Searchnu.com/410

Bonjour,
j'ai le virus searchnu.com/410 depuis un petit téléchargement (free.converter.mp3), puis-je réaliser une opération de suppression avec l'un d'entre vous svp ?
Merci de votre réponse.

27 réponses

Résumé de la discussion

Plusieurs échanges portent sur une infection liée au virus searchnu.com/410 apparu après le téléchargement de free.converter.mp3, avec Windows XP et Firefox 12.0 à l'origine initiale. Des répondants recommandent d'utiliser ZHPDiag, de mettre à jour l'outil via l'onglet vert et de préparer un nouveau rapport, puis d'envoyer le fichier généré à un service de partage en ligne. Des échanges signalent des incohérences entre l'inscription et le système réel, et des conseils de nombreux rapports ZHPDiag pour poursuivre le nettoyage incluent l'analyse de la RAM et des processus. D'autres messages évoquent l'envoi de rapports complémentaires via des liens de partage et confirment la progression du traitement des infections, sans conclure à la résolution finale.

Bobot (l’IA à votre service)
  1. Contributeur sécurité
    Re,

    Avant d'utiliser ComboFix :

    Les logiciels d'émulation de CD comme Daemon Tools peuvent gêner les outils de désinfection. Utilise Defogger pour les désactiver temporairement :

    si tu as ce genre de d'outils sur ton pc Utilise Defogger pour les désactiver temporairement : sinon passe directement à combofix

    * Télécharge Defogger (de jpshortstuff) sur ton Bureau
    * Lance le

    * Une fenêtre apparait : clique sur "Disable"

    * Fais redémarrer l'ordinateur si l'outil te le demande

    Note : Quand nous aurons terminé la désinfection, tu pourras réactiver ces logiciels en relançant Defogger et en cliquant sur "Re-enable"

    ===================================================

    Attention, avant de commencer, lis attentivement la procédure

    ********************************************************

    /!\ Ne pas utiliser ce logiciel en dehors du cadre de cette désinfection : DANGEUREUX /!\

    * Fais un clic droit sur ce lien, enregistre le dans ton bureau sous un autre nom exemple « ton pseudo.exe »
    Voici Aide combofix

    * /!\ Déconnecte-toi du net et ARRÊTE TES LOGICIELS DE PROTECTION /!\


    *Double-clique sur ComboFix.exe (ou exécuter en tant qu'administrateur pour vista et seven)

    Un "pop-up" va apparaître qui dit que ComboFix est utilisé à vos risques et avec aucune garantie... Clique sur oui pour accepter

    ** SURTOUT INSTALLES LA CONSOLE DE RECUPERATION
    (si il te propose de l'installer remets internet)

    ? Ne touche à rien(souris, clavier) tant que le scan n'est pas terminé, car tu risques de planter ton PC

    *En fin de scan, il est possible que ComboFix ait besoin de redémarrer le PC pour finaliser la désinfection, laisse-le faire.

    * Une fois le scan achevé, un rapport va s'afficher : Poste son contenu

    ** /!\ Réactive la protection en temps réel de ton antivirus et de ton antispyware avant de te reconnecter à Internet. /!\

    *Note : Le rapport se trouve également là : C:\ComboFix.txt

    @+
    1. Contributeur sécurité
      Re,
      1/
      *Télécharge RegistryTool de Xplode sur ton bureau
      *Double-clique sur l'icône pour exécuter l'outil (Vista/7 --> clic droit et "exécuter en tant qu'administrateur")
      *Copie la clé ci-dessous :
      [HKCU\Software\?? ?? ???? ????? ??? ?? ????]

      *Colle-la dans la zone de saisie située au regard de RegExport
      Image: http://general-changelog-team.fr/images/stories/Tutoriels/Registry_Tool/regexport.png
      *Puis clique sur Exporter
      *Dans la fenêtre qui s'ouvre, choisis le bureau comme emplacement d'enregistrement. A "nom de fichier", indique : ExportReg
      *Clique sur Enregistrer
      *Un message de bonne fin va apparaître "Clé exportée avec succès"
      *La clé ainsi exportée se trouvera sur le bureau, représentée par cette icône

      Envoie le fichier reg sur http://pjjoint.malekal.com/ et colle ici le lien.

      2/
      Total RAM: 1014 MB (14% free)
      Regarde parmi les processus lancé au démarrage ceux qui prennent beaucoup d'espaces mémoire!
      Tu peux m'envoyer une capture d'écran...

      @+

      1. Re-bonjour Fish,
        il y a du mieux mais le pc reste tout de même lent, notamment au démarrage.
        Windows live mail met également beaucoup de temps à s'ouvrir. Dans le gestionnaire des tâches, 65 processus, est-ce trop ?
        Si tu as un dernier conseil, je suis preneur. Merci en tout cas pour tout le temps passé à m'aider !
        Bonne continuation.
        1. Rapport :
          Rapport de ZHPFix 1.2.05 par Nicolas Coolman, Update du 30/04/2012
          Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-16-05-2012-07-49-18.txt
          Run by Emmanuel at 16/05/2012 07:49:18
          Windows 7 Starter Edition, 32-bit Service Pack 1 (Build 7601)
          Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
          Web site : http://nicolascoolman.skyrock.com/

          ========== Clé(s) du Registre ==========
          SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\vShare.tv plugin

          ========== Valeur(s) du Registre ==========
          ABSENT RunValue: NPSStartup
          ABSENT Valeur Standard Profile: FirewallRaz :
          ABSENT Valeur Domain Profile: FirewallRaz :
          Aucune valeur présente dans la clé d'exception du registre (FirewallRaz)

          ========== Dossier(s) ==========
          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{22E421C6-88CA-4FBE-AF7D-275DCFE2647E}
          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{26074F18-767A-4F93-B7B9-D64708DFEEAD}
          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{38EC7174-40A3-4F11-AA71-411D396186B2}
          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{3C407854-799B-42F7-91B5-AD121B8B6A4D}
          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{65483D0E-04FA-4AD1-B234-14557017A300}
          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{78F83375-BA3F-4FEF-820F-7F3CDFE171CA}
          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{80414B61-D06F-407C-830C-906F0E4F2C91}
          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{8F76EC25-F5B5-4F98-A1E2-7B25FC033642}
          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{93E4CAB2-067D-4E20-A42A-830A444C893C}
          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{9D2844D2-4D1B-4CC3-A127-7F6ADB6FF69E}
          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{B3695D1A-632B-4FDE-8170-DB93C864CAEF}
          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{C255548A-1FD2-4B58-A258-AB1C9CF74C39}
          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{F2007223-ECAE-4861-AFD7-99A8F75F3897}
          SUPPRIME Temporaires Windows:
          SUPPRIME Flash Cookies:

          ========== Fichier(s) ==========
          SUPPRIME Temporaires Windows:
          SUPPRIME Flash Cookies:

          ========== Tache planifiée ==========
          SUPPRIME Task: {09070CE7-5CF7-4990-B80A-9A7C55897B5A}
          SUPPRIME Task: {BF244422-78D0-4125-A894-8961868A6F6F}

          ========== Récapitulatif ==========
          1 : Clé(s) du Registre
          4 : Valeur(s) du Registre
          15 : Dossier(s)
          2 : Fichier(s)
          2 : Tache planifiée

          End of clean in 00mn 23s

          ========== Chemin de fichier rapport ==========
          C:\ZHP\ZHPFix[R1].txt - 11/05/2012 09:26:34 [576]
          C:\ZHP\ZHPFix[R2].txt - 11/05/2012 09:27:03 [627]
          C:\ZHP\ZHPFix[R3].txt - 11/05/2012 11:07:00 [678]
          C:\ZHP\ZHPFix[R4].txt - 11/05/2012 11:07:47 [733]
          C:\ZHP\ZHPFix[R5].txt - 11/05/2012 11:08:37 [780]
          C:\ZHP\ZHPFix[R6].txt - 13/05/2012 11:00:29 [5561]
          C:\ZHP\ZHPFix[R7].txt - 16/05/2012 07:49:18 [2721]
          1. Contributeur sécurité
            Re,
            1/
            Copie tout le texte présent en gras ci-dessous ( tu le selectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C )

            [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\vShare.tv plugin]
            [MD5.00000000000000000000000000000000] [APT] [{09070CE7-5CF7-4990-B80A-9A7C55897B5A}] (...) -- F:\office 2007\SETUP.exe (.not file.)
            [MD5.00000000000000000000000000000000] [APT] [{BF244422-78D0-4125-A894-8961868A6F6F}] (...) -- C:\Users\Emmanuel\Desktop\SamsungPCStudio322.exe (.not file.)
            O43 - CFD: 15/05/2012 - 08:12:19 - [0] ----D C:\Users\Emmanuel\AppData\Local\{22E421C6-88CA-4FBE-AF7D-275DCFE2647E}
            O43 - CFD: 15/05/2012 - 08:13:15 - [0] ----D C:\Users\Emmanuel\AppData\Local\{26074F18-767A-4F93-B7B9-D64708DFEEAD}
            O43 - CFD: 13/05/2012 - 00:49:12 - [0] ----D C:\Users\Emmanuel\AppData\Local\{38EC7174-40A3-4F11-AA71-411D396186B2}
            O43 - CFD: 13/05/2012 - 19:24:18 - [0] ----D C:\Users\Emmanuel\AppData\Local\{3C407854-799B-42F7-91B5-AD121B8B6A4D}
            O43 - CFD: 15/05/2012 - 20:27:54 - [0] ----D C:\Users\Emmanuel\AppData\Local\{65483D0E-04FA-4AD1-B234-14557017A300}
            O43 - CFD: 13/05/2012 - 13:04:58 - [0] ----D C:\Users\Emmanuel\AppData\Local\{78F83375-BA3F-4FEF-820F-7F3CDFE171CA}
            O43 - CFD: 15/05/2012 - 20:28:06 - [0] ----D C:\Users\Emmanuel\AppData\Local\{80414B61-D06F-407C-830C-906F0E4F2C91}
            O43 - CFD: 14/05/2012 - 07:24:52 - [0] ----D C:\Users\Emmanuel\AppData\Local\{8F76EC25-F5B5-4F98-A1E2-7B25FC033642}
            O43 - CFD: 14/05/2012 - 07:25:04 - [0] ----D C:\Users\Emmanuel\AppData\Local\{93E4CAB2-067D-4E20-A42A-830A444C893C}
            O43 - CFD: 13/05/2012 - 00:49:35 - [0] ----D C:\Users\Emmanuel\AppData\Local\{9D2844D2-4D1B-4CC3-A127-7F6ADB6FF69E}
            O43 - CFD: 13/05/2012 - 19:24:04 - [0] ----D C:\Users\Emmanuel\AppData\Local\{B3695D1A-632B-4FDE-8170-DB93C864CAEF}
            O43 - CFD: 14/05/2012 - 19:25:49 - [0] ----D C:\Users\Emmanuel\AppData\Local\{C255548A-1FD2-4B58-A258-AB1C9CF74C39}
            O43 - CFD: 14/05/2012 - 19:26:02 - [0] ----D C:\Users\Emmanuel\AppData\Local\{F2007223-ECAE-4861-AFD7-99A8F75F3897}
            OPT:O4 - HKLM\..\Run: [NPSStartup] Clé orpheline

            FirewallRAZ
            EmptyTemp
            EmptyFlash


            Puis Lance ZHPFix depuis le raccourci du bureau .

            * Une fois l'outil ZHPFix ouvert , clique sur le bouton [ H ] ( "coller les lignes Helper" ) .

            * Dans l'encadré principal tu verras donc les lignes que tu as copié précédemment apparaitrent .

            Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.

            Clique sur le bouton GO

            Copie/Colle le rapport à l'écran dans ton prochain message.

            2/
            Comment se comporte ton PC maintenant ?

            @+
            1. Contributeur sécurité
              Re,

              Lance ZHPDiag depuis le bureau, clique sur : l'onglet vert (flèche bas) pour faire la mise à jour et prépare stp un nouveau rapport ZHPDiag

              @+

              1. Voici :
                JavaRa 1.16 Removal Log.

                Report follows after line.

                ------------------------------------

                The JavaRa removal process was started on Tue May 15 16:22:20 2012

                Found and removed: C:\Program Files\Java\jre6

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0001-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0002-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0003-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0004-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0005-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0006-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0007-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0008-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0009-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0010-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0011-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0012-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0013-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0014-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0015-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0016-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0017-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0018-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0019-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0020-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0021-ABCDEFFDCBA}. The error returned was 124.

                There was an error removing \Mozilla Firefox\extensions\{CAFEEFAC-0016-0022-ABCDEFFDCBA}. The error returned was 124.

                Found and removed: Applications\java.exe

                Found and removed: Applications\javaw.exe

                Found and removed: CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}

                Found and removed: CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}

                Found and removed: JavaScript

                Found and removed: JavaScript Author

                Found and removed: JavaScript1.1

                Found and removed: JavaScript1.1 Author

                Found and removed: JavaScript1.2

                Found and removed: JavaScript1.2 Author

                Found and removed: Software\Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}

                Found and removed: Software\Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}

                Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}

                Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

                Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

                Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

                Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

                Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

                Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

                Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3412062B02

                Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3412062B03

                Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3612062B02

                Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3612062B03

                Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10}

                ------------------------------------

                Finished reporting.
                1. Contributeur sécurité
                  Salut,
                  1/
                   Mise à jour Avast :

                  On va faire maintenant la mise à jour d'Avast, pour cela :
                  * Télécharge ce fichier à partir ce lien : http://www.commentcamarche.net/download/start/telecharger-151-avast-free-version
                  * Téléchargez aswclear.exe sur ton bureau ici :http://files.avast.com/files/eng/aswclear.exe
                  * Désactives le système d'autoprotection avast!
                  * Exécute aswclear.exe
                  * Clique sur "Uninstall"
                  * Redémarres ton ordinateur
                  * Exécute le fichier téléchargé au début pour l'installation de la dernière version d'avast

                  2/
                  Mise à jour Adobe reader

                  * Télécharge Adobe reader à partir :>>>>Ce lien<<<< en décochant la case : installer McAfee Security Scan Plus (facultatif)
                  * Désinstalle ta version d'adobe par : ajout/suppression de programme
                  * Exécute le fichier téléchargé pour installation en suivant les instructions.

                   Mise à jour de Java:

                  * Tu peux vérifier ta Console Java en cliquant sur ce lien :https://www.java.com/fr/download/uninstalltool.jsp
                  * Installe la nouvelle version si besoin (dans ce cas désinstalle avant l'ancienne version).

                  voici pour desinstaller JavaRa:  

                  * Télécharge ce fichier à partir ce lien : http://raproducts.org/click/click.php?id=1
                  * Décompresse JavaRa sur le Bureau (Clic droit > Extraire tout).
                  * Double-clique (clic droit "en tant qu'administrateur" pour Vista) sur le répertoire JavaRa.
                  * Puis double-clique sur le fichier JavaRa.exe (le exe peut ne pas s'afficher).
                  * Choisis Français puis clique sur Select.
                  * Clique sur Recherche de mises à jour.
                  * Sélectionne Mettre à jour via jucheck.exe puis clique sur Rechercher.
                  * Autorise le processus à se connecter s'il le demande, clique sur Installer et suis les instructions d'installation qui prennent quelques minutes.
                  * L'installation est terminée, reviens à l'écran de JavaRa et clique sur Effacer les anciennes versions.
                  * Clique sur Oui pour confirmer. Laisse travailler et clique ensuite sur OK, puis
                  une deuxième fois sur OK.
                  * Un rapport va s'ouvrir. Poste-le dans ta prochaine réponse.
                  * Ferme l'application.

                  Note : le rapport se trouve aussi dans C:\ sous le nom JavaRa.log.

                  @+
                  1. Le voici :
                    Malwarebytes Anti-Malware 1.61.0.1400
                    www.malwarebytes.org

                    Version de la base de données: v2012.05.15.02

                    Windows 7 Service Pack 1 x86 NTFS
                    Internet Explorer 8.0.7601.17514
                    Emmanuel :: EMMANUEL-VAIO [administrateur]

                    15/05/2012 08:40:55
                    mbam-log-2012-05-15 (08-40-55).txt

                    Type d'examen: Examen complet
                    Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
                    Options d'examen désactivées: P2P
                    Elément(s) analysé(s): 273123
                    Temps écoulé: 1 heure(s), 28 minute(s), 48 seconde(s)

                    Processus mémoire détecté(s): 0
                    (Aucun élément nuisible détecté)

                    Module(s) mémoire détecté(s): 0
                    (Aucun élément nuisible détecté)

                    Clé(s) du Registre détectée(s): 0
                    (Aucun élément nuisible détecté)

                    Valeur(s) du Registre détectée(s): 0
                    (Aucun élément nuisible détecté)

                    Elément(s) de données du Registre détecté(s): 0
                    (Aucun élément nuisible détecté)

                    Dossier(s) détecté(s): 0
                    (Aucun élément nuisible détecté)

                    Fichier(s) détecté(s): 1
                    C:\Users\Emmanuel\Downloads\SoftonicDownloader_pour_samsung-pc-studio.exe (PUP.OfferBundler.ST) -> Mis en quarantaine et supprimé avec succès.

                    (fin)
                    1. Bonjour Fish,
                      je viens de lancer mbam, je te tiens au courant.
                      Bonne journée.
                      1. Contributeur sécurité
                        Bonjour,
                        D'accord...

                        @+
                    2. Contributeur sécurité
                      Salut,

                      Tous les rapports envoyés correspondent au PC dont l'OS est Windows 7- 32 bits

                      L'inscription n'a aucun rapport ce que tu viens de dire! :-)

                      Tu continues toujours avec ce pc pour ne pas avoir des mauvaises surprises!

                      Pour l'autre PC, tu peux créer un nouveau sujet

                      En attendant le rapport mbam...

                      @+
                      1. Merci encore Fish 66, inscription faite, je ferai les opérations conseillées demain.
                        A+
                        1. Contributeur sécurité
                          Re,

                          De rien :-) , d'accord...

                          A demain
                        2. Salut Fish,
                          ça y est je m'y colle.
                        3. Voici le rapport ZHPFix :
                          Rapport de ZHPFix 1.2.05 par Nicolas Coolman, Update du 30/04/2012
                          Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-13-05-2012-12-00-29.txt
                          Run by Emmanuel at 13/05/2012 12:00:29
                          Windows 7 Starter Edition, 32-bit Service Pack 1 (Build 7601)
                          Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
                          Web site : http://nicolascoolman.skyrock.com/

                          ========== Clé(s) du Registre ==========
                          SUPPRIME Key*: HKCU\Software\vShare.tv

                          ========== Valeur(s) du Registre ==========
                          ABSENT Valeur Standard Profile: FirewallRaz :
                          ABSENT Valeur Domain Profile: FirewallRaz :
                          Aucune valeur présente dans la clé d'exception du registre (FirewallRaz)

                          ========== Dossier(s) ==========
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{05D344AC-B152-4FD7-A2AC-FCB912C924DD}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{068A884C-AD48-45AC-897F-8B4CEBFAE524}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{2D9D1950-79D9-4576-92F2-5A3EFB2A2A47}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{2EAF3D0E-B628-47D8-9D8D-91AA2B368766}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{3103CF45-49D2-4A4F-A6DA-7AABA483FF7E}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{3205ECC0-965A-4836-B7A5-3538F74C7371}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{3496B8FD-1C53-45F9-84BF-F1DE0E24CF8F}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{380894A1-3FE0-4F04-86EC-BC7C43708078}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{3C017E35-FFAD-4C5A-9E5D-D7E6130E7BB6}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{4B6FF183-AFCC-4E0F-921D-3A62E149DFFC}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{4E7117EA-50E3-4438-A67C-101E15ACDF11}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{51284FED-12F7-4851-AF09-EAD35B54507C}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{5769FBB6-6655-4F4E-A461-504734A53DE1}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{585AE400-5C19-4CEB-B5E2-57E035CA8E9E}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{5BC03A30-2E2C-4B0C-9F1B-71CB5C353FC5}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{5FADE199-A8C9-4306-95E6-0336D2188934}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{618E0F6F-D730-4CF9-8D3F-D48976A9DADA}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{685D5DC5-4EB5-49AF-B538-49C938AF98B6}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{6BF3B405-98DA-4A83-B546-89599366439A}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{76168091-57DB-4B98-8BA5-3DBFA0FC30BD}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{7975FB49-6533-4C69-B26D-F0E1E691A8E8}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{8BF408AD-81D0-4FFE-9BC0-6845475FCA24}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{8E0D601D-2D16-4DEB-B626-1B01E5D3C1C3}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{903F2F83-0020-4A4D-8CEA-B1E65C23EBBE}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{91E3BBE8-0910-4337-BB6C-059A90FBF4E8}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{947F021D-304D-4434-914F-60C478586B89}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{A875166B-7622-40AE-9BAF-CD0BF78BD56C}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{BC0B450B-A24A-41EF-B98C-D04D0B8E89BD}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{BC3229BA-4621-4102-A146-6DC9C884D39B}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{BEB1A772-32FA-4BDD-B23C-555FBBEFC6F8}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{CE6511F6-EA0C-4A0E-9DC3-760ECC2F8539}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{D3192192-F246-4836-A7D7-F6631312434F}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{D8EAB5AB-D482-4062-8335-3978943BEE11}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{DBD6476B-173C-40EA-B8E3-6AE82E067D63}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{DFC76B4C-044F-4361-9691-6703ED929E91}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{E1FB5793-D448-480B-A627-6194E2175263}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{E4EEF772-1279-4424-BCEE-8B64A55CB7A0}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{EAFE1FEA-4C91-4738-B9CA-E5BE24EC1142}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{ECA8DB08-D2F7-4042-AE01-D08C1673D109}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{EDC9E34F-698E-4BB9-8BD3-5E0738BED47D}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{EE376E3D-5092-4F34-9386-E14D6D202755}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{F2DEF9F7-DD63-409B-8D10-62A8048C7225}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{F363952E-B52A-48AD-B226-BA0AF369747D}
                          SUPPRIME Folder: C:\Users\Emmanuel\AppData\Local\{FA9EF65F-8CAC-4BB5-9FF6-576587E0B4FC}
                          SUPPRIME Temporaires Windows:
                          SUPPRIME Flash Cookies:

                          ========== Fichier(s) ==========
                          ABSENT Folder/File: c:\users\emmanuel\appdata\local\temp\imesh_setup.exe
                          ABSENT Folder/File: c:\users\emmanuel\appdata\local\temp\setupdatamngr_searchqu.exe
                          SUPPRIME Temporaires Windows:
                          SUPPRIME Flash Cookies:

                          ========== Tache planifiée ==========
                          SUPPRIME Task: {09070CE7-5CF7-4990-B80A-9A7C55897B5A}
                          SUPPRIME Task: {BF244422-78D0-4125-A894-8961868A6F6F}

                          ========== Récapitulatif ==========
                          1 : Clé(s) du Registre
                          3 : Valeur(s) du Registre
                          46 : Dossier(s)
                          4 : Fichier(s)
                          2 : Tache planifiée

                          End of clean in 00mn 58s

                          ========== Chemin de fichier rapport ==========
                          C:\ZHP\ZHPFix[R1].txt - 11/05/2012 09:26:34 [576]
                          C:\ZHP\ZHPFix[R2].txt - 11/05/2012 09:27:03 [627]
                          C:\ZHP\ZHPFix[R3].txt - 11/05/2012 11:07:00 [678]
                          C:\ZHP\ZHPFix[R4].txt - 11/05/2012 11:07:47 [733]
                          C:\ZHP\ZHPFix[R5].txt - 11/05/2012 11:08:37 [780]
                          C:\ZHP\ZHPFix[R6].txt - 13/05/2012 12:00:29 [5509]
                        4. Depuis l'inscription hier, je me rends compte que je suis répertorié sous Windows XP, mais en réalité, le PC infecté (celui-ci) est sous système Windws 7 Starter.
                      2. Contributeur sécurité
                        Re,
                        1/
                        * inscris toi sur le forum afin de rendre tes liens lisibles

                        * ICI >> l'inscription <<<

                        2/
                        Copie tout le texte présent en gras ci-dessous ( tu le selectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C )


                        [HKCU\Software\vShare.tv] => Infection PUP (PUP.VShareRedir)
                        [MD5.B205D32B93AF178380EC879F74EA5E95] [SPRF][27/11/2011] (.iMesh Inc. - iMesh.) -- C:\Users\Emmanuel\AppData\Local\Temp\iMesh_setup.exe [2404320] => Infection PUP (PUP.iMesh)
                        [MD5.D1E8C8032C60B934F4CF9A4646903992] [SPRF][13/01/2012] (...) -- C:\Users\Emmanuel\AppData\Local\Temp\SetupDataMngr_Searchqu.exe [3733520] => Infection BT (Adware.Bandoo)
                        [HKCU\Software\vShare.tv] => Infection PUP (PUP.VShareRedir)
                        [MD5.00000000000000000000000000000000] [APT] [{09070CE7-5CF7-4990-B80A-9A7C55897B5A}] (...) -- F:\office 2007\SETUP.exe (.not file.)
                        [MD5.00000000000000000000000000000000] [APT] [{BF244422-78D0-4125-A894-8961868A6F6F}] (...) -- C:\Users\Emmanuel\Desktop\SamsungPCStudio322.exe (.not file.)
                        O43 - CFD: 04/05/2012 - 18:35:23 - [0] ----D C:\Users\Emmanuel\AppData\Local\{05D344AC-B152-4FD7-A2AC-FCB912C924DD}
                        O43 - CFD: 10/05/2012 - 07:23:22 - [0] ----D C:\Users\Emmanuel\AppData\Local\{068A884C-AD48-45AC-897F-8B4CEBFAE524}
                        O43 - CFD: 06/05/2012 - 10:39:40 - [0] ----D C:\Users\Emmanuel\AppData\Local\{2D9D1950-79D9-4576-92F2-5A3EFB2A2A47}
                        O43 - CFD: 12/05/2012 - 10:14:58 - [0] ----D C:\Users\Emmanuel\AppData\Local\{2EAF3D0E-B628-47D8-9D8D-91AA2B368766}
                        O43 - CFD: 06/05/2012 - 22:56:56 - [0] ----D C:\Users\Emmanuel\AppData\Local\{3103CF45-49D2-4A4F-A6DA-7AABA483FF7E}
                        O43 - CFD: 06/05/2012 - 10:38:57 - [0] ----D C:\Users\Emmanuel\AppData\Local\{3205ECC0-965A-4836-B7A5-3538F74C7371}
                        O43 - CFD: 09/05/2012 - 11:19:38 - [0] ----D C:\Users\Emmanuel\AppData\Local\{3496B8FD-1C53-45F9-84BF-F1DE0E24CF8F}
                        O43 - CFD: 08/05/2012 - 10:16:53 - [0] ----D C:\Users\Emmanuel\AppData\Local\{380894A1-3FE0-4F04-86EC-BC7C43708078}
                        O43 - CFD: 10/05/2012 - 07:25:06 - [0] ----D C:\Users\Emmanuel\AppData\Local\{3C017E35-FFAD-4C5A-9E5D-D7E6130E7BB6}
                        O43 - CFD: 08/05/2012 - 10:15:31 - [0] ----D C:\Users\Emmanuel\AppData\Local\{4B6FF183-AFCC-4E0F-921D-3A62E149DFFC}
                        O43 - CFD: 30/04/2012 - 08:27:59 - [0] ----D C:\Users\Emmanuel\AppData\Local\{4E7117EA-50E3-4438-A67C-101E15ACDF11}
                        O43 - CFD: 26/04/2012 - 16:12:18 - [0] ----D C:\Users\Emmanuel\AppData\Local\{51284FED-12F7-4851-AF09-EAD35B54507C}
                        O43 - CFD: 09/05/2012 - 11:21:57 - [0] ----D C:\Users\Emmanuel\AppData\Local\{5769FBB6-6655-4F4E-A461-504734A53DE1}
                        O43 - CFD: 08/05/2012 - 22:49:15 - [0] ----D C:\Users\Emmanuel\AppData\Local\{585AE400-5C19-4CEB-B5E2-57E035CA8E9E}
                        O43 - CFD: 07/05/2012 - 11:33:30 - [0] ----D C:\Users\Emmanuel\AppData\Local\{5BC03A30-2E2C-4B0C-9F1B-71CB5C353FC5}
                        O43 - CFD: 10/05/2012 - 19:25:56 - [0] ----D C:\Users\Emmanuel\AppData\Local\{5FADE199-A8C9-4306-95E6-0336D2188934}
                        O43 - CFD: 27/04/2012 - 22:33:54 - [0] ----D C:\Users\Emmanuel\AppData\Local\{618E0F6F-D730-4CF9-8D3F-D48976A9DADA}
                        O43 - CFD: 06/05/2012 - 22:57:04 - [0] ----D C:\Users\Emmanuel\AppData\Local\{685D5DC5-4EB5-49AF-B538-49C938AF98B6}
                        O43 - CFD: 10/05/2012 - 19:25:43 - [0] ----D C:\Users\Emmanuel\AppData\Local\{6BF3B405-98DA-4A83-B546-89599366439A}
                        O43 - CFD: 05/05/2012 - 10:54:53 - [0] ----D C:\Users\Emmanuel\AppData\Local\{76168091-57DB-4B98-8BA5-3DBFA0FC30BD}
                        O43 - CFD: 11/05/2012 - 08:36:46 - [0] ----D C:\Users\Emmanuel\AppData\Local\{7975FB49-6533-4C69-B26D-F0E1E691A8E8}
                        O43 - CFD: 26/04/2012 - 16:12:29 - [0] ----D C:\Users\Emmanuel\AppData\Local\{8BF408AD-81D0-4FFE-9BC0-6845475FCA24}
                        O43 - CFD: 27/04/2012 - 10:25:11 - [0] ----D C:\Users\Emmanuel\AppData\Local\{8E0D601D-2D16-4DEB-B626-1B01E5D3C1C3}
                        O43 - CFD: 12/05/2012 - 10:16:22 - [0] ----D C:\Users\Emmanuel\AppData\Local\{903F2F83-0020-4A4D-8CEA-B1E65C23EBBE}
                        O43 - CFD: 04/05/2012 - 06:23:29 - [0] ----D C:\Users\Emmanuel\AppData\Local\{91E3BBE8-0910-4337-BB6C-059A90FBF4E8}
                        O43 - CFD: 07/05/2012 - 11:34:08 - [0] ----D C:\Users\Emmanuel\AppData\Local\{947F021D-304D-4434-914F-60C478586B89}
                        O43 - CFD: 27/04/2012 - 10:22:25 - [0] ----D C:\Users\Emmanuel\AppData\Local\{A875166B-7622-40AE-9BAF-CD0BF78BD56C}
                        O43 - CFD: 08/05/2012 - 22:49:40 - [0] ----D C:\Users\Emmanuel\AppData\Local\{BC0B450B-A24A-41EF-B98C-D04D0B8E89BD}
                        O43 - CFD: 29/04/2012 - 10:09:11 - [0] ----D C:\Users\Emmanuel\AppData\Local\{BC3229BA-4621-4102-A146-6DC9C884D39B}
                        O43 - CFD: 27/04/2012 - 22:36:35 - [0] ----D C:\Users\Emmanuel\AppData\Local\{BEB1A772-32FA-4BDD-B23C-555FBBEFC6F8}
                        O43 - CFD: 04/05/2012 - 18:34:17 - [0] ----D C:\Users\Emmanuel\AppData\Local\{CE6511F6-EA0C-4A0E-9DC3-760ECC2F8539}
                        O43 - CFD: 05/05/2012 - 10:56:28 - [0] ----D C:\Users\Emmanuel\AppData\Local\{D3192192-F246-4836-A7D7-F6631312434F}
                        O43 - CFD: 11/05/2012 - 08:34:01 - [0] ----D C:\Users\Emmanuel\AppData\Local\{D8EAB5AB-D482-4062-8335-3978943BEE11}
                        O43 - CFD: 29/04/2012 - 10:08:05 - [0] ----D C:\Users\Emmanuel\AppData\Local\{DBD6476B-173C-40EA-B8E3-6AE82E067D63}
                        O43 - CFD: 26/04/2012 - 16:11:21 - [0] ----D C:\Users\Emmanuel\AppData\Local\{DFC76B4C-044F-4361-9691-6703ED929E91}
                        O43 - CFD: 28/04/2012 - 11:11:09 - [0] ----D C:\Users\Emmanuel\AppData\Local\{E1FB5793-D448-480B-A627-6194E2175263}
                        O43 - CFD: 03/05/2012 - 10:32:46 - [0] ----D C:\Users\Emmanuel\AppData\Local\{E4EEF772-1279-4424-BCEE-8B64A55CB7A0}
                        O43 - CFD: 02/05/2012 - 22:31:47 - [0] ----D C:\Users\Emmanuel\AppData\Local\{EAFE1FEA-4C91-4738-B9CA-E5BE24EC1142}
                        O43 - CFD: 03/05/2012 - 10:32:48 - [0] ----D C:\Users\Emmanuel\AppData\Local\{ECA8DB08-D2F7-4042-AE01-D08C1673D109}
                        O43 - CFD: 02/05/2012 - 22:29:21 - [0] ----D C:\Users\Emmanuel\AppData\Local\{EDC9E34F-698E-4BB9-8BD3-5E0738BED47D}
                        O43 - CFD: 30/04/2012 - 08:30:32 - [0] ----D C:\Users\Emmanuel\AppData\Local\{EE376E3D-5092-4F34-9386-E14D6D202755}
                        O43 - CFD: 04/05/2012 - 06:24:40 - [0] ----D C:\Users\Emmanuel\AppData\Local\{F2DEF9F7-DD63-409B-8D10-62A8048C7225}
                        O43 - CFD: 28/04/2012 - 11:08:29 - [0] ----D C:\Users\Emmanuel\AppData\Local\{F363952E-B52A-48AD-B226-BA0AF369747D}
                        O43 - CFD: 03/05/2012 - 10:33:03 - [0] ----D C:\Users\Emmanuel\AppData\Local\{FA9EF65F-8CAC-4BB5-9FF6-576587E0B4FC}

                        FirewallRAZ
                        EmptyTemp
                        EmptyFlash


                        Puis Lance ZHPFix depuis le raccourci du bureau .

                        * Une fois l'outil ZHPFix ouvert , clique sur le bouton [ H ] ( "coller les lignes Helper" ) .

                        * Dans l'encadré principal tu verras donc les lignes que tu as copié précédemment apparaitrent .

                        Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.

                        Clique sur le bouton GO

                        Copie/Colle le rapport à l'écran dans ton prochain message.

                        3/
                        /!\ ATTENTION : cette analyse peut durer quelques heures /!\

                        * Télécharge MBAM et installe le selon l'emplacement par défaut
                        https://www.malwarebytes.com/mwb-download/
                        * Lance Malwarebytes' Anti-Malware
                        * Fais la mise à jour
                        * Clique dans l'onglet "Recherche"
                        * Coche l'option "Exécuter un examen complet" puis sur le bouton "Rechercher"
                        * Choisis de scanner tous tes disques durs, puis clique sur 'Lancer l'examen"

                        A la fin de l'analyse, si MBAM n'a rien trouvé :

                        * Clique sur OK, le rapport s'ouvre spontanément

                        Si des menaces ont été détectées :

                        * Clique sur OK puis "Afficher les résultats"
                        *Vérifie que toutes les lignes sont cochées
                        * Choisis l'option "Supprimer la sélection"
                        * Si MBAM demande le redémarrage de Windows : Clique sur "Oui"
                        * Le rapport s'ouvre automatiquement après la suppression, il se trouve aussi dans l'onglet "Rapports/Logs"

                        * Copie/colle le rapport dans le prochain message

                        Remarque :
                        - S'il y'a un problème de mise à jour de mbam, tu peux la faire manuellement en téléchargeant ce fichier puis en l'exécutant.

                        ==================================

                        L'essentiel c'est que tu continues avec le même PC (celui-ci )

                        @+
                        1. Adresse du rapport, je galère, je galère pour te l'envoyer.
                          http://cjoint.com/?BEmniR15ZiW
                          1. Je ne comprends pas, mon message contenant le rapport ne part pas...
                            1. C'est avec le pc infecté que je l'envoie. ais c'est sur un autre pc que j'écris ici, et ça fonctionne.
                            2. "Titre du message non renseigné" apparaît, ça ne passe pas.
                          • 1
                          • 2