scan Fermé

Question

Bonjour, . ======= RAPPORT D'AD-REMOVER 1.1.4.6_D | UNIQUEMENT XP/VISTA/7 ======= . Mit à jour par C_XX le 28.11.2009 à 18:29 Contact: AdRemover.contact@gmail.com Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html . Lancé à: 18:04:05, 29/11/2009 | Mode Normal | Option: SCAN Exécuté de: C:\Program Files\Ad-Remover\ Système d'exploitation: Microsoft® Windows Vista™ Home Premium Service Pack 2 v6.0.6002 Nom du PC: PC-DE-MONIQUE | Utilisateur actuel: Monique . ============== ÉLÉMENT(S) TROUVÉ(S) ============== . C:\ProgramData\Kiwee Toolbar C:\ProgramData\SweetIM C:\ProgramData\Viewpoint C:\Users\Monique\AppData\Roaming\Agi C:\Users\Monique\AppData\Roaming\EoRezo C:\Users\Monique\AppData\Roaming\Mozilla\Firefox\Profiles\apcc0hk5.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847} C:\Users\Monique\AppData\Roaming\Mozilla\Firefox\Profiles\apcc0hk5.default\searchplugins\sweetim.xml C:\Users\Monique\AppData\Roaming\Mozilla\Firefox\Profiles\apcc0hk5.default\SweetIMToolbarData C:\PROGRA~2\SweetIM C:\Users\Monique\AppData\LocalLow\Kiwee Toolbar C:\Users\Monique\AppData\LocalLow\SweetIM C:\Program Files\EoRezo C:\Program Files\Kiwee Toolbar C:\Program Files\SweetIM C:\Program Files\Viewpoint C:\ProgramData\agi C:\Windows\Installer\1e85ee6.msi C:\Windows\Installer\1e85eeb.msi C:\Windows\Prefetch\SOFTWAREUPDATEHP.EXE-CEB0347F.pf C:\Users\Monique\AppData\Roaming\MICROS~1\Windows\Cookies\monique@eorezo[2].txt C:\Users\Monique\AppData\Roaming\MICROS~1\Windows\Cookies\monique@eorezo[3].txt C:\Users\Monique\AppData\Roaming\MICROS~1\Windows\Cookies\monique@kiwee[2].txt C:\Users\Monique\AppData\Roaming\MICROS~1\Windows\Cookies\monique@www.sweetim[2].txt C:\Users\Monique\AppData\Roaming\MICROS~1\Windows\Cookies\Low\monique@ads.eorezo[2].txt C:\Users\Monique\AppData\Roaming\MICROS~1\Windows\Cookies\Low\monique@eorezo[1].txt C:\Users\Monique\AppData\Roaming\MICROS~1\Windows\Cookies\Low\monique@kiwee[1].txt . HKCU\software\AGI HKCU\software\EoRezo HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\Registry\User\S-1-5-21-132513822-1943933658-3547741554-1002\Software\Sweetim HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{EEE6C35B-6118-11DC-9C72-001320C79847} HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{EEE6C35B-6118-11DC-9C72-001320C79847} HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847} HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847} HKCU\software\SweetIM HKLM\software\AGI HKLM\software\classes\appid\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9} HKLM\software\classes\appid\EoRezoBHO.DLL HKLM\Software\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E} HKLM\Software\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD} HKLM\Software\Classes\CLSID\{C7B76B90-3455-4AE6-A752-EAC4D19689E5} HKLM\software\classes\EoRezoBHO.EoBHO HKLM\software\classes\EoRezoBHO.EoBHO.1 HKLM\software\classes\installer\Products\4EEB31C8EC7E64E4DB31F814AD0DF0FE HKLM\software\classes\installer\Products\652E78CE4A0B14A46828BA75FF1291D6 HKLM\Software\Classes\Interface\{819DB72D-1C28-4387-9778-E2FF3DC86F74} HKLM\software\classes\KiweeIEToolbar.KiweeToolbar HKLM\software\classes\KiweeIEToolbar.KiweeToolbar.1 HKLM\software\classes\KiweeIEToolbar.ToolbarInfo HKLM\software\classes\KiweeIEToolbar.ToolbarInfo.1 HKLM\software\classes\MediaPlayer.GraphicsUtils HKLM\software\classes\MediaPlayer.GraphicsUtils.1 HKLM\software\classes\MgMediaPlayer.GifAnimator HKLM\software\classes\MgMediaPlayer.GifAnimator.1 HKLM\software\classes\SWEETIE.IEToolbar HKLM\software\classes\SWEETIE.IEToolbar.1 HKLM\software\classes\SweetIM_URLSearchHook.ToolbarURLSearchHook HKLM\software\classes\SweetIM_URLSearchHook.ToolbarURLSearchHook.1 HKLM\software\classes\Toolbar3.SWEETIE HKLM\software\classes\Toolbar3.SWEETIE.1 HKLM\Software\Classes\TypeLib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E} HKLM\software\EoRezo HKLM\software\MetaStream HKLM\Software\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E} HKLM\Software\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD} HKLM\Software\Microsoft\Internet Explorer\Toolbar\{6638A9DE-0745-4292-8A2E-AE530E7B9B3F} HKLM\Software\Microsoft\Internet Explorer\Toolbar\{EEE6C35B-6118-11DC-9C72-001320C79847} HKLM\Software\Microsoft\Internet Explorer\Toolbar\{EEE6C35B-6118-11DC-9C72-001320C79847} HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5} HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\1AC67655DD68F8240B2860F2D511EBD8 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\2E6768B6932D112438F047C54D180635 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\351716A953E21214898904032EAE2E81 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\427EA997C413D1D47907CBFC7B2DB432 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\4318DF19719275242801CBE292063A4C HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\5D19F074C042AD34BAB463D4175A062E HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A189D17A469616C4688D23E192996267 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E1C820A74ED67374BA048B52CB3C3804 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E337925F629CF4C4FB08F3D9674DD839 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9 HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\4EEB31C8EC7E64E4DB31F814AD0DF0FE HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\652E78CE4A0B14A46828BA75FF1291D6 HKLM\Software\Microsoft\Windows\CurrentVersion\Run\EoEngine HKLM\Software\Microsoft\Windows\CurrentVersion\Run\KiweeHook HKLM\Software\Microsoft\Windows\CurrentVersion\Run\SweetIM HKLM\software\microsoft\windows\currentversion\uninstall\{23A287DB-449A-462F-BDE1-8635A61671CE} HKLM\software\microsoft\windows\currentversion\uninstall\{8C13BEE4-E7CE-4E46-BD13-8F41DAD00FEF} HKLM\software\microsoft\windows\currentversion\uninstall\{EC87E256-B0A4-4A41-8682-AB57FF21196D} HKLM\software\microsoft\windows\currentversion\uninstall\eoEngine_is1 HKLM\software\microsoft\windows\currentversion\uninstall\ViewpointMediaPlayer HKLM\Software\Mozilla\Firefox\Extensions\toolbar@kiwee.com HKLM\software\SweetIM HKLM\software\Viewpoint HKU\.default\software\AGI HKU\s-1-5-18\software\AGI HKU\s-1-5-21-132513822-1943933658-3547741554-1002\software\AGI HKU\s-1-5-21-132513822-1943933658-3547741554-1002\software\EoRezo HKU\s-1-5-21-132513822-1943933658-3547741554-1002\software\SweetIM . ============== Scan additionnel ============== . . * Mozilla FireFox Version [Impossible d'obtenir la version] * . Nom du profil: apcc0hk5.default (Monique) . (Monique, prefs.js) Browser.download.lastDir, C:\Users\Monique\Downloads (Monique, prefs.js) Browser.search.defaultenginename, MyStart Rechercher (Monique, prefs.js) Browser.search.defaulturl, hxxp://www.bing.com/search?FORM=IEFM1&q= (Monique, prefs.js) Browser.search.selectedEngine, MyStart Rechercher (Monique, prefs.js) Browser.startup.homepage, hxxp://y.lo.st . (Monique, prefs.js) TROUVE - Browser.startup.homepage, hxxp://y.lo.st (Monique, prefs.js) TROUVE - Sweetim.toolbar.highlight.colors, #FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0 (Monique, prefs.js) TROUVE - Sweetim.toolbar.logger.ConsoleHandler.MinReportLevel, 7 (Monique, prefs.js) TROUVE - Sweetim.toolbar.logger.FileHandler.FileName, ff-toolbar.log (Monique, prefs.js) TROUVE - Sweetim.toolbar.logger.FileHandler.MaxFileSize, 200000 (Monique, prefs.js) TROUVE - Sweetim.toolbar.logger.FileHandler.MinReportLevel, 7 (Monique, prefs.js) TROUVE - Sweetim.toolbar.mode.debug, false (Monique, prefs.js) TROUVE - Sweetim.toolbar.previous.keyword.URL, hxxp://kwtb.search.imgag.com/?c=GNKIW29193&sbs=1&sc=2&f=web&vernum=1.0&uid=&did=f8d4a70c-98e2-4081-901d-01bf93043ede&q= (Monique, prefs.js) TROUVE - Sweetim.toolbar.search.external, (Monique, prefs.js) TROUVE - Sweetim.toolbar.search.history.capacity, 10 (Monique, prefs.js) TROUVE - Sweetim.toolbar.simapp_id, {0F822129-5F83-4B14-8387-85D2A9E2FAC1} (Monique, prefs.js) TROUVE - Sweetim.toolbar.version, 1.0.0.8 . . * Internet Explorer Version 8.0.6001.18828 * . [HKEY_CURRENT_USER\..\Internet Explorer\Main] . Search Page: hxxp://www.google.com Start Page: hxxp://www.google.fr/webhp?sourceid=navclient&hl=fr&ie=UTF-8 Search Bar: hxxp://www.google.com/ie Default_Search_URL: hxxp://www.google.com/ie . [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main] . Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157 Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157 Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896 Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896 . [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS] . Tabs: hxxp://y.lo.st . =================================== . 531 Octet(s) - C:\Ad-Report-SCAN[1].log 531 Octet(s) - C:\Ad-Report-SCAN[2].log 14866 Octet(s) - C:\Ad-Report-SCAN[3].log . 535 Fichier(s) - C:\Users\Monique\AppData\Local\Temp 97 Fichier(s) - C:\Windows\Temp . 3 Fichier(s) - C:\Program Files\Ad-Remover\BACKUP 0 Fichier(s) - C:\Program Files\Ad-Remover\QUARANTINE . Fin à: 18:11:25 | 29/11/2009 - SCAN[3] . ============== E.O.F ============== .

flo-91 · Answer

Bonsoir,

En effet, c'est bien infecté :


>Désactive ton antivirus le temps de la manip
>Déconnecte-toi d'Internet et ferme toutes applications en cours
>Double-clique sur le programme d'installation,
>Au menu principal, choisis l'option L ( Nettoyage )
>Poste le rapport généré (C:\Ad-Report-CLEAN.log).
>N'oublie pas de réactiver ton anti-virus

crapoulou · Answer

Salut flo-91.
Un minimum d'explications doivent être exigées !
Les helpeurs en désinfection ne sont pas des machines qui analysent les rapports alors un minimum d'explications svp !

flo-91 · Answer

Salut,


Ok, mais lui non plus n'a pas donné beaucoup d'explications, il ne fait que donner un rapport. ^^
J'ai été un peu rapide, comme lui, c'est vrai que ce n'est pas tres parlant en effet ^^

Donc mo, dans ton rapport :

On trouve une infection Eorezo, et des toolbars nocives.

Apres avoir passé l'otpion 2 de Ad-Remover, et posté le rapport, tu fera un scan RSIT qui permettra d'y voir encore  plus clair :


>Telecharge RSIT ici et enregistre-le sur ton bureau :

http://images.malwareremoval.com/random/RSIT.exe

>Double-clique sur RSIT.exe qui se trouve sur le bureau

>Le programme se lance, choisi "1month" et clique sur "continue"

>Laisse faire l'outil et poste le rapport qui s'affiche.

flo-91 · Answer

Ok, merci d'être passé  :)

a+

Scan

4 réponses

Discussions similaires