Publicite intempestive ouvrant de google

palma -  
 V-X -
Bonjour,
lorsque j'ouvre internet explorer une publicite intempestive s'affiche avant mon moteur de recherche google ,j'ai essaye beaucoup de anti spam et autres ,je n'arrive pas à m'en debarasser,quelqu'un pourrait-il m'aider à solutionner le probleme merci à tous
Configuration: Windows XP Internet Explorer 7.0

4 réponses

  1. V-X
     
    Salut,

    ▶ Télécharge random's system information tool (RSIT) et enregistre le sur ton bureau.

    ▶ Double clique sur RSIT.exe pour lancer l'outil.

    ▶ Clique sur ' continue ' à l'écran Disclaimer.

    ▶ Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.

    ▶ Une fois le scan fini , 2 rapports vont apparaitre. Poste le contenu des 2 rapports séparément.
    ( log.txt & info.txt )

    (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

    Si un rapport ne passe pas faire une alerte à la conciergerie avec le /!\ jaune.
    0
    1. palma
       
      Logfile of random's system information tool 1.06 (written by random/random)
      Run by Propriétaire at 2009-05-20 20:50:01
      Microsoft Windows XP Édition familiale Service Pack 3
      System drive C: has 229 GB (75%) free of 305 GB
      Total RAM: 3583 MB (87% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 20:50:01, on 20/05/2009
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16827)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\RUNDLL32.EXE
      C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      C:\Program Files\EoRezo\EoEngine.exe
      C:\Documents and Settings\Propriétaire\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      C:\Program Files\Logitech\SetPoint\SetPoint.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
      C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\nvsvc32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\System32\wbem\wmiapsrv.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
      C:\Documents and Settings\Propriétaire\Bureau\RSIT.exe
      C:\Program Files\trend micro\Propriétaire.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Smart Web Printing\hpswp_printenhancer.dll
      O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: EoBHO - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
      O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\EoRezo\EoEngine.exe"
      O4 - HKLM\..\Run: [SoftwareHelper] C:\Documents and Settings\Propriétaire\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe -hidden
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - Global Startup: Logitech SetPoint.lnk = ?
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
      O9 - Extra button: Livre de reliures HP - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
      O9 - Extra button: Sélection intelligente HP - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
      0
  2. V-X
     
    Re,

    ▶ Télécharges AD-Remover ( de Cyrildu17 / C_XX ) sur ton bureau :

    /!\ Déconnectes toi et fermes toutes applications en cours/!\

    ● Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( C:\Program files )
    ● Double clique sur l'icône Ad-removersituée sur ton bureau
    ● Au menu principal choisi l'option "A"
    ● Postes le rapport qui apparait à la fin .

    ( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

    (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

    Note :

    "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
    Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
    Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
    0
    1. palma
       
      a
      ------- LOGFILE OF AD-REMOVER 1.1.4.1 | ONLY XP/VISTA -------

      Updated by C_XX on 19/05/2009 at 18:40
      Contact: AdRemover.contact@gmail.com
      Website: http://pagesperso-orange.fr/NosTools/ad_remover.html

      Start at: 14:53:20, 21/05/2009 | Boot mode: Normal Boot
      Option: Scan | Executed from: C:\Program Files\Ad-remover\
      Operating System: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
      Computer Name: CANROM
      Current User: Propri‚taire - Administrator


      ============ Known Adwares Found ============

      .
      .
      C:\Program Files\AskTBar
      C:\Documents and Settings\Propri‚taire\Cookies\propri‚taire@atdmt[2].txt
      C:\Documents and Settings\Propri‚taire\Cookies\propri‚taire@bs.serving-sys[2].txt

      +-----------------| Eorezo Elements Found:

      HKCR\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
      HKCR\AppID\EoRezoBHO.DLL
      HKCR\CLSID\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
      HKCR\EoRezoBHO.EoBho
      HKCR\EoRezoBHO.EoBho.1
      HKCR\Typelib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
      HKCU\Software\EoRezo
      HKLM\Software\EoRezo
      HKLM\Software\Classes\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
      HKLM\Software\Classes\AppID\EoRezoBHO.DLL
      HKLM\Software\Classes\CLSID\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
      HKLM\Software\Classes\EoRezoBHO.EoBho
      HKLM\Software\Classes\EoRezoBHO.EoBho.1
      HKLM\Software\Classes\TypeLib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1
      HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
      HKU\S-1-5-21-823518204-1958367476-839522115-1003\Software\Eorezo
      HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoengine
      HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Softwarehelper
      .
      C:\Program Files\EoRezo
      C:\Documents and Settings\Propri‚taire\Application Data\EoRezo
      C:\Documents and Settings\kinou\Application Data\Eorezo
      C:\Documents and Settings\Propri‚taire\Application Data\Eorezo
      C:\Documents and Settings\kinou\Cookies\kinou@ads.eorezo[2].txt
      C:\Documents and Settings\kinou\Cookies\kinou@dl.eorezo[1].txt
      C:\Documents and Settings\kinou\Cookies\kinou@eorezo[1].txt
      C:\Documents and Settings\kinou\Cookies\kinou@eorezo[3].txt
      C:\Documents and Settings\Propri‚taire\Cookies\propri‚taire@ads.eorezo[2].txt
      C:\Documents and Settings\Propri‚taire\Cookies\propri‚taire@dl.eorezo[1].txt
      C:\Documents and Settings\Propri‚taire\Cookies\propri‚taire@eorezo[2].txt
      C:\WINDOWS\Prefetch\SOFTWAREUPDATEHP.EXE-35241D2A.pf
      C:\Documents and Settings\Propri‚taire\Cookies\propri‚taire@ads.eorezo[2].txt
      C:\Documents and Settings\Propri‚taire\Cookies\propri‚taire@dl.eorezo[1].txt
      C:\Documents and Settings\Propri‚taire\Cookies\propri‚taire@eorezo[2].txt

      +-----------------| It's TV Elements Found:

      .
      C:\WINDOWS\Prefetch\ITSTV.EXE-12AB2862.pf

      +-----------------| Sweetim Elements Found:

      .

      +-----------------| Added Scan:
      .

      ---- Internet Explorer Version 7.0.5730.13 ----

      [HKEY_CURRENT_USER\..\Internet Explorer\Main]

      Search bar: hxxp://www.google.com/ie
      Search Page: hxxp://www.google.com
      Start Page: hxxp://google.fr/
      First Home Page: hxxp://y.lo.st

      [HKEY_USERS\S-1-5-21-823518204-1958367476-839522115-1003\..\Internet Explorer\Main]

      Search bar: hxxp://www.google.com/ie
      Search Page: hxxp://www.google.com
      Start Page: hxxp://google.fr/
      First Home Page: hxxp://y.lo.st

      [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

      Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
      Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
      Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
      Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157

      [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

      Tabs: hxxp://y.lo.st

      =========== Suspicious ==========

      C:\Documents and Settings\Propri‚taire\Mes documents\DOC.Particulier J.M\Doc.affaires 1\code nero\Crack.exe
      [67584 Byte(s)|--a------|18/02/2003 13:41|HashMD5: b4896ceeca04489c7f3913381c94dbe7 |CRC32: ea6dd6ab]

      C:\Documents and Settings\Propri‚taire\Mes documents\DOC.Particulier J.M\doc.telecharges\AVS Video Converter 3.1 + Serial.rar
      [17969216 Byte(s)|--a------|29/09/2005 19:16|HashMD5: c9b2373b1199150edae6b75de6f23d98 |CRC32: cd79006c]

      C:\Documents and Settings\Propri‚taire\Mes documents\DOC.Particulier J.M\doc.telecharges\htmpegencoder70proauthorpatch.exe
      [7147520 Byte(s)|--a------|17/03/2005 09:12|HashMD5: a908116d5ab17684c14193c2fea74bf0 |CRC32: 12abb8d5]


      +---------------------------------------------------------------------------+

      4629 Byte(s) - C:\Ad-Report-Scan-21.05.2009.log

      1 File(s) - C:\Program Files\Ad-remover\BACKUP
      0 File(s) - C:\Program Files\Ad-remover\QUARANTINE

      End at: 14:58:52 | 21/05/2009
      .
      +-----------------| E.O.F
      .
      0
  3. V-X
     
    Re,

    !Déconnectes toi et fermes toutes applications en cours !

    ● Relances "Ad-remover" : au menu principal choisi l'option "B" .

    ● Coche à l'écran de sélèction ( http://sd-1.archive-host.com/membres/up/16506160323759868/Capturer-ADR.JPG ) :

    1 - Suppression Adwares connus
    2 - Suppression Eorezo
    3 - Suppression It's TV

    ● Puis choisi "S" , le programme va travailler,

    ● Postes le rapport qui apparait à la fin.

    ( le rapport est sauvegardé sous C:\Ad-report(date).log )

    (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

    /!\Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides)
    0
    1. palma
       
      ------- LOGFILE OF AD-REMOVER 1.1.4.1 | ONLY XP/VISTA -------

      Updated by C_XX on 19/05/2009 at 18:40
      Contact: AdRemover.contact@gmail.com
      Website: http://pagesperso-orange.fr/NosTools/ad_remover.html

      **** LIMITED TO ****

      Known Adwares
      Eorezo
      It's TV

      ********************

      Start at: 23:05:05, 21/05/2009 | Boot mode: Normal Boot
      Option: Clean | Executed from: C:\Program Files\Ad-remover\
      Operating System: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
      Computer Name: CANROM
      Current User: Propri‚taire - Administrator


      (!) -- IE start pages/Tabs reset

      ============ Known Adwares Deleted ============

      .
      .
      C:\Program Files\AskTBar
      C:\Documents and Settings\Propri‚taire\Cookies\propri‚taire@atdmt[1].txt
      C:\Documents and Settings\Propri‚taire\Cookies\propri‚taire@bs.serving-sys[2].txt

      +-----------------| Eorezo Elements Deleted :

      HKCR\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
      HKCR\AppID\EoRezoBHO.DLL
      HKCR\CLSID\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
      HKCR\EoRezoBHO.EoBho
      HKCR\EoRezoBHO.EoBho.1
      HKCR\Typelib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
      HKCU\Software\EoRezo
      HKLM\Software\EoRezo
      HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
      HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1
      HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
      HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoengine
      HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Softwarehelper
      .
      /!\ NOT DELETED - C:\Program Files\EoRezo
      C:\Documents and Settings\Propri‚taire\Application Data\EoRezo
      C:\Documents and Settings\kinou\Application Data\Eorezo
      C:\Documents and Settings\kinou\Cookies\kinou@ads.eorezo[2].txt
      C:\Documents and Settings\kinou\Cookies\kinou@dl.eorezo[1].txt
      C:\Documents and Settings\kinou\Cookies\kinou@eorezo[1].txt
      C:\Documents and Settings\kinou\Cookies\kinou@eorezo[3].txt
      C:\Documents and Settings\Propri‚taire\Cookies\propri‚taire@ads.eorezo[2].txt
      C:\Documents and Settings\Propri‚taire\Cookies\propri‚taire@dl.eorezo[1].txt
      C:\Documents and Settings\Propri‚taire\Cookies\propri‚taire@eorezo[1].txt
      C:\WINDOWS\Prefetch\SOFTWAREUPDATEHP.EXE-35241D2A.pf

      +-----------------| It's TV Elements Deleted :

      .
      C:\WINDOWS\Prefetch\ITSTV.EXE-12AB2862.pf

      (!) -- Temp files deleted.
      (!) -- Recycle bin emptied in all drives.


      ********** /!\ FILE(S)/FOLDER(S) NOT DELETED /!\ **********

      "C:\Program Files\EoRezo"

      Second run ...

      /!\ RESIST ! - "C:\Program Files\EoRezo"


      +-----------------| Added Scan:
      .

      ---- Internet Explorer Version 7.0.5730.13 ----

      [HKEY_CURRENT_USER\..\Internet Explorer\Main]

      Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
      Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
      Search Page: hxxp://www.google.com
      Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

      [HKEY_USERS\S-1-5-21-823518204-1958367476-839522115-1003\..\Internet Explorer\Main]

      Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
      Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
      Search Page: hxxp://www.google.com
      Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

      [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

      Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
      Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      Search bar: hxxp://search.msn.com/spbasic.htm
      Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
      Start Page: hxxp://fr.msn.com/

      [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

      Tabs: hxxp://ieframe.dll/tabswelcome.htm

      =========== Suspicious ==========

      C:\Documents and Settings\Propri‚taire\Mes documents\DOC.Particulier J.M\Doc.affaires 1\code nero\Crack.exe
      [67584 Byte(s)|--a------|18/02/2003 13:41|HashMD5: b4896ceeca04489c7f3913381c94dbe7 |CRC32: ea6dd6ab]

      C:\Documents and Settings\Propri‚taire\Mes documents\DOC.Particulier J.M\doc.telecharges\AVS Video Converter 3.1 + Serial.rar
      [17969216 Byte(s)|--a------|29/09/2005 19:16|HashMD5: c9b2373b1199150edae6b75de6f23d98 |CRC32: cd79006c]

      C:\Documents and Settings\Propri‚taire\Mes documents\DOC.Particulier J.M\doc.telecharges\htmpegencoder70proauthorpatch.exe
      [7147520 Byte(s)|--a------|17/03/2005 09:12|HashMD5: a908116d5ab17684c14193c2fea74bf0 |CRC32: 12abb8d5]


      +---------------------------------------------------------------------------+

      4756 Byte(s) - C:\Ad-Report-Clean-21.05.2009.log
      4846 Byte(s) - C:\Ad-Report-Scan-21.05.2009.log

      18 File(s) - C:\Program Files\Ad-remover\BACKUP
      11 File(s) - C:\Program Files\Ad-remover\QUARANTINE

      End at: 23:09:45 | 21/05/2009
      .
      +-----------------| E.O.F
      .
      0
  4. V-X
     
    Re,

    désinstalle Ad-Remover".

    Redémarre ton pc , si pas éteind depuis le passage de l'outil.

    Refait un LOG avec RSIT.

    merci
    0

Discussions similaires

Message "Un bloqueur de publicité empêche la lecture..."
pistouri -
pistouri -

0 réponse