Rundll

je le ferais ce soir ou demain car je n'ai plus le temps; Merci pour le tien de temps

Bon week-end

Re

Restaure ce PC avant ton passage malheureux de Malwaresbytes.
On regardera cela ensuite;merci

@+

je vais regarder encore si je le trouve je le supprime et sinon je ferai reparer .

Merci beaucoup ,c'est de ma faute car je fait un peu n'importe quoi avec mon portable et il est vieux.

Aurevoir

je ne trouve pas. Est-ce un virus ?

j'ai trouvé

Regarde dans msconfig si tu vois une trace d'Open Candy

c'est où ?

photofun et televitale
televitale je travaille avec. il fonctionne et j"ai une assistance si il ya un pb
Mme Muir - 7 sept. 2013 à 15:56
moi je cherchais opencandy mais j'ai rien trouvé
Signaler Mme Muir - 7 sept. 2013 à 15:59
je peux supprimer photofuh mais pas televitale

Re

Vérifie dans msconfig

@+

pour rechercher le programme ?

---------------------------
RunDLL
---------------------------
Erreur de chargement de C:\Users\Genevieve\AppData\Roaming\OpenCandy\623818C210594AB0B631004A3830DF95\OCBrowserHelper_1.0.5.112.dll

Le module spécifié est introuvable.

---------------------------
OK
---------------------------

je ne comprends pas la question .

Oui, je n'arrive toujours pas à les enlever, il doit y en avoir une vingtaine sur l'ecran et en bas de l'ecran; j'ai parfois du mal à retrouver les onglets des fenêtres que j'ai ouvertes.

Merci

Re

As tu encore ce message "Rundll " ?

@+

cette fois c'est bon

Rapport de ZHPFix 2013.8.28.2 par Nicolas Coolman, Update du 28/08/2013
Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-07-09-2013-13-58-54.txt
Run by Genevieve at 07/09/2013 13:58:53
High Elevated Privileges : OK
Windows Vista Home Premium Edition, 32-bit (Build 6000)

Corbeille vidée

========== Logiciel(s) ==========
ABSENT Software Key: Complitly_is1
ABSENT Software Key: {A76AA284-E52D-47E6-9E4F-B85DBF8E35C3}
ABSENT Uninstall Process: c:\program files\webplayer setup\unins000.exe
SUPPRIME Google Toolbar for Internet Explorer

========== Processus mémoire ==========
SUPPRIME Memory Process: C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
SUPPRIME Reboot Memory Process: C:\Program Files\Google\Update\GoogleUpdate.exe
SUPPRIME Memory Process: C:\Program Files\Google\Update\GoogleUpdate.exe

========== Clé(s) du Registre ==========
SUPPRIME Key: HKCU\Software\BabSolution
SUPPRIME Key: HKCU\Software\Complitly
SUPPRIME Key: HKCU\Software\OfferBox
SUPPRIME Key: HKCU\Software\e6d7dbe035ba45
SUPPRIME Key: HKLM\Software\Babylon
SUPPRIME Key*: HKLM\Software\DataMngr
SUPPRIME Key: HKLM\Software\Freeze.com
SUPPRIME Key: HKLM\Software\Iminent
SUPPRIME Key: HKLM\Software\OfferBox
SUPPRIME Key: SearchScopes :{1F096B29-E9DA-4D64-8D63-936BE7762CC5}
ABSENT Key: \Software\Classes\Installer\Products\\482AA67AD25E6E74E9F48BD5FBE8533C
ABSENT Key: HKCU\Software\e6d7dbe035ba45
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Complitly_is1
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A76AA284-E52D-47E6-9E4F-B85DBF8E35C3}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{74440C01-075E-4B10-AD97-60834BC4C2A0}_is1
SUPPRIME Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}
ABSENT Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}
SUPPRIME Key: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
SUPPRIME Key: HKLM\Software\Classes\CLSID\{80922ee0-8a76-46ae-95d5-bd3c3fe0708d}
SUPPRIME Key: HKLM\Software\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A76AA284-E52D-47E6-9E4F-B85DBF8E35C3}
SUPPRIME Key: HKLM\Software\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DCE997C8-5920-4c09-99EE-59F46634FE2C}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E2A7BD67-0EAF-497f-B05B-748D7BF3C421}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E2A7BD67-0EAF-497f-B05B-748D7BF3C421}
SUPPRIME Key: HKLM\Software\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
ABSENT Key: HKLM\Software\Google\Chrome\Extensions\defdhglnppeioeflggkmglipcecffkhk
SUPPRIME Key: HKLM\Software\Classes\escort.escrtBtn.1
ABSENT Key: HKLM\Software\Classes\Installer\Features\482AA67AD25E6E74E9F48BD5FBE8533C
ABSENT Key: HKLM\Software\Classes\Installer\Products\482AA67AD25E6E74E9F48BD5FBE8533C
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\482AA67AD25E6E74E9F48BD5FBE8533C
ABSENT Key: HKLM\Software\DataMngr
ABSENT Key: HKLM\Software\freeze.com
ABSENT Key: HKLM\Software\Iminent
ABSENT Key: HKCU\Software\OfferBox
ABSENT Key: HKLM\Software\OfferBox
ABSENT Key: HKCU\Software\Complitly
SUPPRIME Key: HKLM\Software\Classes\Prod.cap
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\464AA55239C100F32AF2D438EDDC0F47
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5652BA3D5FB98AE31B337BF0AF939856
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EB95E1AFCBABE3DB9ECCC669B99494
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC
ABSENT Key: HKCU\Software\BabSolution
ABSENT Key: HKLM\Software\Babylon
SUPPRIME Key: CLSID BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670}
ABSENT Key: CLSID BHO: {AA58ED58-01DD-4d91-8333-CF10577473F7}
ABSENT Key: CLSID BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D}
ABSENT Key: CLSID BHO: {C84D72FE-E17D-4195-BB24-76C02E2E7C4E}
SUPPRIME Key: HKCU\Software\AppDataLow\Software\Yahoo
SUPPRIME Key: HKCU\Software\Softonic
SUPPRIME Key: HKCU\Software\YahooPartnerToolbar
SUPPRIME Key: HKCU\Software\Yahoo
SUPPRIME Key: HKLM\Software\Tarma Installer
SUPPRIME Key: HKLM\Software\Yahoo
ABSENT SearchScopes :{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SUPPRIME Key: SearchScopes :{647DE069-8B86-42F4-98BF-117D950C7550}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4D91-8333-CF10577473F7}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2318C2B1-4965-11d4-9B18-009027A5CD4F}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
SUPPRIME Key: HKLM\Software\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4daac69c-cba7-45e2-9bc8-1044483d3352}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4daac69c-cba7-45e2-9bc8-1044483d3352}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
SUPPRIME Key: HKLM\Software\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
SUPPRIME Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
SUPPRIME Key: HKLM\Software\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
SUPPRIME Key: HKLM\Software\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
SUPPRIME Key: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\HssSrv
ABSENT Key: HKCU\Software\Softonic
ABSENT Key: HKLM\Software\Tarma Installer
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta Chrome Toolbar
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
SUPPRIME Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
ABSENT Key: HKCU\Software\AppDataLow\Software\Yahoo
ABSENT Key: HKCU\Software\YahooPartnerToolbar
ABSENT Key: HKCU\Software\Yahoo
ABSENT Key: HKLM\Software\Yahoo

========== Valeur(s) du Registre ==========
ProxyFix : Configuration proxy supprimée avec succès
SUPPRIME ProxyServer Value
SUPPRIME ProxyEnable Value
SUPPRIME EnableHttp1_1 Value
SUPPRIME ProxyHttp1.1 Value
SUPPRIME ProxyOverride Value
ABSENT R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer
SUPPRIME Toolbar: {98889811-442D-49dd-99D7-DC866BE87DBC}
SUPPRIME RunValue: VeohPlugin
ABSENT RunValue: VeohPlugin
SUPPRIME {E56F6958-20A0-44FD-8F6B-5C22F7CDF08C}
SUPPRIME {9C277D80-3EC3-4522-80FE-74A933DE827B}
SUPPRIME TCP Query User{6C8B3263-E2CB-4319-9CA6-B6AF7344BF3F}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe
SUPPRIME UDP Query User{BC6D1681-B316-4BC7-BD1D-016DD1B09A6D}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe
ABSENT [HKCU\Software\e6d7dbe035ba45\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.5.911.18]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
ABSENT [HKCU\Software\e6d7dbe035ba45\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.5.911.18]:version="2.5.911.18"
ABSENT [HKCU\Software\e6d7dbe035ba45\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.5.976.107]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
ABSENT [HKCU\Software\e6d7dbe035ba45\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.5.976.107]:version="2.5.976.107"
ABSENT [HKCU\Software\e6d7dbe035ba45\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1123.78]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
ABSENT [HKCU\Software\e6d7dbe035ba45\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1123.78]:version="2.6.1123.78"
ABSENT [HKCU\Software\e6d7dbe035ba45\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
ABSENT [HKCU\Software\e6d7dbe035ba45\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:version="2.6.1125.80"
ABSENT [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:VeohPlugin
ABSENT Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F}
SUPPRIME Toolbar: {D4027C7F-154A-4066-A1AD-4243D8127440}
ABSENT [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F}
ABSENT [HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{D4027C7F-154A-4066-A1AD-4243D8127440}
ABSENT Valeur Standard Profile: FirewallRaz :
ABSENT Valeur Domain Profile: FirewallRaz :

========== Elément(s) de donnée du Registre ==========
SUPPRIME R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride

========== Préférences navigateur ==========
PRESENT Chrome File: C:\Users\Genevieve\AppData\Local\Google\Chrome\User Data\Default\Preferences
SUPPRIME Chrome Site: http://search.babylon.com
SUPPRIME Chrome Site: http://search.babylon.com
PRESENT Chrome File: C:\Users\Genevieve\AppData\Local\Google\Chrome\User Data\Default\Preferences
ABSENT Chrome Site: http://search.babylon.com
PRESENT Chrome File: C:\Users\Genevieve\AppData\Local\Google\Chrome\User Data\Default\Preferences
SUPPRIME Chrome Site: http://www.delta-search.com
SUPPRIME Chrome Site: http://www.delta-search.com
SUPPRIME Chrome Site: http://www.delta-search.com

========== Dossier(s) ==========
Aucun dossiers CLSID Local utilisateur vide

========== Fichier(s) ==========
SUPPRIME File***: c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe
ABSENT File: c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe
SUPPRIME File: c:\windows\prefetch\babmaint.exe-2d123efd.pf
ABSENT Folder/File: c:\windows\installer\1fda2a.msi
ABSENT Folder/File: c:\program files\complitly
ABSENT Folder/File: c:\program files\fluendo
ABSENT Folder/File: c:\program files\webplayer setup
ABSENT Folder/File: c:\programdata\babylon
ABSENT Folder/File: c:\users\genevieve\appdata\roaming\complitly
ABSENT Folder/File: c:\users\genevieve\appdata\roaming\moovida-1
ABSENT Folder/File: c:\users\genevieve\appdata\roaming\offerbox
ABSENT Folder/File: c:\users\genevieve\appdata\local\moovida air
ABSENT Folder/File: c:\program files\software
ABSENT Folder/File: c:\programdata\software
ABSENT Folder/File: c:\users\genevieve\appdata\local\software
SUPPRIME File: C:\Users\Genevieve\AppData\Roaming\Mozilla\Firefox\Profiles\7imnte6b.default-1353959449773\bprotector_extensions.sqlite
SUPPRIME File*: c:\users\genevieve\appdata\roaming\mozilla\firefox\profiles\7imnte6b.default-1353959449773\bprotector_extensions.sqlite
SUPPRIME File: C:\Users\Genevieve\AppData\Roaming\Mozilla\Firefox\Profiles\otqzr9ej.default\bprotector_extensions.sqlite
SUPPRIME File: C:\Users\Genevieve\AppData\Roaming\Mozilla\Firefox\Profiles\q50k6vt1.default-1354302675173\bprotector_extensions.sqlite
SUPPRIME File*: c:\users\genevieve\appdata\roaming\mozilla\firefox\profiles\q50k6vt1.default-1354302675173\bprotector_extensions.sqlite
ABSENT Folder/File: c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe
ABSENT Folder/File: c:\windows\prefetch\babmaint.exe-2d123efd.pf
ABSENT Folder/File: c:\documents and settings\cata\my documents\my received files\icon.ico
ABSENT Folder/File: c:\users\genevieve\appdata\roaming\mozilla\firefox\profiles\7imnte6b.default-1353959449773\prefs.js (.not file.)
ABSENT Folder/File: c:\users\genevieve\appdata\roaming\mozilla\firefox\profiles\otqzr9ej.default\prefs.js (.not file.)
ABSENT Folder/File: c:\users\genevieve\appdata\roaming\mozilla\firefox\profiles\q50k6vt1.default-1354302675173\prefs.js (.not file.)
ABSENT Folder/File: c:\users\genevieve\appdata\roaming\mozilla\firefox\profiles\x8gj8ou6.default-1355685148031\prefs.js (.not file.)
SUPPRIME File***: c:\program files\google\update\googleupdate.exe
ABSENT File: c:\program files\google\google toolbar\googletoolbar.dll
ABSENT File: c:\program files\google\googletoolbarnotifier\5.6.5612.1312\swg.dll
ABSENT File: c:\program files\google\google toolbar\component\fastsearch_219b3e1547538286.dll
SUPPRIME File: c:\windows\prefetch\googletoolbarnotifier.exe-eb3f2433.pf
ABSENT Folder/File: c:\program files\yahoo!
ABSENT Folder/File: c:\users\genevieve\appdata\roaming\yahoo!
ABSENT Folder/File: c:\program files\google\google toolbar\googletoolbar.dll
ABSENT Folder/File: c:\program files\google\googletoolbarnotifier\5.6.5612.1312\swg.dll
ABSENT Folder/File: c:\program files\google\google toolbar\component\fastsearch_219b3e1547538286.dll
SUPPRIME Temporaires Windows

========== Tache planifiée ==========
SUPPRIME Task: EPUpdater
ABSENT Task: RunAsStdUser Task
SUPPRIME Task: GoogleUpdateTaskMachineCore
SUPPRIME Task: GoogleUpdateTaskMachineUA

========== Récapitulatif ==========
3 : Processus mémoire
88 : Clé(s) du Registre
29 : Valeur(s) du Registre
1 : Elément(s) de donnée du Registre
1 : Dossier(s)
38 : Fichier(s)
4 : Logiciel(s)
9 : Préférences navigateur
4 : Tache planifiée

End of clean in 45mn 45s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 07/09/2013 13:58:53 [14820]

Merci

gros plantage ZHPfix, message: tâches planifiées 039 in overflow (5999) please contact Nicolas Coolman.

ensuite j'ai du desinstaller et re demarrer . je vais recommencer

Re

Utilisation de l'outil ZHPFix :

* Copie tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C )
-------------------------------------------------------------------------------------------------


ProxyFix
[MD5.908E2E3098FD593DAD3946DA30691886] - (.Veoh Networks - Veoh Web Player Beta.) -- C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe [3572984] [PID.4800]
G0 - GCSP: Preference [User Data\Default][HomePage] http://search.babylon.com
G0 - GCSP: Preference [User Data\Default] http://search.babylon.com
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>127.0.0.1;localhost;10.*;192.168.*;127.0.0.1:895;127.0.0.1:896
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:8555;https=127.0.0.1:8555
O3 - Toolbar: (no name) - [HKLM]{98889811-442D-49dd-99D7-DC866BE87DBC} Clé orpheline
O4 - HKCU\..\Run: [VeohPlugin] . (.Veoh Networks - Veoh Web Player Beta.) -- C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
O4 - HKUS\S-1-5-21-3363427574-1484145528-1965103460-1000\..\Run: [VeohPlugin] . (.Veoh Networks - Veoh Web Player Beta.) -- C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
[MD5.00000000000000000000000000000000] [APT] [EPUpdater] (...) -- C:\Users\Genevieve\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [RunAsStdUser Task] (...) -- C:\Program Files\HBLite\bin\11.0.384.0\HBLiteSA.exe (.not file.) [0]
O42 - Logiciel: Complitly - (...) [HKLM] -- Complitly_is1
O42 - Logiciel: IMinent Toolbar - (.IMinent.) [HKLM] -- {A76AA284-E52D-47E6-9E4F-B85DBF8E35C3}
O42 - Logiciel: Webplayer setup version 1.0 - (...) [HKLM] -- {74440C01-075E-4B10-AD97-60834BC4C2A0}_is1
[HKCU\Software\BabSolution]
[HKCU\Software\Complitly]
[HKCU\Software\OfferBox]
[HKCU\Software\e6d7dbe035ba45]
[HKLM\Software\Babylon]
[HKLM\Software\DataMngr]
[HKLM\Software\Freeze.com]
[HKLM\Software\Iminent]
[HKLM\Software\OfferBox]
O43 - CFD: 10/09/2011 - 07:43:32 - [0,749] ----D C:\Program Files\Complitly
O43 - CFD: 10/10/2010 - 16:39:36 - [0] ----D C:\Program Files\Fluendo
O43 - CFD: 27/11/2012 - 02:01:12 - [0] ----D C:\Program Files\Software
O43 - CFD: 10/08/2013 - 11:39:23 - [10,607] ----D C:\Program Files\Webplayer setup
O43 - CFD: 25/11/2012 - 22:39:38 - [0] ----D C:\ProgramData\Babylon
O43 - CFD: 27/11/2012 - 02:01:12 - [0] ----D C:\ProgramData\Software
O43 - CFD: 10/09/2011 - 07:43:32 - [0,467] ----D C:\Users\Genevieve\AppData\Roaming\Complitly
O43 - CFD: 10/10/2010 - 16:24:59 - [0,545] ----D C:\Users\Genevieve\AppData\Roaming\moovida-1
O43 - CFD: 10/09/2011 - 07:52:54 - [0,000] ----D C:\Users\Genevieve\AppData\Roaming\OfferBox
O43 - CFD: 10/10/2010 - 16:35:39 - [0,124] ----D C:\Users\Genevieve\AppData\Local\moovida Air
O43 - CFD: 26/11/2012 - 23:51:11 - [0] ----D C:\Users\Genevieve\AppData\Local\Software
O45 - LFCP:[MD5.9FF8D1A894BFF4AF81957C0D2910B116] - 09/08/2013 - 16:53:42 ---A- - C:\Windows\Prefetch\BABMAINT.EXE-2D123EFD.pf
O69 - SBI: SearchScopes [HKCU] {1F096B29-E9DA-4D64-8D63-936BE7762CC5} - (Search the web (Babylon)) - http://search.babylon.com
O87 - FAEL: "{E56F6958-20A0-44FD-8F6B-5C22F7CDF08C}" | In - Private - P6 - TRUE | .(.Veoh Networks - Veoh Web Player Beta.) -- C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
O87 - FAEL: "{9C277D80-3EC3-4522-80FE-74A933DE827B}" | In - Private - P17 - TRUE | .(.Veoh Networks - Veoh Web Player Beta.) -- C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
O87 - FAEL: "TCP Query User{6C8B3263-E2CB-4319-9CA6-B6AF7344BF3F}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe" | In - Public - P6 - TRUE | .(.Veoh Networks.) -- C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe
O87 - FAEL: "UDP Query User{BC6D1681-B316-4BC7-BD1D-016DD1B09A6D}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe" | In - Public - P17 - TRUE | .(.Veoh Networks.) -- C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe
O90 - PUC: "482AA67AD25E6E74E9F48BD5FBE8533C" . (.IMinent Toolbar.) -- C:\Documents and Settings\CATA\My Documents\My Received Files\icon.ico
[HKCU\Software\e6d7dbe035ba45\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.5.911.18]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
[HKCU\Software\e6d7dbe035ba45\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.5.911.18]:version="2.5.911.18"
[HKCU\Software\e6d7dbe035ba45\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.5.976.107]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
[HKCU\Software\e6d7dbe035ba45\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.5.976.107]:version="2.5.976.107"
[HKCU\Software\e6d7dbe035ba45\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1123.78]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
[HKCU\Software\e6d7dbe035ba45\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1123.78]:version="2.6.1123.78"
[HKCU\Software\e6d7dbe035ba45\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
[HKCU\Software\e6d7dbe035ba45\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1125.80]:version="2.6.1125.80"
[HKCU\Software\e6d7dbe035ba45]
[MD5.114F09C3778FB60B49C856220531377F] [WIS][16/10/2011] (.IMinent - IMinent Toolbar.) -- C:\Windows\Installer\1fda2a.msi [206336]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Complitly_is1]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A76AA284-E52D-47E6-9E4F-B85DBF8E35C3}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{74440C01-075E-4B10-AD97-60834BC4C2A0}_is1]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}]
[HKLM\Software\Classes\CLSID\{80922ee0-8a76-46ae-95d5-bd3c3fe0708d}]
[HKLM\Software\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A76AA284-E52D-47E6-9E4F-B85DBF8E35C3}]
[HKLM\Software\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DCE997C8-5920-4c09-99EE-59F46634FE2C}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E2A7BD67-0EAF-497f-B05B-748D7BF3C421}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E2A7BD67-0EAF-497f-B05B-748D7BF3C421}]
[HKLM\Software\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}]
[HKLM\Software\Google\Chrome\Extensions\defdhglnppeioeflggkmglipcecffkhk]
[HKLM\Software\Classes\escort.escrtBtn.1]
[HKLM\Software\Classes\Installer\Features\482AA67AD25E6E74E9F48BD5FBE8533C]
[HKLM\Software\Classes\Installer\Products\482AA67AD25E6E74E9F48BD5FBE8533C]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\482AA67AD25E6E74E9F48BD5FBE8533C]
[HKLM\Software\DataMngr]
[HKLM\Software\freeze.com]
[HKLM\Software\Iminent]
[HKCU\Software\OfferBox]
[HKLM\Software\OfferBox]
[HKCU\Software\Complitly]
[HKLM\Software\Classes\Prod.cap]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\464AA55239C100F32AF2D438EDDC0F47]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5652BA3D5FB98AE31B337BF0AF939856]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EB95E1AFCBABE3DB9ECCC669B99494]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CA0054A5AB3EFFE4CB5660E44A1E7DCC]
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:VeohPlugin
C:\Program Files\Complitly
C:\Program Files\Fluendo
C:\Program Files\Webplayer setup
C:\ProgramData\Babylon
C:\Users\Genevieve\AppData\Roaming\Complitly
C:\Users\Genevieve\AppData\Roaming\moovida-1
C:\Users\Genevieve\AppData\Roaming\OfferBox
C:\Users\Genevieve\AppData\Local\moovida Air
C:\Program Files\Software
C:\Program Files\Mozilla Firefox\Extensions\ffxtlbr@babylon.com
C:\ProgramData\Software
C:\Users\Genevieve\AppData\Local\Software
C:\Users\Genevieve\AppData\LocalLow\BabylonToolbar
C:\Users\Genevieve\AppData\Roaming\Mozilla\Firefox\Profiles\7imnte6b.default-1353959449773\bprotector_extensions.sqlite
C:\Users\Genevieve\AppData\Roaming\Mozilla\Firefox\Profiles\otqzr9ej.default\bprotector_extensions.sqlite
C:\Users\Genevieve\AppData\Roaming\Mozilla\Firefox\Profiles\q50k6vt1.default-1354302675173\bprotector_extensions.sqlite
C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
[HKCU\Software\BabSolution]
[HKLM\Software\Babylon]
[HKLM\Software\Freeze.com]
C:\Windows\Prefetch\BABMAINT.EXE-2D123EFD.pf
C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe
C:\Documents and Settings\CATA\My Documents\My Received Files\icon.ico
[HKCU\Software\e6d7dbe035ba45]
C:\Windows\Installer\1fda2a.msi
C:\Users\Genevieve\AppData\Roaming\Mozilla\Firefox\Profiles\7imnte6b.default-1353959449773\prefs.js (.not file.)
C:\Users\Genevieve\AppData\Roaming\Mozilla\Firefox\Profiles\otqzr9ej.default\prefs.js (.not file.)
C:\Users\Genevieve\AppData\Roaming\Mozilla\Firefox\Profiles\q50k6vt1.default-1354302675173\prefs.js (.not file.)
C:\Users\Genevieve\AppData\Roaming\Mozilla\Firefox\Profiles\x8gj8ou6.default-1355685148031\prefs.js (.not file.)
[MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [133104]
[MD5.626A24ED1228580B9518C01930936DF9] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [133104]
O43 - CFD: 12/05/2013 - 12:17:03 - [3,128] ----D C:\Program Files\Spybot - Search & Destroy
O43 - CFD: 04/09/2011 - 08:54:51 - [0] ----D C:\ProgramData\boost_interprocess
O43 - CFD: 12/05/2013 - 12:17:03 - [0,003] ----D C:\ProgramData\Spybot - Search & Destroy
O43 - CFD: 28/11/2012 - 09:34:12 - [0] ----D C:\ProgramData\?5?50
O43 - CFD: 27/11/2012 - 08:59:35 - [0] ----D C:\ProgramData\?ï?ï0
O43 - CFD: 27/11/2012 - 01:03:43 - [0] ----D C:\ProgramData\?l?l0
O43 - CFD: 26/11/2012 - 21:08:47 - [0] ----D C:\ProgramData\?T?T0
O43 - CFD: 28/11/2012 - 18:13:30 - [0] ----D C:\ProgramData\?z?z0
O43 - CFD: 28/11/2012 - 23:20:42 - [0] ----D C:\ProgramData\?z?z
G1 - GCS: Preference [User Data\Default] http://www.delta-search.com
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} Clé orpheline
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} . (...) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} . (.Google Inc. - Fast Search.) -- C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O3 - Toolbar: &Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (...) -- C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{D4027C7F-154A-4066-A1AD-4243D8127440} Clé orpheline
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
[HKCU\Software\AppDataLow\Software\Yahoo]
[HKCU\Software\Softonic]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\Yahoo]
[HKLM\Software\Tarma Installer]
[HKLM\Software\Yahoo]
O43 - CFD: 09/05/2013 - 20:45:21 - [0,019] ----D C:\Program Files\AVG SafeGuard toolbar
O43 - CFD: 08/08/2009 - 23:47:54 - [0] ----D C:\Program Files\Yahoo!
O43 - CFD: 25/11/2012 - 00:43:19 - [0] ----D C:\ProgramData\Ask
O43 - CFD: 22/02/2009 - 16:17:13 - [0] ----D C:\Users\Genevieve\AppData\Roaming\Yahoo!
O45 - LFCP:[MD5.284E828B0181F514FB026EBB5E9BFBEB] - 07/09/2013 - 06:52:43 ---A- - C:\Windows\Prefetch\GOOGLETOOLBARNOTIFIER.EXE-EB3F2433.pf
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Delta Search) - http://www.delta-search.com
O69 - SBI: SearchScopes [HKCU] {647DE069-8B86-42F4-98BF-117D950C7550} - (Ask Search) - http://www.search.ask.com/?o=10148&l=dis
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4D91-8333-CF10577473F7}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2318C2B1-4965-11d4-9B18-009027A5CD4F}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}]
[HKLM\Software\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}]
[HKLM\Software\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}]
[HKLM\Software\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}]
[HKLM\Software\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\HssSrv]
[HKCU\Software\Softonic]
[HKLM\Software\Tarma Installer]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta Chrome Toolbar]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{2318C2B1-4965-11d4-9B18-009027A5CD4F}
[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{D4027C7F-154A-4066-A1AD-4243D8127440}
C:\Program Files\Yahoo!
C:\Users\Genevieve\AppData\Roaming\Yahoo!
C:\Users\Genevieve\AppData\LocalLow\Toolbar4
C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll
C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
[HKCU\Software\AppDataLow\Software\Yahoo]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\Yahoo]
[HKLM\Software\Yahoo]

FirewallRAZ
Emptytemp
EmptyCLSID


--------------------------------------------------------------------------------------------
* Lance ZHPFix à partir du raccourci sur ton Bureau (si tu es sous Windows Vista ou Windows 7, fais le par un clic-droit --> Exécuter en tant qu'administrateur)

* Clique sur l'icone représentant le presse-papier ("coller le presse-papier")
le script doit automatiquement apparaitre dans ZHPFix, sinon, colle-le (Ctrl+v)
* Clique sur le bouton GO pour lancer le nettoyage
* Copie/colle la totalité du rapport dans ta prochaine réponse.

-> laisse travailler l'outil et ne touche à rien ...

-> S'il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le !

Une fois terminé, un nouveau rapport s'affiche : poste le contenu de ce dernier dans ta prochaine réponse ...

( ce rapport est en outre sauvegardé dans ce dossier C:/ZHP/ZHPFix(R1)

@+

https://forums-fec.be/upload/www/?a=d&i=9186774493

j'ai fait restaurer et ça s'est débloqué! et j'ai le rapport je l'envoi

Re

Sur quel module bloque t'il?
En bas dans la barre de progression

@+