Fenetre "control center" pc bloq

bonjour

on va analyser ton pc.

Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

-> http://images.malwareremoval.com/random/RSIT.exe

! Déconnecte toi et ferme toutes tes applications en cours !

Double-clique sur " RSIT.exe " pour le lancer .

-> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

* Devant l'option "List files/folders created ..." , tu choisis : 2 months

* clique ensuite sur " Continue " pour lancer l'analyse ...

-> laisse faire le scan et ne touche pas au PC ...

Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).

Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

Important : poste un rapport, puis l'autre dans la réponse suivante
Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum

( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )

passe cela
pour voir télécharge combofix (par sUBs) ici :

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

et enregistre le sur le bureau.

déconnecte toi d'internet et ferme toutes tes applications.

désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)

double-clique sur combofix.exe et suis les instructions

à la fin, il va produire un rapport C:\ComboFix.txt

réactive ton parefeu, ton antivirus, la garde de ton antispyware

copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.

Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.

Tu as un tutoriel complet ici :

https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix

je n ai aucun accès pour désactiver les pare feux, anti virus et autres
je n ai pa le menu demarrer ni la barre d outil
j accede seulement sur les fichiers en passant par le gestionnaire de tache
et sur celui si je n ai pas acces au anti virus pares feu...
je peux quand meme faire la manip????

merci

tu as bien eu les 2 premieres copies, j ai que la deuxieme envoyé afficher sur l historique

fait la manip.

Salut je viens de faire la manip,tout est redevenu normal j ai le bureau et accès a tous, voici la copie
dis moi si tout te parait bon, je te remercie vraiment beaucoup...

ComboFix 10-02-24.01 - HP_Administrateur 27/02/2010 12:41:27.1.1 - x86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.33.1036.18.958.587 [GMT 1:00]
Lancé depuis: c:\documents and settings\HP_Administrateur\Bureau\ComboFix.exe
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\HP_Administrateur\Application Data\0200000072825c16810C.manifest
c:\documents and settings\HP_Administrateur\Application Data\0200000072825c16810O.manifest
c:\documents and settings\HP_Administrateur\Application Data\0200000072825c16810P.manifest
c:\documents and settings\HP_Administrateur\Application Data\0200000072825c16810S.manifest
c:\documents and settings\HP_Administrateur\Application Data\0200000072825c16816C.manifest
c:\documents and settings\HP_Administrateur\Application Data\0200000072825c16816O.manifest
c:\documents and settings\HP_Administrateur\Application Data\0200000072825c16816P.manifest
c:\documents and settings\HP_Administrateur\Application Data\0200000072825c16816S.manifest
c:\documents and settings\HP_Administrateur\Application Data\Control Manager
c:\documents and settings\HP_Administrateur\Application Data\Control Manager\ccmain.exe
c:\documents and settings\HP_Administrateur\Application Data\Control Manager\faq\guide.html
c:\documents and settings\HP_Administrateur\Application Data\Control Manager\faq\images\05.png
c:\documents and settings\HP_Administrateur\Application Data\Control Manager\faq\images\06.png
c:\documents and settings\HP_Administrateur\Application Data\Control Manager\faq\images\07.png
c:\documents and settings\HP_Administrateur\Application Data\Control Manager\faq\images\08.png
c:\documents and settings\HP_Administrateur\Application Data\Control Manager\faq\images\09.png
c:\documents and settings\HP_Administrateur\Application Data\Control Manager\faq\images\10.png
c:\documents and settings\HP_Administrateur\Application Data\Control Manager\settings.ini
c:\documents and settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\k3izpnsl.default\extensions\{feabd311-e314-44b5-a5ab-d7a01696f36f}
c:\documents and settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\k3izpnsl.default\extensions\{feabd311-e314-44b5-a5ab-d7a01696f36f}\chrome.manifest
c:\documents and settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\k3izpnsl.default\extensions\{feabd311-e314-44b5-a5ab-d7a01696f36f}\chrome\xulcache.jar
c:\documents and settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\k3izpnsl.default\extensions\{feabd311-e314-44b5-a5ab-d7a01696f36f}\defaults\preferences\xulcache.js
c:\documents and settings\HP_Administrateur\Application Data\Mozilla\Firefox\Profiles\k3izpnsl.default\extensions\{feabd311-e314-44b5-a5ab-d7a01696f36f}\install.rdf
c:\documents and settings\HP_Administrateur\Application Data\SystemProc
c:\program files\AntiMalware
c:\program files\Mozilla Firefox\extensions\{9CE11043-9A15-4207-A565-0C94C42D590D}
c:\program files\Mozilla Firefox\extensions\{9CE11043-9A15-4207-A565-0C94C42D590D}\chrome.manifest
c:\program files\Mozilla Firefox\extensions\{9CE11043-9A15-4207-A565-0C94C42D590D}\chrome\content\timer.xul
c:\program files\Mozilla Firefox\extensions\{9CE11043-9A15-4207-A565-0C94C42D590D}\install.rdf
c:\recycler\S-1-5-21-2831317574-4147631431-2441058544-1007
c:\windows\system32\985990326
c:\windows\system32\HdAudRes32.dll
c:\windows\system32\unrar.exe

.
((((((((((((((((((((((((((((( Fichiers créés du 2010-01-27 au 2010-02-27 ))))))))))))))))))))))))))))))))))))
.

2010-02-25 11:09 . 2010-02-25 11:09 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Temp
2010-02-25 06:15 . 2010-02-25 06:15 -------- d-----w- c:\windows\LastGood
2010-02-24 19:33 . 2010-02-24 19:33 -------- d-----w- C:\rsit
2010-02-24 19:33 . 2010-02-24 19:33 -------- d-----w- c:\program files\trend micro
2010-02-24 13:07 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe
2010-02-21 14:41 . 2010-02-23 22:41 -------- d-----w- c:\documents and settings\HP_Administrateur\Local Settings\Application Data\AskToolbar
2010-02-20 21:56 . 2010-02-20 21:56 -------- d-----w- C:\System Volume Data
2010-02-20 21:24 . 2010-02-20 21:24 225280 ----a-w- c:\documents and settings\HP_Administrateur\Application Data\LimeWire\browser\xulrunner\components\pipnss.dll
2010-02-20 21:24 . 2010-02-20 21:24 20992 ----a-w- c:\documents and settings\HP_Administrateur\Application Data\LimeWire\browser\xulrunner\components\pipboot.dll
2010-02-20 21:24 . 2010-02-20 21:24 19968 ----a-w- c:\documents and settings\HP_Administrateur\Application Data\LimeWire\browser\xulrunner\components\pippki.dll
2010-02-20 21:24 . 2010-02-20 21:24 20480 ----a-w- c:\documents and settings\HP_Administrateur\Application Data\LimeWire\browser\xulrunner\components\autoconfig.dll
2010-02-20 21:24 . 2010-02-20 21:24 18944 ----a-w- c:\documents and settings\HP_Administrateur\Application Data\LimeWire\browser\xulrunner\components\appshell_modal.dll
2010-02-20 21:24 . 2010-02-20 21:24 17408 ----a-w- c:\documents and settings\HP_Administrateur\Application Data\LimeWire\browser\xulrunner\components\auth.dll
2010-02-20 21:24 . 2010-02-20 21:24 8192 ----a-w- c:\documents and settings\HP_Administrateur\Application Data\LimeWire\browser\xulrunner\AccessibleMarshal.dll
2010-02-20 21:24 . 2010-02-20 21:24 20480 ----a-w- c:\documents and settings\HP_Administrateur\Application Data\LimeWire\browser\xulrunner\IA2Marshal.dll
2010-02-20 21:23 . 2010-02-23 18:44 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\LimeWire
2010-02-20 21:23 . 2010-02-20 21:23 -------- d-----w- c:\program files\LimeWire
2010-02-16 17:22 . 2010-02-17 13:22 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\Apple Computer
2010-02-16 17:21 . 2009-05-18 13:17 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2010-02-16 17:21 . 2008-04-17 12:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll
2010-02-16 17:20 . 2010-02-16 17:20 -------- d-----w- c:\program files\iPod
2010-02-16 17:20 . 2010-02-16 17:21 -------- d-----w- c:\program files\iTunes
2010-02-16 17:20 . 2010-02-16 17:21 -------- d-----w- c:\documents and settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
2010-02-16 17:20 . 2010-02-16 17:20 -------- d-----w- c:\program files\Bonjour
2010-02-16 17:18 . 2010-02-16 17:18 -------- d-----w- c:\documents and settings\HP_Administrateur\Local Settings\Application Data\Apple
2010-02-16 17:17 . 2010-02-16 17:20 -------- d-----w- c:\program files\Fichiers communs\Apple
2010-02-16 17:17 . 2010-02-21 15:38 -------- d-----w- c:\documents and settings\HP_Administrateur\Local Settings\Application Data\Apple Computer
2010-02-11 12:09 . 2010-02-11 12:09 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Google
2010-02-11 12:04 . 2010-02-11 12:04 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Google

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-23 08:00 . 2010-02-23 07:59 750592 --sha-w- c:\windows\system32\38E.tmp
2010-02-22 11:29 . 2010-02-22 11:29 0 ----a-w- c:\windows\system32\38D.tmp
2010-02-21 15:09 . 2010-02-21 15:09 749568 --sha-w- c:\windows\system32\45.tmp
2010-02-21 15:08 . 2010-02-21 15:08 806400 --sha-w- c:\windows\system32\44.tmp
2010-02-20 21:56 . 2010-02-20 21:56 749568 --sha-w- c:\windows\system32\101.tmp
2010-02-20 21:56 . 2010-02-20 21:55 806400 --sha-w- c:\windows\system32\FE.tmp
2010-02-20 21:26 . 2010-02-20 21:25 -------- d-----w- c:\program files\Ask.com
2010-02-17 14:20 . 2008-12-30 01:41 1 ----a-w- c:\documents and settings\HP_Administrateur\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-02-16 17:20 . 2007-12-11 13:29 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
2010-02-16 17:19 . 2007-12-11 13:29 -------- d-----w- c:\program files\QuickTime
2010-02-16 17:18 . 2007-12-11 13:29 -------- d-----w- c:\program files\Apple Software Update
2010-02-11 12:04 . 2006-09-12 04:03 -------- d-----w- c:\program files\Google
2010-01-31 13:25 . 2009-11-27 13:50 79488 ----a-w- c:\documents and settings\HP_Administrateur\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2010-01-24 14:02 . 2008-12-07 16:09 -------- d-----w- c:\documents and settings\HP_Administrateur\Application Data\OpenOffice.org2
2010-01-24 13:59 . 2008-12-30 23:12 1 ----a-w- c:\documents and settings\HP_Administrateur\Application Data\OpenOffice.org2\user\uno_packages\cache\stamp.sys
2010-01-22 18:51 . 2010-01-22 18:51 72488 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 9.0.3.15\SetupAdmin.exe
2010-01-21 09:27 . 2009-11-07 21:04 -------- d-----w- c:\program files\Microsoft Silverlight
2009-12-31 16:14 . 2004-08-10 11:00 352640 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-22 05:35 . 2004-08-10 11:00 672768 ----a-w- c:\windows\system32\wininet.dll
2009-12-22 05:35 . 2004-08-10 11:00 81920 ----a-w- c:\windows\system32\ieencode.dll
2009-12-18 19:14 . 2009-12-17 14:44 286720 ----a-w- c:\windows\iun507.exe
2009-12-17 07:59 . 2004-08-10 11:00 347648 ----a-w- c:\windows\system32\mspaint.exe
2009-12-16 17:20 . 2008-12-03 17:34 53144 ----a-w- c:\documents and settings\HP_Administrateur\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-12-15 18:21 . 2005-10-10 11:39 85396 ----a-w- c:\windows\system32\perfc00C.dat
2009-12-15 18:21 . 2005-10-10 11:39 511874 ----a-w- c:\windows\system32\perfh00C.dat
2009-12-14 07:36 . 2004-08-10 11:00 33280 ----a-w- c:\windows\system32\csrsrv.dll
2009-12-09 10:26 . 2004-08-10 11:00 2059776 ----a-w- c:\windows\system32\ntkrnlpa.exe
2009-12-09 10:26 . 2004-08-10 11:00 2182400 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-12-04 14:41 . 2004-08-10 11:00 453760 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2009-12-03 15:14 . 2009-12-23 18:29 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-03 15:13 . 2009-12-23 18:29 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-12-02 20:50 . 2009-12-02 20:50 1924440 ----a-w- c:\documents and settings\HP_Administrateur\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdatepl\fpupdatepl.exe
2007-01-01 10:47 . 2007-01-01 10:47 753664 --sha-w- c:\program files\ehthumbs.db
2008-12-19 17:36 . 2008-04-26 17:17 67688 ----a-w- c:\program files\mozilla firefox\components\jar50.dll
2008-12-19 17:36 . 2008-04-26 17:17 54368 ----a-w- c:\program files\mozilla firefox\components\jsd3250.dll
2008-12-19 17:36 . 2008-12-05 16:03 34944 ----a-w- c:\program files\mozilla firefox\components\myspell.dll
2008-12-19 17:36 . 2008-12-05 16:03 46712 ----a-w- c:\program files\mozilla firefox\components\spellchk.dll
2008-12-19 17:36 . 2008-04-26 17:17 172136 ----a-w- c:\program files\mozilla firefox\components\xpinstal.dll
2007-01-04 05:15 . 2007-01-03 21:15 22 --sha-w- c:\windows\SMINST\HPCD.sys
.

((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2010-02-04 15:50 1197448 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-02-04 1197448]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-02-04 1197448]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 3883856]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-06-19 68856]
"eMuleAutoStart"="c:\program files\eMule\emule.exe" [2009-02-22 5668864]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"="c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe" [2009-10-28 257440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
"ftutil2"="ftutil2.dll" [2004-06-07 106496]
"RTHDCPL"="RTHDCPL.EXE" [2006-07-21 16261632]
"AlwaysReady Power Message APP"="ARPWRMSG.EXE" [2005-08-03 77312]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-05-09 7311360]
"nwiz"="nwiz.exe" [2006-05-09 1519616]
"DMAScheduler"="c:\program files\HP DigitalMedia Archive\DMAScheduler.exe" [2006-04-13 90112]
"Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2005-07-22 237568]
"HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2006-02-15 249856]
"HP Software Update"="c:\program files\HP\HP Software Update\HPwuSchd2.exe" [2005-02-17 49152]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2006-09-12 180269]
"snpstd3"="c:\windows\vsnpstd3.exe" [2006-09-19 827392]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-05-13 148888]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-11-10 417792]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-12-03 1394000]

c:\documents and settings\HP_Administrateur\Menu D‚marrer\Programmes\D‚marrage\
LimeWire On Startup.lnk - c:\program files\LimeWire\LimeWire.exe [2010-2-19 503808]
msconfig32.exe [2004-8-10 39424]
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2008-9-12 384000]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\GigaTribe\\gigatribe.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\LimeWire\\LimeWire.exe"=

R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [07/11/2009 22:04 54752]
S2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [11/02/2010 13:04 135664]
S3 fsssvc;Service Windows Live Contrôle parental;c:\program files\Windows Live\Family Safety\fsssvc.exe [05/08/2009 22:48 704864]
.
Contenu du dossier 'Tâches planifiées'

2010-02-23 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2010-02-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-11 12:04]

2010-02-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-11 12:04]

2010-02-27 c:\windows\Tasks\Scheduled Update for Ask Toolbar.job
- c:\program files\Ask.com\UpdateTask.exe [2010-02-04 15:50]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://www.nixud.com/
mStart Page = hxxp://www.nixud.com/
uInternet Settings,ProxyOverride = *.local
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
IE: {{d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\HP_Administrateur\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk
.
- - - - ORPHELINS SUPPRIMES - - - -

HKCU-Run-FlyAway - c:\documents and settings\HP_Administrateur\Bureau\manitou_2\a_emporter\clé\Nouveau dossier\Pamela.exe
HKLM-Run-PCDrProfiler - (no file)

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-27 12:49
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
Heure de fin: 2010-02-27 12:51:09
ComboFix-quarantined-files.txt 2010-02-27 11:50
ComboFix2.txt 2008-03-27 18:46

Avant-CF: 482 074 624 octets libres
Après-CF: 732 557 312 octets libres

- - End Of File - - 9BDC2D7CA1E95D0EE07A683D91B86C69

c est pas fini encore des infections a enlever.

1)telecharge cela et fait le fonctionner en option S.colle le rapport.

http://pagesperso-orange.fr/NosTools/C_XX/AD-R.exe

Déconnectes toi et fermes toutes applications en cours !

Relances "Ad-remover" : au menu principal choisi l'option "L" .
? Ensuite coche: (le numero devant et entree)

Boonty/Boonty Games
eorezo
.......
Puis "S"

le programme va travailler ...

Postes le rapport qui apparait à la fin + un nouvel Hijackthis pour analyse ...

( le rapport est sauvegardé aussi sous C:\Ad-report.log )

/!\ Si le Bureau ne réapparait pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tapes explorer.exe et valides) /!\

2)passe cet antimalware, fait comme indique
Telecharges malwaresbytes antimalwares(MBAM) : egalement tres util sur pb de pub mais pas tous malheureusement

Malwarebytes Anti-Malware: http://www.malwarebytes.org/mbam/program/mbam-setup.exe

Tutoriel Malwarebytes Anti-Malware: https://forum.pcastuces.com/malwarebytes_antimalwares___tutoriel-f31s3.htm
fais comme indique,mise a jour , scan complet et le rapport.
COLLE LE RAPPORT APRES SUPPRESSION MERCI.

garde le et lance un scan tout les mois comme indique.

si tu as ad aware tu peux desinstalle car il ne reconnait plus grand chose.

.Rapport options S comme tu me la demandé....

======= RAPPORT D'AD-REMOVER 1.1.4.6_J | UNIQUEMENT XP/VISTA/7 =======
.
Mis à jour par C_XX le 05.02.2010 à 17:34
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 19:28:14, 27/02/2010 | Mode Normal | Option: SCAN
Exécuté de: C:\Ad-Remover\
Système d'exploitation: Microsoft® Windows XP™ Service Pack 2 v5.1.2600
Nom du PC: NOM-FB9B15D2723 | Utilisateur actuel: HP_Administrateur
.
============== ÉLÉMENT(S) TROUVÉ(S) ==============
.

C:\DOCUME~1\HP_ADM~1\APPLIC~1\Mozilla\FireFox\Profiles\k3izpnsl.default\extensions\toolbar@ask.com
C:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
C:\Program Files\Ask.com
C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\AskToolbar
.
HKCU\software\appdatalow\AskToolbarInfo
HKCU\software\Ask.com
HKCU\software\AskToolbar
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0E5CBF21-D15F-11D0-8301-00AA005B4383}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
HKLM\software\classes\appid\GenericAskToolbar.DLL
HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\software\classes\GenericAskToolbar.ToolbarWnd
HKLM\software\classes\GenericAskToolbar.ToolbarWnd.1
HKLM\software\classes\installer\Products\A28B4D68DEBAA244EB686953B7074FEF
HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
HKLM\software\microsoft\windows\currentversion\uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
HKU\s-1-5-21-1049550170-2789932406-1137061892-1007\software\appdatalow\AskToolbarInfo
HKU\s-1-5-21-1049550170-2789932406-1137061892-1007\software\Ask.com
HKU\s-1-5-21-1049550170-2789932406-1137061892-1007\software\AskToolbar
.
============== Scan additionnel ==============
.
.
* Mozilla FireFox Version 2.0.0.20 [fr] *
.
Nom du profil: k3izpnsl.default (HP_Administrateur)
.
.
(HP_ADM~1, prefs.js) TROUVE - Extensions.asktb.cbid, HS
(HP_ADM~1, prefs.js) TROUVE - Extensions.asktb.default-channel-url-mask, hxxp://www.ask.com/web?q={query}&o={o}&l={l}&qsrc={qsrc}&alwb=y
(HP_ADM~1, prefs.js) TROUVE - Extensions.asktb.first-launch-url, hxxp://www.limewire.com/download/pro?fromFirstRun=true&bgcolor=%23ebe9ed&guid=6A67831BA1A942A7E30DEF7524663F00&pro=false&lang=fr&lv=5.4.8&jv=1.6.0_13&os=Windows+XP&osv=5.1&sc=1&al=false&arch=x86&ref=lwn8&sdmn=true&gs=7
(HP_ADM~1, prefs.js) TROUVE - Extensions.asktb.fresh-install, false
(HP_ADM~1, prefs.js) TROUVE - Extensions.asktb.l, dis
(HP_ADM~1, prefs.js) TROUVE - Extensions.asktb.last-config-req, 1267277010796
(HP_ADM~1, prefs.js) TROUVE - Extensions.asktb.locale, en_US
(HP_ADM~1, prefs.js) TROUVE - Extensions.asktb.o, 15753
(HP_ADM~1, prefs.js) TROUVE - Extensions.asktb.overlay-reloaded-using-restart, true
(HP_ADM~1, prefs.js) TROUVE - Extensions.asktb.qsrc, 2871
(HP_ADM~1, prefs.js) TROUVE - Extensions.asktb.r, 4
.
.
.
* Internet Explorer Version 6.0.2900.2180 *
.
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
.
Do404Search: 01000000
Local Page: C:\WINDOWS\system32\blank.htm
Show_ToolBar: yes
Start Page: hxxp://www.nixud.com/
Enable Browser Extensions: yes
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Use Custom Search URL: 1 (0x1)
Use Search Asst: no
Search Page: hxxp://www.google.com
Search Bar: hxxp://www.google.com/ie
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
.
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Default_Search_URL: hxxp://www.google.com/ie
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Delete_Temp_Files_On_Exit: yes
Local Page: %SystemRoot%\system32\blank.htm
Start Page: hxxp://www.nixud.com/
Search Bar: hxxp://search.msn.com/spbasic.htm
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
.
===================================
.
4918 Octet(s) - C:\Ad-Report-CLEAN[1].log
7295 Octet(s) - C:\Ad-Report-SCAN[1].log
.
34 Fichier(s) - C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp
2 Fichier(s) - C:\WINDOWS\Temp
59 Fichier(s) - C:\WINDOWS\Prefetch
.
3 Fichier(s) - C:\Ad-Remover\BACKUP
0 Fichier(s) - C:\Ad-Remover\QUARANTINE
.
Fin à: 19:35:54 | 27/02/2010 - SCAN[1]
.
============== E.O.F ==============
.

.voici le deuxieme option L

======= RAPPORT D'AD-REMOVER 1.1.4.6_J | UNIQUEMENT XP/VISTA/7 =======
.
Mis à jour par C_XX le 05.02.2010 à 17:34
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 19:49:20, 27/02/2010 | Mode Normal | Option: CLEAN
Exécuté de: C:\Ad-Remover\
Système d'exploitation: Microsoft® Windows XP™ Service Pack 2 v5.1.2600
Nom du PC: NOM-FB9B15D2723 | Utilisateur actuel: HP_Administrateur
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.

C:\DOCUME~1\HP_ADM~1\APPLIC~1\Mozilla\FireFox\Profiles\k3izpnsl.default\extensions\toolbar@ask.com
C:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
C:\Program Files\Ask.com
C:\Documents and Settings\HP_Administrateur\Local Settings\Application Data\AskToolbar

(!) -- Fichiers temporaires supprimés.

.
HKCU\software\appdatalow\AskToolbarInfo
HKCU\software\Ask.com
HKCU\software\AskToolbar
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0E5CBF21-D15F-11D0-8301-00AA005B4383}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
HKLM\software\classes\appid\GenericAskToolbar.DLL
HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\software\classes\GenericAskToolbar.ToolbarWnd
HKLM\software\classes\GenericAskToolbar.ToolbarWnd.1
HKLM\software\classes\installer\Products\A28B4D68DEBAA244EB686953B7074FEF
HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
HKLM\software\microsoft\windows\currentversion\uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
.
============== Scan additionnel ==============
.
.
* Mozilla FireFox Version 2.0.0.20 [fr] *
.
Nom du profil: k3izpnsl.default (HP_Administrateur)
.
.
(HP_ADM~1, prefs.js) EFFACE - Extensions.asktb.cbid, HS
(HP_ADM~1, prefs.js) EFFACE - Extensions.asktb.default-channel-url-mask, hxxp://www.ask.com/web?q={query}&o={o}&l={l}&qsrc={qsrc}&alwb=y
(HP_ADM~1, prefs.js) EFFACE - Extensions.asktb.first-launch-url, hxxp://www.limewire.com/download/pro?fromFirstRun=true&bgcolor=%23ebe9ed&guid=6A67831BA1A942A7E30DEF7524663F00&pro=false&lang=fr&lv=5.4.8&jv=1.6.0_13&os=Windows+XP&osv=5.1&sc=1&al=false&arch=x86&ref=lwn8&sdmn=true&gs=7
(HP_ADM~1, prefs.js) EFFACE - Extensions.asktb.fresh-install, false
(HP_ADM~1, prefs.js) EFFACE - Extensions.asktb.l, dis
(HP_ADM~1, prefs.js) EFFACE - Extensions.asktb.last-config-req, 1267277010796
(HP_ADM~1, prefs.js) EFFACE - Extensions.asktb.locale, en_US
(HP_ADM~1, prefs.js) EFFACE - Extensions.asktb.o, 15753
(HP_ADM~1, prefs.js) EFFACE - Extensions.asktb.overlay-reloaded-using-restart, true
(HP_ADM~1, prefs.js) EFFACE - Extensions.asktb.qsrc, 2871
(HP_ADM~1, prefs.js) EFFACE - Extensions.asktb.r, 4
.
.
.
* Internet Explorer Version 6.0.2900.2180 *
.
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
.
Do404Search: 01000000
Local Page: C:\WINDOWS\system32\blank.htm
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Enable Browser Extensions: yes
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Use Custom Search URL: 1 (0x1)
Use Search Asst: no
Search Bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
.
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: %SystemRoot%\system32\blank.htm
Start Page: hxxp://fr.msn.com/
Search Bar: hxxp://search.msn.com/spbasic.htm
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
.
===================================
.
4918 Octet(s) - C:\Ad-Report-CLEAN[1].log
7061 Octet(s) - C:\Ad-Report-CLEAN[2].log
7632 Octet(s) - C:\Ad-Report-SCAN[1].log
.
34 Fichier(s) - C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp
2 Fichier(s) - C:\WINDOWS\Temp
11 Fichier(s) - C:\WINDOWS\Prefetch
.
20 Fichier(s) - C:\Ad-Remover\BACKUP
144 Fichier(s) - C:\Ad-Remover\QUARANTINE
.
Fin à: 19:54:41 | 27/02/2010 - CLEAN[2]
.
============== E.O.F ==============
.

.voici re l option S

======= RAPPORT D'AD-REMOVER 1.1.4.6_J | UNIQUEMENT XP/VISTA/7 =======
.
Mis à jour par C_XX le 05.02.2010 à 17:34
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 20:19:22, 27/02/2010 | Mode Normal | Option: SCAN
Exécuté de: C:\Ad-Remover\
Système d'exploitation: Microsoft® Windows XP™ Service Pack 2 v5.1.2600
Nom du PC: NOM-FB9B15D2723 | Utilisateur actuel: HP_Administrateur
.
============== ÉLÉMENT(S) TROUVÉ(S) ==============
.

.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{0E5CBF21-D15F-11D0-8301-00AA005B4383}
.
============== Scan additionnel ==============
.
.
* Mozilla FireFox Version 2.0.0.20 [fr] *
.
Nom du profil: k3izpnsl.default (HP_Administrateur)
.
.
.
.
* Internet Explorer Version 6.0.2900.2180 *
.
[HKEY_CURRENT_USER\..\Internet Explorer\Main]
.
Do404Search: 01000000
Local Page: C:\WINDOWS\system32\blank.htm
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Enable Browser Extensions: yes
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Use Custom Search URL: 1 (0x1)
Use Search Asst: no
Search Bar: hxxp://www.google.com/ie
Default_page_url: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Search Page: hxxp://www.google.com
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
.
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.google.com/ie
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: %SystemRoot%\system32\blank.htm
Start Page: hxxp://fr.msn.com/
Search Bar: hxxp://search.msn.com/spbasic.htm
.
[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
.
===================================
.
4918 Octet(s) - C:\Ad-Report-CLEAN[1].log
7446 Octet(s) - C:\Ad-Report-CLEAN[2].log
7632 Octet(s) - C:\Ad-Report-SCAN[1].log
2021 Octet(s) - C:\Ad-Report-SCAN[2].log
.
30 Fichier(s) - C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp
2 Fichier(s) - C:\WINDOWS\Temp
44 Fichier(s) - C:\WINDOWS\Prefetch
.
21 Fichier(s) - C:\Ad-Remover\BACKUP
144 Fichier(s) - C:\Ad-Remover\QUARANTINE
.
Fin à: 20:27:48 | 27/02/2010 - SCAN[2]
.
============== E.O.F ==============
.

ok j attend le 2) du message 8 , colle le rapport , merci.

apres tu me refais un rapport rsit , merci.