supprimer snapdo, sweet, interactive deal, radsteroids Résolu/Fermé

Question

Bonjour,

Je n'arrive pas à désinstaller ces popus qui se sont sournoisement installer sur mon ordinateur. J'ai bien suivi vos conseils en allant dans les propriétés mozilla et internet explorer, dans la case "cible" en supprimant sweet et pourtant ils réapparaissent insidieusement. Je ne sais plus quoi faire. Il y a aussi un site radsteroids qui lui aussi apparait tout le temps. Quels sont vos conseils précieux pour enlever toutes ces fenêtres ?
En dernière solution, je me dis qu'il faudrait réinstaller windows 7, c'est à dire tout écraser et cette solution n'arrange pas du tout mes affaires.
Merci pour vos prochaines réponses
cordialement 
P.O.

Malekal_morte- · Answer

Salut,

Tu as installé des adwares et programmes parasites sur ton PC.
Voici la procédure à suivre pour les supprimer :

Télécharge https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= AdwCleaner ( d'Xplode ) sur ton bureau.  
Sur la page d'AdwCleaner, à droite, clic sur la disquette grise avec la flèche verte pour lancer le téléchargement.
Lance AdwCleaner, clique sur [Scanner].
Le scan peux durer plusieurs minutes, patienter.
Une fois le scan terminé, clique sur [Nettoyer]

Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

flyblue · Answer

Bonjour, 
J'ai suivi vos recommandations : voici mon copier/coller que je vous transmets :

# AdwCleaner v3.216 - Rapport créé le 20/07/2014 à 11:12:03
# Mis à jour le 17/07/2014 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : PATRICK - PATRICK-PC
# Exécuté depuis : C:\Users\PATRICK\Downloads\adwcleaner-3-216-multi-win.exe
# Option : Nettoyer

***** [ Services ] *****

Service Supprimé : IePluginServices

***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\ProgramData\374311380 
Dossier Supprimé : C:\ProgramData\IePluginServices
Dossier Supprimé : C:\ProgramData\WindowsMangerProtect
Dossier Supprimé : C:\Program Files (x86)\Bench
Dossier Supprimé : C:\Program Files (x86)\predm
Dossier Supprimé : C:\Users\PATRICK\AppData\Local\Temp\Iminent
Dossier Supprimé : C:\Users\PATRICK\AppData\Local\Temp\Wajam
Dossier Supprimé : C:\Users\PATRICK\Documents\PC Cleaner
Dossier Supprimé : C:\Users\PATRICK\AppData\Local\Software
Dossier Supprimé : C:\Program Files (x86)\Software
Dossier Supprimé : C:\Users\PATRICK\AppData\Local\Google\Chrome\User Data\Default\Extensions\engaigpbgdjjmanonjcjkcmomgibneba
Dossier Supprimé : C:\Users\PATRICK\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibnjmihbbanannlbobkbmnmckjnmdnom
Fichier Supprimé : C:\Windows\System32oboot64.exe
Fichier Supprimé : C:\Users\PATRICK\AppData\Roaming\Mozilla\Firefox\Profiles\d430k19q.default-1400187124148\user.js
Fichier Supprimé : C:\Users\PATRICK\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
Fichier Supprimé : C:\Users\PATRICK\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
Fichier Supprimé : C:\Users\PATRICK\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal

***** [ Raccourcis ] *****

[x] Non Désinfecté : C:\Users\Public\Desktop\Google Chrome.lnk
[x] Non Désinfecté : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
[x] Non Désinfecté : C:\Users\PATRICK\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
[x] Non Désinfecté : C:\Users\PATRICK\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[x] Non Désinfecté : C:\Users\PATRICK\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

***** [ Registre ] *****

Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\ibnjmihbbanannlbobkbmnmckjnmdnom
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\ibnjmihbbanannlbobkbmnmckjnmdnom
Clé Supprimée : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\ibnjmihbbanannlbobkbmnmckjnmdnom
Clé Supprimée : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Clé Supprimée : HKLM\SOFTWARE\Classes\iesmartbar.bho
Clé Supprimée : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Clé Supprimée : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Clé Supprimée : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Clé Supprimée : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Clé Supprimée : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Clé Supprimée : HKLM\SOFTWARE\Classes\Iminent
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasapi32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasmancs
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{84FF7BD6-B47F-46F8-9130-01B2696B36CB}]
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Valeur Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Clé Supprimée : HKCU\Software\Boxore
Clé Supprimée : HKCU\Software\GlobalUpdate
Clé Supprimée : HKCU\Software\InstallCore
Clé Supprimée : HKCU\Software\Optimizer Pro
Clé Supprimée : HKCU\Software\systweak
Clé Supprimée : HKCU\Software\TutoTag
Clé Supprimée : HKCU\Software\Vittalia
Clé Supprimée : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Supprimée : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Supprimée : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Clé Supprimée : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Clé Supprimée : HKLM\Software\Boxore
Clé Supprimée : HKLM\Software\FlvPlayer
Clé Supprimée : HKLM\Software\GlobalUpdate
Clé Supprimée : HKLM\Software\Iminent
Clé Supprimée : HKLM\Software\SupDp
Clé Supprimée : HKLM\Software\SupTab
Clé Supprimée : HKLM\Software\supWindowsMangerProtect
Clé Supprimée : HKLM\Software\supWPM
Clé Supprimée : HKLM\Software\systweak
Donnée Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~2\suptab\search~1.dll
Donnée Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SupTab\SEARCH~2.DLL
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DatamngrCoordinator.exe

***** [ Navigateurs ] *****

-\ Internet Explorer v11.0.9600.17207

Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]
Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\ Mozilla Firefox v30.0 (fr)

[ Fichier : C:\Users\PATRICK\AppData\Roaming\Mozilla\Firefox\Profiles\d430k19q.default-1400187124148\prefs.js ]

Ligne Supprimée : user_pref("extensions.helperbar.DockingPositionDown", false);
Ligne Supprimée : user_pref("extensions.helperbar.SmartbarDisabled", false);
Ligne Supprimée : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
Ligne Supprimée : user_pref("extensions.helperbar.Visibility", false);
Ligne Supprimée : user_pref("extensions.helperbar.backPageCapacity", 3);
Ligne Supprimée : user_pref("extensions.helperbar.backPageCounter", 0);
Ligne Supprimée : user_pref("extensions.helperbar.backPageDay", 15);
Ligne Supprimée : user_pref("extensions.helperbar.backPageLastEvent", "1405282481214");
Ligne Supprimée : user_pref("extensions.helperbar.backPageMinInterval", 15);
Ligne Supprimée : user_pref("extensions.helperbar.barcodeid", "147267");
Ligne Supprimée : user_pref("extensions.helperbar.countryiso", "fr");
Ligne Supprimée : user_pref("extensions.helperbar.downloadprovider", "ob_271_ch");
Ligne Supprimée : user_pref("extensions.helperbar.externalJsFiles", "{\"d\":\"[{\\"ExcludeDomains\\":[\\"snap.do\\",\\"snapdo.com\\",\\".search.yahoo.com\\\/yhs\\\/search?hspart=lkry\\",\\"www.only-apart[...]
Ligne Supprimée : user_pref("extensions.helperbar.fromautoupdate", "false");
Ligne Supprimée : user_pref("extensions.helperbar.installationid", "49964d84-91b2-b942-adf0-a11bbb696444");
Ligne Supprimée : user_pref("extensions.helperbar.installdate", "15/07/2014");
Ligne Supprimée : user_pref("extensions.helperbar.keepAliveLastevent", "1405455266");
Ligne Supprimée : user_pref("extensions.helperbar.lastExternalJsUpdate", "1405455281257");
Ligne Supprimée : user_pref("extensions.helperbar.publisher", "shoppinghelper");
Ligne Supprimée : user_pref("keyword.URL", "hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3eDgJ_Xux0ohQkUyHV_-uVqn14U4DjFUk36g9crMEattc3kt8n0LdPwU7dvr5Xbu788kb_GU7-41L_U6DT_SGtYW1eXrSxKOhfGfyG7xwOaXE[...]

-\ Google Chrome v36.0.1985.125

[ Fichier : C:\Users\PATRICK\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Supprimée [Startup_urls] : hxxp://www.sweet-page.com/?type=hppp&ts=1405455156&from=cor&uid=WDCXWD10EADS-00P8B0_WD-WMAVU395922959229
Supprimée [Extension] : bopakagnckmlgajfccecajhnimjiiedh
Supprimée [Extension] : engaigpbgdjjmanonjcjkcmomgibneba
Supprimée [Extension] : ibnjmihbbanannlbobkbmnmckjnmdnom

*************************

AdwCleaner[R0].txt - [14920 octets] - [20/07/2014 11:09:08]
AdwCleaner[S0].txt - [11669 octets] - [20/07/2014 11:12:03]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [11730 octets] ##########
 
J'espère que ce nettoyage sera efficace. Apparemment, toutes les données apparaissent avec adwCleaner. 
Par contre, comment faire pour que ces popus n'apparaissent plus dans les téléchargements que j'effectue ? J'utilise quotidiennement Firefox/mozilla, car avec internet explorer, j'ai beaucoup de soucis. Par contre je me suis aperçu avec le scan de cleaner que les popus s'étaient logés chez explorer.
En attendant votre prochaine réponse, je vous prie d'agréer tous mes sincères remerciements pour votre aide précieuse.

Malekal_morte- · Answer

ok, voici la suite :


Faire un Scan OTL - Temps : Environ 40min
=====================
OTL permet de diagnostiquer les programmes qui tournent et déceler des infections - Le programme va générer deux rapports OTL.txt et Extras.txt 
Fournir les deux rapports :

Tu peux suivre les indications de cette page pour t'aider : https://www.malekal.com/tutorial-otl/    

* Faire un clic droit sur le lien suivant http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ puis enregistrer le lien sous.
* En haut à gauche, prendre bureau et enregistrer le fichier.
* Double-cliquez sur OTL    
* En haut à droite de Analyse rapide, coche "tous les utilisateurs"
* Sur OTL, sous Personnalisation, copie-colle le script ci-dessous :    



netsvcs   
msconfig   
safebootminimal   
safebootnetwork   
activex   
drivers32   
%ALLUSERSPROFILE%\Application Data\*.   
%ALLUSERSPROFILE%\Application Data\*.exe /s
%ALLUSERSPROFILE%\Application Data\*.dll /s
%APPDATA%\*.   
%APPDATA%\*.exe /s   
%temp%\*.exe /s   
%SYSTEMDRIVE%\*.exe   
%systemroot%\*. /mp /s
%systemroot%\system32\consrv.dll
%systemroot%\system32\*.dll /lockedfiles   
%windir%\Tasks\*.job /lockedfiles   
%systemroot%\system32\drivers\*.sys /lockedfiles   
%systemroot%\System32\config\*.sav   
/md5start   
explorer.exe   
winlogon.exe
services.exe
wininit.exe
/md5stop
HKEY_CLASSES_ROOT\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InprocServer32 /s
HKEY_LOCAL_MACHINE\SYSTEM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls /s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList /s
HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor /s
HKEY_CURRENT_USER\Software\Microsoft\Command Processor /s
CREATERESTOREPOINT   
nslookup www.google.fr /c
ipconfig /all /c
ping www.google.fr /c 
SAVEMBR:0   
hklm\software\clients\startmenuinternet|command /rs   
hklm\software\clients\startmenuinternet|command /64 /rs



* Clique sur le bouton Analyse.

**** Si durant le scan - OTL ne répond pas, ne touche à rien et laisse le scan se poursuivre ****

* Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer le rapport OTL.txt (et Extra.txt si présent).
Donne le ou les liens pjjoint qui pointent vers ces rapports ici dans une réponse.
Je répète : donne le lien du rapport pjjoint ici en réponse.

NE PAS COPIER/COLLER LE RAPPORT ICI - DONNER LE LIEN PJJOINT DANS UN NOUVEAU MESSAGE

flyblue · Answer

Salut Malekal,

Je viens de te lire, mais avant de faire ton opération OTL, dans adwcleaner, il y a un dossier énorme QUARANTINE.
Que dois-je faire avec ?
Merci pour tes conseils.
patrick

flyblue · Answer

je n'arrive pas à envoyer les liens, je fais un cliquer sur copier, rien n'apparait sur cette boite de dialogue

flyblue · Answer

je fais bien un clic droit copier, mais quand je clique coller, c'est gris impossible à envoyer

flyblue · Answer

Fichier OTL / Extras.txt OTL Extras logfile created on: 20/07/2014 12:00:36 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\PATRICK\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17207) Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy 4,00 Gb Total Physical Memory | 1,98 Gb Available Physical Memory | 49,52% Memory free 8,00 Gb Paging File | 5,45 Gb Available in Paging File | 68,21% Paging File free Paging file location(s): c:\pagefile.sys 0 0 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 583,60 Gb Total Space | 525,64 Gb Free Space | 90,07% Space Free | Partition Type: NTFS Drive D: | 12,47 Gb Total Space | 2,14 Gb Free Space | 17,16% Space Free | Partition Type: NTFS Drive E: | 335,34 Gb Total Space | 178,73 Gb Free Space | 53,30% Space Free | Partition Type: NTFS Computer Name: PATRICK-PC | User Name: PATRICK | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .html[@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) [HKEY_USERS\S-1-5-21-1739387855-3420806827-3675242863-1001\SOFTWARE\Classes\] .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) htmlfile [print] -- "C:\Windows\system32\rundll32.exe" "C:\Windows\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) http [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation) https [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- "C:\Users\PATRICK\AppData\Roaming\File Scout\filescout.exe" /open "%1" Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) http [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation) https [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- "C:\Users\PATRICK\AppData\Roaming\File Scout\filescout.exe" /open "%1" Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error. [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 "DisableUnicastResponsesToMulticastBroadcast" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 "DisableUnicastResponsesToMulticastBroadcast" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{05198B9D-564A-4B17-851A-43EA2E14FA61}" = lport=48114 | protocol=6 | dir=in | name=maconfig_tcptls | "{0700D793-0A1B-42C5-BAA6-0F0B6629EA44}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{0AC718E1-3575-4453-A507-6E142B164F88}" = lport=2869 | protocol=6 | dir=in | app=system | "{0FD01544-D4C3-431C-BE4F-F4A46C41C0B7}" = lport=3390 | protocol=6 | dir=in | app=system | "{1179B882-999D-4EF4-884F-1CE2CAADB3FA}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe | "{184B6138-FD5E-494D-9B55-12BA02D2887C}" = rport=1723 | protocol=6 | dir=out | app=system | "{1C9D7324-13E9-48B0-8C24-5E0EEF872571}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{238B9C3C-0A97-4912-A372-21C882F48FCE}" = lport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{2A015EEC-E113-42EB-A125-17E292B0FBA0}" = lport=10245 | protocol=6 | dir=in | app=system | "{2A7E6802-FC0C-459A-B325-B5928AA16072}" = lport=3128 | protocol=6 | dir=in | app=c:\program files (x86)\bench\proxy\pwdg.exe | "{2F9A2353-29B0-4C58-ACEF-D7F22CD6EBEA}" = lport=445 | protocol=6 | dir=in | app=system | "{359EF730-BCA9-4CA6-86CA-E2A85C3DF00F}" = lport=445 | protocol=6 | dir=in | app=system | "{37327882-A814-45CB-9352-70E723B34BDA}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | "{379C72F3-AD3A-4F91-9BC9-7907A5EAF7A7}" = lport=2869 | protocol=6 | dir=in | app=system | "{3DE38A19-6C28-4308-99CF-CABABC242515}" = lport=20 | protocol=6 | dir=out | svc=ftpsvc | app=%windir%\system32\svchost.exe | "{41E72475-D231-448A-8864-407528905498}" = lport=990 | protocol=6 | dir=in | svc=ftpsvc | app=%windir%\system32\svchost.exe | "{51F48457-9BF6-47B3-BAFE-BC75AC1C44C5}" = lport=80 | protocol=6 | dir=in | app=system | "{5445809A-24D7-4335-A016-86EC3D340424}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe | "{57D09B7F-AF63-4FF4-B6BF-8F40C85D57DE}" = lport=2869 | protocol=6 | dir=in | app=system | "{59335ED5-5DA6-4B56-9004-92529672569F}" = lport=3702 | protocol=17 | dir=in | app=%systemroot%\system32\p2phost.exe | "{5ABF2B14-AAD7-4A14-A0C5-F76AAC752DB2}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{5FD65B03-C8AA-4448-9C38-41BF377D81C9}" = lport=1701 | protocol=17 | dir=in | app=system | "{605AA7D2-7849-4287-AFCC-CAA30A15A40C}" = rport=138 | protocol=17 | dir=out | app=system | "{63784CAA-AD83-4169-A394-BBE352C84A84}" = lport=48113 | protocol=17 | dir=in | name=maconfig_udp | "{6A72A1CC-03D7-4D0F-8547-12D799077C8B}" = lport=137 | protocol=17 | dir=in | app=system | "{7010F11A-B9FC-4CFF-B3B8-6914B6485C60}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{733128C5-5436-42CE-B551-CD72E6B5AAAA}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{7B2FDAE3-24EB-4375-953F-9EB7FAA2376D}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{7CA21C18-987D-468A-9AA8-6B43F4C03CED}" = lport=138 | protocol=17 | dir=in | app=system | "{7F5A758D-4C67-4EA0-8434-16312BD04113}" = rport=445 | protocol=6 | dir=out | app=system | "{86A921A2-84DF-463F-A540-EA4A5BA8694A}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{8D9932A9-832B-496E-8367-F50DDA0BEC55}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{90848461-97F4-4AAB-BFA5-0E4A9E8B6BBE}" = rport=1701 | protocol=17 | dir=out | app=system | "{9714FF46-0884-495A-A810-6C55F5B8D175}" = rport=139 | protocol=6 | dir=out | app=system | "{99A34533-5CE8-4369-83E8-0738C3836E3D}" = lport=1723 | protocol=6 | dir=in | app=system | "{9E85FF20-EDCE-46C7-B5F2-41212E12252A}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{A4D8648F-FEC3-4DF0-A226-7C53AF892DB7}" = lport=48113 | protocol=6 | dir=in | name=maconfig_tcp | "{A8A282E3-A8EA-4749-895F-3148BDE9E780}" = lport=10244 | protocol=6 | dir=in | app=system | "{AB96970C-2108-47E7-B9B4-078F1313EDDE}" = rport=3540 | protocol=17 | dir=out | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe | "{AF20EAEC-B72B-468D-BD2B-4E0C3220A404}" = rport=137 | protocol=17 | dir=out | app=system | "{B1C8B284-0956-49A1-8969-A06C1D0B1D9E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | "{B86A5973-7296-4E88-AAFC-B7FD817A69CF}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{C0C42744-3A40-4E16-997D-A3D8A6C877A6}" = lport=21 | protocol=6 | dir=in | svc=ftpsvc | app=%windir%\system32\svchost.exe | "{C1AB1F36-0708-4E07-8526-B4D7AE4E2A5E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{C63DA3DD-186E-4B09-9988-97C00402F380}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{C874D8BC-AB0E-4C6B-AB7A-079B9D182FAE}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe | "{CA2DD50A-A557-49A1-A1AE-5384CBA6C1F5}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{CF0C9ADD-A2CE-4E26-98D6-751491267198}" = lport=443 | protocol=6 | dir=in | app=system | "{D063DD62-CB32-4C97-A453-2387FBD613F9}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{D46D7F2A-966A-4102-97CF-AE265E76A015}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe | "{DA8C7B35-7B1A-4E0A-9644-FAD779AB6DAB}" = lport=3540 | protocol=17 | dir=in | svc=pnrpsvc | app=%systemroot%\system32\svchost.exe | "{E617D538-1732-4340-94E9-4D57D0A246B2}" = lport=2869 | protocol=6 | dir=in | app=system | "{E68EC0E3-8FA9-4465-AE10-37EA8003C735}" = lport=3128 | protocol=6 | dir=in | app=c:\program files (x86)\bench\proxy\proc.exe | "{EBE57D17-50B8-4AFF-BD65-C4C2583F49E6}" = lport=3389 | protocol=17 | dir=in | svc=termservice | app=%systemroot%\system32\svchost.exe | "{EC993B48-394B-474D-AFFC-CCA50410582D}" = lport=139 | protocol=6 | dir=in | app=system | "{ED268FA3-C19F-4A52-B9CE-39A7876386BC}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{F16CA894-39FD-4DBC-A5F3-F5ECACA90F73}" = rport=3702 | protocol=17 | dir=out | app=%systemroot%\system32\p2phost.exe | "{F8BFF65D-DE3D-4705-9C7E-EAD61CEACC4B}" = lport=989 | protocol=6 | dir=out | svc=ftpsvc | app=%windir%\system32\svchost.exe | "{FE99ED8D-BAE6-4DC0-84A7-5600EB022520}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0BBAE8FB-7C5F-4A93-8F57-ACAAAFABEBA3}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{0BFEEECD-F32C-4C55-9C68-09B51913B275}" = protocol=17 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe | "{0C18EB32-36B7-434B-A4EF-E1CF79D436D6}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\hptouchsmartphoto.exe | "{0CB7559D-55F3-4306-B66B-AFF48FC47E2B}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\tsmagent.exe | "{14087A1E-C0CC-4208-9193-FEFC5161A611}" = protocol=6 | dir=out | app=%systemroot%\system32\p2phost.exe | "{1D78D2A8-C8D1-432B-9E52-FB61A436B0EF}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hpdvdsmart.exe | "{2150D552-3955-48E0-87E4-B540621F4556}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\tsmagent.exe | "{23993F77-B652-43D9-9179-72CDF32D2962}" = protocol=6 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | "{25FFA40E-3CAF-42A2-85C6-9C13A06713F9}" = protocol=6 | dir=in | app=%systemroot%\system32\p2phost.exe | "{2604DED7-73A6-4C08-AB4D-2F8255D79D0C}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hptouchsmartmusic.exe | "{2687EF90-DA76-4C53-AF99-66B8A9CDF349}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{27459AAB-B93E-4FDA-BBA8-342A0EA104E7}" = protocol=47 | dir=in | app=system | "{2B97B091-3E1F-4B28-B579-2FAA79E967C6}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{316C03B0-FFB0-4896-BC33-2BFFEE78ACB7}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\hptouchsmartvideo.exe | "{3B2E4566-63BF-4AA7-BC5E-0D7119E775DD}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\tsmagent.exe | "{3DB8A54B-E25E-4A5B-93DE-59D5869720BF}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\hptouchsmartmusic.exe | "{3F5E095B-FD60-4556-8FAD-E62A6CDB0C3D}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe | "{42DD34EB-CD0B-4A95-9093-83D1F8DDD381}" = protocol=17 | dir=in | app=c:\program files\ma-config.com\x64\maconfservice.exe | "{43E118DC-CD5A-483B-B99E-39BB1FA057D6}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{4446934C-B7A0-4F0F-A8CF-E9EF41AC9BF9}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{4756F8D7-27E3-454B-878D-471BC063E081}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe | "{4BD5F6C6-FECF-49B1-80AD-8E023B4EB334}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{4E551E9C-108C-4652-817E-7EF8B9A9140B}" = protocol=6 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | "{4EB9EE8E-93D4-4CC2-964D-9BB27CF7BFED}" = protocol=47 | dir=out | app=system | "{52621F5B-0994-4B97-854B-99B407511E24}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{559912B9-3715-4543-85DE-624FE89CB1C0}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hptouchsmartvideo.exe | "{56DD9909-7AB4-4506-8010-FEE9B5F74C54}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{57A3E2F2-EF2A-43A4-BF08-29A8777C1337}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe | "{583471F6-AEBF-40E8-949C-CB2EF8E13FD9}" = dir=in | app=c:\users\patrick\appdata\local\microsoft\skydrive\skydrive.exe | "{59BAC1C4-53AC-426B-A5A9-9824B9DDCD2C}" = protocol=6 | dir=in | app=c:\program files\ma-config.com\x64\maconfservice.exe | "{5F445873-6FBE-475C-AE7C-1FC8EE9263DA}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\kernel\clml\clmlsvc.exe | "{60468913-7868-46EE-9467-D46712672BA4}" = protocol=6 | dir=out | app=%systemroot%\system32\wudfhost.exe | "{612F8255-F16C-4F5A-9255-869981FB62DC}" = protocol=6 | dir=in | app=c:\program files\ma-config.com\maconfigagent.exe | "{61BDE210-8460-44EF-BDA6-C48C21E175CE}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{6E4EE210-5C15-437B-BA6F-EDEBF259C002}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{7547DC17-AAEE-47AE-BDE6-5C46CD978F8D}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{7630DEA6-6851-4337-9693-78B7BFF6DA2C}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\tsmagent.exe | "{76556F54-15ED-40F2-A1DB-5F3780952927}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hptouchsmartphoto.exe | "{793385D2-9B60-412E-B32E-A59813964B28}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe | "{7C399152-6D1E-4942-971D-EE571F48EDBD}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{7DE99BC5-9D91-4476-A751-1B5053C431EE}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe | "{7E68FB22-91E8-4269-B946-B679B160D71A}" = dir=in | app=c:\users\patrick\appdata\local\microsoft\skydrive\skydrive.exe | "{7F2FA3B6-B1AC-46A7-B134-C833DEC4C62F}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\hptouchsmartphoto.exe | "{80145F78-FD17-487A-BC2C-F2C5AFF9E4B3}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{83386CA5-D214-4983-89CF-C976FEDCEC80}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hptouchsmartmusic.exe | "{8554BFC8-99C4-42EC-812E-0A01CA9B5CDA}" = protocol=17 | dir=in | app=c:\program files (x86)\goforfiles\goforfiles.exe | "{91849A10-6DD5-4DD7-A766-EB90FA06CD0A}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\kernel\clml\clmlsvc.exe | "{941E6F55-1A83-4AC8-9D01-0D964C377A6F}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hpdvdsmart.exe | "{96ACE7A6-8B89-4B6C-A355-D8663CCC0D70}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hptouchsmartvideo.exe | "{9C6CA496-7112-49FE-912F-9BB667F399B7}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\kernel\clml\clmlsvc.exe | "{9D92B10F-E4EB-494C-8AAE-640F604C3431}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{9E270FED-BEFC-44B9-80BA-19A7A636A6F2}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\kernel\clml\clmlsvc.exe | "{A2E8DFC5-10D4-47E3-92CC-362F412553FE}" = protocol=6 | dir=in | app=c:\programdata\esafe\egdpsvc.exe | "{A4C1E7A2-FDAB-404B-AC2A-5D1C415D7697}" = protocol=6 | dir=in | app=f:\fscommand\cksocketserver.exe | "{A7C4F6A3-5BC8-492C-8BAB-948DEC58E8A9}" = protocol=6 | dir=in | svc=msiscsi | app=%systemroot%\system32\svchost.exe | "{A8F09314-B459-4E42-B99A-DAB732914DB5}" = protocol=17 | dir=in | app=c:\program files\ma-config.com\maconfigagent.exe | "{A974B1C9-D1E6-491C-A30D-CA8B07FDB24E}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\hptouchsmartphoto.exe | "{AC8D9A84-D4B8-4D63-8FA6-52BAD66C4EDD}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\hptouchsmartmusic.exe | "{B012D5B2-CCEA-470B-AD2E-EDBCE9589848}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\tsmagent.exe | "{B3A11A2F-30F5-4420-A579-B23D520AB200}" = protocol=6 | dir=in | app=c:\program files (x86)\bearshare applications\bearshare\bearshare.exe | "{B519AEA2-32EB-420B-BD1D-17B090213E18}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{BF15D029-A530-4D75-86B4-92BF449A0AD6}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\hptouchsmartvideo.exe | "{C0410574-43BB-4DE3-B6A9-5E1EB0A2FCBC}" = protocol=6 | dir=in | svc=ftpsvc | app=c:\windows\system32\svchost.exe | "{C3EF4E49-C2F7-42EC-92C2-82CBBFD2F9E1}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{C9A14CE7-2B0C-404C-B1CB-7213986EBBD9}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\kernel\clml\clmlsvc.exe | "{CAEEAF46-3CC3-4933-B1AA-53F58D47DBC3}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | "{CBF2DDD4-F001-4219-B8CB-60D49FC98F2A}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe | "{CBFAA7F6-3C3E-48AB-A861-C07B39F83E10}" = protocol=17 | dir=in | app=c:\program files (x86)\goforfiles\goforfilesdl.exe | "{CC6DC75A-D252-43BD-9451-ACA57D280D70}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\hptouchsmartvideo.exe | "{CCE59CB9-4FFE-4A5A-92E0-708602E4DCA7}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe | "{D099597B-53C6-4FE5-8721-15A2CDFDCDED}" = protocol=6 | dir=in | app=c:\program files (x86)\goforfiles\goforfiles.exe | "{D1E41CF2-C629-41B5-80FD-FEC6F3C30442}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{D31E1075-D711-419E-AB9A-1E32C202EBB5}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | "{DE3E89FC-E886-4BED-B6E1-8A2E3A299F1C}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcrmgr.exe | "{E21DBD44-E0BD-451F-812D-8D94284C54C1}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hptouchsmartphoto.exe | "{E29F20C6-BF13-4A4B-AB71-D0D564EB674E}" = dir=in | app=c:\program files (x86)\cyberlink\powerdirector\pdr.exe | "{E2EE5B5A-DC28-4506-8460-DE9E4FDFC9C4}" = protocol=6 | dir=in | app=c:\program files (x86)\goforfiles\goforfilesdl.exe | "{E3A8F355-21EF-4E39-A61C-753217B9CDD5}" = protocol=6 | dir=out | svc=msiscsi | app=%systemroot%\system32\svchost.exe | "{EA863CFA-19CB-45D7-ADFF-36375D1BD192}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\hptouchsmartmusic.exe | "{EAD3BB97-20D6-4771-9339-FD00E5ACE08E}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe | "{EC1E6289-9549-4C15-901C-14F893EF2135}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{ECC27A09-14E4-4531-AACF-BED40067BED4}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe | "{F1EA8A28-F6E9-4805-B8AF-DD9F9CC1740C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{F4624F42-A840-48FC-8324-0B6A7546B60A}" = protocol=6 | dir=in | app=c:\program files\common files\mcafee\platform\mcsvchost\mcsvhost.exe | "{F814E01C-4C4A-4BFD-82A4-913FED5D6684}" = protocol=17 | dir=in | app=f:\fscommand\cksocketserver.exe | "{F818F743-3634-4F0D-B217-F4BB93C36739}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{FA092EBD-7E87-4A2C-BC47-602138CA15C1}" = dir=in | app=c:\program files (x86)\cyberlink\powerdirector\pdr.exe | "{FBB82A88-CC4A-4912-A41F-81652C658621}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "TCP Query User{2D37226E-D7A0-4567-BBF0-51877EF1954A}C:\windows\system32\mmc.exe" = protocol=6 | dir=in | app=c:\windows\system32\mmc.exe | "UDP Query User{35A5D8BF-61CF-431A-925A-5135F812D506}C:\windows\system32\mmc.exe" = protocol=17 | dir=in | app=c:\windows\system32\mmc.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64) "{1A72EC9A-8D86-4E32-86DF-FEF901B821FE}" = ANT Drivers Installer x64 "{33E28B58-7BA0-47B7-AA01-9225ABA2B8A9}" = iTunes "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{4B70F667-DC59-D8B4-FE13-5C47096885E5}" = McAfee Online Backup "{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime "{5AF3560C-09BA-426F-BFA0-FEF0A94A9D8B}" = Microsoft Corporation "{5CE7E3F5-9803-4F32-AA89-2D8848A80109}" = Microsoft LifeCam "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 "{66F8CA06-DAEE-8F7B-FEF9-2A59E622BBA7}" = AMD Accelerated Video Transcoding "{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}" = Apple Mobile Device Support "{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour "{7648D847-AEBC-4DEF-ADA2-F93314A5F4F2}" = SLOW-PCfighter "{7DEBE4EB-6B40-3766-BB35-5CBBC385DA37}" = Microsoft .NET Framework 4.5.1 "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{88E60521-1E4E-4785-B9F1-1798A4BD0C30}" = HP MediaSmart SmartMenu "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007 "{90120000-002A-040C-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (French) 2007 "{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1 "{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036" = Microsoft .NET Framework 4.5.1 (Français) "{9A3C5DC9-EEA9-4FB2-855A-26FE6DA733EA}" = Ma-Config.com (64 bits) "{9C5A08BF-BB99-4998-81BD-F6CC32483B34}" = Microsoft Corporation "{A70B905D-2E57-66A0-3BFE-66B8E71E0C70}" = AMD Catalyst Install Manager "{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64) "{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64 "{C22759DB-BA8B-30E7-99EE-8B47DB43AE56}" = Microsoft .NET Framework 4.5.1 (FRA) "{C7189B8D-3861-B2D5-A948-582134C2B21E}" = ccc-utility64 "{D3DE00DF-4EFB-8013-3E93-D735E69CAF6A}" = AMD Drag and Drop Transcoding "{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 "{DF1AFD96-296C-421E-FF16-16EB9350D54D}" = AMD Media Foundation Decoders "{EF79C448-6946-4D71-8134-03407888C054}" = Shared C Run-time for x64 "98157A226B40B173301B0F53C8E98C47805D5152" = Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) "McAfee Security Scan" = McAfee Security Scan Plus "SLOW-PCfighter" = SLOW-PCfighter "WinRAR archiver" = WinRAR 5.10 (64-bit) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{00FE2935-FB56-4410-AB5F-D6E70C1771D2}" = Garmin WebUpdater "{02160E66-3A64-4047-8E88-D2B5D43A0575}" = Garmin Express "{0228e555-4f9c-4e35-a3ec-b109a192b4c2}" = Google Gmail Notifier "{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements "{0A0B5A51-282D-49EA-48DA-14B2486E5B33}" = CCC Help Hungarian "{0AF0419B-6603-5DDC-1C12-D4CE757C8345}" = CCC Help English "{0CB6074C-6CD0-C3E7-0633-896B4738C0D6}" = CCC Help German "{111EE7DF-FC45-40C7-98A7-753AC46B12FB}" = QuickTime 7 "{1211AC7A-31C3-391D-BA7F-54C37DE0F262}" = CCC Help Greek "{16B9D94B-6BD5-6AD2-7524-4742D2B0FD2E}" = Catalyst Control Center InstallProxy "{17B4760F-334B-475D-829F-1A3E94A6A4E6}" = HP Setup "{182EBA66-E694-BF7F-09D7-B5433F5AA9FE}" = CCC Help Polish "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{20A3AAE7-B559-FBB1-92C6-AF3D5FED9E92}" = CCC Help Chinese Traditional "{219611BE-3B5D-33EE-F3AD-9BD7282FE795}" = CCC Help Russian "{21ECABC3-40B2-42DF-8E21-ACF3A4D0D95A}" = Apple Application Support "{23A999B4-2696-39CF-A587-F89E414D5519}" = CCC Help Portuguese "{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library "{27C467F8-F8EF-4f68-BD72-D63632B2096C}" = McAfee Online Backup "{280A0282-7895-61C0-824F-A39AE1B71CDA}" = Catalyst Control Center Graphics Previews Common "{2B2F061B-CEB6-3DF9-AA8A-9907CFED93DB}" = CCC Help French "{2B460966-D9B9-4365-87E5-C55E2720A8DB}" = Garmin Express Tray "{3023EBDA-BF1B-4831-B347-E5018555F26E}" = Movie Theme Pack for HP MediaSmart Video "{3C50988F-0533-D5A6-B46C-8B6BB5A92F74}" = CCC Help Norwegian "{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}" = Garmin USB Drivers "{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}" = HP Advisor "{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = Recovery Manager "{46537879-F1AB-0BFD-77F2-AD0F6719623A}" = CCC Help Danish "{49A2AD60-9E15-297B-B502-FE5550CB1660}" = CCC Help Chinese Standard "{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}" = Google Earth "{52E27109-C485-7E96-8B92-C7431FB9B511}" = CCC Help Turkish "{55ae01f2-f0a8-4342-a9cc-a0327cdaa811}" = Garmin Express "{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}" = Realtek Card Reader "{5CA74EDC-CFC3-4FA0-AED7-1415CA19F250}" = Garmin POI Loader "{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM "{62A09364-9839-D02F-2565-6749CEAF08F4}" = CCC Help Spanish "{6443DF74-8F5B-4113-560F-47CD142D3916}" = CCC Help Japanese "{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library "{69FD2930-C361-47F6-822E-71B021526778}" = HP Support Solutions Framework "{6BF66AED-3EA4-4106-B240-5CE96C9B76B0}" = Brother MFL-Pro Suite DCP-195C "{6F340107-F9AA-47C6-B54C-C3A19F11553F}" = Hewlett-Packard ACLM.NET v1.1.0.0 "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{741CFE3A-1C0B-4A7D-8E08-5D78C911C09D}" = HP Support Assistant "{753CD7B4-E49E-47C6-86BA-5CBE6AD74879}" = PASSWORDfighter "{77CBF305-64B5-CC66-673C-CAE5CACCA640}" = CCC Help Swedish "{77D28FF5-242F-488A-8215-937D6A4D69E0}" = Adobe AIR "{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update "{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}" = Skype(TM) 6.16 "{7D095455-D971-4D4C-9EFD-9AF6A6584F3A}" = Bing Bureau "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver "{88B2ABCF-9C00-47C1-8FC4-369B98845DD7}" = Catalyst Control Center - Branding "{88B9E14A-8D6F-1C30-4058-3874FDC8EB2C}" = HydraVision "{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2007 "{90120000-0016-040C-0000-0000000FF1CE}_HOMESTUDENTR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2007 "{90120000-0018-040C-0000-0000000FF1CE}_HOMESTUDENTR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2007 "{90120000-001A-040C-0000-0000000FF1CE}_OUTLOOKR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2007 "{90120000-001B-040C-0000-0000000FF1CE}_HOMESTUDENTR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007 "{90120000-001F-0401-0000-0000000FF1CE}_HOMESTUDENTR_{3E8EA473-ECCE-405F-A9CA-59446AEADD3A}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-0401-0000-0000000FF1CE}_OUTLOOKR_{3E8EA473-ECCE-405F-A9CA-59446AEADD3A}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-0407-0000-0000000FF1CE}_OUTLOOKR_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-0409-0000-0000000FF1CE}_OUTLOOKR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-040C-0000-0000000FF1CE}_OUTLOOKR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007 "{90120000-001F-0413-0000-0000000FF1CE}_HOMESTUDENTR_{2C95E7EE-FEA7-4B3A-A6E5-DF90A88B816A}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-0413-0000-0000000FF1CE}_OUTLOOKR_{2C95E7EE-FEA7-4B3A-A6E5-DF90A88B816A}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007 "{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-0C0A-0000-0000000FF1CE}_OUTLOOKR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-0020-040C-0000-0000000FF1CE}" = Module de compatibilité pour Microsoft Office System 2007 "{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-002A-0000-1000-0000000FF1CE}_OUTLOOKR_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-002A-040C-1000-0000000FF1CE}_HOMESTUDENTR_{8283FD64-6A3B-4104-9E12-7CA25EF29A1A}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-002A-040C-1000-0000000FF1CE}_OUTLOOKR_{8283FD64-6A3B-4104-9E12-7CA25EF29A1A}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2007 "{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2007 "{90120000-006E-040C-0000-0000000FF1CE}_HOMESTUDENTR_{8283FD64-6A3B-4104-9E12-7CA25EF29A1A}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-006E-040C-0000-0000000FF1CE}_OUTLOOKR_{8283FD64-6A3B-4104-9E12-7CA25EF29A1A}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-00A1-040C-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (French) 2007 "{90120000-00A1-040C-0000-0000000FF1CE}_HOMESTUDENTR_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In "{91120000-001A-0000-0000-0000000FF1CE}" = Microsoft Office Outlook 2007 "{91120000-001A-0000-0000-0000000FF1CE}_OUTLOOKR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3) "{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007 "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3) "{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195 "{95140000-007A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook Connector "{95140000-00AF-040C-0000-0000000FF1CE}" = Visionneuse Microsoft PowerPoint "{989EF5D6-F20D-7D17-57CE-60ACD155CF13}" = CCC Help Finnish "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9D45CCE2-F5F7-BAD9-C06E-51FC0DD6CCA2}" = Catalyst Control Center "{A1CF7B76-682D-4547-AA96-11B659A2CEAC}" = Microsoft Corporation "{A436F67F-687E-4736-BD2B-537121A804CF}" = HP Product Detection "{A4DCAA77-151D-4CE9-8D79-E4ADB48031A2}" = PC Sync "{A5A5ADA2-A13F-BE10-A38C-A20B0BD345C9}" = CCC Help Thai "{A6D309F9-38AB-4cc3-8DA7-0544F5011788}" = soft Xpansion Perfect PDF 6 Premium "{A9D84363-82E3-4951-DEAF-BAEB62A55195}" = Catalyst Control Center Localization All "{AC76BA86-7AD7-1036-7B44-AB0000000001}" = Adobe Reader XI (11.0.07) - Français "{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}" = HP MediaSmart Music/Photo/Video "{B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}" = Microsoft Corporation "{B8AC1A89-FFD1-4F97-8051-E505A160F562}" = HP Odometer "{B9A03B7B-E0FF-4FB3-BA83-762E58A1B0AA}" = HP Support Information "{BCC80EF3-E106-4AEA-8C57-F217F9BC7358}" = Microsoft SQL Server 2005 Compact Edition [FRA] "{C226DDBF-A740-F6E2-9859-08D1581C7507}" = CCC Help Italian "{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint "{C611CF88-969D-43E6-A877-D6D6439DD081}" = HP Remote Solution "{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector "{CB4AA454-DCF6-47EB-B1EC-3CBFFDBFC96D}" = SPAMfighter "{D4008E9D-8A0A-E3CE-F987-5EEA38A6017F}" = CCC Help Czech "{D46D081B-F60E-467E-A7C4-117B70D76731}" = HP Update "{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD "{DEA1CC63-5A71-4014-9816-40750C4F4823}" = Elevated Installer "{E135A549-5A50-4EB0-05F9-C25F91485287}" = CCC Help Korean "{E9E34215-82EF-4909-BE2F-F581F0DC9062}" = DirectX for Managed Code Update (Summer 2004) "{E9E37358-E3E1-47BA-9E21-375EF3616BC9}" = Lecteur CANALPLAY 2.7 "{EEDCAAEC-BB8C-479B-B91E-654649C80D0B}" = Atlas Routier & Plans de Ville France 2009 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F3DE7631-3D3E-4B0D-F832-5A17A8138A69}" = CCC Help Dutch "{F6113E54-9D89-18D0-5288-62D081A9A380}" = Catalyst Control Center InstallProxy "{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}" = DVD Menu Pack for HP MediaSmart Video "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player 14 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 14 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 12.1 "Digital Editions" = Adobe Digital Editions "DivX Setup" = Configuration DivX "Google Chrome" = Google Chrome "HOMESTUDENTR" = Microsoft Office Home and Student 2007 "HP Remote Solution" = HP Remote Solution "InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}" = Movie Theme Pack for HP MediaSmart Video "InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}" = HP MediaSmart Music/Photo/Video "InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint "InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector "InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD "InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}" = DVD Menu Pack for HP MediaSmart Video "Mozilla Firefox 30.0 (x86 fr)" = Mozilla Firefox 30.0 (x86 fr) "MozillaMaintenanceService" = Mozilla Maintenance Service "MSC" = McAfee Total Protection "OUTLOOKR" = Microsoft Office Outlook 2007 "PASSWORDfighter" = PASSWORDfighter "Patience 2.4" = Patience 2.4 "SPAMfighter" = SPAMfighter "Universal Document Converter_is1" = Universal Document Converter (Demo) "WildTangent hp Master Uninstall" = HP Games "WildTangent wildgames Master Uninstall" = Jeux WildTangent "WinRAR archiver" = WinRAR 4.11 (32-bit) [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-1739387855-3420806827-3675242863-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "3110519804.boutique.arte.tv" = Lecteur vidéo ARTE vod "Amazon Amazon Cloud Player" = Amazon Cloud Player "Amazon MP3 Downloader" = Amazon MP3 Downloader 1.0.18 "OneDriveSetup.exe" = Microsoft OneDrive [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 19/07/2014 20:54:53 | Computer Name = PATRICK-PC | Source = VSS | ID = 8193 Description = Error - 19/07/2014 20:56:17 | Computer Name = PATRICK-PC | Source = Application Error | ID = 1000 Description = Nom de l'application défaillante div6D37.tmp, version : 2.6.1.8, horodatage : 0x4f3db06c Nom du module défaillant : div6D37.tmp, version : 2.6.1.8, horodatage : 0x4f3db06c Code d'exception : 0xc0000005 Décalage d'erreur : 0x0003271d ID du processus défaillant : 0x860 Heure de début de l'application défaillante : 0x01cfa3b55084a481 Chemin d'accès de l'application défaillante : C:\Users\PATRICK\AppData\Local\Temp\div6D26.tmp\div6D37.tmp Chemin d'accès du module défaillant: C:\Users\PATRICK\AppData\Local\Temp\div6D26.tmp\div6D37.tmp ID de rapport : a7450ea5-0fa8-11e4-9f2e-e0cb4e04b62c Error - 19/07/2014 20:56:40 | Computer Name = PATRICK-PC | Source = Application Error | ID = 1000 Description = Nom de l'application défaillante div66A2.tmp, version : 2.6.1.8, horodatage : 0x4f3db06c Nom du module défaillant : div66A2.tmp, version : 2.6.1.8, horodatage : 0x4f3db06c Code d'exception : 0xc0000005 Décalage d'erreur : 0x0005724a ID du processus défaillant : 0x185c Heure de début de l'application défaillante : 0x01cfa3b575bd682d Chemin d'accès de l'application défaillante : C:\Users\PATRICK\AppData\Local\Temp\div6682.tmp\div66A2.tmp Chemin d'accès du module défaillant: C:\Users\PATRICK\AppData\Local\Temp\div6682.tmp\div66A2.tmp ID de rapport : b4dd49b8-0fa8-11e4-9f2e-e0cb4e04b62c Error - 19/07/2014 21:00:13 | Computer Name = PATRICK-PC | Source = Application Error | ID = 1000 Description = Nom de l'application défaillante div892C.tmp, version : 2.6.1.8, horodatage : 0x4f3db06c Nom du module défaillant : div892C.tmp, version : 2.6.1.8, horodatage : 0x4f3db06c Code d'exception : 0xc0000005 Décalage d'erreur : 0x0005724a ID du processus défaillant : 0xf00 Heure de début de l'application défaillante : 0x01cfa3b5f3222644 Chemin d'accès de l'application défaillante : C:\Users\PATRICK\AppData\Local\Temp\div890C.tmp\div892C.tmp Chemin d'accès du module défaillant: C:\Users\PATRICK\AppData\Local\Temp\div890C.tmp\div892C.tmp ID de rapport : 34503efd-0fa9-11e4-8290-e0cb4e04b62c Error - 19/07/2014 21:00:58 | Computer Name = PATRICK-PC | Source = Application Error | ID = 1000 Description = Nom de l'application défaillante div4402.tmp, version : 2.6.1.8, horodatage : 0x4f3db06c Nom du module défaillant : div4402.tmp, version : 2.6.1.8, horodatage : 0x4f3db06c Code d'exception : 0xc0000005 Décalage d'erreur : 0x0005724a ID du processus défaillant : 0xe94 Heure de début de l'application défaillante : 0x01cfa3b60fa26d50 Chemin d'accès de l'application défaillante : C:\Users\PATRICK\AppData\Local\Temp\div43F2.tmp\div4402.tmp Chemin d'accès du module défaillant: C:\Users\PATRICK\AppData\Local\Temp\div43F2.tmp\div4402.tmp ID de rapport : 4ea35cf7-0fa9-11e4-8290-e0cb4e04b62c Error - 19/07/2014 21:18:51 | Computer Name = PATRICK-PC | Source = VSS | ID = 8193 Description = Error - 19/07/2014 21:18:51 | Computer Name = PATRICK-PC | Source = VSS | ID = 8194 Description = Error - 19/07/2014 21:18:51 | Computer Name = PATRICK-PC | Source = VSS | ID = 8193 Description = Error - 20/07/2014 04:34:15 | Computer Name = PATRICK-PC | Source = VSS | ID = 8193 Description = Error - 20/07/2014 06:05:22 | Computer Name = PATRICK-PC | Source = VSS | ID = 8193 Description = [ Hewlett-Packard Events ] Error - 12/06/2014 08:03:15 | Computer Name = PATRICK-PC | Source = Hewlett-Packard | ID = 0 Description = fr-FR Impossible de trouver le fichier 'C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Logs\SystemInfoAA.xml'. mscorlib à System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath) à System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy) à System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy) à System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options) à System.IO.StreamReader..ctor(String path, Encoding encoding, Boolean detectEncodingFromByteOrderMarks, Int32 bufferSize) à System.IO.StreamReader..ctor(String path, Encoding encoding) à System.IO.File.ReadAllText(String path, Encoding encoding) à n.a(Object A_0, EventArgs A_1) Error - 12/06/2014 08:03:16 | Computer Name = PATRICK-PC | Source = Hewlett-Packard | ID = 0 Description = fr-FR Impossible de trouver le fichier 'C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Logs\SystemInfoAA.xml'. mscorlib à System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath) à System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy) à System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy) à System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options) à System.IO.StreamReader..ctor(String path, Encoding encoding, Boolean detectEncodingFromByteOrderMarks, Int32 bufferSize) à System.IO.StreamReader..ctor(String path, Encoding encoding) à System.IO.File.ReadAllText(String path, Encoding encoding) à n.a(Object A_0, EventArgs A_1) [ Media Center Events ] Error - 11/07/2014 06:54:25 | Computer Name = PATRICK-PC | Source = MCUpdate | ID = 0 Description = 12:54:25 - Erreur de connexion à Internet. 12:54:25 - Impossible de contacter le service.. Error - 11/07/2014 06:54:35 | Computer Name = PATRICK-PC | Source = MCUpdate | ID = 0 Description = 12:54:30 - Erreur de connexion à Internet. 12:54:30 - Impossible de contacter le service.. [ OSession Events ] Error - 28/02/2014 08:37:28 | Computer Name = PATRICK-PC | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6680.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1032 seconds with 900 seconds of active time. This session ended with a crash. Error - 18/05/2014 08:52:51 | Computer Name = PATRICK-PC | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6691.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 4497 seconds with 780 seconds of active time. This session ended with a crash. [ System Events ] Error - 19/07/2014 02:56:38 | Computer Name = PATRICK-PC | Source = Service Control Manager | ID = 7009 Description = Le dépassement de délai (30000 millisecondes) a été atteint lors de l'attente de la connexion du service 1%. Error - 19/07/2014 02:56:38 | Computer Name = PATRICK-PC | Source = Service Control Manager | ID = 7000 Description = Le service 1% n'a pas pu démarrer en raison de l'erreur : %%1053 Error - 19/07/2014 12:56:26 | Computer Name = PATRICK-PC | Source = Service Control Manager | ID = 7009 Description = Le dépassement de délai (30000 millisecondes) a été atteint lors de l'attente de la connexion du service 1%. Error - 19/07/2014 12:56:26 | Computer Name = PATRICK-PC | Source = Service Control Manager | ID = 7000 Description = Le service 1% n'a pas pu démarrer en raison de l'erreur : %%1053 Error - 19/07/2014 18:30:52 | Computer Name = PATRICK-PC | Source = Service Control Manager | ID = 7024 Description = Le service 1% s'est arrêté avec l'erreur service particulière %%2. Error - 19/07/2014 20:52:50 | Computer Name = PATRICK-PC | Source = Service Control Manager | ID = 7030 Description = Le service SProtection est marqué comme étant interactif. Cependant, le système est configuré pour ne pas autoriser les services interactifs. Ce service peut ne pas fonctionner correctement. Error - 19/07/2014 20:52:53 | Computer Name = PATRICK-PC | Source = Service Control Manager | ID = 7030 Description = Le service GlobalUpdater est marqué comme étant interactif. Cependant, le système est configuré pour ne pas autoriser les services interactifs. Ce service peut ne pas fonctionner correctement. Error - 19/07/2014 21:01:21 | Computer Name = PATRICK-PC | Source = Service Control Manager | ID = 7024 Description = Le service 1% s'est arrêté avec l'erreur service particulière %%2. Error - 20/07/2014 04:12:32 | Computer Name = PATRICK-PC | Source = Service Control Manager | ID = 7024 Description = Le service 1% s'est arrêté avec l'erreur service particulière %%2. Error - 20/07/2014 05:16:13 | Computer Name = PATRICK-PC | Source = Service Control Manager | ID = 7024 Description = Le service 1% s'est arrêté avec l'erreur service particulière %%2. < End of report >

flyblue · Answer

Bonsoir ami contributeur,

je n'ai pas pu te copier les liens, ça ne marche pas, par contre je n'ai plus de publicités radsteroids et sweet qui apparaissent sur mes navigations.
Je te remercie pour ton aide précieuse. J'aimerai inscrire "Résolu", mais là encore, je suis un piètre utilisateur.
Cordialement,
P.O.

Supprimer snapdo, sweet, interactive deal, radsteroids

8 réponses