Publicitées CiD s'ouvent sans arrêt - Page 2

Résolu
Précédent
  • 1
  • 2
  1. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    télécharge OTMoveIt

    http://oldtimer.geekstogo.com/OTMoveIt3.exe

    (de Old_Timer) sur ton Bureau.
    double-clique sur OTMoveIt.exe pour le lancer.
    copie la liste qui se trouve en citation ci-dessous,
    et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

    :files
    C:\DOCUME~1\herviaux\LOCALS~1\Temp\services.exe
    C:\WINDOWS\SoftwareDistribution\DataStore\Logs\tmp.edb
    :reg
    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
    "Flash Player2"=-

    clique sur MoveIt! pour lancer la suppression.
    le résultat apparaitra dans le cadre "Results".
    clique sur Exit pour fermer.
    poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

    il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.

    _______

    installe malwarebyte et colle le rapport avec un scan rapide:

    https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

    ___________

    mettre à jour adobe reader
    https://acrobat.adobe.com/fr/fr/acrobat/pdf-reader.html

    Mettre a jour java:

    Télécharge JavaRa.zip de Paul 'Prm753' McLain et Fred de Vries.
    Décompresse le fichier sur ton bureau (clique droit > Extraire tout.)
    Double-clique sur le répertoire JavaRa obtenu.
    Puis double-clique sur le fichier JavaRa.exe (le .exe peut ne pas s'afficher)
    Clique sur Search For Updates.
    Sélectionne Update Using jucheck.exe puis clique sur Search.
    Autorise le processus à se connecter s'il te le demande, clique sur Install et suis les instructions d'installation. Cela prendra quelques minutes.
    Quand l'installation est terminée, revient à l'écran de JavaRa et clique sur Remove Older Versions.
    Clique sur Oui pour confirmer. L'outil va travailler, clique ensuite sur Ok, puis une deuxième fois sur Ok.
    Un rapport va s'ouvrir, copie-colle le dans ta prochaine réponse.
    Note : le rapport se trouve aussi à la racine de la partition système, en général C:\ sous le nom JavaRa.log
    (c:\JavaRa.log)
    Ferme l'application.

    si cela ne fonctionne pas

    https://www.java.com/fr/download/windows_manual.jsp?locale=fr&host=www.java.com:80

    tu peux désinstaller les vieilles versions.

    _____________

    Télécharges AD-Remover ( de Cyrildu17 / C_XX ) sur ton bureau :
    http://sd-1.archive-host.com/membres/up/16506160323759868/AD­-R.exe

    /!\ Déconnectes toi et fermes toutes applications en cours

    ● Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( C:\Program files )
    ● Double clique sur l'icône Ad-removersituée sur ton bureau
    ● Au menu principal choisi l'option "A"
    ● Postes le rapport qui apparait à la fin .

    ( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

    (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

    Note :

    "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
    Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
    Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
    0
  2. ah953 Messages postés 79 Statut Membre
     
    le rapport de OTMoveIt3

    ========== FILES ==========
    File/Folder C:\DOCUME~1\herviaux\LOCALS~1\Temp\services.exe not found.
    File/Folder C:\WINDOWS\SoftwareDistribution\DataStore\Logs\tmp.edb not found.
    ========== REGISTRY ==========
    Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersio­n\Run not found.

    OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 03092009_180009
    0
  3. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    ok fais le reste
    0
  4. ah953 Messages postés 79 Statut Membre
     
    le rapport Malwarebytes' Anti-Malware 1.34

    Malwarebytes' Anti-Malware 1.34
    Version de la base de données: 1825
    Windows 5.1.2600 Service Pack 3

    2009-03-09 18:15:13
    mbam-log-2009-03-09 (18-15-13).txt

    Type de recherche: Examen rapide
    Eléments examinés: 66641
    Temps écoulé: 10 minute(s), 21 second(s)

    Processus mémoire infecté(s): 0
    Module(s) mémoire infecté(s): 0
    Clé(s) du Registre infectée(s): 0
    Valeur(s) du Registre infectée(s): 0
    Elément(s) de données du Registre infecté(s): 0
    Dossier(s) infecté(s): 0
    Fichier(s) infecté(s): 0

    Processus mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Module(s) mémoire infecté(s):
    (Aucun élément nuisible détecté)

    Clé(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Valeur(s) du Registre infectée(s):
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre infecté(s):
    (Aucun élément nuisible détecté)

    Dossier(s) infecté(s):
    (Aucun élément nuisible détecté)

    Fichier(s) infecté(s):
    (Aucun élément nuisible détecté)
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. ah953 Messages postés 79 Statut Membre
     
    JavaRa 1.13 Removal Log.

    Report follows after line.

    ------------------------------------

    The JavaRa removal process was started on Mon Mar 09 21:14:24 2009

    Found and removed: C:\Program Files\Java\jre1.5.0_07

    Found and removed: Software\JavaSoft\Java2D\1.5.0_07

    Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}

    Found and removed: SOFTWARE\Classes\Installer\Features\8A0F842331866D117AB7000B0D510007

    Found and removed: SOFTWARE\Classes\Installer\Products\8A0F842331866D117AB7000B0D510007

    Found and removed: SOFTWARE\Classes\Installer\UpgradeCodes\7A0F842331866D117AB7000B0D510007

    Found and removed: SOFTWARE\Classes\JavaPlugin.150_07

    Found and removed: SOFTWARE\Classes\JavaWebStart.isInstalled.1.5.0.0

    Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.5.0_07

    Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5

    Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.5.0_07

    Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}

    Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D510007

    Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D510007

    Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0150070}

    Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.5.0_07

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

    Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

    Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

    Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

    Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

    Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

    Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

    Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

    Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\\C:\Program Files\Java\jre1.5.0_07\

    ------------------------------------

    Finished reporting.
    0
  7. ah953 Messages postés 79 Statut Membre
     
    et vla le dernier

    ------- LOGFILE OF AD-REMOVER 1.1.1.6 | ONLY XP/VISTA -------

    Updated by C_XX on 09/03/2009 at 21:20

    Start at: 21:22:20, Lun 09/03/2009 | Boot mode: Normal Boot
    Option: SCAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
    Operating System: Microsoft® Windows XP™ Service Pack 3 (version 5.1.2600)
    Computer Name: NOM-A94973C6ED8
    Current User: herviaux - Administrator
    Drive(s):
    - C:\ (File System: NTFS)
    System Drive: C:\
    Windows Directory: C:\WINDOWS\
    System Directory: C:\WINDOWS\System32\

    --- Running Processes: 54

    +-----------------| Boonty/Boonty Games Elements Found:

    Service: Boonty Games
    .
    HKCR\boontybox
    HKCU\Software\Boonty
    HKLM\Software\Boonty
    HKLM\Software\Classes\boontybox
    HKLM\System\ControlSet001\Services\Boonty Games
    HKLM\System\CurrentControlSet\Services\Boonty Games
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Taxi Racer London 2_is1
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C6071319-3DA6-4343-AEFD-B212CF3E2B85}_is1
    .
    C:\Program Files\Boonty
    C:\Program Files\BoontyGames
    C:\Program Files\Fichiers communs\BOONTY Shared
    C:\Documents and Settings\All Users\Application Data\BOONTY

    +-----------------| Eorezo Elements Found:

    .

    +-----------------| Infected Poker Softwares Elements Found:

    HKCU\Software\Titan Poker
    HKLM\Software\Titan Poker
    HKLM\Software\Microsoft\Internet Explorer\Extensions\{49783ED4-258D-4f9f-BE11-137C18D3E543}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Titan Poker
    HKU\S-1-5-21-3388834424-248309118-346165656-1006\Software\Titan Poker
    .
    C:\log_lobby_dumper.txt
    C:\log_lobby.txt
    C:\Poker\Titan Poker
    C:\Documents and Settings\herviaux\Application Data\Microsoft\Internet Explorer\Quick Launch\Titan Poker.lnk
    C:\Documents and Settings\All Users\Menudm~1\Titan Poker.lnk
    C:\Documents and Settings\herviaux\Cookies\herviaux@partypoker[1].txt

    +-----------------| FunWebProducts/MyWay/MyWebSearch Elements Found:

    .
    .

    +-----------------| It's TV Elements Found:

    .

    +-----------------| Sweetim Elements Found:

    HKCR\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
    HKCR\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
    HKCR\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
    HKCR\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
    HKCR\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
    HKCR\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
    HKCR\SWEETIE.IEToolbar
    HKCR\SWEETIE.IEToolbar.1
    HKCR\SWEETIE.SWEETIE
    HKCR\SWEETIE.SWEETIE.3
    HKCR\SweetIM_URLSearchHook.ToolbarURLSearchHook
    HKCR\SweetIM_URLSearchHook.ToolbarURLSearchHook.1
    HKCR\Toolbar3.SWEETIE
    HKCR\Toolbar3.SWEETIE.1
    HKCR\Typelib\{EEE6C35E-6118-11DC-9C72-001320C79847}
    HKCR\Typelib\{EEE6C35F-6118-11DC-9C72-001320C79847}
    HKCU\Software\SweetIM
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
    HKLM\Software\Classes\SWEETIE.IEToolbar
    HKLM\Software\Classes\SWEETIE.IEToolbar.1
    HKLM\Software\Classes\SWEETIE.SWEETIE
    HKLM\Software\Classes\SWEETIE.SWEETIE.3
    HKLM\Software\Classes\SweetIM_URLSearchHook.ToolbarURLSearchHook
    HKLM\Software\Classes\SweetIM_URLSearchHook.ToolbarURLSearchHook.1
    HKLM\Software\Classes\Toolbar3.SWEETIE
    HKLM\Software\Classes\Toolbar3.SWEETIE.1
    HKLM\Software\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
    HKLM\Software\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
    HKLM\Software\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
    HKLM\Software\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
    HKLM\Software\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
    HKLM\Software\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
    HKLM\Software\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
    HKLM\Software\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
    HKLM\Software\SweetIM
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\351716A953E21214898904032EAE2E81
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\A189D17A469616C4688D23E192996267
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
    .
    C:\WINDOWS\Installer\61b788.msi
    C:\Program Files\SweetIM
    C:\WINDOWS\Installer\{59971D79-8111-42C2-9E40-883A0C277E78}
    C:\Documents and Settings\All Users\Application Data\SweetIM
    C:\Documents and Settings\herviaux\Cookies\herviaux@sweetim[1].txt
    C:\Documents and Settings\herviaux\Cookies\herviaux@www.sweetim[2].txt
    C:\Documents and Settings\herviaux\Cookies\herviaux@www.sweetim[3].txt

    +-----------------| Other Adwares Found:

    .
    .
    C:\Documents and Settings\herviaux\Cookies\herviaux@bs.serving-sys[2].txt

    +-----------------| Added Scan:

    ---- Mozilla FireFox Version 3.0.1 ----

    ProfilePath: etzjc5bn.default
    .
    Prefs.js: Browser.Search.SelectedEngine: "Live Search"
    .
    .
    .
    .
    .

    ---- Internet Explorer Version 7.0.5730.11 ----

    +-[HKEY_CURRENT_USER\..\Internet Explorer\Main]

    Search bar: hxxp://www.google.com/ie
    Search Page: hxxp://www.google.com
    Start page: hxxp://www.neufportail.fr/

    +-[HKEY_USERS\S-1-5-21-3388834424-248309118-346165656-1006\..\Internet Explorer\Main]

    Search bar: hxxp://www.google.com/ie
    Search Page: hxxp://www.google.com
    Start page: hxxp://www.neufportail.fr/

    +-[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

    Start page: hxxp://www.msn.com/

    +-[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

    Tabs: hxxp://ieframe.dll/tabswelcome.htm

    +---------------------------------------------------------------------------+

    6655 Byte(s) - C:\Ad-Report-Scan-20.9-.3-09.log

    0 File(s) - C:\Program Files\Ad-remover\TOOLS\BACKUP
    0 File(s) - C:\Program Files\Ad-remover\TOOLS\QUARANTINE

    Before run: 81,337,675,776 Byte(s) free
    After run: Byte(s) free

    End at: 21:23:54 | 2009-03-09
    .
    +-----------------| E.O.F - 133 Lines
    .
    0
  8. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    refais ad remover
    choisi l'option B et sélectionne

    Boonty Games
    Infected Poker Softwares Elements
    SWEETIM

    et supprime les et colle le rapport
    0
  9. jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041
     
    faire le message 27, le 28 étant inutile ...
    0
  10. ah953 Messages postés 79 Statut Membre
     
    ------- LOGFILE OF AD-REMOVER 1.1.1.6 | ONLY XP/VISTA -------

    Updated by C_XX on 09/03/2009 at 21:20

    **** LIMITED TO ****

    Boonty/BoontyGames
    Infected Poker Softwares
    Sweetim

    ********************

    Start at: 18:12:27, Mar 10/03/2009 | Boot mode: Normal Boot
    Option: CLEAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
    Operating System: Microsoft® Windows XP™ Service Pack 3 (version 5.1.2600)
    Computer Name: NOM-A94973C6ED8
    Current User: herviaux - Administrator
    Drive(s):
    - C:\ (File System: NTFS)
    System Drive: C:\
    Windows Directory: C:\WINDOWS\
    System Directory: C:\WINDOWS\System32\

    --- Running Processes: 53

    (!) ---- IE start pages/Tabs reset

    +-----------------| Boonty/Boonty Games Elements Deleted :

    Service: "Boonty Games"
    .
    HKCR\boontybox
    HKCU\Software\Boonty
    HKLM\Software\Boonty
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Taxi Racer London 2_is1
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C6071319-3DA6-4343-AEFD-B212CF3E2B85}_is1
    .
    C:\Program Files\Boonty
    C:\Program Files\BoontyGames
    C:\Program Files\Fichiers communs\BOONTY Shared
    C:\Documents and Settings\All Users\Application Data\BOONTY

    +-----------------| Infected Poker Softwares Elements Deleted :

    HKCU\Software\Titan Poker
    HKLM\Software\Titan Poker
    HKLM\Software\Microsoft\Internet Explorer\Extensions\{49783ED4-258D-4f9f-BE11-137C18D3E543}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Titan Poker
    .
    C:\log_lobby_dumper.txt
    C:\log_lobby.txt
    C:\Poker\Titan Poker
    C:\Documents and Settings\herviaux\Application Data\Microsoft\Internet Explorer\Quick Launch\Titan Poker.lnk
    C:\Documents and Settings\All Users\Menudm~1\Titan Poker.lnk
    C:\Documents and Settings\herviaux\Cookies\herviaux@partypoker[1].txt

    +-----------------| Sweetim Elements Deleted :

    HKCR\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
    HKCR\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
    HKCR\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
    HKCR\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
    HKCR\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
    HKCR\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
    HKCR\SWEETIE.IEToolbar
    HKCR\SWEETIE.IEToolbar.1
    HKCR\SWEETIE.SWEETIE
    HKCR\SWEETIE.SWEETIE.3
    HKCR\SweetIM_URLSearchHook.ToolbarURLSearchHook
    HKCR\SweetIM_URLSearchHook.ToolbarURLSearchHook.1
    HKCR\Toolbar3.SWEETIE
    HKCR\Toolbar3.SWEETIE.1
    HKCR\Typelib\{EEE6C35E-6118-11DC-9C72-001320C79847}
    HKCR\Typelib\{EEE6C35F-6118-11DC-9C72-001320C79847}
    HKCU\Software\SweetIM
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
    HKLM\Software\SweetIM
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\351716A953E21214898904032EAE2E81
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\A189D17A469616C4688D23E192996267
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
    .
    C:\WINDOWS\Installer\61b788.msi
    C:\Program Files\SweetIM
    C:\WINDOWS\Installer\{59971D79-8111-42C2-9E40-883A0C277E78}
    C:\Documents and Settings\All Users\Application Data\SweetIM
    C:\Documents and Settings\herviaux\Cookies\herviaux@sweetim[1].txt
    C:\Documents and Settings\herviaux\Cookies\herviaux@www.sweetim[2].txt
    C:\Documents and Settings\herviaux\Cookies\herviaux@www.sweetim[3].txt

    (!) ---- Temp files deleted.
    (!) ---- Recycle bin emptied in all drives.

    +-----------------| Added Scan :

    ---- Mozilla FireFox Version 3.0.1 ----

    ProfilePath: etzjc5bn.default
    .
    Prefs.js: Browser.Search.SelectedEngine: "Live Search"
    .
    .
    .
    .
    .

    ---- Internet Explorer Version 7.0.5730.11 ----

    +-[HKEY_CURRENT_USER\..\Internet Explorer\Main]

    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
    Search Page: hxxp://www.google.com
    Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

    +-[HKEY_USERS\S-1-5-21-3388834424-248309118-346165656-1006\..\Internet Explorer\Main]

    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
    Search Page: hxxp://www.google.com
    Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

    +-[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Search bar: hxxp://search.msn.com/spbasic.htm
    Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Start page: hxxp://fr.msn.com/

    +-[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

    Tabs: hxxp://ieframe.dll/tabswelcome.htm

    +---------------------------------------------------------------------------+

    6170 Byte(s) - C:\Ad-Report-Clean-20.9-.3-10.log
    6971 Byte(s) - C:\Ad-Report-Scan-20.9-.3-09.log

    1 File(s) - C:\Program Files\Ad-remover\TOOLS\BACKUP
    8 File(s) - C:\Program Files\Ad-remover\TOOLS\QUARANTINE

    Before run: 81,343,840,256 Byte(s) free
    After run: Byte(s) free

    End at: 18:18:19 | 2009-03-10
    .
    +-----------------| E.O.F - 118 Lines
    .
    0
  12. Nirld
     
    Bonjour,

    Pour tous ceux qui ont des soucis de trojan :

    https://www.malwarebytes.com/

    Téléchargez le free trial sur la gauche, bouton bleu

    Installez malwarebytes, mettez le à jour (n'oubliez pas, c'est important !) et lancez un scan.

    TOUT ce qui a été détecté doit etre supprimé. Redémarrez s'il le demande.

    Si ça ne suffit pas, faire la même chose mais en mode sans échec.

    Bon courage :)
    0
  13. ah953 Messages postés 79 Statut Membre
     
    le scan n'a révélé aucun virus ni infection
    les pubs n'apparaissent plus !!
    je vous remarcie pour vos réponses !!!
    0
Précédent
  • 1
  • 2

Discussions similaires

Bouton ON/OFF : O ou I, quel côté est allumé
Stargirlfr -
kaparzo23 -

12 réponses
symbole marche arret
nathybouly -
Cpt-N3mo -

1 réponse
Excel 365 + Windows 10 Arrêt défilement flèches
VALBRISE -
VALBRISE -

5 réponses
Excel : les flèches déplacent le document
Hypergonar -
Hypergonar -

2 réponses
Touche arrêt défil sur clavier
munette -
Leo -

49 réponses