F)
[Address] EAT @firefox.exe (GetThemeTextExtent) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A12D57)
[Address] EAT @firefox.exe (GetThemeTextMetrics) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1F992)
[Address] EAT @firefox.exe (GetThemeTransitionDuration) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A21081)
[Address] EAT @firefox.exe (GetWindowTheme) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1DF46)
[Address] EAT @firefox.exe (HitTestThemeBackground) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A23CE3)
[Address] EAT @firefox.exe (IsAppThemed) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1F869)
[Address] EAT @firefox.exe (IsCompositionActive) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A12E9A)
[Address] EAT @firefox.exe (IsThemeActive) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1F785)
[Address] EAT @firefox.exe (IsThemeBackgroundPartiallyTransparent) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A160AB)
[Address] EAT @firefox.exe (IsThemeDialogTextureEnabled) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A4312B)
[Address] EAT @firefox.exe (IsThemePartDefined) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A185B4)
[Address] EAT @firefox.exe (OpenThemeData) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A173D2)
[Address] EAT @firefox.exe (OpenThemeDataEx) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A33D43)
[Address] EAT @firefox.exe (SetThemeAppProperties) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A43296)
[Address] EAT @firefox.exe (SetWindowTheme) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A20134)
[Address] EAT @firefox.exe (SetWindowThemeAttribute) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A2CFE6)
[Address] EAT @firefox.exe (ThemeInitApiHook) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A1B176)
[Address] EAT @firefox.exe (UpdatePanningFeedback) : propsys.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74A4068D)

¤¤¤ Ruches Externes: ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ Fichier HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts

¤¤¤ MBR Verif: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) WDC WD2500KS-00MJB0 ATA Device +++++
--- User ---
[MBR] ab502479f85705b9a5ba1895e2d6ecb9
[BSP] 537598ff449500827a56742bc576edde : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 99900 MB
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 204802048 | Size: 138473 MB
User = LL1 ... OK!
User = LL2 ... OK!

Termine : << RKreport[0]_S_04232014_090653.txt >>

Merci et @ +

Réponse 12 / 25

cabrier Messages postés 5591 Date d'inscription Statut Contributeur sécurité Dernière intervention 702

jacobus,

Bon, tu me refais un ZHPDiag de contrôle ?

A+

Réponse 13 / 25

jacobus13 Messages postés 111 Date d'inscription Statut Membre Dernière intervention 35

cabrier,
Voici le ZHPDiag.

https://pjjoint.malekal.com/files.php?id=ZHPDiag_20140423_x10e12l7n7i8

@+

Réponse 14 / 25

cabrier Messages postés 5591 Date d'inscription Statut Contributeur sécurité Dernière intervention 702

jacobus,

Je ne sais pas ce que tu as fait mais c'est pire qu'avant !!!!

Ces programmes ne sont pas à jour, désinstalle les et installe les dernières versions !
Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] --
Java 6 Update 20

Ce script va cibler certains éléments à supprimer :

* Ferme toutes tes applications en cours
* Sélectionne et copie toutes les lignes en gras et italique suivantes depuis et y compris Script ZHPFIX :

Script ZHPFix
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.mysearchdial.com =>Adware.MyWebSearch
[MD5.00000000000000000000000000000000] [APT] [PCRegistryShield_Popup] (...) -- C:\Program Files\PC Registry Shield\Splash.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [PCRegistryShield_Start] (...) -- C:\Program Files\PC Registry Shield\PcRegistryShield.exe (.not file.) [0]
O42 - Logiciel: Boxore Client - (.Boxore OU.) [HKLM] -- {0E365FDA-909F-4939-838A-261DD468D862}
O43 - CFD: 21/04/2014 - 19:39:02 - [] ----D C:\ProgramData\InstallMate
O43 - CFD: 23/04/2014 - 14:30:07 - [] ----D C:\Users\Bill\AppData\Roaming\0D0S1L2Z1P1B
O43 - CFD: 21/04/2014 - 21:01:04 - [0] ----D C:\Users\Bill\AppData\Roaming\PC Registry Shield
O50 - IFEO:Image File Execution Options - DatamngrCoordinator.exe - tasklist.exe
O61 - LFC: 21/04/2014 - 20:01:09 ---A- . (.The Software Group.) -- C:\Users\Bill\AppData\Local\Temp\BoxoreInstaller.exe [621168]
O61 - LFC: 21/04/2014 - 20:01:11 ---A- . (...) -- C:\Users\Bill\AppData\Local\Temp\n1192\Iminent_1712-b2fcad5e.exe [2167160]
O61 - LFC: 21/04/2014 - 20:01:11 ---A- . (...) -- C:\Users\Bill\AppData\Local\Temp\n1192\ViewPassword_1030-8002_P.exe [1406960]
O61 - LFC: 21/04/2014 - 20:01:11 ---A- . (.Boxore.) -- C:\Users\Bill\AppData\Local\Temp\n1192\OBBoxore_0912-99e29667.exe [740758]
O69 - SBI: SearchScopes [HKCU] {6D887829-E131-4E25-817F-9E8CC1232833} - (Search the web (Softonic)) - https://en.softonic.com
O69 - SBI: SearchScopes [HKCU] {C7DF525A-BE43-4C5C-89C7-CF1CE4FEA221} - (Mysearchdial) - http://start.mysearchdial.com
O90 - PUC: "ADF563E0F909939438A862D14D868D26" . (.Boxore Client.) -- C:\Windows\Installer\{0E365FDA-909F-4939-838A-261DD468D862}\boxore.ico
[MD5.0A23531B05648583E2675134C3F57419] [WIS][21/04/2014] (.The Software Group - Software Update Helper.) -- C:\Windows\Installer\b9078.msi [45056]
HKLM\SOFTWARE\Microsoft\Tracing\BrowseMark_RASAPI32 =>PUP.BrowseMark
HKLM\SOFTWARE\Microsoft\Tracing\BrowseMark_RASMANCS
HKLM\SOFTWARE\Microsoft\Tracing\BrowseMark_Setup_RASAPI32
HKLM\SOFTWARE\Microsoft\Tracing\BrowseMark_Setup_RASMANCS
HKLM\SOFTWARE\Microsoft\Tracing\IminentUninstall_RASAPI32
HKLM\SOFTWARE\Microsoft\Tracing\IminentUninstall_RASMANCS
HKLM\SOFTWARE\Microsoft\Tracing\Iminent_1712-b2fcad5e_RASAPI32
HKLM\SOFTWARE\Microsoft\Tracing\Iminent_1712-b2fcad5e_RASMANCS
HKLM\SOFTWARE\Microsoft\Tracing\MySearchDial_RASAPI32
HKLM\SOFTWARE\Microsoft\Tracing\MySearchDial_RASMANCS
HKLM\SOFTWARE\Microsoft\Tracing\MYSEAR~1_RASAPI32
HKLM\SOFTWARE\Microsoft\Tracing\MYSEAR~1_RASMANCS
HKLM\SOFTWARE\Microsoft\Tracing\PCCleaners_RASAPI32
HKLM\SOFTWARE\Microsoft\Tracing\PCCleaners_RASMANCS
HKLM\SOFTWARE\Microsoft\Tracing\PcRegistryShield_RASAPI32
HKLM\SOFTWARE\Microsoft\Tracing\PcRegistryShield_RASMANCS
HKLM\SOFTWARE\Microsoft\Tracing\updateBrowseMark_RASAPI32
HKLM\SOFTWARE\Microsoft\Tracing\updateBrowseMark_RASMANCS
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0E365FDA-909F-4939-838A-261DD468D862}]
[HKLM\SOFTWARE\SOFTWARE\UPDATE\CLIENTS\{5B54E9B6-D6C4-11E0-8E9D-92FB4824019B}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0124B064795BB484FA494FC7CF204C0C]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01F8E7504D2D2644AB1185234D2AD5AC]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\04CDEDFDD6EF25443B78A49D1FE5B4F2]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\058911EBC07BAAE42B102E3F4B0D070D]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\05CE306CC244D284D8D8090E404CD7D3]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\089527E77AD22E345B0066D226E44F46]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0BD0B15D6F0C2BF428B339B2D2D732C9]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0C1AAA506D92B2D44BD6FEF6CDFB71E1]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CAEC9AFF1716FF4DBACEED82F88C702]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0DD4444CBC682774C8E573CC73C5BC46]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0F68250201451D64EA71E91BA19832DC]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\126FFC99A0F214F41AE2D6C7A0FC09BF]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12F72EF2521177A4BB467FF35A881382]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\14873772FE3926F4195C9280D52D3486]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\14CF11D787D40BF458A3B5CB123733CE]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\163A5460E4FB18343B4C0B781B27E813]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1705977FCB2F22F4D8A9AB847C3FB9CE]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\19F133B6A0BA9B14493CE47703DF4CF3]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1C735C7A54F53574CA5AEA93D0D1F01E]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1CE2260B068265A488410CA171D93778]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DF1DD2609A2135479C19D72E41B64AA]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F72D9058D0863E4F8EB9FE6E980C385]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2217D47FAFB0AC547820199B3A026CFB]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22C5FD2815F5C7C4DB5F34F504BF9D96]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\26CF57FC035624845B9005289DFA1448]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2719056FB4CDD294887140382819FFF7]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2956CB28F45AAF746998774B3C9FF012]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2AD5E582EBA9ED54989A134D9250922B]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2BB672F8D2CA64146B6688371E75C986]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2EA450B923F9C4D4BBEB203648FBFFDC]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2ECA942EFDBD22B4EBB7FE3AB9EDDBDD]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2F055C41FDCA50A43BE42A96D243AD47]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2F4EE319A22490145BC4AEBC53B616CA]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\31E430E345D85D54CA33BC88AEFDB9D8]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\358096DA35E67B5479C2E880DF0C10C1]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37345F678B330594E9E4AC16908F78CF]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\38641BF101151094F86DD62B534BDEC4]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\38762340C83E6764B87807B67154F5A4]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3984BAF27BDA0DC4D8AED19FCB64BD7D]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3D82200490995CE42AB754DCD90AC44D]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3E9F0E4315A35D741873885200C6A454]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3F261C3E5AD56E54598E24B106813C7E]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\40D753328E77EE842A82631EED62CEC5]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\40FDEFB25883CF140B9B5F89CB7E2871]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\412179CD2126BB34CAE51691856A3D68]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43218F63264345445A73071C174FEEE8]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\439E8A02B7736CA488EECE28D7EE961A]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\456D8CED0106E1649AE5CBD8082AC705]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\459277E8A0EE8894F9D7F807DF90506A]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\463372A470C576443AE8802B1AC61D89]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\48F13E425ECD5F243A8A82AA2B65336D]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B6F3AD0EE690D2478C7D0528AADF8C4]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4BB9D431259E08A499469636383B9935]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4D3B0714BC82B2340AB18C031262573D]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4D5809867D6C1D14180511D3AAD03F79]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4DB13DED48DC4494C90DE800D31B086C]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\52C608FC2A61CCE479768A9719CABF7B]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\56861F0CE995D0E45835F5D31E105D54]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\58E44D082625757499995F9516313A9C]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5A52F724764B00747A637F14FBBBB830]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5B19839CB98BB914BA43E863BBE11B4E]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\613DCE6E373581A40B6C88D4F7C09096]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6292C097F9759424BAFA3E32CD3DD562]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\62C171206461ED34885A4AE095F4A7AC]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\63E9F48D88AA940498502E29E3747471]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\64747EAAAE2BA5141AEBCF4F6651A144]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6494B0B34076D6248B6E5F42E3252AD0]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6495111F730311440BBC3AAAF3B8C7AC]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\65273BD75ADFA9146A0950469941299A]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6543EA2E8E729CF4789BCD7361D58C03]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\658DABBCADB609E429A6769C46FAADD0]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\67A614CC45D7C5845BE2184211CC8F9C]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B6581D2CF6BB444D8ACBF79E3AF425B]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C0DB201BFD71284CB8CA279446863E8]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6EA4E994723ECC940AE01A2507673199]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F2331E07AF9B414DB15E2E7BAB7F880]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F3E6739E6CECC64D9B7E5D24CF60746]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\73268B3F6C2206C4BAF14E3C5B4BC494]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\73D229597C7281E409FDEB3079E30E5A]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75A49DF39158638428A0F7797D4CD1E6]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D223AE12684124794DD7D3FB067886]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76937F723CDCAB547A9791D60867A5B5]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\78AD011E92C0B7D4A86E41451EC7A0F0]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\79080E81959ECB54E9E7B3C67AE5781A]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7A8B37070412F4D47895AA40EFC2E39A]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7F84DAA817EC0AB409DFE802184D5B09]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\82F14F44AA63A5945A2E960EF018794E]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\831071FAC16E2DA4682F55E0B0DE6979]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\83D0F8F1641145A42B26F71D534E9A34]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\84072C174C7F25148BFB33ADE8C704E1]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\872C7B3D2887D4E4EBF645D7AB9374D1]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8C00987A23C36B145AB60EE274936EB3]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8D736B12592E2E94094267BC5B7AA7EB]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8F3E0221A8351144BB04AEF5266143CB]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\90E77522D1656DA4DABC673942243B44]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\920219BD6C542544893D7ECFCB5E2B6B]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\939840D09446FFF459FA6CB4F03C38BE]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9459BDD3A7C686345A9B7A1AD1CC6BE4]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\95AC1A94BAFFE3D41B23B2097BA8B190]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\983EBB458AA802846BBC74D26C3209C8]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98A0180804723E24AAA941C0B046363D]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\990A25796B2949842BACA56514B7316A]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\999D63C685BF046489CA3126029FE837]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9AC4C1465926D52478BEC6D3DB946DD7]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9CF7625ADC5FCFE43AD003DCC16B49CB]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A2D54AC8D24E8F94ABBB993A69EF13EC]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A357C02D064283D41978AFEEE1A48E0F]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A4022CA9531268145AD6F8FD7F4F01DC]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5CDCC279604D6746A7DA9ED701BF41F]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6F4FE9AC6F165A4EAA8F90CE891C0DA]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A960AC53CA238044A820A3B63D4536CA]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AA3077BB9E4617440AF467D91146A8C4]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AD7957C966A13904EA466152B29EA9AF]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B13C910C1D6376A4BB2BDB9585253923]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B1B5689BAD89AFD448923B5051E5BB50]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B2CE0F97DFABDE446811F33E7273BFE2]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B445461D74829AF4C8EF6C00B2861EF0]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B4D011D14FD2DB74A9090EA633C0B98E]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B551BEBCA0334AA40978C2137FD21AB2]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B877893A942DC524580C7B45547FCBC8]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC651C0803618C44DA6F1DDD51AF35BF]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BDE5B9F2A520B674BBB1BEAE5F5D51B8]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BEE85C3D8F4816D4A9E5F4EAA4D80A2A]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BFD48F71CCCEC97489147D4E852D3F6F]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C05694CDCD2DD724F90F13A20E67EC7C]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C42065D3060DD4648A38882BEA92941E]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C5F606FB1152E344981B09071C472211]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C77B53875F388AA4AA076F6F9D099011]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C85EA06E73FF0A240B4C287EE0D9521D]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA30DE5A0DE293D4AA3BF5E13322823A]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA9ADF25A98C8074FA4CBBA3ED29FEFA]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCE886225BDEB6C43868B0AEDB036B02]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CDD11BF4B1CAA584695EFBC611438213]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE1CCF5CABA1395409D54586592B319E]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE7392F9B9A81FA4EA952625BD5534FE]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D12B7976E5CA7C34D932C1A8A1BF61C8]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D91D500D43BD91A44B02BDBE41E0523F]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DA2710A9158C6584C9677EB954F3AC97]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DCF07B57C9DC38E419CF122EA180585E]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD2E1A561C7F1294BB3996EE77F6BBEE]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF14E9E130504B745A2AC47EF6145D24]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF7A4CDE9ED9CD7479FF74F35FA4149E]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DFE39849AF921D045B613CD5852C76A6]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E03EC5B80A22A7D4C92AB528A3D323E8]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1B9E95AA2730744AB926911484F8AD5]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E3436415FB2833843B9EE970079A87C0]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E3BBB86ACE9686A4281227D5F7EE95AE]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E6B40E8EBBC3CD445BD2FC7D8FDCCFEC]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E77C3F952C1F0354FAFADB6B080ACCF7]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E84382A588F214C4C89C3DB758EA6AD6]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E89B10C102BBEF941A920EE2269747C0]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E9D73D5153C19FD48B6E10CB7E8572CE]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EBAFF392ACA75ED4CA30BF821C1AE267]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ECFC746582988774684DB5D8D95F674D]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EECC799BFA63E6146A81EAAA53540EDE]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F1547261AA1C98C48B0ECDBC767C76CE]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F1BDB464DE2D33547BB31C1B35D9C337]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F29CFDBF9B20AB8448A1BD73A3FE863F]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F5F8D8368E8CAE84188DE44DAF8C10F9]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FAB510A06C6F4B24AAD055CE6EEA27CD]
C:\ProgramData\InstallMate
C:\Users\Bill\AppData\Roaming\PC Registry Shield
[HKCU\Software\PCRegistryShieldLanguage]
C:\Windows\Installer\b9078.msi
C:\Users\Bill\AppData\Local\Temp\BoxoreInstaller.exe
ShortcutFix
PROXYFix
SysRestore
EmptyFlash
EmptyPrefetch
EmptyTemp
EmptyCLSID

* Lance ZHPFix via le raccourci sur ton Bureau, (Si tu es sous Vista ou Windows 7 ou Windows 8 n'oublie pas clic droit ==> en tant qu'administrateur")
* Si tu obtiens le message "Voulez-vous autoriser le programme suivant..."Tu réponds "Oui"
* Clique sur le bouton "IMPORTER"
* Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes

* Clique sur le bouton «GO» pour le lancer le nettoyage
* A la demande, confirme le nettoyage des données en cliquant sur [OK]
* Patiente le temps du traitement.
* ZHPFix va te demander si tu souhaites vider ta corbeille, clique sur ton choix (le traitement peut être long suivant la quantité de données à supprimer)
* Un rapport nommé ZHPFixReport.txt sera créé et sauvegardé sur le bureau
* Ce rapport se trouve aussi ici C:\ZHP\ZHPFix[R1].txt
* Copie/colle la totalité du rapport dans ta prochaine réponse

A+

--------Contributeur Sécurité---------
Heureux ceux qui peuvent donner sans s'en souvenir et prendre sans oublier !

Réponse 15 / 25

jacobus13 Messages postés 111 Date d'inscription Statut Membre Dernière intervention 35

Bonjour cabrier,

J'avais un PC avec XP mais qui n'acceptait pas W7, parce que peu performant, j'ai acheté un PC d'occasion avec W7 installé, et j'installe les programmes que j'avais sur XP, compatibles avec W7, pour les autres je cherche et j'installe les semblables pour W7. Voilà pourquoi c'est le boxon.
10 ans avec XP, je gérais parfaitement, pas de virus ni de saleté. Ils l'ont mis au panier et maintenant je galère sur W7, j'ai 62 ans, et dur de changer de système du jour au lendemain, mais je commence à m'y habituer au bout de 8 jours.

Rapport de ZHPFix 2014.4.13.3 par Nicolas Coolman, Update du 13/04/2014
Fichier d'export Registre : C:\Users\Bill\AppData\Roaming\ZHP\ZHPExportRegistry-24-04-2014-10-15-54.txt
Run by Bill at 24/04/2014 10:15:50
High Elevated Privileges : OK
Windows 7 Ultimate Edition, 32-bit (Build 7600)

Corbeille vidée (00mn 04s)
Dossier Prefetcher vidé
Réparation des raccourcis navigateur

========== Logiciels ==========
SUPPRIMÉ: Boxore Client

========== Clés du Registre ==========
SUPPRIMÉ: [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0E365FDA-909F-4939-838A-261DD468D862}]
SUPPRIMÉ: O50 - IFEO:Image File Execution Options - DatamngrCoordinator.exe - tasklist.exe
SUPPRIMÉ: SearchScopes :{6D887829-E131-4E25-817F-9E8CC1232833}
SUPPRIMÉ: SearchScopes :{C7DF525A-BE43-4C5C-89C7-CF1CE4FEA221}
SUPPRIMÉ: [HKLM\Software\Classes\Installer\Products\\ADF563E0F909939438A862D14D868D26]
SUPPRIMÉ: [HKLM\Software\Classes\Installer\Features\ADF563E0F909939438A862D14D868D26]
SUPPRIMÉ: HKLM\SOFTWARE\Microsoft\Tracing\BrowseMark_Setup_RASAPI32
SUPPRIMÉ: HKLM\SOFTWARE\Microsoft\Tracing\BrowseMark_Setup_RASMANCS
SUPPRIMÉ: HKLM\SOFTWARE\Microsoft\Tracing\IminentUninstall_RASAPI32
SUPPRIMÉ: HKLM\SOFTWARE\Microsoft\Tracing\IminentUninstall_RASMANCS
SUPPRIMÉ: HKLM\SOFTWARE\Microsoft\Tracing\Iminent_1712-b2fcad5e_RASAPI32
SUPPRIMÉ: HKLM\SOFTWARE\Microsoft\Tracing\Iminent_1712-b2fcad5e_RASMANCS
SUPPRIMÉ: HKLM\SOFTWARE\Microsoft\Tracing\MySearchDial_RASAPI32
SUPPRIMÉ: HKLM\SOFTWARE\Microsoft\Tracing\MySearchDial_RASMANCS
SUPPRIMÉ: HKLM\SOFTWARE\Microsoft\Tracing\MYSEAR~1_RASAPI32
SUPPRIMÉ: HKLM\SOFTWARE\Microsoft\Tracing\MYSEAR~1_RASMANCS
SUPPRIMÉ: HKLM\SOFTWARE\Microsoft\Tracing\PCCleaners_RASAPI32
SUPPRIMÉ: HKLM\SOFTWARE\Microsoft\Tracing\PCCleaners_RASMANCS
SUPPRIMÉ: HKLM\SOFTWARE\Microsoft\Tracing\PcRegistryShield_RASAPI32
SUPPRIMÉ: HKLM\SOFTWARE\Microsoft\Tracing\PcRegistryShield_RASMANCS
SUPPRIMÉ: HKLM\SOFTWARE\SOFTWARE\UPDATE\CLIENTS\{5B54E9B6-D6C4-11E0-8E9D-92FB4824019B}
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0124B064795BB484FA494FC7CF204C0C
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01F8E7504D2D2644AB1185234D2AD5AC
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\04CDEDFDD6EF25443B78A49D1FE5B4F2
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\058911EBC07BAAE42B102E3F4B0D070D
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\05CE306CC244D284D8D8090E404CD7D3
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\089527E77AD22E345B0066D226E44F46
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0BD0B15D6F0C2BF428B339B2D2D732C9
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0C1AAA506D92B2D44BD6FEF6CDFB71E1
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CAEC9AFF1716FF4DBACEED82F88C702
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0DD4444CBC682774C8E573CC73C5BC46
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0F68250201451D64EA71E91BA19832DC
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\126FFC99A0F214F41AE2D6C7A0FC09BF
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12F72EF2521177A4BB467FF35A881382
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\14873772FE3926F4195C9280D52D3486
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\14CF11D787D40BF458A3B5CB123733CE
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\163A5460E4FB18343B4C0B781B27E813
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1705977FCB2F22F4D8A9AB847C3FB9CE
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\19F133B6A0BA9B14493CE47703DF4CF3
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1C735C7A54F53574CA5AEA93D0D1F01E
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1CE2260B068265A488410CA171D93778
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DF1DD2609A2135479C19D72E41B64AA
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F72D9058D0863E4F8EB9FE6E980C385
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2217D47FAFB0AC547820199B3A026CFB
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22C5FD2815F5C7C4DB5F34F504BF9D96
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\26CF57FC035624845B9005289DFA1448
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2719056FB4CDD294887140382819FFF7
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2956CB28F45AAF746998774B3C9FF012
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2AD5E582EBA9ED54989A134D9250922B
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2BB672F8D2CA64146B6688371E75C986
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2EA450B923F9C4D4BBEB203648FBFFDC
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2ECA942EFDBD22B4EBB7FE3AB9EDDBDD
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2F055C41FDCA50A43BE42A96D243AD47
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2F4EE319A22490145BC4AEBC53B616CA
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\31E430E345D85D54CA33BC88AEFDB9D8
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\358096DA35E67B5479C2E880DF0C10C1
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37345F678B330594E9E4AC16908F78CF
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\38641BF101151094F86DD62B534BDEC4
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\38762340C83E6764B87807B67154F5A4
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3984BAF27BDA0DC4D8AED19FCB64BD7D
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3D82200490995CE42AB754DCD90AC44D
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3E9F0E4315A35D741873885200C6A454
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3F261C3E5AD56E54598E24B106813C7E
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\40D753328E77EE842A82631EED62CEC5
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\40FDEFB25883CF140B9B5F89CB7E2871
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\412179CD2126BB34CAE51691856A3D68
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43218F63264345445A73071C174FEEE8
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\439E8A02B7736CA488EECE28D7EE961A
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\456D8CED0106E1649AE5CBD8082AC705
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\459277E8A0EE8894F9D7F807DF90506A
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\463372A470C576443AE8802B1AC61D89
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\48F13E425ECD5F243A8A82AA2B65336D
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B6F3AD0EE690D2478C7D0528AADF8C4
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4BB9D431259E08A499469636383B9935
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4D3B0714BC82B2340AB18C031262573D
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4D5809867D6C1D14180511D3AAD03F79
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4DB13DED48DC4494C90DE800D31B086C
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\52C608FC2A61CCE479768A9719CABF7B
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\56861F0CE995D0E45835F5D31E105D54
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\58E44D082625757499995F9516313A9C
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5A52F724764B00747A637F14FBBBB830
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5B19839CB98BB914BA43E863BBE11B4E
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\613DCE6E373581A40B6C88D4F7C09096
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6292C097F9759424BAFA3E32CD3DD562
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\62C171206461ED34885A4AE095F4A7AC
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\63E9F48D88AA940498502E29E3747471
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\64747EAAAE2BA5141AEBCF4F6651A144
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6494B0B34076D6248B6E5F42E3252AD0
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6495111F730311440BBC3AAAF3B8C7AC
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\65273BD75ADFA9146A0950469941299A
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6543EA2E8E729CF4789BCD7361D58C03
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\658DABBCADB609E429A6769C46FAADD0
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\67A614CC45D7C5845BE2184211CC8F9C
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B6581D2CF6BB444D8ACBF79E3AF425B
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C0DB201BFD71284CB8CA279446863E8
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6EA4E994723ECC940AE01A2507673199
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F2331E07AF9B414DB15E2E7BAB7F880
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F3E6739E6CECC64D9B7E5D24CF60746
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\73268B3F6C2206C4BAF14E3C5B4BC494
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\73D229597C7281E409FDEB3079E30E5A
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75A49DF39158638428A0F7797D4CD1E6
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D223AE12684124794DD7D3FB067886
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76937F723CDCAB547A9791D60867A5B5
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\78AD011E92C0B7D4A86E41451EC7A0F0
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\79080E81959ECB54E9E7B3C67AE5781A
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7A8B37070412F4D47895AA40EFC2E39A
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7F84DAA817EC0AB409DFE802184D5B09
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\82F14F44AA63A5945A2E960EF018794E
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\831071FAC16E2DA4682F55E0B0DE6979
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\83D0F8F1641145A42B26F71D534E9A34
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\84072C174C7F25148BFB33ADE8C704E1
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\872C7B3D2887D4E4EBF645D7AB9374D1
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8C00987A23C36B145AB60EE274936EB3
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8D736B12592E2E94094267BC5B7AA7EB
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8F3E0221A8351144BB04AEF5266143CB
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\90E77522D1656DA4DABC673942243B44
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\920219BD6C542544893D7ECFCB5E2B6B
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\939840D09446FFF459FA6CB4F03C38BE
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9459BDD3A7C686345A9B7A1AD1CC6BE4
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\95AC1A94BAFFE3D41B23B2097BA8B190
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\983EBB458AA802846BBC74D26C3209C8
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98A0180804723E24AAA941C0B046363D
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\990A25796B2949842BACA56514B7316A
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\999D63C685BF046489CA3126029FE837
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9AC4C1465926D52478BEC6D3DB946DD7
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9CF7625ADC5FCFE43AD003DCC16B49CB
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A2D54AC8D24E8F94ABBB993A69EF13EC
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A357C02D064283D41978AFEEE1A48E0F
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A4022CA9531268145AD6F8FD7F4F01DC
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5CDCC279604D6746A7DA9ED701BF41F
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6F4FE9AC6F165A4EAA8F90CE891C0DA
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A960AC53CA238044A820A3B63D4536CA
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AA3077BB9E4617440AF467D91146A8C4
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AD7957C966A13904EA466152B29EA9AF
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B13C910C1D6376A4BB2BDB9585253923
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B1B5689BAD89AFD448923B5051E5BB50
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B2CE0F97DFABDE446811F33E7273BFE2
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B445461D74829AF4C8EF6C00B2861EF0
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B4D011D14FD2DB74A9090EA633C0B98E
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B551BEBCA0334AA40978C2137FD21AB2
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B877893A942DC524580C7B45547FCBC8
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BC651C0803618C44DA6F1DDD51AF35BF
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BDE5B9F2A520B674BBB1BEAE5F5D51B8
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BEE85C3D8F4816D4A9E5F4EAA4D80A2A
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BFD48F71CCCEC97489147D4E852D3F6F
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C05694CDCD2DD724F90F13A20E67EC7C
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C42065D3060DD4648A38882BEA92941E
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C5F606FB1152E344981B09071C472211
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C77B53875F388AA4AA076F6F9D099011
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C85EA06E73FF0A240B4C287EE0D9521D
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA30DE5A0DE293D4AA3BF5E13322823A
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA9ADF25A98C8074FA4CBBA3ED29FEFA
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCE886225BDEB6C43868B0AEDB036B02
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CDD11BF4B1CAA584695EFBC611438213
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE1CCF5CABA1395409D54586592B319E
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE7392F9B9A81FA4EA952625BD5534FE
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D12B7976E5CA7C34D932C1A8A1BF61C8
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D91D500D43BD91A44B02BDBE41E0523F
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DA2710A9158C6584C9677EB954F3AC97
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DCF07B57C9DC38E419CF122EA180585E
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD2E1A561C7F1294BB3996EE77F6BBEE
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF14E9E130504B745A2AC47EF6145D24
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF7A4CDE9ED9CD7479FF74F35FA4149E
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DFE39849AF921D045B613CD5852C76A6
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E03EC5B80A22A7D4C92AB528A3D323E8
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E1B9E95AA2730744AB926911484F8AD5
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E3436415FB2833843B9EE970079A87C0
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E3BBB86ACE9686A4281227D5F7EE95AE
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E6B40E8EBBC3CD445BD2FC7D8FDCCFEC
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E77C3F952C1F0354FAFADB6B080ACCF7
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E84382A588F214C4C89C3DB758EA6AD6
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E89B10C102BBEF941A920EE2269747C0
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E9D73D5153C19FD48B6E10CB7E8572CE
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EBAFF392ACA75ED4CA30BF821C1AE267
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ECFC746582988774684DB5D8D95F674D
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EECC799BFA63E6146A81EAAA53540EDE
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F1547261AA1C98C48B0ECDBC767C76CE
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F1BDB464DE2D33547BB31C1B35D9C337
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F29CFDBF9B20AB8448A1BD73A3FE863F
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F5F8D8368E8CAE84188DE44DAF8C10F9
SUPPRIMÉ: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FAB510A06C6F4B24AAD055CE6EEA27CD
SUPPRIMÉ: HKCU\Software\PCRegistryShieldLanguage

========== Valeurs du Registre ==========
ProxyFix : Configuration proxy supprimée avec succès
SUPPRIMÉ ProxyServer Value
SUPPRIMÉ ProxyEnable Value
SUPPRIMÉ EnableHttp1_1 Value
SUPPRIMÉ ProxyHttp1.1 Value
SUPPRIMÉ ProxyOverride Value

========== Eléments de donnée du Registre ==========
SUPPRIMÉ: R0 - Main,Start Page = KCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page

========== Dossiers ==========
SUPPRIMÉ: C:\Users\Bill\AppData\Local\{D992A8DB-2E6F-4182-9EDC-FD9F36E2ECC3}

========== Fichiers ==========
SUPPRIMÉ: c:\users\bill\appdata\local\temp\boxoreinstaller.exe
SUPPRIMÉ: c:\users\bill\appdata\local\temp\n1192\iminent_1712-b2fcad5e.exe
SUPPRIMÉ: c:\users\bill\appdata\local\temp\n1192\viewpassword_1030-8002_p.exe
SUPPRIMÉ: c:\users\bill\appdata\local\temp\n1192\obboxore_0912-99e29667.exe
SUPPRIMÉS Flash Cookies (0) (0 octets)
SUPPRIMÉS Temporaires Windows (436) (337 202 460 octets)

========== Tache planifiée ==========
SUPPRIMÉ: PCRegistryShield_Popup
SUPPRIMÉ: PCRegistryShield_Start

========== Restauration Système ==========
Point de restauration du système créé avec succès

========== Récapitulatif ==========
182 : Clés du Registre
6 : Valeurs du Registre
1 : Eléments de donnée du Registre
1 : Dossiers
6 : Fichiers
1 : Logiciels
2 : Tache planifiée
1 : Restauration Système

End of clean in 01mn 12s

========== Chemin de fichier rapport ==========
C:\Users\Bill\AppData\Roaming\ZHP\ZHPFix[R1].txt - 24/04/2014 10:15:54 [24231]

Merci pour ton aide, @ +

Réponse 16 / 25

cabrier Messages postés 5591 Date d'inscription Statut Contributeur sécurité Dernière intervention 702

Re,

Un ZHPDiag de contrôle et pour virer les restes !

A+

Réponse 17 / 25

jacobus13 Messages postés 111 Date d'inscription Statut Membre Dernière intervention 35

Re re,

https://pjjoint.malekal.com/files.php?id=ZHPDiag_20140424_k12l10r7g11c10

@+

Réponse 18 / 25

cabrier Messages postés 5591 Date d'inscription Statut Contributeur sécurité Dernière intervention 702

jacobus,

Des restes !

Ce script va cibler certains éléments à supprimer :

* Ferme toutes tes applications en cours
* Sélectionne et copie toutes les lignes en gras et italique suivantes depuis et y compris Script ZHPFIX :

Script ZHPFix
[MD5.09C0A82DBFE03EA3371A73609D678285] [WIS][23/04/2014] (.The Software Group - Software Update Helper.) -- C:\Windows\Installer\1174e4a.msi [45056] e
HKLM\SOFTWARE\Microsoft\Tracing\Genesis_RASAPI32
HKLM\SOFTWARE\Microsoft\Tracing\Genesis_RASMANCS
HKLM\SOFTWARE\Microsoft\Tracing\ViewPasswordFIX_RASAPI32
HKLM\SOFTWARE\Microsoft\Tracing\ViewPasswordFIX_RASMANCS
C:\Windows\Installer\1174e4a.msi
O4 - GS\QuickLaunch [Bill]: 04 SCANNER.lnk - Clé orpheline
O4 - GS\QuickLaunch [Bill]: 39 AFFICHAGE.lnk - Clé orpheline
O4 - GS\Accessories [Bill]: Run.lnk - Clé orpheline
O4 - GS\Desktop [Bill]: Hearts.lnk - Clé orpheline
O4 - GS\Desktop [Bill]: Solitaire.lnk - Clé orpheline
O4 - GS\Accessories [Administrateur]: Run.lnk - Clé orpheline
[MD5.00000000000000000000000000000000] [APT] [{EEA517C0-2FAE-489F-9BFA-E450861FD99C}] (...) -- C:\Program Files\ClickTray Calendar\unins000.exe (.not file.) [0]
O42 - Logiciel: Photo Notifier and Animation Creator - (.IncrediMail Ltd..) [HKLM] -- Photo Notifier and Animation Creator
[HKCU\Software\IncrediMail]
O43 - CFD: 23/04/2014 - 21:09:27 - [] ----D C:\ProgramData\IM
O43 - CFD: 23/04/2014 - 21:08:06 - [] ----D C:\ProgramData\IncrediMail
O43 - CFD: 23/04/2014 - 21:10:32 - [] ----D C:\Users\Bill\AppData\Local\IM
O44 - LFC:[MD5.5E8318A3C5C0C85ED687361F9BD833DD] - 21/04/2014 - 18:33:28 ---A- . (...) -- C:\HijackPatrol.log [12169]
O61 - LFC: 22/04/2014 - 13:52:34 ---A- . (...) -- C:\Users\Bill\AppData\Local\Temp\Quarantine.exe [382519]
[HKLM\Software\Software]
PROXYFix
EmptyPrefetch
EmptyTemp
EmptyCLSID

* Lance ZHPFix via le raccourci sur ton Bureau, (Si tu es sous Vista ou Windows 7 ou Windows 8 n'oublie pas clic droit ==> en tant qu'administrateur")
* Si tu obtiens le message "Voulez-vous autoriser le programme suivant..."Tu réponds "Oui"
* Clique sur le bouton "IMPORTER"
* Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes

* Clique sur le bouton «GO» pour le lancer le nettoyage
* A la demande, confirme le nettoyage des données en cliquant sur [OK]
* Patiente le temps du traitement.
* ZHPFix va te demander si tu souhaites vider ta corbeille, clique sur ton choix (le traitement peut être long suivant la quantité de données à supprimer)
* Un rapport nommé ZHPFixReport.txt sera créé et sauvegardé sur le bureau
* Ce rapport se trouve aussi ici C:\ZHP\ZHPFix[R1].txt
* Copie/colle la totalité du rapport dans ta prochaine réponse

A+

Réponse 19 / 25

jacobus13 Messages postés 111 Date d'inscription Statut Membre Dernière intervention 35

Voilà la suite !
@ +

Rapport de ZHPFix 2014.4.13.3 par Nicolas Coolman, Update du 13/04/2014
Fichier d'export Registre :
Run by Bill at 24/04/2014 23:49:52
High Elevated Privileges : OK
Windows 7 Ultimate Edition, 32-bit (Build 7600)

Corbeille vidée (00mn 02s)
Dossier Prefetcher vidé

========== Logiciels ==========
SUPPRIMÉ: Photo Notifier and Animation Creator

========== Clés du Registre ==========
SUPPRIMÉ: [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Photo Notifier and Animation Creator]
SUPPRIMÉ: HKLM\SOFTWARE\Microsoft\Tracing\Genesis_RASAPI32
SUPPRIMÉ: HKLM\SOFTWARE\Microsoft\Tracing\Genesis_RASMANCS
SUPPRIMÉ: HKLM\SOFTWARE\Microsoft\Tracing\ViewPasswordFIX_RASAPI32
SUPPRIMÉ: HKLM\SOFTWARE\Microsoft\Tracing\ViewPasswordFIX_RASMANCS
SUPPRIMÉ: HKCU\Software\IncrediMail
SUPPRIMÉ: HKLM\Software\Software

========== Valeurs du Registre ==========
ProxyFix : Configuration proxy supprimée avec succès
SUPPRIMÉ ProxyServer Value
SUPPRIMÉ ProxyEnable Value
SUPPRIMÉ EnableHttp1_1 Value
SUPPRIMÉ ProxyHttp1.1 Value
SUPPRIMÉ ProxyOverride Value

========== Dossiers ==========
Aucun dossiers CLSID Local utilisateur vide

========== Fichiers ==========
SUPPRIMÉ: C:\Windows\Installer\1174e4a.msi
SUPPRIMÉ: c:\hijackpatrol.log
SUPPRIMÉ: c:\users\bill\appdata\local\temp\quarantine.exe
SUPPRIMÉS Temporaires Windows (225) (95 666 195 octets)

========== Tache planifiée ==========
SUPPRIMÉ: {EEA517C0-2FAE-489F-9BFA-E450861FD99C}

========== Récapitulatif ==========
7 : Clés du Registre
6 : Valeurs du Registre
1 : Dossiers
4 : Fichiers
1 : Logiciels
1 : Tache planifiée

End of clean in 01mn 04s

========== Chemin de fichier rapport ==========
C:\Users\Bill\AppData\Roaming\ZHP\ZHPFix[R1].txt - 24/04/2014 09:15:54 [24311]
C:\Users\Bill\AppData\Roaming\ZHP\ZHPFix[R2].txt - 24/04/2014 23:49:55 [1786]

Réponse 20 / 25

cabrier Messages postés 5591 Date d'inscription Statut Contributeur sécurité Dernière intervention 702

jacobus,

Parfait, un dernier outil que tu pourras conserver et utiliser de temps en temps :

----------------------------------------------------------------------

Télécharge l' installeur de Malwarebytes (mbam-setup 2.0.xxx.exe)
Installe-le en laissant les options par défaut, une icône sera créée sur le bureau et Malwarebytes démarrera.
(décoche à l'installation "Activer l'essai gratuit de MBAM Premium")
Il te sera demandé de mettre à jour la base de données, fais-le...

Onglet Paramètres -> Détection et protection : Règle PUP/PUM "Traiter les détections comme des malveillants"

Onglet [Examen] choisis "Menaces", clique sur [Examiner maintenant]

Clique sur [Lancer l'examen]
Patiente...l'analyse débutera après l'installation automatique des mises à jour.
Les infections sont automatiquement placées en quarantaine.

Tu obtiendras

Examen terminé avec succès : Aucun élément malveillant détecté
ou
Menaces potentielles détectées

Dans ce dernier cas :

Clique sur Tout mettre en quarantaine,
Clique sur Appliquer les actions...
Accepte le redémarrage.

Après démarrage, relance Malwarebytes,
Clique sur [Historique] -> Journaux de l'application
Sélectionne le dernier Journal d'examen -> Afficher
Clique en bas sur [Exporter] -> fichier texte (*.txt)

Choisis le bureau comme emplacement
Nomme-le mbam_log par exemple,
Clique sur [Enregistrer]
Copie/Colle le contenu du rapport dans ta réponse, ou
Héberge le rapport sur ce site et Copie/Colle le lien créé dans ta réponse.

A+

Boxore Client

25 réponses

Votre réponse

Discussions similaires