Analyser un rapport, suis un béotien

zerguevitch -  
flo-91 Messages postés 5973 Statut Contributeur sécurité -
Bonjour,
à tous, aux confirmés et aux autres
j'ai un rapport AD REMOVER
puis je le faire analyser et mme faire conseiller sur ce que je dois faire

merci d'être très directif

papy du bassin d'arcachon
Configuration: Windows XP
Firefox 3.5.6

12 réponses

  1.
    flo-91 Messages postés 5973 Statut Contributeur sécurité 1 120
     
    BOnjour,

    Poste-nous donc ce rapport.
    0
  2. stickbx Messages postés 6 Statut Membre
     
    merci pour cette réponse rapide
    je vous laisse le soin d'analyser le dit rapport
    encore merci pour la réponse dont je ne doute le bien fondé

    ======= LOGFILE OF AD-REMOVER 1.1.4.5_O | ONLY XP/VISTA/SEVEN =======
    .
    Updated by C_XX on 24/06/2009 at 7:10 PM
    Contact: AdRemover.contact@gmail.com
    Website: http://pagesperso-orange.fr/NosTools/ad_remover.html
    .
    Launch at: 12:13:06, 19/12/2009 | Normal Boot | Option: SCAN
    Executed from: C:\Program Files\Ad-remover\
    Operating system: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
    Computer Name: NATIONAL-FIX | Current user: serge mot‚
    .
    Administrator: Administrateur
    Not administrator: HelpAssistant *Disabled*
    Not administrator: Invité *Disabled*
    Administrator: serge moté
    Not administrator: SUPPORT_388945a0 *Disabled*
    .
    ============== FOUND ELEMENT(S) ==============
    .
    .
    HKCR\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}
    HKCR\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}
    HKCU\Software\EoRezo
    HKLM\Software\Classes\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}
    HKU\S-1-5-21-329068152-73586283-682003330-1004\Software\Eorezo
    HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{C94E154B-1459-4A47-966B-4B843BEFC7DB}
    HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
    HKCR\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
    HKLM\Software\Classes\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
    HKCR\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
    HKLM\Software\Classes\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
    .
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
    C:\Program Files\AskBarDis
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\searchplugins\ask.xml
    C:\Documents and Settings\serge mot‚\Bureau\tout eorezo
    C:\DOCUME~1\SERGEM~1\LOCALS~1\Temp\nsk46.tmp
    C:\DOCUME~1\SERGEM~1\Bureau\tout eorezo
    .
    ============== Added scan ==============
    .

    * Mozilla FireFox Version 3.5.6 *

    ProfilePath: yje2sqi2.default (serge mot‚)
    .
    (Prefs.js) user_pref("browser.search.defaultenginename", "Winamp Search");
    (Prefs.js) user_pref("browser.search.selectedEngine", "DAEMON Search");
    (Prefs.js) user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT530097&SearchSource=3&q={searchTerms}");
    (Prefs.js) user_pref("browser.startup.homepage", "hxxp://www.daemon-search.com/startpage|hxxp://webmail22.orange.fr/webmail/fr_FR/inbox.html?w=0&FromSubmit=true&dub=1");
    (Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.1.6");
    .
    .

    * Internet Explorer Version 7.0.5730.13 *

    [HKEY_CURRENT_USER\..\Internet Explorer\Main]

    Default_Search_URL: hxxp://www.google.com/ie
    Search bar: hxxp://www.google.com/ie
    Search Page: hxxp://www.google.com
    Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157

    [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

    Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
    Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157

    [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

    Tabs: res://ieframe.dll/tabswelcome.htm

    ============== Suspect (Cracks, Serials ... ) ==============

    .
    .
    ===================================
    .
    3400 Byte(s) - C:\Ad-Report-SCAN.log
    .
    118 File(s) - C:\DOCUME~1\SERGEM~1\LOCALS~1\Temp
    7 File(s) - C:\WINDOWS\Temp
    .
    0 File(s) - C:\Program Files\Ad-remover\BACKUP
    0 File(s) - C:\Program Files\Ad-remover\QUARANTINE
    .
    End at: 13:03:47 | 19/12/2009
    .
    ============== E.O.F ==============
    .
    0
  3. flo-91 Messages postés 5973 Statut Contributeur sécurité 1 120
     
    Ok, :

    1->Relance Ad-Remover :

    Pour les ordinateurs équipés de Windows Vista et Windows 7, la désactivation du Contrôle des comptes utilisateurs est obligatoire
    sous peine de ne pas pouvoir faire fonctionner correctement l'outil.
    Tuto : https://www.commentcamarche.net/faq/8343-vista-desactiver-l-uac

    >Ad-Remover<

    >Désactive ton antivirus le temps de la manip
    >Déconnecte-toi d'Internet et ferme toutes applications en cours
    >Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program Files).
    >Au menu principal, choisis l'option L ( Nettoyage )
    >Poste le rapport généré (C:\Ad-Report-CLEAN.log).
    >N'oublie pas de réactiver ton anti-virus

    2-Pour ceux qui on vista ou windows 7,desactivez l'UAC :
    Tuto : https://www.commentcamarche.net/faq/8343-vista-desactiver-l-uac

    >Toolbar S&D<

    >Telecharge Toolbar S&D ici

    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cpVobGk5bHnxrhQ4yaoEUDJvOYNnEGyYjgqHZz5GqZLfutR3fMFPlsC3-CGIilfupPAguYATNyua3csodN_frdMK8sSzUpit10Yac-QJCOkMqJKkbdKcP6ySs8trWPgoNVIq4TGGWCe6o0txXQv-ZueJF9vZzw3RXsGwFYIqN2lvF2LPdQzS8mE1d5kWOVOz6EMzQuE5-lClSJM869uq3oc7-t7yg%3D%3D&attredirects=3

    >Enregistrer le logiciel sur le bureau
    >Double-clique sur l'icone "l'icône ToolBarSD.exe"
    >Accepte l'installation

    >Une fois l'installation terminée, Double-clique sur la nouvelle icone avec écrit Toolbar S&D noir sur ton bureau
    >Appuie sur "F" pour choisir la langue francais
    >Choisi l'option 1 "recherche" le menu Démarrer et les icônes vont disparaitrent, c'est normal.
    >Laisse l'outil faire, ne touche à rien
    >Une fois l'analyse terminé, le rapport de recherche s'ouve sur le Bloc-Note. (Dans le cas où le rapport ne s'ouvre pas, ce dernier se trouve sur C:\TB.txt)

    >Poste le rapport
    0
  4. stickbx Messages postés 6 Statut Membre
     
    merci flo 91
    j'ai changé ma batterie de voiture qui été morte par ce grand froid
    j'ai fait l'opération demandée
    mon prdi est sous XP avec firefox
    voilà le rapport généré par ad remover

    ======= RAPPORT D'AD-REMOVER 1.1.4.5_O | UNIQUEMENT XP/VISTA/SEVEN =======
    .
    Mit à jour par C_XX le 24/06/2009 à 7:10 PM
    Contact: AdRemover.contact@gmail.com
    Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
    .
    Lancé à: 14:28:05, 19/12/2009 | Mode Normal | Option: CLEAN
    Exécuté de: C:\Program Files\Ad-remover\
    Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
    Nom du PC: NATIONAL-FIX | Utilisateur actuel: serge mot‚
    .
    Administrateur: Administrateur
    N'est pas administrateur: HelpAssistant *Desactive*
    N'est pas administrateur: Invité *Desactive*
    Administrateur: serge moté
    N'est pas administrateur: SUPPORT_388945a0 *Desactive*
    .
    ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
    .
    .
    HKCR\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}
    HKCR\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}
    HKCU\Software\EoRezo
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}
    HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{C94E154B-1459-4A47-966B-4B843BEFC7DB}
    HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
    HKCR\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
    HKCR\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
    .
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\chrome
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\chrome.manifest
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\chrome.manifest.dev
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\install.rdf
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\install.rdf.bak
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\META-INF
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\chrome\ajtoolbar.jar
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\ask.gif
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\ask.src
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\config.dat
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\config.dat.bak
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\contents.rdf
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\snipit.js
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\META-INF\manifest.mf
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\META-INF\zigbert.rsa
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\META-INF\zigbert.sf
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
    C:\Program Files\AskBarDis\bar
    C:\Program Files\AskBarDis\unins000.dat
    C:\Program Files\AskBarDis\unins000.exe
    C:\Program Files\AskBarDis\bar\bin
    C:\Program Files\AskBarDis\bar\Settings
    C:\Program Files\AskBarDis\bar\bin\askBar.dll
    C:\Program Files\AskBarDis\bar\bin\askPopStp.dll
    C:\Program Files\AskBarDis\bar\bin\psvince.dll
    C:\Program Files\AskBarDis\bar\Settings\config.dat
    C:\Program Files\AskBarDis\bar\Settings\config.dat.bak
    C:\Program Files\AskBarDis
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\searchplugins\ask.xml
    C:\Documents and Settings\serge mot‚\Bureau\tout eorezo\AD-R.exe
    C:\Documents and Settings\serge mot‚\Bureau\tout eorezo\eorozo T‚l‚charger AD.docx
    C:\Documents and Settings\serge mot‚\Bureau\tout eorezo\HiJackThis.exe
    C:\Documents and Settings\serge mot‚\Bureau\tout eorezo\Moteur de recherche.URL
    C:\Documents and Settings\serge mot‚\Bureau\tout eorezo
    C:\DOCUME~1\SERGEM~1\LOCALS~1\Temp\nsk46.tmp\FindProcDLL.dll
    C:\DOCUME~1\SERGEM~1\LOCALS~1\Temp\nsk46.tmp\newadvsplash.dll
    C:\DOCUME~1\SERGEM~1\LOCALS~1\Temp\nsk46.tmp\splash.jpg
    C:\DOCUME~1\SERGEM~1\LOCALS~1\Temp\nsk46.tmp\System.dll
    C:\DOCUME~1\SERGEM~1\LOCALS~1\Temp\nsk46.tmp

    (!) -- Fichiers temporaires supprimés.

    .
    ============== Scan additionnel ==============
    .

    * Mozilla FireFox Version 3.5.6 *

    Nom du profil: yje2sqi2.default (serge mot‚)
    .
    (Prefs.js) user_pref("browser.search.defaultenginename", "Winamp Search");
    (Prefs.js) user_pref("browser.search.selectedEngine", "DAEMON Search");
    (Prefs.js) user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT530097&SearchSource=3&q={searchTerms}");
    (Prefs.js) user_pref("browser.startup.homepage", "hxxp://www.daemon-search.com/startpage|hxxp://webmail22.orange.fr/webmail/fr_FR/inbox.html?w=0&FromSubmit=true&dub=1");
    (Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.1.6");
    .
    .

    * Internet Explorer Version 7.0.5730.13 *

    [HKEY_CURRENT_USER\..\Internet Explorer\Main]

    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
    Search Page: hxxp://www.google.com
    Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

    [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Search bar: hxxp://search.msn.com/spbasic.htm
    Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Start Page: hxxp://fr.msn.com/

    [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

    Tabs: res://ieframe.dll/tabswelcome.htm

    ============== Suspect (Cracks, Serials ... ) ==============

    .
    .
    ===================================
    .
    7030 Octet(s) - C:\Ad-Report-CLEAN.log
    3765 Octet(s) - C:\Ad-Report-SCAN.log
    .
    105 Fichier(s) - C:\DOCUME~1\SERGEM~1\LOCALS~1\Temp
    1 Fichier(s) - C:\WINDOWS\Temp
    .
    19 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
    19 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE
    .
    Fin à: 15:03:22 | 19/12/2009
    .
    ============== E.O.F ==============
    .

    merci de me donner les conseils à suivre
    papy du bord du bassin d'arcachon
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. stickbx Messages postés 6 Statut Membre
     
    mes excuses j'ai oublié cet autre rapport joint

    ======= RAPPORT D'AD-REMOVER 1.1.4.5_O | UNIQUEMENT XP/VISTA/SEVEN =======
    .
    Mit à jour par C_XX le 24/06/2009 à 7:10 PM
    Contact: AdRemover.contact@gmail.com
    Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
    .
    Lancé à: 14:28:05, 19/12/2009 | Mode Normal | Option: CLEAN
    Exécuté de: C:\Program Files\Ad-remover\
    Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
    Nom du PC: NATIONAL-FIX | Utilisateur actuel: serge mot‚
    .
    Administrateur: Administrateur
    N'est pas administrateur: HelpAssistant *Desactive*
    N'est pas administrateur: Invité *Desactive*
    Administrateur: serge moté
    N'est pas administrateur: SUPPORT_388945a0 *Desactive*
    .
    ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
    .
    .
    HKCR\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}
    HKCR\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}
    HKCU\Software\EoRezo
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}
    HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{C94E154B-1459-4A47-966B-4B843BEFC7DB}
    HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
    HKCR\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
    HKCR\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
    .
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\chrome
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\chrome.manifest
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\chrome.manifest.dev
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\install.rdf
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\install.rdf.bak
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\META-INF
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\chrome\ajtoolbar.jar
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\ask.gif
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\ask.src
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\config.dat
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\config.dat.bak
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\contents.rdf
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\defaults\preferences\snipit.js
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\META-INF\manifest.mf
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\META-INF\zigbert.rsa
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\META-INF\zigbert.sf
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
    C:\Program Files\AskBarDis\bar
    C:\Program Files\AskBarDis\unins000.dat
    C:\Program Files\AskBarDis\unins000.exe
    C:\Program Files\AskBarDis\bar\bin
    C:\Program Files\AskBarDis\bar\Settings
    C:\Program Files\AskBarDis\bar\bin\askBar.dll
    C:\Program Files\AskBarDis\bar\bin\askPopStp.dll
    C:\Program Files\AskBarDis\bar\bin\psvince.dll
    C:\Program Files\AskBarDis\bar\Settings\config.dat
    C:\Program Files\AskBarDis\bar\Settings\config.dat.bak
    C:\Program Files\AskBarDis
    C:\DOCUME~1\SERGEM~1\APPLIC~1\Mozilla\Firefox\Profiles\yje2sqi2.default\searchplugins\ask.xml
    C:\Documents and Settings\serge mot‚\Bureau\tout eorezo\AD-R.exe
    C:\Documents and Settings\serge mot‚\Bureau\tout eorezo\eorozo T‚l‚charger AD.docx
    C:\Documents and Settings\serge mot‚\Bureau\tout eorezo\HiJackThis.exe
    C:\Documents and Settings\serge mot‚\Bureau\tout eorezo\Moteur de recherche.URL
    C:\Documents and Settings\serge mot‚\Bureau\tout eorezo
    C:\DOCUME~1\SERGEM~1\LOCALS~1\Temp\nsk46.tmp\FindProcDLL.dll
    C:\DOCUME~1\SERGEM~1\LOCALS~1\Temp\nsk46.tmp\newadvsplash.dll
    C:\DOCUME~1\SERGEM~1\LOCALS~1\Temp\nsk46.tmp\splash.jpg
    C:\DOCUME~1\SERGEM~1\LOCALS~1\Temp\nsk46.tmp\System.dll
    C:\DOCUME~1\SERGEM~1\LOCALS~1\Temp\nsk46.tmp

    (!) -- Fichiers temporaires supprimés.

    .
    ============== Scan additionnel ==============
    .

    * Mozilla FireFox Version 3.5.6 *

    Nom du profil: yje2sqi2.default (serge mot‚)
    .
    (Prefs.js) user_pref("browser.search.defaultenginename", "Winamp Search");
    (Prefs.js) user_pref("browser.search.selectedEngine", "DAEMON Search");
    (Prefs.js) user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT530097&SearchSource=3&q={searchTerms}");
    (Prefs.js) user_pref("browser.startup.homepage", "hxxp://www.daemon-search.com/startpage|hxxp://webmail22.orange.fr/webmail/fr_FR/inbox.html?w=0&FromSubmit=true&dub=1");
    (Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.1.6");
    .
    .

    * Internet Explorer Version 7.0.5730.13 *

    [HKEY_CURRENT_USER\..\Internet Explorer\Main]

    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
    Search Page: hxxp://www.google.com
    Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

    [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Search bar: hxxp://search.msn.com/spbasic.htm
    Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Start Page: hxxp://fr.msn.com/

    [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

    Tabs: res://ieframe.dll/tabswelcome.htm

    ============== Suspect (Cracks, Serials ... ) ==============

    .
    .
    ===================================
    .
    7030 Octet(s) - C:\Ad-Report-CLEAN.log
    3765 Octet(s) - C:\Ad-Report-SCAN.log
    .
    105 Fichier(s) - C:\DOCUME~1\SERGEM~1\LOCALS~1\Temp
    1 Fichier(s) - C:\WINDOWS\Temp
    .
    19 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
    19 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE
    .
    Fin à: 15:03:22 | 19/12/2009
    .
    ============== E.O.F ==============
    .
    0
  7. flo-91 Messages postés 5973 Statut Contributeur sécurité 1 120
     
    Ok, mais tu ne m'a pas fait Toolbar s&d comme indiqué, fait-le.
    0
  8. stickbx Messages postés 6 Statut Membre
     
    ok merci du rappel je croyais toolbar applicable à vista...
    voir son rapport, bonne analyse
    j'avoue que daemon devient omni présent
    j'ai un autre antivirus non indiqué AVIRA

    -----------\\ ToolBar S&D 1.2.9 XP/Vista

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 1700+ )
    BIOS : Version 1.00
    USER : serge moté ( Administrator )
    BOOT : Normal boot
    Antivirus : avast! antivirus 4.8.1368 [VPS 091218-1] 4.8.1368 (Activated)
    A:\ (USB)
    C:\ (Local Disk) - NTFS - Total:14 Go (Free:3 Go)
    D:\ (Local Disk) - FAT32 - Total:76 Go (Free:0 Go)
    E:\ (CD or DVD)
    F:\ (Local Disk) - FAT32 - Total:931 Go (Free:28 Go)
    G:\ (Local Disk) - NTFS - Total:203 Go (Free:14 Go)
    H:\ (Local Disk) - NTFS - Total:14 Go (Free:7 Go)
    I:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
    J:\ (CD or DVD)
    K:\ (CD or DVD)
    L:\ (Local Disk) - NTFS - Total:465 Go (Free:20 Go)

    "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
    Option : [1] ( 19/12/2009|17:59 )

    -----------\\ Recherche de Fichiers / Dossiers ...

    C:\Program Files\DAEMON Tools Toolbar
    C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
    C:\Program Files\DAEMON Tools Toolbar\Resources
    C:\Program Files\DAEMON Tools Toolbar\uninst.exe
    C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
    C:\Program Files\DAEMON Tools Toolbar\Resources\about.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\AboutWindow.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\accept.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\AddRadioStation.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\as.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\as.png
    C:\Program Files\DAEMON Tools Toolbar\Resources\astro.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\astroburn_site.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\astroLite_16.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\astro_buy.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\astro_download.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\astro_feedback.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\astro_forum.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\astro_home.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\astro_lite.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\az.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\b1.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\b1.png
    C:\Program Files\DAEMON Tools Toolbar\Resources\BurnImage.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\burn_files.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\burn_image.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\burn_imgs.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\buy.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond000.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond001.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond003.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond004.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond005.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond006.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond007.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond008.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond009.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond010.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond011.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond019.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond020.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond021.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond022.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond023.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond024.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond025.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond026.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond037.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond038.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond039.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond040.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond041.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond046.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond048.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond050.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond051.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond052.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond053.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond054.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond055.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond056.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond057.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond058.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond059.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond060.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond061.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond062.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond063.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond064.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond065.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond066.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond067.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond068.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond069.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond075.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond076.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond077.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond078.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond079.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond080.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond084.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond085.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond086.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond087.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond088.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond089.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond090.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond091.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond092.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond093.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond094.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond095.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond108.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond109.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond110.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond111.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond112.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond113.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond120.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond121.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond122.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond126.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond127.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond128.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond129.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond130.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond131.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond132.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond133.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond134.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond135.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond136.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond137.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond138.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond140.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond141.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond142.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond143.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond148.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond149.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond152.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond154.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond155.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond156.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\cond157.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\Config.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\d.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\d2.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\daemon.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\daemon_search.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\daemon_search_site.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\dot_disabled.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\dot_enabled.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\dot_on_over.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\download.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\ds.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\dsearch.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\dt-home.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\dt.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\DTPro.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\dtt16.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\dtt32.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\dt_about.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\dt_buy.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\dt_download.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\dt_faq.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\dt_feedback.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\dt_forum.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\dt_line.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\dt_lite.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\dt_manual.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\dt_pro.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\Dwnl.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\emulation.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\favicon.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\features.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\feedback.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\forum.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\GameCentrix.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\GameCentrixCristals.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\GameCentrixDownload.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\GameCentrixPlayOnline.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\GameCentrixTop.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\GameS.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\GameSA.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\games_search.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\games_search_SA.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\gct16.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\gd.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\genre.xml
    C:\Program Files\DAEMON Tools Toolbar\Resources\globe.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\GrabImage.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\hb.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\hb.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\help.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\hide.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\home.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\ImageS.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\ImageSA.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\image_search.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\image_search_SA.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\ip.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\lang.xml
    C:\Program Files\DAEMON Tools Toolbar\Resources\lingvo.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\m.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\mail.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\mailc.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_down.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_m.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_under.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\mail_disable.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\mail_down.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\mail_m.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\mail_under.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRadioConfig.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRadioStation.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRSCur.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\MenuTr.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\mount.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\mount_n_drive.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\next.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\next_down.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\next_m.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\next_under.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\none.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\none_m.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\noW.gif
    C:\Program Files\DAEMON Tools Toolbar\Resources\op.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\play.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\play.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\play_down.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\play_m.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\play_under.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\pragma.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\prev.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\prev_down.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\prev_m.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\prev_under.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\prod.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\Radio.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBg.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBg.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBgMask.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDisp.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDisp_m.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_down.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_m.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_under.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioE.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioG.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioL.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLDotMask.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLeft.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLeftMask.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioLM.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioM.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioN.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioR.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioR.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioRM.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioRU.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_down.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_m.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_under.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\RadioW.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\rbcheck.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\rbtxt.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\refresh.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_down.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_m.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_under.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\Rss.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\Rss1.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\RssA.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\RssA1.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\rssClose.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\rssL.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\rssOpen.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\RssRefresh.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\s2.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\show.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\size.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\size_lr.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\size_m.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\size_rl.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\skins.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\spt.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\stop.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\stop.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\stop_down.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\stop_m.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\stop_under.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\style.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\SupportRequest.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\time.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\timer.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\TitleIcon.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\toolbar.xml
    C:\Program Files\DAEMON Tools Toolbar\Resources\trans.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\Trash.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_down.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_m.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_under.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\u.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\unmount-all.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\vol.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\vol.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\vol_back.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\vol_dott.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\vol_dott_m.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\vol_down.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\vol_m.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\vol_mute.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\vol_mute_check.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\vol_under.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\wb.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m42.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m43.bmp
    C:\Program Files\DAEMON Tools Toolbar\Resources\WebS.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\WebSa.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\web_resources.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\web_search.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\web_search_SA.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\wi.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\wi0.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\wi1.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\wi10.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\wi11.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\wi12.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\wi13.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\wi14.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\wi2.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\wi3.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\wi4.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\wi5.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\wi6.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\wi7.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\wi8.ico
    C:\Program Files\DAEMON Tools Toolbar\Resources\wi9.ico

    -----------\\ Extensions

    (serge mot‚) - {19503e42-ca3c-4c27-b1e2-9cdb2170ee34} => flashgot
    (serge mot‚) - {1a2cd84f-2175-4ae8-bd60-ce0d04442b4f} => radio_france
    (serge mot‚) - {73a6fe31-595d-460b-a920-fcc0f8843232} => noscript
    (serge mot‚) - {9D23D0AA-D8F5-11DA-B3FC-0928ABF316DD} => cookiesafe
    (serge mot‚) - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} => adblockplus
    (serge mot‚) - {EE223D7A-F30F-11DD-8F0A-D2AD55D89593} => quickwiki

    -----------\\ [..\Internet Explorer\Main]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
    "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
    "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
    "Search Page"="https://www.google.com/?gws_rd=ssl"
    "Search Bar"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
    "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
    "Default_page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
    "Window Title"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
    "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
    "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
    "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
    "Start Page"="https://www.msn.com/fr-fr"
    "Search bar"="http://www.bing.com/spresults.aspx"

    --------------------\\ Recherche d'autres infections

    Aucune autre infection trouvée !

    1 - "C:\ToolBar SD\TB_1.txt" - 19/12/2009|18:00 - Option : [1]

    -----------\\ Fin du rapport a 18:00:36,46
    0
  9. flo-91 Messages postés 5973 Statut Contributeur sécurité 1 120
     
    Ok, :

    1->Relance Toolbar s&d :

    Pour ceux qui on vista ou windows 7,desactivez l'UAC :
    Tuto : https://www.commentcamarche.net/faq/8343-vista-desactiver-l-uac

    >Toolbar S&D<

    >Double-clique sur l'icone "l'icône ToolBarSD.exe"
    >Accepte l'installation

    >Une fois l'installation terminée, Double-clique sur la nouvelle icone avec écrit Toolbar S&D noir sur ton bureau
    >Appuie sur "F" pour choisir la langue francais
    >Choisi l'option 2 "Suppression" le menu Démarrer et les icônes vont disparaitrent, c'est normal.
    >Laisse l'outil faire, ne touche à rien
    >Une fois l'analyse terminé, le rapport de recherche s'ouve sur le Bloc-Note. (Dans le cas où le rapport ne s'ouvre pas, ce dernier se trouve sur C:\TB.txt)

    >Poste le rapport

    2->Telecharge RSIT ici et enregistre-le sur ton bureau :

    http://images.malwareremoval.com/random/RSIT.exe

    >Double-clique sur RSIT.exe qui se trouve sur le bureau

    >Le programme se lance, choisi "1month" et clique sur "continue"

    >Laisse faire l'outil et poste le rapport qui s'affiche.
    0
  10. stickbx Messages postés 6 Statut Membre
     
    info.txt logfile of random's system information tool 1.06 2009-12-19 18:29:15

    ======Uninstall list======

    Adobe Download Manager-->"C:\WINDOWS\system32\rundll32.exe" "C:\Program Files\NOS\bin\getPlus_Helper.dll",Uninstall /IE2883E8F-472F-4fb0-9522-AC9BF37916A7 /Get1
    Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
    Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
    Ad-remover-->C:\Program Files\Ad-remover\Uninstall ADR.exe
    ALZip-->"C:\Program Files\ESTsoft\ALZip\unins000.exe"
    Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
    avast! Antivirus-->C:\Program Files\Alwil Software\Avast4\aswRunDll.exe "C:\Program Files\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
    Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
    CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
    Correctif pour Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
    Correctif pour Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
    Correctif pour Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"
    Dam 2.2-->"C:\Program Files\Dam22\unins000.exe"
    eMule-->"G:\Program Files\eMule\Uninstall.exe"
    FormatFactory 2.00-->C:\Program Files\FreeTime\FormatFactory\uninst.exe
    Foxit Reader-->C:\Program Files\Foxit Software\Foxit Reader\Uninstall.exe
    Foxit Toolbar-->"C:\Program Files\AskBarDis\unins000.exe"
    Glary Utilities 2.18.0.786-->"C:\Program Files\Glary Utilities\unins000.exe"
    Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_E582EA556D8DE101.exe" /uninstall
    Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
    HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
    Hotfix for Windows XP (KB915800-v4)-->"C:\WINDOWS\$NtUninstallKB915800-v4$\spuninst\spuninst.exe"
    JeuDeMots-->"C:\Program Files\JeuDeMots\unins000.exe"
    Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
    Mastersoft Mobile Solutions SuDoku-->"C:\WINDOWS\epsuninst.exe" "C:\Program Files\SuDoku\uninst.dat"
    Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{3F7924B9-D148-3141-87B1-68F36043A940}
    Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
    Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - FRA-->MsiExec.exe /I{511DF669-2930-30C0-8EB6-552887E29EC8}
    Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
    Microsoft .NET Framework 3.5 Language Pack - fra-->MsiExec.exe /I{5B76AEA2-D4E5-3B55-B965-ACC36AE0EAFC}
    Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
    Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
    Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
    Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
    Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
    Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
    Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
    Microsoft Office PowerPoint Viewer 2007 (French)-->MsiExec.exe /X{95120000-00AF-040C-0000-0000000FF1CE}
    Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
    Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
    Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
    Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
    Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
    Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
    Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
    Microsoft Office Standard 2007-->MsiExec.exe /X{90120000-0012-0000-0000-0000000FF1CE}
    Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
    Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
    Mise à jour de sécurité pour Lecteur Windows Media (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Lecteur Windows Media (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB972260)-->"C:\WINDOWS\ie7updates\KB972260-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB974455)-->"C:\WINDOWS\ie7updates\KB974455-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows Internet Explorer 7 (KB976325)-->"C:\WINDOWS\ie7updates\KB976325-IE7\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB923689)-->"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB971961)-->"C:\WINDOWS\$NtUninstallKB971961$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
    Mise à jour de sécurité pour Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
    Mise à jour pour Windows Internet Explorer 7 (KB976749)-->"C:\WINDOWS\ie7updates\KB976749-IE7\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB961503)-->"C:\WINDOWS\$NtUninstallKB961503$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
    Mise à jour pour Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
    Module linguistique Microsoft .NET Framework 3.5 - fra-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack - fra\setup.exe
    Mozilla Firefox (3.5.6)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
    Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
    PDF-Viewer-->"C:\Program Files\PDF XViewer\PDF Viewer\unins000.exe"
    Picasa 3-->"C:\Program Files\Google\Picasa3\Uninstall.exe"
    Q-Dir-->H:\Program Files\Q-Dir\Q-Dir.exe -uninstall
    Quicksys RegDefrag 2.6-->"C:\Program Files\Quicksys\RegDefrag\unins000.exe"
    Security Update for Windows Search 4 - KB963093-->"C:\WINDOWS\$NtUninstallKB963093$\spuninst\spuninst.exe"
    Simple Sudoku 4.2-->"C:\Program Files\sudokus\Simple Sudoku 4.2n\unins000.exe"
    Sudoku Extrême 1.0-->"C:\Program Files\sudokus\Sudoku Extrême\unins000.exe"
    Sudoku-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AB8D38CE-55A2-4EB8-8137-198D5C07D444}\SETUP.EXE" -l0x40c
    Sudoku1-->MsiExec.exe /I{8CE087BD-E3D3-4A44-803C-9A0B4B5FCD11}
    TuneUp Utilities 2009-->MsiExec.exe /I{55A29068-F2CE-456C-9148-C869879E2357}
    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
    Windows Defender-->MsiExec.exe /I{A06275F4-324B-4E85-95E6-87B2CD729401}
    Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray-->"C:\WINDOWS\$NtUninstallKB952011$\spuninst\spuninst.exe"
    Windows Internet Explorer 7-->"C:\WINDOWS\ie7\spuninst\spuninst.exe"
    Windows Media Format Runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
    Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
    Windows Search 4.0-->"C:\WINDOWS\$NtUninstallKB940157$\spuninst\spuninst.exe"
    WinUpdatesList-->C:\WINDOWS\zipinst.exe /uninst "C:\Program Files\WinUpdatesList\uninst1~.nsu"
    XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"

    ======Hosts File======

    127.0.0.1 www.007guard.com
    127.0.0.1 007guard.com
    127.0.0.1 008i.com
    127.0.0.1 www.008k.com
    127.0.0.1 008k.com
    127.0.0.1 www.00hq.com
    127.0.0.1 00hq.com
    127.0.0.1 010402.com
    127.0.0.1 www.032439.com
    127.0.0.1 032439.com

    ======Security center information======

    AV: AntiVir Desktop
    AV: avast! antivirus 4.8.1368 [VPS 091218-1]

    ======System event log======

    Computer Name: NATIONAL-FIX
    Event Code: 7036
    Message: Le service Google Software Updater est entré dans l'état : arrêté.

    Record Number: 19068
    Source Name: Service Control Manager
    Time Written: 20091121225217.000000+060
    Event Type: Informations
    User:

    Computer Name: NATIONAL-FIX
    Event Code: 7036
    Message: Le service Google Software Updater est entré dans l'état : en cours d'exécution.

    Record Number: 19067
    Source Name: Service Control Manager
    Time Written: 20091121225117.000000+060
    Event Type: Informations
    User:

    Computer Name: NATIONAL-FIX
    Event Code: 7035
    Message: Un contrôle Démarrer a correctement été envoyé au service Google Software Updater.

    Record Number: 19066
    Source Name: Service Control Manager
    Time Written: 20091121225117.000000+060
    Event Type: Informations
    User: AUTORITE NT\SYSTEM

    Computer Name: NATIONAL-FIX
    Event Code: 7036
    Message: Le service Explorateur d'ordinateur est entré dans l'état : arrêté.

    Record Number: 19065
    Source Name: Service Control Manager
    Time Written: 20091121224706.000000+060
    Event Type: Informations
    User:

    Computer Name: NATIONAL-FIX
    Event Code: 7036
    Message: Le service Gestionnaire de connexions d'accès distant est entré dans l'état : en cours d'exécution.

    Record Number: 19064
    Source Name: Service Control Manager
    Time Written: 20091121224702.000000+060
    Event Type: Informations
    User:

    =====Application event log=====

    Computer Name: NATIONAL-FIX
    Event Code: 1022
    Message: Produit : Microsoft .NET Framework 3.0 Service Pack 1 - La mise à jour 'NET Framework WPF 2 x86 ' a été installée.

    Record Number: 3051
    Source Name: MsiInstaller
    Time Written: 20091123141555.000000+060
    Event Type: Informations
    User: NATIONAL-FIX\serge moté

    Computer Name: NATIONAL-FIX
    Event Code: 1022
    Message: Produit : Microsoft .NET Framework 3.0 Service Pack 1 - La mise à jour 'NET Framework WPF 3' a été installée.

    Record Number: 3050
    Source Name: MsiInstaller
    Time Written: 20091123141555.000000+060
    Event Type: Informations
    User: NATIONAL-FIX\serge moté

    Computer Name: NATIONAL-FIX
    Event Code: 1022
    Message: Produit : Microsoft .NET Framework 3.0 Service Pack 1 - La mise à jour '.NET Framework WCF' a été installée.

    Record Number: 3049
    Source Name: MsiInstaller
    Time Written: 20091123141555.000000+060
    Event Type: Informations
    User: NATIONAL-FIX\serge moté

    Computer Name: NATIONAL-FIX
    Event Code: 1022
    Message: Produit : Microsoft .NET Framework 3.0 Service Pack 1 - La mise à jour '.NET Framework XPS' a été installée.

    Record Number: 3048
    Source Name: MsiInstaller
    Time Written: 20091123141555.000000+060
    Event Type: Informations
    User: NATIONAL-FIX\serge moté

    Computer Name: NATIONAL-FIX
    Event Code: 1022
    Message: Produit : Microsoft .NET Framework 3.0 Service Pack 1 - La mise à jour 'NET Framework WPF 3 x86' a été installée.

    Record Number: 3047
    Source Name: MsiInstaller
    Time Written: 20091123141555.000000+060
    Event Type: Informations
    User: NATIONAL-FIX\serge moté

    ======Environment variables======

    "ComSpec"=%SystemRoot%\system32\cmd.exe
    "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ESTsoft\ALZip\;G:\ALZip\;G:\Program Files\ALZip\
    "windir"=%SystemRoot%
    "OS"=Windows_NT
    "PROCESSOR_ARCHITECTURE"=x86
    "PROCESSOR_LEVEL"=6
    "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 6 Stepping 2, AuthenticAMD
    "PROCESSOR_REVISION"=0602
    "NUMBER_OF_PROCESSORS"=1
    "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
    "TEMP"=%SystemRoot%\TEMP
    "TMP"=%SystemRoot%\TEMP
    "FP_NO_HOST_CHECK"=NO

    -----------------EOF-----------------
    Logfile of random's system information tool 1.06 (written by random/random)
    Run by serge moté at 2009-12-19 18:28:33
    Microsoft Windows XP Édition familiale Service Pack 3
    System drive C: has 4 GB (24%) free of 15 GB
    Total RAM: 511 MB (20% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 18:29:09, on 19/12/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16945)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\DAEMON Tools Lite\DTLite.exe
    C:\Program Files\Windows Desktop Search\WindowsSearch.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir Desktop\sched.exe
    C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\TUProgSt.exe
    C:\WINDOWS\system32\SearchIndexer.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\serge moté\Bureau\RSIT.exe
    C:\WINDOWS\system32\SearchProtocolHost.exe
    C:\Program Files\trend micro\serge moté.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - Default URLSearchHook is missing
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (file missing)
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (file missing)
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll (file missing)
    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 52\axcmd.exe" /automount
    O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
    O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
    O17 - HKLM\System\CCS\Services\Tcpip\..\{7E2AD8F8-F109-4D7C-A85C-C4484A412C55}: NameServer = 80.10.246.2,80.10.246.129
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
    O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
    O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Google Software Updater (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
    O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
    O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
    0
  11. flo-91 Messages postés 5973 Statut Contributeur sécurité 1 120
     
    Et le rapport de Toolbar s&d option 2 il est où ??

    Tu me fait Toolbar s&d option comme indiqué puis un autre RSIT sinon sa ne va pas aller.
    0
  12. stickbx Messages postés 6 Statut Membre
     
    mes oreilles vont ressembler à celles de bug bunny à force de me les tirer

    j'avais bien exécuté toolbar sd option 2 avant votre dernière intervention
    je l'ai reexécuté
    les post 3à 18h45' et 4e à 19h04'

    post3

    -----------\\ ToolBar S&D 1.2.9 XP/Vista

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 1700+ )
    BIOS : Version 1.00
    USER : serge moté ( Administrator )
    BOOT : Normal boot
    Antivirus : avast! antivirus 4.8.1368 [VPS 091219-0] 4.8.1368 (Activated)
    A:\ (USB)
    C:\ (Local Disk) - NTFS - Total:14 Go (Free:3 Go)
    D:\ (Local Disk) - FAT32 - Total:76 Go (Free:0 Go)
    E:\ (CD or DVD)
    F:\ (Local Disk) - FAT32 - Total:931 Go (Free:28 Go)
    G:\ (Local Disk) - NTFS - Total:203 Go (Free:14 Go)
    H:\ (Local Disk) - NTFS - Total:14 Go (Free:7 Go)
    I:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
    J:\ (CD or DVD)
    K:\ (CD or DVD)
    L:\ (Local Disk) - NTFS - Total:465 Go (Free:20 Go)

    "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
    Option : [2] ( 19/12/2009|18:44 )

    -----------\\ Recherche de Fichiers / Dossiers ...

    -----------\\ Extensions

    (serge mot‚) - {19503e42-ca3c-4c27-b1e2-9cdb2170ee34} => flashgot
    (serge mot‚) - {1a2cd84f-2175-4ae8-bd60-ce0d04442b4f} => radio_france
    (serge mot‚) - {73a6fe31-595d-460b-a920-fcc0f8843232} => noscript
    (serge mot‚) - {9D23D0AA-D8F5-11DA-B3FC-0928ABF316DD} => cookiesafe
    (serge mot‚) - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} => adblockplus
    (serge mot‚) - {EE223D7A-F30F-11DD-8F0A-D2AD55D89593} => quickwiki

    -----------\\ [..\Internet Explorer\Main]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
    "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
    "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
    "Search Page"="https://www.google.com/?gws_rd=ssl"
    "Search Bar"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
    "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
    "Default_page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
    "Window Title"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
    "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
    "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
    "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
    "Start Page"="https://www.msn.com/fr-fr/"
    "Search bar"="http://www.bing.com/spresults.aspx"

    --------------------\\ Recherche d'autres infections

    Aucune autre infection trouvée !

    1 - "C:\ToolBar SD\TB_1.txt" - 19/12/2009|18:00 - Option : [1]
    2 - "C:\ToolBar SD\TB_2.txt" - 19/12/2009|18:26 - Option : [2]
    3 - "C:\ToolBar SD\TB_3.txt" - 19/12/2009|18:45 - Option : [2]

    post 4

    -----------\\ ToolBar S&D 1.2.9 XP/Vista

    Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
    X86-based PC ( Uniprocessor Free : AMD Athlon(tm) XP 1700+ )
    BIOS : Version 1.00
    USER : serge moté ( Administrator )
    BOOT : Normal boot
    Antivirus : avast! antivirus 4.8.1368 [VPS 091219-0] 4.8.1368 (Activated)
    A:\ (USB)
    C:\ (Local Disk) - NTFS - Total:14 Go (Free:3 Go)
    D:\ (Local Disk) - FAT32 - Total:76 Go (Free:0 Go)
    E:\ (CD or DVD)
    F:\ (Local Disk) - FAT32 - Total:931 Go (Free:28 Go)
    G:\ (Local Disk) - NTFS - Total:203 Go (Free:14 Go)
    H:\ (Local Disk) - NTFS - Total:14 Go (Free:7 Go)
    I:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
    J:\ (CD or DVD)
    K:\ (CD or DVD)
    L:\ (Local Disk) - NTFS - Total:465 Go (Free:20 Go)

    "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
    Option : [2] ( 19/12/2009|19:00 )

    -----------\\ Recherche de Fichiers / Dossiers ...

    -----------\\ Extensions

    (serge mot‚) - {19503e42-ca3c-4c27-b1e2-9cdb2170ee34} => flashgot
    (serge mot‚) - {1a2cd84f-2175-4ae8-bd60-ce0d04442b4f} => radio_france
    (serge mot‚) - {73a6fe31-595d-460b-a920-fcc0f8843232} => noscript
    (serge mot‚) - {9D23D0AA-D8F5-11DA-B3FC-0928ABF316DD} => cookiesafe
    (serge mot‚) - {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} => adblockplus
    (serge mot‚) - {EE223D7A-F30F-11DD-8F0A-D2AD55D89593} => quickwiki

    -----------\\ [..\Internet Explorer\Main]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
    "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
    "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
    "Search Page"="https://www.google.com/?gws_rd=ssl"
    "Search Bar"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
    "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
    "Default_page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
    "Window Title"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
    "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
    "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
    "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
    "Start Page"="https://www.msn.com/fr-fr/"
    "Search bar"="http://www.bing.com/spresults.aspx"

    --------------------\\ Recherche d'autres infections

    Aucune autre infection trouvée !

    1 - "C:\ToolBar SD\TB_1.txt" - 19/12/2009|18:00 - Option : [1]
    2 - "C:\ToolBar SD\TB_2.txt" - 19/12/2009|18:26 - Option : [2]
    3 - "C:\ToolBar SD\TB_3.txt" - 19/12/2009|18:45 - Option : [2]
    4 - "C:\ToolBar SD\TB_4.txt" - 19/12/2009|19:04 - Option : [2]

    post RSIT à 19h09

    Logfile of random's system information tool 1.06 (written by random/random)
    Run by serge moté at 2009-12-19 19:08:34
    Microsoft Windows XP Édition familiale Service Pack 3
    System drive C: has 4 GB (24%) free of 15 GB
    Total RAM: 511 MB (36% free)

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 19:09:07, on 19/12/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16945)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\DAEMON Tools Lite\DTLite.exe
    C:\Program Files\Windows Desktop Search\WindowsSearch.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir Desktop\sched.exe
    C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\TUProgSt.exe
    C:\WINDOWS\system32\SearchIndexer.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\cmd.exe
    C:\WINDOWS\system32\SearchProtocolHost.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Documents and Settings\serge moté\Bureau\RSIT.exe
    C:\Program Files\trend micro\serge moté.exe
    C:\WINDOWS\system32\cmd.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - Default URLSearchHook is missing
    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (file missing)
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (file missing)
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll (file missing)
    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 52\axcmd.exe" /automount
    O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
    O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
    O17 - HKLM\System\CCS\Services\Tcpip\..\{7E2AD8F8-F109-4D7C-A85C-C4484A412C55}: NameServer = 80.10.246.2,80.10.246.129
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
    O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
    O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Google Software Updater (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
    O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
    O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
    0
  13. flo-91 Messages postés 5973 Statut Contributeur sécurité 1 120
     
    Bon j'ai du mal à m'y retrouver, lis biens les post à l'avenir !

    Par contre si tu pouvais me poster le rapport de toolbar s&d de 18h26 ( le plus important ) ca serait bien.

    La suite :

    Je vois 2 antivirus sur ton pc, c'est un seul, plusieurs pourraient alterer le bon fonctionnement du pc, desinstalle avast qui n'est pas terrible à l'aide de cet outil :

    https://www.avast.com/fr-fr/uninstall-utility

    Puis :

    Télécharges Zhpdiag ici : https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

    Une fois le téléchargement achevé, dézippes le fichier obtenu et place ZHPDiag.exe sur ton Bureau.

    Double-clique sur l'icône pour lancer le programme.

    Clique sur Tous pour cocher toutes les cases des options.

    Clique sur la loupe pour lancer l'analyse.

    A la fin de l'analyse, clique sur l'appareil photo et enregistre le rapport sur ton Bureau.

    Rends toi sur http://www.cijoint.fr clic sur Parcourir, choisis le rapport sur ton bureau et clic sur Créer le lien,
    Un lien te sera généré, postes le dans ta prochaine réponse .
    0

Discussions similaires

Impossible d'afficher le rapport de tableau croisé dynamique sur un rapport
Utilisateur anonyme -
TomH. -

13 réponses
impossible d'afficher le tableau dynamique sur un rapport existant
Pierre -
Adrien71 -

3 réponses
Problém affichage du tableau croisé dynamique
BK -
Raymond PENTIER -

2 réponses
écrire un rapport de travail
asi -
REGINALD -

3 réponses
Theme de rapport de stage option comptabilité
sana saydou -
Raymond PENTIER -

2 réponses