[Réglé] Pb de "certificat expiré"???

Ask to Old Man · le 24 Aoû 2011 14:27

Bonjour,

Nous nous sommes absentés de chez nous un bon moment et donc avons totalement débranché notre PC fixe...
A notre retour, on le rallume et on constate qu'on ne peut plus accéder à aucun site de messagerie au motif que nous n'avons plus de certificat valide...

Cf : http://www.cijoint.fr/cjlink.php?file=c ... LlfwZ2.jpg

Pourtant, quand je clique sur "view certificate", il est bon jusqu'en 2012...

Il faut savoir qu'en notre absence on a prêté notre appart à des amis d'amis (oui, je sais, il faut pas!), et qu'apparemment ils ont utilisé le PC...
Y a-t-il des risque de piratage??
Si oui, comment faire pour vérifier que l'ordi est pas truffé d'un truc espion??

Merci d'avance de votre aide!!

Jeff

bernard53 · le 24 Aoû 2011 16:56

Bonjour

Le certificat nommé selon ton image est expiré depuis le mois de Mai.
tu ne peux avoir un autre certificat?

tu es sur de valider le bon.

tu peux faire ceci pour vérifier que tout va bien sur ton pc.

Installe Malewarebytes' Antimalware,

http://malwarebytes.org/products/malwarebytes_free

Prends bien la version FREE
*** Met-le à jour puis choisi, Exécuter un examen complet

*** Si une infection est trouvée, coche la case a coté et valides avec l’Onglet Supprimer la sélection

Poste le rapport final.

Puis au besoin en supplément.

* Télécharge >> OTL <<sur ton bureau.

* Fait un double-clic sur l'icône d'OTL pour le lancer
/!\ pour Vista/Seven fais un clic-droit sur l'icône d'OTL et choisis "Exécuter en tant qu'administrateur"

* Assure-toi d'avoir fermé toutes les applications en court de fonctionnement.

* Quand la fenêtre d'OTL apparaît, assure toi que dans la section "Rapport" (en haut à droite) la case "Rapport minimal " soit cochée.

* Copies et colles le contenue de cette citation dans la partie inférieure d'OTL " Personnalisation"

NetSvcs
%systemroot%\system32\drivers\*.sys /lockedfiles
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
netsvcs
/md5start
dwm.exe
taskhost.exe
taskeng.exe
wscntfy.exe
ctfmon.exe
rdpclip.exe
volsnap.sys
sptd.sys
explorer.exe
userinit.exe
winlogon.exe
wininit.exe
tcpip.sys
Sfloppy.sys
Changer.sys
cdrom.sys
disk.sys
ndis.sys
usbscan.sys
usbprint.sys
tdtcp.sys
tdpipe.sys
swmidi.sys
splitter.sys
rdpwd.sys
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
RASACD.SYS
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles

* Cliques sur l'icône "Analyse" (en haut à gauche) .
* Laisse le scan aller à son terme sans te servir du PC
* A la fin du scan un ou deux rapports vont s'ouvrir "OTL.Txt" et ( ou ) "Extras.Txt"( dans certains cas).
* Copie et colle le ou les rapports dans ta réponse stp...
* Au cas où, tu peux les retrouver dans le dossier C:\OTL ou sur ton bureau en fonction des cas rencontrés
Mets le rapport ici car il prend bien de la place.

http://www.cijoint.fr/index.php

jeffoulain · le 25 Aoû 2011 07:29

Bonjour Bernard,

Comment faire pour obtenir un nouveau certificat??? (et qu'est-ce que c'est d'ailleurs??)

En attendant, voilà le rapport Malwarebytes :

Code: Tout sélectionner: Malwarebytes' Anti-Malware 1.51.1.1800 http://www.malwarebytes.org Version de la base de données: 7553 Windows 5.1.2600 Service Pack 3 Internet Explorer 6.0.2900.5512 24/08/2011 22:13:38 mbam-log-2011-08-24 (22-13-28).txt Type d'examen: Examen complet (C:\|) Elément(s) analysé(s): 440889 Temps écoulé: 3 heure(s), 56 minute(s), 1 seconde(s) Processus mémoire infecté(s): 0 Module(s) mémoire infecté(s): 0 Clé(s) du Registre infectée(s): 3 Valeur(s) du Registre infectée(s): 3 Elément(s) de données du Registre infecté(s): 0 Dossier(s) infecté(s): 0 Fichier(s) infecté(s): 5 Processus mémoire infecté(s): (Aucun élément nuisible détecté) Module(s) mémoire infecté(s): (Aucun élément nuisible détecté) Clé(s) du Registre infectée(s): HKEY_CLASSES_ROOT\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402} (PUP.Dealio.TB) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402} (PUP.Dealio.TB) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{B922D405-6D13-4A2B-AE89-08A030DA4402} (PUP.Dealio.TB) -> No action taken. Valeur(s) du Registre infectée(s): HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{B922D405-6D13-4A2B-AE89-08A030DA4402} (PUP.Dealio.TB) -> Value: {B922D405-6D13-4A2B-AE89-08A030DA4402} -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{B922D405-6D13-4A2B-AE89-08A030DA4402} (PUP.Dealio.TB) -> Value: {B922D405-6D13-4A2B-AE89-08A030DA4402} -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\PROGRAM FILES\COMMON FILES\SPIGOT\WTXPCOM\COMPONENTS\WIDGITOOLBARFF.DLL (Adware.WidgiToolbar) -> Value: WIDGITOOLBARFF.DLL -> No action taken. Elément(s) de données du Registre infecté(s): (Aucun élément nuisible détecté) Dossier(s) infecté(s): (Aucun élément nuisible détecté) Fichier(s) infecté(s): c:\program files\pdfforge toolbar\IE\4.4\pdfforgetoolbarie.dll (PUP.Dealio.TB) -> No action taken. c:\program files\common files\Spigot\wtxpcom\components\widgitoolbarff.dll (Adware.WidgiToolbar) -> No action taken. c:\program files\macromedia\macromedia studio 8.0 - keygen.exe (Riskware.Tool.CK) -> No action taken. c:\program files\Quark\quarkxpress 6.0\required components\Patch1.exe (RiskWare.Tool.CK) -> No action taken. c:\program files\Quark\quarkxpress 6.0\required components\Patch2.exe (RiskWare.Tool.CK) -> No action taken

jeffoulain · le 25 Aoû 2011 08:37

Et la suite : les rapports OTL

http://www.cijoint.fr/cjlink.php?file=c ... BahtG7.txt

http://www.cijoint.fr/cjlink.php?file=c ... 1zVMoo.txt

bernard53 · le 25 Aoû 2011 11:46

Ok ceci s.t.p

* Fait un double-clic sur l'icône d'OTL pour le lancer
/!\ pour Vista/Seven fais un clic-droit sur l'icône d'OTL et choisis "Exécuter en tant qu'administrateur"

* Assure-toi d'avoir fermé toutes les applications en court de fonctionnement.

* Quand la fenêtre d'OTL apparaît, assure toi que dans la section "Rapport" (en haut à droite) la case " Rapport minimal" soit cochée.

* Copies et colles le contenue de cette citation dans la partie inférieure d'OTL "Personnalisation"

:OTL
PRC - C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
PRC - C:\Program Files\Application Updater\ApplicationUpdater.exe (Spigot, Inc.)
SRV - (AppMgmt) -- File not found
SRV - (Application Updater) -- C:\Program Files\Application Updater\ApplicationUpdater.exe (Spigot, Inc.)
SRV - (0122951314254153mcinstcleanup) McAfee Application Installer Cleanup (0122951314254153) -- C:\Documents and Settings\sophie\Local Settings\Temp\0122951314254153mcinst.exe (McAfee, Inc.)
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT2542115
IE - HKCU\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSof1.dll (Conduit Ltd.)
FF - prefs.js..browser.search.defaultthis.engineName: "Softonic_France Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2542115&SearchSource=3&q={searchTerms}"
FF - prefs.js..extensions.enabledItems: {4daac69c-cba7-45e2-9bc8-1044483d3352}:3.3.3.2
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Program Files\Viewpoint\Viewpoint Media Player\npViewpoint.dll ()
[2011/04/11 22:34:08 | 000,000,000 | ---D | M] (Softonic_France Community Toolbar) -- C:\Documents and Settings\sophie\Application Data\Mozilla\Firefox\Profiles\mapdk7qj.default\extensions\{4daac69c-cba7-45e2-9bc8-1044483d3352}
[2011/04/11 22:34:08 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\sophie\Application Data\Mozilla\Firefox\Profiles\mapdk7qj.default\extensions\{4daac69c-cba7-45e2-9bc8-1044483d3352}-trash
[2010/03/16 18:11:42 | 000,000,933 | ---- | M] () -- C:\Documents and Settings\sophie\Application Data\Mozilla\Firefox\Profiles\mapdk7qj.default\searchplugins\conduit.xml
[2011/06/06 14:24:16 | 000,000,000 | ---D | M] (Widgi Toolbar Platform) -- C:\PROGRAM FILES\COMMON FILES\SPIGOT\WTXPCOM
[2011/06/06 14:24:17 | 000,000,000 | ---D | M] (pdfforge Toolbar) -- C:\PROGRAM FILES\PDFFORGE TOOLBAR\FF
O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No CLSID value found.
O2 - BHO: (Softonic_France Toolbar) - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSof1.dll (Conduit Ltd.)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Softonic_France Toolbar) - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSof1.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Softonic_France Toolbar) - {4DAAC69C-CBA7-45E2-9BC8-1044483D3352} - C:\Program Files\Softonic_France\tbSof1.dll (Conduit Ltd.)
O4 - HKLM\..\Run: [] File not found
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\$McRebootA5E6DEAA56$.lnk = File not found
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
ActiveX: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} - Viewpoint Media Player
[2011/06/06 14:25:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\pdfforge
[2011/06/06 14:24:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\Search Settings

:Commands
[emptytemp]

[reboot]

* Cliques sur l'icône Correction (en haut à gauche) .
* Laisse le scan aller à son terme sans te servir du PC
* A la fin du scan un rapport s'ouvrir "OTL.log"
* Copie et colle le ou les rapports dans ta réponse stp...
* Au cas où, tu peux les retrouver dans le dossier C:\OTL ou sur ton bureau en fonction des cas rencontrés
Mets le rapport ici car il prend bien de la place.

http://www.cijoint.fr/index.php

Ensuite ceci:

Pour Internet Explorer:
Démarrer IE-->>Outils-->>Options Internet-->>Onglet avancé-->>REINITIALISER

Pour FireFox :
Démarre FireFox --> Outil Options --> Onglet général --> Restaurer la configuration par défaut

Pour Google Chrome:
Outils "clé en haut à droite" --> Options -- > Options avancés --> Rétablir les valeurs par défaut.

Après dis moi si tu as toujours ce soucis de certificat.

jeffoulain · le 25 Aoû 2011 12:50

Bonjour,

Je n'ai plus ce problème de certificat depuyis le passage de Malwarebytes...
Faut-il continuer la procédure?
A priori, je vais le faire, c'est plus sûr...

Merci bcp

Jeff

bernard53 · le 25 Aoû 2011 18:58

Oui continu la procédure car tu as des reste d'intrus.

jeffoulain · le 26 Aoû 2011 10:06

Bonjour,

Ci-joint.com marchant pas :evil:

, je poste le rapport comme ça :

Code: Tout sélectionner: All processes killed ========== OTL ========== No active process named SearchSettings.exe was found! No active process named ApplicationUpdater.exe was found! Error: No service named AppMgmt was found to stop! No service named AppMgmt was found to delete! File File not found not found. Error: No service named Application Updater was found to stop! No service named Application Updater was found to delete! Unable to locate HKLM\Software\OldTimer Tools\OTL key. File move failed. C:\Program Files\Application Updater\ApplicationUpdater.exe scheduled to be moved on reboot. Error: No service named 0122951314254153mcinstcleanup) McAfee Application Installer Cleanup (0122951314254153 was found to stop! No service named 0122951314254153mcinstcleanup) McAfee Application Installer Cleanup (0122951314254153 was found to delete! File C:\Documents and Settings\sophie\Local Settings\Temp\0122951314254153mcinst.exe not found. Unable to set value : HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Bar| /E! Unable to set value : HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Page| /E! Unable to set value : HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E! Registry delete failed. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{08C06D61-F1F3-4799-86F8-BE1A89362C85} scheduled to be deleted on reboot. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{08C06D61-F1F3-4799-86F8-BE1A89362C85}\ not found. Registry delete failed. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{4daac69c-cba7-45e2-9bc8-1044483d3352} scheduled to be deleted on reboot. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4daac69c-cba7-45e2-9bc8-1044483d3352}\ not found. Unable to locate HKLM\Software\OldTimer Tools\OTL key. File move failed. C:\Program Files\Softonic_France\tbSof1.dll scheduled to be moved on reboot. Registry delete failed. HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@viewpoint.com/VMP\ scheduled to be deleted on reboot. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. File move failed. C:\Program Files\Viewpoint\Viewpoint Media Player\npViewpoint.dll scheduled to be moved on reboot. Folder C:\Documents and Settings\sophie\Application Data\Mozilla\Firefox\Profiles\mapdk7qj.default\extensions\{4daac69c-cba7-45e2-9bc8-1044483d3352}\ not found. Folder C:\Documents and Settings\sophie\Application Data\Mozilla\Firefox\Profiles\mapdk7qj.default\extensions\{4daac69c-cba7-45e2-9bc8-1044483d3352}-trash\ not found. File C:\Documents and Settings\sophie\Application Data\Mozilla\Firefox\Profiles\mapdk7qj.default\searchplugins\conduit.xml not found. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Folder move failed. C:\PROGRAM FILES\COMMON FILES\SPIGOT\WTXPCOM\components scheduled to be moved on reboot. Folder move failed. C:\PROGRAM FILES\COMMON FILES\SPIGOT\WTXPCOM scheduled to be moved on reboot. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Folder move failed. C:\PROGRAM FILES\PDFFORGE TOOLBAR\FF\chrome\skin scheduled to be moved on reboot. Folder move failed. C:\PROGRAM FILES\PDFFORGE TOOLBAR\FF\chrome\locale\EN-US scheduled to be moved on reboot. Folder move failed. C:\PROGRAM FILES\PDFFORGE TOOLBAR\FF\chrome\locale scheduled to be moved on reboot. Folder move failed. C:\PROGRAM FILES\PDFFORGE TOOLBAR\FF\chrome\content scheduled to be moved on reboot. Folder move failed. C:\PROGRAM FILES\PDFFORGE TOOLBAR\FF\chrome scheduled to be moved on reboot. Folder move failed. C:\PROGRAM FILES\PDFFORGE TOOLBAR\FF scheduled to be moved on reboot. Registry delete failed. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ scheduled to be deleted on reboot. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ not found. Registry delete failed. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4daac69c-cba7-45e2-9bc8-1044483d3352}\ scheduled to be deleted on reboot. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4daac69c-cba7-45e2-9bc8-1044483d3352}\ not found. Unable to locate HKLM\Software\OldTimer Tools\OTL key. File move failed. C:\Program Files\Softonic_France\tbSof1.dll scheduled to be moved on reboot. Registry delete failed. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}\ scheduled to be deleted on reboot. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7E853D72-626A-48EC-A868-BA8D5E23E045}\ not found. Registry delete failed. HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{4daac69c-cba7-45e2-9bc8-1044483d3352} scheduled to be deleted on reboot. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4daac69c-cba7-45e2-9bc8-1044483d3352}\ not found. Unable to locate HKLM\Software\OldTimer Tools\OTL key. File move failed. C:\Program Files\Softonic_France\tbSof1.dll scheduled to be moved on reboot. Registry delete failed. HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} scheduled to be deleted on reboot. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}\ not found. Registry delete failed. HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4DAAC69C-CBA7-45E2-9BC8-1044483D3352} scheduled to be deleted on reboot. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4DAAC69C-CBA7-45E2-9BC8-1044483D3352}\ not found. Unable to locate HKLM\Software\OldTimer Tools\OTL key. File move failed. C:\Program Files\Softonic_France\tbSof1.dll scheduled to be moved on reboot. Registry key HKEY_LOCAL_MACHINE\\Software\Microsoft\Windows\CurrentVersion\Run not found. Registry key HKEY_LOCAL_MACHINE\\Software\Microsoft\Windows\CurrentVersion\Run not found. Unable to locate HKLM\Software\OldTimer Tools\OTL key. File move failed. C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe scheduled to be moved on reboot. Unable to locate HKLM\Software\OldTimer Tools\OTL key. File move failed. C:\Documents and Settings\All Users\Start Menu\Programs\Startup\$McRebootA5E6DEAA56$.lnk scheduled to be moved on reboot. Starting removal of ActiveX control {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ scheduled to be deleted on reboot. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ not found. Starting removal of ActiveX control {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ scheduled to be deleted on reboot. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found. Starting removal of ActiveX control {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ scheduled to be deleted on reboot. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ not found. File Animation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab not found. Starting removal of ActiveX control DirectAnimation Java Classes Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\DownloadInformation\\INF . Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\DirectAnimation Java Classes\ scheduled to be deleted on reboot. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\DirectAnimation Java Classes\ not found. File oft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab not found. Starting removal of ActiveX control Microsoft XML Parser for Java Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\DownloadInformation\\INF . Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Microsoft XML Parser for Java\ scheduled to be deleted on reboot. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Microsoft XML Parser for Java\ not found. Registry delete failed. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}\ scheduled to be deleted on reboot. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to delete registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}\ . Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}\ not found. Unable to delete registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}\ . Folder C:\Documents and Settings\sophie\Application Data\pdfforge\ not found. Folder C:\Documents and Settings\sophie\Application Data\Search Settings\ not found. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator User: All Users User: Default User ->Temp folder emptied: 0 bytes Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. ->Temporary Internet Files folder emptied: 33170 bytes Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. ->Flash cache emptied: 56468 bytes User: Guest User: LocalService User: NetworkService User: sophie %systemdrive% .tmp files removed: 0 bytes Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. %systemroot% .tmp files removed: 1145933 bytes Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. Unable to locate HKLM\Software\OldTimer Tools\OTL key. %systemroot%\System32 .tmp files removed: 9921041 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 0 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 11,00 mb OTL by OldTimer - Version 3.2.26.5 log created on 08252011_140022

Bonne lecture...

bernard53 · le 26 Aoû 2011 11:37

Très bien comment va ton pc maintenant?

PS je vois ceci dans la rapport de MalwaresBytes No action taken. mais comme tu indiques plus de soucis après son passage je pense que tu as bien validé la suppression. Est ce bien le cas quand même?

jeffoulain · le 26 Aoû 2011 14:10

Oui, j'ai bien validé la suppression...
Mais là, vous me foutez un doute... :-?

Je vais refaire la manip pour être sûr...
Sinon, le PC est OK

bernard53 · le 26 Aoû 2011 16:48

jeffoulain a écrit:Oui, j'ai bien validé la suppression...
Mais là, vous me foutez un doute...
Je vais refaire la manip pour être sûr...
Sinon, le PC est OK

OK refait juste en scan rapide qui va te dire si tu as bien effectué la suppression.
Ensuite puisque tout va bien.

Fait ceci pour supprimer les logiciels qui ont servis à cette désinfection.

Télécharge << DelFix >> de Xplode pour supprimer les logiciels qui ont servis a cette désinfection.

* Lance-le.

* A l'invite, [Suppression] ()

* Un rapport va s'ouvrir à la fin, colle le dans la réponse

Ensuite pour le désinstaller ; tu relances et tu passes à l'option [Désinstallation]

Puis::

Maintenant on va mettre la restauration du système propre.

Cliquez avec le bouton droit sur l'icône Poste de travail, puis cliquez sur Propriétés
ou touche "Windows+Pause"
Cliquez sur l'onglet Restauration du système

Sélectionnez Désactiver la Restauration du système sur tous les lecteurs.

Cliquez sur Appliquer puis OUI dans la fenêtre suivante.

Attendre quelques instants puis :

activer la restauration du système de nouveau. en décochant la case que vous venez de cocher puis valider par Appliquer et OK

Maintenant on crée un nouveau point de restauration.

Démarrer—Exécuter—ou touche "Windows+R" et tapes:

%SystemRoot%\System32\restore\rstrui.exe

Puis coche " Créer un point de restauration" que tu nommes PC- Clean. Valide.

Vous pouvez maintenant fermer toutes les fenêtres.

Bon weekend :wink:

jeffoulain · le 27 Aoû 2011 12:41

Voilà le rapport de l'analyse rapide :

Code: Tout sélectionner: OTL logfile created on: 27/08/2011 13:32:12 - Run 2 OTL by OldTimer - Version 3.2.26.5 Folder = C:\Documents and Settings\sophie\My Documents\Downloads Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy 1,50 Gb Total Physical Memory | 0,86 Gb Available Physical Memory | 57,57% Memory free 2,11 Gb Paging File | 1,68 Gb Available in Paging File | 79,83% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 111,71 Gb Total Space | 69,52 Gb Free Space | 62,23% Space Free | Partition Type: NTFS Computer Name: NOUS | User Name: sophie | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - C:\Documents and Settings\sophie\My Documents\Downloads\OTL.exe (OldTimer Tools) PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.) PRC - C:\Program Files\Application Updater\ApplicationUpdater.exe (Spigot, Inc.) PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software) PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software) PRC - C:\Program Files\CDBurnerXP\NMSAccessU.exe () PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - C:\Program Files\Alwil Software\Avast5\defs\11082700\algo.dll () MOD - C:\Program Files\Alwil Software\Avast5\defs\11082700\aswRep.dll () MOD - C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () MOD - C:\Program Files\Mozilla Firefox\js3250.dll () MOD - C:\Documents and Settings\sophie\Application Data\Mozilla\Firefox\Profiles\mapdk7qj.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll () MOD - C:\Documents and Settings\sophie\Application Data\Mozilla\Firefox\Profiles\mapdk7qj.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbar-ff3.dll () MOD - C:\Program Files\Alwil Software\Avast5\aswDld.dll () MOD - C:\Program Files\CDBurnerXP\NMSAccessU.exe () MOD - C:\WINDOWS\system32\ssp7ml3.dll () MOD - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.FRA () MOD - C:\WINDOWS\system32\pdfcmnnt.dll () [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - (AppMgmt) -- File not found SRV - (Application Updater) -- C:\Program Files\Application Updater\ApplicationUpdater.exe (Spigot, Inc.) SRV - (avast! Antivirus) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software) SRV - (NMSAccess) -- C:\Program Files\CDBurnerXP\NMSAccessU.exe () SRV - (Adobe Version Cue CS4) -- C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe (Adobe Systems Incorporated) SRV - (FLEXnet Licensing Service) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.) SRV - (ATMsrvc) -- C:\WINDOWS\system32\ATMsrvc.exe (Adobe Systems Incorporated) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - (aswSnx) -- C:\WINDOWS\System32\drivers\aswSnx.sys (AVAST Software) DRV - (aswSP) -- C:\WINDOWS\System32\drivers\aswSP.sys (AVAST Software) DRV - (aswTdi) -- C:\WINDOWS\System32\drivers\aswTdi.sys (AVAST Software) DRV - (aswMon2) -- C:\WINDOWS\System32\drivers\aswmon2.sys (AVAST Software) DRV - (aswRdr) -- C:\WINDOWS\System32\drivers\aswRdr.sys (AVAST Software) DRV - (Aavmker4) -- C:\WINDOWS\System32\drivers\aavmker4.sys (AVAST Software) DRV - (aswFsBlk) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys (AVAST Software) DRV - (StarOpen) -- C:\WINDOWS\System32\drivers\StarOpen.sys () DRV - (USB_RNDIS) -- C:\WINDOWS\system32\drivers\usb8023.sys (Microsoft Corporation) DRV - (Cdralw2k) -- C:\WINDOWS\System32\drivers\cdralw2k.sys (Sonic Solutions) DRV - (Cdr4_xp) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys (Sonic Solutions) DRV - (LVUSBSta) -- C:\WINDOWS\system32\drivers\LVUSBSta.sys (Logitech Inc.) DRV - (CamDrL) Logitech QuickCam Pro 3000(CamDrl) -- C:\WINDOWS\system32\drivers\Camdrl.sys (Logitech Inc.) DRV - (UdfReadr_xp) -- C:\WINDOWS\System32\drivers\udfreadr_xp.sys (Roxio) DRV - (pwd_2k) -- C:\WINDOWS\System32\drivers\pwd_2K.sys (Roxio) DRV - (mmc_2K) -- C:\WINDOWS\System32\drivers\Mmc_2k.sys (Roxio) DRV - (dvd_2K) -- C:\WINDOWS\System32\drivers\Dvd_2k.sys (Roxio) DRV - (PCANDIS5) -- C:\WINDOWS\system32\pcandis5.sys (Printing Communications Assoc., Inc. (PCAUSA)) DRV - (SG760_XP) -- C:\WINDOWS\system32\drivers\WlanUZXP.sys (ZyDAS Technology Corporation) DRV - (DgiVecp) -- C:\WINDOWS\system32\drivers\DGIVECP.SYS (DeviceGuys, Inc.) DRV - (PCAMPR5) -- C:\WINDOWS\system32\pcampr5.sys (Printing Communications Assoc., Inc. (PCAUSA)) DRV - (BCMModem) -- C:\WINDOWS\system32\drivers\BCMSM.sys (Broadcom Corporation) DRV - (cdudf_xp) -- C:\WINDOWS\System32\drivers\cdudf_xp.sys (Roxio) DRV - (OMCI) -- C:\WINDOWS\SYSTEM32\DRIVERS\OMCI.SYS (Dell Computer Corporation) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.neuf.fr IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2542115 IE - HKCU\..\URLSearchHook: {08C06D61-F1F3-4799-86F8-BE1A89362C85} - Reg Error: Key error. File not found IE - HKCU\..\URLSearchHook: {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSof1.dll (Conduit Ltd.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.defaultenginename: "Yahoo" FF - prefs.js..browser.search.defaultthis.engineName: "Softonic_France Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2542115&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=827316" FF - prefs.js..browser.search.selectedEngine: "Yahoo" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "http://www.google.fr/" FF - prefs.js..extensions.enabledItems: {4daac69c-cba7-45e2-9bc8-1044483d3352}:3.3.3.2 FF - prefs.js..extensions.enabledItems: pdfforge@mybrowserbar.com:4.4 FF - prefs.js..extensions.enabledItems: wtxpcom@mybrowserbar.com:4.4 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.8 FF - prefs.js..keyword.URL: "http://fr.search.yahoo.com/search?ei=utf-8&fr=greentree_ff1&type=827316&p=" FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@bittorrent.com/BitTorrentDNA: C:\Program Files\DNA\plugins\npbtdna.dll (BitTorrent, Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.0.2: C:\Program Files\VideoLAN\VLC\npvlc.dll (the VideoLAN Team) FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Program Files\Viewpoint\Viewpoint Media Player\npViewpoint.dll () FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Documents and Settings\sophie\Application Data\Facebook\npfbplugin_1_0_3.dll ( ) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/06/03 22:24:40 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.17\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/07/05 11:29:54 | 000,000,000 | ---D | M] [2010/11/12 10:18:55 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\sophie\Application Data\Mozilla\Extensions [2010/11/12 10:18:55 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\sophie\Application Data\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2009/06/21 17:32:52 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\sophie\Application Data\Mozilla\Extensions\mozswing@mozswing.org [2011/08/26 11:03:40 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\sophie\Application Data\Mozilla\Firefox\Profiles\mapdk7qj.default\extensions [2011/06/12 11:43:01 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Documents and Settings\sophie\Application Data\Mozilla\Firefox\Profiles\mapdk7qj.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2011/04/11 22:34:08 | 000,000,000 | ---D | M] (Softonic_France Community Toolbar) -- C:\Documents and Settings\sophie\Application Data\Mozilla\Firefox\Profiles\mapdk7qj.default\extensions\{4daac69c-cba7-45e2-9bc8-1044483d3352} [2011/04/11 22:34:08 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\sophie\Application Data\Mozilla\Firefox\Profiles\mapdk7qj.default\extensions\{4daac69c-cba7-45e2-9bc8-1044483d3352}-trash [2011/06/12 13:52:56 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\sophie\Application Data\Mozilla\Firefox\Profiles\mapdk7qj.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010/03/16 18:11:42 | 000,000,933 | ---- | M] () -- C:\Documents and Settings\sophie\Application Data\Mozilla\Firefox\Profiles\mapdk7qj.default\searchplugins\conduit.xml [2009/11/27 18:42:48 | 000,001,037 | ---- | M] () -- C:\Documents and Settings\sophie\Application Data\Mozilla\Firefox\Profiles\mapdk7qj.default\searchplugins\wikipedia-fr.xml [2011/08/26 11:03:40 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2006/06/27 18:31:17 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2011/06/06 14:24:16 | 000,000,000 | ---D | M] (Widgi Toolbar Platform) -- C:\PROGRAM FILES\COMMON FILES\SPIGOT\WTXPCOM [2011/06/06 14:24:17 | 000,000,000 | ---D | M] (pdfforge Toolbar) -- C:\PROGRAM FILES\PDFFORGE TOOLBAR\FF [2006/11/19 21:38:48 | 003,654,656 | ---- | M] () -- C:\Program Files\mozilla firefox\plugins\libvlc.dll [2011/06/03 22:24:30 | 000,001,538 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-en-GB.xml [2011/06/03 22:24:30 | 000,000,947 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\chambers-en-GB.xml [2011/06/03 22:24:30 | 000,000,769 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-en-GB.xml [2011/08/24 20:30:55 | 000,001,952 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\McSiteAdvisor.xml [2011/06/03 22:24:30 | 000,001,135 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-en-GB.xml O1 HOSTS File: ([2009/09/24 19:24:04 | 000,335,225 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 www.1-2005-search.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 11488 more lines... O2 - BHO: (ContributeBHO Class) - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll () O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No CLSID value found. O2 - BHO: (Softonic_France Toolbar) - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSof1.dll (Conduit Ltd.) O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found. O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (Softonic_France Toolbar) - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSof1.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Contribute Toolbar) - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll () O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O3 - HKCU\..\Toolbar\WebBrowser: (Softonic_France Toolbar) - {4DAAC69C-CBA7-45E2-9BC8-1044483D3352} - C:\Program Files\Softonic_France\tbSof1.dll (Conduit Ltd.) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [SearchSettings] C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Ajouter à un fichier PDF existant - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Ajouter la cible du lien à un fichier PDF existant - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Convertir au format Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O8 - Extra context menu item: Convertir la cible du lien au format Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O15 - HKCU\..Trusted Domains: ([]msn in My Computer) O15 - HKCU\..Trusted Domains: mappy.com ([]http in Trusted sites) O15 - HKCU\..Trusted Domains: orange.fr ([]http in Trusted sites) O15 - HKCU\..Trusted Domains: voila.fr ([rw.search.ke] http in Trusted sites) O15 - HKCU\..Trusted Domains: weborama.fr ([orange] http in Trusted sites) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.) O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - CLSID or File not found. O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006/06/27 03:45:54 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{0a06923a-9101-11e0-a029-0007e9670a16}\Shell - "" = AutoRun O33 - MountPoints2\{0a06923a-9101-11e0-a029-0007e9670a16}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{0a06923a-9101-11e0-a029-0007e9670a16}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a O33 - MountPoints2\{7b2eeafc-238d-11df-9ea8-0060b3de10c6}\Shell - "" = AutoRun O33 - MountPoints2\{7b2eeafc-238d-11df-9ea8-0060b3de10c6}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{7b2eeafc-238d-11df-9ea8-0060b3de10c6}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a O33 - MountPoints2\{c12b2494-66fe-11de-9d55-0060b3de10c6}\Shell - "" = AutoRun O33 - MountPoints2\{c12b2494-66fe-11de-9d55-0060b3de10c6}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{c12b2494-66fe-11de-9d55-0060b3de10c6}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a O33 - MountPoints2\{c12b2495-66fe-11de-9d55-0060b3de10c6}\Shell\AutoRun\command - "" = G:\ws.exe O33 - MountPoints2\{c12b2495-66fe-11de-9d55-0060b3de10c6}\Shell\open\Command - "" = G:\ws.exe O33 - MountPoints2\F\Shell - "" = AutoRun O33 - MountPoints2\F\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011/08/25 14:00:22 | 000,000,000 | ---D | C] -- C:\_OTL [2011/08/25 11:44:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\sophie\Start Menu\Programs\µTorrent [2011/08/25 11:44:41 | 000,000,000 | ---D | C] -- C:\Program Files\uTorrent [2011/08/24 18:06:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\sophie\Application Data\Malwarebytes [2011/08/24 18:06:17 | 000,041,272 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2011/08/24 18:06:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware [2011/08/24 18:06:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes [2011/08/24 18:06:13 | 000,022,712 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2011/08/24 18:06:13 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2009/03/30 12:44:50 | 065,238,392 | ---- | C] (AVG Technologies) -- C:\Program Files\avg_free_stf_eu_85_285a1462.exe [2008/07/29 18:13:18 | 013,496,303 | ---- | C] ( ) -- C:\Program Files\EasyPHP-2.0b1-setup.exe [2007/12/22 02:33:50 | 008,184,160 | ---- | C] (Lavalys, Inc. ) -- C:\Program Files\everest-ultimate_everest_ultimate_4.20_francais_12281.exe [2007/06/15 18:08:59 | 014,597,640 | ---- | C] (Goto Software) -- C:\Program Files\SXFR201DOGTC5.EXE [2006/06/28 08:21:25 | 015,272,744 | ---- | C] (Microsoft Corporation) -- C:\Program Files\Install_Messenger_nous.exe [2006/06/28 08:16:59 | 001,001,536 | ---- | C] (Microsoft Corporation) -- C:\Program Files\mmssetup.exe [2006/06/28 03:25:05 | 010,641,672 | ---- | C] (Skype Technologies S.A. ) -- C:\Program Files\SkypeSetup.exe [6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011/08/27 13:23:21 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011/08/27 13:22:45 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011/08/25 13:53:17 | 000,053,248 | ---- | M] () -- C:\Documents and Settings\sophie\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011/08/25 08:21:44 | 003,789,736 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2011/08/24 23:17:43 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2011/08/24 23:16:55 | 000,442,500 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2011/08/24 23:16:55 | 000,069,534 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2011/08/24 18:06:18 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [6 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011/08/24 23:05:06 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK [2011/08/24 18:06:18 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2011/06/06 14:22:33 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll [2010/09/03 17:04:28 | 000,103,424 | ---- | C] () -- C:\WINDOWS\System32\LGUICOM.DLL [2010/07/06 13:03:10 | 000,482,408 | ---- | C] () -- C:\WINDOWS\ssndii.exe [2010/07/06 12:55:38 | 000,026,624 | ---- | C] () -- C:\WINDOWS\System32\ssp7ml3.dll [2010/05/12 13:53:06 | 000,007,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2009/11/05 21:11:05 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2009/11/02 13:54:07 | 000,000,007 | ---- | C] () -- C:\WINDOWS\Swift3DPS.INI [2008/09/29 18:40:01 | 000,000,008 | ---- | C] () -- C:\WINDOWS\phbase.ini [2008/09/29 18:15:56 | 000,086,016 | ---- | C] () -- C:\WINDOWS\OPDIRDEL.exe [2008/09/02 10:51:33 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2008/06/16 08:51:48 | 000,037,027 | ---- | C] () -- C:\WINDOWS\atmoUn.exe [2008/05/23 22:40:49 | 000,001,100 | ---- | C] () -- C:\WINDOWS\System32\d3d8caps.dat [2008/04/15 14:34:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MSDraw.ini [2008/02/28 09:44:08 | 000,000,032 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\ezsid.dat [2007/12/31 11:24:39 | 001,397,248 | ---- | C] () -- C:\Program Files\SetupSketchMaster.exe [2007/12/05 01:41:00 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2007/12/05 01:41:00 | 001,626,112 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe [2007/12/05 01:41:00 | 001,474,560 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2007/12/05 01:41:00 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe [2007/12/05 01:41:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2007/12/05 01:41:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2007/12/05 01:41:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe [2007/12/05 01:41:00 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe [2007/12/05 01:41:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [2007/06/19 18:46:22 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2007/05/21 10:08:32 | 000,081,321 | ---- | C] () -- C:\WINDOWS\SGTBox.INI [2007/05/20 12:18:28 | 000,697,492 | ---- | C] () -- C:\Program Files\uTorrent-1.6.1-install.exe [2007/03/29 16:04:02 | 000,176,215 | ---- | C] () -- C:\Program Files\mg2.zip [2007/02/03 08:59:04 | 000,050,127 | ---- | C] () -- C:\WINDOWS\System32\lvcoinst.ini [2006/10/06 17:07:35 | 000,047,760 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat [2006/09/25 22:50:07 | 000,063,488 | ---- | C] () -- C:\WINDOWS\xobglu16.dll [2006/09/25 22:50:07 | 000,023,552 | ---- | C] () -- C:\WINDOWS\xobglu32.dll [2006/09/22 16:18:48 | 003,534,076 | ---- | C] () -- C:\Program Files\eMule0.47c-Installer.exe [2006/08/28 15:01:24 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2006/08/27 19:16:08 | 000,001,407 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache [2006/08/25 20:14:58 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI [2006/08/14 18:34:37 | 000,118,784 | R--- | C] () -- C:\WINDOWS\bwUnin-7.2.0.157-8876480SL.exe [2006/08/05 18:00:37 | 000,081,920 | R--- | C] () -- C:\WINDOWS\bwUnin-6.1.4.68-8876480L.exe [2006/08/05 17:41:54 | 000,000,528 | ---- | C] () -- C:\WINDOWS\_delis32.ini [2006/08/05 17:22:14 | 000,000,076 | ---- | C] () -- C:\WINDOWS\maxlink.ini [2006/08/05 17:21:19 | 000,000,000 | ---- | C] () -- C:\WINDOWS\OP70.INI [2006/08/05 17:19:52 | 000,001,567 | ---- | C] () -- C:\WINDOWS\pstudio.ini [2006/08/05 17:19:52 | 000,000,011 | ---- | C] () -- C:\WINDOWS\album.ini [2006/08/05 17:17:33 | 000,008,575 | R--- | C] () -- C:\WINDOWS\System32\D125UFW.INI [2006/07/21 11:05:40 | 000,006,550 | ---- | C] () -- C:\WINDOWS\jautoexp.dat [2006/06/29 23:48:04 | 000,053,248 | ---- | C] () -- C:\Documents and Settings\sophie\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2006/06/28 22:40:16 | 000,000,182 | ---- | C] () -- C:\WINDOWS\System32\EBPPORT4.DAT [2006/06/28 22:37:18 | 000,000,032 | ---- | C] () -- C:\WINDOWS\CDESC86Euro.ini [2006/06/28 04:37:59 | 003,789,736 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2006/06/28 03:57:42 | 000,016,384 | ---- | C] () -- C:\WINDOWS\System32\FileOps.exe [2006/06/28 03:10:18 | 000,004,821 | ---- | C] () -- C:\WINDOWS\ATM.INI [2006/06/27 18:31:19 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2006/06/27 18:31:04 | 000,003,055 | ---- | C] () -- C:\WINDOWS\mozver.dat [2006/06/27 18:30:03 | 005,588,688 | ---- | C] () -- C:\Program Files\FirefoxGoogleToolbarSetup.exe [2006/06/27 05:43:32 | 000,001,680 | ---- | C] () -- C:\Program Files\Assistant de configuration ADSL.lnk [2006/06/27 05:43:32 | 000,001,623 | ---- | C] () -- C:\Program Files\Accès Internet ADSL.lnk [2006/06/27 05:40:44 | 000,001,708 | ---- | C] () -- C:\Program Files\Vérifier votre ligne ADSL.lnk [2006/06/27 05:40:44 | 000,001,689 | ---- | C] () -- C:\Program Files\Outil de diagnostics.lnk [2006/06/27 04:57:30 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\e100bmsg.dll [2006/06/27 03:47:51 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2006/06/27 03:43:21 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2006/06/26 15:31:31 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2003/05/07 05:07:31 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System32\BW32000C.DLL [2003/05/07 05:07:31 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System32\BW320007.DLL [2003/05/07 05:07:30 | 000,906,784 | ---- | C] () -- C:\WINDOWS\System32\OWL52F.DLL [2002/09/03 19:17:03 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2002/09/03 19:16:59 | 000,004,594 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2002/09/03 18:52:01 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2002/09/03 18:52:00 | 000,442,500 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2002/09/03 18:51:58 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2002/09/03 18:51:54 | 000,069,534 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2002/09/03 18:49:33 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [2002/09/03 18:41:59 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2002/09/03 18:41:43 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2002/09/03 18:32:10 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2002/09/03 18:30:33 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin [1999/01/27 13:39:06 | 000,065,024 | ---- | C] () -- C:\WINDOWS\System32\indounin.dll [1999/01/22 15:46:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL [1997/06/13 07:56:08 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\Iyvu9_32.dll [color=#E56717]========== LOP Check ==========[/color] [2006/09/06 17:57:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\4D [2010/05/28 10:38:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software [2009/10/22 16:09:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Azureus [2010/05/12 13:53:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Canneverbe Limited [2008/05/20 10:57:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\LogMeIn [2007/05/07 10:39:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Quark [2007/12/31 11:29:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Redfield [2011/01/17 22:37:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SWiSHMax2WorkFolder [2008/06/16 08:51:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint [2009/10/22 19:11:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD} [2011/04/08 00:51:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\Azureus [2007/12/17 23:56:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\BitTorrent [2008/06/17 14:17:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\BitTorrent DNA [2010/05/12 13:53:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\Canneverbe Limited [2010/10/13 13:33:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\Canon [2008/09/04 13:38:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\DNA [2010/06/17 01:08:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\Facebook [2007/06/15 18:10:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\GOTO Software [2006/07/19 12:31:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\Leadertech [2011/06/23 13:41:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\OpenOffice.org [2011/06/06 14:25:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\pdfforge [2003/05/07 03:53:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\PriceGong [2007/05/07 10:48:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\Quark [2011/06/06 14:24:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\Search Settings [2008/03/22 00:04:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\SecondLife [2009/10/22 16:33:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\TeamViewer [2010/09/07 19:35:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\Template [2010/11/12 10:18:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\Thunderbird [2011/08/25 12:50:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\uTorrent [2010/07/10 22:27:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\YouSendIt [2009/11/02 12:26:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\Zaxwerks [color=#E56717]========== Purity Check ==========[/color] < End of report >

Ensuite, j'ai créé le point de restauration

Merci pour tout!!

Jeff

bernard53 · le 27 Aoû 2011 17:07

Désolé de ce contre temps mais petites traces encore qui apparaissent avec ton dernier rapport.
ceci alors s.t.p pour que tu sois tranquille.

* Télécharge >> OTL <<sur ton bureau.
* Fait un double-clic sur l'icône d'OTL pour le lancer
/!\ pour Vista/Seven fais un clic-droit sur l'icône d'OTL et choisis "Exécuter en tant qu'administrateur"

* Assure-toi d'avoir fermé toutes les applications en court de fonctionnement.

* Quand la fenêtre d'OTL apparaît, assure toi que dans la section "Rapport" (en haut à droite) la case " Rapport minimal" soit cochée.

* Copies et colles le contenue de cette citation dans la partie inférieure d'OTL "Personnalisation"

:OTL
PRC - C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
PRC - C:\Program Files\Application Updater\ApplicationUpdater.exe (Spigot, Inc.)
SRV - (Application Updater) -- C:\Program Files\Application Updater\ApplicationUpdater.exe (Spigot, Inc.)
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Program Files\Viewpoint\Viewpoint Media Player\npViewpoint.dll ()
[2011/06/06 14:24:16 | 000,000,000 | ---D | M] (Widgi Toolbar Platform) -- C:\PROGRAM FILES\COMMON FILES\SPIGOT\WTXPCOM
[2011/06/06 14:24:17 | 000,000,000 | ---D | M] (pdfforge Toolbar) -- C:\PROGRAM FILES\PDFFORGE TOOLBAR\FF
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
O33 - MountPoints2\{c12b2495-66fe-11de-9d55-0060b3de10c6}\Shell\AutoRun\command - "" = G:\ws.exe
O33 - MountPoints2\{c12b2495-66fe-11de-9d55-0060b3de10c6}\Shell\open\Command - "" = G:\ws.exe
[2006/08/05 17:41:54 | 000,000,528 | ---- | C] () -- C:\WINDOWS\_delis32.ini
[2008/06/16 08:51:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2011/06/06 14:25:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\pdfforge
[2003/05/07 03:53:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\PriceGong
[2011/06/06 14:24:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\sophie\Application Data\Search Settings

* Cliques sur l'icône Correction (en haut à gauche) .
* Laisse le scan aller à son terme sans te servir du PC
* A la fin du scan un rapport s'ouvrir "OTL.log"
* Copie et colle le ou les rapports dans ta réponse stp...
* Au cas où, tu peux les retrouver dans le dossier C:\OTL ou sur ton bureau en fonction des cas rencontrés

et ceci.

Désactive ton anti Virus avant le scan car il bloque sur la désinfection

Télécharge USBFix depuis ce lien : <<ICI>>

Double cliquez sur "UsbFix.exe" présent sur votre bureau.
L'installation est automatique.

Branche tes lecteurs externes
Valide Suppression

Une fois l'analyse terminée, un rapport de scan vous est proposé...

CTRL+A pour tout sélectionner
CTRL+C pour copier
CTRL+V pour coller dans la réponse

jeffoulain · le 27 Aoû 2011 19:24

Voilà :

========== OTL ==========
Process SearchSettings.exe killed successfully!
Process ApplicationUpdater.exe killed successfully!
Service Application Updater stopped successfully!
Service Application Updater deleted successfully!
C:\Program Files\Application Updater\ApplicationUpdater.exe moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@viewpoint.com/VMP\ deleted successfully.
C:\Program Files\Viewpoint\Viewpoint Media Player\npViewpoint.dll moved successfully.
C:\PROGRAM FILES\COMMON FILES\SPIGOT\WTXPCOM\components folder moved successfully.
C:\PROGRAM FILES\COMMON FILES\SPIGOT\WTXPCOM folder moved successfully.
C:\PROGRAM FILES\PDFFORGE TOOLBAR\FF\chrome\skin folder moved successfully.
C:\PROGRAM FILES\PDFFORGE TOOLBAR\FF\chrome\locale\EN-US folder moved successfully.
C:\PROGRAM FILES\PDFFORGE TOOLBAR\FF\chrome\locale folder moved successfully.
C:\PROGRAM FILES\PDFFORGE TOOLBAR\FF\chrome\content folder moved successfully.
C:\PROGRAM FILES\PDFFORGE TOOLBAR\FF\chrome folder moved successfully.
C:\PROGRAM FILES\PDFFORGE TOOLBAR\FF folder moved successfully.
Registry key HKEY_LOCAL_MACHINE\\Software\Microsoft\Windows\CurrentVersion\Run not found.
C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe moved successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c12b2495-66fe-11de-9d55-0060b3de10c6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c12b2495-66fe-11de-9d55-0060b3de10c6}\ not found.
File G:\ws.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c12b2495-66fe-11de-9d55-0060b3de10c6}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c12b2495-66fe-11de-9d55-0060b3de10c6}\ not found.
File G:\ws.exe not found.
C:\WINDOWS\_delis32.ini moved successfully.
C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Media Player\UserShell\AOL9 folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Media Player\UserShell folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Viewpoint\Viewpoint Media Player folder moved successfully.
C:\Documents and Settings\All Users\Application Data\Viewpoint folder moved successfully.
C:\Documents and Settings\sophie\Application Data\pdfforge\temp folder moved successfully.
C:\Documents and Settings\sophie\Application Data\pdfforge\res folder moved successfully.
C:\Documents and Settings\sophie\Application Data\pdfforge folder moved successfully.
C:\Documents and Settings\sophie\Application Data\PriceGong\Data folder moved successfully.
C:\Documents and Settings\sophie\Application Data\PriceGong folder moved successfully.
C:\Documents and Settings\sophie\Application Data\Search Settings\temp folder moved successfully.
C:\Documents and Settings\sophie\Application Data\Search Settings\res folder moved successfully.
C:\Documents and Settings\sophie\Application Data\Search Settings folder moved successfully.

OTL by OldTimer - Version 3.2.26.6 log created on 08272011_202139

Je passe à Usb Fix

Ciao

jeffoulain · le 28 Aoû 2011 10:49

salut,

Usbfix plante à la fin, on dirait...
Une fois arrivé à 100%, il ne répond plus et je n'ai pas de rapport... :-?

Sinon, tout est OK

[Réglé] Pb de "certificat expiré"???

[Réglé] Pb de "certificat expiré"???

Re: Pb de "certificat expiré"???

Re: Pb de "certificat expiré"???

Re: Pb de "certificat expiré"???

Re: Pb de "certificat expiré"???

Re: Pb de "certificat expiré"???

Re: Pb de "certificat expiré"???

Re: Pb de "certificat expiré"???

Re: Pb de "certificat expiré"???

Re: Pb de "certificat expiré"???

Re: Pb de "certificat expiré"???

Re: Pb de "certificat expiré"???

Re: Pb de "certificat expiré"???

Re: Pb de "certificat expiré"???

Re: Pb de "certificat expiré"???

Sujets similaires

Qui est en ligne