Infection ShopperReports • page 3

[galyfa]

Bonjour voici le rapport fait en mode sans echec :

Code: Tout sélectionner

1. ========================= SEAF 1.0.1.0 - C_XX
2.
3. Commencé à: 11:29:35 le 07/01/2011
4.
5. Valeur(s) recherchée(s):
6. ShopperReports
7.
8. Légende: TC => Date de création, TM => Date de modification, DA => Dernier accès
9.
10. (!) --- Recherche registre
11.
12. ====== Fichier(s) ======
13.
14.
15. "C:\Program Files\ZHPDiag\Liste Spéciale\Adware.ShopperReports.txt" [ ARCHIVE | 2 Ko ]
16. TC: 03/01/2011,00:37:08 | TM: 03/11/2010,11:08:30 | DA: 05/01/2011,00:29:17
17.
18.
19. =========================
20.
21.
22.
23. ====== Entrée(s) du registre ======
24.
25.
26. [HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ShopperReportsSA]
27. DA: 05/01/2011 21:19:25
28.
29. =========================
30.
31. Fin à: 11:33:39 le 07/01/2011
32. 411536 Éléments analysés
33.
34. =========================
35. E.O.F


Par contre, je ne sais pas si c'est lié mais firefox ne marche plus maintenant, quand je le lance un message me dit "firefox a planté...."

[danakil]

Salut!

un message me dit "firefox a planté...."

Relance Firefox et note le message complet > Poste le moi stp!

[galyfa]

Voilà voilà !



Et je ré_installais Firefox ?

[danakil]

Salut!
Ne touche pas FF pour l'instant car nous ne savons toujours pas si cela est dû un bug de la version où à un problème de mise à jour de Windows.

Par contre il semblerait que ton PC soit encore sous domination de certaines infections que je n'avais pas vu lorsque je suis venu assister Jypalou sur ton cas.
Peut-être trouverons nous une piste pour FF au passage.

Fais ceci :
• Télécharge OTL de Old Timer sur ton Bureau.
• Ferme toutes les applications actives sur le PC.
• Double-clique sur l'icône d'OTL présente sur le Bureau pour le lancer.
(Vista et Seven --> Clic droit, "Exécuter en tant qu'Administrateur")

• Coches les cases suivantes:
"Tous les utilisateurs"
"Recherche LOP"
"Recherche Purity".

• Copie et colle la citation ci-dessous dans la fenêtre Personnalisation:

netsvcs
%systemroot%\system32\drivers\*.sys /lockedfiles
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%alluserprofile%\application data\*.
%alluserprofile%\application data\*.exe /s
%appdata%\*.
%appdata%\*.exe /s
%systemdrive%\*.exe
/md5start
explorer.exe
userinit.exe
winlogon.exe
tcpip.sys
Sfloppy.sys
Changer.sys
cdrom.sys
disk.sys
ndis.sys
usbscan.sys
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles

• Clique sur le bouton Analyse (en haut à gauche) .
(Laisse le scan se dérouler sans toucher au PC).

• A la fin du scan un ou deux rapports (documents textes) seront crées et s'ouvriront:
"OTL.txt" et "Extras.Txt"
• Réduit ces deux documents dans la barre des tâches, et ferme la fenêtre de OTL présente.

• Connecte toi ici et copie\colle les contenus des rapports en réponses.
(n'oublie pas d'encadrer tes rapports entre les balises [code][/code])

[galyfa]

Voila :

Code: Tout sélectionner

OTL Extras logfile created on: 08/01/2011 09:37:21 - Run 1
OTL by OldTimer - Version 3.2.20.1     Folder = C:\Documents and Settings\Administrateur\Bureau
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy
 
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 73,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 90,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232,88 Gb Total Space | 96,93 Gb Free Space | 41,62% Space Free | Partition Type: NTFS
 
Computer Name: GALY | User Name: Administrateur | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software)
 
[HKEY_USERS\S-1-5-21-3531259581-388390947-1283473575-500\SOFTWARE\Classes\<extension>]
.html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software)
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
http [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
"FirewallDisableNotify" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
[color=#E56717]========== System Restore Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"48113:TCP" = 48113:TCP:LocalSubNet:Enabled:maconfig_tcp
"48113:UDP" = 48113:UDP:LocalSubNet:Enabled:maconfig_udp
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\BearShare Applications\BearShare\BearShare.exe" = C:\Program Files\BearShare Applications\BearShare\BearShare.exe:*:Enabled:BearShare -- File not found
"C:\Program Files\Lphant Applications\Lphant\Lphant.exe" = C:\Program Files\Lphant Applications\Lphant\Lphant.exe:*:Enabled:Lphant -- File not found
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\LimeWire\LimeWire.exe" = C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire -- (Lime Wire, LLC)
"C:\Program Files\Vuze\Azureus.exe" = C:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus / Vuze -- (Vuze Inc.)
"C:\Program Files\Orange\Connexion Internet Orange\Connectivity\ConnectivityManager.exe" = C:\Program Files\Orange\Connexion Internet Orange\Connectivity\ConnectivityManager.exe:*:enabled:CSS -- (France Telecom SA)
"C:\Program Files\Ares\Ares.exe" = C:\Program Files\Ares\Ares.exe:*:Enabled:Ares p2p for windows -- (Ares Development Group)
"C:\Program Files\TmNationsForever\TmForever.exe" = C:\Program Files\TmNationsForever\TmForever.exe:*:Enabled:TmForever -- ()
"C:\Program Files\Google\Google Earth\client\googleearth.exe" = C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth -- (Google)
"C:\Program Files\Kazaa Lite Resurrection\kazaalite.kpp" = C:\Program Files\Kazaa Lite Resurrection\kazaalite.kpp:*:Enabled:kazaalite -- File not found
"C:\Program Files\Shareaza\Shareaza.exe" = C:\Program Files\Shareaza\Shareaza.exe:*:Enabled:Shareaza -- (Shareaza Development Team)
"C:\Program Files\BearShare Applications\BearShare\BearShare.exe" = C:\Program Files\BearShare Applications\BearShare\BearShare.exe:*:Enabled:BearShare -- File not found
"C:\Program Files\Lphant Applications\Lphant\Lphant.exe" = C:\Program Files\Lphant Applications\Lphant\Lphant.exe:*:Enabled:Lphant -- File not found
"C:\WINDOWS\system32\dplaysvr.exe" = C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper -- (Microsoft Corporation)
"C:\Program Files\Re-volt ok\revolt\revolt.exe" = C:\Program Files\Re-volt ok\revolt\revolt.exe:*:Enabled:revolt -- ()
"C:\Program Files\Microsoft Games\Age of Empires II\age2_x1\AGE2_X1.ICD" = C:\Program Files\Microsoft Games\Age of Empires II\age2_x1\AGE2_X1.ICD:*:Enabled:Age of Empires II Expansion -- (Microsoft Corporation)
"C:\Program Files\Microsoft Games\Age of Empires II\age2_x1\age2_x1.exe" = C:\Program Files\Microsoft Games\Age of Empires II\age2_x1\age2_x1.exe:*:Enabled:Age of Empires II Expansion -- (Microsoft Corporation)
"C:\Program Files\ma-config.com\maconfservice.exe" = C:\Program Files\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice -- (CybelSoft)
"C:\Program Files\Microsoft Games\Age of Empires II\age2_x1.exe" = C:\Program Files\Microsoft Games\Age of Empires II\age2_x1.exe:*:Enabled:Age of Empires II Expansion -- (Microsoft Corporation)
"C:\Program Files\Microsoft Games\Age of Empires II\age2_x1_1.0_1600x900.exe" = C:\Program Files\Microsoft Games\Age of Empires II\age2_x1_1.0_1600x900.exe:*:Enabled:Age of Empires II Expansion -- (Microsoft Corporation)
"C:\Program Files\Opera\opera.exe" = C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software)
 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{006CF4B6-0078-7333-EFDC-7FEF1E03DB4D}" = CCC Help English
"{089DD780-DB3F-4CDB-A0C2-111360247298}" = PC Connectivity Solution
"{09CCDA83-594E-4273-0DAF-C7BF08D48A96}" = CCC Help Dutch
"{0A6FE600-73D5-147B-4E28-3979DF734EB7}" = CCC Help Korean
"{10E1E87C-656C-4D08-86D6-5443D28583BE}" = TrayApp
"{11083C7A-D0D6-4DA4-8C3A-74B8389EC07B}" = ATI Catalyst Registration
"{133742BA-6F46-4D3E-85AF-78631D9AD8B8}" = Installation Windows Live
"{13F00518-807A-4B3A-83B0-A7CD90F3A398}" = MarketResearch
"{1753255A-0AEB-4220-8C75-607B73F0C133}" = Copy
"{18F8A0A7-9C9E-D322-E64B-0779A155C838}" = CCC Help Italian
"{1EBD2C18-069A-4582-BF40-2B506AF6CFAD}" = Envisioneer Express 3.0
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Outil de téléchargement Windows Live
"{22466889-7642-488d-AA0E-F619704CF7AB}" = DeviceDiscovery
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java(TM) 6 Update 18
"{29F1345E-4DD7-487E-80E9-9E43A3ABC253}" = ASUS VGA Driver
"{29FA38B4-0AE4-4D0D-8A51-6165BB990BB0}" = WebReg
"{2ADE2157-7A5E-122C-B51D-EB8A01B15943}" = DeepBurner v1.9.0.228
"{2BCE10B0-6471-47F3-B0E0-963F6A788FAF}" = Micro Application - 9 Dictionnaires Illustrés
"{2CF50667-9DED-1334-4863-03086CC16732}" = CCC Help Hungarian
"{2EE94EAE-1FD9-0DE5-4647-BE366606EE26}" = CCC Help Thai
"{2F28B3C9-2C89-4206-8B33-8ADC9577C49B}" = Scan
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{31FB7B0B-1036-3A10-5D42-16D9988C4AAC}" = CCC Help Japanese
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}" = Firebird SQL Server - MAGIX Edition
"{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{394DEAB5-64F5-60FE-44FD-203EED314DF2}" = ATI AVIVO Codecs
"{3A7FEC22-9888-4DA6-95EB-9B59D2C90DB4}" = Ruban MEDIADICO 9 Dictionnaires Illustrés
"{41B6FBC8-045F-F573-86E8-6E4C52B1F4A1}" = CCC Help Portuguese
"{41C9509F-219E-73DB-6012-480AADB6A677}" = Catalyst Control Center InstallProxy
"{4286E640-B5FB-11DF-AC4B-005056C00008}" = Google Earth
"{445B183D-F4F1-45C8-B9DB-F11355CA657B}" = Windows Live Messenger
"{45A3B1FC-11B6-4292-B1E3-4A0B8DDE5394}" = Hercules Dualpix Chat and Show
"{487B0B9B-DCD4-440D-89A0-A6EDE1A545A3}" = HPSSupply
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{543E938C-BDC4-4933-A612-01293996845F}" = UnloadSupport
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5DD76286-9BE7-4894-A990-E905E91AC818}" = Windows Live Mail
"{5E61BBFC-0424-692B-7C45-14A520AEAB91}" = CCC Help Finnish
"{60414A52-B8AB-9458-4012-97BA8E76A82D}" = CCC Help Chinese Standard
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{67680883-F64E-5A26-809F-3012AA936101}" = ccc-utility
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6AB57823-3580-4CE0-9CF0-072E2A39460C}" = Catalyst Control Center - Branding
"{6C49C669-7E02-402B-D7DB-26665FE0E36E}" = CCC Help Norwegian
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{71B7BBA8-7282-9AF2-218F-B20838AF9A94}" = CCC Help Spanish
"{748D8E3C-648B-E6C3-C471-16AFF37A1755}" = ATI Problem Report Wizard
"{76FFAE68-B6FA-456A-4B4F-1FC3146042F6}" = CCC Help Polish
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{778E2400-C2C4-4797-B82C-E5876619B577}" = DeepRipper v 1.1
"{7A2D5327-7084-4EE0-55AC-A0C70F647269}" = CCC Help Turkish
"{7B57F30C-526E-4D97-256E-1D129E18CD6B}" = ATI Catalyst Install Manager
"{7BB045C3-D5E4-4620-B536-DC11AACD5942}" = Broadcom Management Programs
"{7C7F30F4-94E7-4AA8-8941-90C4A80C68BF}" = NVIDIA nTune
"{7C89BFFB-C43E-F8BE-5561-FAC20FEE0C79}" = Catalyst Control Center Localization All
"{7CCE65BC-F183-E9CF-3B7E-A06B11C878A7}" = CCC Help Chinese Traditional
"{7D8DBB7C-1C55-4950-A107-043C164F379A}" = Altiris Software Virtualization Agent
"{7EA6E8DF-37B3-4533-B1A4-45E490C77537}" = Ma-Config.com
"{824D3839-DAA1-4315-A822-7AE3E620E528}" = VideoToolkit01
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8389382B-53BA-4A87-8854-91E3D80A5AC7}" = HP Photosmart Essential2.01
"{846691E6-73E3-4551-A593-7B7590B26915}" = HydraVision
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A988489-89CF-D83E-2AF6-18963D72958D}" = CCC Help Greek
"{8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}" = The Lord of the Rings FREE Trial
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{90120000-0010-040C-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders  (French) 12
"{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007
"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0015-040C-0000-0000000FF1CE}" = Microsoft Office Access MUI (French) 2007
"{90120000-0015-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-040C-0000-0000000FF1CE}" = Microsoft Office Excel MUI (French) 2007
"{90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-040C-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (French) 2007
"{90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-040C-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (French) 2007
"{90120000-0019-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-040C-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (French) 2007
"{90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-040C-0000-0000000FF1CE}" = Microsoft Office Word MUI (French) 2007
"{90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2007
"{90120000-001F-0401-0000-0000000FF1CE}_PROPLUS_{14809F99-C601-4D4A-9391-F1E8FAA964C5}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007
"{90120000-001F-0413-0000-0000000FF1CE}_PROPLUS_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-040C-0000-0000000FF1CE}" = Module de compatibilité pour Microsoft Office System 2007
"{90120000-002C-040C-0000-0000000FF1CE}" = Microsoft Office Proofing (French) 2007
"{90120000-0044-040C-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (French) 2007
"{90120000-0044-040C-0000-0000000FF1CE}_PROPLUS_{AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-040C-0000-0000000FF1CE}" = Microsoft Office Shared MUI (French) 2007
"{90120000-006E-040C-0000-0000000FF1CE}_PROPLUS_{B165D3C2-40AE-4D39-86F7-E5C87C4264C0}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{9028040C-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional avec FrontPage
"{943A2E93-9557-444F-05CB-2FFDA0A64A73}" = CCC Help Swedish
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95120000-0122-040C-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{9852276B-22B6-139C-3A4D-3992CDD3C5B8}" = CCC Help Russian
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A394342-4A68-4EBA-85A6-55B559F4E700}" = Microsoft .NET Framework 1.1 French Language Pack
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A6B90148-02C5-4fd3-8D7A-EF2386835CB9}" = F4100_Help
"{A6C265BE-E2C1-483e-843D-6B4C1E912AE0}" = F4100
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A93C4E94-1005-489D-BEAA-B873C1AA6CFC}" = HP Help and Support
"{A961C6FD-C583-45F6-A0A4-5E4376C29E41}" = Catalyst Control Center - Branding
"{AB40272D-92AB-4F30-B36B-22EDE16F8FE5}" = HP Update
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1036-7B44-A94000000001}" = Adobe Reader 9.4.1 - Français
"{AEA07F97-9088-497c-8821-0F36BD5DC251}" = HPProductAssistant
"{AF32D385-4CA7-E129-1E02-85287F9CFDFC}" = CCC Help Danish
"{AF7C627C-F354-4FF1-8450-398C806B436E}" = Power IEv3
"{AF7FC1CA-79DF-43c3-90A3-33EFEB9294CE}" = AIO_Scan
"{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR
"{B3B487E7-6171-4376-9074-B28082CEB504}" = Windows Live Call
"{B3C47DF4-FBB3-A45C-BD58-F5494ACE32ED}" = Catalyst Control Center Graphics Previews Common
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B4509BCE-7BAD-4a8c-B1AE-4D0CE7467C42}" = F4100_doccd
"{B4F35A00-24FD-4fb3-BF5E-413D5423434D}" = DJ_AIO_Software_min
"{B4FFA409-B818-BA2C-FEB7-D7E3C8425669}" = CCC Help German
"{BA2F3EBC-FE07-4AB5-B906-14DF2C74C523}" = Age of Empires II - the Conquerors WideScreen Patcher
"{BBFAA659-FC2D-46cc-A8C0-BE0D03560F17}_is1" = UBitMenu FR
"{BCD6CD1A-0DBE-412E-9F25-3B500D1E6BA1}" = SolutionCenter
"{BF5D5101-F2DC-D0F7-F307-F2D684742B3F}" = CCC Help English
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C151CE54-E7EA-4804-854B-F515368B0798}" = AMD Processor Driver
"{C7A8AA10-B632-42F8-9F57-A16FDCE0601E}" = Clock Screen Saver
"{CA50045C-5119-48e7-9BA7-6B317379857A}" = DJ_AIO_Software
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE4A3D0F-D1B0-47D1-BF99-3E957C548D12}" = LogMeIn Hamachi
"{D0E39A1D-0CEE-4D85-B4A2-E3BE990D075E}" = Destination Component
"{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}" = Assistant de connexion Windows Live
"{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1" = Auslogics Disk Defrag
"{DF86B74F-5A1B-FFDB-04BA-C0D71929299E}" = CCC Help Czech
"{E2662C24-B31E-4349-A084-32EB76E8B760}" = BufferChm
"{E4A71A41-BCC8-480a-9E69-0DA29CBA7ECA}" = kikin plugin 2.4
"{E548726E-F4E8-459f-BAB8-45551BC071E9}" = DJ_AIO_ProductContext
"{E9C18EBD-85BE-47D0-AA73-3FEDCC976B04}" = Toolbox
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{F0CFDC72-63D2-4086-A54F-1514494394A0}" = Hercules Dualpix Chat and Show
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F196AC50-7C95-42E1-9947-BDAB18BF3C8C}" = Microsoft .NET Framework 2.0 Language Pack - FRA
"{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}" = 32 Bit HP CIO Components Installer
"{F3CBAB8E-3199-BA92-C174-3AA1C48AEC4C}" = ccc-utility
"{F4915966-7FB3-2220-50F1-71684A14D0DA}" = CCC Help French
"{F72E2DDC-3DB8-4190-A21D-63883D955FE7}" = PSSWCORE
"{F95E71AD-676B-61A3-99AE-948B7802A671}" = Skins
"{FA8A44D7-3E8A-4034-9C4F-088FA6B72BC4}" = HP Deskjet All-In-One Software 9.0
"{FCE1741F-41AC-18C0-32F0-BA401866AFB2}" = ccc-core-static
"{FD8D8B04-BEAD-4A55-AA1D-62D2373E7DEA}" = Status
"{FFD44E90-AEA4-4D25-AF53-5CE2723E88DA}" = MarketingReg
"{ORAHSS}.UninstallSuite" = Connexion Internet Orange
"504244733D18C8F63FF584AEB290E3904E791693" = Package de pilotes Windows - Nokia pccsmcfd  (08/22/2008 7.0.0.0)
"8461-7759-5462-8226" = Vuze
"Abandoned Well_is1" = Abandoned Well
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Adobe SVG Viewer" = Adobe SVG Viewer 3.0
"Age of Empires 2.0" = Microsoft Age of Empires II
"Age of Empires II: The Conquerors Expansion 1.0" = Microsoft Age of Empires II : The Conquerors Expansion
"Alien Stars" = Alien Stars
"Alien Stars_is1" = Alien Stars
"Amimo+_is1" = Amimo+ 4.38
"Angkor_is1" = Angkor
"Ares" = Ares 2.1.2
"Atlantis_is1" = Atlantis version 1.4
"avast5" = avast! Free Antivirus
"AVS Update Manager_is1" = AVS Update Manager 1.0
"Brickshooter Egypt_is1" = Brickshooter Egypt
"CCleaner" = CCleaner
"CD Jaquette" = CD Jaquette 5.0
"Chuzzle Deluxe_is1" = Chuzzle Deluxe
"CloneDVD2" = CloneDVD2
"Color Cubes_is1" = Color Cubes version 3.0
"Cosmic Voyage_is1" = Cosmic Voyage version 3.5
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.53
"Da Vincis Secret_is1" = Da Vincis Secret
"Defraggler" = Defraggler
"Deluxe Snake_is1" = Deluxe Snake version 3.8.1
"Enigma" = Enigma
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"Free Fire Screensaver" = Free Fire Screensaver
"Free Video Converter_is1" = Free Video Converter V 2.9
"Glary Utilities_is1" = Glary Utilities 2.23.0.923
"HP Imaging Device Functions" = HP Imaging Device Functions 9.0
"HP Photosmart Essential" = HP Photosmart Essential 2.01
"HP Solution Center & Imaging Support Tools" = HP Solution Center 9.0
"HPExtendedCapabilities" = HP Customer Participation Program 9.0
"iCF Skin Pack" = iCF Skin Pack
"iColorFolder" = iColorFolder
"ie8" = Windows Internet Explorer 8
"Inca Ball_is1" = Inca Ball
"Inkscape" = Inkscape 0.48.0
"InstallShield_{1EBD2C18-069A-4582-BF40-2B506AF6CFAD}" = Envisioneer Express 3.0
"ioIsland.com Places Bar Tweaker" = ioIsland.com Places Bar Tweaker
"KLiteCodecPack_is1" = K-Lite Codec Pack 6.7.0 (Full)
"Le Pendu_is1" = TomCat Soft : Le Pendu
"L'Histoire de France pour Les Nuls_is1" = L'Histoire de France pour Les Nuls
"LimeWire" = LimeWire 5.6.2
"Live Media" = Todae - Live Media
"LogMeIn Hamachi" = LogMeIn Hamachi
"Luxor 3_is1" = Luxor 3
"Luxor 4 Quest For The Afterlife 1.00" = Luxor 4 Quest For The Afterlife 1.00
"Luxor: Amun Rising" = Luxor: Amun Rising
"MAGIX Films sur DVD TerraTec Edition F" = MAGIX Films sur DVD TerraTec Edition 7.0.3.8 (F)
"MAGIX Screenshare F" = MAGIX Screenshare
"MailNotifier" = Notification Mail
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1  (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 2.0 Language Pack - FRA" = Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mini Golf Pro_is1" = Mini Golf Pro 1.1
"Mozilla Firefox (2.0.0.15)" = Mozilla Firefox (2.0.0.15)
"Mozilla Firefox (3.5.16)" = Mozilla Firefox (3.5.16)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MyDefrag v4.2.6_is1" = MyDefrag v4.2.6
"Opera 11.00.1156" = Opera 11.00
"Orange WebTV Player_is1" = Orange WebTV Player 1.29418
"Pack Vista Inspirat 2" = Pack Vista Inspirat 2 1.0
"Pacman 2005" = Pacman 2005 1.1
"PDF Complete" = PDF Complete
"PH" = Pacific Heroes
"PhotoFiltre" = PhotoFiltre
"PROPLUS" = Microsoft Office Professional Plus 2007
"Revo Uninstaller" = Revo Uninstaller 1.85
"Runic_is1" = Runic
"Scrabble_is1" = Scrabble 1.1
"Screen-Satrix" = Screen-Satrix 3.0
"SEAF" = SEAF By C_XX
"Shareaza_is1" = Shareaza 2.5.3.0
"SpywareBlaster_is1" = SpywareBlaster 4.4
"ST5UNST #1" = Drapeaux
"ST6UNST #1" = Micro Scrabble
"Star Defender 4_is1" = Star Defender 4
"subliminalvisuelerections_is1" = subliminalvisuelerections 1.5
"Sudoku_is1" = Sudoku V 3.0.2
"Tank O Box_is1" = Tank O Box
"TerraTec Grabby" = TerraTec Grabby V5.09.0813.00
"TmNationsForever_is1" = TmNationsForever
"Trivial Pursuit The 80s Deluxe" = Trivial Pursuit The 80s Deluxe
"VLC media player" = VLC media player 1.1.5
"VSO DivxToDVD_is1" = DivxToDVD 0.5.2
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Lecteur Windows Media 11
"Windows XP Service" = Windows XP Service Pack 3
"WinLiveSuite_Wave3" = Installation Windows Live
"WinRAR archiver" = Archiveur WinRAR
"WinX DVD Ripper_is1" = WinX DVD Ripper 4.2.1
"WinX Free DVD Ripper_is1" = WinX Free DVD Ripper 4.5.8
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"ZHPDiag_is1" = ZHPDiag 1.27
"Zuma's Revenge!1.0" = Zuma's Revenge!
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-3531259581-388390947-1283473575-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Biolab Disaster" = Biolab Disaster
"GoogleToolBar" = GoogleToolBar
"RadioSure" = RadioSure
 
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 04/01/2011 07:33:46 | Computer Name = GALY | Source = MsiInstaller | ID = 11316
Description = Product: Age of Empires II - the Conquerors WideScreen Patcher --
Error 1316. A network error occurred while attempting to read from the file: C:\Documents
 and Settings\Administrateur\Bureau\AoE2WideSetup(2).msi
 
Error - 04/01/2011 18:44:58 | Computer Name = GALY | Source = Application Hang | ID = 1002
Description = Application bloquée CCC.exe, version 2.0.0.0, module bloqué hungapp,
 version 0.0.0.0, adresse de blocage 0x00000000.
 
Error - 05/01/2011 05:52:29 | Computer Name = GALY | Source = MsiInstaller | ID = 11316
Description = Product: Age of Empires II - the Conquerors WideScreen Patcher --
Error 1316. A network error occurred while attempting to read from the file: C:\Program
 Files\Microsoft Games\Age of Empires II\age2_x1\AoE2WideSetup(2).msi
 
Error - 05/01/2011 05:52:58 | Computer Name = GALY | Source = MsiInstaller | ID = 11316
Description = Product: Age of Empires II - the Conquerors WideScreen Patcher --
Error 1316. A network error occurred while attempting to read from the file: C:\Program
 Files\Microsoft Games\Age of Empires II\aoe\AoE2WideSetup(2).msi
 
Error - 05/01/2011 07:09:18 | Computer Name = GALY | Source = Application Error | ID = 1000
Description = Application défaillante icolorfolder.exe, version 1.4.2.0, module
défaillant icolorfolder.exe, version 1.4.2.0, adresse de défaillance 0x00030e71.
 
Error - 05/01/2011 16:19:15 | Computer Name = GALY | Source = Application Hang | ID = 1002
Description = Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué
 hungapp, version 0.0.0.0, adresse de blocage 0x00000000.
 
Error - 05/01/2011 16:20:33 | Computer Name = GALY | Source = Application Hang | ID = 1002
Description = Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué
 hungapp, version 0.0.0.0, adresse de blocage 0x00000000.
 
Error - 05/01/2011 16:27:16 | Computer Name = GALY | Source = Application Hang | ID = 1002
Description = Application bloquée iexplore.exe, version 8.0.6001.18702, module bloqué
 hungapp, version 0.0.0.0, adresse de blocage 0x00000000.
 
Error - 05/01/2011 19:49:31 | Computer Name = GALY | Source = Application Hang | ID = 1002
Description = Application bloquée SEAF.exe, version 1.0.1.0, module bloqué hungapp,
 version 0.0.0.0, adresse de blocage 0x00000000.
 
Error - 06/01/2011 06:50:02 | Computer Name = GALY | Source = Application Hang | ID = 1002
Description = Application bloquée SEAF.exe, version 1.0.1.0, module bloqué hungapp,
 version 0.0.0.0, adresse de blocage 0x00000000.
 
[ System Events ]
Error - 07/01/2011 06:19:37 | Computer Name = GALY | Source = DCOM | ID = 10005
Description = DCOM a reçu l'erreur "%1084" lors de la mise en route du service EventSystem
 avec les arguments ""  pour démarrer le serveur :  {1BE1F766-5536-11D1-B726-00C04FB926AF}
 
Error - 07/01/2011 06:19:43 | Computer Name = GALY | Source = Service Control Manager | ID = 7001
Description = Le service Client DHCP dépend du service NetBIOS sur TCP/IP qui n'a
 pas pu démarrer en raison de l'erreur :   %%31
 
Error - 07/01/2011 06:19:43 | Computer Name = GALY | Source = Service Control Manager | ID = 7001
Description = Le service Client DNS dépend du service Pilote du protocole TCP/IP
 qui n'a pas pu démarrer en raison de l'erreur :   %%31
 
Error - 07/01/2011 06:19:43 | Computer Name = GALY | Source = Service Control Manager | ID = 7001
Description = Le service Services IPSEC dépend du service Pilote IPSEC qui n'a pas
 pu démarrer en raison de l'erreur :   %%31
 
Error - 07/01/2011 06:19:43 | Computer Name = GALY | Source = Service Control Manager | ID = 7026
Description = Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se
 charger :   Aavmker4  AFD  AmdK8  aswSP  aswTdi  ElbyCDIO  Fips  i8042prt  IPSec  MRxSmb  NetBIOS  NetBT
RasAcd
Rdbss
Tcpip
 
Error - 07/01/2011 06:20:14 | Computer Name = GALY | Source = DCOM | ID = 10005
Description = DCOM a reçu l'erreur "%1084" lors de la mise en route du service netman
 avec les arguments ""  pour démarrer le serveur :  {BA126AE5-2166-11D1-B1D0-00805FC1270E}
 
Error - 07/01/2011 06:36:48 | Computer Name = GALY | Source = DCOM | ID = 10005
Description = DCOM a reçu l'erreur "%1084" lors de la mise en route du service netman
 avec les arguments ""  pour démarrer le serveur :  {BA126AE5-2166-11D1-B1D0-00805FC1270E}
 
Error - 07/01/2011 06:36:54 | Computer Name = GALY | Source = DCOM | ID = 10005
Description = DCOM a reçu l'erreur "%1084" lors de la mise en route du service EventSystem
 avec les arguments ""  pour démarrer le serveur :  {1BE1F766-5536-11D1-B726-00C04FB926AF}
 
Error - 07/01/2011 06:38:44 | Computer Name = GALY | Source = Service Control Manager | ID = 7026
Description = Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se
 charger :   i8042prt
 
Error - 08/01/2011 04:19:53 | Computer Name = GALY | Source = Service Control Manager | ID = 7026
Description = Le pilote de démarrage système ou d'amorçage suivant n'a pas pu se
 charger :   i8042prt
 
 
< End of report >


[galyfa]

Et voici le 2ème :
http://cjoint.com/?0bimCEUvZMO
Je le mets comme ça car les balises "code" ne fonctionnent plus chez moi...

[danakil]

Salut!

fais ceci maintenant :

1/ Préparation nettoyage :

• Télécharge >> TFC.exe << sur ton Bureau et pas ailleurs.
• Ferme tous les programmes en cour de fonctionnement...
• Fais un double-clic sur l'icône de TFC pour le lancer

* Ne touche à rien et voici ce qu'il va se passer:
TFC va d'abord fermer Explorer (le Bureau) et tout les processus-logiciels chargés, incluant : antivirus et autre protections. Après avoir compléter son nettoyage, TFC va relancer Explorer et peut proposer-ou-non un redémarrage de l'ordi. pour compléter le nettoyage. Quoi qu'il en soit, avec toute les protections de désactivées ...
--> Redémarre ton PC !

2/ Utilisation d'OTL :

• Fais un double-clic sur l'icône d'OTL pour le lancer
  /!\ pour Vista/Seven fais un clic-droit sur l'icône d'OTL et choisis "Exécuter en tant qu'administrateur"
• Assure toi d'avoir fermé toutes les applications en court de fonctionnement.
• Quand la fenêtre d'OTL apparaît, assure toi que dans la section "Rapport" (en haut à droite) la case "Rapport minimal" soit cochée.
• Copies et colles le contenue de cette citation dans la partie inférieure d'OTL "Personnalisation"

Code: Tout sélectionner

:OTL
FF - prefs.js..browser.search.selectedEngineURL: "http://mp3tubetoolbarsearch.com/?tmp=toolbar_mp3tube_results&prt=pinballtb01ff&clid=066d3cfd04964bf6b28d876887b9283b&subid=&Keywords={searchTerms}"
FF - prefs.js..keyword.URL: "http://mp3tubetoolbarsearch.com/?prt=pinballtb02ff&Keywords="
FF - user.js..keyword.URL: "http://mp3tubetoolbarsearch.com/?prt=pinballtb02ff&Keywords="
[2011/01/05 20:59:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrateur\Application Data\PriceGong     
[2011/01/05 20:59:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrateur\Application Data\PriceGong     
SRV - [2009/11/26 01:44:03 | 000,069,120 | ---- | M] (BOONTY) [On_Demand | Stopped] -- C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe -- (Boonty Games)     
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
[2011/01/04 19:17:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\BoontyGames
[2009/11/26 01:44:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BOONTY
O2 - BHO: (no name) - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - No CLSID value found.     
O2 - BHO: (no name) - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - No CLSID value found.     
O2 - BHO: (no name) - {7B840956-64ED-11DE-B890-694956D89593} - No CLSID value found.     
O3 - HKLM\..\Toolbar: (no name) - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - No CLSID value found.     
O3 - HKLM\..\Toolbar: (no name) - {7B840956-64ED-11DE-B890-694956D89593} - No CLSID value found.     
[2011/01/02 12:21:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Conduit     
[2011/01/02 12:21:06 | 000,000,000 | ---D | C] -- C:\Program Files\Conduit     

:Commands
[emptytemp]
[EMPTYFLASH]
[PURITY]
[RESETHOSTS]


• Cliques sur l'icône Correction (en haut à gauche) .
• Laisse le scan aller à son terme sans te servir du PC
• A la fin du scan un rapport va s'ouvrir "OTL.Txt"
• Copie et colle le rapports dans ta réponse stp...
• Au cas où, tu peux les retrouver dans le dossier C:\OTL ou sur ton Bureau en fonction des cas rencontrés

[galyfa]

Voici le rapport :

Code: Tout sélectionner

All processes killed
========== OTL ==========
Prefs.js: "http://mp3tubetoolbarsearch.com/?tmp=toolbar_mp3tube_results&prt=pinballtb01ff&clid=066d3cfd04964bf6b28d876887b9283b&subid=&Keywords={searchTerms}" removed from browser.search.selectedEngineURL
Prefs.js: "http://mp3tubetoolbarsearch.com/?prt=pinballtb02ff&Keywords=" removed from keyword.URL
C:\Documents and Settings\Administrateur\Application Data\Mozilla\FireFox\Profiles\t7flci8u.default\user.js moved successfully.
Folder C:\Documents and Settings\Administrateur\Application Data\PriceGong\ not found.
Folder C:\Documents and Settings\Administrateur\Application Data\PriceGong\ not found.
Service Boonty Games stopped successfully!
Service Boonty Games deleted successfully!
C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\BoontyGames folder moved successfully.
C:\Documents and Settings\All Users\Application Data\BOONTY\Licenses folder moved successfully.
C:\Documents and Settings\All Users\Application Data\BOONTY folder moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0974BA1E-64EC-11DE-B2A5-E43756D89593}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0974BA1E-64EC-11DE-B2A5-E43756D89593}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7B840956-64ED-11DE-B890-694956D89593}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7B840956-64ED-11DE-B890-694956D89593}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{0974BA1E-64EC-11DE-B2A5-E43756D89593} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0974BA1E-64EC-11DE-B2A5-E43756D89593}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{7B840956-64ED-11DE-B890-694956D89593} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7B840956-64ED-11DE-B890-694956D89593}\ not found.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Conduit\Toolbar\Facebook folder moved successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Conduit\Toolbar folder moved successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Conduit\Community Alerts\Log folder moved successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Conduit\Community Alerts\LanguagePacks folder moved successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Conduit\Community Alerts\Feeds folder moved successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Conduit\Community Alerts folder moved successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Conduit folder moved successfully.
C:\Program Files\Conduit\Community Alerts folder moved successfully.
C:\Program Files\Conduit folder moved successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: Administrateur
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 6448393 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 24 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 18880 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 6,00 mb
 
 
[EMPTYFLASH]
 
User: Administrateur
->Flash cache emptied: 0 bytes
 
User: All Users
 
User: Default User
->Flash cache emptied: 0 bytes
 
User: LocalService
 
User: NetworkService
 
Total Flash Files Cleaned = 0,00 mb
 
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
OTL by OldTimer - Version 3.2.20.1 log created on 01092011_122530

Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\S06312F12.tmp scheduled to be moved on reboot.
C:\WINDOWS\temp\Perflib_Perfdata_fb0.dat moved successfully.

Registry entries deleted on Reboot...


[danakil]

OK!

Repasse un coup de MalWareBytes > scan rapide et poste le rapport.
N'oublie pas de vérifier s'il y a une mise à jour disponible

Ensuite nous passerons à FF!

[galyfa]

Après mise à jour voici ce que dit MalWareBytes :

Code: Tout sélectionner

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Version de la base de données: 5488

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

09/01/2011 18:30:43
mbam-log-2011-01-09 (18-30-43).txt

Type d'examen: Examen complet (C:\|D:\|)
Elément(s) analysé(s): 276601
Temps écoulé: 55 minute(s), 9 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)



[danakil]

Salut!

Ton PC est totalement décontaminé maintenant.

J'attends une info concernant ce problème de connexion avec FF et je te poste cela - dans les 24 heures.

[galyfa]

Ok merci à toi danakil, j'attends impatiemment de pouvoir ré-utiliser Firefox mon navigateur favori.

[danakil]

Salut!

Test ceci :
Démarre FireFox --> Outil Options --> Onglet général--> Restaurer la configuration par défaut.
> Valide
> Accepte si demandé un redémarrage, sinon fait le toi même.

> Test la connextion FF!

[galyfa]

Bonsoir. Je ne peux toujours pas redémarrer Firefox, je n'y ai même pas accès, quand je le lance j'ai toujours la fenêtre me disant que Firefox a planté etc. ...

[danakil]

Essaye de démarrer Firefox en mode sans échec :