Rapport hijackthis

Résolu
bobpewe -  
Bonjour.

Je suis en train de "nettoyer" mon Pc de font en comble et je voudrais savoir si il y a des choses suspect dans ce rapport.
Merci d'avance

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:27:51, on 16/05/2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\CyberLink\Shared Files\brs.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\DigitalPersona\Bin\DpAgent.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Trend Micro\HijackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = my.daemon-search.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {258fe8b8-a13c-4b91-9a0c-c2d3cab8b990} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll
O2 - BHO: DigitalPersona Personal Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files\DigitalPersona\Bin\DpOtsPluginIe8.dll
O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {258fe8b8-a13c-4b91-9a0c-c2d3cab8b990} - (no file)
O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /F "C:\Windows\TEMP\E_S2C7E.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [BDRegion] C:\Program Files\Cyberlink\Shared Files\brs.exe
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [DpAgent] C:\Program Files\DigitalPersona\Bin\dpagent.exe
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [ISUSPM] "C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Charles\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger avec IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Télécharger le contenu de video FLV avec IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Télécharger tous les liens avec IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O9 - Extra button: (no name) - {09E90109-A9AA-4980-BCEF-76F8D924E902} - (no file)
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {09E90109-A9AA-4980-BCEF-76F8D924E902} - (no file) (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {40F576AD-8680-4F9E-9490-99D069CD665F} (System Requirements Lab Class) - http://srtest-cdn.systemrequirementslab.com.s3.amazonaws.com/bin/sysreqlabdetect.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} (SysInfo Class) - http://content.systemrequirementslab.com.s3.amazonaws.com/...
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O22 - SharedTaskScheduler: Deskscapes - {EC654325-1273-C2A9-2B7C-45D29BCE68FB} - (no file)
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\aestsrv.exe
O23 - Service: Akamai NetSession Interface (Akamai) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe
O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (BthServ) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe
O23 - Service: @%SystemRoot%\system32\dhcpcsvc.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe
O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: @%SystemRoot%\system32\emdmgmt.dll,-1000 (EMDMgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (Eventlog) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Easybits Shared Services for Windows (ezSharedSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Service Google Update (gupdate1c9a4088496864e) (gupdate1c9a4088496864e) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-200 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe
O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Ma-Config Service (maconfservice) - Unknown owner - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe
O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe
O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe
O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\netprof.dll,-246 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Recovery Service for Windows - Unknown owner - C:\Windows\SMINST\BLService.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe
O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe
O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ipnathlp.dll,-106 (SharedAccess) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe
O23 - Service: @%SystemRoot%\system32\SLUINotify.dll,-103 (SLUINotify) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe
O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\STacSV.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe
O23 - Service: @C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe
O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\uxtuneup.dll,-4096 (UxTuneUp) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe
O23 - Service: Validity Fingerprint Service (vfsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vfsFPService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe
O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.11\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.1.33\bin\mysqld.exe
O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\wmpnetwk.exe
O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe
O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe

--
End of file - 28780 bytes

29 réponses

Résumé de la discussion

Ce rapport HijackThis détaille de nombreuses entrées de démarrage et des composants de navigateur, indiquant notamment une page de démarrage modifiée et plusieurs extensions ou modules potentiellement indésirables. Des éléments potentiellement problématiques ressortent, comme des barres d'outils ou BHO non signés, des entrées O1/O2 hostiles et une page de démarrage locale redirigeant vers des domaines douteux. Des éléments clairement appartenant à des éditeurs réputés (HP, ESET, Intel, Apple, Google, Adobe, Mozilla) sont présents, mais la coexistence d'entrées proxy, de modules O9/O8 et d'extension de navigateur renforce la nécessité d'une vérification manuelle. D'autres éléments présents, comme des services et processus issus de suites logicielles variées, demandent une vérification croisée des noms et chemins d'accès pour distinguer logiciels légitimes de composants indésirables.

Bobot (l’IA à votre service)
  1. bobpewe
    Ok merci pour le temps que tu ma consacré ;)
    0
    1. Utilisateur anonyme
      De rien :)

      Bonne soirée
      0
  2. Utilisateur anonyme
    Re,

    Si tu n'as pas d'autres soucis, pense à mettre ton sujet comme résolu

    Bon surf...

    @+
    -*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
    Membre, Contributeur

    H.F. : Fish66
    -*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
    0
    1. bobpewe
      JavaRa 1.16 Removal Log.

      Report follows after line.

      ------------------------------------

      The JavaRa removal process was started on Thu May 19 19:35:49 2011

      Found and removed: C:\Program Files\Java\jre1.6.0_05

      Found and removed: C:\Program Files\Java\jre1.6.0_07

      Found and removed: C:\Program Files\Java\jre1.6.0_14

      Found and removed: C:\Program Files\Java\jre1.6.0_15

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0001-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0002-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0003-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0004-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0005-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0006-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0007-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0008-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0009-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0010-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0011-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0012-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0013-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0014-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0015-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0016-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0017-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0018-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0019-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0020-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0021-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0022-ABCDEFFDCBA}. The error returned was 124.

      Found and removed: Applications\java.exe

      Found and removed: Applications\javaw.exe

      Found and removed: JavaPlugin.FamilyVersionSupport

      Found and removed: Installer\Products\4EA42A62D9304AC4784BF238120612FF

      Found and removed: Installer\Products\8A0F842331866D117AB7000B0D610007

      Found and removed: CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}

      Found and removed: CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}

      Found and removed: JavaScript

      Found and removed: JavaScript Author

      Found and removed: JavaScript1.1

      Found and removed: JavaScript1.1 Author

      Found and removed: JavaScript1.2

      Found and removed: JavaScript1.2 Author

      Found and removed: SOFTWARE\Classes\JavaPlugin

      Found and removed: SOFTWARE\Classes\JavaPlugin.160_05

      Found and removed: SOFTWARE\Classes\JavaPlugin.160_07

      Found and removed: SOFTWARE\Classes\JavaPlugin.160_14

      Found and removed: SOFTWARE\Classes\JavaPlugin.160_15

      Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_05

      Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_07

      Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_14

      Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_15

      Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6

      Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_05

      Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_07

      Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_14

      Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_15

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_05

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_07

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_14

      Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.6.0_15

      Found and removed: SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}

      Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}

      Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_05\

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_07\

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_14\

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.6.0_15\

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Common Files\Java\Update\Base Images\jre1.6.0.b105\patch-jre1.6.0_05.b13\

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3412062B02

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3412062B03

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3412062F01

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3612062B02

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3612062B03

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3612062F01

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F83216021FF}

      Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10}

      Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1

      Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1.1

      Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1.2

      Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1.3

      Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.2

      Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.2.1

      Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.3

      Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.3.1

      Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.4

      Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.4.1

      Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.4.2

      Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.5

      ------------------------------------

      Finished reporting.

      JavaRa 1.16 Removal Log.

      Report follows after line.

      ------------------------------------

      The JavaRa removal process was started on Thu May 19 19:36:46 2011

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0001-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0002-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0003-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0004-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0005-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0006-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0007-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0008-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0009-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0010-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0011-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0012-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0013-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0014-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0015-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0016-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0017-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0018-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0019-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0020-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0021-ABCDEFFDCBA}. The error returned was 124.

      There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0022-ABCDEFFDCBA}. The error returned was 124.

      ------------------------------------

      Finished reporting.
      0
      1. bobpewe
        # DelFix v7.8 - Rapport créé le 19/05/2011 à 19:24
        # Mis à jour le 02/05/11 à 18h par Xplode
        # Système d'exploitation : Windows Vista (TM) Home Premium (32 bits) [version 6.0.6002] Service Pack 2
        # Nom d'utilisateur : Charles - PC-DE-CHARLES (Administrateur)
        # Exécuté depuis : C:\Users\Charles\Downloads\delfix.exe
        # Option [Suppression]

        ~~~~~~ Dossier(s) ~~~~~~

        -> C:\Qoobox\BackEnv ... ACL modifié avec succès.
        Supprimé : C:\_OTM
        -> C:\Qoobox\BackEnv ... ACL modifié avec succès.
        Supprimé : C:\Qoobox
        Supprimé : C:\tdsskiller
        Supprimé : C:\USBFix
        Supprimé : C:\Program Files\Ad-Remover
        Supprimé : C:\Program Files\trend micro\Hijackthis
        Supprimé : C:\Program Files\ZHPDiag
        Supprimé : C:\Users\Charles\Downloads\RK_Quarantine
        Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP

        ~~~~~~ Fichier(s) ~~~~~~

        Supprimé : C:\Ad-Report-CLEAN[1].log
        Supprimé : C:\Ad-Report-CLEAN[1].txt
        Supprimé : C:\Ad-Report-SCAN[1].log
        Supprimé : C:\Ad-Report-SCAN[1].txt
        Supprimé : C:\cleannavi.txt
        Supprimé : C:\ComboFix.txt
        Supprimé : C:\PhysicalDisk0_MBR.bin
        Supprimé : C:\rapport.txt
        Supprimé : C:\TDSSKiller.2.5.1.0_16.05.2011_20.06.53_log.txt
        Supprimé : C:\UsbFix_Upload_Me_PC-DE-CHARLES.zip
        Supprimé : C:\ZHPExportRegistry-17-05-2011-00-23-39.txt
        Supprimé : C:\ZHPExportRegistry-17-05-2011-19-56-43.txt
        Supprimé : C:\Windows\grep.exe
        Supprimé : C:\Windows\MBR.exe
        Supprimé : C:\Windows\NIRCMD.exe
        Supprimé : C:\Windows\PEV.exe
        Supprimé : C:\Windows\sed.exe
        Supprimé : C:\Windows\SWREG.exe
        Supprimé : C:\Windows\SWSC.exe
        Supprimé : C:\Windows\SWXCACLS.exe
        Supprimé : C:\Windows\zip.exe
        Supprimé : C:\Windows\System32\tmp.txt
        Supprimé : C:\Users\Charles\Downloads\ComboFix.exe
        Supprimé : C:\Users\Charles\Downloads\OneClick2RP.exe

        ~~~~~~ Registre ~~~~~~

        Clé Supprimée : HKCU\SOFTWARE\Ad-Remover
        Clé Supprimée : HKCU\SOFTWARE\USBFix
        Clé Supprimée : HKLM\Software\OldTimer Tools
        Clé Supprimée : HKLM\Software\Classes\.cfxxe
        Clé Supprimée : HKLM\Software\Classes\cfxxefile
        Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ad-Remover
        Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\USBFix
        Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1
        Clé Supprimée : HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe
        ACL [0] -> [7] & Clé Supprimée : HKLM\SOFTWARE\Swearware

        ~~~~~~ Autre ~~~~~~

        -> Prefetch vidé

        ########## EOF - "C:\DelFixSuppr.txt" - [2587 octets] ##########
        0
        2. Utilisateur anonyme
          Re,

          System drive C: has 29 GB (12%) free of 224 GB

          Tu as installé beaucoup de logiciels, malgrès que ton DD occupe 224 GB, il reste seulement 29 GB.

          Si tu as besoin de ces logiciels transfére les dans DD externe.

          Pour finir :

          1/

          IMPORTANT

          Purger les points de restauration système:

          Télécharge OneClick2RestorePoint

          http://www.multifa7.be/Laddy/OneClick2RP.exe

          Mirroirs si non accessible :
          http://batchdhelus.open-web.fr/Laddy/OneClick2RP.exe
          https://app.box.com/s/cqcsz5m0oz

          * Double clic sur OneClick2RP pour l'exécuter (Clic-droit choisir Executer en tant qu'administrateur sous Vista/Seven)
          * Clic sur le bouton "Purger", l'outil de nettoyage de windows va s'ouvrir
          * Choisis ton disque dur principal en général (C:\) ... Patiente pendant le scan...
          * Rends toi dans l'onglet "Autres options"
          * Dans la zone restauration système, clic sur le bouton nettoyer puis sur le bouton Supprimer.
          * Les points de restauration système seront purgés sauf le dernier créé.

          Ensuite avec le même outil
          Créer un nouveau point de restauration reconnaissable

          2/

          Télécharge DelFix sur ton bureau.
          * Lance le, tape suppression puis valide

          Patiente pendant le scan jusqu'à l'ouverture du rapport.

          * Copie/Colle le contenu du rapport dans ta prochaine réponse.

          Note : Le rapport se trouve également sous C:\DelFix.txt

          tu peux le desinstaller

          3/
          Mise à jour Java
          * Tu peux vérifier ta Console Java :

          Installer la nouvelle version si besoin (dans ce cas désinstalle avant l'ancienne version).

          voici pour desinstaller :

          JavaRa

          Décompresse le fichier sur le Bureau (Clic droit > Extraire tout).
          * Double-clique (clic droit "en tant qu'administrateur" pour Vista) sur le répertoire JavaRa.
          * Puis double-clique sur le fichier JavaRa.exe (le exe peut ne pas s'afficher).
          * Choisis Français puis clique sur Select.
          * Clique sur Recherche de mises à jour.
          * Sélectionne Mettre à jour via jucheck.exe puis clique sur Rechercher.
          * Autorise le processus à se connecter s'il le demande, clique sur Installer et suis les instructions d'installation qui prennent quelques minutes.
          * L'installation est terminée, reviens à l'écran de JavaRa et clique sur Effacer les anciennes versions.
          * Clique sur Oui pour confirmer. Laisse travailler et clique ensuite sur OK, puis une deuxième fois sur OK.
          * Un rapport va s'ouvrir. Poste-le dans ta prochaine réponse.
          * Ferme l'application.

          Note : le rapport se trouve aussi dans C:\ sous le nom JavaRa.log.

          4/
          Télécharge et installe :

          CCleaner version Slim

          * Lance-le.(clic droit "en tant qu'administrateur" pour Vista et Seven) Va dans Options puis

          Avancé et décoche la case Effacer uniquement les fichiers etc....

          * Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.

          * Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare

          toutes les erreurs tant de fois qu il en trouve a l analyse .

          **************** Aide ICI ******************

          Tu peux utiliser Ccleaner une fois par semaine

          5/

          Téléchage updatechecker pour t'indiquer les logiciels qui ne sont pas à jour et te permet aussi d'effectuer ces mises à jour

          Fais la mise à jour surtout d'adobe reader

          6/

          Aussi tu peux garder Malwarebytes et l'utiliser aussi une fois par semaine.

          7/

          Je te conseille d'utiliser le navigateur Firefox et d'installer les modules

          complémentaires WOT pour t'indiquer les fichiers douteux et Adblock plus pour bloquer les publicités...
          8/
          Un peu de lecture :
          * Les dangers du Peer-To-Peer, Emule etc..
          * Comment Sécuriser son ordinateur...

          J'attend les rapports ...

          0
          1. bobpewe
            Désolé pour le temps de réponse :)

            http://www.virustotal.com/file-scan/report.html?id=a27e5447a77a72d5b2608fa92ef9b784bebe2d35271c81618b0e84c4bba83c17-1305821775
            0
            1. Utilisateur anonyme
              Re,

              Il reste une infection

              Inscris toi sur comment ca marche pour pouvoir effectuer l'étape ci-dessous :


              Pour bien vérifier que le fichier ci-dessous est infecté rend toi sur ce site

              Virus Total

              Colle directement le chemin du fichier dans l'espace "Parcourir" :

              C:\PhysicalDisk0_MBR.bin

              * Clique maintenant sur Envoyer le fichier. et laisse travailler tant que "Situation

              actuelle : en cours d'analyse" est affiché.

              * Il est possible que le fichier soit mis en file d'attente en raison d'un grand

              nombre de demandes d'analyses. En ce cas, il te faudra patienter sans actualiser

              la page.

              * Lorsque l'analyse est terminée colle le lien de(s)( la) page(s) dans ta prochaine

              réponse.

              0
              1. bobpewe
                http://pjjoint.malekal.com/files.php?id=aaa3a3add31387
                0
                1. Utilisateur anonyme
                  STP, un dernier rapport ZHPDiag avant de finaliser!
                  0
                  1. bobpewe
                    Rapport de ZHPFix 1.12.3283 par Nicolas Coolman, Update du 14/05/2011
                    Fichier d'export Registre : C:\ZHPExportRegistry-17-05-2011-19-56-43.txt
                    Run by Charles at 17/05/2011 19:56:43
                    Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)
                    Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

                    ========== Clé(s) du Registre ==========
                    HKCU\Software\SteamPopCap => Clé supprimée avec succès
                    HKLM\Software\Classes\AppID\SoftwareUpdate.exe => Clé supprimée avec succès

                    ========== Valeur(s) du Registre ==========
                    FirewallRaz : Aucune valeur présente dans la clé de registre "Standard Profile"
                    FirewallRaz : Aucune valeur présente dans la clé de registre "Domain Profile"

                    ========== Dossier(s) ==========
                    Dossiers temporaires Windows supprimés: 0
                    Dossiers Flash Cookies supprimés : 13

                    ========== Fichier(s) ==========
                    Fichiers temporaires Windows supprimés : 5
                    Fichiers Flash Cookies supprimés : 7

                    ========== Récapitulatif ==========
                    2 : Clé(s) du Registre
                    2 : Valeur(s) du Registre
                    2 : Dossier(s)
                    2 : Fichier(s)

                    End of the scan
                    0
                    1. Utilisateur anonyme
                      Re,

                      Il reste 2 clés de registre à supprimer

                      Copie tout le texte présent en gras ci-dessous ( tu le selectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C )

                      [HKCU\Software\SteamPopCap]
                      [HKLM\Software\Classes\AppID\SoftwareUpdate.exe]

                      FirewallRAZ
                      EmptyTemp
                      EmptyFlash



                      Puis Lance ZHPFix depuis le raccourci du bureau .

                      * Une fois l'outil ZHPFix ouvert , clique sur le bouton [ H ] ( "coller les lignes Helper" ) .

                      * Dans l'encadré principal tu verras donc les lignes que tu as copié précédemment apparaitrent .

                      Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.

                      Clique sur le bouton GO

                      Copie/Colle le rapport à l'écran dans ton prochain message.
                      0
                      1. bobpewe
                        http://pjjoint.malekal.com/files.php?id=312b0c9b4c91215

                        Error: Unable to interpret <[-HKCU\Software\SteamPopCap]> in the current context!
                        Error: Unable to interpret <[-HKLM\Software\Classes\AppID\SoftwareUpdate.exe] > in the current context!

                        OTM by OldTimer - Version 3.1.17.2 log created on 05172011_194212
                        0
                        1. Utilisateur anonyme
                          Re,

                          1/
                          Attention, avant de commencer, lit attentivement la procédure

                          /!\ Ne pas utiliser ce logiciel en dehors du cadre de cette désinfection : DANGEUREUX /!\

                          ? Fais un clic droit sur ce lien, enregistre le dans ton bureau

                          Voici Aide combofix

                          ? /!\ Déconnecte-toi du net et ARRÊTE TES LOGICIELS DE PROTECTION /!\


                          ? Double-clique sur ComboFix.exe (ou exécuter en tant qu'administrateur pour vista et seven)

                          Un "pop-up" va apparaître qui dit que ComboFix est utilisé à vos risques et avec aucune garantie... Clique sur oui pour accepter

                          ? ? SURTOUT INSTALLES LA CONSOLE DE RECUPERATION
                          (si il te propose de l'installer remets internet)

                          ? Mets-le en langue française F

                          ? Tape sur la touche 1 (Yes) pour démarrer le scan.

                          ? Ne touche à rien(souris, clavier) tant que le scan n'est pas terminé, car tu risques de planter ton PC

                          ?En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire.

                          ? Une fois le scan achevé, un rapport va s'afficher : Poste son contenu

                          ? ? /!\ Réactive la protection en temps réel de ton antivirus et de ton antispyware avant de te reconnecter à Internet. /!\

                          ? Note : Le rapport se trouve également là : C:\ComboFix.txt

                          2/
                          * Double clic "OTMoveIt3.exe"
                          * Utilisateurs Windows Vista / 7 Clic droit sur "OTMoveIt3.exe" choisis "exécuter en tant qu'administrateur" afin de le lancer.

                          - Copie (Ctrl+C) le texte suivant en gras ci-dessous :


                          [-HKCU\Software\SteamPopCap]
                          [-HKLM\Software\Classes\AppID\SoftwareUpdate.exe]

                          - Colle (Ctrl+V) le texte précédemment copié dans le cadre: Paste Instructions for Items to be Moved.
                          - Clique maintenant sur le bouton MoveIt!
                          Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
                          Accepte en cliquant sur YES.
                          - Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
                          Le nom du rapport correspond au moment de sa création : date_heure.log

                          @+

                          0
                          1. bobpewe
                            http://pjjoint.malekal.com/files.php?id=8998910f0e1276
                            0
                            1. bobpewe
                              Malwarebytes' Anti-Malware 1.50.1.1100
                              www.malwarebytes.org

                              Version de la base de données: 6598

                              Windows 6.0.6002 Service Pack 2
                              Internet Explorer 9.0.8112.16421

                              17/05/2011 16:52:09
                              mbam-log-2011-05-17 (16-52-09).txt

                              Type d'examen: Examen complet (C:\|)
                              Elément(s) analysé(s): 94465
                              Temps écoulé: 51 minute(s), 14 seconde(s)

                              Processus mémoire infecté(s): 0
                              Module(s) mémoire infecté(s): 0
                              Clé(s) du Registre infectée(s): 0
                              Valeur(s) du Registre infectée(s): 0
                              Elément(s) de données du Registre infecté(s): 0
                              Dossier(s) infecté(s): 0
                              Fichier(s) infecté(s): 0

                              Processus mémoire infecté(s):
                              (Aucun élément nuisible détecté)

                              Module(s) mémoire infecté(s):
                              (Aucun élément nuisible détecté)

                              Clé(s) du Registre infectée(s):
                              (Aucun élément nuisible détecté)

                              Valeur(s) du Registre infectée(s):
                              (Aucun élément nuisible détecté)

                              Elément(s) de données du Registre infecté(s):
                              (Aucun élément nuisible détecté)

                              Dossier(s) infecté(s):
                              (Aucun élément nuisible détecté)

                              Fichier(s) infecté(s):
                              (Aucun élément nuisible détecté)
                              0
                          2. Utilisateur anonyme
                            Re,

                            De rien, On a pas terminé,

                            STP, envois moi le rapport Malwarebytes et prépare un nouveau rapport

                            ZHPDiag pour vérification :)

                            @+

                            -*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
                            Membre, Contributeur

                            H.F. : Fish66
                            -*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
                            0
                            1. bobpewe
                              Malwarebytes' Anti-Malware n'a rien trouver d'inquiétant.

                              Oui je vais m'occuper de libérer de l'espace.

                              Merci pour ton aide
                              0
                              1. bobpewe
                                Le rapport RogueKiller

                                RogueKiller V5.1.3 [16/05/2011] par Tigzy
                                contact sur http://www.sur-la-toile.com
                                mail: tigzyRK<at>gmail<dot>com
                                Remontees: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html

                                Systeme d'exploitation: Windows Vista (6.0.6002 Service Pack 2) 32 bits version
                                Demarrage : Mode normal
                                Utilisateur: Charles [Droits d'admin]
                                Mode: HOSTS RAZ -- Date : 17/05/2011 17:03:30

                                Processus malicieux: 0

                                Fichier HOSTS:
                                127.0.0.1 localhost
                                ::1 localhost
                                127.0.0.1 www.007guard.com
                                127.0.0.1 007guard.com
                                127.0.0.1 008i.com
                                127.0.0.1 www.008k.com
                                127.0.0.1 008k.com
                                127.0.0.1 www.00hq.com
                                127.0.0.1 00hq.com
                                127.0.0.1 010402.com
                                127.0.0.1 www.032439.com
                                127.0.0.1 032439.com
                                127.0.0.1 www.0scan.com
                                127.0.0.1 0scan.com
                                127.0.0.1 1000gratisproben.com
                                127.0.0.1 www.1000gratisproben.com
                                127.0.0.1 www.1001namen.com
                                127.0.0.1 1001namen.com
                                127.0.0.1 100888290cs.com
                                127.0.0.1 www.100888290cs.com
                                [...]

                                Nouveau fichier HOSTS:
                                127.0.0.1 localhost

                                Termine : << RKreport[2].txt >>
                                RKreport[1].txt ; RKreport[2].txt
                                0
                            2. Utilisateur anonyme
                              Bonjour,

                              1/

                              * Quitte tous tes programmes en cours
                              * Lance RogueKiller.exe.
                              * Lorsque demandé, tape 3 et valide
                              *Si le rogue empêche le lancement du programme, Renomme (RogueKiller) en "winlogon" ou "firefox". Sinon renomme le en winlogon.exe ou firefox.exe (rajouter l'extension .exe)
                              * Un rapport (RKreport.txt) a du se créer à côté de l'exécutable, colle son contenu dans la réponse
                              * Si le programme a été bloqué, ne pas hésiter a essayer plusieurs fois

                              2/
                              *Télécharges Malwarebytes' (mbam)

                              ICI >> [ICI >> Malwarebytes' (mbam)

                              * installes + mise a jour
                              * Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) sans les ouvrir
                              * Lances--> Malwarebytes (MBAM)
                              * Puis vas dans l'onglet "Recherche", coche >>Exécuter un examen complet
                              * puis "Rechercher"
                              * Sélectionnes tes disques durs" puis clique sur "Lancer l'examen"
                              * A la fin du scan, clique sur Afficher les résultats puis sur Enregistrer le rapport
                              *Si MalwareBytes' détecte des infections, clique sur ==>Afficher les résultats, puis sur ==>Supprimer la sélection
                              * S'il t' es demandé de redémarrer, clique sur "oui "
                              * aprés la suppression(s) de ou des infections trouvées --> poste le rapport ici
                              !!! Ne pas vider la quarantaine de MBAM sans avis !!!

                              3/
                              System drive C: has 30 GB (13%) free of 224 GB

                              Malgrès ton DD occupe 224 GB, il reste seulement 30 GB

                              Tu as téléchargé beaucoup de logiciels, je te conseille de supprimer ceux qui tu n'as pas besoin.
                              Même java tu as installé 6 versions, nous avons supprimé 5 et laissé une seule

                              qu'on va mettre à jour à la fin de la désinfection.

                              Si vraiment tu as besoin de tous les logiciels installés, je te conseille de transférer les moins utilisés dans un DD externe!

                              @+

                              -*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
                              Membre, Contributeur

                              H.F. : Fish66
                              -*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
                              0
                              1. bobpewe
                                Rapport de ZHPFix 1.12.3283 par Nicolas Coolman, Update du 14/05/2011
                                Fichier d'export Registre : C:\ZHPExportRegistry-17-05-2011-00-23-39.txt
                                Run by Charles at 17/05/2011 00:23:39
                                Windows Vista Home Premium Edition, 32-bit Service Pack 2 (Build 6002)
                                Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

                                ========== Logiciel(s) ==========
                                O42 - Logiciel: DAEMON Tools Toolbar - (.DT Soft Ltd.) [HKLM] -- DAEMON Tools Toolbar => Logiciel absent
                                O42 - Logiciel: RAR Password Cracker 4.12 - (.dnSoft Research Group.) [HKLM] -- RAR Password Cracker => Logiciel absent

                                ========== Clé(s) du Registre ==========
                                O42 - Logiciel: Java 6 Update 14 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216014F0} => Désinstallation logicielle annulée par l'utilisateur ou désinstallation partielle!
                                O42 - Logiciel: Java 6 Update 15 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216015F0} => Désinstallation logicielle annulée par l'utilisateur ou désinstallation partielle!
                                O42 - Logiciel: Java 6 Update 5 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160050} => Désinstallation logicielle annulée par l'utilisateur ou désinstallation partielle!
                                O42 - Logiciel: Java 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160070} => Désinstallation logicielle annulée par l'utilisateur ou désinstallation partielle!
                                O42 - Logiciel: Java SE Development Kit 6 Update 21 - (.Oracle.) [HKLM] -- {32A3A4F4-B792-11D6-A78A-00B0D0160210} => Désinstallation logicielle annulée par l'utilisateur ou désinstallation partielle!
                                HKCU\Software\AppDataLow\Software\PHPNukeFR => Clé supprimée avec succès
                                HKCU\Software\MGS => Clé supprimée avec succès
                                HKCU\Software\RAR Password Cracker => Clé absente
                                HKLM\Software\PHPNukeFR => Clé supprimée avec succès
                                HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\daemon tools toolbar => Clé absente

                                ========== Valeur(s) du Registre ==========
                                O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} . (.Pas de propriétaire - ToolBand Module.) -- C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll => Valeur absente
                                [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{32099aac-c132-4136-9e9a-4e364a424e17} => Valeur absente
                                FirewallRaz : Aucune valeur présente dans la clé de registre "Standard Profile"
                                FirewallRaz : Aucune valeur présente dans la clé de registre "Domain Profile"
                                FirewallRaz (Private) : TCP Query User{3D0C5E0A-E281-4B51-B95B-29B4FA63EBD4}F:\bin\demigod.exe => Valeur supprimée avec succès
                                FirewallRaz (Private) : UDP Query User{E64E6103-95AF-44C3-AB77-7634B91E2987}F:\bin\demigod.exe => Valeur supprimée avec succès
                                FirewallRaz (None) : {CAE6CB5D-C687-410D-8905-A4699A225A86} => Valeur supprimée avec succès

                                ========== Elément(s) de donnée du Registre ==========
                                [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: Modified => Donnée supprimée avec succès

                                ========== Dossier(s) ==========
                                C:\ProgramData\dbg => Dossier absent
                                C:\Program Files\DAEMON Tools Toolbar => Supprimé et mis en quarantaine
                                C:\Program Files\RAR Password Cracker => Dossier absent
                                C:\Program Files\Spybot - Search & Destroy => Fichier supprimé au reboot
                                C:\ProgramData\Spybot - Search & Destroy => Supprimé et mis en quarantaine
                                C:\Users\Charles\Appdata\LocalLow\PHPNukeFR => Supprimé et mis en quarantaine
                                Dossiers temporaires Windows supprimés: 106
                                Dossiers Flash Cookies supprimés : 110

                                ========== Fichier(s) ==========
                                c:\program files\daemon tools toolbar\dttoolbar.dll => Supprimé et mis en quarantaine
                                c:\program files\daemon tools toolbar => Fichier absent
                                Fichiers temporaires Windows supprimés : 2442
                                Fichiers Flash Cookies supprimés : 62

                                ========== Tache planifiée ==========
                                Task : {F113C928-7DCD-4D9D-8CD3-86102511E627} => Tâche supprimée avec succès

                                ========== Récapitulatif ==========
                                10 : Clé(s) du Registre
                                7 : Valeur(s) du Registre
                                1 : Elément(s) de donnée du Registre
                                8 : Dossier(s)
                                4 : Fichier(s)
                                2 : Logiciel(s)
                                1 : Tache planifiée

                                End of the scan
                                0
                                1. Utilisateur anonyme
                                  Re,

                                  Copie tout le texte présent en gras ci-dessous ( tu le selectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C )

                                  O43 - CFD: 24/06/2009 - 01:15:32 - [0] ----D- C:\ProgramData\dbg
                                  [HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: Modified
                                  O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} . (.Pas de propriétaire - ToolBand Module.) -- C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
                                  [MD5.00000000000000000000000000000000] [APT] [{F113C928-7DCD-4D9D-8CD3-86102511E627}] (.Pas de propriétaire.) -- C:\Program Files\AIM6\uninst.exe (.not file.)
                                  O42 - Logiciel: DAEMON Tools Toolbar - (.DT Soft Ltd.) [HKLM] -- DAEMON Tools Toolbar
                                  O42 - Logiciel: Java 6 Update 14 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216014F0}
                                  O42 - Logiciel: Java 6 Update 15 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216015F0}
                                  O42 - Logiciel: Java 6 Update 5 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160050}
                                  O42 - Logiciel: Java 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160070}
                                  O42 - Logiciel: Java SE Development Kit 6 Update 21 - (.Oracle.) [HKLM] -- {32A3A4F4-B792-11D6-A78A-00B0D0160210}
                                  O42 - Logiciel: RAR Password Cracker 4.12 - (.dnSoft Research Group.) [HKLM] -- RAR Password Cracker
                                  [HKCU\Software\AppDataLow\Software\PHPNukeFR]
                                  [HKCU\Software\MGS]
                                  [HKCU\Software\RAR Password Cracker]
                                  [HKLM\Software\PHPNukeFR]
                                  O43 - CFD: 14/03/2011 - 19:48:36 - [2466399] ----D- C:\Program Files\DAEMON Tools Toolbar
                                  O43 - CFD: 24/06/2009 - 00:23:16 - [203084] ----D- C:\Program Files\RAR Password Cracker
                                  O43 - CFD: 21/11/2009 - 13:41:38 - [98860435] ----D- C:\Program Files\Spybot - Search & Destroy
                                  O43 - CFD: 12/05/2011 - 13:39:22 - [107287841] ----D- C:\ProgramData\Spybot - Search & Destroy
                                  [HKCU\Software\AppDataLow\Software\PHPNukeFR]
                                  [HKLM\Software\PHPNukeFR]
                                  [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\daemon tools toolbar]
                                  [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{32099aac-c132-4136-9e9a-4e364a424e17}
                                  C:\Program Files\DAEMON Tools Toolbar
                                  C:\Users\Charles\Appdata\LocalLow\PHPNukeFR

                                  FirewallRAZ
                                  EmptyTemp
                                  EmptyFlash


                                  Puis Lance ZHPFix depuis le raccourci du bureau .

                                  * Une fois l'outil ZHPFix ouvert , clique sur le bouton [ H ] ( "coller les lignes Helper" ) .

                                  * Dans l'encadré principal tu verras donc les lignes que tu as copié précédemment apparaitrent .

                                  Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.

                                  Clique sur le bouton GO

                                  Copie/Colle le rapport à l'écran dans ton prochain message.
                                  0
                                  1. bobpewe
                                    Voila

                                    ========== REGISTRY ==========
                                    Registry key HKEY_CLASSES_ROOT\CLSID\{761f6a83-f007-49e4-8eac-cdb6808ef06f}\ deleted successfully.
                                    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{761f6a83-f007-49e4-8eac-cdb6808ef06f}\ not found.
                                    Registry key HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{761f6a83-f007-49e4-8eac-cdb6808ef06f}\ not found.
                                    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{761f6a83-f007-49e4-8eac-cdb6808ef06f}\ not found.
                                    Registry key HKEY_CLASSES_ROOT\CLSID\{76c45b18-a29e-43ea-aaf8-af55c2e1ae17}\ deleted successfully.
                                    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{76c45b18-a29e-43ea-aaf8-af55c2e1ae17}\ not found.
                                    Registry key HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{76c45b18-a29e-43ea-aaf8-af55c2e1ae17}\ not found.
                                    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{76c45b18-a29e-43ea-aaf8-af55c2e1ae17}\ not found.
                                    Registry key HKEY_CLASSES_ROOT\CLSID\{96ef404c-24c7-43d0-9096-4ccc8bb7ccac}\ deleted successfully.
                                    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{96ef404c-24c7-43d0-9096-4ccc8bb7ccac}\ not found.
                                    Registry key HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{96ef404c-24c7-43d0-9096-4ccc8bb7ccac}\ not found.
                                    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{96ef404c-24c7-43d0-9096-4ccc8bb7ccac}\ not found.
                                    Registry key HKEY_CLASSES_ROOT\CLSID\{97720195-206a-42ae-8e65-260b9ba5589f}\ deleted successfully.
                                    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{97720195-206a-42ae-8e65-260b9ba5589f}\ not found.
                                    Registry key HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{97720195-206a-42ae-8e65-260b9ba5589f}\ not found.
                                    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{97720195-206a-42ae-8e65-260b9ba5589f}\ not found.
                                    Registry key HKEY_CLASSES_ROOT\CLSID\{97d69524-bb57-4185-9c7f-5f05593b771a}\ deleted successfully.
                                    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{97d69524-bb57-4185-9c7f-5f05593b771a}\ not found.
                                    Registry key HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{97d69524-bb57-4185-9c7f-5f05593b771a}\ not found.
                                    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{97d69524-bb57-4185-9c7f-5f05593b771a}\ not found.
                                    Registry key HKEY_CLASSES_ROOT\CLSID\{986f7a5a-9676-47e1-8642-f41f8c3fcf82}\ deleted successfully.
                                    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{986f7a5a-9676-47e1-8642-f41f8c3fcf82}\ not found.
                                    Registry key HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{986f7a5a-9676-47e1-8642-f41f8c3fcf82}\ not found.
                                    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{986f7a5a-9676-47e1-8642-f41f8c3fcf82}\ not found.
                                    Registry key HKEY_CLASSES_ROOT\CLSID\{b18788a4-92bd-440e-a4d1-380c36531119}\ deleted successfully.
                                    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b18788a4-92bd-440e-a4d1-380c36531119}\ not found.
                                    Registry key HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{b18788a4-92bd-440e-a4d1-380c36531119}\ not found.
                                    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b18788a4-92bd-440e-a4d1-380c36531119}\ not found.
                                    Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\daemon tools toolbar\ deleted successfully.

                                    OTM by OldTimer - Version 3.1.17.2 log created on 05162011_223519
                                    0
                                    1. Utilisateur anonyme
                                      Rapport mbr ?
                                      0
                                    2. bobpewe
                                      Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
                                      Windows 6.0.6002 Disk: FUJITSU_ rev.8909 -> Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1

                                      device: opened successfully
                                      user: MBR read successfully
                                      kernel: MBR read successfully
                                      user & kernel MBR OK
                                      0
                                  • 1
                                  • 2

                                  Discussions similaires

                                  Impossible d'afficher le rapport de tableau croisé dynamique sur un rapport
                                  Utilisateur anonyme

                                  13 réponses
                                  rapport de visite commercial
                                  antcho

                                  3 réponses
                                  impossible d'afficher le tableau dynamique sur un rapport existant
                                  Pierre

                                  3 réponses
                                  Rapport audit parc informatique
                                  It administrateur

                                  9 réponses
                                  Theme de rapport de stage option comptabilité
                                  sana saydou

                                  2 réponses