pc qui rame Résolu

Question

Bonjour, 
depuis quelques temps le pc rame ,alors je sais pas si j ai un virus ou si il y a le tri a faire sur le pc donc j aurais besoin d un peu d aide .merci

Fish66 · Answer

Salut, * Télécharge ZHPDiag (de Nicolas Coolman) à partir l'un des deux liens : Lien 1 ou Lien 2 * Lance-le, (Clic droit "exécuter en tant qu'administrateur" si tu es sous Vista/7) * Clique sur l'icône en forme de loupe pour lancer le diagnostique * Héberge le rapport ZHPDiag.txt de ton bureau sur : malekal.com ou cjoint.com * Fais copier/coller le lien fourni dans ta prochaine réponse * Aide ZHPDiag : <<< ICI >>> @+

dino06 · Answer

tu peux déjà installer tuneup 2012, et nettoyer le pc en (défragmentant, lançant des nettoyage de registre et défragmentation de registre [quiite les application, l'écran dévient alors noirs mais pas de panique soit patient] ce logiciel est intuitif je te le conseille)  , puis enlève les gros fichiers du bureau à ce qu'il paraît ça fait ramer..., te libère de l'espace du disque dur, je te conseille d'avoir un disque dur portable pour sauvegarder les plus gros fichiers (films et jeux et autres),  et utilise un antivirus ( personnellement pour les gratuits je préfère smadav 2012 puis après ton pc dois pouvoir s'en remettre de son asthme

bibinouc · Answer

bonjour fish66 voila le rapport

http://pjjoint.malekal.com/files.php?id=ZHPDiag_20120502_b15k13j5t10j7

Fish66 · Answer

Re,

On commence par la suppression des adwares!(Babylon, Price Gong, BHO, ...)

1/
Télécharge AdwCleaner (merci à Xplode) 
Lance AdwCleaner
Clique sur le bouton [ Suppression ] 
Patiente... 
Poste le rapport qui apparait en fin de recherche. 
(Le rapport est sauvegardé aussi sous C:\ AdwCleaner[SX].Txt)

2/ Ensuite
* Télécharge de AD-Remover sur ton Bureau. 
http://security-domain.be/download/AD-Remover.html

/!\ Ferme toutes applications en cours /!\ 

- Double  sur l'icône Ad-remover située sur ton Bureau. 
-Pour vista/Seven : clique avec le bouton droit de la souris  et choisis « exécuter en tant qu'administrateur » 
- Sur la page, clique sur le bouton « chercher »
- Confirme lancement du scan 
- Laisse travailler l'outil. 
- Poste le rapport qui apparaît à la fin. 

(Le rapport est sauvegardé aussi sous C:\Ad-report(Scan/clean).Txt) 

(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour c

@+

bibinouc · Answer

AdwCleaner v1.604 - Rapport créé le 02/05/2012 à 17:01:29
# Mis à jour le 23/04/2012 par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
# Nom d'utilisateur : Administrateur - TOPHE
# Exécuté depuis : C:\Documents and Settings\Administrateur.27370A4BB77443A\Bureau\adwcleaner.exe
# Option [Suppression]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Babylon
Dossier Supprimé : C:\Documents and Settings\Administrateur.27370A4BB77443A\Application Data\Babylon
Dossier Supprimé : C:\Documents and Settings\Administrateur.27370A4BB77443A\Application Data\FREEzeFrog
Dossier Supprimé : C:\Documents and Settings\Administrateur.27370A4BB77443A\Application Data\kujytuo
Dossier Supprimé : C:\Documents and Settings\Administrateur.27370A4BB77443A\Application Data\Toolbar4
Dossier Supprimé : C:\Documents and Settings\Administrateur.27370A4BB77443A\Application Data\Mozilla\Firefox\Profiles\dvki4qvk.default\ConduitCommon
Dossier Supprimé : C:\Documents and Settings\Administrateur.27370A4BB77443A\Application Data\Mozilla\Firefox\Profiles\dvki4qvk.default\extensions\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}
Dossier Supprimé : C:\Documents and Settings\All Users.WINDOWS\Application Data\Babylon
Dossier Supprimé : C:\Documents and Settings\All Users.WINDOWS\Application Data\Viewpoint
Dossier Supprimé : C:\Program Files\FREEzeFrog
Dossier Supprimé : C:\Program Files\Viewpoint
Fichier Supprimé : C:\Program Files\Mozilla Firefox\plugins\npdnu.xpt
Fichier Supprimé : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml

***** [Registre] *****

Clé Supprimée : HKCU\Software\Cr_Installer
Clé Supprimée : HKCU\Software\Iminent
Clé Supprimée : HKLM\SOFTWARE\Babylon
Clé Supprimée : HKLM\SOFTWARE\Facemoi
Clé Supprimée : HKLM\SOFTWARE\FREEzeFrog
Clé Supprimée : HKLM\SOFTWARE\Iminent
Clé Supprimée : HKLM\SOFTWARE\MetaStream
Clé Supprimée : HKLM\SOFTWARE\Viewpoint
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtl.1
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary
Clé Supprimée : HKLM\SOFTWARE\Classes\AxMetaStream.MetaStreamCtlSecondary.1
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@viewpoint.com/VMP
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Extensions\CmdMapping [{97ED3A9F-CD6F-473A-8FE1-7505C1B844C3}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow [*.crossrider.com]

***** [Registre - GUID] *****

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{97ED3A9F-CD6F-473A-8FE1-7505C1B844C3}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}

***** [Navigateurs] *****

-\ Internet Explorer v8.0.6001.18702

Remplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?AF=108988&babsrc=NT_ss&mntrId=68266703000000000000001bfc677add --> hxxp://www.google.fr

-\ Mozilla Firefox v11.0 (fr)

Nom du profil : default 
Fichier : C:\Documents and Settings\Administrateur.27370A4BB77443A\Application Data\Mozilla\Firefox\Profiles\dvki4qvk.default\prefs.js

C:\Documents and Settings\Administrateur.27370A4BB77443A\Application Data\Mozilla\Firefox\Profiles\dvki4qvk.default\user.js ... Supprimé !

Supprimée : user_pref("CT2612669..clientLogIsEnabled", false);
Supprimée : user_pref("CT2612669..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Supprimée : user_pref("CT2612669..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Supprimée : user_pref("CT2612669.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Supprimée : user_pref("CT2612669.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Supprimée : user_pref("CT2612669.BrowserCompStateIsOpen_1000515", true);
Supprimée : user_pref("CT2612669.BrowserCompStateIsOpen_129482420034282070", true);
Supprimée : user_pref("CT2612669.BrowserCompStateIsOpen_129564502120544861", true);
Supprimée : user_pref("CT2612669.BrowserCompStateIsOpen_129564560723477699", true);
Supprimée : user_pref("CT2612669.BrowserCompStateIsOpen_129683190780749804", true);
Supprimée : user_pref("CT2612669.CTID", "ct2612669");
Supprimée : user_pref("CT2612669.CommunitiesChangesLastCheckTime", "0");
Supprimée : user_pref("CT2612669.CurrentServerDate", "1-4-2012");
Supprimée : user_pref("CT2612669.DialogsAlignMode", "LTR");
Supprimée : user_pref("CT2612669.DialogsGetterLastCheckTime", "Wed Mar 21 2012 12:07:11 GMT+0100");
Supprimée : user_pref("CT2612669.DownloadReferralCookieData", "");
Supprimée : user_pref("CT2612669.EnableClickToSearchBox", false);
Supprimée : user_pref("CT2612669.EnableSearchHistory", false);
Supprimée : user_pref("CT2612669.EnableSearchSuggest", false);
Supprimée : user_pref("CT2612669.FeedLastCount129206864782289142", 0);
Supprimée : user_pref("CT2612669.FeedPollDate129206864782914144", "Wed Mar 21 2012 12:07:10 GMT+0100");
Supprimée : user_pref("CT2612669.FeedTTL129206864782914144", 40);
Supprimée : user_pref("CT2612669.FirstServerDate", "2-8-2011");
Supprimée : user_pref("CT2612669.FirstTime", true);
Supprimée : user_pref("CT2612669.FirstTimeFF3", true);
Supprimée : user_pref("CT2612669.FixPageNotFoundErrors", true);
Supprimée : user_pref("CT2612669.GroupingServerCheckInterval", 1440);
Supprimée : user_pref("CT2612669.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Supprimée : user_pref("CT2612669.HasUserGlobalKeys", true);
Supprimée : user_pref("CT2612669.Initialize", true);
Supprimée : user_pref("CT2612669.InitializeCommonPrefs", true);
Supprimée : user_pref("CT2612669.InstallationAndCookieDataSentCount", 3);
Supprimée : user_pref("CT2612669.InstallationType", "UnknownIntegration");
Supprimée : user_pref("CT2612669.InstalledDate", "Tue Aug 02 2011 22:45:30 GMT+0200");
Supprimée : user_pref("CT2612669.IsAlertDBUpdated", true);
Supprimée : user_pref("CT2612669.IsGrouping", false);
Supprimée : user_pref("CT2612669.IsInitSetupIni", true);
Supprimée : user_pref("CT2612669.IsMulticommunity", false);
Supprimée : user_pref("CT2612669.IsOpenThankYouPage", true);
Supprimée : user_pref("CT2612669.IsOpenUninstallPage", true);
Supprimée : user_pref("CT2612669.LanguagePackLastCheckTime", "Tue Aug 02 2011 22:45:31 GMT+0200");
Supprimée : user_pref("CT2612669.LanguagePackReloadIntervalMM", 1440);
Supprimée : user_pref("CT2612669.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Supprimée : user_pref("CT2612669.LastLogin_3.10.0.1", "Sun Apr 01 2012 06:27:02 GMT+0200");
Supprimée : user_pref("CT2612669.LastLogin_3.5.0.12", "Thu Aug 11 2011 15:16:08 GMT+0200");
Supprimée : user_pref("CT2612669.LastLogin_3.6.0.10", "Wed Sep 28 2011 10:00:16 GMT+0200");
Supprimée : user_pref("CT2612669.LastLogin_3.7.0.6", "Tue Nov 01 2011 16:44:06 GMT+0100");
Supprimée : user_pref("CT2612669.LastLogin_3.8.0.8", "Mon Dec 05 2011 17:59:01 GMT+0100");
Supprimée : user_pref("CT2612669.LastLogin_3.8.1.0", "Mon Jan 09 2012 08:06:15 GMT+0100");
Supprimée : user_pref("CT2612669.LastLogin_3.9.0.3", "Mon Mar 05 2012 01:58:46 GMT+0100");
Supprimée : user_pref("CT2612669.LatestVersion", "3.10.0.1");
Supprimée : user_pref("CT2612669.Locale", "en");
Supprimée : user_pref("CT2612669.MCDetectTooltipHeight", "83");
Supprimée : user_pref("CT2612669.MCDetectTooltipShow", false);
Supprimée : user_pref("CT2612669.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Supprimée : user_pref("CT2612669.MCDetectTooltipWidth", "295");
Supprimée : user_pref("CT2612669.MyStuffEnabledAtInstallation", true);
Supprimée : user_pref("CT2612669.OriginalFirstVersion", "3.5.0.12");
Supprimée : user_pref("CT2612669.SHRINK_TOOLBAR", 1);
Supprimée : user_pref("CT2612669.SavedHomepage", "hxxp://www.sfr.fr/");
Supprimée : user_pref("CT2612669.SearchBackToDefaultEngine", false);
Supprimée : user_pref("CT2612669.SearchBoxWidth", 152);
Supprimée : user_pref("CT2612669.SearchFromAddressBarIsInit", true);
Supprimée : user_pref("CT2612669.SearchInNewTabEnabled", true);
Supprimée : user_pref("CT2612669.SearchInNewTabIntervalMM", 1440);
Supprimée : user_pref("CT2612669.SearchInNewTabLastCheckTime", "Tue Aug 02 2011 22:45:30 GMT+0200");
Supprimée : user_pref("CT2612669.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Supprimée : user_pref("CT2612669.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...]
Supprimée : user_pref("CT2612669.SearchInNewTabUserEnabled", false);
Supprimée : user_pref("CT2612669.ServiceMapLastCheckTime", "Sat Mar 31 2012 19:36:44 GMT+0200");
Supprimée : user_pref("CT2612669.SettingsLastCheckTime", "Tue Aug 02 2011 22:45:28 GMT+0200");
Supprimée : user_pref("CT2612669.SettingsLastUpdate", "1312243164");
Supprimée : user_pref("CT2612669.ThirdPartyComponentsInterval", 504);
Supprimée : user_pref("CT2612669.ThirdPartyComponentsLastCheck", "Tue Aug 02 2011 22:45:28 GMT+0200");
Supprimée : user_pref("CT2612669.ThirdPartyComponentsLastUpdate", "1246786978");
Supprimée : user_pref("CT2612669.ToolbarShrinkedFromSetup", false);
Supprimée : user_pref("CT2612669.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2612669");
Supprimée : user_pref("CT2612669.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Supprimée : user_pref("CT2612669.Uninstall", true);
Supprimée : user_pref("CT2612669.UserID", "UN45129165313674127");
Supprimée : user_pref("CT2612669.ValidationData_Toolbar", 2);
Supprimée : user_pref("CT2612669.alertChannelId", "1005466");
Supprimée : user_pref("CT2612669.approveUntrustedApps", false);
Supprimée : user_pref("CT2612669.autoDisableScopes", -1);
Supprimée : user_pref("CT2612669.backendstorage.2612669a129684721030689048000000paramsgk0", "7B22757064617465526[...]
Supprimée : user_pref("CT2612669.backendstorage.2612669a129684723478947121000000paramsgk0", "7B22757064617465526[...]
Supprimée : user_pref("CT2612669.backendstorage.2612669a129684723478947121000000paramsgk3", "7B22757064617465526[...]
Supprimée : user_pref("CT2612669.backendstorage.cbfirsttime", "5765642053657020323820323031312031303A30303A32332[...]
Supprimée : user_pref("CT2612669.backendstorage.facebook_ctid_connect_send_new", "73656E646564");
Supprimée : user_pref("CT2612669.backendstorage.facebook_mode", "32");
Supprimée : user_pref("CT2612669.backendstorage.facebook_user_locale", "6672");
Supprimée : user_pref("CT2612669.backendstorage.shoppingapp.gk.exipres", "4D6F6E204D617220323620323031322031323A[...]
Supprimée : user_pref("CT2612669.backendstorage.shoppingapp.gk.geolocation", "6672616E6365");
Supprimée : user_pref("CT2612669.backendstorage.url_history", "687474703A2F2F646C2E636F6D6D656E7463616D617263686[...]
Supprimée : user_pref("CT2612669.backendstorage.url_history0001", "687474703A2F2F7777772E66616365626F6F6B2E636F6[...]
Supprimée : user_pref("CT2612669.backendstorage.url_history_time", "31333236323035363636313536");
Supprimée : user_pref("CT2612669.backendstorage.youtubelang", "4652");
Supprimée : user_pref("CT2612669.components.1000515", true);
Supprimée : user_pref("CT2612669.ct2612669.AppTrackingLastCheckTime", "Tue Sep 27 2011 17:40:11 GMT+0200");
Supprimée : user_pref("CT2612669.ct2612669.DialogsAlignMode", "LTR");
Supprimée : user_pref("CT2612669.ct2612669.FeedLastCount129206864782289142", 50);
Supprimée : user_pref("CT2612669.ct2612669.GroupingInvalidateCache", false);
Supprimée : user_pref("CT2612669.ct2612669.GroupingLastCheckTime", "0");
Supprimée : user_pref("CT2612669.ct2612669.GroupingLastServerUpdateTime", "0");
Supprimée : user_pref("CT2612669.ct2612669.InvalidateCache", false);
Supprimée : user_pref("CT2612669.ct2612669.LanguagePackLastCheckTime", "Sun Apr 01 2012 06:27:02 GMT+0200");
Supprimée : user_pref("CT2612669.ct2612669.Locale", "en");
Supprimée : user_pref("CT2612669.ct2612669.RadioLastCheckTime", "0");
Supprimée : user_pref("CT2612669.ct2612669.RadioLastUpdateIPServer", "0");
Supprimée : user_pref("CT2612669.ct2612669.RadioLastUpdateServer", "0");
Supprimée : user_pref("CT2612669.ct2612669.SearchInNewTabLastCheckTime", "Wed Mar 21 2012 12:07:10 GMT+0100");
Supprimée : user_pref("CT2612669.ct2612669.SettingsLastCheckTime", "Sun Apr 01 2012 06:27:02 GMT+0200");
Supprimée : user_pref("CT2612669.ct2612669.SettingsLastUpdate", "1330961344");
Supprimée : user_pref("CT2612669.ct2612669.ThirdPartyComponentsLastCheck", "Fri Mar 02 2012 15:28:23 GMT+0100");
Supprimée : user_pref("CT2612669.ct2612669.ThirdPartyComponentsLastUpdate", "1312887586");
Supprimée : user_pref("CT2612669.ct2612669.components.129174085518698803", true);
Supprimée : user_pref("CT2612669.ct2612669.globalFirstTimeInfoLastCheckTime", "Wed Mar 14 2012 20:01:16 GMT+0100[...]
Supprimée : user_pref("CT2612669.ct2612669.toolbarAppMetaDataLastCheckTime", "Wed Mar 21 2012 12:07:11 GMT+0100"[...]
Supprimée : user_pref("CT2612669.ct2612669.toolbarContextMenuLastCheckTime", "Wed Mar 21 2012 12:07:11 GMT+0100"[...]
Supprimée : user_pref("CT2612669.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Supprimée : user_pref("CT2612669.globalFirstTimeInfoLastCheckTime", "Tue Aug 02 2011 22:45:29 GMT+0200");
Supprimée : user_pref("CT2612669.homepageProtectorEnableByLogin", true);
Supprimée : user_pref("CT2612669.initDone", true);
Supprimée : user_pref("CT2612669.isAppTrackingManagerOn", true);
Supprimée : user_pref("CT2612669.isSearchProtectorNotifyChanges", false);
Supprimée : user_pref("CT2612669.myStuffEnabled", true);
Supprimée : user_pref("CT2612669.myStuffPublihserMinWidth", 400);
Supprimée : user_pref("CT2612669.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Supprimée : user_pref("CT2612669.myStuffServiceIntervalMM", 1440);
Supprimée : user_pref("CT2612669.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Supprimée : user_pref("CT2612669.oldAppsList", "129170380618247103,129170380618247104,111,129174085518698803,129[...]
Supprimée : user_pref("CT2612669.revertSettingsEnabled", true);
Supprimée : user_pref("CT2612669.searchProtectorDialogDelayInSec", 10);
Supprimée : user_pref("CT2612669.searchProtectorEnableByLogin", true);
Supprimée : user_pref("CT2612669.testingCtid", "");
Supprimée : user_pref("CT2612669.toolbarAppMetaDataLastCheckTime", "Tue Aug 02 2011 22:45:29 GMT+0200");
Supprimée : user_pref("CT2612669.toolbarContextMenuLastCheckTime", "Tue Aug 02 2011 22:45:31 GMT+0200");
Supprimée : user_pref("CT2612669.usageEnabled", false);
Supprimée : user_pref("CT2612669.usagesFlag", 2);
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/ct2612669/CT2612669[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=ct2612669", [...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.10[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9.[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2612669",[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=ct2612669&octid=[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE",[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"15c[...]
Supprimée : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/20566976.xml", "\"a43579363926e82797b[...]
Supprimée : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\Documents and Settings\Administrateur.273[...]
Supprimée : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.10.0.1");
Supprimée : user_pref("CommunityToolbar.globalUserId", "20353e34-f0f6-4627-906a-764487014c90");
Supprimée : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Supprimée : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Supprimée : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Fri Mar 30 2012 20:05:4[...]
Supprimée : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Supprimée : user_pref("CommunityToolbar.notifications.locale", "en");
Supprimée : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Supprimée : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Sat Mar 31 2012 19:36:45 GMT+0200");
Supprimée : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Supprimée : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Supprimée : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Supprimée : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Supprimée : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Supprimée : user_pref("CommunityToolbar.notifications.userId", "1120bb09-bd19-4a34-82c2-d9acdce5ea9a");
Supprimée : user_pref("CommunityToolbar.twitter.user_20566976.LastCheckTime", "Wed Mar 21 2012 12:07:13 GMT+0100[...]
Supprimée : user_pref("browser.search.defaultthis.engineName", "IMVU Inc Customized Web Search");
Supprimée : user_pref("extensions.BabylonToolbar.bbDpng", 29);
Supprimée : user_pref("extensions.BabylonToolbar.cntry", "FR");
Supprimée : user_pref("extensions.BabylonToolbar.hdrMd5", "06EDA059D81CE91051C5AF8169ED0DFD");
Supprimée : user_pref("extensions.BabylonToolbar.lastActv", "29");
Supprimée : user_pref("extensions.BabylonToolbar.lastDP", 29);
Supprimée : user_pref("extensions.BabylonToolbar.lastVrsn", "1.4.23.10");
Supprimée : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Supprimée : user_pref("extensions.BabylonToolbar_i.babExt", "");
Supprimée : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=108988");
Supprimée : user_pref("extensions.BabylonToolbar_i.hardId", "68266703000000000000001bfc677add");
Supprimée : user_pref("extensions.BabylonToolbar_i.id", "68266703000000000000001bfc677add");
Supprimée : user_pref("extensions.BabylonToolbar_i.instlDay", "15411");
Supprimée : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Supprimée : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Supprimée : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Supprimée : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Supprimée : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Supprimée : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
Supprimée : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Supprimée : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1712:07:45");
Supprimée : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Supprimée : user_pref("extensions.defaulttab.config", "{\"status\": \"ok\", \"config\": {\"dns_error_handling\":[...]
Supprimée : user_pref("extensions.foxlingo.addit.defaultAddons", "{ \"software\": {\"7\": {\"id\": \"7\",\"title[...]
Supprimée : user_pref("surfcanyon.ad_status", "");
Supprimée : user_pref("surfcanyon.amazon_results_enabled", true);
Supprimée : user_pref("surfcanyon.coupons_enabled", true);
Supprimée : user_pref("surfcanyon.daily_code", "scIsOnSearchEngineDomain = function() {\nreturn contains(scCurre[...]
Supprimée : user_pref("surfcanyon.daily_code_timestamp", "1321633146996");
Supprimée : user_pref("surfcanyon.display_similar_product_images", true);
Supprimée : user_pref("surfcanyon.google_search_button_click_query", "telephone+du");
Supprimée : user_pref("surfcanyon.google_search_button_click_ts", "1306239978319");
Supprimée : user_pref("surfcanyon.hourly_code", "scHourlyCodeRevision = '337e';\nscGetDocument = function() {\nr[...]
Supprimée : user_pref("surfcanyon.hourly_code2", "scEnableGoogle_hourly = function() {\nvar args = window.locati[...]
Supprimée : user_pref("surfcanyon.hourly_code_timestamp", "1333253909392");
Supprimée : user_pref("surfcanyon.initialized_amazon_results", true);
Supprimée : user_pref("surfcanyon.initialized_roaming_suggestions", true);
Supprimée : user_pref("surfcanyon.initialized_search_bar", true);
Supprimée : user_pref("surfcanyon.initialized_search_links", true);
Supprimée : user_pref("surfcanyon.initialized_similar_product_images", true);
Supprimée : user_pref("surfcanyon.inst_id", "4490fb51f772447d");
Supprimée : user_pref("surfcanyon.inst_timestamp", "21 05 2011 Saturday 18 18 08");
Supprimée : user_pref("surfcanyon.last_seen_splash", "338");
Supprimée : user_pref("surfcanyon.num_recs_clicked", "72");
Supprimée : user_pref("surfcanyon.num_results_clicked", "3695");
Supprimée : user_pref("surfcanyon.num_results_clicked_when_recs_available", "462");
Supprimée : user_pref("surfcanyon.num_searches", "4641");
Supprimée : user_pref("surfcanyon.partner_code", "AFA");
Supprimée : user_pref("surfcanyon.price_trace_enabled", true);
Supprimée : user_pref("surfcanyon.refinements_cache", "facebokk/facebokk:friends:news:pictures:sign^colas/colas:[...]
Supprimée : user_pref("surfcanyon.roaming_suggestions_enabled", true);
Supprimée : user_pref("surfcanyon.search_links_enabled", true);
Supprimée : user_pref("surfcanyon.server_error_time", "");
Supprimée : user_pref("surfcanyon.server_error_url", "");
Supprimée : user_pref("surfcanyon.url_bar_icon_disabled", true);

-\ Google Chrome v18.0.1025.162

Fichier : C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

[OK] Le fichier ne contient aucune entrée illégitime.

*************************

AdwCleaner[S1].txt - [29165 octets] - [02/05/2012 17:01:29]

########## EOF - C:\AdwCleaner[S1].txt - [29294 octets] ##########

bibinouc · Answer

j arrive pas a envoyer le rapport de ad remover ca me marque Titre du message non renseigné

Fish66 · Answer

Re, Pour que tu puisses l'envoyer : * inscris toi sur le forum afin de rendre tes liens lisibles * ICI >> l'inscription <<< ==================================== Tu peux aussi l'héberger :-) @+

bibinouc · Answer

====== RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com


C:\Program Files\Ad-Remover\main.exe (SCAN [2]) -> Lancé à 17:23:45 le 02/05/2012, Mode normal

Microsoft Windows XP Professionnel Service Pack 3 (X86) 

 
============== RECHERCHE ==============



Clé trouvée: HKCU\Software\PopCap


============== SCAN ADDITIONNEL ==============

**** Mozilla Firefox Version [11.0 (fr)] ****

Plugins
pPandoWebInst.dll (Pando Networks)
Plugins
punagi2.dll (America Online, Inc.)
HKLM_MozillaPlugins\Adobe Reader (x)
Searchplugins\bing.xml (    hxxp://www.bing.com/search)
Components\browsercomps.dll (Mozilla Foundation)
Components\GooglePlusVideosXPCOM.dll (?)
Components\SiteVacuumXPCOM.dll (?)

-- C:\Documents and Settings\Administrateur.27370A4BB77443A\Application Data\Mozilla\FireFox\Profiles\dvki4qvk.default --
Extensions\vinceturk@gmail.com (KwiClick)
Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} (Google Toolbar for Firefox)
Prefs.js - browser.download.dir, C:\Documents and Settings\Administrateur.27370A4BB77443A\Bureau
Prefs.js - browser.download.lastDir, C:\Documents and Settings\Administrateur.27370A4BB77443A\Bureau
Prefs.js - browser.search.defaultenginename, 
Prefs.js - browser.startup.homepage, hxxp://www.sfr.fr/portail.html
Prefs.js - browser.startup.homepage_override.buildID, 20120312181643
Prefs.js - browser.startup.homepage_override.mstone, rv:11.0

========================================

**** Internet Explorer Version [8.0.6001.18702] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157
HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157
AboutUrls|Tabs - hxxp://www.google.fr
HKLM_Toolbar|{D2F8F919-690B-4EA2-9FA7-A203D1E04F75} (C:\Program Files\styler\TB\StylerTB.dll)
HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)
HKLM_ElevationPolicy\{A6E2003F-95C5-4591-BA9A-0093080FDB5C} - C:\Program Files\Fichiers communs\Oberon Media\OberonBroker\1.0.0.63\OberonBroker.exe (?)
HKCU_Extensions\{97ED3A9F-CD6F-473A-8FE1-7505C1B844C3} - "Billeo" (billeo.dll,219)
HKLM_Extensions\{d9288080-1baa-4bc4-9cf8-a92d743db949} - "Run IMVU" (C:\Documents and Settings\Administrateur.27370A4BB77443A\Application Data\IMVUClient\imvu.ico)
HKLM_Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - "?" (?)
HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)
BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 3 Fichier(s)

C:\Ad-Report-SCAN[1].txt - 02/05/2012 17:08:03 (3503 Octet(s)) 
C:\Ad-Report-SCAN[2].txt - 02/05/2012 17:24:10 (434 Octet(s)) 

Fin à: 17:24:33, 02/05/2012 
 
============== E.O.F ==============

Fish66 · Answer

Re, 1/ /!\ Ferme toutes applications en cours /!\ - Double sur l'icône Ad-remover située sur ton Bureau. -Pour vista/Seven : clique avec le bouton droit de la souris et choisis « exécuter en tant qu'administrateur » - Sur la page, clique sur le bouton « Nettoyer » - Confirme lancement du scan - Laisse travailler l'outil. - Poste le rapport qui apparaît à la fin. (Le rapport est sauvegardé aussi sous C:\Ad-report(Scan/clean).Txt) (CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour c 2/ * Telecharge et install link officiel : >>>USBFix ICI<<< ou : >>> ICI <<< (!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir * Double clique sur le raccourci UsbFix sur ton Bureau (clique droit avec la souris :exécuter en tant qu'administrateur pour vista/seven), l'installation se fera automatiquement * Clique sur "Recherche" * Laisse travailler l'outil * A la fin, le rapport va s'afficher : poste le dans ta prochaine réponse (il est aussi sauvegardé a la racine du disque dur : C:\UsbFix.txt ) @+

bibinouc · Answer

voila le rapport ad remover

======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 17:54:55 le 02/05/2012, Mode normal

Microsoft Windows XP Professionnel Service Pack 3 (X86) 
Administrateur@TOPHE ( ) 
 
============== ACTION(S) ==============



(!) -- Fichiers temporaires supprimés.


Clé supprimée: HKCU\Software\PopCap


============== SCAN ADDITIONNEL ==============

**** Mozilla Firefox Version [11.0 (fr)] ****

Plugins
pPandoWebInst.dll (Pando Networks)
Plugins
punagi2.dll (America Online, Inc.)
HKLM_MozillaPlugins\Adobe Reader (x)
Searchplugins\bing.xml (    hxxp://www.bing.com/search)
Components\browsercomps.dll (Mozilla Foundation)
Components\GooglePlusVideosXPCOM.dll (?)
Components\SiteVacuumXPCOM.dll (?)

-- C:\Documents and Settings\Administrateur.27370A4BB77443A\Application Data\Mozilla\FireFox\Profiles\dvki4qvk.default --
Extensions\vinceturk@gmail.com (KwiClick)
Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} (Google Toolbar for Firefox)
Prefs.js - browser.download.dir, C:\Documents and Settings\Administrateur.27370A4BB77443A\Bureau
Prefs.js - browser.download.lastDir, C:\Documents and Settings\Administrateur.27370A4BB77443A\Bureau
Prefs.js - browser.search.defaultenginename, 
Prefs.js - browser.startup.homepage, hxxp://www.sfr.fr/portail.html
Prefs.js - browser.startup.homepage_override.buildID, 20120312181643
Prefs.js - browser.startup.homepage_override.mstone, rv:11.0

========================================

**** Internet Explorer Version [8.0.6001.18702] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKLM_Toolbar|{D2F8F919-690B-4EA2-9FA7-A203D1E04F75} (C:\Program Files\styler\TB\StylerTB.dll)
HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)
HKLM_ElevationPolicy\{A6E2003F-95C5-4591-BA9A-0093080FDB5C} - C:\Program Files\Fichiers communs\Oberon Media\OberonBroker\1.0.0.63\OberonBroker.exe (?)
HKCU_Extensions\{97ED3A9F-CD6F-473A-8FE1-7505C1B844C3} - "Billeo" (billeo.dll,219)
HKLM_Extensions\{d9288080-1baa-4bc4-9cf8-a92d743db949} - "Run IMVU" (C:\Documents and Settings\Administrateur.27370A4BB77443A\Application Data\IMVUClient\imvu.ico)
HKLM_Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - "?" (?)
HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)
BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 16 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 02/05/2012 17:55:03 (518 Octet(s)) 
C:\Ad-Report-SCAN[1].txt - 02/05/2012 17:08:03 (3503 Octet(s)) 
C:\Ad-Report-SCAN[2].txt - 02/05/2012 17:24:10 (3568 Octet(s)) 

Fin à: 17:55:41, 02/05/2012 
 
============== E.O.F ==============

bibinouc · Answer

############################## | UsbFix V 7.087 | [Recherche]

Utilisateur: Administrateur (Administrateur) # TOPHE
Mis à jour le 05/04/2012 par El Desaparecido
Lancé à 18:33:39 | 02/05/2012

Site Web: https://www.sosvirus.net/
Fichier suspect ? : http://eldesaparecido.com/upload.html
Contact: contact@eldesaparecido.com

PC: System manufacturer (System Product Name) (X86-based PC) # Desktop Computer
CPU: AMD Athlon(tm) 64 X2 Dual Core Processor 6000+ (3013)
RAM -> [ Total : 2046 | Free : 1410 ]
BIOS: Phoenix - AwardBIOS v6.00PG
BOOT: Normal boot

OS: Microsoft Windows XP Professionnel (5.1.2600 32-Bit) # Service Pack 3
WB: Windows Internet Explorer 8.0.6001.18702

SC: Security Center Service [ Enabled ]
WU: Windows Update Service [ Enabled ]
FW: Windows FireWall Service [ Enabled ]

C:\ (%systemdrive%) -> Disque fixe # 146 Go (75 Go libre(s) - 51%) [] # NTFS
D:\ -> Disque fixe # 86 Go (42 Go libre(s) - 48%) [Sauvegarde] # NTFS
E:\ -> CD-ROM
F:\ -> CD-ROM
G:\ -> CD-ROM
H:\ -> Disque amovible # 7 Go (543 Mo libre(s) - 7%) [] # FAT32

################## | Processus Actif |

C:\WINDOWS\System32\smss.exe (912)
C:\WINDOWS\system32\winlogon.exe (1316)
C:\WINDOWS\system32\services.exe (1392)
C:\WINDOWS\system32\lsass.exe (1404)
C:\WINDOWS\system32
vsvc32.exe (1624)
C:\WINDOWS\system32\svchost.exe (1760)
C:\WINDOWS\System32\svchost.exe (1980)
C:\WINDOWS\system32\svchost.exe (2028)
C:\Program Files\AVAST Software\Avast\AvastSvc.exe (816)
C:\WINDOWS\Explorer.EXE (932)
C:\WINDOWS\system32\spoolsv.exe (488)
C:\Program Files\UberIcon\UberIcon Manager.exe (496)
C:\Windows\System32\VisualTaskTips.exe (648)
C:\Program Files\styler\Styler.exe (716)
C:\Program Files\Analog Devices\Core\smax4pnp.exe (1044)
C:\WINDOWS\system32\RUNDLL32.EXE (1248)
C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe (1948)
C:\Program Files\AVAST Software\Avast\avastUI.exe (244)
C:\Program Files\Fichiers communs\AOL\1293525191\ee\AOLSoftware.exe (364)
C:\WINDOWS\system32\ctfmon.exe (384)
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE (1220)
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe (1664)
C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (1964)
c:\program files\fichiers communs\aol\1293525191\ee\aim6.exe (2536)
C:\WINDOWS\system32\dgdersvc.exe (2616)
C:\Program Files\SFR\Media Center\MediaCenter.exe (2672)
C:\WINDOWS\system32\FsUsbExService.Exe (2920)
C:\Program Files\Java\jre6\bin\jqs.exe (3064)
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe (3340)
C:\WINDOWS\system32\IoctlSvc.exe (3900)
C:\WINDOWS\system32\PnkBstrA.exe (3988)
C:\WINDOWS\system32\svchost.exe (4044)
C:\Program Files\Vodafone\Via The Phone\VodafoneConnectorService.exe (176)
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe (2956)
C:\WINDOWS\system32\wscntfy.exe (3336)
C:\Program Files\SFR\Media Center\httpd\httpd.exe (1700)
C:\Program Files\SFR\Media Center\httpd\httpd.exe (2876)
C:\Program Files\Mozilla Firefox\firefox.exe (1880)
C:\UsbFix\Go.exe (2932)

################## | Éléments infectieux |

Présent! C:\WINDOWS\system32	emp

################## | Registre |

Présent! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableTaskMgr
Présent! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoSMHelp

################## | Mountpoints2 |

HKCU\.\.\.\.\Explorer\MountPoints2\{b93f07ac-1e3a-11e0-9e47-0015af1a9c9f}
Shell\AutoRun\Command = G:\VTP_Manager.exe



################## | Vaccin |

(!) Cet ordinateur n'est pas vacciné!

################## | E.O.F |

Fish66 · Answer

Re,

(!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir

* Double clique sur le raccourci UsbFix sur ton Bureau (clique droit avec la souris

:exécuter en tant qu'administrateur pour vista/seven), l'installation se fera

automatiquement

* Clique sur "Suppression"

* Laisse travailler l'outil

* A la fin, le rapport va s'afficher : poste le dans ta prochaine réponse (il est aussi sauvegardé a la racine du disque dur : C:\UsbFix.txt ) 

@+

bibinouc · Answer

############################## | UsbFix V 7.087 | [Suppression]

Utilisateur: Administrateur (Administrateur) # TOPHE
Mis à jour le 05/04/2012 par El Desaparecido
Lancé à 20:00:31 | 02/05/2012


Fichier suspect ? : http://eldesaparecido.com/upload.html
Contact: contact@eldesaparecido.com

PC: System manufacturer (System Product Name) (X86-based PC) # Desktop Computer
CPU: AMD Athlon(tm) 64 X2 Dual Core Processor 6000+ (3013)
RAM -> [ Total : 2046 | Free : 1366 ]
BIOS: Phoenix - AwardBIOS v6.00PG
BOOT: Normal boot

OS: Microsoft Windows XP Professionnel (5.1.2600 32-Bit) # Service Pack 3
WB: Windows Internet Explorer 8.0.6001.18702

SC: Security Center Service [ Enabled ]
WU: Windows Update Service [ Enabled ]
FW: Windows FireWall Service [ Enabled ]

C:\ (%systemdrive%) -> Disque fixe # 146 Go (75 Go libre(s) - 51%) [] # NTFS
D:\ -> Disque fixe # 86 Go (42 Go libre(s) - 48%) [Sauvegarde] # NTFS
E:\ -> CD-ROM
F:\ -> CD-ROM
G:\ -> CD-ROM
H:\ -> Disque amovible # 7 Go (543 Mo libre(s) - 7%) [] # FAT32

################## | Processus Actif |

C:\WINDOWS\System32\smss.exe (912)
C:\WINDOWS\system32\winlogon.exe (1316)
C:\WINDOWS\system32\services.exe (1392)
C:\WINDOWS\system32\lsass.exe (1404)
C:\WINDOWS\system32\nvsvc32.exe (1624)
C:\WINDOWS\system32\svchost.exe (1760)
C:\WINDOWS\System32\svchost.exe (1980)
C:\WINDOWS\system32\svchost.exe (2028)
C:\Program Files\AVAST Software\Avast\AvastSvc.exe (816)
C:\WINDOWS\Explorer.EXE (932)
C:\WINDOWS\system32\spoolsv.exe (488)
C:\Program Files\UberIcon\UberIcon Manager.exe (496)
C:\Windows\System32\VisualTaskTips.exe (648)
C:\Program Files\styler\Styler.exe (716)
C:\Program Files\Analog Devices\Core\smax4pnp.exe (1044)
C:\WINDOWS\system32\RUNDLL32.EXE (1248)
C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe (1948)
C:\Program Files\AVAST Software\Avast\avastUI.exe (244)
C:\Program Files\Fichiers communs\AOL\1293525191\ee\AOLSoftware.exe (364)
C:\WINDOWS\system32\ctfmon.exe (384)
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE (1220)
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe (1664)
C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (1964)
c:\program files\fichiers communs\aol\1293525191\ee\aim6.exe (2536)
C:\WINDOWS\system32\dgdersvc.exe (2616)
C:\Program Files\SFR\Media Center\MediaCenter.exe (2672)
C:\WINDOWS\system32\FsUsbExService.Exe (2920)
C:\Program Files\Java\jre6\bin\jqs.exe (3064)
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe (3340)
C:\WINDOWS\system32\IoctlSvc.exe (3900)
C:\WINDOWS\system32\PnkBstrA.exe (3988)
C:\WINDOWS\system32\svchost.exe (4044)
C:\Program Files\Vodafone\Via The Phone\VodafoneConnectorService.exe (176)
C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe (2956)
C:\WINDOWS\system32\wscntfy.exe (3336)
C:\Program Files\SFR\Media Center\httpd\httpd.exe (1700)
C:\Program Files\SFR\Media Center\httpd\httpd.exe (2876)
C:\Program Files\Mozilla Firefox\firefox.exe (1880)
C:\Program Files\Mozilla Firefox\plugin-container.exe (2316)
C:\UsbFix\Go.exe (2244)

################## | Processus Stoppés |

Stoppé! C:\WINDOWS\system32\nvsvc32.exe (1624)
Stoppé! C:\Program Files\AVAST Software\Avast\AvastSvc.exe (816)
Stoppé! C:\WINDOWS\Explorer.EXE (932)
Stoppé! C:\WINDOWS\system32\spoolsv.exe (488)
Stoppé! C:\Program Files\UberIcon\UberIcon Manager.exe (496)
Stoppé! C:\Windows\System32\VisualTaskTips.exe (648)
Stoppé! C:\Program Files\styler\Styler.exe (716)
Stoppé! C:\Program Files\Analog Devices\Core\smax4pnp.exe (1044)
Stoppé! C:\WINDOWS\system32\RUNDLL32.EXE (1248)
Stoppé! C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe (1948)
Stoppé! C:\Program Files\AVAST Software\Avast\avastUI.exe (244)
Stoppé! C:\Program Files\Fichiers communs\AOL\1293525191\ee\AOLSoftware.exe (364)
Stoppé! C:\WINDOWS\system32\ctfmon.exe (384)
Stoppé! C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE (1220)
Stoppé! C:\Program Files\Fichiers communs\Nero\Lib\NMIndexStoreSvr.exe (1664)
Stoppé! C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (1964)
Stoppé! c:\program files\fichiers communs\aol\1293525191\ee\aim6.exe (2536)
Stoppé! C:\WINDOWS\system32\dgdersvc.exe (2616)
Stoppé! C:\Program Files\SFR\Media Center\MediaCenter.exe (2672)
Stoppé! C:\WINDOWS\system32\FsUsbExService.Exe (2920)
Stoppé! C:\Program Files\Java\jre6\bin\jqs.exe (3064)
Stoppé! C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe (3340)
Stoppé! C:\WINDOWS\system32\IoctlSvc.exe (3900)
Stoppé! C:\WINDOWS\system32\PnkBstrA.exe (3988)
Stoppé! C:\Program Files\Vodafone\Via The Phone\VodafoneConnectorService.exe (176)
Stoppé! C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe (2956)
Stoppé! C:\WINDOWS\system32\wscntfy.exe (3336)
Stoppé! C:\Program Files\SFR\Media Center\httpd\httpd.exe (1700)
Stoppé! C:\Program Files\SFR\Media Center\httpd\httpd.exe (2876)
Stoppé! C:\Program Files\Mozilla Firefox\firefox.exe (1880)
Stoppé! C:\Program Files\Mozilla Firefox\plugin-container.exe (2316)

################## | Éléments infectieux |

Supprimé! C:\WINDOWS\system32\temp
Supprimé! C:\Recycler\S-1-5-21-1123561945-688789844-725345543-500
Supprimé! C:\Recycler\S-1-5-21-1220945662-527237240-839522115-1003
Supprimé! C:\Recycler\S-1-5-21-1547161642-606747145-839522115-1003
Supprimé! C:\Recycler\S-1-5-21-2000478354-1715567821-839522115-500
Supprimé! D:\Recycler\S-1-5-21-1123561945-688789844-725345543-500
Supprimé! D:\Recycler\S-1-5-21-1220945662-527237240-839522115-1003
Supprimé! D:\Recycler\S-1-5-21-1292428093-706699826-725345543-1003
Supprimé! D:\Recycler\S-1-5-21-1454471165-1563985344-839522115-1003
Supprimé! D:\Recycler\S-1-5-21-1547161642-606747145-839522115-1003
Supprimé! D:\Recycler\S-1-5-21-1547161642-606747145-839522115-1003(2)
Supprimé! D:\Recycler\S-1-5-21-2000478354-1715567821-839522115-500
Supprimé! D:\Recycler\S-1-5-21-2000478354-308236825-839522115-1003
Supprimé! D:\Recycler\S-1-5-21-507921405-1844237615-839522115-1003
Supprimé! D:\Recycler\S-1-5-21-725345543-651377827-839522115-1003

(!) Fichiers temporaires supprimés.

################## | Registre |

Supprimé! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableTaskMgr
Supprimé! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoSMHelp

################## | Mountpoints2 |

Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{b93f07ac-1e3a-11e0-9e47-0015af1a9c9f}

################## | Listing |

[03/03/2012 - 13:13:41 | D ] 	C:\4fbed1093a4d885e5b622c5134930610
[27/02/2012 - 11:07:47 | D ] 	C:\5b48bf38dd214b5b331eb617
[02/05/2012 - 18:17:26 |  | 220] 	C:\aaw7boot.log
[27/12/2010 - 19:06:38 |  | 50] 	C:\AUTOEXEC.BAT
[27/12/2010 - 17:46:01 | D ] 	C:\be49e5633e1cfb080355e65fca4fc0
[28/12/2010 - 09:17:15 |  | 295] 	C:\boot.ini
[18/12/2007 - 04:04:00 |  | 4952] 	C:\Bootfont.bin
[10/08/2009 - 11:47:41 | D ] 	C:\c0f12963fdb85ccf44
[07/01/2010 - 22:23:43 | D ] 	C:\cmdcons
[12/04/2012 - 09:58:52 | D ] 	C:\Config.Msi
[26/11/2008 - 22:14:19 |  | 0] 	C:\CONFIG.SYS
[23/04/2012 - 07:51:14 | D ] 	C:\Documents and Settings
[28/12/2010 - 11:33:05 | D ] 	C:\download
[29/03/2009 - 17:00:59 | D ] 	C:\Dracula
[03/03/2012 - 13:13:41 | D ] 	C:\e958964b4344a44ce6fc
[27/12/2010 - 17:43:48 | D ] 	C:\eb26903eee1a0aa2183160f7
[18/02/2010 - 20:58:38 | D ] 	C:\FyK
[29/03/2009 - 17:12:02 | D ] 	C:\hegames
[26/11/2008 - 22:14:19 |  | 0] 	C:\IO.SYS
[26/11/2008 - 22:14:19 |  | 0] 	C:\MSDOS.SYS
[26/11/2008 - 22:57:27 | RHD ] 	C:\MSOCache
[03/08/2004 - 22:38:34 | N | 47564] 	C:\NTDETECT.COM
[26/11/2008 - 23:08:24 | N | 252240] 	C:\ntldr
[10/03/2011 - 21:04:54 | D ] 	C:\NVIDIA
[24/06/2011 - 14:09:04 | D ] 	C:\objets_caches
[02/05/2012 - 18:17:26 | ASH | 2145386496] 	C:\pagefile.sys
[02/05/2012 - 17:07:10 | D ] 	C:\Program Files
[20/03/2010 - 17:58:12 | D ] 	C:\ProgramData
[18/02/2010 - 21:10:36 | D ] 	C:\Qoobox
[02/05/2012 - 20:01:28 | SHD ] 	C:\RECYCLER
[18/06/2009 - 20:40:30 | D ] 	C:\Sounds
[30/12/2010 - 10:47:07 | SHD ] 	C:\System Volume Information
[03/03/2012 - 13:05:22 | D ] 	C:\Temp
[02/05/2012 - 20:01:28 | D ] 	C:\UsbFix
[02/05/2012 - 20:02:47 | A | 6384] 	C:\UsbFix.txt
[12/03/2012 - 13:07:48 |  | 237] 	C:\user.js
[17/02/2010 - 12:14:44 | D ] 	C:\VCOM
[02/05/2012 - 17:03:42 | D ] 	C:\WINDOWS
[08/01/2010 - 14:27:27 | D ] 	C:\Xobni
[02/05/2012 - 16:43:12 | D ] 	C:\ZHP
[18/02/2011 - 19:24:28 | D ] 	C:\Zylom Games
[03/01/2010 - 09:48:33 | D ] 	C:\_Backup.RC
[07/01/2010 - 16:35:12 | D ] 	C:\_OTL
[06/03/2010 - 12:13:16 | N | 1235475] 	D:\(00)djpeterteck jme pair en toi.mp3
[19/03/2012 - 15:36:45 | D ] 	D:\dossier Cathie
[03/05/2009 - 20:32:12 | N | 0] 	D:\dump_dvd.vob
[27/12/2010 - 09:06:31 | D ] 	D:\Favoris
[01/01/2011 - 13:48:56 | D ] 	D:\film de pando
[18/02/2010 - 20:43:37 | N | 1323] 	D:\FindyKill_Upload_Me_XPSP2-347FD0FE1.zip
[27/04/2009 - 17:08:06 | D ] 	D:\Jeux
[27/12/2010 - 09:17:42 | D ] 	D:\jeux nds
[08/10/2011 - 10:24:38 | D ] 	D:\Logiciel
[18/06/2011 - 08:51:12 | D ] 	D:\logiciel cle usb
[14/01/2009 - 17:48:11 | D ] 	D:\maison
[07/11/2011 - 11:05:50 | D ] 	D:\Mes fichiers reçus
[27/12/2010 - 09:13:37 | D ] 	D:\Mes images
[16/04/2009 - 16:14:16 | D ] 	D:\mise a jour carte graphique geforce 8600 gts
[04/03/2012 - 11:02:13 | D ] 	D:\mon pc gamer
[28/12/2010 - 09:02:12 | D ] 	D:\mozzilla 3.6.13
[23/10/2011 - 19:53:51 | N | 13985] 	D:\Mr DUCROCQ Christophe.docx
[24/09/2010 - 22:50:04 | N | 9393352] 	D:\msn-messenger-7-5_msn_messenger_7.5.0324_francais_13499.EXE
[02/08/2010 - 18:43:11 | N | 7098467] 	D:\MSNMessenger7.5.324Setup.exe
[19/10/2009 - 16:51:16 | N | 95744] 	D:\NOTICE D UTILISATION DU TAILLE HAIE.doc
[26/12/2010 - 10:14:00 | D ] 	D:\photos de loups
[21/03/2012 - 18:19:12 | D ] 	D:\photos vente le bon coin
[28/12/2010 - 11:16:54 | D ] 	D:\pilote pour carte reseaux nvidia
[10/10/2009 - 19:32:56 | D ] 	D:\pilote pour webcam digital camera lens
[23/10/2011 - 13:29:26 | D ] 	D:\poissons
[02/05/2012 - 20:01:28 | SHD ] 	D:\RECYCLER
[28/12/2010 - 09:33:46 | SHD ] 	D:\System Volume Information
[14/07/2008 - 15:35:05 | ASH | 5632] 	D:\Thumbs.db
[05/05/2011 - 20:51:01 | N | 14935] 	D:\TOOPNEUS COM.docx
[09/09/2009 - 00:00:10 | D ] 	H:\BUDA
[10/06/2011 - 19:21:58 | D ] 	H:\musique  tophe soiree
[14/05/2011 - 15:17:26 | N | 46680594] 	H:\dream-chronicles-the-chosen-child.exe
[23/06/2011 - 17:27:38 | D ] 	H:\jeux
[25/08/2011 - 19:59:44 | N | 8153] 	H:\Attestation.pdf
[08/08/2011 - 13:46:18 | N | 94476] 	H:\contract ASMAT.rtf
[26/11/2011 - 12:06:06 | N | 738947166] 	H:\Arena.2011.FRENCH.DVDRiP.XViD-TMB.avi
[23/10/2010 - 02:16:06 | N | 731492352] 	H:\Comme.Cendrillon.[emule-island.com].avi
[22/10/2010 - 19:21:08 | N | 730462208] 	H:\Save.the.last.dance.by.[emule-island.com].avi
[31/01/2012 - 12:29:28 | N | 23890] 	H:\cv Laura.docx
[04/02/2012 - 10:49:56 | D ] 	H:\zik
[18/02/2012 - 10:44:28 | N | 2334709] 	H:\le dernier mohican, de indiogene..mp3

################## | Vaccin |

C:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
H:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

################## | Upload |

Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_TOPHE.zip
http://eldesaparecido.com/upload.php
Merci de votre contribution.

################## | E.O.F |

Fish66 · Answer

Re,

Lance ZHPDiag depuis le bureau et prépare stp un nouveau rapport 

ZHPDiag (à héberger)

@+

bibinouc · Answer

bonjour fish66 voila le rapport
https://pjjoint.malekal.com/files.php?id=ZHPDiag_20120503_k13j7v14i8k10

Fish66 · Answer

Salut,
1/
Copie tout le texte présent en gras ci-dessous ( tu le selectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C ) 


[HKLM\Software\iWin]    
O43 - CFD: 17/02/2011 - 18:23:42 - [0] ----D C:\Documents and Settings\Administrateur.27370A4BB77443A\Application Data\iWin   
[HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ViewpointMediaPlayer]
C:\Program Files\Enigma Software Group\SpyHunter    
C:\Documents and Settings\Administrateur.27370A4BB77443A\Application Data\iWin    
P2 - FPN:Firefox Plugin Navigator . (.Pando Networks - Pando Web Installer.) -- C:\Program Files\Mozilla Firefox\Plugins
pPandoWebInst.dll
O23 - Service: Lavasoft Ad-Aware Service (Lavasoft Ad-Aware Service) . (. - .) - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe    => Lavasoft®Ad-Aware Service
O43 - CFD: 18/09/2007 - 00:31:19 - [39,382] ----D C:\Program Files\Spybot
SS - | Auto 02/09/2011 2152152 | C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft Ad-Aware Service) . (.Lavasoft Limited.) - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe    => Lavasoft®Ad-Aware Service
OPT:O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Encore plus de jeux.lnk - Clé orpheline

FirewallRAZ
EmptyTemp
EmptyFlash



Puis Lance ZHPFix depuis le raccourci du bureau . 

* Une fois l'outil ZHPFix ouvert , clique sur le bouton [ H ] ( "coller les lignes Helper" ) . 

* Dans l'encadré principal tu verras donc les lignes que tu as copié précédemment apparaitrent . 

Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre. 

Clique sur le bouton  GO

Copie/Colle le rapport à l'écran dans ton prochain message.

2/
As tu le CD d'installation de ton Windows ?

3/
* Lance Malwarebytes' Anti-Malware  
* Fais la mise à jour  
* Clique dans l'onglet  "Recherche"  
* Coche l'option "Exécuter un examen complet" puis sur le bouton "Rechercher"  
* Choisis de scanner tous tes disques durs, puis clique sur 'Lancer l'examen"  

A la fin de l'analyse, si MBAM n'a rien trouvé :  

* Clique sur OK, le rapport s'ouvre spontanément  

Si des menaces ont été détectées :  

* Clique sur OK puis "Afficher les résultats"  
*Vérifie que toutes les lignes sont cochées 
* Choisis l'option "Supprimer la sélection"  
* Si MBAM demande le redémarrage de Windows : Clique sur "Oui"  
* Le rapport s'ouvre automatiquement après la suppression, il se trouve aussi dans l'onglet "Rapports/Logs"  

* Copie/colle le rapport dans le prochain message  


Remarque : 
- S'il y'a un problème de mise à jour de mbam, tu peux la faire manuellement en téléchargeant  ce fichier puis en l'exécutant.

@+

bibinouc · Answer

re

Rapport de ZHPFix 1.12.3372 par Nicolas Coolman, Update du 22/11/2011
Fichier d'export Registre : 
Run by Administrateur at 03/05/2012 20:02:14
Windows XP Professional Service Pack 3 (Build 2600)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Clé(s) du Registre ==========
SUPPRIME Key: HKLM\Software\iWin
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ViewpointMediaPlayer
ABSENT Key: Service: Lavasoft Ad-Aware Service

========== Valeur(s) du Registre ==========
SUPPRIME FirewallRaz (SP) : C:\Program Files\eMule\emule.exe
SUPPRIME FirewallRaz (SP) : C:\Program Files\SFR\Media Center\httpd\httpd.exe
Aucune valeur présente dans la clé d'exception du registre (FirewallRaz)

========== Dossier(s) ==========
SUPPRIME Folder: C:\Documents and Settings\Administrateur.27370A4BB77443A\Application Data\iWin
SUPPRIME Folder: c:\program files\enigma software group\spyhunter
SUPPRIME Folder: C:\Program Files\Spybot
SUPPRIME Temporaires Windows: : 94
SUPPRIME Flash Cookies: 22

========== Fichier(s) ==========
ABSENT Folder/File: c:\documents and settings\administrateur.27370a4bb77443a\application data\iwin
SUPPRIME File: c:\program files\mozilla firefox\plugins
ppandowebinst.dll
ABSENT File: c:\program files\lavasoft\ad-aware\aawservice.exe
SUPPRIME File: c:\documents and settings\all users\menu démarrer\programmes\encore plus de jeux.lnk
SUPPRIME Temporaires Windows: : 40
SUPPRIME Flash Cookies: 12


========== Récapitulatif ==========
3 : Clé(s) du Registre
3 : Valeur(s) du Registre
5 : Dossier(s)
6 : Fichier(s)


End of clean in 00mn 11s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 03/05/2012 20:02:14 [1717]

bibinouc · Answer

re 
Malwarebytes' Anti-Malware n a rien trouve
et je n ai pas le cd d instalklation de windows c est un ami qui m a formate le pc

Fish66 · Answer

Re,
1/
Poste moi stp le rapport mbam

2/
Comment se comporte ton PC maintenant ?

@+

bibinouc · Answer

pour le pc ca va un peu mieux mais ca rame encore

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Version de la base de données: v2012.05.03.06

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Administrateur :: TOPHE [administrateur]

03/05/2012 20:16:29
mbam-log-2012-05-03 (20-16-29).txt

Type d'examen: Examen complet
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 496475
Temps écoulé: 51 minute(s), 25 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 0
(Aucun élément nuisible détecté)

(fin)

Fish66 · Answer

Re,
1/
* Télécharge WinChk (d'Xplode) sur ton bureau
 * Double clique sur winchk.exe
 * Clique sur le bouton Exécuter
 * Patiente durant la création du rapport..
 * Celui-ci s'affiche à l'écran à la fin de l'analyse. Si rien n'apparaît, le rapport est présent à la racine de votre disque dur : C:\WinChk.txt
  * Poste le rapport sur le forum.

2/
* Tu peux suivre les indications de cette page pour t'aider : https://www.malekal.com/tutorial-otl/ 

* Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau. 
(Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur) 

* Lance OTL 
 * Sous Personnalisation, copie-colle le texte en gras  ci-dessous : 

netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%temp%\.exe /s
%SYSTEMDRIVE%\*.exe
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
/md5start
explorer.exe
winlogon.exe
wininit.exe
/md5stop
CREATERESTOREPOINT
nslookup www.google.fr /c 


? Clique sur le bouton Analyse. 
? Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer les rapports. 
Donnes le lien pjjoint ici ensuite pour pouvoir être consultés.

A demain

Bonne nuit

bibinouc · Answer

bonjour fish66
pour winchk impossible de le lancer il me marque exe corrupted
 
et pour le second voila
https://pjjoint.malekal.com/files.php?id=OTL_20120504_f12o8y5d15z15

Fish66 · Answer

Salut,
1/
Relance OTL 
- Sous XP double-clic sur l'icône pour lancer l'outil. 
- Sous Vista/Seven clic-droit sur l'icône et choisir "Exécuter en tant qu'administrateur" dans le menu contextuel. 
* Dans la partie "Personnalisation", copie/colle les instructions suivantes : 

:OTL 
CHR - plugin: Pando Web Installer (Enabled) = C:\Program Files\Mozilla Firefox\plugins
pPandoWebInst.dll     
CHR - Extension: Recherche Google = C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\ 
CHR - Extension: avast! WebRep = C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\ 
CHR - Extension: Gmail = C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ 
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - SaveLinksOrder - No CLSID value found.
[2012/03/12 18:07:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy     

:Commands
[RESETHOSTS] 



* Clique sur le bouton Correction. 
* Patiente pendant le travail de l'outil, il doit ensuite redémarrer le PC. 
* Accepte en cliquant sur OK. 
* Le rapport indiquant les actions réalisées par OTL doit s'ouvrir spontanément. 

Tu peux le retrouver le fichier à la racine du disque : C:\_OTL\MovedFiles

2/
Pour bien vérifier que le  fichier ci-dessous est  infecté rend toi sur ce site
Virus Total

*	Clique sur " choose  file "
*	Vas sur ton disque chercher ce fichier à cet emplacement :
	
C:\WINDOWS\d3dx.dat     


*	Clique ensuite sur le bouton «  Scan it » 
*	Patiente le temps de l'analyse qui dépend de la taille du fichier
*	Une fois celle-ci terminée, apparaît le rang de détection (Detection Ratio)
*	Communique-le dans ta prochaine réponse sur le forum et communique en même temps le lien de la page VirusTotal en le copiant dans la barre d'adresse et en le collant dans ta prochaine réponse

================
Fais de la même facon ce fichier : C:\Documents and Settings\Administrateur.27370A4BB77443A\Application Data\prefsdb.dat 

@+

bibinouc · Answer

re

All processes killed
========== PROCESSES ==========
Process explorer.exe killed successfully!
========== FILES ==========
File\Folder C:\WINDOWS\system32\srosa2.sys not found.
========== OTL ==========
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6b4de4e0-c159-11dd-acce-0015af1a9c9f}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6b4de4e0-c159-11dd-acce-0015af1a9c9f}\ not found.
File tel.xls.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c351eb92-5a7d-11de-adfe-0015af1a9c9f}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c351eb92-5a7d-11de-adfe-0015af1a9c9f}\ not found.
File I:\AdobeR.exe not found.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: Admin
->Temp folder emptied: 89121500 bytes
->Temporary Internet Files folder emptied: 8201899 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 44632907 bytes
->Google Chrome cache emptied: 0 bytes
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 11823272 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 25285774 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 14887395 bytes
%systemroot%\System32 .tmp files removed: 102912 bytes
Windows Temp folder emptied: 32768 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 10463714 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 3819182 bytes
 
Total Files Cleaned = 199,00 mb
 
 
OTL by OldTimer - Version 3.1.21.0 log created on 01072010_153512

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

bibinouc · Answer

voila pour le suivant
Detection ratio: 0/42

https://www.virustotal.com/gui/file/bcfa98bbae692116be3144d6250580ad00994cca00b2adebfe303d9a8fe3babc

pour le second je ne l ai pas trouver.

Fish66 · Answer

Re,

Le résultat du script OTL affiché n'est pas conforme à celui demandé!

Est ce que tu peux me donner le bon rapport ?

@+

bibinouc · Answer

re

======== OTL ==========
File C:\Program Files\Mozilla Firefox\plugins
pPandoWebInst.dll not found.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\zh_TW folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\zh_CN folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\vi folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\uk folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales	r folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales	h folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sv folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sr folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sl folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sk folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_localesu folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_localeso folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\pt_PT folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\pt_BR folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\pl folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales
o folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales
l folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\lv folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\lt folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ko folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ja folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\it folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\id folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\hu folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\hr folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\hi folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\he folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\fr folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\fil folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\fi folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\et folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\es_419 folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\es folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\en_US folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\en_GB folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\en folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\el folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\de folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\da folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\cs folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ca folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\bg folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ar folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0 folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\zh_TW folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\zh_CN folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\vi folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\ur folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\uk folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales	r folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales	h folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\sv folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\sr folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\sl folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\sk folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_localesu folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_localeso folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\pt_PT folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\pt_BR folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\pl folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales
l folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales
b folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\ko folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\ja folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\it folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\id folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\hu folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\hr folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\he folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\fr folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\fi folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\et folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\es folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\en_GB folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\en folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\el folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\de folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\da folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\cs folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\ca folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\bg folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\be folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales\ar folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\_locales folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\skin\images\icons folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\skin\images folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\skin\css folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\skin folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0\scripts folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\6.0.1374_0 folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\__MACOSX\_locales folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\__MACOSX folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_TW folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_CN folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\vi folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\uk folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales	r folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales	h folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sr folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sl folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sk folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\se folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_localesu folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_localeso folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_PT folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_BR folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pl folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales
o folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales
l folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lv folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lt folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ko folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ja folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\it folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\id folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hu folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hr folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hi folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fr folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fil folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fi folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\es folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\en folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\el folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\de folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\da folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\cs folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ca folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\bg folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ar folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales folder moved successfully.
C:\Documents and Settings\Administrateur.27370A4BB77443A\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 folder moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\Locked deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\SaveLinksOrder deleted successfully.
C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy folder moved successfully.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
OTL by OldTimer - Version 3.2.42.2 log created on 05042012_163117

Fish66 · Answer

Re,
1/
Suppression des outils de désinfections:
* Télécharge  Delfix   sur ton bureau.          
* Lance le, tape suppression puis valide          
* Patiente pendant le scan jusqu'à l'ouverture du rapport.          
* Copie/Colle le contenu du rapport dans ta prochaine réponse.          
Note : Le rapport se trouve également sous C:\DelFix.txt          
* Tu peux le desinstaller  

2/
 Prépare un nouveau rapport ZHPDiag comme expliqué ici :   https://forums.commentcamarche.net/forum/affich-25086346-pc-qui-rame?full#1

@+

bibinouc · Answer

DelFix v8.8 - Rapport créé le 04/05/2012 à 16:45:03
# Mis à jour le 12/02/12 par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
# Nom d'utilisateur : Administrateur - TOPHE (Administrateur)
# Exécuté depuis : C:\Documents and Settings\Administrateur.27370A4BB77443A\Bureau\delfix.exe
# Option [Suppression]


~~~~~~ Dossiers(s) ~~~~~~

Supprimé : C:\Qoobox
Supprimé : C:\USBFix
Supprimé : C:\FyK
Supprimé : C:\_OTL
Supprimé : C:\ZHP
Supprimé : C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\ZHP
Supprimé : C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Hijackthis
Supprimé : C:\Program Files\Ad-Remover
Supprimé : C:\Program Files\ZHPDiag
Supprimé : C:\Program Files\Trend Micro\Hijackthis

~~~~~~ Fichier(s) ~~~~~~

Supprimé : C:\UsbFix.txt
Supprimé : C:\UsbFix_Upload_Me_TOPHE.zip
Supprimé : C:\Documents and Settings\Administrateur.27370A4BB77443A\Bureau\AD-R.lnk
Supprimé : C:\Documents and Settings\Administrateur.27370A4BB77443A\Bureau\adwcleaner.exe
Supprimé : C:\Documents and Settings\Administrateur.27370A4BB77443A\Bureau\OTL.exe
Supprimé : C:\Documents and Settings\Administrateur.27370A4BB77443A\Bureau\UsbFix.exe
Supprimé : C:\Documents and Settings\Administrateur.27370A4BB77443A\Bureau\winchk0(1).exe
Supprimé : C:\Documents and Settings\Administrateur.27370A4BB77443A\Bureau\ZHPDiag2.exe
Supprimé : C:\Documents and Settings\All Users.WINDOWS\Bureau\ZHPDiag.lnk
Supprimé : C:\Documents and Settings\All Users.WINDOWS\Bureau\ZHPFix.lnk
Supprimé : C:\Documents and Settings\All Users.WINDOWS\Bureau\MBRCheck.lnk

~~~~~~ Registre ~~~~~~

Clé Supprimée : HKCU\Software\Ad-Remover
Clé Supprimée : HKCU\Software\USBFix
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\HijackThis
Clé Supprimée : HKLM\SOFTWARE\AdwCleaner
Clé Supprimée : HKLM\SOFTWARE\TrendMicro\Hijackthis
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ad-Remover
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Hijackthis
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\USBFix
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\HijackThis.exe

~~~~~~ Autres ~~~~~~

-> Prefetch Vidé

*************************

DelFix[S1].txt - [2458 octets] - [04/05/2012 16:45:03]

########## EOF - C:\DelFix[S1].txt - [2582 octets] ##########

bibinouc · Answer

re voila la suite

https://pjjoint.malekal.com/files.php?id=ZHPDiag_20120504_9r11j8x14k7

Fish66 · Answer

Re,
1/

Mise à jour Adobe reader

* Télécharge Adobe reader à partir :>>>>Ce lien<<<< en décochant la case : installer McAfee Security Scan Plus (facultatif)
* Désinstalle ta version d'adobe par : ajout/suppression de programme
* Exécute le fichier téléchargé pour installation en suivant les instructions.

 Mise à jour de Java:

* Tu peux vérifier ta Console Java en cliquant sur ce lien :https://www.java.com/fr/download/uninstalltool.jsp
* Installe la nouvelle version si besoin (dans ce cas désinstalle avant l'ancienne version).

voici pour desinstaller JavaRa:

* Télécharge ce fichier à partir ce lien : http://raproducts.org/click/click.php?id=1
* Décompresse JavaRa sur le Bureau (Clic droit > Extraire tout).
* Double-clique (clic droit "en tant qu'administrateur" pour Vista) sur le répertoire JavaRa.
* Puis double-clique sur le fichier JavaRa.exe (le exe peut ne pas s'afficher).
* Choisis Français puis clique sur Select.
* Clique sur Recherche de mises à jour.
* Sélectionne Mettre à jour via jucheck.exe puis clique sur Rechercher.
* Autorise le processus à se connecter s'il le demande, clique sur Installer et suis les instructions d'installation qui prennent quelques minutes.
* L'installation est terminée, reviens à l'écran de JavaRa et clique sur Effacer les anciennes versions.
* Clique sur Oui pour confirmer. Laisse travailler et clique ensuite sur OK, puis
une deuxième fois sur OK.
* Un rapport va s'ouvrir. Poste-le dans ta prochaine réponse.
* Ferme l'application.

Note : le rapport se trouve aussi dans C:\ sous le nom JavaRa.log.

2/
Est ce que ton PC rame encore ?

@+

bibinouc · Answer

bonjour fish66
voila tout est fait ,je te mets le rapport . le pc a une tres grosse amelioration en faisant le test de la bande passante je suis passe de 9 Ko/sec a 366.989 Ko/sec alors tu vois la difference .

JavaRa 1.16 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Sat May 05 05:32:02 2012

Found and removed: C:\Documents and Settings\Administrateur.27370A4BB77443A\Application Data\Sun\Java\jre1.6.0_26

Found and removed: C:\Documents and Settings\Administrateur.27370A4BB77443A\Application Data\Sun\Java\jre1.6.0_29

Found and removed: Applications\java.exe

Found and removed: Applications\javaw.exe

Found and removed: JavaPlugin.FamilyVersionSupport

Found and removed: CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}

Found and removed: JavaScript

Found and removed: JavaScript Author

Found and removed: JavaScript1.1

Found and removed: JavaScript1.1 Author

Found and removed: JavaScript1.2

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}

Found and removed: SOFTWARE\Classes\JavaPlugin

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10}

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1.2

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1.3

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.2

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.2.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.3

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.3.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.4

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.4.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.4.2

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.5

------------------------------------

Finished reporting.

Fish66 · Answer

Bonjour,

Pour finir :

 Updatechecker :
Téléchage updatechecker pour t'indiquer les logiciels qui ne sont pas à jour et te permet aussi d'effectuer ces mises à jour              
=========================================== 
**Nettoyage 

Suppression des outils de désinfections:
* Télécharge  Delfix   sur ton bureau.          
* Lance le, tape suppression puis valide          
* Patiente pendant le scan jusqu'à l'ouverture du rapport.          
* Copie/Colle le contenu du rapport dans ta prochaine réponse.          
Note : Le rapport se trouve également sous C:\DelFix.txt          
* Tu peux le desinstaller          

===========================================         
<code>Défragmentation : :
Défragmente tes disques dur par defraggler      
===========================================    

Nettoyage des fichiers et des clés de registre :
* Télécharge et installe CCleaner version Slim               
* Lance-le.(clic droit "en tant qu'administrateur" pour Vista et Seven) Va dans Options puis         
* Avancé et décoche la case Effacer uniquement les fichiers etc....         
* Va dans Nettoyeur, choisis Analyse. Une fois terminé, lance le nettoyage.         
* Ensuite, choisis Registre, puis Chercher des erreurs. Une fois terminé, répare toutes les erreurs tant de fois qu il en trouve a l analyse .         
** Aide ici : https://www.malekal.com/tutoriel-ccleaner/         
Tu peux utiliser Ccleaner une fois par semaine        

===========================================    
Purger les points de restauration système:   

* Désactive et réactive la restauration de système en suivant les procédures indiquées dans ces liens :   

Windows XP    

Windows Vista    

Windows 7    

* Après avoir vidé la restauration du système, il est nécessaire de créer un nouveau point de restauration ...   

===========================================    
Conseils :       
1/ Je te conseille d'utiliser le navigateur Firefox et d'installer les modules          
complémentaires WOT pour t'indiquer les fichiers douteux et Adblock plus pour bloquer les publicités...         

2/ Aussi tu peux garder Malwarebytes et l'utiliser aussi une fois par semaine.          

3/ Un peu de lecture :        
* Les dangers du Peer-To-Peer, Emule etc..         
* Comment Sécuriser son ordinateur...        
*Pourquoi et comment je me fais infecter   
 *pourquoi maintenir son navigateur à jour   

@+

bibinouc · Answer

re,vais m occuper des mises a jours voila le rapport de delfix et encore merci pour ta patience et ton efficacite.

# DelFix v8.8 - Rapport créé le 05/05/2012 à 12:47:50
# Mis à jour le 12/02/12 par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
# Nom d'utilisateur : Administrateur - TOPHE (Administrateur)
# Exécuté depuis : C:\Documents and Settings\Administrateur.27370A4BB77443A\Bureau\delfix.exe
# Option [Suppression]


~~~~~~ Dossiers(s) ~~~~~~

Supprimé : C:\ZHP
Supprimé : C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\ZHP
Supprimé : C:\Program Files\ZHPDiag

~~~~~~ Fichier(s) ~~~~~~

Supprimé : C:\JavaRa.log
Supprimé : C:\Documents and Settings\Administrateur.27370A4BB77443A\Bureau\JavaRa.def
Supprimé : C:\Documents and Settings\Administrateur.27370A4BB77443A\Bureau\JavaRa.exe
Supprimé : C:\Documents and Settings\Administrateur.27370A4BB77443A\Bureau\ZHPDiag.txt
Supprimé : C:\Documents and Settings\Administrateur.27370A4BB77443A\Bureau\ZHPDiag2(1).exe
Supprimé : C:\Documents and Settings\Administrateur.27370A4BB77443A\Bureau\ZHPDiag2.exe
Supprimé : C:\Documents and Settings\All Users.WINDOWS\Bureau\ZHPDiag.lnk
Supprimé : C:\Documents and Settings\All Users.WINDOWS\Bureau\ZHPFix.lnk
Supprimé : C:\Documents and Settings\All Users.WINDOWS\Bureau\MBRCheck.lnk

~~~~~~ Registre ~~~~~~

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1

~~~~~~ Autres ~~~~~~

-> Prefetch Vidé

*************************

DelFix[S1].txt - [2579 octets] - [04/05/2012 16:45:03]
DelFix[S2].txt - [1491 octets] - [05/05/2012 12:47:50]

########## EOF - C:\DelFix[S2].txt - [1615 octets] ##########

Fish66 · Answer

Re,

Sois prudent et bon surf ...  :-)
Si tu n'as pas de souci pense à mettre ton sujet comme résolu

@+

bibinouc · Answer

bonjour,toujours plus de soucis merci encore.

Pc qui rame

36 réponses

Newsletters