PUBS QUI N'ARRETENT PAS DE S'AFFICHER

Question

Bonjour,

jai des pubs qui s'affichent à répétition , j'ai fai un rapport hijackthis :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:36:19, on 16/02/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\System32undll32.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Users\Amandine\Program Files\DNA\btdna.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\WINDOWS\System32undll32.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10a.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://recherche.neuf.fr/ie/default.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://recherche.neuf.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://recherche.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/...
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://recherche.neuf.fr/ie/default.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [HP Health Check Scheduler] C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32
vsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Users\Amandine\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [ace readme] "C:\ProgramData\dashjumpjump.l31qb"
O4 - HKCU\..\Run: [vc log bows face] "C:\ProgramData\dupe bind link.heo4fro"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix: 
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/...
O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} - http://activex.camfrogweb.com/...
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.fr/SnapfishActivia.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/VistaMSNPUplden-us.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://www.mypix.com/fr/fr/importer/ImageUploader4.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

chimay8 · Accepted Answer

PK TAIME PAS QUAND ON ECRIT EN GRAND lol !

parce que sur les forums,on considère que c'est équivalent à crier!

ric025 · Answer

Re!

Télécharge LopS&D (de eric_71)

https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

Enregistre le fichier sur ton bureau.
Lance l’installation.
Une fois le programme lancé tape F pour être en Français.
Puis exécute l’option 1, Recherche.
Un rapport sera généré.
Poste son intégralité ici.

Note :
Dans le cas où le rapport ne s’ouvre pas, ce dernier se trouve sur C:\LopR.txt

Petit tutorial si besoin: http://www.malekal.com/tutorial_Lop_SD.php

dridri77 · Answer

installe spybot et fais un scan

manda963 · Answer

Merci rico la recherche est en cours ! je poste le rapport d ke c fini  !!

manda963 · Answer

--------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft® Windows Vista™ Édition Familiale Premium  ( v6.0.6001 ) Service Pack 1
   X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual-Core Processor TK-55 )
   BIOS : PhoenixBIOS 4.0 Release 6.1     
   USER : Amandine ( Not Administrator ! )
   BOOT : Normal boot
   Antivirus : avast! antivirus 4.8.1229 [VPS 090215-0] 4.8.1229 (Activated)
   C:\ (Local Disk) - NTFS - Total:104 Go (Free:32 Go)
   D:\ (Local Disk) - NTFS - Total:7 Go (Free:2 Go)
   E:\ (CD or DVD)
   G:\ (USB)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [1] ( 16/02/2009|13:20 )

   [ UAC => 1 ]
 
   --------------------\  Listing des dossiers dans Local

   [22/11/2008|00:33] C:\Users\Amandine\AppData\Local\Adobe
   [12/11/2008|00:07] C:\Users\Amandine\AppData\Local\Apple
   [26/11/2008|22:50] C:\Users\Amandine\AppData\Local\Apple Computer
   [01/09/2008|22:07] C:\Users\Amandine\AppData\Local\Application Data 
   [01/09/2008|22:17] C:\Users\Amandine\AppData\Local\AtStart.txt
   [01/12/2008|16:46] C:\Users\Amandine\AppData\Local\d3d9caps.dat
   [12/02/2009|21:41] C:\Users\Amandine\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
   [26/11/2008|18:48] C:\Users\Amandine\AppData\Local\DNA
   [01/09/2008|22:17] C:\Users\Amandine\AppData\Local\DSwitch.txt
   [09/12/2008|17:13] C:\Users\Amandine\AppData\Local\GDIPFONTCACHEV1.DAT
   [20/11/2008|16:50] C:\Users\Amandine\AppData\Local\Google
   [01/09/2008|22:07] C:\Users\Amandine\AppData\Local\Historique 
   [12/02/2009|22:03] C:\Users\Amandine\AppData\Local\IconCache.db
   [29/10/2008|17:19] C:\Users\Amandine\AppData\Local\Microsoft
   [19/12/2008|11:14] C:\Users\Amandine\AppData\Local\Microsoft Help
   [01/09/2008|22:17] C:\Users\Amandine\AppData\Local\QSwitch.txt
   [13/01/2009|09:16] C:\Users\Amandine\AppData\Local\QuickPlay
   [08/12/2008|10:12] C:\Users\Amandine\AppData\Local\Seven Zip
   [16/02/2009|13:13] C:\Users\Amandine\AppData\Local\Temp
   [12/11/2008|13:24] C:\Users\Amandine\AppData\Local\TempInsight Software
   [01/09/2008|22:07] C:\Users\Amandine\AppData\Local\Temporary Internet Files 
   [17/11/2008|16:45] C:\Users\Amandine\AppData\Local\VirtualStore
   [19/11/2008|13:29] C:\Users\Amandine\AppData\Local\www.kinovea.org
 
   --------------------\  Tâches planifiées dans C:\Windows	asks

   [16/02/2009 11:22][--ah-----] C:\Windows	asks\SA.DAT
   [15/02/2009 23:57][--a------] C:\Windows	asks\SCHEDLGU.TXT

   --------------------\  Listing des dossiers dans C:\ProgramData
   
   [24/12/2008|12:12] C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
   [29/10/2008|11:11] C:\ProgramData\Adobe
   [12/11/2008|00:05] C:\ProgramData\Apple
   [12/11/2008|00:09] C:\ProgramData\Apple Computer
   [01/09/2008|22:03] C:\ProgramData\Application Data 
   [06/02/2009|20:38] C:\ProgramData\Atomcreative
   [01/09/2008|22:03] C:\ProgramData\Bureau 
   [06/11/2008|07:20] C:\ProgramData\CyberLink
   [06/02/2009|20:37] C:\ProgramData\dashjumpjump.4bw8t
   [06/02/2009|20:37] C:\ProgramData\dashjumpjump.l31qb
   [01/09/2008|22:03] C:\ProgramData\Documents 
   [06/02/2009|20:37] C:\ProgramData\dupe bind link.heo4fro
   [01/09/2008|22:03] C:\ProgramData\Favoris 
   [17/10/2008|23:06] C:\ProgramData\Google
   [18/08/2007|03:50] C:\ProgramData\Hewlett-Packard
   [03/09/2008|12:26] C:\ProgramData\HP
   [18/08/2007|03:18] C:\ProgramData\hpzinstall.log
   [12/11/2008|13:24] C:\ProgramData\Insight Software
   [12/11/2008|13:24] C:\ProgramData\Insight Software Solutions
   [06/02/2009|20:37] C:\ProgramData\Memo Drive Vc Log
   [01/09/2008|22:03] C:\ProgramData\Menu D‚marrer 
   [06/09/2008|11:29] C:\ProgramData\Messenger Plus!
   [09/12/2008|16:49] C:\ProgramData\Microsoft
   [12/02/2009|20:45] C:\ProgramData\Microsoft Help
   [01/09/2008|22:03] C:\ProgramData\ModŠles 
   [13/10/2008|21:49] C:\ProgramData\muvee Technologies
   [18/08/2007|02:44] C:\ProgramData\Roxio
   [09/12/2008|16:23] C:\ProgramData\Sonic
   [19/09/2008|17:21] C:\ProgramData\Symantec
   [27/11/2008|16:36] C:\ProgramData\TEMP
   [19/09/2008|17:41] C:\ProgramData\WLInstaller

   --------------------\  Listing des dossiers dans C:\Program Files

   [29/10/2008|11:12] C:\Program Files\Adobe
   [02/09/2008|10:03] C:\Program Files\Alwil Software
   [12/11/2008|00:06] C:\Program Files\Apple Software Update
   [26/11/2008|18:48] C:\Program Files\BitTorrent
   [24/12/2008|12:13] C:\Program Files\Bonjour
   [12/11/2008|13:29] C:\Program Files\Capture Express
   [06/02/2009|20:36] C:\Program Files\Circle Developement
   [08/12/2008|10:23] C:\Program Files\Common Files
   [22/11/2008|00:54] C:\Program Files\CONEXANT
   [26/11/2008|18:48] C:\Program Files\DNA
   [18/08/2007|03:19] C:\Program Files\EasyBits
   [02/01/2009|11:28] C:\Program Files\Elaborate Bytes
   [01/09/2008|22:03] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
   [12/11/2008|13:07] C:\Program Files\Gadwin Systems
   [30/10/2008|19:11] C:\Program Files\Google
   [18/08/2007|03:45] C:\Program Files\Hewlett-Packard
   [02/09/2008|22:44] C:\Program Files\HP
   [18/08/2007|03:29] C:\Program Files\HPQ
   [09/01/2009|21:24] C:\Program Files\InstallShield Installation Information
   [23/12/2008|01:41] C:\Program Files\Internet Explorer
   [24/12/2008|12:11] C:\Program Files\iPod
   [24/12/2008|12:12] C:\Program Files\iTunes
   [28/12/2008|10:30] C:\Program Files\Java
   [27/10/2008|13:05] C:\Program Files\JRE
   [19/11/2008|13:33] C:\Program Files\Kinovea
   [07/10/2008|12:23] C:\Program Files\Lexmark Z700-P700 Series
   [06/02/2009|20:36] C:\Program Files\Messenger Plus! Live
   [03/09/2008|12:33] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [02/11/2006|13:37] C:\Program Files\Microsoft Games
   [09/12/2008|16:51] C:\Program Files\Microsoft Office
   [22/11/2008|00:51] C:\Program Files\Microsoft Silverlight
   [09/12/2008|16:51] C:\Program Files\Microsoft Visual Studio
   [09/12/2008|16:43] C:\Program Files\Microsoft Visual Studio 8
   [09/12/2008|16:52] C:\Program Files\Microsoft Works
   [09/12/2008|16:49] C:\Program Files\Microsoft.NET
   [07/10/2008|14:52] C:\Program Files\Movie Maker
   [26/11/2008|18:47] C:\Program Files\Mozilla Firefox
   [09/12/2008|16:52] C:\Program Files\MSBuild
   [01/09/2008|22:54] C:\Program Files\MSXML 4.0
   [18/08/2007|03:24] C:\Program Files\muvee Technologies
   [01/09/2008|22:19] C:\Program Files\Neuf
   [27/10/2008|13:05] C:\Program Files\OpenOffice.org 3
   [10/12/2008|12:43] C:\Program Files\OpenVideoCapture
   [24/12/2008|12:09] C:\Program Files\QuickTime
   [02/11/2006|13:37] C:\Program Files\Reference Assemblies
   [18/08/2007|02:45] C:\Program Files\Roxio
   [22/11/2008|00:39] C:\Program Files\SAGEM
   [22/11/2008|00:27] C:\Program Files\Securitoo
   [18/08/2007|03:21] C:\Program Files\Services en ligne
   [18/08/2007|02:06] C:\Program Files\Synaptics
   [16/02/2009|12:35] C:\Program Files\Trend Micro
   [02/11/2006|14:01] C:\Program Files\Uninstall Information
   [13/10/2008|21:55] C:\Program Files\VideoLAN
   [22/11/2008|00:57] C:\Program Files\Wanadoo
   [07/10/2008|14:52] C:\Program Files\Windows Calendar
   [07/10/2008|14:52] C:\Program Files\Windows Collaboration
   [07/10/2008|14:52] C:\Program Files\Windows Defender
   [07/10/2008|14:52] C:\Program Files\Windows Journal
   [02/09/2008|17:02] C:\Program Files\Windows Live
   [12/02/2009|20:45] C:\Program Files\Windows Mail
   [07/10/2008|14:52] C:\Program Files\Windows Media Player
   [01/09/2008|22:03] C:\Program Files\Windows NT
   [07/10/2008|14:52] C:\Program Files\Windows Photo Gallery
   [07/10/2008|14:52] C:\Program Files\Windows Sidebar
   [30/01/2009|21:55] C:\Program Files\WinRAR

   --------------------\  Listing des dossiers dans C:\Program Files\Common Files

   [29/10/2008|11:12] C:\Program Files\Common Files\Adobe
   [24/12/2008|12:11] C:\Program Files\Common Files\Apple
   [08/12/2008|10:23] C:\Program Files\Common Files\Designer
   [18/08/2007|03:17] C:\Program Files\Common Files\HP
   [18/08/2007|03:27] C:\Program Files\Common Files\InstallShield
   [18/08/2007|03:49] C:\Program Files\Common Files\Java
   [18/08/2007|03:29] C:\Program Files\Common Files\LightScribe
   [10/02/2009|09:05] C:\Program Files\Common Files\microsoft shared
   [18/08/2007|03:24] C:\Program Files\Common Files\muvee Technologies
   [18/08/2007|02:43] C:\Program Files\Common Files\Roxio Shared
   [02/11/2006|12:18] C:\Program Files\Common Files\Services
   [18/08/2007|02:43] C:\Program Files\Common Files\Sonic Shared
   [02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
   [18/08/2007|02:45] C:\Program Files\Common Files\SureThing Shared
   [19/09/2008|17:21] C:\Program Files\Common Files\Symantec Shared
   [09/12/2008|17:01] C:\Program Files\Common Files\System
   [02/09/2008|16:54] C:\Program Files\Common Files\WindowsLiveInstaller

   --------------------\  Process

   ( 78 Processes )

   iexplore.exe ~ [PID:3212]
   iexplore.exe ~ [PID:3180]
   iexplore.exe ~ [PID:4556]

   --------------------\  Recherche avec S_Lop

   C:\ProgramData\dashjumpjump.4bw8t
   C:\ProgramData\dashjumpjump.l31qb
   C:\ProgramData\dupe bind link.heo4fro
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\ProgramData\Memo Drive Vc Log
   C:\ProgramData\Memo Drive Vc Log\lite mags.dat
   C:\ProgramData\Memo Drive Vc Log\lite mags.exe
   C:\Users\Amandine\AppData\Local\Temp
sfEB2D.tmp
   C:\Users\Amandine\AppData\Local\Temp
st462F.tmp
   C:\Program Files\Circle Developement
   C:\Program Files\Circle Developement\Uninstall.exe
   C:\Users\Amandine\AppData\Roaming\MICROS~1\Windows\Cookies\amandine@advertising[2].txt
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
   "ace readme"="\"C:\ProgramData\dashjumpjump.l31qb\""
   "vc log bows face"="\"C:\ProgramData\dupe bind link.heo4fro\""

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-02-16 13:20:57
   Windows 6.0.6001 Service Pack 1 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   C:\Users\Amandine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8ZDQGUL4\inbox[1].htm 37422 bytes
   C:\Users\Amandine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8ZDQGUL4\FR-FFR600[1].htm 276 bytes
   scan completed successfully
   hidden processes: 0
   hidden files: 332
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:1381][D:55]-> C:\Users\Amandine\AppData\Local\Temp
   [F:1041][D:1]-> C:\Users\Amandine\AppData\Roaming\MICROS~1\Windows\Cookies
   [F:3797][D:4]-> C:\Users\Amandine\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
   [F:3185][D:59]-> C:\$Recycle.Bin

   1 - "C:\Lop SD\LopR_1.txt" - 16/02/2009|13:25 - Option : [1]

   --------------------\  Fin du rapport a 13:25:20
   [ UAC => 1 ]

 voila le rapport

ric025 · Answer

Ok! 

Relance LopSD, choisis F pour la langue.

Exécute l'option 2.

Poste le rapport généré.

=============

Puis:

Télécharge Malwarebytes Anti-Malware (MBAM):

MBAM

Installe-le en vérifiant que la case de mise à jour soit bien cochée en fin d'installation.

Après la mise à jour, lance-le et coche "Examen Rapide". Puis "Rechercher".

Si MBAM trouve quelque chose: fais "Voir les résultats" puis "Supprimer la sélection".

Poste le rapport généré.

A++ ;)

manda963 · Answer

--------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft® Windows Vista™ Édition Familiale Premium  ( v6.0.6001 ) Service Pack 1
   X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual-Core Processor TK-55 )
   BIOS : PhoenixBIOS 4.0 Release 6.1     
   USER : Amandine ( Not Administrator ! )
   BOOT : Normal boot
   Antivirus : avast! antivirus 4.8.1229 [VPS 090215-0] 4.8.1229 (Activated)
   C:\ (Local Disk) - NTFS - Total:104 Go (Free:32 Go)
   D:\ (Local Disk) - NTFS - Total:7 Go (Free:2 Go)
   E:\ (CD or DVD)
   G:\ (USB)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [1] ( 16/02/2009|13:20 )

   [ UAC => 1 ]
 
   --------------------\  Listing des dossiers dans Local

   [22/11/2008|00:33] C:\Users\Amandine\AppData\Local\Adobe
   [12/11/2008|00:07] C:\Users\Amandine\AppData\Local\Apple
   [26/11/2008|22:50] C:\Users\Amandine\AppData\Local\Apple Computer
   [01/09/2008|22:07] C:\Users\Amandine\AppData\Local\Application Data 
   [01/09/2008|22:17] C:\Users\Amandine\AppData\Local\AtStart.txt
   [01/12/2008|16:46] C:\Users\Amandine\AppData\Local\d3d9caps.dat
   [12/02/2009|21:41] C:\Users\Amandine\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
   [26/11/2008|18:48] C:\Users\Amandine\AppData\Local\DNA
   [01/09/2008|22:17] C:\Users\Amandine\AppData\Local\DSwitch.txt
   [09/12/2008|17:13] C:\Users\Amandine\AppData\Local\GDIPFONTCACHEV1.DAT
   [20/11/2008|16:50] C:\Users\Amandine\AppData\Local\Google
   [01/09/2008|22:07] C:\Users\Amandine\AppData\Local\Historique 
   [12/02/2009|22:03] C:\Users\Amandine\AppData\Local\IconCache.db
   [29/10/2008|17:19] C:\Users\Amandine\AppData\Local\Microsoft
   [19/12/2008|11:14] C:\Users\Amandine\AppData\Local\Microsoft Help
   [01/09/2008|22:17] C:\Users\Amandine\AppData\Local\QSwitch.txt
   [13/01/2009|09:16] C:\Users\Amandine\AppData\Local\QuickPlay
   [08/12/2008|10:12] C:\Users\Amandine\AppData\Local\Seven Zip
   [16/02/2009|13:13] C:\Users\Amandine\AppData\Local\Temp
   [12/11/2008|13:24] C:\Users\Amandine\AppData\Local\TempInsight Software
   [01/09/2008|22:07] C:\Users\Amandine\AppData\Local\Temporary Internet Files 
   [17/11/2008|16:45] C:\Users\Amandine\AppData\Local\VirtualStore
   [19/11/2008|13:29] C:\Users\Amandine\AppData\Local\www.kinovea.org
 
   --------------------\  Tâches planifiées dans C:\Windows	asks

   [16/02/2009 11:22][--ah-----] C:\Windows	asks\SA.DAT
   [15/02/2009 23:57][--a------] C:\Windows	asks\SCHEDLGU.TXT

   --------------------\  Listing des dossiers dans C:\ProgramData
   
   [24/12/2008|12:12] C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
   [29/10/2008|11:11] C:\ProgramData\Adobe
   [12/11/2008|00:05] C:\ProgramData\Apple
   [12/11/2008|00:09] C:\ProgramData\Apple Computer
   [01/09/2008|22:03] C:\ProgramData\Application Data 
   [06/02/2009|20:38] C:\ProgramData\Atomcreative
   [01/09/2008|22:03] C:\ProgramData\Bureau 
   [06/11/2008|07:20] C:\ProgramData\CyberLink
   [06/02/2009|20:37] C:\ProgramData\dashjumpjump.4bw8t
   [06/02/2009|20:37] C:\ProgramData\dashjumpjump.l31qb
   [01/09/2008|22:03] C:\ProgramData\Documents 
   [06/02/2009|20:37] C:\ProgramData\dupe bind link.heo4fro
   [01/09/2008|22:03] C:\ProgramData\Favoris 
   [17/10/2008|23:06] C:\ProgramData\Google
   [18/08/2007|03:50] C:\ProgramData\Hewlett-Packard
   [03/09/2008|12:26] C:\ProgramData\HP
   [18/08/2007|03:18] C:\ProgramData\hpzinstall.log
   [12/11/2008|13:24] C:\ProgramData\Insight Software
   [12/11/2008|13:24] C:\ProgramData\Insight Software Solutions
   [06/02/2009|20:37] C:\ProgramData\Memo Drive Vc Log
   [01/09/2008|22:03] C:\ProgramData\Menu D‚marrer 
   [06/09/2008|11:29] C:\ProgramData\Messenger Plus!
   [09/12/2008|16:49] C:\ProgramData\Microsoft
   [12/02/2009|20:45] C:\ProgramData\Microsoft Help
   [01/09/2008|22:03] C:\ProgramData\ModŠles 
   [13/10/2008|21:49] C:\ProgramData\muvee Technologies
   [18/08/2007|02:44] C:\ProgramData\Roxio
   [09/12/2008|16:23] C:\ProgramData\Sonic
   [19/09/2008|17:21] C:\ProgramData\Symantec
   [27/11/2008|16:36] C:\ProgramData\TEMP
   [19/09/2008|17:41] C:\ProgramData\WLInstaller

   --------------------\  Listing des dossiers dans C:\Program Files

   [29/10/2008|11:12] C:\Program Files\Adobe
   [02/09/2008|10:03] C:\Program Files\Alwil Software
   [12/11/2008|00:06] C:\Program Files\Apple Software Update
   [26/11/2008|18:48] C:\Program Files\BitTorrent
   [24/12/2008|12:13] C:\Program Files\Bonjour
   [12/11/2008|13:29] C:\Program Files\Capture Express
   [06/02/2009|20:36] C:\Program Files\Circle Developement
   [08/12/2008|10:23] C:\Program Files\Common Files
   [22/11/2008|00:54] C:\Program Files\CONEXANT
   [26/11/2008|18:48] C:\Program Files\DNA
   [18/08/2007|03:19] C:\Program Files\EasyBits
   [02/01/2009|11:28] C:\Program Files\Elaborate Bytes
   [01/09/2008|22:03] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
   [12/11/2008|13:07] C:\Program Files\Gadwin Systems
   [30/10/2008|19:11] C:\Program Files\Google
   [18/08/2007|03:45] C:\Program Files\Hewlett-Packard
   [02/09/2008|22:44] C:\Program Files\HP
   [18/08/2007|03:29] C:\Program Files\HPQ
   [09/01/2009|21:24] C:\Program Files\InstallShield Installation Information
   [23/12/2008|01:41] C:\Program Files\Internet Explorer
   [24/12/2008|12:11] C:\Program Files\iPod
   [24/12/2008|12:12] C:\Program Files\iTunes
   [28/12/2008|10:30] C:\Program Files\Java
   [27/10/2008|13:05] C:\Program Files\JRE
   [19/11/2008|13:33] C:\Program Files\Kinovea
   [07/10/2008|12:23] C:\Program Files\Lexmark Z700-P700 Series
   [06/02/2009|20:36] C:\Program Files\Messenger Plus! Live
   [03/09/2008|12:33] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [02/11/2006|13:37] C:\Program Files\Microsoft Games
   [09/12/2008|16:51] C:\Program Files\Microsoft Office
   [22/11/2008|00:51] C:\Program Files\Microsoft Silverlight
   [09/12/2008|16:51] C:\Program Files\Microsoft Visual Studio
   [09/12/2008|16:43] C:\Program Files\Microsoft Visual Studio 8
   [09/12/2008|16:52] C:\Program Files\Microsoft Works
   [09/12/2008|16:49] C:\Program Files\Microsoft.NET
   [07/10/2008|14:52] C:\Program Files\Movie Maker
   [26/11/2008|18:47] C:\Program Files\Mozilla Firefox
   [09/12/2008|16:52] C:\Program Files\MSBuild
   [01/09/2008|22:54] C:\Program Files\MSXML 4.0
   [18/08/2007|03:24] C:\Program Files\muvee Technologies
   [01/09/2008|22:19] C:\Program Files\Neuf
   [27/10/2008|13:05] C:\Program Files\OpenOffice.org 3
   [10/12/2008|12:43] C:\Program Files\OpenVideoCapture
   [24/12/2008|12:09] C:\Program Files\QuickTime
   [02/11/2006|13:37] C:\Program Files\Reference Assemblies
   [18/08/2007|02:45] C:\Program Files\Roxio
   [22/11/2008|00:39] C:\Program Files\SAGEM
   [22/11/2008|00:27] C:\Program Files\Securitoo
   [18/08/2007|03:21] C:\Program Files\Services en ligne
   [18/08/2007|02:06] C:\Program Files\Synaptics
   [16/02/2009|12:35] C:\Program Files\Trend Micro
   [02/11/2006|14:01] C:\Program Files\Uninstall Information
   [13/10/2008|21:55] C:\Program Files\VideoLAN
   [22/11/2008|00:57] C:\Program Files\Wanadoo
   [07/10/2008|14:52] C:\Program Files\Windows Calendar
   [07/10/2008|14:52] C:\Program Files\Windows Collaboration
   [07/10/2008|14:52] C:\Program Files\Windows Defender
   [07/10/2008|14:52] C:\Program Files\Windows Journal
   [02/09/2008|17:02] C:\Program Files\Windows Live
   [12/02/2009|20:45] C:\Program Files\Windows Mail
   [07/10/2008|14:52] C:\Program Files\Windows Media Player
   [01/09/2008|22:03] C:\Program Files\Windows NT
   [07/10/2008|14:52] C:\Program Files\Windows Photo Gallery
   [07/10/2008|14:52] C:\Program Files\Windows Sidebar
   [30/01/2009|21:55] C:\Program Files\WinRAR

   --------------------\  Listing des dossiers dans C:\Program Files\Common Files

   [29/10/2008|11:12] C:\Program Files\Common Files\Adobe
   [24/12/2008|12:11] C:\Program Files\Common Files\Apple
   [08/12/2008|10:23] C:\Program Files\Common Files\Designer
   [18/08/2007|03:17] C:\Program Files\Common Files\HP
   [18/08/2007|03:27] C:\Program Files\Common Files\InstallShield
   [18/08/2007|03:49] C:\Program Files\Common Files\Java
   [18/08/2007|03:29] C:\Program Files\Common Files\LightScribe
   [10/02/2009|09:05] C:\Program Files\Common Files\microsoft shared
   [18/08/2007|03:24] C:\Program Files\Common Files\muvee Technologies
   [18/08/2007|02:43] C:\Program Files\Common Files\Roxio Shared
   [02/11/2006|12:18] C:\Program Files\Common Files\Services
   [18/08/2007|02:43] C:\Program Files\Common Files\Sonic Shared
   [02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
   [18/08/2007|02:45] C:\Program Files\Common Files\SureThing Shared
   [19/09/2008|17:21] C:\Program Files\Common Files\Symantec Shared
   [09/12/2008|17:01] C:\Program Files\Common Files\System
   [02/09/2008|16:54] C:\Program Files\Common Files\WindowsLiveInstaller

   --------------------\  Process

   ( 78 Processes )

   iexplore.exe ~ [PID:3212]
   iexplore.exe ~ [PID:3180]
   iexplore.exe ~ [PID:4556]

   --------------------\  Recherche avec S_Lop

   C:\ProgramData\dashjumpjump.4bw8t
   C:\ProgramData\dashjumpjump.l31qb
   C:\ProgramData\dupe bind link.heo4fro
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\ProgramData\Memo Drive Vc Log
   C:\ProgramData\Memo Drive Vc Log\lite mags.dat
   C:\ProgramData\Memo Drive Vc Log\lite mags.exe
   C:\Users\Amandine\AppData\Local\Temp
sfEB2D.tmp
   C:\Users\Amandine\AppData\Local\Temp
st462F.tmp
   C:\Program Files\Circle Developement
   C:\Program Files\Circle Developement\Uninstall.exe
   C:\Users\Amandine\AppData\Roaming\MICROS~1\Windows\Cookies\amandine@advertising[2].txt
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
   "ace readme"="\"C:\ProgramData\dashjumpjump.l31qb\""
   "vc log bows face"="\"C:\ProgramData\dupe bind link.heo4fro\""

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-02-16 13:20:57
   Windows 6.0.6001 Service Pack 1 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   C:\Users\Amandine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8ZDQGUL4\inbox[1].htm 37422 bytes
   C:\Users\Amandine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8ZDQGUL4\FR-FFR600[1].htm 276 bytes
   scan completed successfully
   hidden processes: 0
   hidden files: 332
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:1381][D:55]-> C:\Users\Amandine\AppData\Local\Temp
   [F:1041][D:1]-> C:\Users\Amandine\AppData\Roaming\MICROS~1\Windows\Cookies
   [F:3797][D:4]-> C:\Users\Amandine\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
   [F:3185][D:59]-> C:\$Recycle.Bin

   1 - "C:\Lop SD\LopR_1.txt" - 16/02/2009|13:25 - Option : [1]

   --------------------\  Fin du rapport a 13:25:20
   [ UAC => 1 ]

ric025 · Answer

Re!

Tu as remis le même rapport que tout à l'heure, celui de l'option 1.

Essaie de retrouver celui de l'option 2 et de me le poster, stp.

;)

chimay8 · Answer

tu as refais l'option 1

Ok! 

Relance LopSD, choisis F pour la langue. 

Exécute l'option 2. 

Poste le rapport généré.

manda963 · Answer

c le premier rapport et la jsui entrain de faire malware... jte poste le rapport d ke c fai

ric025 · Answer

Je dois m'absenter. Désolé.

Si Chimay veut suivre, pas de soucis.

Chimay8 --> 1 - "C:\Lop SD\LopR_1.txt" - 16/02/2009|13:25 - Option : [1] 

--> Je pense qu'elle a fait l'option 2, car les deux rapports postés sont exactement les mêmes.

Si tu peux/veux pas suivre, je verrai ça à mon retour.

Bonne continuation à vous deux.

A++ ;)

manda963 · Answer

Malwarebytes' Anti-Malware 1.34
Version de la base de données: 1765
Windows 6.0.6001 Service Pack 1

16/02/2009 14:15:22
mbam-log-2009-02-16 (14-15-22).txt

Type de recherche: Examen rapide
Eléments examinés: 68886
Temps écoulé: 4 minute(s), 43 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 26
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{cf54be1c-9359-4395-8533-1657cf209cfe} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a4730ebe-43a6-443e-9776-36915d323ad3} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{d518921a-4a03-425e-9873-b9a71756821e} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59c7fc09-1c83-4648-b3e6-003d2bbc7481} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68af847f-6e91-45dd-9b68-d6a12c30e5d7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170b96c-28d4-4626-8358-27e6caeef907} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d1a71fa0-ff48-48dd-9b6d-7a13a3e42127} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ddb1968e-ead6-40fd-8dae-ff14757f60c7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f138d901-86f0-4383-99b6-9cdd406036da} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWay) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

rapport malware

ric025 · Answer

Re!

Bien!

Ouvre MBAM, va dans l'onglet "Quarantaine" et supprime tout.

=========

Puis un petit nettoyage:

Télécharge CCleaner, version Slim, sans toolbar:

CCLEANER

Va dans "Options">>"Avancé". Décoche la première ligne.

Va dans la section "Nettoyeur". Lance l'analyse. La liste créée, lance le nettoyage deux fois de suite afin d'obtenir 0bytes supprimé!

Ensuite dans "Registre", lance une recherche des erreurs. La liste créée, fais-les réparer.

/!\ A ce moment CCleaner te demande normalement de sauvegarder le registre, fais-le. /!\

Recommence ensuite le cycle Recherche/Réparation des erreurs jusqu'à n'en trouver aucune lors de la recherche. 

==============

Fais ceci pour voir:

Ad-Remover (par Cyril du 17 / C_XX):

Télécharge et enregistre le fichier d'installation sur ton bureau :

  http://sd-1.archive-host.com/membres/up/16506160323759868/AD-R.exe 

Double clique sur le programme d'installation , et installe-le dans son emplacement par défaut. ( le bureau )

Ouvre le dossier Ad-remover présent sur ton bureau, et double clique sur Ad-remover.bat.

Au menu principal choisis l'option "A"

Poste le rapport qui apparait à la fin.


( le rapport est sauvegardé aussi sous C:\Ad-report.log )

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

Note :

Process.exe est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

manda963 · Answer

re ! 
jai fai un scan avc Ad-remover mais je trouve pa le rapport tu sais ou il se cache ? 
Jai un autre pbm sur mon ordi , il souffle comme un malade é puis il s'arret net et il reprend parfois ca dure des heures pourtant ya pa de téléchargement ou autre en route ! il me fait ca depuis un moi, il é récent . 
Mercci pr ton aide ++

ric025 · Answer

Salut!

( le rapport est sauvegardé aussi sous C:\Ad-report.log ) 

A++ ;)

manda963 · Answer

LE LOGICIEL DIT KE C IMPOSSIBLE DOUVRIR DE TROUVER LE RAPPORT AU MOMENT DOUVRIR LA PAGE DU BLOC NOTE

ric025 · Answer

Alors essaie de refaire le scan:

Double clique sur le programme d'installation , et installe-le dans son emplacement par défaut. ( le bureau )

Ouvre le dossier Ad-remover présent sur ton bureau, et double clique sur Ad-remover.bat.

Au menu principal choisis l'option "A"

Poste le rapport qui apparait à la fin. 

((Évite d'écrire en majuscules stp! ;))

franc59156 · Answer

Salut, 
si tu veux poser ta question et que des professionnels te répondent va sur
http://informatique.forum-web.fr/index.php
inscrit toi et pose ta question ( c'est gratuit )

manda963 · Answer

ca fonctionne tjrs pas  mais en tout cas j'ai plus de pubs qui s'affichent donc c'est déjà un bon point. 
Merci pour ton aide ++

ric025 · Answer

Je ne vois pas ce qui aurait pu stopper les pubs dans ce qu'on a fait.

Fais ceci:

! Déconnecte-toi et ferme toute application en cours !

Relance "Ad-remover" : au menu principal choisis l'option "B" .

Clique à l'écran de sélection :


Tape "A" et "Entrée" pour valider.


Le programme va travailler,

Poste le rapport qui apparait à la fin.

( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

/!\ Si le Bureau ne réapparait pas presse Ctrl +Alt +Suppr , Onglet "Fichier" , "Nouvelle tâche" , tape explorer.exe et valide

manda963 · Answer

ça marche pas pourtant jai désinstallé et réinstallé. J'ai fais la manoeuvre 5 fois. j'arrive pas à mettre en route l'option B. Il se passe rien quand je tape "entrée".
PK TAIME PAS QUAND ON ECRIT EN GRAND lol !

ric025 · Answer

Ok! Bizarre!

Fais ceci:

Désinstalle Ad-Remover.
Vérifie sur C: si tu n'as aucun rapport, si oui, supprime.

================

Nettoyage des outils:

Télécharge ToolsCleaner par A.Rothstein & dj QUIOU sur ton Bureau:

Toolscleaner

Clique sur Recherche et laisse le scan se terminer.

Clique, sur Suppression pour finaliser.

Tu peux, si tu le souhaites, te servir des Options facultatives.

Clique sur Quitter, pour que le rapport puisse se créer.

Poste moi le rapport (TCleaner.txt) qui se trouve à la racine de ton disque dur( C:\). 

===============

Télécharge CCleaner, version Slim, sans toolbar:

CCLEANER

Va dans "Options">>"Avancé". Décoche la première ligne.

Va dans la section "Nettoyeur". Lance l'analyse. La liste créée, lance le nettoyage deux fois de suite afin d'obtenir 0bytes supprimé!

Ensuite dans "Registre", lance une recherche des erreurs. La liste créée, fais-les réparer.

/!\ A ce moment CCleaner te demande normalement de sauvegarder le registre, fais-le. /!\

Recommence ensuite le cycle Recherche/Réparation des erreurs jusqu'à n'en trouver aucune lors de la recherche.

================

Télécharge Malwarebytes Anti-Malware (MBAM):

MBAM

Installe-le en vérifiant que la case de mise à jour soit bien cochée en fin d'installation.

Après la mise à jour, lance-le et coche "Examen Rapide". Puis "Rechercher".

Si MBAM trouve quelque chose: fais "Voir les résultats" puis "Supprimer la sélection".

Poste le rapport généré.

A++ ;)

ric025 · Answer

Merci chimay!

Je voulais le rajouter à la fin de mon précédent post, j'ai oublié!

Car, oui, c'est la seule façon de "crier" lorsque tu écris! 

QUOI? T'ES PAS D'ACCORD??!!

Avoue que ça fait un peu agressif!

A++

manda963 · Answer

j'ai trouvé un rapport ki se nomme " lopR.txt" c peut être ca


   --------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft® Windows Vista™ Édition Familiale Premium  ( v6.0.6001 ) Service Pack 1
   X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual-Core Processor TK-55 )
   BIOS : PhoenixBIOS 4.0 Release 6.1     
   USER : Amandine ( Not Administrator ! )
   BOOT : Normal boot
   Antivirus : avast! antivirus 4.8.1229 [VPS 090215-0] 4.8.1229 (Activated)
   C:\ (Local Disk) - NTFS - Total:104 Go (Free:32 Go)
   D:\ (Local Disk) - NTFS - Total:7 Go (Free:2 Go)
   E:\ (CD or DVD)
   G:\ (USB)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [1] ( 16/02/2009|13:20 )

   [ UAC => 1 ]
 
   --------------------\  Listing des dossiers dans Local

   [22/11/2008|00:33] C:\Users\Amandine\AppData\Local\Adobe
   [12/11/2008|00:07] C:\Users\Amandine\AppData\Local\Apple
   [26/11/2008|22:50] C:\Users\Amandine\AppData\Local\Apple Computer
   [01/09/2008|22:07] C:\Users\Amandine\AppData\Local\Application Data 
   [01/09/2008|22:17] C:\Users\Amandine\AppData\Local\AtStart.txt
   [01/12/2008|16:46] C:\Users\Amandine\AppData\Local\d3d9caps.dat
   [12/02/2009|21:41] C:\Users\Amandine\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
   [26/11/2008|18:48] C:\Users\Amandine\AppData\Local\DNA
   [01/09/2008|22:17] C:\Users\Amandine\AppData\Local\DSwitch.txt
   [09/12/2008|17:13] C:\Users\Amandine\AppData\Local\GDIPFONTCACHEV1.DAT
   [20/11/2008|16:50] C:\Users\Amandine\AppData\Local\Google
   [01/09/2008|22:07] C:\Users\Amandine\AppData\Local\Historique 
   [12/02/2009|22:03] C:\Users\Amandine\AppData\Local\IconCache.db
   [29/10/2008|17:19] C:\Users\Amandine\AppData\Local\Microsoft
   [19/12/2008|11:14] C:\Users\Amandine\AppData\Local\Microsoft Help
   [01/09/2008|22:17] C:\Users\Amandine\AppData\Local\QSwitch.txt
   [13/01/2009|09:16] C:\Users\Amandine\AppData\Local\QuickPlay
   [08/12/2008|10:12] C:\Users\Amandine\AppData\Local\Seven Zip
   [16/02/2009|13:13] C:\Users\Amandine\AppData\Local\Temp
   [12/11/2008|13:24] C:\Users\Amandine\AppData\Local\TempInsight Software
   [01/09/2008|22:07] C:\Users\Amandine\AppData\Local\Temporary Internet Files 
   [17/11/2008|16:45] C:\Users\Amandine\AppData\Local\VirtualStore
   [19/11/2008|13:29] C:\Users\Amandine\AppData\Local\www.kinovea.org
 
   --------------------\  Tâches planifiées dans C:\Windows	asks

   [16/02/2009 11:22][--ah-----] C:\Windows	asks\SA.DAT
   [15/02/2009 23:57][--a------] C:\Windows	asks\SCHEDLGU.TXT

   --------------------\  Listing des dossiers dans C:\ProgramData
   
   [24/12/2008|12:12] C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
   [29/10/2008|11:11] C:\ProgramData\Adobe
   [12/11/2008|00:05] C:\ProgramData\Apple
   [12/11/2008|00:09] C:\ProgramData\Apple Computer
   [01/09/2008|22:03] C:\ProgramData\Application Data 
   [06/02/2009|20:38] C:\ProgramData\Atomcreative
   [01/09/2008|22:03] C:\ProgramData\Bureau 
   [06/11/2008|07:20] C:\ProgramData\CyberLink
   [06/02/2009|20:37] C:\ProgramData\dashjumpjump.4bw8t
   [06/02/2009|20:37] C:\ProgramData\dashjumpjump.l31qb
   [01/09/2008|22:03] C:\ProgramData\Documents 
   [06/02/2009|20:37] C:\ProgramData\dupe bind link.heo4fro
   [01/09/2008|22:03] C:\ProgramData\Favoris 
   [17/10/2008|23:06] C:\ProgramData\Google
   [18/08/2007|03:50] C:\ProgramData\Hewlett-Packard
   [03/09/2008|12:26] C:\ProgramData\HP
   [18/08/2007|03:18] C:\ProgramData\hpzinstall.log
   [12/11/2008|13:24] C:\ProgramData\Insight Software
   [12/11/2008|13:24] C:\ProgramData\Insight Software Solutions
   [06/02/2009|20:37] C:\ProgramData\Memo Drive Vc Log
   [01/09/2008|22:03] C:\ProgramData\Menu D‚marrer 
   [06/09/2008|11:29] C:\ProgramData\Messenger Plus!
   [09/12/2008|16:49] C:\ProgramData\Microsoft
   [12/02/2009|20:45] C:\ProgramData\Microsoft Help
   [01/09/2008|22:03] C:\ProgramData\ModŠles 
   [13/10/2008|21:49] C:\ProgramData\muvee Technologies
   [18/08/2007|02:44] C:\ProgramData\Roxio
   [09/12/2008|16:23] C:\ProgramData\Sonic
   [19/09/2008|17:21] C:\ProgramData\Symantec
   [27/11/2008|16:36] C:\ProgramData\TEMP
   [19/09/2008|17:41] C:\ProgramData\WLInstaller

   --------------------\  Listing des dossiers dans C:\Program Files

   [29/10/2008|11:12] C:\Program Files\Adobe
   [02/09/2008|10:03] C:\Program Files\Alwil Software
   [12/11/2008|00:06] C:\Program Files\Apple Software Update
   [26/11/2008|18:48] C:\Program Files\BitTorrent
   [24/12/2008|12:13] C:\Program Files\Bonjour
   [12/11/2008|13:29] C:\Program Files\Capture Express
   [06/02/2009|20:36] C:\Program Files\Circle Developement
   [08/12/2008|10:23] C:\Program Files\Common Files
   [22/11/2008|00:54] C:\Program Files\CONEXANT
   [26/11/2008|18:48] C:\Program Files\DNA
   [18/08/2007|03:19] C:\Program Files\EasyBits
   [02/01/2009|11:28] C:\Program Files\Elaborate Bytes
   [01/09/2008|22:03] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
   [12/11/2008|13:07] C:\Program Files\Gadwin Systems
   [30/10/2008|19:11] C:\Program Files\Google
   [18/08/2007|03:45] C:\Program Files\Hewlett-Packard
   [02/09/2008|22:44] C:\Program Files\HP
   [18/08/2007|03:29] C:\Program Files\HPQ
   [09/01/2009|21:24] C:\Program Files\InstallShield Installation Information
   [23/12/2008|01:41] C:\Program Files\Internet Explorer
   [24/12/2008|12:11] C:\Program Files\iPod
   [24/12/2008|12:12] C:\Program Files\iTunes
   [28/12/2008|10:30] C:\Program Files\Java
   [27/10/2008|13:05] C:\Program Files\JRE
   [19/11/2008|13:33] C:\Program Files\Kinovea
   [07/10/2008|12:23] C:\Program Files\Lexmark Z700-P700 Series
   [06/02/2009|20:36] C:\Program Files\Messenger Plus! Live
   [03/09/2008|12:33] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [02/11/2006|13:37] C:\Program Files\Microsoft Games
   [09/12/2008|16:51] C:\Program Files\Microsoft Office
   [22/11/2008|00:51] C:\Program Files\Microsoft Silverlight
   [09/12/2008|16:51] C:\Program Files\Microsoft Visual Studio
   [09/12/2008|16:43] C:\Program Files\Microsoft Visual Studio 8
   [09/12/2008|16:52] C:\Program Files\Microsoft Works
   [09/12/2008|16:49] C:\Program Files\Microsoft.NET
   [07/10/2008|14:52] C:\Program Files\Movie Maker
   [26/11/2008|18:47] C:\Program Files\Mozilla Firefox
   [09/12/2008|16:52] C:\Program Files\MSBuild
   [01/09/2008|22:54] C:\Program Files\MSXML 4.0
   [18/08/2007|03:24] C:\Program Files\muvee Technologies
   [01/09/2008|22:19] C:\Program Files\Neuf
   [27/10/2008|13:05] C:\Program Files\OpenOffice.org 3
   [10/12/2008|12:43] C:\Program Files\OpenVideoCapture
   [24/12/2008|12:09] C:\Program Files\QuickTime
   [02/11/2006|13:37] C:\Program Files\Reference Assemblies
   [18/08/2007|02:45] C:\Program Files\Roxio
   [22/11/2008|00:39] C:\Program Files\SAGEM
   [22/11/2008|00:27] C:\Program Files\Securitoo
   [18/08/2007|03:21] C:\Program Files\Services en ligne
   [18/08/2007|02:06] C:\Program Files\Synaptics
   [16/02/2009|12:35] C:\Program Files\Trend Micro
   [02/11/2006|14:01] C:\Program Files\Uninstall Information
   [13/10/2008|21:55] C:\Program Files\VideoLAN
   [22/11/2008|00:57] C:\Program Files\Wanadoo
   [07/10/2008|14:52] C:\Program Files\Windows Calendar
   [07/10/2008|14:52] C:\Program Files\Windows Collaboration
   [07/10/2008|14:52] C:\Program Files\Windows Defender
   [07/10/2008|14:52] C:\Program Files\Windows Journal
   [02/09/2008|17:02] C:\Program Files\Windows Live
   [12/02/2009|20:45] C:\Program Files\Windows Mail
   [07/10/2008|14:52] C:\Program Files\Windows Media Player
   [01/09/2008|22:03] C:\Program Files\Windows NT
   [07/10/2008|14:52] C:\Program Files\Windows Photo Gallery
   [07/10/2008|14:52] C:\Program Files\Windows Sidebar
   [30/01/2009|21:55] C:\Program Files\WinRAR

   --------------------\  Listing des dossiers dans C:\Program Files\Common Files

   [29/10/2008|11:12] C:\Program Files\Common Files\Adobe
   [24/12/2008|12:11] C:\Program Files\Common Files\Apple
   [08/12/2008|10:23] C:\Program Files\Common Files\Designer
   [18/08/2007|03:17] C:\Program Files\Common Files\HP
   [18/08/2007|03:27] C:\Program Files\Common Files\InstallShield
   [18/08/2007|03:49] C:\Program Files\Common Files\Java
   [18/08/2007|03:29] C:\Program Files\Common Files\LightScribe
   [10/02/2009|09:05] C:\Program Files\Common Files\microsoft shared
   [18/08/2007|03:24] C:\Program Files\Common Files\muvee Technologies
   [18/08/2007|02:43] C:\Program Files\Common Files\Roxio Shared
   [02/11/2006|12:18] C:\Program Files\Common Files\Services
   [18/08/2007|02:43] C:\Program Files\Common Files\Sonic Shared
   [02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
   [18/08/2007|02:45] C:\Program Files\Common Files\SureThing Shared
   [19/09/2008|17:21] C:\Program Files\Common Files\Symantec Shared
   [09/12/2008|17:01] C:\Program Files\Common Files\System
   [02/09/2008|16:54] C:\Program Files\Common Files\WindowsLiveInstaller

   --------------------\  Process

   ( 78 Processes )

   iexplore.exe ~ [PID:3212]
   iexplore.exe ~ [PID:3180]
   iexplore.exe ~ [PID:4556]

   --------------------\  Recherche avec S_Lop

   C:\ProgramData\dashjumpjump.4bw8t
   C:\ProgramData\dashjumpjump.l31qb
   C:\ProgramData\dupe bind link.heo4fro
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   C:\ProgramData\Memo Drive Vc Log
   C:\ProgramData\Memo Drive Vc Log\lite mags.dat
   C:\ProgramData\Memo Drive Vc Log\lite mags.exe
   C:\Users\Amandine\AppData\Local\Temp
sfEB2D.tmp
   C:\Users\Amandine\AppData\Local\Temp
st462F.tmp
   C:\Program Files\Circle Developement
   C:\Program Files\Circle Developement\Uninstall.exe
   C:\Users\Amandine\AppData\Roaming\MICROS~1\Windows\Cookies\amandine@advertising[2].txt
 
   --------------------\  Verification du Registre

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 
   "ace readme"="\"C:\ProgramData\dashjumpjump.l31qb\""
   "vc log bows face"="\"C:\ProgramData\dupe bind link.heo4fro\""

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-02-16 13:20:57
   Windows 6.0.6001 Service Pack 1 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   C:\Users\Amandine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8ZDQGUL4\inbox[1].htm 37422 bytes
   C:\Users\Amandine\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8ZDQGUL4\FR-FFR600[1].htm 276 bytes
   scan completed successfully
   hidden processes: 0
   hidden files: 332
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:1381][D:55]-> C:\Users\Amandine\AppData\Local\Temp
   [F:1041][D:1]-> C:\Users\Amandine\AppData\Roaming\MICROS~1\Windows\Cookies
   [F:3797][D:4]-> C:\Users\Amandine\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
   [F:3185][D:59]-> C:\$Recycle.Bin

   1 - "C:\Lop SD\LopR_1.txt" - 16/02/2009|13:25 - Option : [1]

   --------------------\  Fin du rapport a 13:25:20
   [ UAC => 1 ]

manda963 · Answer

nan en fait celui la je lé deja posté ! jai fai tellement de choses ke je ne sais plus dsl ! é javai mm pa vu ke klkun ct ajouté a la conversation. 
du coup ... ben jsui dsl jai pa suivi je sui pommé !

ric025 · Answer

J'attendais un rapport toolscleaner. Mais tu ne l'as pas, puisque tu as encore LOP. Toolscleaner te supprimera tout ça. Puis un nouveau rapport MBAM.

En résumé, ceci: http://www.commentcamarche.net/forum/affich 11076327 pubs qui n arretent pas de s afficher?page=2#22

PUBS QUI N'ARRETENT PAS DE S'AFFICHER

26 réponses

Votre réponse

Discussions similaires

Newsletters