FORUM D’ENTRAIDE INFORMATIQUE (FEI)Site d’assistance et de sécurité informatique

[motarafond]

bonjour a tous,j espere etre sur le bon forum.
voila j expose mes problemes. je n arrive pas a parametrer internet explorer 8,les reglages ne tiennent pas.
je n arrive pas a desactiver le bloqueur de fenetres publicitaires,j ai la page de configuration qui s ouvre a chaque fois que je me connecte a internet et malgré que j essaye de configurer ,a chaque fois cette page s'ouvre. de plus la navigation est tres tres lente.
j ai desinstalé et reinstaler ie8 mais rien ni fait. je voudrais que l on reprenne a zero l annalyse de mon pc pour voir se qu'il se passe,j ai deja essayé les restauration systeme mais rien ne fonctionne,je suis sous windows xp ed fam service pack3.

pouvez vous m aider s'il vous plait,motarafond

[dédétraqué]

Salut motarafond, bienvenu sur le forum


On va vérifier le PC :

Télécharge OTL (de OldTimer) et enregistre-le sur ton Bureau.

- Quitte les applications en cours afin de ne pas interrompre le scan.
- Faire double clique sur OTL.exe présent sur le bureau pour lancer le programme
Vista/Seven -- Faire un clique droit sur OTL.exe présent sur le bureau et choisir exécuter en tant qu'administrateur pour lancer le programme
- Une fenêtre apparaît. Dans la section Rapport en haut de cette fenêtre, coche "Rapport standard". Fais de même avec "Tous les utilisateurs" à coté.
- Coche également les cases à côté de "Recherche LOP" et "Recherche Purity".

Ne modifie pas les autres paramètres !

Copie la liste qui se trouve en gras ci-dessous, et colle-la dans la zone sous " Personnalisation "

netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%SYSTEMDRIVE%\*.*
%SYSTEMDRIVE%\*.exe
%PROGRAMFILES%\*.*
%PROGRAMFILES%\*.
/md5start
consrv.dll
volsnap.sys
hidserv.dll
appmgmts.dll
eventlog.dll
winlogon.exe
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
wininet.dll
wininit.exe
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
explorer.exe
svchost.exe
userinit.exe
qmgr.dll
ws2_32.dll
proquota.exe
imm32.dll
kernel32.dll
ndis.sys
autochk.exe
spoolsv.exe
xmlprov.dll
ntmssvc.dll
mswsock.dll
Beep.SYS
ntfs.sys
termsrv.dll
sfcfiles.dll
st3shark.sys
winlogon.exe
wininit.ini
/md5stop
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s
SAVEMBR:0
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
c:\$recycle.bin\*.* /s

- Clique sur le bouton Analyse.
- Une fois l'analyse terminée, deux fenêtres vont s'ouvrir dans le Bloc-notes : OTL.txt et Extras.txt. Ils se trouvent au même endroit que OTListIT2 (donc par défaut sur le Bureau).

Utilise cjoint.com pour poster en lien tes rapports :
http://cjoint.com/

- Clique sur Parcourir pour aller chercher le rapport OTL.txt sur le bureau
- Clique sur Ouvrir ensuite sur Créer le lien Cjoint

- Fais un copier/coller du lien qui est devant Le lien a été créé: dans ta prochaine réponse.

Après fais de même avec l'autre rapport Extras.txt


@++

[motarafond]

http://cjoint.com/?CBCagymIgm8

http://cjoint.com/?CBCaigjLOUu

bonjour dédétraqué et merci de m avaoir pris en charge.
je vous transmet les 2 rapports obtenus,cordialement , motarafond

[dédétraqué]

Salut motarafond


Double clic sur OTL.exe pour le lancer.
(Vista/Seven -- Faire un clique droit sur OTL.exe pour lancer le programme et choisi "Exécuter en tant qu'administrateur".

* Copie la liste qui se trouve en citation ci-dessous, et colle-la dans la zone sous " Personnalisation "

:OTL
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKLM\..\Run: [uppct_fr_2.exe] C:\Documents and Settings\Clara.HP-PAVILION\Local Settings\Application Data\pctuto\uppct_fr_2.exe -runhelper File not found
O9 - Extra 'Tools' menuitem : Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://windowsupdate.microsoft.com/wind ... 2931473578 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftup ... 2931715015 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.4.2/jinsta ... s-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.4.2/jinsta ... s-i586.cab (Java Plug-in 1.4.2_03)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shoc ... wflash.cab (Shockwave Flash Object)
MsConfig - StartUpFolder: C:^Documents and Settings^HP_Propriétaire.HP-PAVILION^Menu Démarrer^Programmes^Démarrage^desktop.ini - - File not found
MsConfig - StartUpFolder: C:^Documents and Settings^HP_Propriétaire.HP-PAVILION^Menu Démarrer^Programmes^Démarrage^LimeWire On Startup.lnk - - File not found
MsConfig - StartUpReg: HPHmon06 - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: HPHUPD06 - hkey= - key= - Reg Error: Value error. File not found
[2 C:\WINDOWS\*.tmp files - C:\WINDOWS\*.tmp - ]
[1 C:\WINDOWS\System32\*.tmp files - C:\WINDOWS\System32\*.tmp - ]

:Commands
[Emptytemp]

* Clique sur " Correction " pour lancer la suppression.

* Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer. Accepte en cliquant sur Oui.

* Au redémarrage , autorise OTL a s'exécuter.

* Poste le rapport généré par OTL.


@++

[motarafo]

All processes killed
========== OTL ==========
Service WDICA stopped successfully!
Service WDICA deleted successfully!
Service PDRFRAME stopped successfully!
Service PDRFRAME deleted successfully!
Service PDRELI stopped successfully!
Service PDRELI deleted successfully!
Service PDFRAME stopped successfully!
Service PDFRAME deleted successfully!
Service PDCOMP stopped successfully!
Service PDCOMP deleted successfully!
Service PCIDump stopped successfully!
Service PCIDump deleted successfully!
Service lbrtfdc stopped successfully!
Service lbrtfdc deleted successfully!
Service i2omgmt stopped successfully!
Service i2omgmt deleted successfully!
Service Changer stopped successfully!
Service Changer deleted successfully!
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully.
Registry key HKEY_LOCAL_MACHINE\\Software\Microsoft\Windows\CurrentVersion\Run not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501}\ deleted successfully.
Starting removal of ActiveX control {6414512B-B978-451D-A0D8-FCFDF33E833C}
C:\WINDOWS\Downloaded Program Files\wuweb.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{6414512B-B978-451D-A0D8-FCFDF33E833C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6414512B-B978-451D-A0D8-FCFDF33E833C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6414512B-B978-451D-A0D8-FCFDF33E833C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6414512B-B978-451D-A0D8-FCFDF33E833C}\ not found.
Starting removal of ActiveX control {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}
C:\WINDOWS\Downloaded Program Files\muweb.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{6E32070A-766D-4EE6-879C-DC1FA91D2FC3}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6E32070A-766D-4EE6-879C-DC1FA91D2FC3}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6E32070A-766D-4EE6-879C-DC1FA91D2FC3}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6E32070A-766D-4EE6-879C-DC1FA91D2FC3}\ not found.
Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {D27CDB6E-AE6D-11CF-96B8-444553540000}
C:\WINDOWS\Downloaded Program Files\swflash64.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\StartUpFolder\C:^Documents and Settings^HP_Propriétaire.HP-PAVILION^Menu Démarrer^Programmes^Démarrage^desktop.ini\ deleted successfully.
C:\WINDOWS\pss\desktop.iniStartup moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\StartUpFolder\C:^Documents and Settings^HP_Propriétaire.HP-PAVILION^Menu Démarrer^Programmes^Démarrage^LimeWire On Startup.lnk\ deleted successfully.
C:\WINDOWS\pss\LimeWire On Startup.lnkStartup moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\StartUpReg\HPHmon06\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\StartUpReg\HPHUPD06\ deleted successfully.
C:\WINDOWS\002524_.tmp deleted successfully.
C:\WINDOWS\002528_.tmp deleted successfully.
C:\WINDOWS\System32\CONFIG.TMP deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrateur
-Temp folder emptied: 0 bytes
-Temporary Internet Files folder emptied: 5743610 bytes
-Flash cache emptied: 492 bytes

User: Administrateur.HP-PAVILION
-Temp folder emptied: 60551 bytes
-Temporary Internet Files folder emptied: 299085 bytes

User: All Users

User: clara
-Temp folder emptied: 74469641 bytes
-Temporary Internet Files folder emptied: 2256376874 bytes
-Flash cache emptied: 64569 bytes

User: Clara.HP-PAVILION
-Temp folder emptied: 38714788 bytes
-Temporary Internet Files folder emptied: 29151503 bytes
-Flash cache emptied: 602 bytes

User: Default User
-Temp folder emptied: 60551 bytes
-Temporary Internet Files folder emptied: 32902 bytes

User: HP_Propriétaire

User: HP_Propriétaire.HP-PAVILION
-Temp folder emptied: 866969805 bytes
-Temporary Internet Files folder emptied: 122382483 bytes
-Java cache emptied: 1309 bytes
-Flash cache emptied: 22533 bytes

User: HP_PRO~1~HP-

User: Invité
-Temp folder emptied: 0 bytes
-Temporary Internet Files folder emptied: 67 bytes
-Flash cache emptied: 57200 bytes

User: limité
-Temp folder emptied: 978428 bytes
-Temporary Internet Files folder emptied: 13480371 bytes
-Java cache emptied: 0 bytes
-Flash cache emptied: 602 bytes

User: LocalService
-Temp folder emptied: 99119 bytes
-Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
-Temp folder emptied: 0 bytes
-Temporary Internet Files folder emptied: 32902 bytes
-Flash cache emptied: 2955 bytes

User: utilisateur limité
-Temp folder emptied: 585314 bytes
-Temporary Internet Files folder emptied: 1326290580 bytes
-Java cache emptied: 1870 bytes
-Flash cache emptied: 70590 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 4911119 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 7994445 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 7316617 bytes

Total Files Cleaned = 4 536,00 mb


OTL by OldTimer - Version 3.2.69.0 log created on 03012013_143134

Files\Folders moved on Reboot...
File\Folder C:\Documents and Settings\HP_Propriétaire.HP-PAVILION\Local Settings\Temp\~DFC366.tmp not found!
File\Folder C:\Documents and Settings\HP_Propriétaire.HP-PAVILION\Local Settings\Temp\~DFC37F.tmp not found!
File\Folder C:\Documents and Settings\HP_Propriétaire.HP-PAVILION\Local Settings\Temp\~DFC407.tmp not found!
File\Folder C:\Documents and Settings\HP_Propriétaire.HP-PAVILION\Local Settings\Temp\~DFC420.tmp not found!
C:\Documents and Settings\HP_Propriétaire.HP-PAVILION\Local Settings\Temporary Internet Files\Content.IE5\X6K7BA3T\t6569-probleme-parametrage-ie8[1].htm moved successfully.
C:\Documents and Settings\HP_Propriétaire.HP-PAVILION\Local Settings\Temporary Internet Files\Content.IE5\X6K7BA3T\xd_arbiter[1].htm moved successfully.
C:\Documents and Settings\HP_Propriétaire.HP-PAVILION\Local Settings\Temporary Internet Files\Content.IE5\UU7TJYRZ\chatbox[1].htm moved successfully.
C:\Documents and Settings\HP_Propriétaire.HP-PAVILION\Local Settings\Temporary Internet Files\Content.IE5\UU7TJYRZ\xd_arbiter[1].htm moved successfully.
C:\Documents and Settings\HP_Propriétaire.HP-PAVILION\Local Settings\Temporary Internet Files\Content.IE5\UQ35MV73\oauth[1].htm moved successfully.
C:\Documents and Settings\HP_Propriétaire.HP-PAVILION\Local Settings\Temporary Internet Files\Content.IE5\UQ35MV73\xd_arbiter[1].htm moved successfully.
C:\Documents and Settings\HP_Propriétaire.HP-PAVILION\Local Settings\Temporary Internet Files\Content.IE5\LYPKOP06\chatbox[1].htm moved successfully.
C:\Documents and Settings\HP_Propriétaire.HP-PAVILION\Local Settings\Temporary Internet Files\Content.IE5\LYPKOP06\index[2].htm moved successfully.
C:\Documents and Settings\HP_Propriétaire.HP-PAVILION\Local Settings\Temporary Internet Files\Content.IE5\LYPKOP06\index[3].htm moved successfully.
C:\Documents and Settings\HP_Propriétaire.HP-PAVILION\Local Settings\Temporary Internet Files\Content.IE5\LYPKOP06\mail[1].txt moved successfully.
C:\Documents and Settings\HP_Propriétaire.HP-PAVILION\Local Settings\Temporary Internet Files\Content.IE5\LBBLUZ5W\d=1[1].htm moved successfully.
C:\Documents and Settings\HP_Propriétaire.HP-PAVILION\Local Settings\Temporary Internet Files\Content.IE5\LBBLUZ5W\like[1].htm moved successfully.
C:\Documents and Settings\HP_Propriétaire.HP-PAVILION\Local Settings\Temporary Internet Files\Content.IE5\LBBLUZ5W\like[2].htm moved successfully.
C:\Documents and Settings\HP_Propriétaire.HP-PAVILION\Local Settings\Temporary Internet Files\Content.IE5\LBBLUZ5W\mail[1].htm moved successfully.
C:\Documents and Settings\HP_Propriétaire.HP-PAVILION\Local Settings\Temporary Internet Files\Content.IE5\LBBLUZ5W\oauth[1].htm moved successfully.
C:\Documents and Settings\HP_Propriétaire.HP-PAVILION\Local Settings\Temporary Internet Files\Content.IE5\KTS7ZBIT\t6569-probleme-parametrage-ie8[1].htm moved successfully.
C:\WINDOWS\temp\Perflib_Perfdata_1f8.dat moved successfully.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

[dédétraqué]

Salut motarafond


Toujours le souci?


@++

[motarafo]

re bonjour dédétraqué,oui toujours les memes problèmes,aucune amelioration,que peut on y faire

[dédétraqué]

Salut motarafond


On va vérifier si rien de caché :

Télécharge combofix.exe (de sUBs) sur le bureau :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Important Désactive ton Antivirus et antispyware avant le scan avec Combofix :
http://forum.pcastuces.com/desactiver_l ... -f31s4.htm


== Sauvegarde ton travail et ferme toutes les fenêtres actives, il peut y avoir un redémarrage du PC. Ne lance aucun programme tant que Combofix n’est pas fini.

Double clique sur combofix.exe, clique sur OUI et valide par Entrée

Il te sera demandé d’installer la console si elle n’est pas installer, clique sur Oui

Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse.

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

Combofix est détecté par certains antivirus comme une infection, ne pas en tenir compte, il s'agit d'un faux positif, continue la procédure


@++

[motarafo]

ComboFix 13-03-02.01 - HP_Propriétaire 02/03/2013 20:15:01.1.2 - x86
Microsoft Windows XP Édition familiale 5.1.2600.3.1252.33.1036.18.2047.1437 [GMT 1:00]
Lancé depuis: c:\documents and settings\HP_PropriÚtaire.HP-PAVILION\Bureau\ComboFix.exe
AV: Lavasoft Ad-Aware *Disabled/Updated* {964FCE60-0B18-4D30-ADD6-EB178909041C}
FW: Lavasoft Ad-Aware *Disabled* {FF1CD5B7-1553-4625-A258-1775385CED33}
.
.
(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Administrateur.HP-PAVILION\WINDOWS
c:\documents and settings\Clara.HP-PAVILION\WINDOWS
c:\documents and settings\clara\Application Data\app
c:\documents and settings\clara\Application Data\app\Jerakine_lang.dat
c:\documents and settings\clara\Application Data\app\Jerakine_lang_vesrion.dat
c:\documents and settings\Default User\WINDOWS
c:\program files\Internet Explorer\SET12E.tmp
c:\program files\Internet Explorer\SET12F.tmp
c:\program files\Internet Explorer\SET23.tmp
c:\program files\Internet Explorer\SET24.tmp
c:\program files\Internet Explorer\SET25.tmp
c:\program files\Internet Explorer\SET26.tmp
c:\program files\Internet Explorer\SET27.tmp
c:\program files\Internet Explorer\SET28.tmp
c:\program files\Internet Explorer\SET29.tmp
c:\program files\Internet Explorer\SET2A.tmp
c:\program files\Internet Explorer\SET2B.tmp
c:\program files\Internet Explorer\SET2C.tmp
c:\windows\system32\config\systemprofile\WINDOWS
c:\windows\system32\ps2.bat
c:\windows\system32\sp
c:\windows\system32\URTTemp
c:\windows\system32\URTTemp\regtlib.exe
.
.
((((((((((((((((((((((((((((( Fichiers créés du 2013-02-02 au 2013-03-02 ))))))))))))))))))))))))))))))))))))
.
.
2013-03-02 09:30 . 2013-03-02 09:33 -------- dc-h--w- c:\windows\ie8
2013-03-02 01:17 . 2006-12-28 11:01 19569 ----a-w- c:\windows\000001_.tmp
2013-03-01 13:31 . 2013-03-01 13:31 -------- d-----w- C:\_OTL
2013-03-01 01:34 . 2013-03-01 01:34 -------- d-----w- c:\program files\jv16 PowerTools
2013-02-28 21:04 . 2013-02-28 21:04 -------- d-----w- c:\documents and settings\HP_Propriétaire.HP-PAVILION\Local Settings\Application Data\Sun
2013-02-23 12:38 . 2013-02-23 12:38 -------- d-----w- c:\documents and settings\HP_Propriétaire.HP-PAVILION\Application Data\Windows Search
2013-02-23 00:16 . 2013-02-23 00:21 -------- d-----w- c:\documents and settings\Clara.HP-PAVILION
2013-02-23 00:14 . 2013-02-23 00:14 -------- d-----w- c:\documents and settings\limité\.swt
2013-02-23 00:09 . 2013-02-23 00:09 -------- d-----w- c:\documents and settings\limité\Local Settings\Application Data\Google
2013-02-23 00:09 . 2013-02-23 00:09 -------- d-sh--w- c:\documents and settings\limité\PrivacIE
2013-02-23 00:09 . 2013-02-23 00:09 -------- d-----w- c:\documents and settings\limité\Application Data\GrabPro
2013-02-23 00:09 . 2013-02-23 00:09 -------- d-----w- c:\documents and settings\limité\Application Data\IEPro
2013-02-23 00:08 . 2013-02-23 00:08 -------- d-----w- c:\documents and settings\limité\Local Settings\Application Data\Identities
2013-02-23 00:08 . 2013-02-23 00:08 -------- d-----w- c:\documents and settings\limité\Application Data\Windows Desktop Search
2013-02-23 00:08 . 2013-02-23 00:08 -------- d-----w- c:\documents and settings\limité\Application Data\Ad-Aware Antivirus
2013-02-23 00:08 . 2013-02-23 00:08 -------- d-----w- c:\documents and settings\limité\Application Data\Epson
2013-02-22 23:18 . 2013-02-26 15:45 -------- d-----w- c:\windows\system32\XPSViewer
2013-02-22 23:17 . 2013-02-22 23:18 -------- d-----w- C:\d4c4b86d98d2d51d1fe8e16950
2013-02-22 23:13 . 2013-02-22 23:13 -------- d-----w- c:\windows\system32\GroupPolicy
2013-02-22 23:09 . 2013-02-22 23:10 -------- d-----w- c:\windows\system32\drivers\UMDF
2013-02-22 22:54 . 2013-02-22 22:53 143872 ----a-w- c:\windows\system32\javacpl.cpl
2013-02-20 00:20 . 2004-08-04 18:00 5632 -c--a-w- c:\windows\system32\dllcache\smimsgif.dll
2013-02-20 00:20 . 2004-08-04 18:00 5632 -c--a-w- c:\windows\system32\dllcache\smierrsy.dll
2013-02-20 00:20 . 2004-08-04 18:00 5632 ----a-w- c:\windows\system32\wbem\snmp\smimsgif.dll
2013-02-20 00:20 . 2004-08-04 18:00 5632 ----a-w- c:\windows\system32\wbem\snmp\smierrsy.dll
2013-02-20 00:20 . 2004-08-04 18:00 15872 -c--a-w- c:\windows\system32\dllcache\smierrsm.dll
2013-02-20 00:20 . 2004-08-04 18:00 15872 ----a-w- c:\windows\system32\wbem\snmp\smierrsm.dll
2013-02-20 00:20 . 2004-08-04 18:00 10240 -c--a-w- c:\windows\system32\dllcache\snmpstup.dll
2013-02-20 00:20 . 2004-08-04 18:00 10240 ----a-w- c:\windows\system32\wbem\snmpstup.dll
2013-02-19 23:12 . 2013-02-19 23:12 -------- d-----w- c:\documents and settings\Administrateur.HP-PAVILION
2013-02-15 22:04 . 2013-02-15 22:04 208448 ----a-w- c:\program files\Internet Explorer\PLUGINS\nppdf32.dll
2013-02-07 03:18 . 2013-02-07 03:19 -------- d-----w- c:\documents and settings\HP_Propriétaire.HP-PAVILION\Application Data\MiniDm
.
.
.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-03-02 11:36 . 2012-11-14 22:00 71024 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-03-02 11:36 . 2012-11-14 22:00 691568 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-02-22 22:53 . 2003-04-10 22:04 94112 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-02-22 22:53 . 2012-11-14 20:51 861088 ----a-w- c:\windows\system32\npdeployJava1.dll
2013-02-22 22:53 . 2012-11-14 20:51 782240 ----a-w- c:\windows\system32\deployJava1.dll
2013-02-15 18:44 . 2013-02-15 18:44 44032 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\LocalContent\Attachments\devcon.exe
2013-02-15 18:44 . 2013-02-15 18:44 307200 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\pchnotify.exe
2013-02-15 18:44 . 2013-02-15 18:44 3072 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\jsharpde\pchealthde.exe
2013-02-15 18:44 . 2013-02-15 18:44 159744 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\PCHButton.exe
2013-02-15 18:44 . 2013-02-15 18:44 77824 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\FDIWrapper.dll
2013-02-15 18:44 . 2013-02-15 18:44 26572 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\jsharpde\INV16.dll
2013-02-15 18:44 . 2013-02-15 18:44 69632 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\jsharpde\msxmlwrapper.dll
2013-02-15 18:44 . 2013-02-15 18:44 40960 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\ScDmi.dll
2013-02-15 18:44 . 2013-02-15 18:44 49152 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\PCHI18N.dll
2013-02-15 18:44 . 2013-02-15 18:44 139264 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\ContentUpdater.exe
2013-02-15 18:44 . 2013-02-15 18:44 110592 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\DSAPI4.dll
2013-02-15 18:44 . 2013-02-15 18:44 98304 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\PluginCtrl.dll
2013-02-15 18:44 . 2013-02-15 18:44 287310 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\HPBasicDetection.dll
2013-02-15 18:44 . 2013-02-15 18:44 69632 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\msxmlwrapper.dll
2013-02-15 18:44 . 2013-02-15 18:44 5632 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\jsharpde\GUI.dll
2013-02-15 18:44 . 2013-02-15 18:44 114688 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\jsharpde\ZipLib.dll
2013-02-15 18:44 . 2013-02-15 18:44 32768 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\jsharpde\pchapi.dll
2013-02-15 18:44 . 2013-02-15 18:44 434176 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\jsharpde\motivede.dll
2013-02-15 18:44 . 2013-02-15 18:44 315392 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\pchmsxml.dll
2013-02-15 18:44 . 2013-02-15 18:44 77824 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\WinVerifyTrust.dll
2013-02-15 18:44 . 2013-02-15 18:44 344064 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\jsharpde\api.dll
2013-02-15 18:44 . 2013-02-15 18:44 24576 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\jsharpde\pcdapi.dll
2013-02-15 18:44 . 2013-02-15 18:44 45056 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\jsharpde\util.dll
2013-02-15 18:44 . 2013-02-15 18:44 282624 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\jsharpde\clientutil52.dll
2013-02-15 18:44 . 2013-02-15 18:44 356352 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\jsharpde\client_motkt.dll
2013-02-15 18:44 . 2013-02-15 18:44 28672 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\InetWrap.dll
2013-02-15 18:44 . 2013-02-15 18:44 102400 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\PCDrAccess.dll
2013-02-15 18:44 . 2013-02-15 18:44 114688 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\jsharpde\asst_ui.dll
2013-02-15 18:44 . 2013-02-15 18:44 49152 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\jsharpde\hwinv.dll
2013-02-15 18:44 . 2013-02-15 18:44 315392 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\jsharpde\pchmsxml.dll
2013-02-15 18:44 . 2013-02-15 18:44 36864 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\jsharpde\gnu.dll
2013-02-15 18:44 . 2013-02-15 18:44 126976 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\SearchCtrl.dll
2013-02-15 18:44 . 2013-02-15 18:44 4096 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\winverifytrustwrapper.dll
2013-02-15 18:44 . 2013-02-15 18:44 212992 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\jsharpde\jsharpinterp.dll
2013-02-15 18:44 . 2013-02-15 18:44 307200 ----a-w- c:\windows\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\HPQ\XPXWWPP5\plugin\bin\pchealthplugin.dll
2013-02-11 10:28 . 2013-01-23 13:02 35896 ----a-w- c:\windows\system32\drivers\gfiark.sys
2013-01-26 03:55 . 2005-01-01 16:32 552448 ----a-w- c:\windows\system32\oleaut32.dll
2013-01-07 07:24 . 2012-01-12 22:12 2150912 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-01-07 07:24 . 2012-01-12 22:12 2029568 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-01-04 10:09 . 2005-01-01 16:32 1867392 ----a-w- c:\windows\system32\win32k.sys
2013-01-02 06:49 . 2005-01-01 16:32 1298432 ----a-w- c:\windows\system32\quartz.dll
2013-01-02 06:49 . 2005-01-01 16:32 148992 ----a-w- c:\windows\system32\mpg2splt.ax
2012-12-26 20:06 . 2005-01-01 16:32 916480 ----a-w- c:\windows\system32\wininet.dll
2012-12-26 20:06 . 2005-01-01 16:32 43520 ------w- c:\windows\system32\licmgr10.dll
2012-12-26 20:06 . 2005-01-01 16:32 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-12-24 06:41 . 2005-01-01 16:32 385024 ------w- c:\windows\system32\html.iec
2012-12-16 12:23 . 2005-01-01 16:32 290560 ----a-w- c:\windows\system32\atmfd.dll
.
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides les éléments initiaux légitimes ne sont pas listés
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EPLTarget\P0000000000000000"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATIHLE.EXE" [2012-02-29 249440]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2012-09-11 39408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 52736]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2004-08-20 155648]
"KBD"="c:\hp\KBD\KBD.EXE" [2003-02-11 61440]
"ISUSPM Startup"="c:\progra~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-06-16 221184]
"ISUSScheduler"="c:\program files\Fichiers communs\InstallShield\UpdateService\issch.exe" [2004-06-16 81920]
"Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2004-04-14 233472]
"SiSPower"="SiSPower.dll" [2004-09-24 49152]
"PS2"="c:\windows\system32\ps2.exe" [2004-10-25 90112]
"AGRSMMSG"="AGRSMMSG.exe" [2004-06-29 88363]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-09-09 344064]
"AlcWzrd"="ALCWZRD.EXE" [2004-07-29 2551808]
"LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 253952]
"SoftAP"="c:\program files\Arcadyan Wireless\NetCfgWizard.exe" [2004-02-17 536576]
"Wireless SoftAP"="c:\program files\Arcadyan Wireless\Configuration\SoftAp.exe" [2004-02-17 667648]
"EEventManager"="c:\program files\Epson Software\Event Manager\EEventManager.exe" [2010-10-12 979328]
"HOSTS Anti-Adware_PUPs"="c:\program files\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware_main.exe" [2013-01-11 302961]
"Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-18 946352]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2005-01-01 98304]
"SunJavaUpdateSched"="c:\program files\Fichiers communs\Java\Java Update\jusched.exe" [2012-07-03 252848]
.
c:\documents and settings\clara\Menu Démarrer\Programmes\Démarrage\
OpenOffice.org 3.3.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\documents and settings\All Users\Menu Démarrer\Programmes\Démarrage\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2004-5-29 241664]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Ad-Aware Service]
@="Ad-Aware Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2004-06-08 19:31 286720 ----a-w- c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 02:34 1695232 --sh--w- c:\program files\Messenger\msmsgs.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2005-01-01 10:20 98304 ----a-w- c:\program files\QuickTime\qttask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
2004-07-28 23:40 77824 ----a-w- c:\windows\SOUNDMAN.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2012-09-11 20:10 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Epson Software\\Event Manager\\EEventManager.exe"=
"c:\\Program Files\\IEPro\\MiniDM.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"7345:UDP"= 7345:UDP:shareaza
"7345:TCP"= 7345:TCP:shareaza
"6356:UDP"= 6356:UDP:limewire
"6356:TCP"= 6356:TCP:limewire
"57793:TCP"= 57793:TCP:Pando Media Booster
"57793:UDP"= 57793:UDP:Pando Media Booster
.
R1 sbaphd;sbaphd;c:\windows\system32\drivers\sbaphd.sys [23/01/2013 13:52 22064]
R2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\program files\Fichiers communs\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [14/05/2009 16:07 759048]
R2 Ad-Aware Service;Ad-Aware Service;c:\program files\Ad-Aware Antivirus\AdAwareService.exe [14/12/2012 20:38 1236968]
R2 PCTWPASV;SoftAP WPA Authenticator Service;c:\program files\Arcadyan Wireless\pctwpasv.exe [30/01/2004 13:59 204800]
R2 SBAMSvc;Ad-Aware;c:\program files\Ad-Aware Antivirus\SBAMSvc.exe [20/09/2012 05:39 3677000]
R2 sbapifs;sbapifs;c:\windows\system32\drivers\sbapifs.sys [23/01/2013 13:52 66344]
R3 camfilt2;camfilt2;c:\windows\system32\drivers\camfilt2.sys [16/01/2013 21:27 96384]
R3 ovt530;Hercules Deluxe Webcam;c:\windows\system32\drivers\ov530vid.sys [16/01/2013 21:27 167464]
R3 PRISM_A00;Intersil PRISM 802.11a/g Driver;c:\windows\system32\drivers\PCTELSAP.SYS [01/01/2005 10:32 350282]
S3 gfiark;gfiark;c:\windows\system32\drivers\gfiark.sys [23/01/2013 14:02 35896]
.
--- Autres Services/Pilotes en mémoire ---
.
*NewlyCreated* - WS2IFSL
.
Contenu du dossier 'Tâches planifiées'
.
2013-01-23 c:\windows\Tasks\Ad-Aware Antivirus Scheduled Scan.job
- c:\progra~1\AD-AWA~1\AdAwareLauncher.exe [2012-12-14 19:38]
.
2013-03-02 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-14 11:36]
.
2013-03-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cdc2d513d74eb4.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-02-02 03:54]
.
2013-03-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA1cdc2d514108724.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-02-02 03:54]
.
2013-03-02 c:\windows\Tasks\User_Feed_Synchronization-{C3581279-7215-4E6F-BE67-BC54ABA8F506}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 03:31]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.google.fr/
uDefault_Search_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3tp=iesearchlocale=FR_FRc=Q105bd=pavilionpf=desktop
IE: Download with Shareaza - c:\program files\Shareaza\RazaWebHook32.dll/3000
IE: Exporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.1
.
- - - - ORPHELINS SUPPRIMES - - - -
.
Toolbar-Locked - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKLM-Run-VTTimer - VTTimer.exe
HKLM-Run-uppct_fr_2.exe - c:\documents and settings\Clara.HP-PAVILION\Local Settings\Application Data\pctuto\uppct_fr_2.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-03-02 20:25
Windows 5.1.2600 Service Pack 3 NTFS
.
Recherche de processus cachés ...
.
Recherche d'éléments en démarrage automatique cachés ...
.
Recherche de fichiers cachés ...
.
Scan terminé avec succès
Fichiers cachés: 0
.
**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------
.
[HKEY_USERS\S-1-5-21-1466653266-1371659141-1905300765-1007\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_171_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_6_602_171_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs chargées dans les processus actifs ---------------------
.
- - - - - - - 'winlogon.exe'(788)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - 'explorer.exe'(668)
c:\windows\system32\mshtml.dll
c:\windows\system32\msls31.dll
c:\windows\system32\eappprxy.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Autres processus actifs ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\program files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe
c:\program files\Java\jre7\bin\jqs.exe
c:\program files\Fichiers communs\LightScribe\LSSrvc.exe
c:\windows\System32\snmp.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\AGRSMMSG.exe
c:\windows\ALCWZRD.EXE
.
**************************************************************************
.
Heure de fin: 2013-03-02 20:30:47 - La machine a redémarré
ComboFix-quarantined-files.txt 2013-03-02 19:30
ComboFix2.txt 2012-10-12 20:59
ComboFix3.txt 2012-10-10 01:02
ComboFix4.txt 2012-07-06 12:15
.
Avant-CF: 387 111 067 648 octets libres
Après-CF: 387 178 278 912 octets libres
.
- - End Of File - - D804A320A554A9C4C1820E130A04A5B3

[dédétraqué]

Salut motarafond


As-tu encore ton souci?


@++

[motarafo]

re bsr dédétraqué,çà va beaucoup mieux , je n ais plus cette fenettre qui s'ouvre pour me demander de configurer internet explorer 8 a chaque fois que je me connecte a internet ,mais par contre j ai toujours le meme probleme concernant le bloqueur de fenetres publicitaires.
je ne peut pas n y le desactiver,n y le modifier ,les parametres que je modifies ne sont pas pris en comptes,le bloqueur de fentres publicitaires est toujours activé et je ne peut pas personnaliser le niveaux,donc a chaque fois que j ouvre une nouvelle page web j ai se bloquage avec la barre d information les fenetres publicitaires sont bloquées. et je ne peut pas ajouter de sites pour les autoriser ,cela ne me les prends pas en compte.il doit y avoir un blocage quelques part qui subsiste mais ou????

[dédétraqué]

Salut motarafond


Voir avec une réinstallation maintenant...


@++

[motarafo]

re dédétraqué,juste une ou deux dernière précision si tu veut bien me les données.
je viens juste de m apercevoir que lorsque je vais en mode sans echec avec prise en charge réseau OU bien lorsque je change de compte utilisateur,je n ai plus de problème pour paramétrer se fameux bloqueur de fenêtres publicitaires.
donc puis je désactiver mon compte administrateur et reactiver mon compte utilisateur limité et le rendre administrateur. j ai fait l essai et apparemment çà fonctionne. apres tout si cela pouvait m'éviter de réinstaller tout mon système cela serait formidable, répond moi stp et encore merci pour le travail que tu as effectué sur ma machine.cordialement motarafond

[dédétraqué]

Salut motarafond


Je parlais d'une réinstallation de IE8 pas du système


@++