VIRUS OU NON ? - Page 2

  1.  lucas01 Auteur
    Voila, encore merci

    .
    ======= LOGFILE OF AD-REMOVER 1.1.4.6_J | ONLY XP/VISTA/7 =======
    .
    Updated by C_XX on 05.02.2010 at 17:34
    Contact: AdRemover.contact@gmail.com
    Website: http://pagesperso-orange.fr/NosTools/ad_remover.html
    .
    Launch at: 10:46:02, 16/02/2010 | Normal Boot | Option: SCAN
    Executed from: C:\Ad-Remover\
    Operating system: Microsoft® Windows Vista™ HomeBasic Service Pack 2 v6.0.6002
    Computer Name: PC-DE-LUCAS | Current user: Lucas
    .
    ============== FOUND ELEMENT(S) ==============
    .

    C:\Users\Lucas\AppData\Roaming\Mozilla\FireFox\Profiles\kx402x0g.default\extensions\toolbar@ask.com
    C:\Users\Lucas\AppData\Roaming\Mozilla\FireFox\Profiles\kx402x0g.default\searchplugins\askcom.xml
    C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
    C:\Program Files\Mozilla FireFox\Components\AskHPRFF.js
    C:\Program Files\Mozilla FireFox\extensions\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
    C:\Program Files\Mozilla FireFox\extensions\{B922D405-6D13-4A2B-AE89-08A030DA4402}
    C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar
    C:\Users\Lucas\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Ask Search Assistant
    C:\Program Files\Ask Search Assistant
    C:\Program Files\Ask.com
    C:\Program Files\Dealio Toolbar
    C:\Program Files\pdfforge Toolbar
    C:\Users\Lucas\AppData\LocalLow\AskToolbar
    C:\Users\Lucas\AppData\LocalLow\Dealio
    C:\Users\Lucas\AppData\LocalLow\pdfforge
    C:\Users\Lucas\AppData\LocalLow\Search Settings
    C:\Windows\Installer\15402f01.msi
    C:\Windows\Installer\ba7759.msi
    C:\Windows\Installer\ba776d.msi
    .
    HKCU\software\appdatalow\AskBarDis
    HKCU\software\appdatalow\software\AskToolbar
    HKCU\software\appdatalow\software\Dealio
    HKCU\software\appdatalow\software\pdfforge
    HKCU\software\Ask.com
    HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{86CC03E7-A2FA-4F36-B3C9-2EC0B9A6E2CE}
    HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Search Settings
    HKCU\software\microsoft\internet explorer\searchscopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
    HKCU\software\microsoft\internet explorer\searchscopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
    HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}
    HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}
    HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
    HKLM\software\classes\appid\GenericAskToolbar.DLL
    HKLM\Software\Classes\CLSID\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
    HKLM\Software\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}
    HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
    HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
    HKLM\software\classes\GenericAskToolbar.ToolbarWnd
    HKLM\software\classes\GenericAskToolbar.ToolbarWnd.1
    HKLM\software\classes\installer\Features\A3BB3C491A65ED342A24B8144FE679FE
    HKLM\software\classes\installer\Products\79CAA1B036589D14EA74856E2A220F1E
    HKLM\software\classes\installer\Products\A28B4D68DEBAA244EB686953B7074FEF
    HKLM\software\classes\installer\Products\A3BB3C491A65ED342A24B8144FE679FE
    HKLM\software\classes\installer\Products\A6EB8FE4C9986914497E92C7F5A702E3
    HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
    HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
    HKLM\Software\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
    HKLM\software\classes\SearchSettings.BHO
    HKLM\software\classes\SearchSettings.BHO.1
    HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
    HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
    HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
    HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B922D405-6D13-4A2B-AE89-08A030DA4402}
    HKLM\software\microsoft\internet explorer\searchscopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
    HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
    HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{66886C4D-B307-4ECA-A228-52CA9B9851A4}
    HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{B922D405-6D13-4A2B-AE89-08A030DA4402}
    HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440}
    HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440}
    HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar
    HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\AskSearchAsst.exe
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0292226F570267D459357AF78015E534
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\03285961954D5824C85975D955031EE8
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\23A03A6765D10864EB278629A2DF32C3
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\323D2420527EA994FB326F15D333660E
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\33E6E75CE56376F40AF9234753739ADB
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\377026901A2D8744A8423A983B50E0D1
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\3A4FCCE032CA50340A6975C92410AE30
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\588DFA161592E9747948BFFE475476F4
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AC3985F4D64C2245A96D31569D1BF40
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6E00D9B24354FBA44AE2CA0FA86EF2E2
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\76DA9915C36F3D742951F63351CF5C97
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7C13F41728A69EF41AA1A3372FB86FA6
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\855847FA0E25FBA46B8516389DFDD4B3
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\8A01D85165E7CD5448C71263ADB6A2E2
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\8ED411B7A244E0E4C82C46284CA65B81
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\94E65EF7E080DDA4AA2F1DEDCE74AC5B
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9B0B0584E80456A4FB98DA3973B1EB3F
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9DC2844D0E3E8924C8973C3B3BAE1F58
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A89F1E0FE544529429C8BF82FE74CE39
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\AFEB575AA30ACB243B748619F62F0782
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B072F84D5AF1BB34C980E01F5689D864
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B278DBFACA5AB424DA79915F3A109F9A
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B3B348F18694F1949B4D6BD9507F2886
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B92A2929968AED344BD6B34AD60E6604
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BB1E992117B1B0B42BD2CDAEB8E749C4
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\C7D9132F42224AC49BD8C06A0F8E39C4
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\C9667115F6A9CE340B31B63B680FF26F
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DA6F069968D91A540A1363E997581959
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DBC7F2B5594E08A4C87EF4C22971C615
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E48E3A6D380B2EC4ABCEB3BA048D767F
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EFB70E89C3D6D354596520DE424F89D6
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F461B8DD96FF5AA41A52D14E1D7B69C7
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F49A213B5069AC348994D03F81B56C19
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F715D253BF28D554C9C0F60ABA8585CF
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\79CAA1B036589D14EA74856E2A220F1E
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A3BB3C491A65ED342A24B8144FE679FE
    HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A6EB8FE4C9986914497E92C7F5A702E3
    HKLM\software\microsoft\windows\currentversion\uninstall\{0B1AAC97-8563-41D9-AE47-58E6A222F0E1}
    HKLM\software\microsoft\windows\currentversion\uninstall\{4EF8BE6A-899C-4196-94E7-297C5F7A203E}
    HKLM\software\microsoft\windows\currentversion\uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
    HKLM\software\microsoft\windows\currentversion\uninstall\{94C3BB3A-56A1-43DE-A242-8B41F46E97EF}
    HKLM\software\microsoft\windows\currentversion\uninstall\Ask.com Search Assistant
    HKLM\software\pdfforge
    HKU\s-1-5-21-3334241609-3845032673-259671266-1000\software\appdatalow\AskBarDis
    HKU\s-1-5-21-3334241609-3845032673-259671266-1000\software\appdatalow\software\AskToolbar
    HKU\s-1-5-21-3334241609-3845032673-259671266-1000\software\appdatalow\software\Dealio
    HKU\s-1-5-21-3334241609-3845032673-259671266-1000\software\appdatalow\software\pdfforge
    HKU\s-1-5-21-3334241609-3845032673-259671266-1000\software\Ask.com
    .
    ============== Added scan ==============
    .
    .
    * Mozilla FireFox Version 3.5.7 [fr] *
    .
    ProfilePath: kx402x0g.default (Lucas)
    .
    (Lucas, prefs.js) Browser.download.lastDir, C:\Users\Lucas\Pictures
    (Lucas, prefs.js) Browser.search.defaultenginename, Yahoo
    (Lucas, prefs.js) Browser.search.defaulturl, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}
    (Lucas, prefs.js) Browser.search.selectedEngine, Google
    (Lucas, prefs.js) Browser.startup.homepage, hxxp://www.ibyscus.com/?ac=all&widg=sms
    (Lucas, prefs.js) Extensions.enabledItems, {e9911ec6-1bcc-40b0-9993-e0eea7f6953f}:2.4.0.4,{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}:4.0.1,{b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.7,{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,{20a82645-c095-46ed-80e3-08825760534b}:1.1,{3dd3b747-2b4d-476b-8a5b-9c771d447834}:1.0,{B922D405-6D13-4A2B-AE89-08A030DA4402}:1.1.1,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.7
    (Lucas, prefs.js) Keyword.URL, hxxp://fr.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=867034&p=
    (Lucas, prefs.js) Privacy.popups.showBrowserMessage, false
    .
    (Lucas, prefs.js) FOUND - Browser.search.defaultengine, Ask.com
    (Lucas, prefs.js) FOUND - Browser.search.order.1, Ask.com
    (Lucas, prefs.js) FOUND - Extensions.asktb.cbid, NL
    (Lucas, prefs.js) FOUND - Extensions.asktb.clear-searches-on-exit, true
    (Lucas, prefs.js) FOUND - Extensions.asktb.default-channel-url-mask, hxxp://www.ask.com/web?q={query}&o={o}&l={l}&qsrc={qsrc}
    (Lucas, prefs.js) FOUND - Extensions.asktb.fresh-install, false
    (Lucas, prefs.js) FOUND - Extensions.asktb.l, dis
    (Lucas, prefs.js) FOUND - Extensions.asktb.last-config-req, 1257645000360
    (Lucas, prefs.js) FOUND - Extensions.asktb.locale, en_US
    (Lucas, prefs.js) FOUND - Extensions.asktb.o, 14300
    (Lucas, prefs.js) FOUND - Extensions.asktb.overlay-reloaded-using-restart, true
    (Lucas, prefs.js) FOUND - Extensions.asktb.qsrc, 2871
    (Lucas, prefs.js) FOUND - Extensions.asktb.r, 5
    .
    .
    * Internet Explorer Version 8.0.6001.18882 *
    .
    [HKEY_CURRENT_USER\..\Internet Explorer\Main]
    .
    Start Page: hxxp://www.ibyscus.com/annuaire
    Default_Page_URL: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=91&bd=Presario&pf=cnnb
    Do404Search: 01000000
    Local Page: C:\Windows\system32\blank.htm
    Show_ToolBar: yes
    Search Page: hxxp://www.google.com
    Enable Browser Extensions: yes
    Search Bar: hxxp://www.google.com/ie
    Default_Search_URL: hxxp://www.google.com/ie
    Use Search Asst: no
    .
    [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
    .
    Start Page: hxxp://www.msn.com/
    Default_Page_URL: hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=91&bd=Presario&pf=cnnb
    Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Delete_Temp_Files_On_Exit: yes
    Local Page: C:\Windows\System32\blank.htm
    Enable Browser Extensions: yes
    Use Search Asst: no
    .
    [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
    .
    Tabs: res://ieframe.dll/tabswelcome.htm
    .
    ============== Suspect (Cracks, Serials, ...) ==============
    .
    C:\Users\Lucas\Documents\LimeWire\Incomplete\CORRUPT-0-PC - Swat 4 The Stetchkov Syndicate [English] [WwW GamesTorrents CoM] crack keygen.zip
    .
    ===================================
    .
    16125 Byte(s) - C:\Ad-Report-SCAN[1].log
    15841 Byte(s) - C:\Ad-Report-SCAN[2].log
    .
    1412 File(s) - C:\Users\Lucas\AppData\Local\Temp
    382 File(s) - C:\Windows\Temp
    70 File(s) - C:\Windows\Prefetch
    .
    2 File(s) - C:\Ad-Remover\BACKUP
    0 File(s) - C:\Ad-Remover\QUARANTINE
    .
    End at: 11:22:34 | 16/02/2010 - SCAN[2]
    .
    ============== E.O.F ==============
    .

    merci de ton aide
    0
    1. totobetourne
      lance le option L et colle le rapport
      0
      1. lucas01 Auteur
        Option L

        .
        ======= LOGFILE OF AD-REMOVER 1.1.4.6_J | ONLY XP/VISTA/7 =======
        .
        Updated by C_XX on 05.02.2010 at 17:34
        Contact: AdRemover.contact@gmail.com
        Website: http://pagesperso-orange.fr/NosTools/ad_remover.html
        .
        Launch at: 16:42:24, 16/02/2010 | Normal Boot | Option: CLEAN
        Executed from: C:\Ad-Remover\
        Operating system: Microsoft® Windows Vista™ HomeBasic Service Pack 2 v6.0.6002
        Computer Name: PC-DE-LUCAS | Current user: Lucas
        .
        ============== NEUTRALIZED ELEMENT(S) ==============
        .

        C:\Users\Lucas\AppData\Roaming\Mozilla\FireFox\Profiles\kx402x0g.default\extensions\toolbar@ask.com
        C:\Users\Lucas\AppData\Roaming\Mozilla\FireFox\Profiles\kx402x0g.default\searchplugins\askcom.xml
        C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
        C:\Program Files\Mozilla FireFox\Components\AskHPRFF.js
        C:\Program Files\Mozilla FireFox\extensions\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
        C:\Program Files\Mozilla FireFox\extensions\{B922D405-6D13-4A2B-AE89-08A030DA4402}
        C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar
        C:\Users\Lucas\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Ask Search Assistant
        C:\Program Files\Ask Search Assistant
        C:\Program Files\Ask.com
        C:\Program Files\Dealio Toolbar
        C:\Program Files\pdfforge Toolbar
        C:\Users\Lucas\AppData\LocalLow\AskToolbar
        C:\Users\Lucas\AppData\LocalLow\Dealio
        C:\Users\Lucas\AppData\LocalLow\pdfforge
        C:\Users\Lucas\AppData\LocalLow\Search Settings
        C:\Windows\Installer\15402f01.msi
        C:\Windows\Installer\ba7759.msi
        C:\Windows\Installer\ba776d.msi

        (!) -- Temp files deleted.

        .
        HKCU\software\appdatalow\AskBarDis
        HKCU\software\appdatalow\software\AskToolbar
        HKCU\software\appdatalow\software\Dealio
        HKCU\software\appdatalow\software\pdfforge
        HKCU\software\Ask.com
        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{86CC03E7-A2FA-4F36-B3C9-2EC0B9A6E2CE}
        HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Search Settings
        HKCU\software\microsoft\internet explorer\searchscopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
        HKCU\software\microsoft\internet explorer\searchscopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
        HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}
        HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
        HKLM\software\classes\appid\GenericAskToolbar.DLL
        HKLM\Software\Classes\CLSID\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
        HKLM\Software\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}
        HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
        HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
        HKLM\software\classes\GenericAskToolbar.ToolbarWnd
        HKLM\software\classes\GenericAskToolbar.ToolbarWnd.1
        HKLM\software\classes\installer\Features\A3BB3C491A65ED342A24B8144FE679FE
        HKLM\software\classes\installer\Products\79CAA1B036589D14EA74856E2A220F1E
        HKLM\software\classes\installer\Products\A28B4D68DEBAA244EB686953B7074FEF
        HKLM\software\classes\installer\Products\A3BB3C491A65ED342A24B8144FE679FE
        HKLM\software\classes\installer\Products\A6EB8FE4C9986914497E92C7F5A702E3
        HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
        HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
        HKLM\Software\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
        HKLM\software\classes\SearchSettings.BHO
        HKLM\software\classes\SearchSettings.BHO.1
        HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
        HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
        HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
        HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B922D405-6D13-4A2B-AE89-08A030DA4402}
        HKLM\software\microsoft\internet explorer\searchscopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
        HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
        HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{66886C4D-B307-4ECA-A228-52CA9B9851A4}
        HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{B922D405-6D13-4A2B-AE89-08A030DA4402}
        HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440}
        HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar
        HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\AskSearchAsst.exe
        HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
        HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}
        HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0292226F570267D459357AF78015E534
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\03285961954D5824C85975D955031EE8
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\23A03A6765D10864EB278629A2DF32C3
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\323D2420527EA994FB326F15D333660E
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\33E6E75CE56376F40AF9234753739ADB
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\377026901A2D8744A8423A983B50E0D1
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\3A4FCCE032CA50340A6975C92410AE30
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\588DFA161592E9747948BFFE475476F4
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AC3985F4D64C2245A96D31569D1BF40
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6E00D9B24354FBA44AE2CA0FA86EF2E2
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\76DA9915C36F3D742951F63351CF5C97
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7C13F41728A69EF41AA1A3372FB86FA6
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\855847FA0E25FBA46B8516389DFDD4B3
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\8A01D85165E7CD5448C71263ADB6A2E2
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\8ED411B7A244E0E4C82C46284CA65B81
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\94E65EF7E080DDA4AA2F1DEDCE74AC5B
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9B0B0584E80456A4FB98DA3973B1EB3F
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9DC2844D0E3E8924C8973C3B3BAE1F58
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A89F1E0FE544529429C8BF82FE74CE39
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\AFEB575AA30ACB243B748619F62F0782
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B072F84D5AF1BB34C980E01F5689D864
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B278DBFACA5AB424DA79915F3A109F9A
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B3B348F18694F1949B4D6BD9507F2886
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B92A2929968AED344BD6B34AD60E6604
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BB1E992117B1B0B42BD2CDAEB8E749C4
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\C7D9132F42224AC49BD8C06A0F8E39C4
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\C9667115F6A9CE340B31B63B680FF26F
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DA6F069968D91A540A1363E997581959
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DBC7F2B5594E08A4C87EF4C22971C615
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E48E3A6D380B2EC4ABCEB3BA048D767F
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EFB70E89C3D6D354596520DE424F89D6
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F461B8DD96FF5AA41A52D14E1D7B69C7
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F49A213B5069AC348994D03F81B56C19
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F715D253BF28D554C9C0F60ABA8585CF
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\79CAA1B036589D14EA74856E2A220F1E
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A3BB3C491A65ED342A24B8144FE679FE
        HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A6EB8FE4C9986914497E92C7F5A702E3
        HKLM\software\microsoft\windows\currentversion\uninstall\{0B1AAC97-8563-41D9-AE47-58E6A222F0E1}
        HKLM\software\microsoft\windows\currentversion\uninstall\{4EF8BE6A-899C-4196-94E7-297C5F7A203E}
        HKLM\software\microsoft\windows\currentversion\uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
        HKLM\software\microsoft\windows\currentversion\uninstall\{94C3BB3A-56A1-43DE-A242-8B41F46E97EF}
        HKLM\software\microsoft\windows\currentversion\uninstall\Ask.com Search Assistant
        HKLM\software\pdfforge
        .
        ============== Added scan ==============
        .
        .
        * Mozilla FireFox Version 3.5.7 [fr] *
        .
        ProfilePath: kx402x0g.default (Lucas)
        .
        (Lucas, prefs.js) Browser.download.lastDir, C:\Users\Lucas\Pictures
        (Lucas, prefs.js) Browser.search.defaultenginename, Yahoo
        (Lucas, prefs.js) Browser.search.defaulturl, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}
        (Lucas, prefs.js) Browser.search.selectedEngine, Google
        (Lucas, prefs.js) Browser.startup.homepage, hxxp://www.ibyscus.com/?ac=all&widg=sms
        (Lucas, prefs.js) Extensions.enabledItems, {e9911ec6-1bcc-40b0-9993-e0eea7f6953f}:2.4.0.4,{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}:4.0.1,{b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.7,{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}:6.0.16,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,{20a82645-c095-46ed-80e3-08825760534b}:1.1,{3dd3b747-2b4d-476b-8a5b-9c771d447834}:1.0,{B922D405-6D13-4A2B-AE89-08A030DA4402}:1.1.1,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.7
        (Lucas, prefs.js) Keyword.URL, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=2&q=
        (Lucas, prefs.js) Privacy.popups.showBrowserMessage, false
        .
        (Lucas, prefs.js) ERASED - Browser.search.defaultengine, Ask.com
        (Lucas, prefs.js) ERASED - Browser.search.order.1, Ask.com
        (Lucas, prefs.js) ERASED - Extensions.asktb.cbid, NL
        (Lucas, prefs.js) ERASED - Extensions.asktb.clear-searches-on-exit, true
        (Lucas, prefs.js) ERASED - Extensions.asktb.default-channel-url-mask, hxxp://www.ask.com/web?q={query}&o={o}&l={l}&qsrc={qsrc}
        (Lucas, prefs.js) ERASED - Extensions.asktb.fresh-install, false
        (Lucas, prefs.js) ERASED - Extensions.asktb.l, dis
        (Lucas, prefs.js) ERASED - Extensions.asktb.last-config-req, 1257645000360
        (Lucas, prefs.js) ERASED - Extensions.asktb.locale, en_US
        (Lucas, prefs.js) ERASED - Extensions.asktb.o, 14300
        (Lucas, prefs.js) ERASED - Extensions.asktb.overlay-reloaded-using-restart, true
        (Lucas, prefs.js) ERASED - Extensions.asktb.qsrc, 2871
        (Lucas, prefs.js) ERASED - Extensions.asktb.r, 5
        .
        .
        * Internet Explorer Version 8.0.6001.18882 *
        .
        [HKEY_CURRENT_USER\..\Internet Explorer\Main]
        .
        Start Page: hxxp://fr.msn.com/
        Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
        Do404Search: 01000000
        Local Page: C:\Windows\system32\blank.htm
        Show_ToolBar: yes
        Enable Browser Extensions: yes
        Search Bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
        Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        Use Search Asst: no
        .
        [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
        .
        Start Page: hxxp://fr.msn.com/
        Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
        Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        Delete_Temp_Files_On_Exit: yes
        Local Page: C:\Windows\System32\blank.htm
        Enable Browser Extensions: yes
        Use Search Asst: no
        Search bar: hxxp://search.msn.com/spbasic.htm
        .
        [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
        .
        Tabs: res://ieframe.dll/tabswelcome.htm
        .
        ============== Suspect (Cracks, Serials, ...) ==============
        .
        C:\Users\Lucas\Documents\LimeWire\Incomplete\CORRUPT-0-PC - Swat 4 The Stetchkov Syndicate [English] [WwW GamesTorrents CoM] crack keygen.zip
        .
        ===================================
        .
        15283 Byte(s) - C:\Ad-Report-CLEAN[1].log
        16125 Byte(s) - C:\Ad-Report-SCAN[1].log
        16167 Byte(s) - C:\Ad-Report-SCAN[2].log
        .
        827 File(s) - C:\Users\Lucas\AppData\Local\Temp
        380 File(s) - C:\Windows\Temp
        11 File(s) - C:\Windows\Prefetch
        .
        21 File(s) - C:\Ad-Remover\BACKUP
        206 File(s) - C:\Ad-Remover\QUARANTINE
        .
        End at: 16:54:13 | 16/02/2010 - CLEAN[1]
        .
        ============== E.O.F ==============
        .
        Voila, mais en naviguant, toujours cette espece d'adresse IP...

        Merci d'avance
        0
        1. totobetourne
          je ne crois pas qu il y ait d autres signes d infections passe cela c est un nettoyeur.il va peut etre t aider.

          pour enlever les fichiers temporaires

          a passer tout les 15 jours a peu pres.

          • Télécharger CCLeaner et l'installer sur le bureau en refusant l'installation de la barre Yahoo.
          https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/

          • Fermer toutes les applications
          • Lancer CCLeaner
          S'il n'est pas en Français cliquer sur Options, Setting, Language
          et sélectionner Français
          • cocher dans le menu Nettoyeur - onglet Windows :
          Internet Explorer: Fichiers Internet Temporaires, Cookies
          • Système: Vider la Poubelle, Fichiers Temporaires, Presse-papiers
          • Avancé: Vieilles données du Prefetch
          • Décocher dans le menu Options - sous-menu Avancé :
          Effacer uniquement les fichiers, du dossier temp de Windows, plus vieux que 48 heures
          • Cocher dans le menu Nettoyeur - onglet Applications : Internet: Sun Java
          • Cocher , si cela est possible, dans le menu Nettoyeur - onglet Applications :
          Firefox/Mozilla: Cache Internet, Cookies
          • Click sur Analyse
          • Click sur le bouton Lancer le nettoyage dans le menu Nettoyeur.
          • Click sur Registre
          • Sélectionner tout
          • Click sur Chercher des erreurs (En bas)

          Une fois le scan terminé sélectionner tout
          • Click sur Réparer les erreurs sélectionnées
          0
          2. lucas01 Auteur
            Même avec le nettoyage, les réparations, firefox continue toujours, j'ai Opera ainsi que Explorer, mais c'est toujours firefox qui mer** ...
            0
            1. totobetourne
              as tu essayer de le desinstaller et de le reinstaller?
              0
              2. totobetourne
                essaye alors cela, on va voir ce que cela donne.
                Télécharge SmitfraudFix
                Utilitaire de S!Ri: Moe et balltrap34
                http://telechargement.zebulon.fr/smitfraudfix.html
                et télécharge SmitfraudFix.exe.

                Exécute le en choisissant l’option 1,
                il va générer un rapport
                Copie/colle le sur le poste stp.
                0
                1. lucas01 Auteur
                  Heu oui merci mais le logiciel:
                  accès refusé
                  accès refusé
                  accès refusé
                  accès refusé
                  accès refusé
                  accès refusé
                  accès refusé
                  accès refusé
                  ...
                  0
                  1. lucas01 Auteur
                    Nen c'est bon :)

                    SmitFraudFix v2.424

                    Scan done at 11:17:56,75, 18/02/2010
                    Run from C:\Windows\system32\SmitfraudFix
                    OS: Microsoft Windows [version 6.0.6002] - Windows_NT
                    The filesystem type is NTFS
                    Fix run in normal mode

                    »»»»»»»»»»»»»»»»»»»»»»»» Process

                    C:\Windows\system32\csrss.exe
                    C:\Windows\system32\wininit.exe
                    C:\Windows\system32\csrss.exe
                    C:\Windows\system32\winlogon.exe
                    C:\Windows\system32\services.exe
                    C:\Windows\system32\lsass.exe
                    C:\Windows\system32\lsm.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\System32\svchost.exe
                    C:\Windows\System32\svchost.exe
                    C:\Windows\System32\svchost.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_fa807195\STacSV.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\system32\SLsvc.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\system32\svchost.exe
                    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                    C:\Program Files\Alwil Software\Avast4\ashServ.exe
                    C:\Windows\System32\spoolsv.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_fa807195\aestsrv.exe
                    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                    C:\Program Files\Bonjour\mDNSResponder.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\system32\svchost.exe
                    C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                    c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
                    C:\Program Files\NetLimiter 2 Monitor\nlsvc.exe
                    C:\Program Files\OO Software\Defrag\oodag.exe
                    C:\Windows\system32\svchost.exe
                    C:\Program Files\SMINST\BLService.exe
                    C:\Windows\system32\Dwm.exe
                    C:\Windows\Explorer.EXE
                    C:\Program Files\CyberLink\Shared files\RichVideo.exe
                    C:\Windows\system32\taskeng.exe
                    C:\Windows\System32\igfxtray.exe
                    C:\Windows\System32\hkcmd.exe
                    C:\Windows\System32\igfxpers.exe
                    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                    C:\Program Files\HP\QuickPlay\QPService.exe
                    c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
                    C:\Windows\system32\svchost.exe
                    C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe
                    C:\Program Files\Windows Defender\MSASCui.exe
                    C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
                    C:\Program Files\IDT\WDM\sttray.exe
                    C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                    C:\Program Files\Java\jre6\bin\jusched.exe
                    C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
                    C:\Windows\System32\wpcumi.exe
                    C:\Program Files\iTunes\iTunesHelper.exe
                    C:\Program Files\WeFi\WeFi.exe
                    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
                    C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
                    C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
                    C:\Windows\System32\svchost.exe
                    C:\Windows\system32\SearchIndexer.exe
                    C:\Program Files\NetLimiter 2 Monitor\NLClient.exe
                    C:\Windows\system32\taskeng.exe
                    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                    C:\Windows\system32\igfxsrvc.exe
                    C:\Windows\system32\wbem\unsecapp.exe
                    C:\Windows\system32\wbem\wmiprvse.exe
                    C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
                    C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
                    C:\Program Files\iPod\bin\iPodService.exe
                    C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
                    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
                    c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
                    C:\Windows\system32\svchost.exe
                    C:\Windows\system32\conime.exe
                    C:\Program Files\iTunes\iTunes.exe
                    C:\Windows\System32\svchost.exe
                    C:\Program Files\Opera\Opera.exe
                    C:\Program Files\Common Files\Adobe\Updater6\Adobe_Updater.exe
                    C:\Windows\system32\cmd.exe
                    C:\Program Files\Windows Mail\WinMail.exe
                    C:\Windows\system32\taskeng.exe
                    C:\Windows\system32\cmd.exe
                    C:\Windows\system32\wbem\wmiprvse.exe

                    »»»»»»»»»»»»»»»»»»»»»»»» hosts

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\Web

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\Windows\system32\LogFiles

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Lucas

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Lucas\AppData\Local\Temp

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Lucas\Application Data

                    »»»»»»»»»»»»»»»»»»»»»»»» Start Menu

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\Users\Lucas\FAVORI~1

                    »»»»»»»»»»»»»»»»»»»»»»»» Desktop

                    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

                    »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys

                    »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

                    »»»»»»»»»»»»»»»»»»»»»»»» o4Patch
                    !!!Attention, following keys are not inevitably infected!!!

                    o4Patch
                    Credits: Malware Analysis & Diagnostic
                    Code: S!Ri

                    »»»»»»»»»»»»»»»»»»»»»»»» IEDFix
                    !!!Attention, following keys are not inevitably infected!!!

                    IEDFix
                    Credits: Malware Analysis & Diagnostic
                    Code: S!Ri

                    »»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix
                    !!!Attention, following keys are not inevitably infected!!!

                    Agent.OMZ.Fix
                    Credits: Malware Analysis & Diagnostic
                    Code: S!Ri

                    »»»»»»»»»»»»»»»»»»»»»»»» VACFix
                    !!!Attention, following keys are not inevitably infected!!!

                    VACFix
                    Credits: Malware Analysis & Diagnostic
                    Code: S!Ri

                    »»»»»»»»»»»»»»»»»»»»»»»» 404Fix
                    !!!Attention, following keys are not inevitably infected!!!

                    404Fix
                    Credits: Malware Analysis & Diagnostic
                    Code: S!Ri

                    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
                    !!!Attention, following keys are not inevitably infected!!!

                    SrchSTS.exe by S!Ri
                    Search SharedTaskScheduler's .dll

                    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
                    !!!Attention, following keys are not inevitably infected!!!

                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                    "AppInit_DLLs"=""
                    "LoadAppInit_DLLs"=dword:00000001

                    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon
                    !!!Attention, following keys are not inevitably infected!!!

                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                    "Userinit"="C:\\Windows\\system32\\userinit.exe,"

                    »»»»»»»»»»»»»»»»»»»»»»»» RK

                    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]

                    »»»»»»»»»»»»»»»»»»»»»»»» DNS

                    Description: Atheros AR9285 802.11b/g WiFi Adapter
                    DNS Server Search Order: 192.168.1.1
                    DNS Server Search Order: 192.168.1.1

                    HKLM\SYSTEM\CCS\Services\Tcpip\..\{D5969906-15DE-4845-B23C-B368031E5FC8}: DhcpNameServer=212.27.40.241 212.27.40.240
                    HKLM\SYSTEM\CCS\Services\Tcpip\..\{E7372125-DD2B-437B-ADD7-D3083FA469E8}: DhcpNameServer=192.168.1.1 192.168.1.1
                    HKLM\SYSTEM\CS1\Services\Tcpip\..\{D5969906-15DE-4845-B23C-B368031E5FC8}: DhcpNameServer=212.27.40.241 212.27.40.240
                    HKLM\SYSTEM\CS1\Services\Tcpip\..\{E7372125-DD2B-437B-ADD7-D3083FA469E8}: DhcpNameServer=192.168.1.1 192.168.1.1
                    HKLM\SYSTEM\CS2\Services\Tcpip\..\{D5969906-15DE-4845-B23C-B368031E5FC8}: DhcpNameServer=212.27.40.241 212.27.40.240
                    HKLM\SYSTEM\CS2\Services\Tcpip\..\{E7372125-DD2B-437B-ADD7-D3083FA469E8}: DhcpNameServer=192.168.1.1 192.168.1.1
                    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1
                    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1
                    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 192.168.1.1

                    »»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection

                    »»»»»»»»»»»»»»»»»»»»»»»» End

                    MErci d'avance!
                    0
                    1. totobetourne
                      toujours rien avec smitfraud.as tu toujours les memes problemes?
                      0
                      1. lucas01 Auteur
                        Yes, toujours les mêmes avec firfox. En plus il vient de faire la mise à jour.

                        Avec safarie, opera, ie8, sa ne le fait pas...

                        Mais je pense que je vais devoir me séparer de firefox...
                        0
                        1. totobetourne
                          a priori je vois pas d infection mais je peux me tromper aussi , je suppose que c est ton ordi qui a des problemes par rapport a mozilla ,la la cause je ne la connais pas.

                          sinon va voir dans outils puis option de mozilla et regarde si il n y aurait pas quelquechose a modifier.autre possibilite.
                          0
                          Précédent
                          • 1
                          • 2

                          Discussions similaires

                          Softonic,est-ce un virus ?
                          techmel1

                          6 réponses
                          Chrome://newtab
                          Nova

                          14 réponses
                          Désinstaller Softonic
                          Diguimette

                          5 réponses
                          Supprimer New Tab
                          tysaozon

                          8 réponses
                          Virus dans filezilla
                          balnelius10

                          9 réponses