une centaine d'infection

papibraco · le 2 décembre 2010

Bonjour à toutes et tous,

voilà plouf,j'me balance à l'eau..

sujet commencé sur autre forum conseil de venir ici: pour faire court:

-depuis x mois pb mises a jour kb 973688 et 954430 en échec par système et manuel et par téléchargements etc..

-nbrx dysfonctionnements depuis dus ou non:refus instal diverses W live.Quictime.fichier audio impsiible à lire.assistant dépannage non opérationnel à chaque fois incident....7zip HS;;drivers genius non abouti car bloqué sur instal...message erreur tel:0x80070002-0x8002802f-800a0046-etc etc

erreur de script au démarrage,en gros.......

-après de nombreuses manips proposées par le support aide microsoft,dont un exam Malwarebytes disons...très positif...qui suit.l'assis microsoft m'a suggéré une réparation de W7.J'ai une disquette et la marche à suivre mais je flippe grave...ca a l'air simple mais le commercial du magasin d'informatique m'a mis le doute....faut être calé! les drvers et pilotes seront peut être à recharger...etc Bref je sais plus............................!!!!!!!!!!!!!!!!!!!!!!?????????????????

Je suis partant quand même(c'est comme ca qu'on apprend),mais si je plante!!!!

J'aimerais d'une ou plusieurs bonnes ames des avis;;et des conseils

Voici le rapport de l'examMalwarebytes' Anti-Malware 1.46

www.malwarebytes.org

Version de la base de données: 5214

RESOLU

Windows 6.1.7600 (Safe Mode)

Internet Explorer 8.0.7600.16385

29/11/2010 19:31:18

mbam-log-2010-11-29 (19-31-18).txt

Type d'examen: Examen complet (C:\|D:\|)

Elément(s) analysé(s): 417895

Temps écoulé: 1 heure(s), 9 minute(s), 7 seconde(s)

Processus mémoire infecté(s): 0

Module(s) mémoire infecté(s): 0

Clé(s) du Registre infectée(s): 49

Valeur(s) du Registre infectée(s): 2

Elément(s) de données du Registre infecté(s): 1

Dossier(s) infecté(s): 6

Fichier(s) infecté(s): 40

Processus mémoire infecté(s):

(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):

(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):

HKEY_CLASSES_ROOT\AppID\{0d82acd6-a652-4496-a298-2bde705f4227} (Adware.ClickPotato) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\AppID\{7025e484-d4b0-441a-9f0b-69063bd679ce} (Adware.ClickPotato) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\AppID\{8258b35c-05b8-4c0e-9525-9bccc70f8f2d} (Adware.ClickPotato) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\AppID\{a89256ad-ec17-4a83-bef5-4b8bc4f39306} (Adware.ClickPotato) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{2f9ad413-2e0b-4a85-bb2a-cf961238262a} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{8c788aa2-7530-43be-97b7-4d491f13bea3} (Adware.Softomate) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.ShopperReports) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{a7cddcdc-beeb-4685-a062-978f5e07ceee} (Adware.ShopperReports) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.ShopperReports) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.ShopperReports) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{bdea95cf-f0e6-41e0-bd3d-b00f39a4e939} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{a7cddcdc-beeb-4685-a062-978f5e07ceee} (Adware.ShopperReports) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{bdea95cf-f0e6-41e0-bd3d-b00f39a4e939} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{69725738-cd68-4f36-8d02-8c43722ee5da} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\cntntcntr.cntntdic (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\cntntcntr.cntntdic.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\cntntcntr.cntntdisp (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\cntntcntr.cntntdisp.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\coresrv.coreservices (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\coresrv.coreservices.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\coresrv.lfgax (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\coresrv.lfgax.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hbmain.commband (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hbmain.commband.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hbr.hbmain (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hbr.hbmain.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hostie.bho (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hostie.bho.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hostol.mailanim (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hostol.mailanim.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hostol.webmailsend (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hostol.webmailsend.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hotbarax.info (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hotbarax.info.1 (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hotbarax.userprofiles (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hotbarax.userprofiles.1 (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hotbarweather.weathercontroller (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hotbarweather.weathercontroller.1 (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\shopperreports.reporter (Adware.ShopperReports) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\shopperreports.reporter.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\srv.coreservices (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\srv.coreservices.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\toolbar.htmlmenuui (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\toolbar.htmlmenuui.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\toolbar.toolbarctl (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\toolbar.toolbarctl.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\Software\hotbarsa (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\HostOL.MailAnim (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins\HostOL.MailAnim (Adware.Hotbar) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform\srs_it_e879027ebd76595a36a899 (Malware.Trace) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions\hotbar@hotbar.com (Adware.Hotbar) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page (Hijack.Homepage) -> Bad: (http://www.missim.org/) Good: (http://www.Google.com/) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):

C:\ProgramData\2ACA5CC3-0F83-453D-A079-1076FE1A8B65 (Adware.Seekmo) -> Quarantined and deleted successfully.

C:\ProgramData\HotbarSA (Adware.Hotbar) -> Quarantined and deleted successfully.

C:\Users\papibraco\AppData\Roaming\WeatherDPA (Adware.Hotbar) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1 (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotbar (Adware.Hotbar) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):

C:\ProgramData\HotbarSA\HotbarSA.dat (Adware.Hotbar) -> Quarantined and deleted successfully.

C:\ProgramData\HotbarSA\HotbarSAAbout.mht (Adware.Hotbar) -> Quarantined and deleted successfully.

C:\ProgramData\HotbarSA\HotbarSAau.dat (Adware.Hotbar) -> Quarantined and deleted successfully.

C:\ProgramData\HotbarSA\HotbarSAEULA.mht (Adware.Hotbar) -> Quarantined and deleted successfully.

C:\ProgramData\HotbarSA\HotbarSA_hpk.dat (Adware.Hotbar) -> Quarantined and deleted successfully.

C:\ProgramData\HotbarSA\HotbarSA_kyf_update.dat (Adware.Hotbar) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\200901.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\200902.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\200903.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\200904.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\200905.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20090601.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20090602.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20090603.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20090706.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20090714.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20090721.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20090729.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20090805.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20090819.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20090901.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20090921.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20091006.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20091023.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20091104.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20091114.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20091130.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20091218.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20091231.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20100118.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20100130.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20100212.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20100302.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20100323.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\Program Files (x86)\RegistryDoktor 4.1\definitions\20100416.cab (Rogue.RegistryDoktor) -> Quarantined and deleted successfully.

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotbar\About Hotbar.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotbar\Hotbar Customer Support Center.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotbar\Hotbar Games!.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotbar\Hotbar Videos!.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotbar\Reset Cursor.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.

Modifié le 10 décembre 2010 par papibraco

lance_yien · le 3 décembre 2010

Bonjour papibraco,

Très Important!

>>> A faire immédiatement:

En haut de ce message cliquer sur le bouton "Suivre ce sujet", en choisissant "Notification immédiate" => "Soumettre" tu seras avisé en temps réel pour les réponses apportées à ton sujet et de ce fait, ta machine sera nettoyée dans les meilleurs délais.

>>> Que faire durant ce nettoyage, merci de NE PAS utiliser, installer et/ou désinstaller aucun programme à part ceux qui sont proposés à chaque étape ce qui a pour but d'éviter tout problème d'incompatibilité entre les outils.

>>> Que faire à la réception de nouvelles instructions,

Lire la totalité du message.
Télécharger et enregistrer les utilitaires DIRECTEMENT sur le Bureau ou les déplacer (tout de suite après par un clic-droit dessus => "Couper" puis clic-droit sur le Bureau => "Coller".
Certains programmes peuvent créer des problèmes s'ils ne sont pas lancés depuis le Bureau.
Prendre l'habitude de désactiver tous les programmes de protection au début de chaque nouvelle étape et de les réactiver à la fin.
Procéder toujours dans l'ordre donné et demander des clarifications si nécessaire AVANT de commencer.
NE PAS hésiter à commenter et signaler tout changement (en bien ou en mal) dans le comportement de la machine ou par rapport au problème initial.

>>> Comment répondre:

- Cliquer sur le bouton (et non sur car je n'ai pas besoin de relire mes messages précédents).

- Coller le contenu des rapports SANS y ajouter AUCUN formatage de texte (en citation, code, couleur etc...).

Avant de se lancer dans les grandes manipulations:

Tu veux réinstaller Windows?

Tu as Windows7 (64bits)?

As-tu une partition de recouvrement (c'est le cas de la majorité des PC récents)?

a++

papibraco · le 3 décembre 2010

Bonjour lance_yien,

désolé de fiche un peu le souk sur ce forum,mais bon...j'essaie de progresser...

-j'ai pris bonne note des consignes donc si j'ai bien compris à chaque manip je désactive le pare feu widows,et je remets ensuite

et pour les téléchargements d'utilitaires sur le 'bureau' j'ai jamais fait...je pense que c'est juste pour lancer l'application?...

-sinon j'ai un pc asusk72j,ma messagerie c'est incredimail, le système c' est windows 7 en 64 bits.

-j ai un cd récupére au service commercial de mon revendeur-de "recouvrement" je sais pas...Cd ASUS/Driver et Utility Ver 1.0 K72JR/X72JR/A72JR this disc supports Windows 7 32/64-bit

dans la partie inférieure de l'étiquette,on dit eb anglais que ca doit démarrer auto..sinon run setup.exe et j'ai 3 références(sans explication):

N3556 ensuite

15G356407000 et enfin

1535-03V7000

voila pour le cd

-sinon mon pc est récent -février 2010-et m'a été vendu avec le sys et autre déjà pré-installé- et je n'ai pas fait de grosses manip justifiant toutes ces merdouilles....en fait j'ai juste fait confiance..sécurité etc...(il faut quand même que je signale que j'ai 3 gosses -des grands- qui ont utilisé la "b^te avant moi!)

-à la question"tu veux ré-installer windows" c'est juste "réparer"d'àprès le message ass micros....maintenant moins c'est hard mieux c'est!!!

a plus:

lance_yien · le 3 décembre 2010

-j'ai pris bonne note des consignes donc si j'ai bien compris à chaque manip je désactive le pare feu widows,et je remets ensuite

OUI, visiblement tu n'as pas d'antivirus. On verra après!

et pour les téléchargements d'utilitaires sur le 'bureau' j'ai jamais fait...je pense que c'est juste pour lancer l'application?...

Il y un côté pratique et un autre obligé selon les programmes. Comme je l'ai dit certains refuseront carrément.

Si tu ne veux pas changer, tu as juste à les déplacer comme indiqué.

Donc on désinfecte en 1er lieu et on voit après s'il y a des dysfonctionnements qui persistent.

--

Imprimer ces instructions ou les enregistrer dans un fichier texte sur le Bureau pour les consulter facilement à tout moment et télécharger, sur le Bureau:

OTL (par OldTimer) depuis ici ou ici.
Security Check (par screen317) depuis ici ou ici.

>>> ESET Online Scanner: Désactiver antivirus/ parefeu et antispyware et utiliser Internet Explorer pour faire une analyse en ligne ICI.

Cliquer sur le bouton vert ESET Online Scanner button, cocher la case YES, I accept the Terms of Use et cliquer sur Start.
Accepter l'installation de l'ActiveX.
Cocher Scan archives et cliquer Start.
Eset téléchargera la base de données et commencera le scan. Le laisser finir son scan.
Ensuite, cliquer sur "List of found threats"
Cliquer sur "Export to text file..." et sauvegarder les résultats sur le Bureau en le nommant "scan-eset" pour les copier/coller ici.
Cliquer sur le bouton "<< Back" et cocher la case Uninstall application on close pour supprimer ESET Online Scanner de la machine.
Cliquer sur Finish et poster le rapport.

>>> OTL Fermer tout et cliquer-droit sur OTL.exe => "Exécuter en tant qu'Admin".

Copiez/ Collez ces lignes (commençant par netsvcs) dans l'espace sous "Personnalisation":

netsvcs
drivers32

%SYSTEMDRIVE%\*.*

%systemroot%\*. /mp /s

CREATERESTOREPOINT

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

Sans rien changer, cliquer sur le bouton bleu Analyse et laisser faire.

A la fin du scan, 2 rapports seront créés: OTL.txt (qui s'ouvre dans le bloc-note) et Extras.txt (qui sera minimisé dans la Barre des tâches).

Copier/ Coller le contenu de chaque rapport, un seul par message parce qu'ils sont souvent très longs et dépassent la limite autorisée par le forum.

>>> SecurityCheck: Fermer tout et cliquer-droit sur SecurityCheck.exe => "Exécuter en tant qu'Admin".

Appuyer sur une touche comme demandé et suivre les indications.

Note: Si un des programmes de sécurité demande la permission d'accéder à Internet depuis dig.exe, acceptez.

Le Rapport checkup.txt s'ouvre à la fin. Poster son contenu.

Ce rapport ne sera pas enregistré automatiquement. Si vous voulez en garder une copie, cliquez sur "Fichier" => "Enregistrer sous", choisissez un endroit (Bureau par exemple) et cliquez sur "Enregistrer" en bas à droite.

Poster son contenu.

Rapports demandés (un seul par message):

scan-results
OTL.txt
Extras.txt
checkup.txt

papibraco · le 3 décembre 2010

post du scan-eset/results

C:\Program Files\ReviverSoft\Registry Reviver\SetUp_x64.exe a variant of Win32/SlowPCfighter application cleaned by deleting - quarantined

C:\Program Files (x86)\Common Files\Wise Installation Wizard\WIS5158974E2D28401893357694C2974746_10_4_10_2.MSI multiple threats deleted - quarantined

C:\Program Files (x86)\Uniblue\RegistryBooster\Launcher.exe Win32/RegistryBooster application cleaned by deleting - quarantined

C:\Program Files (x86)\Uniblue\RegistryBooster\rbmonitor.exe Win32/RegistryBooster application cleaned by deleting - quarantined

C:\Program Files (x86)\Uniblue\RegistryBooster\rbnotifier.exe Win32/RegistryBooster application cleaned by deleting - quarantined

C:\Program Files (x86)\Uniblue\RegistryBooster\rb_move_serial.exe Win32/RegistryBooster application cleaned by deleting - quarantined

C:\Program Files (x86)\Uniblue\RegistryBooster\rb_track_install.exe Win32/RegistryBooster application cleaned by deleting - quarantined

C:\Program Files (x86)\Uniblue\RegistryBooster\registrybooster.exe Win32/RegistryBooster application cleaned by deleting - quarantined

C:\Program Files (x86)\Uniblue\SpeedUpMyPC\Launcher.exe Win32/SpeedUpMyPC application cleaned by deleting - quarantined

C:\Users\papibraco\AppData\Roaming\OpenCandy\OpenCandy_46139B36F1924B2E80B554A361CE9599\p1v1_PPIRegistryReviver_w.exe a variant of Win32/SlowPCfighter application deleted - quarantined

C:\Users\papibraco\AppData\Roaming\OpenCandy\OpenCandy_46139B36F1924B2E80B554A361CE9599\PPIRegistryReviverSetup.exe a variant of Win32/SlowPCfighter application cleaned by deleting - quarantined

C:\Users\papibraco\AppData\Roaming\Uniblue\RegistryBooster\_temp\ub.exe a variant of Win32/RegistryBooster application deleted - quarantined

D:\PAPIBRACO-PC\Backup Set 2010-11-22 080756\Backup Files 2010-11-22 080756\Backup files 13.zip a variant of Win32/SlowPCfighter application deleted - quarantined

D:\PAPIBRACO-PC\Backup Set 2010-11-22 080756\Backup Files 2010-11-22 080756\Backup files 14.zip a variant of Win32/RegistryBooster application deleted - quarantined

D:\PAPIBRACO-PC\Backup Set 2010-11-22 080756\Backup Files 2010-11-22 080756\Backup files 2.zip a variant of Win32/SlowPCfighter application deleted - quarantined

D:\PAPIBRACO-PC\Backup Set 2010-11-22 080756\Backup Files 2010-11-22 080756\Backup files 9.zip Win32/SpeedUpMyPC application deleted - quarantined

papibraco · le 3 décembre 2010

esnetsvcs

drivers32

% SYSTEMDRIVE% \ *.*

% Systemroot% \ *. / Mp / s

CREATERESTOREPOINT

HKEY_LOCAL_MACHINE \ SOFTWARE \ Policies \ Microsoft \ Windows \ WindowsUpdate \ UA

HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ WindowsUpdate \ Auto Update \ Résultats \ Install | LastSuccessTime / rssai envoi du rapport extras txtnetsvcs

drivers32

% SYSTEMDRIVE% \ *.*

% Systemroot% \ *. / Mp / s

CREATERESTOREPOINT

HKEY_LOCAL_MACHINE \ SOFTWARE \ Policies \ Microsoft \ Windows \ WindowsUpdate \ UA

HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ WindowsUpdate \ Auto Update \ Résultats \ Install | LastSuccessTime / rsOTL Extras logfile created on: 03/12/2010 23:06:02 - Run 1

OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\papibraco\Downloads

64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.7600.16385)

Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy

4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 51,00% Memory free

10,00 Gb Paging File | 8,00 Gb Available in Paging File | 80,00% Paging File free

Paging file location(s): C:\pagefile.sys 5922 5922 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 116,44 Gb Total Space | 76,10 Gb Free Space | 65,36% Space Free | Partition Type: NTFS

Drive D: | 334,67 Gb Total Space | 301,54 Gb Free Space | 90,10% Space Free | Partition Type: NTFS

Computer Name: PAPIBRACO-PC | User Name: papibraco | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.url[@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

.url [@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]

.html [@ = ChromeHTML] -- C:\Users\papibraco\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %* File not found

cmdfile [open] -- "%1" %* File not found

comfile [open] -- "%1" %* File not found

exefile [open] -- "%1" %* File not found

helpfile [open] -- Reg Error: Key error.

htmlfile [edit] -- Reg Error: Key error.

htmlfile [print] -- "C:\Windows\system32\rundll32.exe" "C:\Windows\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)

InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

piffile [open] -- "%1" %* File not found

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1" File not found

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)

scrfile [open] -- "%1" /S File not found

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [edit] -- Reg Error: Key error.

htmlfile [print] -- "C:\Windows\system32\rundll32.exe" "C:\Windows\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)

InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

"AutoUpdateDisableNotify" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

========== Authorized Applications List ==========

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{393ABB00-B641-4B28-9050-1FC9B717D3ED}" = GreenPrint

"0E74EB10C05C955C24243E6D3120CDC972FC5B1D" = Windows Driver Package - Broadcom HIDClass (06/11/2009 6.2.0.9500)

"2AA10AB519DC7432D599A0E860206A7DDCC27764" = Windows Driver Package - Broadcom Bluetooth (07/29/2009 6.1.7100.0)

"ASUS WebStorage" = ASUS WebStorage

"CCleaner" = CCleaner

"Elantech" = ETDWare PS/2-x64 7.0.5.9_WHQL

"F9FD5BBF579A4BFD40D38BE291F731666B27DC28" = Windows Driver Package - Broadcom Bluetooth (07/17/2009 6.2.0.9403)

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

"Microsoft .NET Framework 4 Client Profile FRA Language Pack" = Module linguistique Microsoft .NET Framework 4 Client Profile FRA

"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended

"Microsoft .NET Framework 4 Extended FRA Language Pack" = Module linguistique Microsoft .NET Framework 4 Extended FRA

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148

"{0498D807-1B6C-4C47-3403-AB78C5205539}" = CCC Help Thai

"{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}" = ASUS AI Recovery

"{075E4ABC-928E-9B1B-D4F1-EAB25E565A33}" = Catalyst Control Center Graphics Full Existing

"{0969AF05-4FF6-4C00-9406-43599238DE0D}" = ASUS Splendid Video Enhancement Technology

"{09BBD84F-CC00-D8E1-5A4F-D37BA1A76A35}" = CCC Help Russian

"{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA}" = Uniblue RegistryBooster

"{10CDCAD1-6F37-5938-89A0-FAFC58B007D3}" = CCC Help Danish

"{121634B0-2F4B-11D3-ADA3-00C04F52DD52}" = Windows Installer Clean Up

"{1485BCD3-1E59-2120-EE0C-3390C5C53B5A}" = CCC Help Chinese Standard

"{159499C8-68C1-C6CB-2682-9D7AD450FDC7}" = CCC Help Japanese

"{17F6FF31-E155-DE44-3745-305A89FE8B80}" = Catalyst Control Center Graphics Previews Vista

"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer

"{189F8DEC-2B05-02AC-C4B9-38411A3825B1}" = CCC Help Portuguese

"{1D03F9DF-FCCE-5114-2787-3FA3568CFC8B}" = CCC Help Polish

"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3

"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

"{2075CB0A-D26F-4DAA-B424-5079296B43BA}" = Windows Live FolderShare

"{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}" = Wireless Console 3

"{2147B890-E62E-5DA7-D15B-C637ED4D2CC3}" = CCC Help Chinese Traditional

"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT

"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer

"{23F9F197-B8CD-BB88-2509-267F083F7062}" = ccc-core-static

"{266517E6-D866-439D-919C-B8B1A52E6080}" = OpenOffice.org 3.2

"{26A24AE4-039D-4CA4-87B4-2F83216020F0}" = Java 6 Update 20

"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java 6 Update 22

"{2C8574B5-6935-4FCE-860E-F4E8602378FF}" = OfferBox

"{32343DB6-9A52-40C9-87E4-5E7C79791C87}" = MSXML 4.0 SP2 and SOAP Toolkit 3.0

"{34562452-1967-951F-28A9-970C86DFA1D7}" = Catalyst Control Center Core Implementation

"{3729070B-F19C-4652-B67D-8D92A7BEF99C}" = PeerTV-2-1-007

"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform

"{3E96F8D0-1414-26C6-AEDB-4447C3109D90}" = CCC Help Spanish

"{400EEB8E-513A-47E6-8170-BFCF6C8A7DCF}_is1" = EasyFlirt Messenger 2.0

"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go

"{4286E640-B5FB-11DF-AC4B-005056C00008}" = Google Earth

"{4634B21A-CC07-4396-890C-2B8168661FEA}" = Windows Live Writer

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{531C00B3-1F6E-64B8-2DA3-D75AA840CA2E}" = Catalyst Control Center Graphics Light

"{53B20C18-D8D4-4588-8737-9BBFE303C354}" = Windows Live Movie Maker

"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3

"{58A6AA51-DA03-4C75-ADE9-7C0D67D77066}" = Internet Explorer

"{5B65EF64-1DFA-414A-8C94-7BB726158E21}" = ControlDeck

"{5BF68530-76F5-429A-B8FB-CDD2B8D13289}" = IMBooster4Web

"{5DD76286-9BE7-4894-A990-E905E91AC818}" = Windows Live Mail

"{5E97F3BD-CDDC-4188-9D98-532E14FABB5D}" = IncrediMail

"{6084C211-01A1-464E-97A0-09772E122B50}" = Moovida

"{6324A1EF-CEF4-43E3-8BCD-9EF3F67317FD}" = NB Probe

"{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS SmartLogon

"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components

"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update

"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin

"{705C1482-BB28-B8DD-D1FB-F76774664308}" = Catalyst Control Center Graphics Previews Common

"{7145C946-B9BA-8101-90EE-08CB1B6F2AB1}" = CCC Help Dutch

"{75AE8014-1184-4BC0-B279-C879540719EE}" = PhotoMail Maker

"{770F1BEC-2871-4E70-B837-FB8525FFA3B1}" = Windows Live Messenger

"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com

"{793A260C-CDBF-499C-ABBA-B51E8E076867}_is1" = Uniblue PowerSuite

"{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}" = Windows Live Call

"{835525BE-63BD-4EC4-9425-00CEAD4849C2}" = Widestream6

"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{8A5EB4E7-7371-519A-735D-AAA9AC9C2792}" = CCC Help Finnish

"{8F21291E-0444-4B1D-B9F9-4370A73E346D}" = WinFlash

"{90024193-9F13-4877-89D5-A1CDF0CBBF28}" = Feedback Tool

"{95120000-0122-040C-0000-0000000FF1CE}" = Microsoft Office Outlook Connector

"{9D48531D-2135-49FC-BC29-ACCDA5396A76}" = ASUS MultiFrame

"{9D6D7811-43B3-463C-BC79-5D1755269989}" = Net4Switch

"{A025CFB8-64E7-4432-824F-11E7C5ED2ECE}_is1" = Artweaver 1.0

"{A4646CC8-905B-4E6D-A094-4C9FB1621042}" = ArcSoft MediaImpression

"{A53DAEB6-72F4-70CF-3C97-33255284B8E8}" = CCC Help Norwegian

"{A8B80045-6EB4-F93A-828F-7038007AA2EA}" = CCC Help Czech

"{A912DA90-FAD5-F4F2-869C-E50BFA584B0B}" = CCC Help Italian

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{AB3C268A-E54B-4F6D-BF97-2DFCEEFA94F5}" = Catalyst Control Center - Branding

"{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}" = ATK Package

"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.1

"{AEBA98E2-FDFB-6669-6994-9C42751675B4}" = Catalyst Control Center Localization All

"{AFB23B2D-21D6-2840-82BB-3C312C85897D}" = CCC Help Korean

"{B131E59D-202C-43C6-84C9-68F0C37541F1}" = Galerie de photos Windows Live

"{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR

"{B61AF6D1-49F9-7776-6BAB-2F3F3CF6BAA9}" = CCC Help Turkish

"{C20AD945-FCB5-D88A-6479-4E90CE196F1E}" = CCC Help German

"{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1" = Uniblue DriverScanner

"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint

"{C78EAC6F-7A73-452E-8134-DBB2165C5A68}" = QuickTime

"{CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}" = Microsoft Search Enhancement Pack

"{DA5A2B93-2A3B-DFCB-FB68-082A3B505758}" = CCC Help Hungarian

"{DC485813-86F2-B1EA-0B57-F199906DCE57}" = CCC Help Greek

"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update

"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio

"{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1" = Uniblue SpeedUpMyPC

"{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}" = ASUS Live Update

"{E7EE9A81-AE31-463D-E416-4D6B10A10E4B}" = CCC Help English

"{EBBBF21F-7E48-9766-5DC6-7D1C29B3B431}" = CCC Help French

"{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera

"{EF445145-5ADF-CF94-40AD-0F2E770BC54D}" = CCC Help Swedish

"{F0DF4513-3C4C-4EB8-8012-2C5F70AF3988}" = ASUS FancyStart

"{F2739D43-F30E-4294-87C1-0F814CCEB9E9}" = Catalyst Control Center InstallProxy

"{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}" = Alcor Micro USB Card Reader

"{F5691B9D-513B-4B07-2A3C-DC65566DE2C1}" = Catalyst Control Center Graphics Full New

"{FA2092C5-7979-412D-A962-6485274AE1EE}" = ASUS Data Security Manager

"7-Zip" = 7-Zip 4.65

"AbiWord2" = AbiWord 2.8.6

"AceMoney Lite_is1" = AceMoney Lite

"Adobe AIR" = Adobe AIR

"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin

"Advanced SystemCare 3_is1" = Advanced SystemCare 3

"aignesamdeadlink_is1" = AM-DeadLink 4.3

"ASUS AP Bank_is1" = ASUS AP Bank

"ASUSUSBDEVIC" = ASUS USB2.0 UVC VGA WebCam

"Audacity 1.3 Beta (Unicode)_is1" = Audacity 1.3.12 (Unicode)

"Avanquest_FR Toolbar" = Avanquest FR Toolbar

"avast5" = avast! Free Antivirus

"Calendrier 2000_is1" = Calendrier Xtra v12.000

"Celtx (2.7)" = Celtx (2.7)

"conduitEngine" = Conduit Engine

"Driver Genius Professional Edition_is1" = Driver Genius Professional Edition

"DVDVideoSoftTB Toolbar" = DVDVideoSoftTB Toolbar

"FotoMorph" = Digital Photo Software FotoMorph 12.4

"Foxit Reader" = Foxit Reader

"Google Desktop" = Google Desktop

"Google Updater" = Outil de mise à jour Google

"IncrediMail" = IncrediMail 2.0

"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go

"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint

"InstallShield_{F4BF5F6B-F695-4762-AEB2-D095A4C34D89}" = Alcor Micro USB Card Reader

"K_Series_ScreenSaver_EN" = K_Series_ScreenSaver_EN

"M6VOD" = Désinstallation du M6 VOD Video Manager

"MeilleurSofts_is1" = MeilleurSofts 1.3

"Moovida" = Moovida

"Mozilla Firefox (3.6.12)" = Mozilla Firefox (3.6.12)

"MyPaint" = MyPaint 0.9.0

"PC Fix 2010_is1" = PCFix

"PC Speed Maximizer_is1" = PC Speed Maximizer v2.0

"Philips Songbird" = Philips Songbird

"PhotoMail" = PhotoMail Maker

"Picasa 3" = Picasa 3

"Radio_Fr" = Radio Fr Solo 2.1

"Radio_France Toolbar" = Radio France Toolbar

"Revo Uninstaller" = Revo Uninstaller 1.89

"Scribus 1.3.3.14" = Scribus 1.3.3.14

"Simple Sudoku_is1" = Simple Sudoku 4.2

"Softonic_France Toolbar" = Softonic_France Toolbar

"Software Informer_is1" = Software Informer 1.0 BETA

"Storybook" = Storybook

"TreeDBNotes Pro 3" = TreeDBNotes Pro 3

"Trojan Remover_is1" = Trojan Remover 6.8.1

"Uniblue RegistryBooster" = Uniblue RegistryBooster

"Uninstall_is1" = Uninstall 1.0.0.1

"UpdateMeilleurSofts_is1" = UpdateMeilleurSofts 1.3

"yWriter5_is1" = yWriter5

========== HKEY_CURRENT_USER Uninstall List ========== :::::::::::::::::::::::::::::::::::::::::::EUH C EST BON ??

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"Gnumeric" = Gnumeric Spreadsheet 1.9.1-win32-20080625

"Google Chrome" = Google Chrome

"Screenpresso" = Screenpresso

========== Last 10 Event Log Errors ==========

Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!

< End of report >

papibraco · le 3 décembre 2010

nouveau message avec 3eme rapport

OTL logfile created on: 03/12/2010 23:06:02 - Run 1