Infection après mise à jour java
RésoluJe rencontre divers problèmes sur mon ordinateur , je pense que c'est suite à une mise à jour de Java.
-Sur mon antivirus Bitdefender ( version payante): l'analyse à l'accès est désactivée .Impossible de résoudre ce pb.Quand je fais une analyse, aucun virus n'est pourtant détecté.
- Je ne peux plus ouvrir Word ou Excel:"réessayer ou réparer le produit dans le panneau de configuration". Lorsque j'essaie de réparer, j'ai un nouveau message qui me dit: la connexion nécessaire à la réparation complète de Microsoft Starter 2010 n'ayant pas été trouvée, une réparation rapide a été effectuée.
Pourtant je suis bien connectée à internet.
-Boite Windows Live Mail: des croix apparaissent à la place des images bien que la case " bloquer les images " ne soit pas cochée.
J'ai fait une restauration de mon PC mais le problème n'est pas résolu.
Voilà, j'ai donc besoin d'aide car je commence à accumuler beaucoup de problèmes.
Merci d'avance.
30 réponses
Plusieurs symptômes apparaissent après une mise à jour Java sur Windows 7 et Firefox 19, notamment l’impossibilité d’analyser et des difficultés de réparation de Word/Excel, ainsi que des images manquantes dans Windows Live Mail. Des réponses suggèrent l’utilisation d’AdwCleaner pour supprimer des composants indésirables comme Conduit et Babylon, et le nettoyage des clés de registre et des extensions possiblement associées. Des messages évoquent la suppression de barres d’outils et la réinitialisation des paramètres du navigateur, tandis que certains notent que la sécurité de l’antivirus mérite des vérifications complémentaires. En cas de crises répétées, certains conseillent de passer à des solutions plus récentes comme Skype et de privilégier les téléchargements officiels.
-
pour ce qui est de fiabilité, aucun antivirus n'est fiable à 100%
-
J'ai supprimé ce compte dans WLM puis je l'ai recrée, apparemment ça marche.
Merci pour tout et bonne soirée! -
J'ai parlé trop vite, la fenêtre réapparait!!!
-
J'ai regardé dans propriété et décoché "ce serveur requiert une authentification", qui était coché, je ne sais pas pourquoi, car avant ça fonctionnait.
Enfin tout marche bien maintenant.
Je m'interroge tout de même sur la fiabilité de Bitdefender car il a laisser passer des virus? Il fait des mises a jour et des analyses quotidiennes.En plus je le paie cet antivirus!! -
je viens de voir que c'est quand les mails de gmail arrivent
-
HA!!!!C'est ce que j'ai fait mais c'est pas normal que ça me le demande à chaque fois que j'ouvre ma boite mail
-
mais non mais dans la petite fenetre lol ^^
-
OUI
-
réponds oui
-
je ne sais pas si j'ai bien compris ce que tu me demandes?
-
dis oui au pire je suis là
-
-
tu peux me faire une capture de cette petite fenetre ?
-
J'ai relancé la réparation de Microsoft Office Starter 2010 et Word et Excel fonctionnent.
Il reste encore le petit problème de ma boite mail, je ne sais pas si il peut être résolu.
Merci beaucoup pour ton aide et pour ton travail . -
J'ai Skype mais Windows Live Mail, c'est pour regrouper toutes mes boites mails(free, gmail..)
-
c'est fini windows live messenger faut passer sur skype maintenant
-
Par contre à chaque fois que j'ouvre WLM j'ai le message suivant:
le serveur auquel vous êtes connecte utilise un certificat de sécurité qui ne peut pas être vérifié.
La signature du certificat ne peut pas être vérifiée.
Voulez-vous continuer à utiliser ce serveur? -
Les images sont réapparues dans les mails, voilà un pb de résolu!
Par contre Word et Excel ne s'ovrent toujours pas. -
All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
No active process named iexplore.exe was found!
Process firefox.exe killed successfully!
No active process named msnmsgr.exe was found!
No active process named Teatimer.exe was found!
========== OTL ==========
Registry value HKEY_USERS\S-1-5-21-315621274-151502726-3574829184-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\\{ef79f67a-6ad7-4715-a0f8-932fca442023} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ef79f67a-6ad7-4715-a0f8-932fca442023}\ not found.
Registry key HKEY_USERS\S-1-5-21-315621274-151502726-3574829184-1001\Software\Microsoft\Internet Explorer\SearchScopes\{6B83D83A-8EDA-4AA8-BA55-0629DE04A768}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6B83D83A-8EDA-4AA8-BA55-0629DE04A768}\ not found.
Registry key HKEY_USERS\S-1-5-21-315621274-151502726-3574829184-1001\Software\Microsoft\Internet Explorer\SearchScopes\{DEDDA8C3-C139-49FA-BD96-D8934B1C3A48}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DEDDA8C3-C139-49FA-BD96-D8934B1C3A48}\ not found.
HKU\S-1-5-21-315621274-151502726-3574829184-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKU\S-1-5-21-315621274-151502726-3574829184-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@adobe.com/FlashPlayer\ deleted successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}\chrome\content\ffjcext folder moved successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}\chrome\content folder moved successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}\chrome folder moved successfully.
C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} folder moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked not found.
Registry value HKEY_USERS\S-1-5-21-315621274-151502726-3574829184-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} folder moved successfully.
C:\Windows\SysWow64\FAP1251.tmp deleted successfully.
C:\Windows\SysWow64\FAP12CA.tmp deleted successfully.
C:\Windows\SysWow64\FAP1614.tmp deleted successfully.
C:\Windows\SysWow64\FAP19FF.tmp deleted successfully.
C:\Windows\SysWow64\FAP1B69.tmp deleted successfully.
C:\Windows\SysWow64\FAP1C1.tmp deleted successfully.
C:\Windows\SysWow64\FAP1C12.tmp deleted successfully.
C:\Windows\SysWow64\FAP1FC7.tmp deleted successfully.
C:\Windows\SysWow64\FAP205D.tmp deleted successfully.
C:\Windows\SysWow64\FAP22A.tmp deleted successfully.
C:\Windows\SysWow64\FAP22ED.tmp deleted successfully.
C:\Windows\SysWow64\FAP267E.tmp deleted successfully.
C:\Windows\SysWow64\FAP293E.tmp deleted successfully.
C:\Windows\SysWow64\FAP2977.tmp deleted successfully.
C:\Windows\SysWow64\FAP2CF3.tmp deleted successfully.
C:\Windows\SysWow64\FAP2E8C.tmp deleted successfully.
C:\Windows\SysWow64\FAP2EFF.tmp deleted successfully.
C:\Windows\SysWow64\FAP313E.tmp deleted successfully.
C:\Windows\SysWow64\FAP31FC.tmp deleted successfully.
C:\Windows\SysWow64\FAP3421.tmp deleted successfully.
C:\Windows\SysWow64\FAP3491.tmp deleted successfully.
C:\Windows\SysWow64\FAP3640.tmp deleted successfully.
C:\Windows\SysWow64\FAP38D9.tmp deleted successfully.
C:\Windows\SysWow64\FAP39F1.tmp deleted successfully.
C:\Windows\SysWow64\FAP3BAA.tmp deleted successfully.
C:\Windows\SysWow64\FAP3D27.tmp deleted successfully.
C:\Windows\SysWow64\FAP3D3F.tmp deleted successfully.
C:\Windows\SysWow64\FAP3D78.tmp deleted successfully.
C:\Windows\SysWow64\FAP3D8.tmp deleted successfully.
C:\Windows\SysWow64\FAP3D90.tmp deleted successfully.
C:\Windows\SysWow64\FAP3DC3.tmp deleted successfully.
C:\Windows\SysWow64\FAP400A.tmp deleted successfully.
C:\Windows\SysWow64\FAP429.tmp deleted successfully.
C:\Windows\SysWow64\FAP43B9.tmp deleted successfully.
C:\Windows\SysWow64\FAP4B77.tmp deleted successfully.
C:\Windows\SysWow64\FAP4F75.tmp deleted successfully.
C:\Windows\SysWow64\FAP5293.tmp deleted successfully.
C:\Windows\SysWow64\FAP5496.tmp deleted successfully.
C:\Windows\SysWow64\FAP54E7.tmp deleted successfully.
C:\Windows\SysWow64\FAP590F.tmp deleted successfully.
C:\Windows\SysWow64\FAP59EC.tmp deleted successfully.
C:\Windows\SysWow64\FAP5A6.tmp deleted successfully.
C:\Windows\SysWow64\FAP5AB9.tmp deleted successfully.
C:\Windows\SysWow64\FAP5BC3.tmp deleted successfully.
C:\Windows\SysWow64\FAP5C14.tmp deleted successfully.
C:\Windows\SysWow64\FAP5C7E.tmp deleted successfully.
C:\Windows\SysWow64\FAP5D71.tmp deleted successfully.
C:\Windows\SysWow64\FAP60C.tmp deleted successfully.
C:\Windows\SysWow64\FAP6426.tmp deleted successfully.
C:\Windows\SysWow64\FAP6476.tmp deleted successfully.
C:\Windows\SysWow64\FAP64B7.tmp deleted successfully.
C:\Windows\SysWow64\FAP65E3.tmp deleted successfully.
C:\Windows\SysWow64\FAP6634.tmp deleted successfully.
C:\Windows\SysWow64\FAP68AC.tmp deleted successfully.
C:\Windows\SysWow64\FAP6966.tmp deleted successfully.
C:\Windows\SysWow64\FAP69DB.tmp deleted successfully.
C:\Windows\SysWow64\FAP6B14.tmp deleted successfully.
C:\Windows\SysWow64\FAP6B25.tmp deleted successfully.
C:\Windows\SysWow64\FAP6B75.tmp deleted successfully.
C:\Windows\SysWow64\FAP6C51.tmp deleted successfully.
C:\Windows\SysWow64\FAP6C92.tmp deleted successfully.
C:\Windows\SysWow64\FAP6CB.tmp deleted successfully.
C:\Windows\SysWow64\FAP7175.tmp deleted successfully.
C:\Windows\SysWow64\FAP71B7.tmp deleted successfully.
C:\Windows\SysWow64\FAP7208.tmp deleted successfully.
C:\Windows\SysWow64\FAP7750.tmp deleted successfully.
C:\Windows\SysWow64\FAP77A1.tmp deleted successfully.
C:\Windows\SysWow64\FAP79C6.tmp deleted successfully.
C:\Windows\SysWow64\FAP7F33.tmp deleted successfully.
C:\Windows\SysWow64\FAP7F7F.tmp deleted successfully.
C:\Windows\SysWow64\FAP7FC0.tmp deleted successfully.
C:\Windows\SysWow64\FAP80AD.tmp deleted successfully.
C:\Windows\SysWow64\FAP816B.tmp deleted successfully.
C:\Windows\SysWow64\FAP81BC.tmp deleted successfully.
C:\Windows\SysWow64\FAP8204.tmp deleted successfully.
C:\Windows\SysWow64\FAP8404.tmp deleted successfully.
C:\Windows\SysWow64\FAP843C.tmp deleted successfully.
C:\Windows\SysWow64\FAP8513.tmp deleted successfully.
C:\Windows\SysWow64\FAP871C.tmp deleted successfully.
C:\Windows\SysWow64\FAP8BF3.tmp deleted successfully.
C:\Windows\SysWow64\FAP8F5F.tmp deleted successfully.
C:\Windows\SysWow64\FAP8FD4.tmp deleted successfully.
C:\Windows\SysWow64\FAP9035.tmp deleted successfully.
C:\Windows\SysWow64\FAP912C.tmp deleted successfully.
C:\Windows\SysWow64\FAP92B7.tmp deleted successfully.
C:\Windows\SysWow64\FAP9488.tmp deleted successfully.
C:\Windows\SysWow64\FAP95B3.tmp deleted successfully.
C:\Windows\SysWow64\FAP95CF.tmp deleted successfully.
C:\Windows\SysWow64\FAP95F2.tmp deleted successfully.
C:\Windows\SysWow64\FAP9643.tmp deleted successfully.
C:\Windows\SysWow64\FAP96B3.tmp deleted successfully.
C:\Windows\SysWow64\FAP96F5.tmp deleted successfully.
C:\Windows\SysWow64\FAP9DD1.tmp deleted successfully.
C:\Windows\SysWow64\FAP9FA8.tmp deleted successfully.
C:\Windows\SysWow64\FAP9FE6.tmp deleted successfully.
C:\Windows\SysWow64\FAPA0C2.tmp deleted successfully.
C:\Windows\SysWow64\FAPA15D.tmp deleted successfully.
C:\Windows\SysWow64\FAPA266.tmp deleted successfully.
C:\Windows\SysWow64\FAPA398.tmp deleted successfully.
C:\Windows\SysWow64\FAPA40F.tmp deleted successfully.
C:\Windows\SysWow64\FAPA44A.tmp deleted successfully.
C:\Windows\SysWow64\FAPA47B.tmp deleted successfully.
C:\Windows\SysWow64\FAPA7D0.tmp deleted successfully.
C:\Windows\SysWow64\FAPA8.tmp deleted successfully.
C:\Windows\SysWow64\FAPA9AA.tmp deleted successfully.
C:\Windows\SysWow64\FAPAA94.tmp deleted successfully.
C:\Windows\SysWow64\FAPAC3D.tmp deleted successfully.
C:\Windows\SysWow64\FAPAE3B.tmp deleted successfully.
C:\Windows\SysWow64\FAPB07F.tmp deleted successfully.
C:\Windows\SysWow64\FAPB0D0.tmp deleted successfully.
C:\Windows\SysWow64\FAPB225.tmp deleted successfully.
C:\Windows\SysWow64\FAPB276.tmp deleted successfully.
C:\Windows\SysWow64\FAPB2F6.tmp deleted successfully.
C:\Windows\SysWow64\FAPB305.tmp deleted successfully.
C:\Windows\SysWow64\FAPB32.tmp deleted successfully.
C:\Windows\SysWow64\FAPB347.tmp deleted successfully.
C:\Windows\SysWow64\FAPB398.tmp deleted successfully.
C:\Windows\SysWow64\FAPB3D8.tmp deleted successfully.
C:\Windows\SysWow64\FAPB420.tmp deleted successfully.
C:\Windows\SysWow64\FAPB534.tmp deleted successfully.
C:\Windows\SysWow64\FAPB6B7.tmp deleted successfully.
C:\Windows\SysWow64\FAPB80E.tmp deleted successfully.
C:\Windows\SysWow64\FAPB89E.tmp deleted successfully.
C:\Windows\SysWow64\FAPB94C.tmp deleted successfully.
C:\Windows\SysWow64\FAPBFB9.tmp deleted successfully.
C:\Windows\SysWow64\FAPC466.tmp deleted successfully.
C:\Windows\SysWow64\FAPC4F6.tmp deleted successfully.
C:\Windows\SysWow64\FAPC769.tmp deleted successfully.
C:\Windows\SysWow64\FAPC78B.tmp deleted successfully.
C:\Windows\SysWow64\FAPC9AF.tmp deleted successfully.
C:\Windows\SysWow64\FAPCA10.tmp deleted successfully.
C:\Windows\SysWow64\FAPCD6D.tmp deleted successfully.
C:\Windows\SysWow64\FAPD009.tmp deleted successfully.
C:\Windows\SysWow64\FAPD370.tmp deleted successfully.
C:\Windows\SysWow64\FAPD3A2.tmp deleted successfully.
C:\Windows\SysWow64\FAPD3C4.tmp deleted successfully.
C:\Windows\SysWow64\FAPD3E1.tmp deleted successfully.
C:\Windows\SysWow64\FAPD4.tmp deleted successfully.
C:\Windows\SysWow64\FAPD59B.tmp deleted successfully.
C:\Windows\SysWow64\FAPD5DC.tmp deleted successfully.
C:\Windows\SysWow64\FAPD629.tmp deleted successfully.
C:\Windows\SysWow64\FAPD7D2.tmp deleted successfully.
C:\Windows\SysWow64\FAPDAC6.tmp deleted successfully.
C:\Windows\SysWow64\FAPDF79.tmp deleted successfully.
C:\Windows\SysWow64\FAPE0A3.tmp deleted successfully.
C:\Windows\SysWow64\FAPE1DE.tmp deleted successfully.
C:\Windows\SysWow64\FAPE335.tmp deleted successfully.
C:\Windows\SysWow64\FAPE569.tmp deleted successfully.
C:\Windows\SysWow64\FAPE5AB.tmp deleted successfully.
C:\Windows\SysWow64\FAPE5E7.tmp deleted successfully.
C:\Windows\SysWow64\FAPE61.tmp deleted successfully.
C:\Windows\SysWow64\FAPE629.tmp deleted successfully.
C:\Windows\SysWow64\FAPE669.tmp deleted successfully.
C:\Windows\SysWow64\FAPE6B8.tmp deleted successfully.
C:\Windows\SysWow64\FAPE746.tmp deleted successfully.
C:\Windows\SysWow64\FAPE860.tmp deleted successfully.
C:\Windows\SysWow64\FAPE885.tmp deleted successfully.
C:\Windows\SysWow64\FAPEA2.tmp deleted successfully.
C:\Windows\SysWow64\FAPEA57.tmp deleted successfully.
C:\Windows\SysWow64\FAPEAF6.tmp deleted successfully.
C:\Windows\SysWow64\FAPEB57.tmp deleted successfully.
C:\Windows\SysWow64\FAPED6F.tmp deleted successfully.
C:\Windows\SysWow64\FAPED9B.tmp deleted successfully.
C:\Windows\SysWow64\FAPEDC0.tmp deleted successfully.
C:\Windows\SysWow64\FAPEE02.tmp deleted successfully.
C:\Windows\SysWow64\FAPEE43.tmp deleted successfully.
C:\Windows\SysWow64\FAPEEF2.tmp deleted successfully.
C:\Windows\SysWow64\FAPEF17.tmp deleted successfully.
C:\Windows\SysWow64\FAPEF78.tmp deleted successfully.
C:\Windows\SysWow64\FAPEFB1.tmp deleted successfully.
C:\Windows\SysWow64\FAPF0A3.tmp deleted successfully.
C:\Windows\SysWow64\FAPF933.tmp deleted successfully.
C:\Windows\SysWow64\FAPFA.tmp deleted successfully.
C:\Windows\SysWow64\FAPFC17.tmp deleted successfully.
C:\Windows\msdownld.tmp folder deleted successfully.
C:\Users\Marie-France\Desktop\~$Doc2.rtf moved successfully.
File C:\ProgramData\*.bdinstall.bin not found.
C:\ProgramData\hnbdehzc.pfe moved successfully.
C:\Users\Marie-France\AppData\Local\Software\CrashReports folder moved successfully.
C:\Users\Marie-France\AppData\Local\Software folder moved successfully.
C:\Windows\Tasks\SCHEDLGU(61).TXT moved successfully.
C:\Windows\Tasks\SCHEDLGU(63).TXT moved successfully.
ADS C:\ProgramData\Temp:373E1720 deleted successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL\MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found.
Registry key HKEY_LOCAL\MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found.
Registry key HKEY_LOCAL\MACHINE\Software\Microsoft\Windows\CurrentVersion\Run not found.
Registry key HKEY_CURRENT_USER\Software\FVDToolbar\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\VIO ;)\ deleted successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 164242 bytes
->Flash cache emptied: 56475 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
User: Marie-France
->Temp folder emptied: 35527 bytes
->Temporary Internet Files folder emptied: 513455383 bytes
->Java cache emptied: 11730664 bytes
->FireFox cache emptied: 193526382 bytes
->Flash cache emptied: 58682 bytes
User: Public
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1202214 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 42305163 bytes
RecycleBin emptied: 596118 bytes
Total Files Cleaned = 728,00 mb
OTL by OldTimer - Version 3.2.69.0 log created on 05282013_175708
Files\Folders moved on Reboot...
C:\Users\Marie-France\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
File\Folder C:\Windows\temp\~bd8D11.tmp not found!
PendingFileRenameOperations files...
Registry entries deleted on Reboot... -
ATTENTION !!! : Script personnalisé pour cette machine uniquement , ne pas reproduire !!
si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."
sur OTL.exe pour le lancer.
▶Copie la liste qui se trouve en gras ci-dessous,
▶ colle-la dans la zone sous "Personnalisation" :
:processes
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
Teatimer.exe
:OTL
IE - HKU\S-1-5-21-315621274-151502726-3574829184-1001\..\URLSearchHook: {ef79f67a-6ad7-4715-a0f8-932fca442023} - No CLSID value found
IE - HKU\S-1-5-21-315621274-151502726-3574829184-1001\..\SearchScopes\{6B83D83A-8EDA-4AA8-BA55-0629DE04A768}: "URL" = http://www.search.ask.com/?l=dis{searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=9674902D-6965-4285-9836-AB83D2705FB2&apn_sauid=E6B4B017-8226-483B-8CC4-EA9CF8B3D67F
IE - HKU\S-1-5-21-315621274-151502726-3574829184-1001\..\SearchScopes\{DEDDA8C3-C139-49FA-BD96-D8934B1C3A48}: "URL" = http://start.funmoods.com/results.php?f=4&a=pvl&q={searchTerms}
IE - HKU\S-1-5-21-315621274-151502726-3574829184-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKU\S-1-5-21-315621274-151502726-3574829184-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=localhost:44413
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll File not found
[2013/05/26 20:27:49 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-315621274-151502726-3574829184-1001\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 1.6.0_35)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_35-windows-i586.cab (Java Plug-in 10.17.2)
[2013/04/29 19:53:10 | 000,000,000 | -HSD | C] -- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
[174 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[2013/04/29 19:29:46 | 000,000,162 | -H-- | M] () -- C:\Users\Marie-France\Desktop\~$Doc2.rtf
[2013/04/14 20:17:48 | 000,479,598 | ---- | C] () -- C:\ProgramData\*.bdinstall.bin
[2012/03/19 12:05:05 | 000,005,081 | ---- | C] () -- C:\ProgramData\hnbdehzc.pfe
[2012/04/12 19:15:43 | 000,000,000 | ---D | M] -- C:\Users\Marie-France\AppData\Local\Software
[174 C:\Windows\system32\*.tmp files -> C:\Windows\system32\*.tmp -> ]
[2012/04/22 09:51:38 | 000,032,482 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU(61).TXT
[2012/02/07 07:53:36 | 000,032,594 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU(63).TXT
@Alternate Data Stream - 144 bytes -> C:\ProgramData\Temp:373E1720
:Reg
[HKEY_LOCAL\MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"=-
"iTunesHelper"=-
""=-
[-HKEY_CURRENT_USER\Software\FVDToolbar]
[-HKEY_CURRENT_USER\Software\VIO ;)]
:commands
[emptytemp]
[start explorer]
[reboot]
▶ Clique sur "Correction" pour lancer la suppression.
▶ Poste le rapport qui logiquement s'ouvrira tout seul en fin de travail appres le redemarrage.
- 1
- 2