. infections pas vouloir se supprimerRésolu/Fermé

Question

Bonjour,.....aidez-moi s.v.p j 'ai plus de song.............des adwares qui ne veulent pas partir............mon pc bloque toujours.je ne sais pas quoi faire!?..........voici les menaces: spyware known_Bad_Sites-......trogen generic.........
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:08:18, on 11/02/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\csrss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
D:\Program Files\Alwil Software\Avast4\ashServ.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\system32\WgaTray.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Hotkey\Hotkey.exe
D:\Program Files\USB Keyboard Driver\kb_2k.exe
D:\Program Files\FlashGet\FlashGet.exe
D:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
D:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe
D:\Program Files\Spyware Doctor\pctsTray.exe
D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
D:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
D:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
D:\Program Files\Messenger\msmsgs.exe
D:\WINDOWS\system32\sistray.exe
D:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
D:\Program Files\Java\jre6\bin\jqs.exe
D:\Program Files\Spyware Doctor\pctsAuxs.exe
D:\Program Files\Spyware Doctor\pctsSvc.exe
D:\Program Files\Spyware Terminator\sp_rsser.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
D:\Program Files\PC Connectivity Solution\ServiceLayer.exe
D:\WINDOWS\system32\wbem\wmiapsrv.exe
D:\WINDOWS\System32\alg.exe
D:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
D:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
D:\Program Files\PC Connectivity Solution\Transports\NclBCBTSrv.exe
D:\WINDOWS\system32\wuauclt.exe
D:\Documents and Settings\med\Bureau\algerian newspapers by bouzaloufe.exe.exe
D:\DOCUME~1\med\LOCALS~1\Temp\RarSFX0\Algerian Newspapers by BouzalouFe.exe
D:\Program Files\Alwil Software\Avast4\ashSimpl.exe
D:\Program Files\Alwil Software\Avast4\ashSimpl.exe
D:\Program Files\Trend Micro\HijackThis\HijackThis.exe
D:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=60446
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60446
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60446
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60446
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60446
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - D:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - D:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - D:\Program Files\FlashGet\jccatch.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - D:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - D:\Program Files\FlashGet\getflash.dll
O3 - Toolbar: Barre d'outils &Crawler - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - D:\PROGRA~1\Crawler\ctbr.dll
O4 - HKLM\..\Run: [Hotkey] D:\Program Files\Hotkey\Hotkey.exe
O4 - HKLM\..\Run: [USB Keyboard] D:\Program Files\USB Keyboard Driver\kb_2k.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [Flashget] D:\Program Files\FlashGet\FlashGet.exe /min
O4 - HKLM\..\Run: [TkBellExe] "D:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SpywareTerminator] "D:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [ISTray] "D:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [avast!] D:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Ad-Watch] D:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [PC Suite Tray] "D:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Utility Tray.lnk = D:\WINDOWS\system32\sistray.exe
O8 - Extra context menu item: &Tout télécharger avec FlashGet - D:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Télécharger avec FlashGet - D:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Program Files\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Program Files\FlashGet\FlashGet.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: d:\windows\system32\nwprovau.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{A2107830-9FA5-4B1A-9BF2-281816EB9EE3}: NameServer = 208.67.222.222 208.67.220.220
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - (no CLSID) - (no file)
O20 - Winlogon Notify: SafenSec - D:\WINDOWS\
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - D:\Program Files\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Google Software Updater (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - D:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - D:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - D:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - D:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: ServiceLayer - Nokia. - D:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - D:\Program Files\Spyware Terminator\sp_rsser.exe
O24 - Desktop Component 0: (no name) - http://upload.wikimedia.org/wikipedia/commons/thumb/5/59/Khaled-binwalid-mosque2.jpg/180px-Khaled-binwalid-mosque2.jpg

jacques.gache · Answer

bonjour, tu fais ce qui suit dans l'ordre , MERCI

1) : Télécharge ToolBar-S&D ( Merci à Eric_71, Angeldark, Sham_Rock et XmichouX )
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2 

Lances l'installation du programme en exécutant le fichier téléchargé. 
Double-clique maintenant sur le raccourci de Toolbar-S&D. 
Sélectionnes la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée. 
Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche. 
Postes le rapport généré. (C:\TB.txt) 



2) :  Télécharge Malwarebytes' Anti-Malware: https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

. sur la page cliques sur Télécharger Malwarebyte's Anti-Malware
. enregistres le sur le bureau
. Double cliques sur le fichier téléchargé pour lancer le processus d'installation.
. si le pare-feu demande l'autorisation  de se connecter pour malwarebytes, acceptes
. Il va se mettre à jour une fois faite
. rend-toi dans l'onglet, Recherche
. Sélectionnes  Exécuter un examen complet
. Cliques sur Rechercher
. Le scan démarre.
. A la fin de l'analyse, un message s'affiche :
 L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés.
. Cliques sur Ok pour poursuivre.
. Si des malwares ont été détectés, cliques sur Afficher les résultats
. Sélectionnes tout (ou laisses cochés)
  
. cliques sur Supprimer la sélection
 
. Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine.
. Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse.
. redemarre le pc
. une fois redémarré double-cliques sur malwarebytes
. rends toi dans l'onglet rapport/log
. tu cliques dessus pour l'afficher une fois affiché
. tu cliques sur edition en haut du boc notes,et puis sur sélectionner tous
. tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse
. tu cliques droit dans le cadre de la reponse et coller

NASSI37 · Answer

'Discl ToolBar S&D (fr)

  MsgBox " "&VbCrLf&"L'outil à été testé et utilisé des centaines de fois mais il peut toutefois indiquer des fichiers / dossiers légitimes !"&VbCrLf&" "& _
             VbCrLf&"Ne pas lancer la phase de désinfection sans l'avis d'un spécialiste !"&VbCrLf&" "& _
             VbCrLf&"Dans le doute postez votre rapport sur un forum."&VbCrLf&" "& _
             VbCrLf&"Toute modification des composants de l'outil ou une mauvaise utilisation peut entrainer des dysfonctionnements."& _
             VbCrLf&" ",vbExclamation,"  ToolBar S&D"

NASSI37 · Answer

'© Eric_71 ( Contact : eric.71.MesPages@gmail.com )
  On Error Resume Next
  Dim fso
  Set FSO = CreateObject("Scripting.FileSystemObject")
  Set FTX =  FSO.createTextFile("OS_v.txt",true)
  strComputer = "."
  Set objWMIService = GetObject("winmgmts:" & "{impersonationLevel=impersonate}!\" & _
  strComputer & "oot\cimv2")
 
  Set OS__infos = objWMIService.ExecQuery("Select * from Win32_OperatingSystem")
  Set BO__infos = objWMIService.ExecQuery("Select * from Win32_ComputerSystem")
  Set US__infos = objWMIService.ExecQuery("Select * from Win32_NetworkLoginProfile")
  Set PR__infos = objWMIService.ExecQuery("Select * from Win32_Processor")
  Set BI__infos = objWMIService.ExecQuery("Select * from Win32_BIOS")
  Set DI__infos = objWMIService.ExecQuery("Select * from Win32_LogicalDisk",,48)
  Set objWMISecurity = GetObject("winmgmts:{impersonationLevel=impersonate}!\.oot\SecurityCenter") 
  Set colAV = objWMISecurity.ExecQuery("Select * from AntiVirusProduct")
  Set colFI = objWMISecurity.ExecQuery("Select * from FirewallProduct")
  Set wshNetwork = CreateObject("WScript.Network")
  strUser = wshNetwork.Username
  For Each objOS__ in OS__infos
      OSvers = objOS__.Caption & " ( v" & objOS__.Version & " ) " & objOS__.CSDVersion
      OSbuild = objOS__.BuildType
  Next
  For Each objBO__ in BO__infos
      BOprocT = objBO__.SystemType
  Next
  For Each objPR__ in PR__infos
      PRprocN = objPR__.Name
  Next
  For Each objBI__ in BI__infos
      BIbios = "BIOS : " & objBI__.Name
  Next
  For Each objUS__ in US__infos
      If objUS__.Privileges = 2 Then
                USuser = "USER : " & strUser & " ( Administrator )"
            Else
                USuser = "USER : " & strUser & " ( Not Administrator ! )"
            End If
  Next
  For Each objBO__ in BO__infos
      BOboot = "BOOT : " & objBO__.BootupState
  Next
  For Each objAV In colAV
      If objAV.OnAccessScanningEnabled = 0 Then
            AVstatus = "Not Activated"
      Else
            AVstatus = "Activated"
      End If
  Next
  For Each objFI In colFI
      If objFI.Enabled = 0 Then
            FIstatus = "Not Activated"
      Else
            FIstatus = "Activated"
      End If
  Next
  For Each objAV in colAV
      AVstat = "Antivirus : " & objAV.DisplayName & " " & objAV.VersionNumber & " (" & AVstatus & ")"
  Next
  For Each objFI In colFI
      FIstat = "Firewall  : " & objFI.DisplayName & " " & objFI.VersionNumber & " (" & FIstatus & ")"
  Next
  For Each objDI__ in DI__infos
      Select Case objDI__.DriveType
            Case 1 strTL = "..."
            Case 2 strTL = "USB"
            Case 3 strTL = "Local Disk"
            Case 4 strTL = "Network Disk"
            Case 5 strTL = "CD or DVD"
            Case 6 strTL = "RAM"
            Case Else strTL = "..."
      End Select
      If objDI__.DriveType =2 Then
            strTD = Int(objDI__.Size /1048576) & " Mo"
      Else
            strTD = Int(objDI__.Size /1073741824) & " Go"
      End If
      if strTD = " Go" Then
            strDI = strDI & objDI__.Name & "\ (" & strTL & ")" & vbCrlf
      elseif  strTD = " Mo" Then
            strDI = strDI & objDI__.Name & "\ (" & strTL & ")" & vbCrlf
      else
            strDI = strDI & objDI__.Name & "\ (" & strTL & ") - " & objDI__.FileSystem & _
            " - Total:" & strTD & " (Free:" & Int(objDI__.FreeSpace /1073741824) & " Go)" & vbCrlf
      end if
  Next
  FTX.writeline OSvers
  FTX.writeline BOprocT & " ( " & OSbuild & " : " & PRprocN & " )"
  FTX.writeline BIbios
  FTX.writeline USuser
  FTX.writeline BOboot
  FTX.writeline ""
  FTX.writeline AVstat
  FTX.writeline FIstat
  FTX.writeline ""
  FTX.writeline strDI
  FTX.close

NASSI37 · Answer

-----------\  ToolBar S&D 1.2.8   XP/Vista


   "D:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
   Option : [1] ( 11/02/2009|21:00 )

   -----------\  Recherche de Fichiers / Dossiers ...

   D:\Program Files\Crawler
   D:\Program Files\Crawler\adrkeys.dat
   D:\Program Files\Crawler\COMMON_FF.dat
   D:\Program Files\Crawler\confirm.dat
   D:\Program Files\Crawler\ctbcomm.dll
   D:\Program Files\Crawler\ctbr.dll
   D:\Program Files\Crawler\CTConf.dat
   D:\Program Files\Crawler\CTipsDef.dll
   D:\Program Files\Crawler\CToolbar.exe
   D:\Program Files\Crawler\CUpdate.exe
   D:\Program Files\Crawler\Download
   D:\Program Files\Crawler\firefox
   D:\Program Files\Crawler\Languages
   D:\Program Files\Crawler\lookfor.dat
   D:\Program Files\Crawler\majorse.dat
   D:\Program Files\Crawlerootmenu.dat
   D:\Program Files\Crawler\services.dat
   D:\Program Files\Crawler\SSaver
   D:\Program Files\Crawler\STWSGLanguageAct
   D:\Program Files\Crawler\STWSG_FF.dat
   D:\Program Files\Crawler\TBR5LanguageAct
   D:\Program Files\Crawler\Update
   D:\Program Files\Crawler\WebSecurityGuard.dll
   D:\Program Files\Crawler\WSGData
   D:\Program Files\Crawler\firefox\chrome
   D:\Program Files\Crawler\firefox\chrome.manifest
   D:\Program Files\Crawler\firefox\components
   D:\Program Files\Crawler\firefox\install.ini
   D:\Program Files\Crawler\firefox\install.rdf
   D:\Program Files\Crawler\firefox\stwsg_ff.ini
   D:\Program Files\Crawler\firefox\chrome\common.jar
   D:\Program Files\Crawler\firefox\chrome\stwsg.jar
   D:\Program Files\Crawler\firefox\components\xcomm.dll
   D:\Program Files\Crawler\firefox\components\xplugin.xpt
   D:\Program Files\Crawler\firefox\components\xshared.dll
   D:\Program Files\Crawler\firefox\components\xshared.xpt
   D:\Program Files\Crawler\firefox\components\xsupport.dll
   D:\Program Files\Crawler\firefox\components\xsupport.xpt
   D:\Program Files\Crawler\firefox\components\xwsg.dll
   D:\Program Files\Crawler\Languages\STWSG_CS.cab
   D:\Program Files\Crawler\Languages\STWSG_DE.cab
   D:\Program Files\Crawler\Languages\STWSG_EN.cab
   D:\Program Files\Crawler\Languages\STWSG_ES.cab
   D:\Program Files\Crawler\Languages\STWSG_FF.cab
   D:\Program Files\Crawler\Languages\STWSG_FR.cab
   D:\Program Files\Crawler\Languages\STWSG_IT.cab
   D:\Program Files\Crawler\Languages\STWSG_PT-BR.cab
   D:\Program Files\Crawler\Languages\STWSG_PT.cab
   D:\Program Files\Crawler\Languages\TBR5_CS.cab
   D:\Program Files\Crawler\Languages\TBR5_DE.cab
   D:\Program Files\Crawler\Languages\TBR5_EN.cab
   D:\Program Files\Crawler\Languages\TBR5_ES.cab
   D:\Program Files\Crawler\Languages\TBR5_FR.cab
   D:\Program Files\Crawler\Languages\TBR5_IT.cab
   D:\Program Files\Crawler\Languages\TBR5_NL.cab
   D:\Program Files\Crawler\Languages\TBR5_PL.cab
   D:\Program Files\Crawler\Languages\TBR5_PT-BR.cab
   D:\Program Files\Crawler\Languages\TBR5_PT.cab
   D:\Program Files\Crawler\Languages\TBR5_RU.cab
   D:\Program Files\Crawler\SSaver\bin
   D:\Program Files\Crawler\SSaver\bin\2Dsaver
   D:\Program Files\Crawler\SSaver\bin\2Dsaver\2Dsaver.scr
   D:\Program Files\Crawler\SSaver\bin\2Dsaver\data.pck
   D:\Program Files\Crawler\SSaver\bin\2Dsaver\SAV_2DSAVER.xml
   D:\Program Files\Crawler\STWSGLanguageAct\info.ini
   D:\Program Files\Crawler\STWSGLanguageAct\language.ini
   D:\Program Files\Crawler\TBR5LanguageAct\info.ini
   D:\Program Files\Crawler\TBR5LanguageAct\language.ini
   D:\Program Files\Crawler\Update\domains.cab
   D:\Program Files\Crawler\Update\domains_017_diff.cab
   D:\Program Files\Crawler\WSGData\domains
   D:\Program Files\Crawler\WSGData\g_S-1-5-21-1409082233-1757981266-725345543-1003.dat
   D:\Program Files\Crawler\WSGData\p_S-1-5-21-1409082233-1757981266-725345543-1003.dat
   D:\Program Files\Crawler\WSGData\ud_S-1-5-21-1409082233-1757981266-725345543-1003.dat
   D:\Program Files\Crawler\WSGData\wfilter.dat
   D:\Program Files\Crawler\WSGData\w_S-1-5-21-1409082233-1757981266-725345543-1003.dat
   D:\Program Files\Crawler\WSGData\domains\domains_000.dat
   D:\Program Files\Crawler\WSGData\domains\domains_000_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_001.dat
   D:\Program Files\Crawler\WSGData\domains\domains_001_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_002.dat
   D:\Program Files\Crawler\WSGData\domains\domains_002_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_003.dat
   D:\Program Files\Crawler\WSGData\domains\domains_003_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_004.dat
   D:\Program Files\Crawler\WSGData\domains\domains_004_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_005.dat
   D:\Program Files\Crawler\WSGData\domains\domains_005_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_006.dat
   D:\Program Files\Crawler\WSGData\domains\domains_006_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_007.dat
   D:\Program Files\Crawler\WSGData\domains\domains_007_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_008.dat
   D:\Program Files\Crawler\WSGData\domains\domains_008_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_009.dat
   D:\Program Files\Crawler\WSGData\domains\domains_009_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_010.dat
   D:\Program Files\Crawler\WSGData\domains\domains_010_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_011.dat
   D:\Program Files\Crawler\WSGData\domains\domains_011_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_012.dat
   D:\Program Files\Crawler\WSGData\domains\domains_012_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_013.dat
   D:\Program Files\Crawler\WSGData\domains\domains_013_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_014.dat
   D:\Program Files\Crawler\WSGData\domains\domains_014_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_015.dat
   D:\Program Files\Crawler\WSGData\domains\domains_015_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_016.dat
   D:\Program Files\Crawler\WSGData\domains\domains_016_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_017.dat
   D:\Program Files\Crawler\WSGData\domains\domains_017_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_018.dat
   D:\Program Files\Crawler\WSGData\domains\domains_018_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_019.dat
   D:\Program Files\Crawler\WSGData\domains\domains_019_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_020.dat
   D:\Program Files\Crawler\WSGData\domains\domains_020_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_021.dat
   D:\Program Files\Crawler\WSGData\domains\domains_021_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_022.dat
   D:\Program Files\Crawler\WSGData\domains\domains_022_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_023.dat
   D:\Program Files\Crawler\WSGData\domains\domains_023_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_024.dat
   D:\Program Files\Crawler\WSGData\domains\domains_024_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_025.dat
   D:\Program Files\Crawler\WSGData\domains\domains_025_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_026.dat
   D:\Program Files\Crawler\WSGData\domains\domains_026_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_027.dat
   D:\Program Files\Crawler\WSGData\domains\domains_027_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_028.dat
   D:\Program Files\Crawler\WSGData\domains\domains_028_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_029.dat
   D:\Program Files\Crawler\WSGData\domains\domains_029_diff.dat
   D:\Program Files\Crawler\WSGData\domains\domains_030.dat
   D:\Program Files\Crawler\WSGData\domains\domains_030_diff.dat
   D:\Program Files\Crawler\WSGData\domains\index.dat
   D:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Barre d'outils Crawler
   D:\Program Files\Mozilla Firefox\searchplugins\crawlersrch.xml

   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="D:\WINDOWS\system32\blank.htm"
   "Start Page"="https://www.msn.com/fr-fr/"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"
   "SearchAssistant"="http://www.crawler.com/search/ie.aspx?tb_id=60446"
   "CustomizeSearch"="http://dnl.crawler.com/support/sa_customize.aspx?TbId=60446"


   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !


   1 - "D:\ToolBar SD\TB_1.txt" - 11/02/2009|21:01 - Option : [1]

   -----------\  Fin du rapport a 21:01:12,60

NASSI37 · Answer

-----------\  ToolBar S&D 1.2.8   XP/Vista


   "D:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
   Option : [2] ( 11/02/2009|21:03 )

   -----------\ SUPPRESSION

   Supprime! - D:\Program Files\Crawler\adrkeys.dat
   Supprime! - D:\Program Files\Crawler\COMMON_FF.dat
   Supprime! - D:\Program Files\Crawler\confirm.dat
   Supprime! - D:\Program Files\Crawler\ctbcomm.dll
   Supprime! - D:\Program Files\Crawler\ctbr.dll
   Supprime! - D:\Program Files\Crawler\CTConf.dat
   Supprime! - D:\Program Files\Crawler\CTipsDef.dll
   Supprime! - D:\Program Files\Crawler\CToolbar.exe
   Supprime! - D:\Program Files\Crawler\CUpdate.exe
   Supprime! - D:\Program Files\Crawler\Download
   Supprime! - D:\Program Files\Crawler\firefox
   Supprime! - D:\Program Files\Crawler\Languages
   Supprime! - D:\Program Files\Crawler\lookfor.dat
   Supprime! - D:\Program Files\Crawler\majorse.dat
   Supprime! - D:\Program Files\Crawlerootmenu.dat
   Supprime! - D:\Program Files\Crawler\services.dat
   Supprime! - D:\Program Files\Crawler\SSaver
   Supprime! - D:\Program Files\Crawler\STWSGLanguageAct
   Supprime! - D:\Program Files\Crawler\STWSG_FF.dat
   Supprime! - D:\Program Files\Crawler\TBR5LanguageAct
   Supprime! - D:\Program Files\Crawler\Update
   Supprime! - D:\Program Files\Crawler\WebSecurityGuard.dll
   Supprime! - D:\Program Files\Crawler\WSGData
   Supprime! - D:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Barre d'outils Crawler
   Supprime! - D:\Program Files\Mozilla Firefox\searchplugins\crawlersrch.xml
   Supprime! - D:\Program Files\Crawler

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="D:\WINDOWS\system32\blank.htm"
   "Start Page"="https://www.msn.com/fr-fr/"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"
   "SearchAssistant"="http://www.crawler.com/search/ie.aspx?tb_id=60446"
   "CustomizeSearch"="http://dnl.crawler.com/support/sa_customize.aspx?TbId=60446"


   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !


   1 - "D:\ToolBar SD\TB_1.txt" - 11/02/2009|21:01 - Option : [1]
   2 - "D:\ToolBar SD\TB_2.txt" - 11/02/2009|21:05 - Option : [2]

   -----------\  Fin du rapport a 21:05:14,57

c'est le dernier rapport .......................

. infections pas vouloir se supprimer

5 réponses

Newsletters