Bookedspace

Question

Bonjour à tous

Je souhaiterai connaitre la méthode pour me débarrasser de ce "spyware: Bookedspace.
Malgré sa suppression avec ad-aware 6.0 et regcleaner, il revient toujours. Résultat, à chaque utilisation d'internet explorer l'utilisation de la mémoire monte en flèche (d'après le gestionnaire des taches) jusqu'a coincer completement le PC.
SE windows 2000pro (c'est l'ordi du boulot...).
Au passage j'ai d'autres saloperies du type Aaa_soft kkk,pppp et autres qui me polluent la vie et impossible de s'en séparer.
je suis preneur de toutes idées.
Merci d'avance.
Olivier

Utilisateur anonyme · Answer

Saluttelecharges ca et scannes puis colles le rapport icihttp://tomcoyote.com/hjt/#Top

Utilisateur anonyme · Answer

Coches et fixes ca en mode sans echecR1 - HKCU\Software\Microsoft\Internet Explorer,Search = http://supacoopa.directwebsearch.net/search.html R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.begin2search.com/sidesearch.html R1 - HKLM\Software\Microsoft\Internet Explorer,Search = http://supacoopa.directwebsearch.net/search.html R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = http://supacoopa.directwebsearch.net/search.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://supacoopa.directwebsearch.net/search.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.begin2search.com/sidesearch.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.begin2search.com/sidesearch.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://imp2-q.free.fr/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://supacoopa.directwebsearch.net/search.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://supacoopa.directwebsearch.net/search.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://supacoopa.directwebsearch.net/search.html R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.begin2search.com/sidesearch.html R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://supacoopa.directwebsearch.net/search.html R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.begin2search.com/sidesearch.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://supacoopa.directwebsearch.net/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Equant R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://proxytpc.ren.globalone.net/scripts/tpcgo.asp R3 - URLSearchHook: (no name) - {BD3D6181-3081-45F1-C06C-1E25A38D9CB0} - C:\WINNT\Efeipier.dll F3 - REG:win.ini: load= SMSRUN32.BAT O1 - Hosts: 193.252.6.194 SRVGPW257 O1 - Hosts: 192.9.5.6 SRVDTNOTES O1 - Hosts: 192.9.4.12 TPCUN006 O1 - Hosts: 192.9.4.213 TPCUN016 O1 - Hosts: 192.9.4.176 TPCUN018 O1 - Hosts: 192.9.4.212 TPCUN020 O1 - Hosts: 192.9.4.7 TPCUN024 O1 - Hosts: 192.9.5.75 TPCUN027 O1 - Hosts: 192.9.4.5 TPCUN050 O1 - Hosts: 192.9.4.6 TPCUN051 O1 - Hosts: 192.9.4.27 TPCUN052 O1 - Hosts: 192.9.4.121 TPCUN102 O1 - Hosts: 192.9.4.122 TPCUN103 O1 - Hosts: 192.9.4.179 PC7428 O1 - Hosts: 69.50.179.52 AUTO.SEARCH.MSN.COM O1 - Hosts: 69.50.179.52 AUTO.SEARCH.MSN.COM O1 - Hosts: 69.31.79.102 AUTO.SEARCH.MSN.COM O1 - Hosts: 69.31.79.102 AUTO.SEARCH.MSN.COM O1 - Hosts: 69.31.79.102 AUTO.SEARCH.MSN.COM O1 - Hosts: 69.31.79.102 AUTO.SEARCH.MSN.COM O1 - Hosts: 69.31.79.102 AUTO.SEARCH.MSN.COM O1 - Hosts: 69.31.79.102 AUTO.SEARCH.MSN.COM O1 - Hosts: 69.31.79.102 AUTO.SEARCH.MSN.COM O1 - Hosts: 69.31.79.102 AUTO.SEARCH.MSN.COM O1 - Hosts: 69.31.79.102 AUTO.SEARCH.MSN.COM O1 - Hosts: 69.31.79.102 AUTO.SEARCH.MSN.COM O1 - Hosts: 69.31.79.102 AUTO.SEARCH.MSN.COM O1 - Hosts: 69.31.79.102 AUTO.SEARCH.MSN.COM O1 - Hosts: 69.31.79.102 AUTO.SEARCH.MSN.COM O1 - Hosts: 69.31.79.102 AUTO.SEARCH.MSN.COM O1 - Hosts: 69.31.79.102 AUTO.SEARCH.MSN.COM O1 - Hosts: 69.31.79.102 AUTO.SEARCH.MSN.COM O2 - BHO: CExtension Object - {0019C3E2-DD48-4A6D-ABCD-8D32436323D9} - C:\WINNT\bxxs5.dll O2 - BHO: (no name) - {08227B4B-54FE-4C4D-809F-BCA46292FC5B} - (no file) O2 - BHO: ohb - {4D568F0F-8AC9-40AB-88B7-415134C78777} - C:\WINNT\system32\winb2s32.dll O2 - BHO: BAHelper Class - {A3FDD654-A057-4971-9844-4ED8E67DBBB8} - C:\Program Files\SideFind\sfbho.dll O2 - BHO: (no name) - {B9D90B27-AD4A-413a-88CB-3E6DDC10DC2D} - (no file) O2 - BHO: ohb - {CB5B2BC6-F957-4D8A-BE67-83F3EC58BA01} - C:\WINNT\system32\dsktrf.dll O2 - BHO: (no name) - {CC766BD4-8D78-859D-4E1B-AC2A366CC231} - C:\WINNT\Efeipier.dll O2 - BHO: Cls - {CF021F40-3E14-23A5-CBA2-717765724820} - C:\WINNT\system32\wer4820.dll O3 - Toolbar: Search - {A9F7FF22-62E4-0B34-8F81-E6D4FD41185D} - C:\WINNT\Efeipier.dll O3 - Toolbar: Begin2Search.com Bar - {52FE5233-367C-4EFB-BDD7-0BE4D212C107} - C:\WINNT\system32\winb2s32.dll O4 - HKLM\..\Run: [bxxs5] RunDLL32.EXE C:\WINNT\bxxs5.dll,DllRun O8 - Extra context menu item: Web Rebates - file://C:\Program Files\Web_Rebates\Sy1150\Tp1150\scri1150a.htm O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll O16 - DPF: {11010101-1001-1111-1000-110112345678} - ms-its:mhtml:file://c:
osuch.mht!  SALOPERIEhttp://69.31.79.102/searchinfoxyz.chm::/searchinfoxyz.exe O16 - DPF: {11111111-1111-1111-1111-111111111123} - ms-its:mhtml:file://c:
osuch.mht!http://www.ruworld.com/chm/files.chm::/file.exe O16 - DPF: {9EB320CE-BE1D-4304-A081-4B4665414BEF} (MediaTicketsInstaller Control) - http://www.mt-download.com/MediaTicketsInstaller.cab O18 - Protocol: icoo - {4A8DADD4-5A25-4D41-8599-CB7458766220} - (no file)

Olivier · Answer

Salut WaëlMerci pour tout, j'ai l'impression que tout est rentré dans l'ordre.Sympa ce petit utilitaire mais à utiliser avec précaution....Merci encore

Bookedspace

3 réponses

Newsletters