Bonjour, Alors voila, j'ai un souci, depuis quelque temps, alors que je suis sur Internet ou dans un jeu, des pubs s'affichent, du genre Poker, Rencontres etc.... J'aimerais savoir comment je pourrais les enlever ? Merci pour les prochaines réponses.

Pubs qui s'affichent trop souvent !

Réponse 41 / 88

clemgym Messages postés 208 Statut Membre 27

Voila le rapport :

All processes killed
========== FILES ==========
C:\Users\CleEmGym\LOCALS~1\APPLIC~1\MICROS~1\cisvc.exe moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: CleEmGym
->Temp folder emptied: 1271743 bytes
->Temporary Internet Files folder emptied: 4151816 bytes
->Java cache emptied: 30578129 bytes
->Google Chrome cache emptied: 21490124 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Invité
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 28082 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 6689681 bytes
%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 25494342 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 86,00 mb

OTM by OldTimer - Version 3.1.6.0 log created on 01202010_205743

Files moved on Reboot...
File move failed. C:\Windows\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Réponse 42 / 88

Utilisateur anonyme

Donnes des nouvelles stp.....

a+

Réponse 43 / 88

clemgym Messages postés 208 Statut Membre 27

Pubs, Pubs, Pubs et encore Pubs.... =(

Réponse 44 / 88

Utilisateur anonyme

Dsl mais la je sèche....
Ceci sans conviction !

Clique sur ce lien :
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
Clique sur navilog1.exe pour le télécharger
Choisis Enregistrer

et enregistre-le sur ton bureau.

Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Laisse-toi guider. Au menu principal, choisis 1 et valide.

Patiente jusqu'au message :
*** Analyse Terminée le ..... ***
Appuie sur une touche comme demandé, le bloc note va s'ouvrir.
Copie-colle l'intégralité dans une réponse. Referme le bloc note.
Le rapport est en outre sauvegardé à la racine du disque (C:\fixnavi.txt)
poste le rapport obtenu

Réponse 45 / 88

clemgym Messages postés 208 Statut Membre 27

Voila le rapport :

Fix Navipromo version 4.0.6 commencé le 21/01/2010 8:07:43,36

!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Postez ce rapport sur le forum pour le faire analyser !!!

Outil exécuté depuis C:\Program Files\navilog1

Mise à jour le 03.01.2010 à 11h00 par IL-MAFIOSO

Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Duo CPU P7350 @ 2.00GHz )
BIOS : Default System BIOS
USER : CleEmGym ( Not Administrator ! )
BOOT : Normal boot

Antivirus : avast! antivirus 4.8.1169 [VPS 090821-0] 4.8.1169 (Activated)

C:\ (Local Disk) - NTFS - Total:232 Go (Free:140 Go)
D:\ (Local Disk) - NTFS - Total:221 Go (Free:221 Go)
E:\ (CD or DVD)
F:\ (CD or DVD)

Recherche executée en mode normal

Nettoyage exécuté au redémarrage de l'ordinateur

C:\Windows\prefetch\GAMEOVERLAYUI.EXE-82DD85B2.pf supprimé !

Nettoyage contenu C:\Windows\Temp effectué !
Nettoyage contenu C:\Users\CleEmGym\AppData\Local\Temp effectué !

*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok

*** Scan terminé 21/01/2010 8:11:39,44 ***

Réponse 46 / 88

clemgym Messages postés 208 Statut Membre 27

Bonjour,
J'ai trouvé sur internet des personnes ayant le même probleme que moi (je ne sais pas si tu peux t'en servir pour m'aider) voila les liens :

https://forums.commentcamarche.net/forum/affich-14371520-probleme-pub-du-site-pkr-com

https://forums.commentcamarche.net/forum/affich-12102946-pub-intempestives-help-svp

Réponse 47 / 88

Utilisateur anonyme

Poste un rapport Nod32 https://www.eset.com/ (il faut utiliser Internet Explorer)
- coche toutes les cases à chaque fois, et lorsque c'est terminé, colle le rapport :
C:\Program Files\EsetOnlineScanner\log.txt

a+

Réponse 48 / 88

clemgym Messages postés 208 Statut Membre 27

Je ne trouve pas C:\Program Files\EsetOnlineScanner\log.txt !

Réponse 49 / 88

Utilisateur anonyme

Rends toi sur ce site: https://www.virustotal.com/gui/
et fais analyser :
C:\bucks.exe
Tuto ici:
https://kerio.probb.fr/t671-tutoriel-virustotal-multi-scans-anti-virus

a+

Réponse 50 / 88

clemgym Messages postés 208 Statut Membre 27

je l'ai fais analyser il me dit 0/41 voila

Réponse 51 / 88

Utilisateur anonyme

Ok.....!!!!

Relances le post 27 stp....(je me renseingne par ailleurs !)

a+

Réponse 52 / 88

clemgym Messages postés 208 Statut Membre 27

Post 27 ?

Réponse 53 / 88

Utilisateur anonyme

Message N° 27 !

a+

Réponse 54 / 88

clemgym Messages postés 208 Statut Membre 27

Désolé mais là je ne vois pas de quoi tu parles

Réponse 55 / 88

Utilisateur anonyme

Les messages sont tous numérotés (celui ci est le n° 58 ).....
58
archet9, le 23 jan 2010 à 17:28:32

==> Remontes au message n° 27 page 2

et relances List&kill em

a+
........

Réponse 56 / 88

clemgym Messages postés 208 Statut Membre 27

Pfff...... ça me bloque encore à : Searching......patience...., rien à faire ces fichues pubs sont encore là !

Réponse 57 / 88

clemgym Messages postés 208 Statut Membre 27

Ca c'est débloquer c'est bon j'attends la suite...

Réponse 58 / 88

clemgym Messages postés 208 Statut Membre 27

Voila le rapport :

List'em by g3n-h@ckm@n 1.2.1.1
User : CleEmGym (Administrateurs)
Update on 23/01/2010 by g3n-h@ckm@n ::::: 13:50
Start at: 08:44:02 | 27/01/2010
Contact : g3n-h@ckm@n sur CCM

Intel(R) Core(TM)2 Duo CPU P7350 @ 2.00GHz
Microsoft® Windows Vista™ Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 2
Internet Explorer 8.0.6001.18882
Windows Firewall Status : Enabled
AV : avast! antivirus 4.8.1169 [VPS 090821-0] 4.8.1169 [ Enabled | Updated ]

C:\ -> Disque fixe local | 232,88 Go (136,4 Go free) [VistaOS] | NTFS
D:\ -> Disque fixe local | 221,16 Go (221,07 Go free) [DATA] | NTFS
E:\ -> Disque CD-ROM
F:\ -> Disque CD-ROM

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\winlogon.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\rundll32.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
C:\Program Files\ATK Hotkey\ASLDRSrv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Windows\system32\WLANExt.exe
C:\Program Files\ATKGFNEX\GFNEXSrv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Windows\system32\taskeng.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\FsUsbExService.Exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Windows\system32\PnkBstrA.exe
C:\Windows\system32\rpcnet.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\TUProgSt.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files\ATK Hotkey\Hcontrol.exe
C:\Program Files\ATK Hotkey\MsgTranAgt.exe
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files\ASUS\ASUS CopyProtect\aspg.exe
C:\Program Files\P4G\BatteryLife.exe
C:\Program Files\ASUS\Splendid\ACMON.exe
C:\Users\CleEmGym\Local Settings\APPLIC~1\MICROS~1\cisvc.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
C:\Windows\System32\ACEngSvr.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\ATK Hotkey\HControlUser.exe
C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Windows\System32\ASUSTPE.exe
C:\Program Files\ATK Hotkey\ATKOSD.exe
C:\Windows\ASScrPro.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\System32\ServoApp.exe
C:\Program Files\MFP Server\App\Common\MFPAgent.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Users\CleEmGym\Program Files\DNA\btdna.exe
C:\bucks.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\ATK Hotkey\KBFiltr.exe
C:\Program Files\ATK Hotkey\WDC.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\Common Files\Steam\SteamService.exe
C:\Users\CleEmGym\AppData\Local\Temp\~temp\aiunml201\smss.exe
C:\Program Files\List_Kill'em\List_Kill'em.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\cmd.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Users\CleEmGym\AppData\Local\temp\BE01.tmp\pv.exe

======================
Keys "Run"
======================
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
LightScribe Control Panel REG_SZ C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
swg REG_SZ "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
ehTray.exe REG_SZ C:\Windows\ehome\ehTray.exe
RocketDock REG_SZ "C:\Program Files\RocketDock\RocketDock.exe"
BitTorrent DNA REG_SZ "C:\Users\CleEmGym\Program Files\DNA\btdna.exe"
Win32dll REG_SZ C:\bucks.exe
WMPNSCFG REG_SZ C:\Program Files\Windows Media Player\WMPNSCFG.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
Windows Defender REG_EXPAND_SZ %ProgramFiles%\Windows Defender\MSASCui.exe -hide
CLMLServer REG_SZ "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe"
P2Go_Menu REG_SZ "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
NvCplDaemon REG_SZ RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
NvMediaCenter REG_SZ RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
HControlUser REG_SZ "C:\Program Files\ATK Hotkey\HcontrolUser.exe"
ATKOSD2 REG_SZ C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
RtHDVCpl REG_SZ RtHDVCpl.exe
SynTPEnh REG_SZ C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
ADSMTray REG_SZ C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
ATKMEDIA REG_SZ C:\Program Files\ASUS\ATK Media\DMedia.exe
ASUSTPE REG_SZ C:\Windows\system32\ASUSTPE.exe
ASUS Camera ScreenSaver REG_SZ C:\Windows\AsScrProlog.exe
ASUS Screen Saver Protector REG_SZ C:\Windows\ASScrPro.exe
avast! REG_SZ C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
Server Application REG_SZ C:\Windows\system32\ServoApp.exe
GDI Manager REG_SZ "C:\Program Files\MFP Server\App\Common\MFPAgent.exe"
Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
Adobe ARM REG_SZ "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

=====================
Other Keys
=====================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
ConsentPromptBehaviorAdmin REG_DWORD 2 (0x2)
ConsentPromptBehaviorUser REG_DWORD 1 (0x1)
EnableInstallerDetection REG_DWORD 1 (0x1)
EnableLUA REG_DWORD 1 (0x1)
EnableSecureUIAPaths REG_DWORD 1 (0x1)
EnableVirtualization REG_DWORD 1 (0x1)
PromptOnSecureDesktop REG_DWORD 1 (0x1)
ValidateAdminCodeSignatures REG_DWORD 0 (0x0)
dontdisplaylastusername REG_DWORD 0 (0x0)
legalnoticecaption REG_SZ
legalnoticetext REG_SZ
scforceoption REG_DWORD 0 (0x0)
shutdownwithoutlogon REG_DWORD 1 (0x1)
undockwithoutlogon REG_DWORD 1 (0x1)
FilterAdministratorToken REG_DWORD 1 (0x1)
EnableUIADesktopToggle REG_DWORD 0 (0x0)
DisableRegistryTools REG_DWORD 0 (0x0)

===============
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
NoDriveAutorun REG_DWORD 128 (0x80)
NoDriveTypeAutoRun REG_DWORD 128 (0x80)
HonorAutoRunSetting REG_DWORD 0 (0x0)
NoDrives REG_DWORD 0 (0x0)

===============
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
BindDirectlyToPropertySetStorage REG_DWORD 0 (0x0)
NoDriveAutoRun REG_DWORD 128 (0x80)
NoDriveTypeAutoRun REG_DWORD 128 (0x80)
HonorAutoRunSetting REG_DWORD 0 (0x0)
NoDrives REG_DWORD 0 (0x0)

===============
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

===============

===============
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
{AEB6717E-7E19-11d0-97EE-00C04FD91972} REG_SZ

===============
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
C:\Program Files\BitTorrent\bittorrent.exe REG_SZ C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent
C:\Users\CleEmGym\AppData\Local\Kamuse\KCSTrayDownloader\KCSTrayDownloaderEngine.exe REG_SZ C:\Users\CleEmGym\AppData\Local\Kamuse\KCSTrayDownloader\KCSTrayDownloaderEngine.exe:*:Enabled:KCSTrayDownloaderEngine.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

===============
ActivX controls
===============
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{166B1BCA-3F9C-11CF-8075-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{7530BFB8-7293-4D34-9923-61A11451AFC5}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{8AD9C840-044E-11D1-B3E9-00805F499D93}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}

===============
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{26923b43-4d38-484f-9b9e-de460746276c}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{284B24B0-BA16-E265-A0AA-8DE2C2463ED4}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3af36230-a269-11d1-b5bf-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA855-CC51-11CF-AAFA-00AA00B6015F}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{45ea75a0-a269-11d1-b5bf-0000f8051515}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f645220-306d-11d2-995d-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5fd399c0-a70a-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{630b1da0-b465-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{73FA19D0-2D75-11D2-995D-00C04F98BBC9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7C028AF8-F614-47B3-82DA-BA94E41B1089}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4340}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4383}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9381D8F2-0288-11D0-9501-00AA00B911A5}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C9E9A340-D1F1-11D0-821E-444553540600}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CDD7975E-60F8-41d5-8149-19E51D6F71D0}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D27CDB6E-AE6D-11CF-96B8-444553540000}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{de5aed00-a4bf-11d1-9948-00c04f98bbc9}
HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E92B03AB-B707-11d2-9CBD-0000F87A369E}

==============
BHO :
======
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]

================
Internet Explorer :
================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ https://www.msn.com/fr-fr/

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page REG_SZ https://www.google.fr/?gws_rd=ssl

========
Services
========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services]

Ndisuio : 0x3
EapHost : 0x3
Wlansvc : 0x2
SharedAccess : 0x2
windefend : 0x2
wuauserv : 0x2
wscsvc : 0x2

=========
Atapi.sys
=========

%%%% HASHDEEP-1.0
%%%% size,md5,sha256,filename
## Invoked from: C:\Users\CleEmGym\AppData\Local\temp\BE01.tmp
## C:\> hashdeep C:\Windows\System32\Drivers\atapi.sys
##
19944,1f05b78ab91c9075565a9d8a4b880bc4,737be9f9376dab0ccdfed93ea6d67f0c432367ea63cd772a453485be769af3bd,C:\Windows\System32\Drivers\atapi.sys

Sources
=======

C:\Windows\ERDNT\cache\atapi.sys
C:\Windows\System32\drivers\atapi.sys
C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys
C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys

Référence :
==========

Win XP_SP2_32b : CDFE4411A69C224BD1D11B2DA92DAC51
Win XP_SP3_32b : 9F3A2F5AA6875C72BF062C712CFA2674
Vista_SP1_32b : 2d9c903dc76a66813d350a562de40ed9
Vista_SP2_32b : 1F05B78AB91C9075565A9D8A4B880BC4
Vista_SP2_64b : 1898FAE8E07D97F2F6C2D5326C633FAC
Windows 7_32b : 80C40F7FDFC376E4C5FEEC28B41C119E
Windows 7_64b : 02062C0B390B7729EDC9E69C680A6F3C

=======
Drive :
=======

D‚fragmenteur de disque Windows
Copyright (c) 2006 Microsoft Corp.

Rapport d'analyse pour le volume C: VistaOS

Taille du volume = 233 Go
Espace libre = 136 Go
tendue d'espace libre la plus grande = 61.65 Go
Pourcentage de fragmentation des fichiers = 2 %

Remarqueÿ: sur les volumes NTFS, les fragments de fichiers de plus de 64ÿMo ne sont pas inclus dans les statistiques de fragmentation.

Il n'est pas n‚cessaire de d‚fragmenter ce volume.

¤¤¤¤¤¤¤¤¤¤ Files/folders :

Present !! : C:\Program Files\WinPCap
Present !! : C:\Windows\mbr.exe
Present !! : C:\Windows\System32\drivers\npf.sys
Present !! : C:\Windows\System32\Packet.dll
Present !! : C:\Windows\System32\pthreadVC.dll
Present !! : C:\Windows\System32\wpcap.dll

¤¤¤¤¤¤¤¤¤¤ Keys :

Present !! : HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives
Present !! : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives
Present !! : HKCR\Interface\{4897bba6-48d9-468c-8efa-846275d7701b}
Present !! : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}
Present !! : HKLM\SYSTEM\ControlSet001\Enum\Root\LEGACY_NPF
Present !! : HKLM\SYSTEM\ControlSet001\Services\npf
Present !! : HKLM\SYSTEM\ControlSet003\Enum\Root\LEGACY_NPF
Present !! : HKLM\SYSTEM\ControlSet003\Services\npf
Present !! : HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NPF
Present !! : HKLM\SYSTEM\CurrentControlSet\Services\npf

============

catchme 0.3.1398.3 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-27 08:53:09
Windows 6.0.6002 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:66285537
"s2"=dword:ba6d3970
"h0"=dword:00000002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:4e,9b,c1,a4,07,d5,8e,f6,f2,cf,da,24,e7,59,a9,63,37,f6,33,3c,7f,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000001
"hdf12"=hex:db,20,24,24,0f,fd,05,0d,31,e1,4d,b7,d6,c2,21,0c,4b,19,4f,dd,3c,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001]
"a0"=hex:20,01,00,00,93,11,d4,77,be,a0,07,38,07,0d,78,06,a5,2c,7d,6f,15,..
"hdf12"=hex:4e,42,89,78,18,4a,a5,a9,05,be,78,34,a5,3b,fe,69,b9,31,98,65,0a,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0]
"hdf12"=hex:2a,c6,15,f6,ee,1b,59,be,a5,f3,c1,fc,2e,0d,0b,7f,e6,fa,03,11,44,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"h0"=dword:00000000
"ujdew"=hex:4e,9b,c1,a4,07,d5,8e,f6,f2,cf,da,24,e7,59,a9,63,37,f6,33,3c,7f,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC]
"p0"="C:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000001
"hdf12"=hex:db,20,24,24,0f,fd,05,0d,31,e1,4d,b7,d6,c2,21,0c,4b,19,4f,dd,3c,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001]
"a0"=hex:20,01,00,00,93,11,d4,77,be,a0,07,38,07,0d,78,06,a5,2c,7d,6f,15,..
"hdf12"=hex:4e,42,89,78,18,4a,a5,a9,05,be,78,34,a5,3b,fe,69,b9,31,98,65,0a,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0]
"hdf12"=hex:2a,c6,15,f6,ee,1b,59,be,a5,f3,c1,fc,2e,0d,0b,7f,e6,fa,03,11,44,..

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
kernel: MBR read successfully
user & kernel MBR OK
copy of MBR has been found in sector 61 !
copy of MBR has been found in sector 62 !

==========
Programs
==========

Activation Assistant for the 2007 Microsoft Office suites
Adobe
AGEIA Technologies
Alcohol Soft
Alwil Software
Apple Software Update
ASUS
Atheros
ATK Hotkey
ATKGFNEX
Audacity
AviSynth 2.5
AVN Products
BitTorrent
Bonjour
BUFFALO
CCleaner
Circle Develoement
Cisco
Common Files
Counter-Strike Source
Cyanide
CyberLink
DAEMON Tools Lite
desktop.ini
DIFX
Diplodock Company
DNA
Dolby
Downloaded Installations
Electronic Arts
eMule
epson
ESET
Game Cam V2
GamersFirst
GIMP-2.0
Google
Guitar Pro 5
InstallShield Installation Information
Internet Explorer
iPod
iTunes
Java
JMCAssemblageGsm
Lame for Audacity
List_Kill'em
Malwarebytes' Anti-Malware
MarkAny
Messenger Plus! Live
MFP Server
Microsoft
Microsoft Games
Microsoft Office
Microsoft Silverlight
Microsoft SQL Server Compact Edition
Microsoft Sync Framework
Microsoft Visual Studio
Microsoft Visual Studio 8
Microsoft Works
Microsoft WSE
Microsoft.NET
Movie Maker
Mozilla Firefox
MSBuild
MSXML 4.0
Multimedia Card Reader
Navilog1
Netscape
OpenAL
Outsim
P4G
Patch MsnCreative
PC Connectivity Solution
Project10
QuickTime
Real
Realtek
Reference Assemblies
RocketDock
Samsung
Skype
Steam
SupraASCIIArt
Synaptics
TF2
trend micro
TubeMaster++
TuneUp Utilities 2009
Ubisoft
Uninstall Information
VDOWNLOADER
VideoLAN
VstPlugins
Windows Calendar
Windows Collaboration
Windows Defender
Windows Journal
Windows Live
Windows Live SkyDrive
Windows Mail
Windows Media Player
Windows NT
Windows Photo Gallery
Windows Portable Devices
Windows Sidebar
winlogon
WinPcap
WinRAR
Wireless Console 2

============
Drive C:
============

$RECYCLE.BIN
662.vmt
a52514afa3df35fdc9ebf6f20dbd5037.vmt
Ad-Remover
Ad-Report-CLEAN[1].log
Ad-Report-SCAN[1].log
app3.LOG
ASUS.DAT
ASUS.SYS
autoexec.bat
autorun.inf
Boot
bootmgr
BOOTSECT.BAK
bucks.exe
CA21.txt
cleannavi.txt
ComboFix
ComboFix.txt
config.sys
devlist.txt
Documents and Settings
Download
Driver.10
F50SVAS.BIN
Finish.log
Fraps
Games
GenProc
GHCSS
hiberfil.sys
igoogle_log.txt
inject.log
inject.log.txt
IO.SYS
Kill'em
List'em.txt
Lop SD
lopR.txt
MSDOS.SYS
MSOCache
NERO.LOG
NIS2009.TXT
npbittorrent.dll
OFFICE2007_A.TXT
pagefile.sys
Pass.txt
Patch.LOG
PerfLogs
Program Files
ProgramData
Qoobox
READER_A.TXT
RECOVERY.DAT
RHDSetup.log
rsit
store.log
SumHidd.txt
SumOS.txt
System Volume Information
TB.txt
temp
ToolBar SD
UsbFix
UsbFix.txt
Users
V554.txt
Windows
WindowsLive_A.TXT
_OTM

¤¤¤¤¤¤¤¤¤¤ Cracks | Keygens | Serials

C:\Patch.LOG
C:\Program Files\Patch MsnCreative
C:\Program Files\GIMP-2.0\share\gimp\2.0\gimpressionist\Presets\Patchwork
C:\Program Files\GIMP-2.0\share\gimp\2.0\patterns\cracked.pat
C:\Program Files\Patch MsnCreative\comdlg32.OCX
C:\Program Files\Patch MsnCreative\Patch MsnCreative.exe
C:\Program Files\Patch MsnCreative\taskkill.exe
C:\Users\CleEmGym\Documents\Programmes\Patch MsnCreative.lnk
C:\Users\CleEmGym\AppData\Roaming\BitTorrent\Crack.rar.torrent
G:\Crack\Burnout Paradise The Ultimate Box\BurnoutParadise Patch.exe
G:\Crack\WinRar v3.71+Crack\Crack.exe
G:\Installer\Xilisoft Video Converter v3.1.7.0630B Multilangages Incl Keygen.rar

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

Réponse 59 / 88

Utilisateur anonyme

REDEMARRE EN MODE SANS ECHEC

Relance List&Kill'em (clic droit pour vista),

mais cette fois-ci :

choisis l'option 2 = Mode Destruction
laisse travailler l'outil

apres les verifications , un rapport va s'ouvrir.

ferme-le.

un deuxieme rapport va s'ouvrir ,

colle son contenu dans ta reponse apres avoir redemarré en mode normal

a+

Réponse 60 / 88

clemgym Messages postés 208 Statut Membre 27

J'ai tout bien fait, mais après avoir fermer le 1er rapport, le deuxième n'est pas venu peux être j'ai pas attendu assez longtemps, je ne sais pas ? A+

Pubs qui s'affichent trop souvent !

88 réponses

Votre réponse

Discussions similaires

Newsletters