pc lent +rapport

Question

Bonjour,mon pc est lent .je recherche de l'aide apparemment je serais infecté par quelques virus.

ogfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:04:31, on 02/12/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32
vsvc32.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Orange\Systray\SystrayApp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\keyhook.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Orange\Launcher\Launcher.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\pchbutton.exe
C:\documents and settings\compaq_propriétaire\local settings\application data\flsjahoe.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Orange\Deskboard\deskboard.exe
C:\Program Files\Orange\connectivity\connectivitymanager.exe
C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=presario&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.searcheo.fr/france
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60264
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60264
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=presario&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60264
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60264
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://support.norton.com/sp/fr/fr/home/current/solutions/v58540272?abproduct=LU&abversion=1.90&build=Symantec&ced=true&entsrc=CED_pubweb&error=1814&module=LU&src=_mi
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer fourni par Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {AEEC3B59-CA98-4EBA-A140-57B94E283583} - (no file)
R3 - URLSearchHook: (no name) - {814C76CB-2623-43F4-AAD0-58A0E5190A20} - (no file)
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44CF-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\Plugins\RazaWebHook.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Secured eMule Toolbar - {1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - C:\Program Files\Secured_eMule	bSec1.dll
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Program Files\Need2Find\bar\2.bin\ND2FNBAR.DLL (file missing)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: (no name) - {DB35C569-5624-4CFC-8043-E5139F55A073} - C:\PROGRA~1\Crawler\Shared\CShared.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Secured eMule Toolbar - {1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} - C:\Program Files\Secured_eMule	bSec1.dll
O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O3 - Toolbar: barre d'outils Orange - {D3028143-6145-4318-99D3-3EDCE54A95A9} - C:\Program Files\Orange\ToolbarFR\ToolbarContainer101000315.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [sysfbtray] C:\windows\freddy46.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [MyWebSearch Plugin] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\M3PLUGIN.DLL,UPF
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P26 "EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Compaq_Propriétaire] C:\Documents and Settings\Compaq_Propriétaire\Compaq_Propriétaire.exe /i
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\pchbutton.exe
O4 - HKCU\..\Run: [flsjahoe] "c:\documents and settings\compaq_propriétaire\local settings\application data\flsjahoe.exe" flsjahoe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZRxdm674YYFR
O8 - Extra context menu item: ajouter cette page à vos favoris Orange - C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\cce660.html
O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\Plugins\RazaWebHook.dll/3000
O8 - Extra context menu item: traduire la page - C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\cce65E.html
O8 - Extra context menu item: traduire le texte sélectionné - C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\cce65F.html
O9 - Extra button: Crawler Screensaver - {CDAFD956-97BE-443D-8EF7-F4F094EB5766} - C:\Program Files\Crawler\SSaver\CSSaver.exe
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\Orange\ToolbarFR\ToolbarContainer101000315.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: https://www.orange.fr/portail
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-4/PopularScreenSaversInitialSetup1.0.1.1.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD5/JSCDL/jre/6u11-b90/jinstall-6u11-windows-i586-jc.cab?e=1232621260938&h=23adf2255bb2954a1a4d17d5efb6f691/&filename=jinstall-6u11-windows-i586-jc.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game01.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Filter hijack: text/html - (no CLSID) - (no file)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Update Service (gupdate1c9726b9996aa68) (gupdate1c9726b9996aa68) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: My Web Search Service (MyWebSearchService) - MyWebSearch.com - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O24 - Desktop Component 0: (no name) - http://www.couriramorlaix.com/courir%20a%20morlaix/fichier_photo-videos/diaporamas/st-martin2007_15km/medium/0012.jpg
O24 - Desktop Component 1: (no name) - https://www.marmiton.org/App_Themes/Recettes/img/recettes/recette_titre.gif2

Utilisateur anonyme · Answer

Bonjour,


Imprime ces instructions car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.



&#9654 Télécharge :

Malwarebytes  

ou  :

Malwarebytes

&#9654 Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

(NB : Si tu as un message d'erreur t'indiquant qu'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : COMCTL32.OCX

&#9654 Potasses le Tuto pour te familiariser avec le prg :


( cela dit, il est très simple d'utilisation ).

relance malwarebytes en suivant scrupuleusement ces consignes :

! Déconnecte toi et ferme toutes applications en cours !

&#9654 Lance Malwarebyte's .

Fais un examen dit "Complet" .

&#9654 Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
&#9654 à la fin tu cliques sur "résultat" .
&#9654 Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .

&#9654 Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !


&#9654 Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)

patracem · Answer

voici le rapport apres le scan de malwarebytes


Malwarebytes' Anti-Malware 1.41
Version de la base de données: 3275
Windows 5.1.2600 Service Pack 3

02/12/2009 16:35:47
mbam-log-2009-12-02 (16-35-47).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 261929
Temps écoulé: 2 hour(s), 13 minute(s), 3 second(s)

Processus mémoire infecté(s): 2
Module(s) mémoire infecté(s): 1
Clé(s) du Registre infectée(s): 198
Valeur(s) du Registre infectée(s): 15
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 30
Fichier(s) infecté(s): 119

Processus mémoire infecté(s):
C:\documents and settings\compaq_propriétaire\local settings\application data\flsjahoe.exe (Adware.Navipromo.H) -> Unloaded process successfully.
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE (Adware.MyWebSearch) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL (Adware.MyWebSearch) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\funwebproducts.datacontrol (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{c8cecde3-1ae1-4c4a-ad82-6d5b00212144} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{17de5e5e-bfe3-4e83-8e1f-8755795359ec} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{1f52a5fa-a705-4415-b975-88503b291728} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{a626cdbd-3d13-4f78-b819-440a28d7e8fc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.datacontrol.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.historykillerscheduler (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{8ca01f0e-987c-49c3-b852-2f1ac4a7094c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{1093995a-ba37-41d2-836e-091067c4ad17} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{120927bf-1700-43bc-810f-fab92549b390} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{247a115f-06c2-4fb3-967d-2d62d3cf4f0a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3e53e2cb-86db-4a4a-8bd9-ffeb7a64df82} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{90449521-d834-4703-bb4e-d3aa44042ff8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{991aac62-b100-47ce-8b75-253965244f69} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{bbabdc90-f3d5-4801-863a-ee6ae529862d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{d6ff3684-ad3b-48eb-bbb4-b9e6c5a355c1} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{eb9e5c1c-b1f9-4c2b-be8a-27d6446fdaf8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{0f8ecf4f-3646-4c3a-8881-8e138ffcaf70} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{b813095c-81c0-4e40-aa14-67520372b987} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{c9d7be3e-141a-4c85-8cd6-32461f3df2c7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{cff4ce82-3aa2-451f-9b77-7165605fb835} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.historykillerscheduler.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.historyswattercontrolbar (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.historyswattercontrolbar.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.htmlmenu (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{e47caee0-deea-464a-9326-3f2801535a4d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3e1656ed-f60e-4597-b6aa-b6a58e171495} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.htmlmenu.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.htmlmenu.2 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.iecookiesmanager (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.iecookiesmanager.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.killerobjmanager (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.killerobjmanager.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.popswatterbarbutton (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{8e6f1830-9607-4440-8530-13be7c4b1d14} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{63d0ed2b-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{63d0ed2d-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{8e6f1832-9607-4440-8530-13be7c4b1d14} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a9571378-68a1-443d-b082-284f960c6d17} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.popswatterbarbutton.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.popswattersettingscontrol (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.popswattersettingscontrol.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.chatsessionplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{e79dfbc0-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{72ee7f04-15bd-4845-a005-d6711144d86a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e79dfbc9-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e79dfbcb-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.chatsessionplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.htmlpanel (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{3e720450-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3e720451-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3e720453-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{3e720452-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3e720452-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.htmlpanel.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.outlookaddin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{adb01e81-3c79-4272-a0f1-7b2be7a782dc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.outlookaddin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.pseudotransparentplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{7473d290-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{7473d291-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{7473d293-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{7473d295-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{7473d297-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7473d292-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7473d296-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.pseudotransparentplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchtoolbar.settingsplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{07b18ea0-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{07b18eaa-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{07b18eac-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{f87d7fb5-9dc5-4c8c-b998-d8dfe02e2978} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{53ced2d0-5e9a-4761-9005-648404e6f7e5} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchtoolbar.settingsplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchtoolbar.toolbarplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchtoolbar.toolbarplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\screensavercontrol.screensaverinstaller (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{29d67d3c-509a-4544-903f-c8c1b8236554} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{2e3537fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{938aa51a-996c-4884-98ce-80dd16a5c9da} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\screensavercontrol.screensaverinstaller.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\shoppingreport.hbax (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\shoppingreport.hbax.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\shoppingreport.hbinfoband (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\shoppingreport.hbinfoband.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\shoppingreport.iebutton (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\shoppingreport.iebutton.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\shoppingreport.iebuttona (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\shoppingreport.iebuttona.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\shoppingreport.rprtctrl (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\shoppingreport.rprtctrl.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{6e74766c-4d93-4cc0-96d1-47b8e07ff9ca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{8ad9ad05-36be-4e40-ba62-5422eb0d02fb} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{aebf09e2-0c15-43c8-99bf-928c645d98a0} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{cf54be1c-9359-4395-8533-1657cf209cfe} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{d8560ac2-21b5-4c1a-bdd4-bd12bc83b082} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{de38c398-b328-4f4c-a3ad-1b5e4ed93477} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25e} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25f} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{00a6faf6-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00a6faf6-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{bdad0436-97af-7ebc-ca26-94f57caa438d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{1e0de227-5ce4-4ea3-ab0c-8b03e1aa76bc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{84da4fdf-a1cf-4195-8688-3e961f505983} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a4730ebe-43a6-443e-9776-36915d323ad3} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{d9fffb27-d62a-4d64-8cec-1ff006528805} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{0d26bc71-a633-4e71-ad31-eadc3a1b6a3a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{4d1c4e81-a32a-416b-bcdb-33b3ef3617d3} (Adware.Need2Find) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{20ea9658-6bc3-4599-a87d-6371fe9295fc} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a16ad1e9-f69a-45af-9462-b1c286708842} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a7cddcdc-beeb-4685-a062-978f5e07ceee} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{c9ccbb35-d123-4a31-affc-9b2933132116} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{d518921a-4a03-425e-9873-b9a71756821e} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{f42228fb-e84e-479e-b922-fbbd096e792c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{cdca70d8-c6a6-49ee-9bed-7429d6c477a2} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{d136987f-e1c4-4ccc-a220-893df03ec5df} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{e343edfc-1e6c-4cb5-aa29-e9c922641c80} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{a7cddcdc-beeb-4685-a062-978f5e07ceee} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1a93c934-025b-4c3a-b38e-9654a7003239} (Adware.Gamesbar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6f282b65-56bf-4bd1-a8b2-a4449a05863d} (Adware.Gamesbar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{4d1c4e81-a32a-416b-bcdb-33b3ef3617d3} (Adware.Need2Find) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{54a3f8b7-228e-4ed8-895b-de832b2c3959} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{f919fbd3-a96b-4679-af26-f551439bb5fd} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{6f282b65-56bf-4bd1-a8b2-a4449a05863d} (Adware.Gamesbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59c7fc09-1c83-4648-b3e6-003d2bbc7481} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68af847f-6e91-45dd-9b68-d6a12c30e5d7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170b96c-28d4-4626-8358-27e6caeef907} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d1a71fa0-ff48-48dd-9b6d-7a13a3e42127} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ddb1968e-ead6-40fd-8dae-ff14757f60c7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f138d901-86f0-4383-99b6-9cdd406036da} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4d1c4e81-a32a-416b-bcdb-33b3ef3617d3} (Adware.Need2Find) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} (Adware.Shopper) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} (Adware.Shopper) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} (Adware.Shopper) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} (Adware.Shopper) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{d724f038-df89-4a1a-83d1-fd9164b78077} (Rogue.BulletProofSpyware) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{502f728b-67b8-409e-bceb-7ee8632f321a} (Rogue.BulletProofSpyware) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{d2cd81e5-cc37-44b3-93b7-c52cb993ba34} (Rogue.BulletProofSpyware) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{da295dae-fce7-4168-bcb8-edc3a433bd97} (Rogue.BulletProofSpyware) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{ed40af28-f03f-492a-9542-e24945cd65aa} (Rogue.BulletProofSpyware) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{e6bb8b70-8ad2-43b6-a952-83e462ce80de} (Rogue.BulletProofSpyware) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\shoppingreport (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\fcn (Rogue.Residue) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\OOO (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\ShoppingReport (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\FocusInteractive (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\OOO (Rogue.LivePlayer) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\ShoppingReport (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\acpi32 (SpamTool.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\glaide32 (Rootkit.Rustock) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\i386si (SpamTool.Agent) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\flsjahoe (Adware.Navipromo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{c5428486-50a0-4a02-9d20-520b59a9f9b2} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{c5428486-50a0-4a02-9d20-520b59a9f9b3} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{07aa283a-43d7-4cbe-a064-32a21112d94d} (Adware.Zango) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{00a6faf6-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} (Adware.Shopper) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{1d1b60fd-b21f-4b9a-8a5f-64e8544828d7} (Adware.Shopper) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Search\(default) (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\Sources\f3PopularScreensavers (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\My Web Search Bar Search Scope Monitor (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Plugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sysfbtray (Worm.KoobFace) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Documents and Settings\Compaq_Propriétaire\Application Data\ShoppingReport (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Documents and Settings\Compaq_Propriétaire\Application Data\ShoppingReport\cs (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Documents and Settings\Compaq_Propriétaire\Application Data\ShoppingReport\cs\db (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Documents and Settings\Compaq_Propriétaire\Application Data\ShoppingReport\cs\dwld (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Documents and Settings\Compaq_Propriétaire\Application Data\ShoppingReport\cs\report (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Documents and Settings\Compaq_Propriétaire\Application Data\ShoppingReport\cs\res2 (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\BulletProofSoft.com (Rogue.BulletProofSpyware) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\ScreenSaver (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\ScreenSaver\Images (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\Shared (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\Shared\Cache (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar\1.bin (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar\Avatar (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Game (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\History (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Settings (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\SrchAstt (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\SrchAstt\1.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\ShoppingReport (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\ShoppingReport\Bin (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\ShoppingReport\Bin\2.0.24 (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\ShoppingReport\cs (Adware.ShopperReports) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\flsjahoe_navps.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\flsjahoe_nav.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\flsjahoe.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\flsjahoe.exe (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3PLUGIN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3DTACTL.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3HISTSW.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3POPSWT.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3MSG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3HTML.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3OUTLCN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3SKIN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3SCRCTR.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3CJPEG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3HTTPCT.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\Mozilla Firefox\plugins\NPMyWebS.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3IMSTUB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3RESTUB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3SCHMON.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3HIGHIN.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3IDLE.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3IMPIPE.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3MEDINT.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3SKPLAY.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3SLSRCH.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\MWSSVC.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\NPMYWEBS.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\Secured_eMule\tbSec1.dll (Adware.Shopper) -> Quarantined and deleted successfully.
C:\Program Files\Internet Explorer\msimg32.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\bpssc1.1.dll (Rogue.BulletProofSpyware) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\f3PSSavr.scr (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Documents and Settings\Compaq_Propriétaire\Application Data\ShoppingReport\cs\Config.xml (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Documents and Settings\Compaq_Propriétaire\Application Data\ShoppingReport\cs\db\Aliases.dbs (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Documents and Settings\Compaq_Propriétaire\Application Data\ShoppingReport\cs\db\Sites.dbs (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Documents and Settings\Compaq_Propriétaire\Application Data\ShoppingReport\cs\dwld\WhiteList.xip (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Documents and Settings\Compaq_Propriétaire\Application Data\ShoppingReport\cs\report\aggr_storage.xml (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Documents and Settings\Compaq_Propriétaire\Application Data\ShoppingReport\cs\report\send_storage.xml (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Documents and Settings\Compaq_Propriétaire\Application Data\ShoppingReport\cs\res2\WhiteList.dbs (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\ScreenSaver\Images\0040CB86.urr (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\Shared\Cache\CursorManiaBtn.html (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\Shared\Cache\WebfettiBtn.html (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3BKGERR.JPG (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3SPACER.WMV (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3WALLPP.DAT (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\F3WPHOOK.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\FWPBUDDY.PNG (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.JAR (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3FFXTBR.MANIFEST (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.JAR (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\M3NTSTBR.MANIFEST (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\007A537D (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\007A5D60 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\007A5FF1.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\007A61E5.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\007A658E.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\007A7369.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\00F8EC2E.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\00F8EE70.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\files.ini (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\History\search3 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\CM.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\MFC.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\PSS.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\WB.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\ask_logo.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\autoup.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\autoup.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\center.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\index.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\mid_dots.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\mws_logo.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\protect.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\shocked.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\stop.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\systray.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\systrayp.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\tp_grad.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\warn.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Settings\prevcfg2.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Settings\setting2.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Settings\settings.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\ShoppingReport\Uninst.exe (Adware.ShopperReports) -> Quarantined and deleted successfully.
C:\Documents and Settings\Compaq_Propriétaire\Application Data\wiaserva.log (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ixnmxi_nav.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ixnmxi_navps.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\wpv391243627542.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Compaq_Propriétaire\oashdihasidhasuidhiasdhiashdiuasdhasd (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\zaponce52597.dat (Worm.Koobface) -> Quarantined and deleted successfully.
C:\WINDOWS\zaponce52689.dat (Worm.Koobface) -> Quarantined and deleted successfully.
C:\WINDOWS\bf23567.dat (Worm.KoobFace) -> Quarantined and deleted successfully.
 le rapport apres le scan de malwarebytes.

Utilisateur anonyme · Answer

Vide la quarantaine de Malwarebyte's !!

> Onglet quarantaine
> Supprimer tout.

Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau. 

! Déconnecte toi et FERME TOUTES TES APPLICATIONS EN COURS ! 

Double-clique sur " RSIT.exe " pour le lancer . 

&#9654 Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " . 

&#9654 Devant l'option "List files/folders created ..." , tu choisis : 2 months 

&#9654 clique ensuite sur " Continue " pour lancer l'analyse ... 


&#9654 laisse faire le scan et ne touche pas au PC ... 


Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note). 

Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ... 

Important : poste un rapport, puis l'autre dans la réponse suivante
Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum 


( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )

patracem · Answer

ogfile of random's system information tool 1.06 (written by random/random)
Run by Compaq_Propriétaire at 2009-12-02 16:52:57
Microsoft Windows XP Édition familiale Service Pack 3
System drive C: has 95 GB (64%) free of 148 GB
Total RAM: 511 MB (33% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:53:10, on 02/12/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Orange\Systray\SystrayApp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\keyhook.exe
C:\WINDOWS\system32
vsvc32.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Orange\Launcher\Launcher.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\pchbutton.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Orange\Deskboard\deskboard.exe
C:\Program Files\Orange\connectivity\connectivitymanager.exe
C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Compaq_Propriétaire.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-desktop.msn.com&ocid=HPDHP&pc=CPDTDF
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=presario&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.searcheo.fr/france
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60264
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60264
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FR_FR&c=Q404&bd=presario&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60264
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60264
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://support.norton.com/sp/fr/fr/home/current/solutions/v58540272?abproduct=LU&abversion=1.90&build=Symantec&ced=true&entsrc=CED_pubweb&error=1814&module=LU&src=_mi
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer fourni par Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {AEEC3B59-CA98-4EBA-A140-57B94E283583} - (no file)
R3 - URLSearchHook: (no name) - {814C76CB-2623-43F4-AAD0-58A0E5190A20} - (no file)
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\Plugins\RazaWebHook.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: (no name) - {DB35C569-5624-4CFC-8043-E5139F55A073} - C:\PROGRA~1\Crawler\Shared\CShared.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: barre d'outils Orange - {D3028143-6145-4318-99D3-3EDCE54A95A9} - C:\Program Files\Orange\ToolbarFR\ToolbarContainer101000315.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P26 "EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Compaq_Propriétaire] C:\Documents and Settings\Compaq_Propriétaire\Compaq_Propriétaire.exe /i
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\pchbutton.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: ajouter cette page à vos favoris Orange - C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\cce660.html
O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\Plugins\RazaWebHook.dll/3000
O8 - Extra context menu item: traduire la page - C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\cce65E.html
O8 - Extra context menu item: traduire le texte sélectionné - C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\cce65F.html
O9 - Extra button: Crawler Screensaver - {CDAFD956-97BE-443D-8EF7-F4F094EB5766} - C:\Program Files\Crawler\SSaver\CSSaver.exe
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\Orange\ToolbarFR\ToolbarContainer101000315.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: https://www.orange.fr/portail
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD5/JSCDL/jre/6u11-b90/jinstall-6u11-windows-i586-jc.cab?e=1232621260938&h=23adf2255bb2954a1a4d17d5efb6f691/&filename=jinstall-6u11-windows-i586-jc.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game01.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Filter hijack: text/html - (no CLSID) - (no file)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Update Service (gupdate1c9726b9996aa68) (gupdate1c9726b9996aa68) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: My Web Search Service (MyWebSearchService) - Unknown owner - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O24 - Desktop Component 0: (no name) - http://www.couriramorlaix.com/courir%20a%20morlaix/fichier_photo-videos/diaporamas/st-martin2007_15km/medium/0012.jpg
O24 - Desktop Component 1: (no name) - https://www.marmiton.org/App_Themes/Recettes/img/recettes/recette_titre.gif2

Utilisateur anonyme · Answer

&#9654 Télécharge Ad-remover ( de C_XX ) sur ton bureau : 


&#9654 Déconnecte toi et ferme toutes applications en cours ! 

&#9654 Double clique sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut . 

&#9654 Double-clique sur le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .
 
&#9654 Au menu principal choisis l'option "L" et tape sur [entrée] .

&#9654 Laisse travailler l'outil et ne touche à rien ... 

&#9654 Poste le rapport qui apparait à la fin , sur le forum ...

( Le rapport est sauvegardé aussi sous C:\Ad-report.log ) 
( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller ) 

&#9654 Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. 
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. 
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

patracem · Answer

ça ne marche pas ,j'ai double cliqué sur ad remover,j'ai eu 1 message voulez vous continuer ,j'ai mis "oui" ,mais là j'ai une page blanche  sans titre a l'ecran......

patracem · Answer

il me met quand je veux lancer ad remover que le fichier est introuvable

Utilisateur anonyme · Answer

Supprime le et réinstalle ...

patracem · Answer

rien a faire cela ne marche pas ,j'ai desinstaller  et reinstaller tjrs le meme probleme ,

patracem · Answer

QUE FAIRE????????

Utilisateur anonyme · Answer

Essaye en mode sans échec.

Comment aller en Mode sans échec :

&#9654 Redémarres ton ordi 
&#9654 Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip" 
&#9654 Tu verras un écran avec options de démarrage apparaître 
&#9654 Choisis la première option : Sans Échec, et valide avec "Entrée" 
&#9654 Choisis ton compte habituel, et non Administrateur (si besoin ... )
 
(attention : pas de connexion possible en mode sans échec , donc copies ou imprimes bien la manipe pour éviter les erreurs ...)

patracem · Answer

que faire apres avoir été en mode sans echec.moi j'ai redémarré puis j'ai reeessayer de faire marcher AD REMOVER ,pareil que hier ca ne marche pas ,il marque que le fichier specifique est introuvable.

Utilisateur anonyme · Answer

Possède tu un logiciel qui a une protection en temps réel ?

patracem · Answer

avast

Utilisateur anonyme · Answer

Désactive le et essaye.

patracem · Answer

je l'ai mis en pause m'est aucun effet tjrs pareil

Utilisateur anonyme · Answer

Desactive ton antivirus le temps de la manip ainsi que ton parefeu si présent

&#9654 Télécharge List&Kill'em et enregistre le sur ton bureau

&#9654 dezippe-le , (clic droit/ extraire.....)

Il ne necessite pas d'installation 

&#9654double clic (clic droit "executer en tant qu'administrateur" pour Vista) pour lancer le scan

choisis la langue puis choisis l'option 1 = Mode Recherche

&#9654laisse travailler l'outil

&#9654Poste le contenu du rapport qui s'ouvre

patracem · Answer

hklm/software/microsoft/windows/currentversion/run:adware.srv32

Utilisateur anonyme · Answer

Le rapport est incomplet.

patracem · Answer

je ne que cela qui s'affiche apres le scan

Utilisateur anonyme · Answer

Vérifie dans la source de ton DD (disque local C:\)

patracem · Answer

List'em by g3n-h@ckm@n 1.1.0.0 

Thx to Chiquitine29..... 

User : Compaq_Propriétaire () # RACHEL
Update on 02/12/2009 by g3n-h@ckm@n ::::: 23:00 
Start at: 15:41:55 | 03/12/2009
Contact : g3n-h@ckm@n sur CCM

AMD Sempron(tm)   3000+
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : avast! antivirus 4.8.1335 [VPS 091203-1] 4.8.1335 [ Enabled | Updated ]
FW : G DATA Personal Firewall[ (!) Disabled ]1.0

A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local | 144,64 Go (92,8 Go free) [PRESARIO] | NTFS
D:\ -> Disque fixe local | 4,4 Go (1,19 Go free) [PRESARIO_RP] | FAT32
E:\ -> Disque CD-ROM

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running 

C:\WINDOWS\System32\smss.exe 596
C:\WINDOWS\system32\csrss.exe 660
C:\WINDOWS\system32\winlogon.exe 684
C:\WINDOWS\system32\services.exe 732
C:\WINDOWS\system32\lsass.exe 744
C:\WINDOWS\system32\svchost.exe 904
C:\WINDOWS\system32\svchost.exe 984
C:\WINDOWS\System32\svchost.exe 1080
C:\WINDOWS\system32\svchost.exe 1140
C:\WINDOWS\system32\svchost.exe 1212
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe 1544
C:\WINDOWS\Explorer.EXE 1552
C:\Program Files\Alwil Software\Avast4\ashServ.exe 1600
C:\WINDOWS\system32\spoolsv.exe 1892
C:\WINDOWS\system32\svchost.exe 1956
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe 2016
C:\WINDOWS\system32\svchost.exe 300
C:\Program Files\Java\jre6\bin\jqs.exe 424
C:\WINDOWS\System32\svchost.exe 568
C:\WINDOWS\system32
vsvc32.exe 1020
C:\WINDOWS\System32\svchost.exe 1044
C:\WINDOWS\system32\svchost.exe 1204
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe 2648
C:\Program Files\Orange\Systray\SystrayApp.exe 2656
C:\Program Files\Java\jre6\bin\jusched.exe 2664
C:\WINDOWS\system32\keyhook.exe 2672
C:\HP\KBD\KBD.EXE 2740
C:\Program Files\iTunes\iTunesHelper.exe 2748
C:\windows\system\hpsysdrv.exe 2756
C:\WINDOWS\ALCXMNTR.EXE 2788
C:\WINDOWS\AGRSMMSG.exe 2796
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe 2808
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe 2880
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe 2896
C:\Program Files\Orange\Launcher\Launcher.exe 3080
C:\WINDOWS\system32\ctfmon.exe 3148
C:\Program Files\Shareaza\Shareaza.exe 3168
C:\Program Files\Messenger\msmsgs.exe 3180
C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\pchbutton.exe 3188
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe 3216
C:\WINDOWS\system32\wuauclt.exe 3328
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe 3596
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe 3828
C:\Program Files\iPod\bin\iPodService.exe 224
C:\WINDOWS\System32\alg.exe 1288
C:\WINDOWS\System32\svchost.exe 2488
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe 3312
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe 1688
C:\Program Files\Orange\Deskboard\deskboard.exe 3488
C:\Program Files\Orange\connectivity\connectivitymanager.exe 2456
C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe 316
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe 264
C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe 3896
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe 3908
C:\WINDOWS\system32\wbem\wmiprvse.exe 628
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Google\Chrome\Application\chrome.exe 2564
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Google\Chrome\Application\chrome.exe 3336
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Google\Chrome\Application\chrome.exe 1500
C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\List_Killem\List_Kill'em.exe 3068
C:\WINDOWS\system32\cmd.exe 2476
C:\WINDOWS\system32\wbem\wmiprvse.exe 1324
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Temp\665.tmp\pv.exe 2308

======================
Keys "Run" 
======================

! REG.EXE VERSION 3.0

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    ctfmon.exe	REG_SZ	C:\WINDOWS\system32\ctfmon.exe
    WOOKIT	REG_SZ	C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
    swg	REG_SZ	"C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
    Shareaza	REG_SZ	"C:\Program Files\Shareaza\Shareaza.exe" -tray
    msnmsgr	REG_SZ	"C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    MSMSGS	REG_SZ	"C:\Program Files\Messenger\msmsgs.exe" /background
    Compaq_Propriétaire	REG_SZ	C:\Documents and Settings\Compaq_Propriétaire\Compaq_Propriétaire.exe /i
    Acme.PCHButton	REG_SZ	C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\pchbutton.exe

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    avast!	REG_SZ	C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    VTTimer	REG_SZ	VTTimer.exe
    SystrayORAHSS	REG_SZ	"C:\Program Files\Orange\Systray\SystrayApp.exe"
    SunJavaUpdateSched	REG_SZ	"C:\Program Files\Java\jre6\bin\jusched.exe"
    SiS Windows KeyHook	REG_SZ	C:\WINDOWS\system32\keyhook.exe
    Recguard	REG_SZ	C:\WINDOWS\SMINST\RECGUARD.EXE
    PS2	REG_SZ	C:\WINDOWS\system32\ps2.exe
    ORAHSSSessionManager	REG_SZ	C:\Program Files\Orange\SessionManager\SessionManager.exe
    nwiz	REG_SZ	nwiz.exe /installquiet /keeploaded /nodetect
    NvCplDaemon	REG_SZ	RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    KBD	REG_SZ	C:\HP\KBD\KBD.EXE
    iTunesHelper	REG_SZ	"C:\Program Files\iTunes\iTunesHelper.exe"
    hpsysdrv	REG_SZ	c:\windows\system\hpsysdrv.exe
    EPSON Stylus DX4200 Series	REG_SZ	C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P26 "EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
    AlcxMonitor	REG_SZ	ALCXMNTR.EXE
    AGRSMMSG	REG_SZ	AGRSMMSG.exe
    Adobe Photo Downloader	REG_SZ	"C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
    HP Software Update	REG_SZ	C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    hpqSRMon	REG_SZ	C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
    Adobe Reader Speed Launcher	REG_SZ	"C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    Adobe ARM	REG_SZ	"C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
    Malwarebytes Anti-Malware (reboot)	REG_SZ	"C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents
=====================
Other Keys
=====================

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System
    dontdisplaylastusername	REG_DWORD	0x0
    legalnoticecaption	REG_SZ	
    legalnoticetext	REG_SZ	
    shutdownwithoutlogon	REG_DWORD	0x1
    undockwithoutlogon	REG_DWORD	0x1
=============== 

===============
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify	ermsrv 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon 
===============
BHO :
====== 

========
Services
========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services] 

Ndisuio : 0x3 
EapHost : 0x3 
SharedAccess : 0x2 
wuauserv : 0x2 
=========
 
=========================
Environnement variables :
=========================

ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\Compaq_Propri‚taire\Application Data
choix=1
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Fichiers communs
COMPUTERNAME=RACHEL
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\Compaq_Propri‚taire
LOGONSERVER=\RACHEL
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;c:\Python22;C:\Program Files\PC-Doctor for Windows\services
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 6 Model 10 Stepping 0, AuthenticAMD
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=0a00
ProgramFiles=C:\Program Files
PROMPT=$P$G
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp
TMP=C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp
USERDOMAIN=RACHEL
USERNAME=Compaq_Propri‚taire
USERPROFILE=C:\Documents and Settings\Compaq_Propri‚taire
windir=C:\WINDOWS


¤¤¤¤¤¤¤¤¤¤ Files/folders :

C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache  
C:\Program Files\Crawler  
C:\Program Files\GamesBar  
C:\Program Files\KaZaA  
C:\Program Files\Need2Find  
C:\WINDOWS\iun6002.exe  
C:\WINDOWS\System32\cagzht_navup.dat  
C:\WINDOWS\System32\ACTSKN43.ocx  
C:\WINDOWS\System32\drivers\etc\hosts.msn  
C:\WINDOWS\system32\drivers\Sonyhcp.dll  
C:\WINDOWS\system32\MSINET.oca  
C:\WINDOWS\system32\ps2.bat  
C:\WINDOWS\System32\SET182.tmp  
C:\WINDOWS\System32\SET187.tmp  
C:\WINDOWS\System32\SET18E.tmp  
C:\WINDOWS\System32\SET197.tmp  
C:\WINDOWS\System32\SET199.tmp  
C:\WINDOWS\System32\SET19C.tmp  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\hpzmsi01.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\hpzscr01.EXE  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\hpzswp01.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\installation.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\PxCpyA64.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\PxCpyI64.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\pxhpinst.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\PxInsA64.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\PxInsI64.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\pxsetup.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\setup_wm.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is1.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is2.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is22B.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is233.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is234.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is235.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is238.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is239.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is3.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is4.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is41A.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is41C.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is41D.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is41E.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is420.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is421.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is422.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is424.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is437.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is438.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is43B.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is459.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is45A.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is4AB.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is4AC.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is5.exe  
 
¤¤¤¤¤¤¤¤¤¤ Keys : 

HKU\S-1-5-21-1499807320-3828894901-3313630303-1007\Software\Microsoft\Windows\CurrentVersion\Run  "avgsys"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "3wPlayer Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "4 ROAD"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "63651021"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "a00f118337.exe"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "adobe_reader"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "acxzup"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "antihost"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "AV"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "ARMY SECT"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "backup windows 2009"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Bags regs"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "BitDownload Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "BitGrabber Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "BitRoll Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "book ante"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "bwebu"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "calc"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "COPY DEBUG"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "DivoPlayer Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "GalaPlayer"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Get-Torrent Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "GreatLog"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Internet Today Task"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "mobiswing"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "mset"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "NT Printing Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "ocqcqii"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "OkayLicense"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "outil système"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "part mags"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Peak Meal"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "photo_id"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Salestart"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "secure32"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "secure64"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "sizedrv"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "style cool 2 city"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "system tool"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "That dent five else"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Tok-Cirrhatus"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "tok-cirrhatus-2289"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Torrent101 Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "TorrentQ Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "TorrentSoftware Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "VideoBarApp"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "vmmonitor"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WhenUSave"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Upgrate Utility"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "winusr"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WinZix Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Yjafosi8kdf98winmdkmnkmfnwe"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "®Update"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run ".NET Application Debugger 32"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run ".nvsvc"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run ".nvsvcb"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "_mzu_stonedrv2"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "_mzu_stonedrv4"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "_mzu_stonedrv5"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "_mzu_stonedrv6"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "_mzu_stonedrv7"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "_Windows"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "0mcamcap"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "12CFG214-K641-11SF-N33P"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "12CFG214-K641-12SF-N85P"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "2chkdsk"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "3cfe250a"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "64 inter flaw hold"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Acrobat Read"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "ActiveScan Antivirus"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "adir"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "adobe_reader"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "AdobeReaderPro"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Ads checker"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Advanced DHTML Enable"

Utilisateur anonyme · Answer

&#9654 Relance List&Kill'em comme tu as fait pour l'option 1 (soit en clic droit pour vista),

mais cette fois-ci :

&#9654 choisis l'option 2 = Mode Destruction

laisse travailler l'outil.

en fin de scan un rapport s'ouvre , ferme-le puis redemarre

&#9654 colle le contenu dans ta reponse

patracem · Answer

voisi le compte rendu
List'em by g3n-h@ckm@n 1.1.0.0 

Thx to Chiquitine29..... 

User : Compaq_Propriétaire () # RACHEL
Update on 02/12/2009 by g3n-h@ckm@n ::::: 23:00 
Start at: 15:41:55 | 03/12/2009
Contact : g3n-h@ckm@n sur CCM

AMD Sempron(tm)   3000+
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : avast! antivirus 4.8.1335 [VPS 091203-1] 4.8.1335 [ Enabled | Updated ]
FW : G DATA Personal Firewall[ (!) Disabled ]1.0

A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local | 144,64 Go (92,8 Go free) [PRESARIO] | NTFS
D:\ -> Disque fixe local | 4,4 Go (1,19 Go free) [PRESARIO_RP] | FAT32
E:\ -> Disque CD-ROM

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running 

C:\WINDOWS\System32\smss.exe 596
C:\WINDOWS\system32\csrss.exe 660
C:\WINDOWS\system32\winlogon.exe 684
C:\WINDOWS\system32\services.exe 732
C:\WINDOWS\system32\lsass.exe 744
C:\WINDOWS\system32\svchost.exe 904
C:\WINDOWS\system32\svchost.exe 984
C:\WINDOWS\System32\svchost.exe 1080
C:\WINDOWS\system32\svchost.exe 1140
C:\WINDOWS\system32\svchost.exe 1212
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe 1544
C:\WINDOWS\Explorer.EXE 1552
C:\Program Files\Alwil Software\Avast4\ashServ.exe 1600
C:\WINDOWS\system32\spoolsv.exe 1892
C:\WINDOWS\system32\svchost.exe 1956
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe 2016
C:\WINDOWS\system32\svchost.exe 300
C:\Program Files\Java\jre6\bin\jqs.exe 424
C:\WINDOWS\System32\svchost.exe 568
C:\WINDOWS\system32
vsvc32.exe 1020
C:\WINDOWS\System32\svchost.exe 1044
C:\WINDOWS\system32\svchost.exe 1204
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe 2648
C:\Program Files\Orange\Systray\SystrayApp.exe 2656
C:\Program Files\Java\jre6\bin\jusched.exe 2664
C:\WINDOWS\system32\keyhook.exe 2672
C:\HP\KBD\KBD.EXE 2740
C:\Program Files\iTunes\iTunesHelper.exe 2748
C:\windows\system\hpsysdrv.exe 2756
C:\WINDOWS\ALCXMNTR.EXE 2788
C:\WINDOWS\AGRSMMSG.exe 2796
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe 2808
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe 2880
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe 2896
C:\Program Files\Orange\Launcher\Launcher.exe 3080
C:\WINDOWS\system32\ctfmon.exe 3148
C:\Program Files\Shareaza\Shareaza.exe 3168
C:\Program Files\Messenger\msmsgs.exe 3180
C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\pchbutton.exe 3188
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe 3216
C:\WINDOWS\system32\wuauclt.exe 3328
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe 3596
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe 3828
C:\Program Files\iPod\bin\iPodService.exe 224
C:\WINDOWS\System32\alg.exe 1288
C:\WINDOWS\System32\svchost.exe 2488
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe 3312
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe 1688
C:\Program Files\Orange\Deskboard\deskboard.exe 3488
C:\Program Files\Orange\connectivity\connectivitymanager.exe 2456
C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe 316
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe 264
C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe 3896
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe 3908
C:\WINDOWS\system32\wbem\wmiprvse.exe 628
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Google\Chrome\Application\chrome.exe 2564
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Google\Chrome\Application\chrome.exe 3336
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Google\Chrome\Application\chrome.exe 1500
C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\List_Killem\List_Kill'em.exe 3068
C:\WINDOWS\system32\cmd.exe 2476
C:\WINDOWS\system32\wbem\wmiprvse.exe 1324
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Temp\665.tmp\pv.exe 2308

======================
Keys "Run" 
======================

! REG.EXE VERSION 3.0

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    ctfmon.exe	REG_SZ	C:\WINDOWS\system32\ctfmon.exe
    WOOKIT	REG_SZ	C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
    swg	REG_SZ	"C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
    Shareaza	REG_SZ	"C:\Program Files\Shareaza\Shareaza.exe" -tray
    msnmsgr	REG_SZ	"C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    MSMSGS	REG_SZ	"C:\Program Files\Messenger\msmsgs.exe" /background
    Compaq_Propriétaire	REG_SZ	C:\Documents and Settings\Compaq_Propriétaire\Compaq_Propriétaire.exe /i
    Acme.PCHButton	REG_SZ	C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\pchbutton.exe

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    avast!	REG_SZ	C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    VTTimer	REG_SZ	VTTimer.exe
    SystrayORAHSS	REG_SZ	"C:\Program Files\Orange\Systray\SystrayApp.exe"
    SunJavaUpdateSched	REG_SZ	"C:\Program Files\Java\jre6\bin\jusched.exe"
    SiS Windows KeyHook	REG_SZ	C:\WINDOWS\system32\keyhook.exe
    Recguard	REG_SZ	C:\WINDOWS\SMINST\RECGUARD.EXE
    PS2	REG_SZ	C:\WINDOWS\system32\ps2.exe
    ORAHSSSessionManager	REG_SZ	C:\Program Files\Orange\SessionManager\SessionManager.exe
    nwiz	REG_SZ	nwiz.exe /installquiet /keeploaded /nodetect
    NvCplDaemon	REG_SZ	RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    KBD	REG_SZ	C:\HP\KBD\KBD.EXE
    iTunesHelper	REG_SZ	"C:\Program Files\iTunes\iTunesHelper.exe"
    hpsysdrv	REG_SZ	c:\windows\system\hpsysdrv.exe
    EPSON Stylus DX4200 Series	REG_SZ	C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P26 "EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
    AlcxMonitor	REG_SZ	ALCXMNTR.EXE
    AGRSMMSG	REG_SZ	AGRSMMSG.exe
    Adobe Photo Downloader	REG_SZ	"C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
    HP Software Update	REG_SZ	C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    hpqSRMon	REG_SZ	C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
    Adobe Reader Speed Launcher	REG_SZ	"C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    Adobe ARM	REG_SZ	"C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
    Malwarebytes Anti-Malware (reboot)	REG_SZ	"C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents
=====================
Other Keys
=====================

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System
    dontdisplaylastusername	REG_DWORD	0x0
    legalnoticecaption	REG_SZ	
    legalnoticetext	REG_SZ	
    shutdownwithoutlogon	REG_DWORD	0x1
    undockwithoutlogon	REG_DWORD	0x1
=============== 

===============
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify	ermsrv 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon 
===============
BHO :
====== 

========
Services
========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services] 

Ndisuio : 0x3 
EapHost : 0x3 
SharedAccess : 0x2 
wuauserv : 0x2 
=========
 
=========================
Environnement variables :
=========================

ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\Compaq_Propri‚taire\Application Data
choix=1
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Fichiers communs
COMPUTERNAME=RACHEL
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\Compaq_Propri‚taire
LOGONSERVER=\RACHEL
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;c:\Python22;C:\Program Files\PC-Doctor for Windows\services
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 6 Model 10 Stepping 0, AuthenticAMD
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=0a00
ProgramFiles=C:\Program Files
PROMPT=$P$G
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp
TMP=C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp
USERDOMAIN=RACHEL
USERNAME=Compaq_Propri‚taire
USERPROFILE=C:\Documents and Settings\Compaq_Propri‚taire
windir=C:\WINDOWS


¤¤¤¤¤¤¤¤¤¤ Files/folders :

C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache  
C:\Program Files\Crawler  
C:\Program Files\GamesBar  
C:\Program Files\KaZaA  
C:\Program Files\Need2Find  
C:\WINDOWS\iun6002.exe  
C:\WINDOWS\System32\cagzht_navup.dat  
C:\WINDOWS\System32\ACTSKN43.ocx  
C:\WINDOWS\System32\drivers\etc\hosts.msn  
C:\WINDOWS\system32\drivers\Sonyhcp.dll  
C:\WINDOWS\system32\MSINET.oca  
C:\WINDOWS\system32\ps2.bat  
C:\WINDOWS\System32\SET182.tmp  
C:\WINDOWS\System32\SET187.tmp  
C:\WINDOWS\System32\SET18E.tmp  
C:\WINDOWS\System32\SET197.tmp  
C:\WINDOWS\System32\SET199.tmp  
C:\WINDOWS\System32\SET19C.tmp  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\hpzmsi01.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\hpzscr01.EXE  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\hpzswp01.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\installation.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\PxCpyA64.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\PxCpyI64.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\pxhpinst.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\PxInsA64.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\PxInsI64.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\pxsetup.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\setup_wm.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is1.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is2.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is22B.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is233.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is234.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is235.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is238.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is239.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is3.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is4.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is41A.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is41C.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is41D.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is41E.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is420.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is421.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is422.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is424.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is437.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is438.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is43B.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is459.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is45A.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is4AB.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is4AC.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is5.exe  
 
¤¤¤¤¤¤¤¤¤¤ Keys : 

HKU\S-1-5-21-1499807320-3828894901-3313630303-1007\Software\Microsoft\Windows\CurrentVersion\Run  "avgsys"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "3wPlayer Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "4 ROAD"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "63651021"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "a00f118337.exe"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "adobe_reader"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "acxzup"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "antihost"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "AV"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "ARMY SECT"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "backup windows 2009"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Bags regs"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "BitDownload Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "BitGrabber Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "BitRoll Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "book ante"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "bwebu"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "calc"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "COPY DEBUG"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "DivoPlayer Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "GalaPlayer"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Get-Torrent Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "GreatLog"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Internet Today Task"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "mobiswing"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "mset"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "NT Printing Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "ocqcqii"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "OkayLicense"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "outil système"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "part mags"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Peak Meal"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "photo_id"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Salestart"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "secure32"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "secure64"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "sizedrv"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "style cool 2 city"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "system tool"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "That dent five else"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Tok-Cirrhatus"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "tok-cirrhatus-2289"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Torrent101 Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "TorrentQ Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "TorrentSoftware Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "VideoBarApp"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "vmmonitor"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WhenUSave"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Upgrate Utility"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "winusr"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WinZix Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Yjafosi8kdf98winmdkmnkmfnwe"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "®Update"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run ".NET Application Debugger 32"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run ".nvsvc"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run ".nvsvcb"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "_mzu_stonedrv2"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "_mzu_stonedrv4"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "_mzu_stonedrv5"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "_mzu_stonedrv6"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "_mzu_stonedrv7"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "_Windows"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "0mcamcap"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "12CFG214-K641-11SF-N33P"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "12CFG214-K641-12SF-N85P"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "2chkdsk"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "3cfe250a"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "64 inter flaw hold"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Acrobat Read"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "ActiveScan Antivirus"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "adir"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "adobe_reader"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "AdobeReaderPro"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Ads checker"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Advanced DHTML Enable"

Utilisateur anonyme · Answer

Tu peux me refaire un RSIT ?

patracem · Answer

quoi c'est quoi un rsit

Utilisateur anonyme · Answer

Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau. 

! Déconnecte toi et FERME TOUTES TES APPLICATIONS EN COURS ! 

Double-clique sur " RSIT.exe " pour le lancer . 

&#9654 Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " . 

&#9654 Devant l'option "List files/folders created ..." , tu choisis : 2 months 

&#9654 clique ensuite sur " Continue " pour lancer l'analyse ... 


&#9654 laisse faire le scan et ne touche pas au PC ... 


Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note). 

Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ... 

Important : poste un rapport, puis l'autre dans la réponse suivante
Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum 


( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )

patracem · Answer

List'em by g3n-h@ckm@n 1.1.0.0 

Thx to Chiquitine29..... 

User : Compaq_Propriétaire () # RACHEL
Update on 02/12/2009 by g3n-h@ckm@n ::::: 23:00 
Start at: 15:41:55 | 03/12/2009
Contact : g3n-h@ckm@n sur CCM

AMD Sempron(tm)   3000+
Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : avast! antivirus 4.8.1335 [VPS 091203-1] 4.8.1335 [ Enabled | Updated ]
FW : G DATA Personal Firewall[ (!) Disabled ]1.0

A:\ -> Lecteur de disquettes 3 ½ pouces
C:\ -> Disque fixe local | 144,64 Go (92,8 Go free) [PRESARIO] | NTFS
D:\ -> Disque fixe local | 4,4 Go (1,19 Go free) [PRESARIO_RP] | FAT32
E:\ -> Disque CD-ROM

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running 

C:\WINDOWS\System32\smss.exe 596
C:\WINDOWS\system32\csrss.exe 660
C:\WINDOWS\system32\winlogon.exe 684
C:\WINDOWS\system32\services.exe 732
C:\WINDOWS\system32\lsass.exe 744
C:\WINDOWS\system32\svchost.exe 904
C:\WINDOWS\system32\svchost.exe 984
C:\WINDOWS\System32\svchost.exe 1080
C:\WINDOWS\system32\svchost.exe 1140
C:\WINDOWS\system32\svchost.exe 1212
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe 1544
C:\WINDOWS\Explorer.EXE 1552
C:\Program Files\Alwil Software\Avast4\ashServ.exe 1600
C:\WINDOWS\system32\spoolsv.exe 1892
C:\WINDOWS\system32\svchost.exe 1956
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe 2016
C:\WINDOWS\system32\svchost.exe 300
C:\Program Files\Java\jre6\bin\jqs.exe 424
C:\WINDOWS\System32\svchost.exe 568
C:\WINDOWS\system32
vsvc32.exe 1020
C:\WINDOWS\System32\svchost.exe 1044
C:\WINDOWS\system32\svchost.exe 1204
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe 2648
C:\Program Files\Orange\Systray\SystrayApp.exe 2656
C:\Program Files\Java\jre6\bin\jusched.exe 2664
C:\WINDOWS\system32\keyhook.exe 2672
C:\HP\KBD\KBD.EXE 2740
C:\Program Files\iTunes\iTunesHelper.exe 2748
C:\windows\system\hpsysdrv.exe 2756
C:\WINDOWS\ALCXMNTR.EXE 2788
C:\WINDOWS\AGRSMMSG.exe 2796
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe 2808
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe 2880
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe 2896
C:\Program Files\Orange\Launcher\Launcher.exe 3080
C:\WINDOWS\system32\ctfmon.exe 3148
C:\Program Files\Shareaza\Shareaza.exe 3168
C:\Program Files\Messenger\msmsgs.exe 3180
C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\pchbutton.exe 3188
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe 3216
C:\WINDOWS\system32\wuauclt.exe 3328
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe 3596
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe 3828
C:\Program Files\iPod\bin\iPodService.exe 224
C:\WINDOWS\System32\alg.exe 1288
C:\WINDOWS\System32\svchost.exe 2488
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe 3312
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe 1688
C:\Program Files\Orange\Deskboard\deskboard.exe 3488
C:\Program Files\Orange\connectivity\connectivitymanager.exe 2456
C:\Program Files\Orange\connectivity\CoreCom\CoreCom.exe 316
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe 264
C:\Program Files\Orange\connectivity\CoreCom\OraConfigRecover.exe 3896
C:\PROGRA~1\FICHIE~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe 3908
C:\WINDOWS\system32\wbem\wmiprvse.exe 628
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Google\Chrome\Application\chrome.exe 2564
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Google\Chrome\Application\chrome.exe 3336
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Application Data\Google\Chrome\Application\chrome.exe 1500
C:\Documents and Settings\Compaq_Propriétaire\Mes documents\Downloads\List_Killem\List_Kill'em.exe 3068
C:\WINDOWS\system32\cmd.exe 2476
C:\WINDOWS\system32\wbem\wmiprvse.exe 1324
C:\Documents and Settings\Compaq_Propriétaire\Local Settings\Temp\665.tmp\pv.exe 2308

======================
Keys "Run" 
======================

! REG.EXE VERSION 3.0

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    ctfmon.exe	REG_SZ	C:\WINDOWS\system32\ctfmon.exe
    WOOKIT	REG_SZ	C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM=
    swg	REG_SZ	"C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
    Shareaza	REG_SZ	"C:\Program Files\Shareaza\Shareaza.exe" -tray
    msnmsgr	REG_SZ	"C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    MSMSGS	REG_SZ	"C:\Program Files\Messenger\msmsgs.exe" /background
    Compaq_Propriétaire	REG_SZ	C:\Documents and Settings\Compaq_Propriétaire\Compaq_Propriétaire.exe /i
    Acme.PCHButton	REG_SZ	C:\PROGRA~1\HELPAN~1\Presario\XPHWWRF4\plugin\bin\pchbutton.exe

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    avast!	REG_SZ	C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    VTTimer	REG_SZ	VTTimer.exe
    SystrayORAHSS	REG_SZ	"C:\Program Files\Orange\Systray\SystrayApp.exe"
    SunJavaUpdateSched	REG_SZ	"C:\Program Files\Java\jre6\bin\jusched.exe"
    SiS Windows KeyHook	REG_SZ	C:\WINDOWS\system32\keyhook.exe
    Recguard	REG_SZ	C:\WINDOWS\SMINST\RECGUARD.EXE
    PS2	REG_SZ	C:\WINDOWS\system32\ps2.exe
    ORAHSSSessionManager	REG_SZ	C:\Program Files\Orange\SessionManager\SessionManager.exe
    nwiz	REG_SZ	nwiz.exe /installquiet /keeploaded /nodetect
    NvCplDaemon	REG_SZ	RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    KBD	REG_SZ	C:\HP\KBD\KBD.EXE
    iTunesHelper	REG_SZ	"C:\Program Files\iTunes\iTunesHelper.exe"
    hpsysdrv	REG_SZ	c:\windows\system\hpsysdrv.exe
    EPSON Stylus DX4200 Series	REG_SZ	C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P26 "EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
    AlcxMonitor	REG_SZ	ALCXMNTR.EXE
    AGRSMMSG	REG_SZ	AGRSMMSG.exe
    Adobe Photo Downloader	REG_SZ	"C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
    HP Software Update	REG_SZ	C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    hpqSRMon	REG_SZ	C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
    Adobe Reader Speed Launcher	REG_SZ	"C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    Adobe ARM	REG_SZ	"C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
    Malwarebytes Anti-Malware (reboot)	REG_SZ	"C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\OptionalComponents
=====================
Other Keys
=====================

! REG.EXE VERSION 3.0

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System
    dontdisplaylastusername	REG_DWORD	0x0
    legalnoticecaption	REG_SZ	
    legalnoticetext	REG_SZ	
    shutdownwithoutlogon	REG_DWORD	0x1
    undockwithoutlogon	REG_DWORD	0x1
=============== 

===============
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify	ermsrv 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon 
===============
BHO :
====== 

========
Services
========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services] 

Ndisuio : 0x3 
EapHost : 0x3 
SharedAccess : 0x2 
wuauserv : 0x2 
=========
 
=========================
Environnement variables :
=========================

ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\Compaq_Propri‚taire\Application Data
choix=1
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Fichiers communs
COMPUTERNAME=RACHEL
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\Compaq_Propri‚taire
LOGONSERVER=\RACHEL
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;c:\Python22;C:\Program Files\PC-Doctor for Windows\services
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 6 Model 10 Stepping 0, AuthenticAMD
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=0a00
ProgramFiles=C:\Program Files
PROMPT=$P$G
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp
TMP=C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp
USERDOMAIN=RACHEL
USERNAME=Compaq_Propri‚taire
USERPROFILE=C:\Documents and Settings\Compaq_Propri‚taire
windir=C:\WINDOWS


¤¤¤¤¤¤¤¤¤¤ Files/folders :

C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache  
C:\Program Files\Crawler  
C:\Program Files\GamesBar  
C:\Program Files\KaZaA  
C:\Program Files\Need2Find  
C:\WINDOWS\iun6002.exe  
C:\WINDOWS\System32\cagzht_navup.dat  
C:\WINDOWS\System32\ACTSKN43.ocx  
C:\WINDOWS\System32\drivers\etc\hosts.msn  
C:\WINDOWS\system32\drivers\Sonyhcp.dll  
C:\WINDOWS\system32\MSINET.oca  
C:\WINDOWS\system32\ps2.bat  
C:\WINDOWS\System32\SET182.tmp  
C:\WINDOWS\System32\SET187.tmp  
C:\WINDOWS\System32\SET18E.tmp  
C:\WINDOWS\System32\SET197.tmp  
C:\WINDOWS\System32\SET199.tmp  
C:\WINDOWS\System32\SET19C.tmp  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\hpzmsi01.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\hpzscr01.EXE  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\hpzswp01.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\installation.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\PxCpyA64.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\PxCpyI64.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\pxhpinst.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\PxInsA64.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\PxInsI64.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\pxsetup.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\setup_wm.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is1.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is2.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is22B.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is233.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is234.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is235.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is238.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is239.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is3.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is4.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is41A.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is41C.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is41D.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is41E.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is420.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is421.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is422.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is424.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is437.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is438.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is43B.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is459.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is45A.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is4AB.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is4AC.exe  
C:\Documents and Settings\Compaq_Propri‚taire\LOCAL Settings\Temp\_is5.exe  
 
¤¤¤¤¤¤¤¤¤¤ Keys : 

HKU\S-1-5-21-1499807320-3828894901-3313630303-1007\Software\Microsoft\Windows\CurrentVersion\Run  "avgsys"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "3wPlayer Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "4 ROAD"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "63651021"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "a00f118337.exe"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "adobe_reader"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "acxzup"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "antihost"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "AV"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "ARMY SECT"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "backup windows 2009"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Bags regs"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "BitDownload Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "BitGrabber Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "BitRoll Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "book ante"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "bwebu"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "calc"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "COPY DEBUG"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "DivoPlayer Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "GalaPlayer"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Get-Torrent Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "GreatLog"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Internet Today Task"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "mobiswing"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "mset"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "NT Printing Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "ocqcqii"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "OkayLicense"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "outil système"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "part mags"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Peak Meal"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "photo_id"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Salestart"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "secure32"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "secure64"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "sizedrv"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "style cool 2 city"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "system tool"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "That dent five else"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Tok-Cirrhatus"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "tok-cirrhatus-2289"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Torrent101 Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "TorrentQ Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "TorrentSoftware Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "VideoBarApp"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "vmmonitor"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WhenUSave"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Upgrate Utility"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "winusr"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "WinZix Service"  
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Yjafosi8kdf98winmdkmnkmfnwe"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "®Update"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run ".NET Application Debugger 32"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run ".nvsvc"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run ".nvsvcb"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "_mzu_stonedrv2"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "_mzu_stonedrv4"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "_mzu_stonedrv5"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "_mzu_stonedrv6"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "_mzu_stonedrv7"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "_Windows"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "0mcamcap"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "12CFG214-K641-11SF-N33P"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "12CFG214-K641-12SF-N85P"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "2chkdsk"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "3cfe250a"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "64 inter flaw hold"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Acrobat Read"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "ActiveScan Antivirus"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "adir"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "adobe_reader"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "AdobeReaderPro"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Ads checker"  
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Advanced DHTML Enable"

Utilisateur anonyme · Answer

Arrête de faire n'importe quoi : https://forums.commentcamarche.net/forum/affich-15441121-pc-lent-rapport?page=2#27

patracem · Answer

je n'ai  que cela apres le scan

Utilisateur anonyme · Answer

Mais j'ai dit RSIT  pas Listkill'em !

https://forums.commentcamarche.net/forum/affich-15441121-pc-lent-rapport?page=2#27

Utilisateur anonyme · Answer

&#9654 Télécharge TOOLBAR S&D ( de Eric_71/Team IDN ) sur ton bureau : 


!! Déconnecte toi,desactive tes protections résidentes, et ferme toutes tes applications en cours le temps de la manip. !! 

&#9654 Double-clique sur ToolBar SD.exe pour lancer l'outil et laisse toi guider ...
 
&#9654 option recherche puis [Entrée].  

Un rapport sera généré à la fin du processus : poste son contenu dans ta prochaine réponse 

( le rapport est en outre sauvegardé ici -> C:\TB.txt ) 

Tutoriel 


====================

&#9654 Télécharge et install UsbFix par Chiquitine29

 (!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectées sans les ouvrir

&#9654 Double clic sur le raccourci UsbFix présent sur ton bureau .

&#9654 Au menu principal choisis l'option " F " pour français et tape sur [entrée] . 

&#9654 Au second menu Choisis l'option " 1 " (recherche) et tape sur [entrée] 

&#9654 Laisse travailler l'outil.

&#9654 Ensuite post le rapport UsbFix.txt qui apparaitra.

Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )

( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller ) 

 Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool. 
          Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus. 
          Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

Utilisateur anonyme · Answer

<<< Pour installer Toolbar S&D clique ici >>>

patracem · Answer

voila ce qui me marque quand je double clique sur toolbar
"The bandwidth or page view limit for this site has been exceeded and the page cannot be viewed at this time. Once the site is below the limit, it will once again begin serving as normal."

Utilisateur anonyme · Answer

Le téléchargement s'effectue ?

patracem · Answer

non, rien du tout ,iln'y a que le message fixe

Utilisateur anonyme · Answer

Dur de désinfecter sans les outils ...

L'outil ne veut pas se télécharger ou il ne veut pas s'exécuter ?

Supprime le et recommence

Utilisateur anonyme · Answer

C:\Program Files\GamesBar 
S2 MyWebSearchService;My Web Search Service; C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe [] 
O23 - Service: My Web Search Service (MyWebSearchService) - Unknown owner - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe (file missing)

il reste ceci

Utilisateur anonyme · Answer

Aucun outil de désinfection marche chez toi ...

Utilisateur anonyme · Answer

&#9654 Télécharge : Gmer (by Przemyslaw Gmerek)


&#9654 Dezippe gmer ,cliques sur l'onglet rootkit,lances le scan,des lignes rouges vont apparaitre.

&#9654 Les lignes rouges indiquent la presence d'un rootkit.Postes moi le rapport gmer (cliques sur copy,puis vas dans demarrer ,puis ouvres le bloc note,vas dans edition et cliques sur coller,le rapport gmer va apparaitre,postes moi le)

Ensuite

&#9654 sur les lignes rouge:

&#9654 Services:cliques droit delete service
&#9654 Process:cliques droit kill process
&#9654 Adl ,file:cliques droit delete files

Utilisateur anonyme · Answer

patracem, as tu vu des lignes rouges ?

patracem · Answer

c'est en cours pas encore de ligne rouge

Utilisateur anonyme · Answer

T'est sure ya pas de lignes rouge ?

Utilisateur anonyme · Answer

Refait moi un RSIT stp

Utilisateur anonyme · Answer

Tu est infecté par Crawler Toolbar mais ToolbarS&D ne fonctionne pas.

Utilisateur anonyme · Answer

Attend je te prépare la suite ...

Utilisateur anonyme · Answer

J'ai fait une demande de script faudra attendre un tout petit peu :-)

++

Pc lent +rapport

47 réponses

Votre réponse

Newsletters