Mon PC rame énormément, help
Bonjour,
J'ai, depuis deux semaines, mon PC qui rame, il est très très très lent. J'ai donc lancé un anti-virus (qui m'en a détecté 4), puis un anti-malware (qui m'en a détecté 6); j'ai donc tout mis en quarantaine puis supprimé. Comment être sûre que mon PC est, désormais, sain?
Malgré tout, mon PC rame encore, voire toujours autant. Comment identifier l'origine du problème?
Lorsque j'ouvre les gestionnaire des tâches, l'UC utilisée tourne en permanence à 100%, à quoi cela est-il dû? Je pense que c'est pour cela qu'il rame, mais je n'arrive pas à aller plus loin dans mes recherches.
Merci beaucoup pour le coup de main.
J'ai, depuis deux semaines, mon PC qui rame, il est très très très lent. J'ai donc lancé un anti-virus (qui m'en a détecté 4), puis un anti-malware (qui m'en a détecté 6); j'ai donc tout mis en quarantaine puis supprimé. Comment être sûre que mon PC est, désormais, sain?
Malgré tout, mon PC rame encore, voire toujours autant. Comment identifier l'origine du problème?
Lorsque j'ouvre les gestionnaire des tâches, l'UC utilisée tourne en permanence à 100%, à quoi cela est-il dû? Je pense que c'est pour cela qu'il rame, mais je n'arrive pas à aller plus loin dans mes recherches.
Merci beaucoup pour le coup de main.
28 réponses
Résumé de la discussion
Le problème principal est un PC lent avec l’utilisation du processeur à 100% et des signes d’infection détectés par antivirus et anti-malware sur Windows 7 et Internet Explorer 7. Plusieurs solutions ont été proposées, incluant l’exécution d’outils spécialisés (OTL OldTimer, ZHPDiag) et la collecte des rapports détaillant les éléments et fichiers modifiés ou supprimés lors des scans. Les échanges indiquent l’utilisation de rapports détaillés (par exemple sur les éléments du registre et les fichiers infectés) et l’analyse des résultats, notamment des redirections Internet et des paramètres démarrage modifiés. En cas de doute, les conseils évoquent de poursuivre les rapports OTL et malware, puis d’appliquer des mesures complémentaires comme la mise à jour des pilotes et la désactivation d’utilitaires suspects.
-
Contributeur sécuritéfais l antivirus en ligne . A plus
-
Je n'ai pas Avg...
-
Contributeur sécuritédésinstalle avg antispyware qui n'est plus mis à jour depuis des années
puis colle un rappot d'un antivirus en ligne <= ici
avec bitdefender ou pnada ou kaspersky ou nod32 -
Voilà :
http://www.cijoint.fr/cjlink.php?file=cj201010/cijD0JichQ.txt -
Contributeur sécuritéTélécharge OTL de OLDTimer ici :
http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/
et enregistre le sur ton Bureau.
Double clic sur OTL.exe pour le lancer.
Coche les 2 cases Lop et Purity
Coche la case devant "scan all users"
Clic sur Run Scan.
A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).
Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\OTL.txt)
Pour me le transmettre clique sur ce lien :
http://www.cijoint.fr/
Clique sur Parcourir et cherche le fichier ci-dessus.
Clique sur Ouvrir.
Clique sur "Cliquez ici pour déposer le fichier".
Un lien de cette forme :
http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt
est ajouté dans la page. -
OTL logfile created on: 30/10/2010 14:30:27 - Run 2
OTL by OldTimer - Version 3.2.17.1 Folder = C:\Users\Jess\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy
4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 69,00% Memory free
8,00 Gb Paging File | 7,00 Gb Available in Paging File | 83,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 452,60 Gb Total Space | 249,27 Gb Free Space | 55,08% Space Free | Partition Type: NTFS
Drive D: | 12,97 Gb Total Space | 2,16 Gb Free Space | 16,69% Space Free | Partition Type: NTFS
Computer Name: JESS-PC | User Name: Jess | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - [2010/10/29 17:48:56 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Jess\Desktop\OTL.exe
PRC - [2010/09/07 17:12:02 | 002,838,912 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe
PRC - [2010/09/07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010/01/15 14:49:20 | 000,255,536 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe
PRC - [2009/07/23 20:45:52 | 000,128,296 | ---- | M] (CyberLink Corp.) -- c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe
PRC - [2009/07/23 11:37:16 | 000,206,120 | ---- | M] (CyberLink) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
PRC - [2009/02/03 04:07:18 | 000,240,544 | R--- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10b.exe
PRC - [2008/11/28 17:40:16 | 000,327,680 | ---- | M] (Sony Corporation) -- C:\Program Files (x86)\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
[color=#E56717]========== Modules (SafeList) ==========[/color]
MOD - [2010/10/29 17:48:56 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Jess\Desktop\OTL.exe
MOD - [2010/08/21 07:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
SRV:[b]64bit:[/b] - File not found [Auto | Running] -- C:\Windows\SysNative\ezsvc7.dll -- (ezSharedSvc)
SRV:[b]64bit:[/b] - [2010/09/07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV:[b]64bit:[/b] - [2010/09/07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV:[b]64bit:[/b] - [2010/09/07 17:11:59 | 000,040,384 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV:[b]64bit:[/b] - [2009/07/22 03:33:00 | 000,240,128 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\stacsv64.exe -- (STacSV)
SRV:[b]64bit:[/b] - [2009/07/14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
SRV:[b]64bit:[/b] - [2009/07/08 13:49:02 | 000,030,520 | ---- | M] (Hewlett-Packard) [Auto | Running] -- C:\Windows\SysNative\hpservice.exe -- (hpsrv)
SRV:[b]64bit:[/b] - [2009/07/02 23:16:00 | 000,203,264 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:[b]64bit:[/b] - [2009/03/02 23:42:00 | 000,089,600 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe -- (AESTFilters)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/01/15 14:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/05/22 20:02:20 | 000,250,616 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe -- (GameConsoleService)
SRV - [2009/03/03 11:02:04 | 000,065,536 | ---- | M] (France Telecom SA) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe -- (FTRTSVC)
SRV - [2009/02/22 12:00:00 | 000,129,584 | ---- | M] (EasyBits Sofware AS) [Auto | Running] -- C:\Windows\SysWOW64\ezsvc7.dll -- (ezSharedSvc)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV:[b]64bit:[/b] - File not found [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\TFsExDisk.sys -- (TFsExDisk)
DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\PCASp50a64.sys -- (PCASp50a64)
DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\PCAMp50a64.sys -- (PCAMp50a64)
DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CpqDfw.sys -- (CpqDfw)
DRV:[b]64bit:[/b] - [2010/09/07 16:47:33 | 000,061,008 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:[b]64bit:[/b] - [2009/12/19 10:11:40 | 000,314,400 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:[b]64bit:[/b] - [2009/08/23 01:37:27 | 002,769,400 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX)
DRV:[b]64bit:[/b] - [2009/07/22 03:33:00 | 000,487,936 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\stwrt64.sys -- (STHDA)
DRV:[b]64bit:[/b] - [2009/07/21 05:39:00 | 000,140,712 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)
DRV:[b]64bit:[/b] - [2009/07/15 01:16:00 | 000,273,456 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:[b]64bit:[/b] - [2009/07/14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:[b]64bit:[/b] - [2009/07/14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:[b]64bit:[/b] - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:[b]64bit:[/b] - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:[b]64bit:[/b] - [2009/07/14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:[b]64bit:[/b] - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:[b]64bit:[/b] - [2009/07/14 01:31:10 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:[b]64bit:[/b] - [2009/07/08 13:49:08 | 000,030,008 | ---- | M] (Hewlett-Packard) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\hpdskflt.sys -- (hpdskflt)
DRV:[b]64bit:[/b] - [2009/07/08 13:48:50 | 000,041,272 | ---- | M] (Hewlett-Packard) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelerometer.sys -- (Accelerometer)
DRV:[b]64bit:[/b] - [2009/07/02 23:51:00 | 006,036,480 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag)
DRV:[b]64bit:[/b] - [2009/06/29 20:17:00 | 000,070,656 | ---- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\enecir.sys -- (enecir)
DRV:[b]64bit:[/b] - [2009/06/29 19:00:00 | 000,116,752 | ---- | M] (ATI Research Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV:[b]64bit:[/b] - [2009/06/10 23:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92)
DRV:[b]64bit:[/b] - [2009/06/10 23:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac)
DRV:[b]64bit:[/b] - [2009/06/10 23:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA)
DRV:[b]64bit:[/b] - [2009/06/10 23:01:06 | 001,146,880 | ---- | M] (LSI Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem)
DRV:[b]64bit:[/b] - [2009/06/10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:[b]64bit:[/b] - [2009/06/10 22:37:05 | 006,108,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:[b]64bit:[/b] - [2009/06/10 22:35:33 | 000,389,120 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)
DRV:[b]64bit:[/b] - [2009/06/10 22:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64) Intel(R)
DRV:[b]64bit:[/b] - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:[b]64bit:[/b] - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:[b]64bit:[/b] - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:[b]64bit:[/b] - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:[b]64bit:[/b] - [2009/04/29 08:48:32 | 000,018,432 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HpqKbFiltr.sys -- (HpqKbFiltr)
DRV:[b]64bit:[/b] - [2007/10/24 03:00:00 | 000,053,488 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV - [2009/03/31 10:39:36 | 000,016,392 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\TFsExDisk.Sys -- (TFsExDisk)
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
[color=#E56717]========== Internet Explorer ==========[/color]
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
IE:[b]64bit:[/b] - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
IE - HKLM\..\URLSearchHook: {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files (x86)\Softonic_France\tbSoft.dll (Conduit Ltd.)
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1840214563-557529147-2217194983-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://ww12.cherche.us
IE - HKU\S-1-5-21-1840214563-557529147-2217194983-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = cherche.us
IE - HKU\S-1-5-21-1840214563-557529147-2217194983-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://ww12.cherche.us{searchTerms}
IE - HKU\S-1-5-21-1840214563-557529147-2217194983-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
IE - HKU\S-1-5-21-1840214563-557529147-2217194983-1000\..\URLSearchHook: {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files (x86)\Softonic_France\tbSoft.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-1840214563-557529147-2217194983-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[2009/12/26 00:18:37 | 000,000,000 | ---D | M] -- C:\Users\Jess\AppData\Roaming\mozilla\Extensions
O1 HOSTS File: ([2009/06/10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Softonic_France Toolbar) - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files (x86)\Softonic_France\tbSoft.dll (Conduit Ltd.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Softonic_France Toolbar) - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files (x86)\Softonic_France\tbSoft.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-1840214563-557529147-2217194983-1000\..\Toolbar\WebBrowser: (Softonic_France Toolbar) - {4DAAC69C-CBA7-45E2-9BC8-1044483D3352} - C:\Program Files (x86)\Softonic_France\tbSoft.dll (Conduit Ltd.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Facemoi] c:\Facemoi\facemoi.exe File not found
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1840214563-557529147-2217194983-1000..\Run: [BitComet] C:\Program Files (x86)\BitComet\BitComet.exe File not found
O4 - HKU\S-1-5-21-1840214563-557529147-2217194983-1000..\Run: [Facemoi] c:\Facemoi\facemoi.exe File not found
O4 - HKU\S-1-5-21-1840214563-557529147-2217194983-1000..\Run: [RegistryBooster] C:\Program Files (x86)\Uniblue\RegistryBooster\launcher.exe File not found
O4 - HKLM..\RunOnce: [] File not found
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\SysWow64\mctadmin.exe File not found
O4 - Startup: C:\Users\Jess\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Outil de détection de support PMB.lnk = C:\Program Files (x86)\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe (Sony Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: WallpaperStyle = 2
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: WallpaperStyle = 2
O7 - HKU\S-1-5-21-1840214563-557529147-2217194983-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: WallpaperStyle = 2
O7 - HKU\S-1-5-21-1840214563-557529147-2217194983-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0
O7 - HKU\S-1-5-21-1840214563-557529147-2217194983-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-1840214563-557529147-2217194983-1000\..Trusted Domains: chat-land.org ([]* in Sites de confiance)
O15 - HKU\S-1-5-21-1840214563-557529147-2217194983-1000\..Trusted Domains: mappy.com ([]http in Sites de confiance)
O15 - HKU\S-1-5-21-1840214563-557529147-2217194983-1000\..Trusted Domains: orange.fr ([]http in Sites de confiance)
O15 - HKU\S-1-5-21-1840214563-557529147-2217194983-1000\..Trusted Domains: voila.fr ([rw.search.ke] http in Sites de confiance)
O15 - HKU\S-1-5-21-1840214563-557529147-2217194983-1000\..Trusted Domains: weborama.fr ([orange] http in Sites de confiance)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {32C3FEAE-0877-4767-8C20-62A5829A0945} http://static.ak.facebook.com/fbplugin/win32/axfbootloader.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18:[b]64bit:[/b] - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18:[b]64bit:[/b] - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:[b]64bit:[/b] - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:[b]64bit:[/b] - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll (EasyBits Software Corp.)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\LaunchU3.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:[b]64bit:[/b] - HKLM\..comfile [open] -- "%1" %*
O35:[b]64bit:[/b] - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...com [@ = comfile] -- "%1" %*
O37:[b]64bit:[/b] - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
[2010/10/29 23:51:35 | 001,344,041 | ---- | C] (C_XX) -- C:\Users\Jess\Desktop\ad-remover_ad_remover_2010_2.0.0.0_anglais_313780.exe
[2010/10/29 22:22:05 | 000,000,000 | ---D | C] -- C:\Ad-Remover
[2010/10/29 22:08:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2010/10/29 22:08:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2010/10/29 21:55:35 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll
[2010/10/29 21:55:34 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2010/10/29 21:55:34 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2010/10/29 21:55:34 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2010/10/29 21:52:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2010/10/29 21:30:10 | 000,521,448 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\deployJava1.dll
[2010/10/29 21:30:10 | 000,189,216 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\javaws.exe
[2010/10/29 21:30:10 | 000,171,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\javaw.exe
[2010/10/29 21:30:10 | 000,171,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\java.exe
[2010/10/29 21:29:58 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2010/10/29 17:47:56 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Users\Jess\Desktop\OTL.exe
[2010/10/29 16:31:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ZHPDiag
[2010/10/28 12:36:53 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee Security Scan
[2010/10/28 12:36:53 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee
[2010/10/28 12:36:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\McAfee Security Scan
[2010/10/28 12:29:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab Setup Files
[2010/10/28 01:04:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2010/10/28 01:04:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy
[2010/10/27 13:29:19 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll
[2010/10/27 13:29:19 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll
[2010/10/27 13:29:19 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll
[2010/10/27 13:29:19 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax
[2010/10/27 13:29:19 | 000,258,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax
[2010/10/27 13:29:19 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax
[2010/10/27 13:29:19 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax
[2010/10/27 13:29:10 | 000,027,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys
[2010/10/25 22:36:14 | 000,000,000 | ---D | C] -- C:\Users\Jess\AppData\Roaming\Malwarebytes
[2010/10/25 22:32:30 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010/10/25 22:31:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010/10/25 22:31:39 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010/10/25 22:31:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2010/10/24 21:14:32 | 000,121,936 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2010/10/24 21:14:32 | 000,020,048 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2010/10/24 21:14:30 | 000,028,752 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr.sys
[2010/10/24 21:14:28 | 000,051,280 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2010/10/24 21:14:23 | 000,061,008 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2010/10/24 21:08:10 | 000,038,848 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2010/10/24 21:08:00 | 000,167,592 | ---- | C] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2010/10/24 21:06:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Alwil Software
[2010/10/24 21:06:40 | 000,000,000 | ---D | C] -- C:\Program Files\Alwil Software
[2010/10/19 17:24:12 | 000,000,000 | ---D | C] -- C:\Users\Jess\AppData\Local\Symantec
[2010/10/13 22:47:02 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll
[2010/10/13 22:47:02 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll
[2010/10/13 22:47:01 | 002,085,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll
[2010/10/13 22:46:58 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll
[2010/10/13 22:46:55 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll
[2010/10/13 22:46:54 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll
[2010/10/13 22:46:54 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll
[2010/10/13 22:46:52 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40.dll
[2010/10/13 22:46:52 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40u.dll
[2010/10/13 22:46:41 | 000,702,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2010/10/13 22:46:40 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2010/10/13 22:46:40 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2010/10/13 22:46:40 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2010/10/13 22:46:39 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2010/10/13 22:46:38 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2010/10/13 22:46:38 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2010/10/13 22:46:38 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2010/10/13 22:46:38 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2010/10/13 22:46:38 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2010/10/13 22:46:38 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2010/10/13 22:46:38 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2010/10/13 22:46:38 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2010/10/13 22:46:38 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2010/10/13 22:46:36 | 014,627,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
[2010/10/13 22:46:35 | 011,406,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2010/10/13 22:46:34 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
[2010/10/13 22:46:33 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
[2010/10/13 22:46:32 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sscore.dll
[2010/10/06 01:06:15 | 000,000,000 | ---D | C] -- C:\Users\Jess\AppData\Roaming\OfferBox
[1 C:\Users\Jess\*.tmp files -> C:\Users\Jess\*.tmp -> ]
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2010/10/30 14:08:34 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010/10/30 14:08:34 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010/10/30 14:00:38 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010/10/30 14:00:31 | 3195,420,672 | -HS- | M] () -- C:\hiberfil.sys
[2010/10/29 23:52:23 | 001,344,041 | ---- | M] (C_XX) -- C:\Users\Jess\Desktop\ad-remover_ad_remover_2010_2.0.0.0_anglais_313780.exe
[2010/10/29 21:52:58 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2010/10/29 21:52:58 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2010/10/29 21:52:58 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2010/10/29 21:52:56 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll
[2010/10/29 21:29:59 | 000,521,448 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\deployJava1.dll
[2010/10/29 21:29:59 | 000,189,216 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\javaws.exe
[2010/10/29 21:29:59 | 000,171,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\javaw.exe
[2010/10/29 21:29:59 | 000,171,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\java.exe
[2010/10/29 17:48:56 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Jess\Desktop\OTL.exe
[2010/10/29 16:31:29 | 000,000,998 | ---- | M] () -- C:\Users\Public\Desktop\MBRCheck.lnk
[2010/10/29 16:31:29 | 000,000,986 | ---- | M] () -- C:\Users\Public\Desktop\ZHPFix.lnk
[2010/10/29 16:31:28 | 000,000,991 | ---- | M] () -- C:\Users\Public\Desktop\ZHPDiag.lnk
[2010/10/29 02:32:39 | 000,001,864 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
[2010/10/29 02:32:38 | 000,001,866 | ---- | M] () -- C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
[2010/10/28 13:18:38 | 000,002,014 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/10/28 00:42:38 | 000,007,597 | ---- | M] () -- C:\Users\Jess\AppData\Local\Resmon.ResmonCfg
[2010/10/25 22:32:49 | 000,001,009 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/10/25 19:53:01 | 001,549,700 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010/10/25 19:53:01 | 000,704,480 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat
[2010/10/25 19:53:01 | 000,616,008 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010/10/25 19:53:01 | 000,130,754 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat
[2010/10/25 19:53:01 | 000,106,388 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010/10/24 21:14:33 | 000,001,852 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2010/10/24 21:14:23 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2010/10/14 14:00:24 | 000,354,824 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010/10/09 01:45:13 | 000,068,318 | ---- | M] () -- C:\Users\Jess\Desktop\BILLETSUSHER.pdf
[2010/10/09 01:39:33 | 000,184,762 | ---- | M] () -- C:\Users\Jess\Desktop\Vos réservations.mht
[1 C:\Users\Jess\*.tmp files -> C:\Users\Jess\*.tmp -> ]
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2010/10/29 16:31:29 | 000,000,998 | ---- | C] () -- C:\Users\Public\Desktop\MBRCheck.lnk
[2010/10/29 16:31:28 | 000,000,991 | ---- | C] () -- C:\Users\Public\Desktop\ZHPDiag.lnk
[2010/10/29 16:31:28 | 000,000,986 | ---- | C] () -- C:\Users\Public\Desktop\ZHPFix.lnk
[2010/10/29 02:32:39 | 000,001,864 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
[2010/10/29 02:32:38 | 000,001,866 | ---- | C] () -- C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
[2010/10/28 13:18:38 | 000,002,014 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/10/25 22:32:49 | 000,001,009 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/10/25 22:10:25 | 000,007,597 | ---- | C] () -- C:\Users\Jess\AppData\Local\Resmon.ResmonCfg
[2010/10/24 21:14:33 | 000,001,852 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2010/10/24 21:14:23 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt
[2010/10/09 01:45:13 | 000,068,318 | ---- | C] () -- C:\Users\Jess\Desktop\BILLETSUSHER.pdf
[2010/10/09 01:39:30 | 000,184,762 | ---- | C] () -- C:\Users\Jess\Desktop\Vos réservations.mht
[2010/07/15 01:28:45 | 001,012,591 | ---- | C] () -- C:\Users\Jess\AppData\Local\tmpDSC01037.JPG
[2010/07/15 01:28:44 | 004,552,716 | ---- | C] () -- C:\Users\Jess\AppData\Local\tmpDSC01037.0
[2010/06/11 00:23:49 | 001,198,242 | ---- | C] () -- C:\Users\Jess\AppData\Local\tmpDSC00415.JPG
[2010/06/11 00:23:26 | 004,918,965 | ---- | C] () -- C:\Users\Jess\AppData\Local\tmpDSC00415.0
[2009/12/28 00:34:33 | 000,224,354 | ---- | C] () -- C:\Users\Jess\AppData\Local\tmpRAPH IFONE 009.JPG
[2009/12/28 00:34:32 | 000,736,041 | ---- | C] () -- C:\Users\Jess\AppData\Local\tmpRAPH IFONE 009.0
[2009/12/27 02:45:44 | 001,809,814 | ---- | C] () -- C:\Users\Jess\AppData\Local\tmpSL370220.JPG
[2009/12/15 07:04:04 | 000,002,528 | ---- | C] () -- C:\Users\Jess\AppData\Roaming\$_hpcst$.hpc
[2009/11/08 20:06:22 | 000,000,000 | ---- | C] () -- C:\Users\Jess\AppData\Local\QSwitch.txt
[2009/11/08 20:06:22 | 000,000,000 | ---- | C] () -- C:\Users\Jess\AppData\Local\DSwitch.txt
[2009/11/08 20:06:22 | 000,000,000 | ---- | C] () -- C:\Users\Jess\AppData\Local\AtStart.txt
[2009/11/08 20:06:20 | 000,000,368 | ---- | C] () -- C:\ProgramData\HPWALog.txt
[2009/08/23 02:14:33 | 000,000,105 | ---- | C] () -- C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log
[2009/08/23 02:14:24 | 000,000,032 | ---- | C] () -- C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log
[2009/08/23 02:14:07 | 000,000,032 | ---- | C] () -- C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log
[2009/08/23 02:13:44 | 000,000,032 | ---- | C] () -- C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log
[2009/08/23 02:13:04 | 000,000,032 | ---- | C] () -- C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log
[2009/08/22 00:55:52 | 000,000,109 | ---- | C] () -- C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
[2009/08/22 00:51:22 | 000,000,110 | ---- | C] () -- C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
[2009/08/22 00:49:33 | 000,000,105 | ---- | C] () -- C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
[2009/08/22 00:48:44 | 000,000,107 | ---- | C] () -- C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
[2009/07/15 17:50:42 | 000,013,312 | ---- | C] () -- C:\Windows\LPRES.DLL
[2009/07/14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2007/10/25 18:26:10 | 000,005,632 | ---- | C] () -- C:\Windows\SysWow64\drivers\StarOpen.sys
[color=#E56717]========== LOP Check ==========[/color]
[2010/10/19 00:08:02 | 000,000,000 | ---D | M] -- C:\Users\Jess\AppData\Roaming\BitComet
[2009/12/26 00:18:45 | 000,000,000 | ---D | M] -- C:\Users\Jess\AppData\Roaming\igraal
[2010/10/12 14:10:33 | 000,000,000 | ---D | M] -- C:\Users\Jess\AppData\Roaming\OfferBox
[2010/05/18 15:15:42 | 000,000,000 | ---D | M] -- C:\Users\Jess\AppData\Roaming\PhotoFiltre Studio X
[2009/12/15 07:17:39 | 000,000,000 | ---D | M] -- C:\Users\Jess\AppData\Roaming\Samsung
[2010/07/21 02:23:41 | 000,000,000 | ---D | M] -- C:\Users\Jess\AppData\Roaming\TigerPlayer
[2009/11/12 01:36:10 | 000,000,000 | ---D | M] -- C:\Users\Jess\AppData\Roaming\WildTangent
[2010/01/11 15:48:46 | 000,000,000 | ---D | M] -- C:\Users\Jess\AppData\Roaming\_MDLogs
[2010/10/18 14:37:03 | 000,032,496 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[color=#E56717]========== Purity Check ==========[/color]
< End of report > -
Je ne sais même pas ce qu'est Ubuntu...
-
Ben oui, OTL, des rapports, des anti-virus, des scans, des anti-spywares... Et comme d'hab' ça va finir avec un formatage et une réinstallation...
Non, le mieux c'est d'acheter un Mac, ou de s'installer une bonne vieille Ubuntu gratuite...
Bon courage...
ps : je sais, ça aide pas vraiment mais c'est le fruit d'une longue expérience informatique... -
Je fais comment?
-
Contributeur sécuritéil faudrait le rapport d'otl
et profite en pour mettre à jour ton pilote de carte vidéo -
Ca y est j'ai relancé OTL mais les images et sons sont toujours saccadées que ce soit pour un jeu, ou une vidéo. Et, je sais pas si c'est important mais dans le gestionnaire des tâches l'UC utilisée est toujours bloquée à 100%.
-
Contributeur sécuritéoui remets un rapport OTL tout neuf et dis nous comment va ton pc
-
Ca te parle?
-
.
======= RAPPORT D'AD-REMOVER 2.0.0.0,D | UNIQUEMENT XP/VISTA/7 =======
.
Mis à jour par C_XX le 19/05/10 à 19:20
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 13:33:18 le 30/10/2010 | Mode normal | Option: CLEAN
Exécuté de: C:\Ad-Remover\ADR.exe
SE: Microsoft Windows 7 Édition Familiale Premium ( - X64)
Nom du PC: JESS-PC (Hewlett-Packard HP Pavilion dv6 Notebook PC)
Utilisateur actuel: Jess
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
.
C:\Users\Jess\binternet.exe
C:\Users\Jess\scriptjava.html
C:\Users\Jess\temp1.6
(!) -- Fichiers temporaires supprimés.
.
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
HKLM\Software\Classes\CLSID\{03EC05EA-C2A7-49A8-971F-580D5891F2FB}
HKLM\Software\Classes\CLSID\{05AC64C2-A330-4DDE-A4D3-679C7A7FEBBC}
HKLM\Software\Classes\CLSID\{05D87416-B45D-4146-8468-F388BF68D8B7}
HKLM\Software\Classes\CLSID\{07CD72D1-94A0-4B32-8CAD-59808F893E5B}
HKLM\Software\Classes\CLSID\{090A8723-05E7-4648-B4B8-8FC23000E907}
HKLM\Software\Classes\CLSID\{0F33610F-301B-41E1-A7A5-00CFA20610FD}
HKLM\Software\Classes\CLSID\{1422006E-7553-4795-AEEB-59A2F4CC072E}
HKLM\Software\Classes\CLSID\{16D4A89B-1527-429C-BCD7-CCC076ADBBA8}
HKLM\Software\Classes\CLSID\{1A9FF35C-BB3A-4E5B-805E-E4DE0A12A191}
HKLM\Software\Classes\CLSID\{1CD6B362-8731-47B4-9E4F-D51377629C07}
HKLM\Software\Classes\CLSID\{1F578D0C-EB2F-4B3B-8DB9-CB8B306AD6C2}
HKLM\Software\Classes\CLSID\{20D09D9A-4AE0-41D4-B8E5-9BEC7850627D}
HKLM\Software\Classes\CLSID\{24461273-F1B1-46C6-A8E7-05D0D9994CCD}
HKLM\Software\Classes\CLSID\{25304B15-F1C2-4D7D-B7CE-775670071BE9}
HKLM\Software\Classes\CLSID\{29FA2B64-2F2B-4160-99D5-EC7EA373A693}
HKLM\Software\Classes\CLSID\{2C9C388C-630F-414B-B6CC-B206F987F294}
HKLM\Software\Classes\CLSID\{2D0369B3-BC7D-443A-BD0E-66C1CFB941AE}
HKLM\Software\Classes\CLSID\{2DCD271D-3755-4A39-A34E-54998F91B58D}
HKLM\Software\Classes\CLSID\{33C71F2B-EC92-4FD2-B949-EB50714C9670}
HKLM\Software\Classes\CLSID\{3401D2BA-3644-4D6B-BC7A-DDF7532E250D}
HKLM\Software\Classes\CLSID\{34ECC6C4-F02A-4149-AD00-171CB8E8235E}
HKLM\Software\Classes\CLSID\{352463FC-1F2A-42F8-8443-E8508C9DEB94}
HKLM\Software\Classes\CLSID\{355605B5-33F6-44E9-B45E-F9BF2A8A1DBF}
HKLM\Software\Classes\CLSID\{388FF2E2-7934-4330-BA6D-46A9A69B8D5D}
HKLM\Software\Classes\CLSID\{3AB4DD5E-1581-4481-B5A5-7DF552C60810}
HKLM\Software\Classes\CLSID\{44AD2F89-0262-4BC6-833E-EDFBE0CCDE30}
HKLM\Software\Classes\CLSID\{48DA28B0-77F6-4EC4-AFB3-0B83CAC55AAA}
HKLM\Software\Classes\CLSID\{4A693D9A-8154-4D25-8630-CC533CC545BC}
HKLM\Software\Classes\CLSID\{4DC54676-FE9D-4215-BFB5-6FFF655ED168}
HKLM\Software\Classes\CLSID\{50156BF7-5EBF-480F-B916-DC8B54BC60F9}
HKLM\Software\Classes\CLSID\{50235354-B481-459A-A4A2-6D0A40DCC196}
HKLM\Software\Classes\CLSID\{539BC74C-D31B-4C18-9409-2203918F581D}
HKLM\Software\Classes\CLSID\{54CA1E58-AF66-4D48-A110-9D27BEA99FC2}
HKLM\Software\Classes\CLSID\{56D43D37-FC44-4677-84F8-E6A6DAE98AC2}
HKLM\Software\Classes\CLSID\{6214E226-594F-4AB2-AD56-B7047D9E18C6}
HKLM\Software\Classes\CLSID\{62194F92-497B-4A71-A070-B04DB89DC97D}
HKLM\Software\Classes\CLSID\{631C66E1-B5F3-48AD-9B8B-448728CB427A}
HKLM\Software\Classes\CLSID\{66464DC5-202B-4C21-9115-9F952EDD8347}
HKLM\Software\Classes\CLSID\{666336DE-A4DC-4EC7-809C-78EAB95C37FB}
HKLM\Software\Classes\CLSID\{69A597A0-D1B6-11D4-8297-0050BAC1E668}
HKLM\Software\Classes\CLSID\{6CA6797D-CC8D-4504-B7F7-162527280E43}
HKLM\Software\Classes\CLSID\{6D817D2F-F8E2-4EC5-BE29-6209B218011C}
HKLM\Software\Classes\CLSID\{70F19422-7C80-4033-A4F9-2AADA5BB151A}
HKLM\Software\Classes\CLSID\{727283A5-2269-4761-A81C-351B0D8DF364}
HKLM\Software\Classes\CLSID\{73347C69-E590-4582-BCF1-A8DBDB1EED9A}
HKLM\Software\Classes\CLSID\{737BC37A-80E9-446F-97A1-1004273545FB}
HKLM\Software\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F}
HKLM\Software\Classes\CLSID\{76C45B18-A29E-43EA-AAF8-AF55C2E1AE17}
HKLM\Software\Classes\CLSID\{794E05D5-1543-4AC8-8943-9E8A502134FE}
HKLM\Software\Classes\CLSID\{794E05D6-1543-4AC8-8943-9E8A502134FE}
HKLM\Software\Classes\CLSID\{794E05D7-1543-4AC8-8943-9E8A502134FE}
HKLM\Software\Classes\CLSID\{7A49B04C-D9ED-4FD7-8915-61D00A5BEF43}
HKLM\Software\Classes\CLSID\{7C9F63C6-786B-4752-908E-460A061FA9D7}
HKLM\Software\Classes\CLSID\{7CD74AFF-3433-4E34-92E2-D98DFDB30754}
HKLM\Software\Classes\CLSID\{7D3CB5B9-B6DC-4F08-AD30-1586BA965AD6}
HKLM\Software\Classes\CLSID\{80E4257C-E683-4F62-8AB8-18BABAFD03A4}
HKLM\Software\Classes\CLSID\{8137FFC5-95E2-42FD-A878-1C08A689820C}
HKLM\Software\Classes\CLSID\{83F02D95-4CF2-45D5-BF14-BB9CBECB5F28}
HKLM\Software\Classes\CLSID\{877BBEA5-90B6-41B5-930D-A4A0A7EA2E5A}
HKLM\Software\Classes\CLSID\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
HKLM\Software\Classes\CLSID\{8C306DB3-AA65-4A98-8713-5CD02BC81EC8}
HKLM\Software\Classes\CLSID\{8C4D1053-663C-4C82-A24C-4EBA392A73BA}
HKLM\Software\Classes\CLSID\{8D928D4C-C251-4EF7-B47A-A665DDA08D6C}
HKLM\Software\Classes\CLSID\{8EB0C7F5-DABE-4D5F-8432-AAB0A0DACF4B}
HKLM\Software\Classes\CLSID\{9089631F-4026-4C23-9A36-23C20DF35E8C}
HKLM\Software\Classes\CLSID\{949DCA39-87F9-44EF-9E57-E0FC43005F79}
HKLM\Software\Classes\CLSID\{96EF404C-24C7-43D0-9096-4CCC8BB7CCAC}
HKLM\Software\Classes\CLSID\{97720195-206A-42AE-8E65-260B9BA5589F}
HKLM\Software\Classes\CLSID\{97D69524-BB57-4185-9C7F-5F05593B771A}
HKLM\Software\Classes\CLSID\{986F7A5A-9676-47E1-8642-F41F8C3FCF82}
HKLM\Software\Classes\CLSID\{98DC567D-D654-427D-8087-1CACFC73034D}
HKLM\Software\Classes\CLSID\{9BC1B783-85E3-11D2-98D0-0080C84E9C39}
HKLM\Software\Classes\CLSID\{A042B462-2070-4742-8229-9C69A32E9747}
HKLM\Software\Classes\CLSID\{A65D9C5C-9F5E-4E34-B8C2-0DBE46EA09CA}
HKLM\Software\Classes\CLSID\{AAA13995-B35D-4C05-8EEB-39607C700DEB}
HKLM\Software\Classes\CLSID\{AC583A28-F947-433A-9D11-60E71AB7FC77}
HKLM\Software\Classes\CLSID\{ADE9F366-DCAD-49B5-B362-D06AF278FE71}
HKLM\Software\Classes\CLSID\{B18788A4-92BD-440E-A4D1-380C36531119}
HKLM\Software\Classes\CLSID\{B578E5C8-BC99-4941-9543-33B024EC7334}
HKLM\Software\Classes\CLSID\{B5DB4F86-DC85-48D1-BDB4-661E1AE5C625}
HKLM\Software\Classes\CLSID\{B6889261-2560-4753-B685-9C18553E75CB}
HKLM\Software\Classes\CLSID\{BA7AAAAA-2C23-448C-B6F9-E4FA8F49B3B9}
HKLM\Software\Classes\CLSID\{BBB0747F-15EF-497F-8356-BD7C4A802CC4}
HKLM\Software\Classes\CLSID\{BCC5376B-A466-439B-886D-3E10DC1B56A5}
HKLM\Software\Classes\CLSID\{BDF47211-C63E-4F0E-B4B3-2D8DDB0FF35B}
HKLM\Software\Classes\CLSID\{BF4F0308-2765-4E65-80A7-A20C41630C25}
HKLM\Software\Classes\CLSID\{C04D3593-F821-403A-90A6-3BDCEAF0992E}
HKLM\Software\Classes\CLSID\{C36E9451-6EF9-43F8-9CAB-A689717F6E27}
HKLM\Software\Classes\CLSID\{C4AB197B-60EE-49E1-A776-C4C7BA67D8D3}
HKLM\Software\Classes\CLSID\{C5A4EEB3-2E7A-46D8-AB5A-BA1DA712336D}
HKLM\Software\Classes\CLSID\{C81C8C5A-B354-4DEB-96D3-8BD8D0C8ABD0}
HKLM\Software\Classes\CLSID\{C9E52DAE-9726-42F2-A0A5-DB62FA3AA63E}
HKLM\Software\Classes\CLSID\{C9F2D874-8280-4C8C-999F-ED7FF97D353E}
HKLM\Software\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
HKLM\Software\Classes\CLSID\{D12B5396-C8EF-4D6D-B540-0F0FF6A9F2CC}
HKLM\Software\Classes\CLSID\{D7A3BD9A-E8A3-49E9-8261-CD2A7AC78403}
HKLM\Software\Classes\CLSID\{D7C75CC9-4430-402D-A7F8-3E51B65810B8}
HKLM\Software\Classes\CLSID\{D7F5802B-1E83-4795-8EEE-F5D4B2122C4F}
HKLM\Software\Classes\CLSID\{DA7C1C8E-4469-4E18-8D2D-B5927F20CC9E}
HKLM\Software\Classes\CLSID\{DA8ED552-84FA-4C99-BC32-606C31F30293}
HKLM\Software\Classes\CLSID\{DB0D365A-F999-4F30-B8DD-B21836903ED1}
HKLM\Software\Classes\CLSID\{DE8C8AF0-5F5D-40B2-83E8-827CAAAF825F}
HKLM\Software\Classes\CLSID\{E10CADCE-2734-4095-A5E9-4BB47D1B933B}
HKLM\Software\Classes\CLSID\{E1232604-80BF-43EF-8711-FC842EDCB5EF}
HKLM\Software\Classes\CLSID\{E2A32F53-FCB1-4AAF-98E9-8E4BB843C91D}
HKLM\Software\Classes\CLSID\{E2B29223-3056-40F6-B7D5-1DBBCD8595E0}
HKLM\Software\Classes\CLSID\{E339D44A-9819-4CDC-876C-0F563EEAF757}
HKLM\Software\Classes\CLSID\{E5788A5B-17D1-42B6-B7A6-9DCD0192A559}
HKLM\Software\Classes\CLSID\{E73FF9FF-25C3-4E29-A14A-07AC73077348}
HKLM\Software\Classes\CLSID\{F3014D3E-8133-4B82-B455-25FFEC407984}
HKLM\Software\Classes\CLSID\{F358F902-E86D-4F4B-A733-60170EB0D228}
HKLM\Software\Classes\CLSID\{F6BB00E0-2DE3-40F1-BB2C-99D6CE67B521}
HKLM\Software\Classes\CLSID\{F6BB00E2-2DE3-40F1-BB2C-99D6CE67B521}
HKLM\Software\Classes\CLSID\{F6BB00E3-2DE3-40F1-BB2C-99D6CE67B521}
HKLM\Software\Classes\CLSID\{F6BB00E4-2DE3-40F1-BB2C-99D6CE67B521}
HKLM\Software\Classes\CLSID\{F6BB00E5-2DE3-40F1-BB2C-99D6CE67B521}
HKLM\Software\Classes\CLSID\{F6EB0866-A07A-4756-AA48-A80C97CF12EA}
HKLM\Software\Classes\CLSID\{F76A4DA4-F7B1-49E0-87EA-0C285755AF9C}
HKLM\Software\Classes\CLSID\{F781DF93-24DE-4133-8E53-A75163A7F187}
HKLM\Software\Classes\CLSID\{F87A19AB-8D08-4612-BB5C-CB9F72AC4661}
HKLM\Software\Classes\Interface\{29FA2B64-2F2B-4160-99D5-EC7EA373A693}
HKLM\Software\Classes\Interface\{539BC74C-D31B-4C18-9409-2203918F581D}
HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook
HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook.1
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0EEB6DB4-F017-404a-8928-1380156ACA4F}
HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
HKLM\Software\Microsoft\Windows\CurrentVersion\Run|FBSSA
.
.
============== SCAN ADDITIONNEL ==============
.
.
* Internet Explorer Version 8.0.7600.16385 *
.
[HKCU\Software\Microsoft\Internet Explorer\Main]
.
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
.
[HKLM\Software\Microsoft\Internet Explorer\Main]
.
AutoHide: yes
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Enable Browser Extensions: yes
Local Page: C:\Windows\SysWOW64\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
Use Search Asst: no
.
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
.
========================================
.
C:\Ad-Remover\Quarantine: 3 Fichier(s)
C:\Ad-Remover\Backup: 26 Fichier(s)
.
C:\Ad-Report-CLEAN[1].txt - 540 Octet(s)
C:\Ad-Report-CLEAN[2].txt - 11100 Octet(s)
C:\Ad-Report-SCAN[1].txt - 535 Octet(s)
C:\Ad-Report-SCAN[2].txt - 535 Octet(s)
C:\Ad-Report-SCAN[3].txt - 535 Octet(s)
C:\Ad-Report-SCAN[4].txt - 535 Octet(s)
C:\Ad-Report-SCAN[5].txt - 11221 Octet(s)
.
Fin à: 13:59:09, 30/10/2010
.
============== E.O.F - CLEAN[2] ============== -
Contributeur sécuriténettoyer
-
.....ok....désolée d'être usante...
Bon, dans le menu, j'ai scanner, nettoyer ou désinstaller?
Je fais quoi? je nettoie? -
Contributeur sécuritéok mais j'avais demandé un rapport de suppression et non de recherche ...
-
Ouf, ça y est, ça a enfin fonctionné:
======= RAPPORT D'AD-REMOVER 2.0.0.0,D | UNIQUEMENT XP/VISTA/7 =======
.
Mis à jour par C_XX le 19/05/10 à 19:20
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 00:08:40 le 30/10/2010 | Mode normal | Option: SCAN
Exécuté de: C:\Ad-Remover\ADR.exe
SE: Microsoft Windows 7 Édition Familiale Premium ( - X64)
Nom du PC: JESS-PC (Hewlett-Packard HP Pavilion dv6 Notebook PC)
Utilisateur actuel: Jess
.
============== ÉLÉMENT(S) TROUVÉ(S) ==============
.
.
C:\Users\Jess\binternet.exe
C:\Users\Jess\scriptjava.html
C:\Users\Jess\temp1.6
.
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
HKLM\Software\Classes\CLSID\{03EC05EA-C2A7-49A8-971F-580D5891F2FB}
HKLM\Software\Classes\CLSID\{05AC64C2-A330-4DDE-A4D3-679C7A7FEBBC}
HKLM\Software\Classes\CLSID\{05D87416-B45D-4146-8468-F388BF68D8B7}
HKLM\Software\Classes\CLSID\{07CD72D1-94A0-4B32-8CAD-59808F893E5B}
HKLM\Software\Classes\CLSID\{090A8723-05E7-4648-B4B8-8FC23000E907}
HKLM\Software\Classes\CLSID\{0F33610F-301B-41E1-A7A5-00CFA20610FD}
HKLM\Software\Classes\CLSID\{1422006E-7553-4795-AEEB-59A2F4CC072E}
HKLM\Software\Classes\CLSID\{16D4A89B-1527-429C-BCD7-CCC076ADBBA8}
HKLM\Software\Classes\CLSID\{1A9FF35C-BB3A-4E5B-805E-E4DE0A12A191}
HKLM\Software\Classes\CLSID\{1CD6B362-8731-47B4-9E4F-D51377629C07}
HKLM\Software\Classes\CLSID\{1F578D0C-EB2F-4B3B-8DB9-CB8B306AD6C2}
HKLM\Software\Classes\CLSID\{20D09D9A-4AE0-41D4-B8E5-9BEC7850627D}
HKLM\Software\Classes\CLSID\{24461273-F1B1-46C6-A8E7-05D0D9994CCD}
HKLM\Software\Classes\CLSID\{25304B15-F1C2-4D7D-B7CE-775670071BE9}
HKLM\Software\Classes\CLSID\{29FA2B64-2F2B-4160-99D5-EC7EA373A693}
HKLM\Software\Classes\CLSID\{2C9C388C-630F-414B-B6CC-B206F987F294}
HKLM\Software\Classes\CLSID\{2D0369B3-BC7D-443A-BD0E-66C1CFB941AE}
HKLM\Software\Classes\CLSID\{2DCD271D-3755-4A39-A34E-54998F91B58D}
HKLM\Software\Classes\CLSID\{33C71F2B-EC92-4FD2-B949-EB50714C9670}
HKLM\Software\Classes\CLSID\{3401D2BA-3644-4D6B-BC7A-DDF7532E250D}
HKLM\Software\Classes\CLSID\{34ECC6C4-F02A-4149-AD00-171CB8E8235E}
HKLM\Software\Classes\CLSID\{352463FC-1F2A-42F8-8443-E8508C9DEB94}
HKLM\Software\Classes\CLSID\{355605B5-33F6-44E9-B45E-F9BF2A8A1DBF}
HKLM\Software\Classes\CLSID\{388FF2E2-7934-4330-BA6D-46A9A69B8D5D}
HKLM\Software\Classes\CLSID\{3AB4DD5E-1581-4481-B5A5-7DF552C60810}
HKLM\Software\Classes\CLSID\{44AD2F89-0262-4BC6-833E-EDFBE0CCDE30}
HKLM\Software\Classes\CLSID\{48DA28B0-77F6-4EC4-AFB3-0B83CAC55AAA}
HKLM\Software\Classes\CLSID\{4A693D9A-8154-4D25-8630-CC533CC545BC}
HKLM\Software\Classes\CLSID\{4DC54676-FE9D-4215-BFB5-6FFF655ED168}
HKLM\Software\Classes\CLSID\{50156BF7-5EBF-480F-B916-DC8B54BC60F9}
HKLM\Software\Classes\CLSID\{50235354-B481-459A-A4A2-6D0A40DCC196}
HKLM\Software\Classes\CLSID\{539BC74C-D31B-4C18-9409-2203918F581D}
HKLM\Software\Classes\CLSID\{54CA1E58-AF66-4D48-A110-9D27BEA99FC2}
HKLM\Software\Classes\CLSID\{56D43D37-FC44-4677-84F8-E6A6DAE98AC2}
HKLM\Software\Classes\CLSID\{6214E226-594F-4AB2-AD56-B7047D9E18C6}
HKLM\Software\Classes\CLSID\{62194F92-497B-4A71-A070-B04DB89DC97D}
HKLM\Software\Classes\CLSID\{631C66E1-B5F3-48AD-9B8B-448728CB427A}
HKLM\Software\Classes\CLSID\{66464DC5-202B-4C21-9115-9F952EDD8347}
HKLM\Software\Classes\CLSID\{666336DE-A4DC-4EC7-809C-78EAB95C37FB}
HKLM\Software\Classes\CLSID\{69A597A0-D1B6-11D4-8297-0050BAC1E668}
HKLM\Software\Classes\CLSID\{6CA6797D-CC8D-4504-B7F7-162527280E43}
HKLM\Software\Classes\CLSID\{6D817D2F-F8E2-4EC5-BE29-6209B218011C}
HKLM\Software\Classes\CLSID\{70F19422-7C80-4033-A4F9-2AADA5BB151A}
HKLM\Software\Classes\CLSID\{727283A5-2269-4761-A81C-351B0D8DF364}
HKLM\Software\Classes\CLSID\{73347C69-E590-4582-BCF1-A8DBDB1EED9A}
HKLM\Software\Classes\CLSID\{737BC37A-80E9-446F-97A1-1004273545FB}
HKLM\Software\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F}
HKLM\Software\Classes\CLSID\{76C45B18-A29E-43EA-AAF8-AF55C2E1AE17}
HKLM\Software\Classes\CLSID\{794E05D5-1543-4AC8-8943-9E8A502134FE}
HKLM\Software\Classes\CLSID\{794E05D6-1543-4AC8-8943-9E8A502134FE}
HKLM\Software\Classes\CLSID\{794E05D7-1543-4AC8-8943-9E8A502134FE}
HKLM\Software\Classes\CLSID\{7A49B04C-D9ED-4FD7-8915-61D00A5BEF43}
HKLM\Software\Classes\CLSID\{7C9F63C6-786B-4752-908E-460A061FA9D7}
HKLM\Software\Classes\CLSID\{7CD74AFF-3433-4E34-92E2-D98DFDB30754}
HKLM\Software\Classes\CLSID\{7D3CB5B9-B6DC-4F08-AD30-1586BA965AD6}
HKLM\Software\Classes\CLSID\{80E4257C-E683-4F62-8AB8-18BABAFD03A4}
HKLM\Software\Classes\CLSID\{8137FFC5-95E2-42FD-A878-1C08A689820C}
HKLM\Software\Classes\CLSID\{83F02D95-4CF2-45D5-BF14-BB9CBECB5F28}
HKLM\Software\Classes\CLSID\{877BBEA5-90B6-41B5-930D-A4A0A7EA2E5A}
HKLM\Software\Classes\CLSID\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
HKLM\Software\Classes\CLSID\{8C306DB3-AA65-4A98-8713-5CD02BC81EC8}
HKLM\Software\Classes\CLSID\{8C4D1053-663C-4C82-A24C-4EBA392A73BA}
HKLM\Software\Classes\CLSID\{8D928D4C-C251-4EF7-B47A-A665DDA08D6C}
HKLM\Software\Classes\CLSID\{8EB0C7F5-DABE-4D5F-8432-AAB0A0DACF4B}
HKLM\Software\Classes\CLSID\{9089631F-4026-4C23-9A36-23C20DF35E8C}
HKLM\Software\Classes\CLSID\{949DCA39-87F9-44EF-9E57-E0FC43005F79}
HKLM\Software\Classes\CLSID\{96EF404C-24C7-43D0-9096-4CCC8BB7CCAC}
HKLM\Software\Classes\CLSID\{97720195-206A-42AE-8E65-260B9BA5589F}
HKLM\Software\Classes\CLSID\{97D69524-BB57-4185-9C7F-5F05593B771A}
HKLM\Software\Classes\CLSID\{986F7A5A-9676-47E1-8642-F41F8C3FCF82}
HKLM\Software\Classes\CLSID\{98DC567D-D654-427D-8087-1CACFC73034D}
HKLM\Software\Classes\CLSID\{9BC1B783-85E3-11D2-98D0-0080C84E9C39}
HKLM\Software\Classes\CLSID\{A042B462-2070-4742-8229-9C69A32E9747}
HKLM\Software\Classes\CLSID\{A65D9C5C-9F5E-4E34-B8C2-0DBE46EA09CA}
HKLM\Software\Classes\CLSID\{AAA13995-B35D-4C05-8EEB-39607C700DEB}
HKLM\Software\Classes\CLSID\{AC583A28-F947-433A-9D11-60E71AB7FC77}
HKLM\Software\Classes\CLSID\{ADE9F366-DCAD-49B5-B362-D06AF278FE71}
HKLM\Software\Classes\CLSID\{B18788A4-92BD-440E-A4D1-380C36531119}
HKLM\Software\Classes\CLSID\{B578E5C8-BC99-4941-9543-33B024EC7334}
HKLM\Software\Classes\CLSID\{B5DB4F86-DC85-48D1-BDB4-661E1AE5C625}
HKLM\Software\Classes\CLSID\{B6889261-2560-4753-B685-9C18553E75CB}
HKLM\Software\Classes\CLSID\{BA7AAAAA-2C23-448C-B6F9-E4FA8F49B3B9}
HKLM\Software\Classes\CLSID\{BBB0747F-15EF-497F-8356-BD7C4A802CC4}
HKLM\Software\Classes\CLSID\{BCC5376B-A466-439B-886D-3E10DC1B56A5}
HKLM\Software\Classes\CLSID\{BDF47211-C63E-4F0E-B4B3-2D8DDB0FF35B}
HKLM\Software\Classes\CLSID\{BF4F0308-2765-4E65-80A7-A20C41630C25}
HKLM\Software\Classes\CLSID\{C04D3593-F821-403A-90A6-3BDCEAF0992E}
HKLM\Software\Classes\CLSID\{C36E9451-6EF9-43F8-9CAB-A689717F6E27}
HKLM\Software\Classes\CLSID\{C4AB197B-60EE-49E1-A776-C4C7BA67D8D3}
HKLM\Software\Classes\CLSID\{C5A4EEB3-2E7A-46D8-AB5A-BA1DA712336D}
HKLM\Software\Classes\CLSID\{C81C8C5A-B354-4DEB-96D3-8BD8D0C8ABD0}
HKLM\Software\Classes\CLSID\{C9E52DAE-9726-42F2-A0A5-DB62FA3AA63E}
HKLM\Software\Classes\CLSID\{C9F2D874-8280-4C8C-999F-ED7FF97D353E}
HKLM\Software\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
HKLM\Software\Classes\CLSID\{D12B5396-C8EF-4D6D-B540-0F0FF6A9F2CC}
HKLM\Software\Classes\CLSID\{D7A3BD9A-E8A3-49E9-8261-CD2A7AC78403}
HKLM\Software\Classes\CLSID\{D7C75CC9-4430-402D-A7F8-3E51B65810B8}
HKLM\Software\Classes\CLSID\{D7F5802B-1E83-4795-8EEE-F5D4B2122C4F}
HKLM\Software\Classes\CLSID\{DA7C1C8E-4469-4E18-8D2D-B5927F20CC9E}
HKLM\Software\Classes\CLSID\{DA8ED552-84FA-4C99-BC32-606C31F30293}
HKLM\Software\Classes\CLSID\{DB0D365A-F999-4F30-B8DD-B21836903ED1}
HKLM\Software\Classes\CLSID\{DE8C8AF0-5F5D-40B2-83E8-827CAAAF825F}
HKLM\Software\Classes\CLSID\{E10CADCE-2734-4095-A5E9-4BB47D1B933B}
HKLM\Software\Classes\CLSID\{E1232604-80BF-43EF-8711-FC842EDCB5EF}
HKLM\Software\Classes\CLSID\{E2A32F53-FCB1-4AAF-98E9-8E4BB843C91D}
HKLM\Software\Classes\CLSID\{E2B29223-3056-40F6-B7D5-1DBBCD8595E0}
HKLM\Software\Classes\CLSID\{E339D44A-9819-4CDC-876C-0F563EEAF757}
HKLM\Software\Classes\CLSID\{E5788A5B-17D1-42B6-B7A6-9DCD0192A559}
HKLM\Software\Classes\CLSID\{E73FF9FF-25C3-4E29-A14A-07AC73077348}
HKLM\Software\Classes\CLSID\{F3014D3E-8133-4B82-B455-25FFEC407984}
HKLM\Software\Classes\CLSID\{F358F902-E86D-4F4B-A733-60170EB0D228}
HKLM\Software\Classes\CLSID\{F6BB00E0-2DE3-40F1-BB2C-99D6CE67B521}
HKLM\Software\Classes\CLSID\{F6BB00E2-2DE3-40F1-BB2C-99D6CE67B521}
HKLM\Software\Classes\CLSID\{F6BB00E3-2DE3-40F1-BB2C-99D6CE67B521}
HKLM\Software\Classes\CLSID\{F6BB00E4-2DE3-40F1-BB2C-99D6CE67B521}
HKLM\Software\Classes\CLSID\{F6BB00E5-2DE3-40F1-BB2C-99D6CE67B521}
HKLM\Software\Classes\CLSID\{F6EB0866-A07A-4756-AA48-A80C97CF12EA}
HKLM\Software\Classes\CLSID\{F76A4DA4-F7B1-49E0-87EA-0C285755AF9C}
HKLM\Software\Classes\CLSID\{F781DF93-24DE-4133-8E53-A75163A7F187}
HKLM\Software\Classes\CLSID\{F87A19AB-8D08-4612-BB5C-CB9F72AC4661}
HKLM\Software\Classes\Interface\{29FA2B64-2F2B-4160-99D5-EC7EA373A693}
HKLM\Software\Classes\Interface\{539BC74C-D31B-4C18-9409-2203918F581D}
HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook
HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook.1
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0EEB6DB4-F017-404a-8928-1380156ACA4F}
HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
HKLM\Software\Microsoft\Windows\CurrentVersion\Run|FBSSA
.
.
============== SCAN ADDITIONNEL ==============
.
.
* Internet Explorer Version 8.0.7600.16385 *
.
[HKCU\Software\Microsoft\Internet Explorer\Main]
.
Default_Page_URL: hxxp://www.google.com
Default_Search_URL: hxxp://www.google.com
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Show_ToolBar: yes
Start Page: hxxp://www.google.fr/
.
[HKLM\Software\Microsoft\Internet Explorer\Main]
.
AutoHide: yes
Default_Page_URL: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_FR&c=94&bd=Pavilion&pf=cnnb
Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Delete_Temp_Files_On_Exit: yes
Enable Browser Extensions: yes
Local Page: C:\Windows\SysWOW64\blank.htm
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start Page: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_FR&c=94&bd=Pavilion&pf=cnnb
Use Search Asst: no
.
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
.
========================================
.
C:\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Ad-Remover\Backup: 13 Fichier(s)
.
C:\Ad-Report-CLEAN[1].txt - 540 Octet(s)
C:\Ad-Report-SCAN[1].txt - 535 Octet(s)
C:\Ad-Report-SCAN[2].txt - 535 Octet(s)
C:\Ad-Report-SCAN[3].txt - 535 Octet(s)
C:\Ad-Report-SCAN[4].txt - 535 Octet(s)
C:\Ad-Report-SCAN[5].txt - 11096 Octet(s)
.
Fin à: 02:53:34, 30/10/2010
.
============== E.O.F - SCAN[5] ============== -
Bon, j'ai tout suivi à la lettre, et ce coup-ci, après maintes tentatives, ça bloque à 7%...
-
Contributeur sécuritéattend un peu pour voir si il passe ad remover
sinon tu arrêtera puis désactive le compte utilisateur de windows comme ceci
https://www.commentcamarche.net/informatique/windows/261-desactiver-le-controle-de-compte-d-utilisateur-uac-de-windows/
puis clique sur le lien ad remover avec le bouton droit de la souris et choisis de l'executer en administrateur
- 1
- 2
Suivant
