Pub indesirables

titheo -  
 titheo -

bonjours .
voila mon souci ,des fenetres de pub s'ouvrent en permanence que dois je faire pour arreter tout cela.
merci de vos reponses

17 réponses

  1. gen-hackman
     
    bonjour :

    DESACTIVE TON ANTIVIRUS ET TON PAREFEU SI PRESENTS !!!!!(car il est detecté a tort comme infection)

    ▶ Télécharge List_Kill'em et enregistre le sur ton bureau

    double clique ( clic droit "executer en tant qu'administrateur" pour Vista/7 ) sur le raccourci sur ton bureau pour lancer l'installation

    une fois terminée , clic sur "terminer" et le programme se lancera seul

    choisis l'option Search

    un icone blanc et noir va s'afficher sur le bureau , il te servira à relancer le programme par la suite.
    un autre rouge et noir te servira a desinstaller le prog a la fin de la desinfection.

    ▶ laisse travailler l'outil

    à l'apparition de la fenetre blanche , c'est un peu long , c'est normal , le programme n'est pas bloqué.

    un rapport du nom de catchme apparait sur ton bureau , ignore-le,ne le poste pas , , il s'auto supprimera a la fin du scan

    ▶ Poste le contenu du rapport qui s'ouvre aux 100 % du scan à l'ecran "COMPLETED"

    0
  2. titheo
     
    comment poster le resultat de l analyse
    0
  4. titheo
     
    faut il copier le resultat de la fenetre blanche
    marquee list'em
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. gen-hackman
     
    oui toutes les infos qui se sont affichées a la fin du scan

    ctrl + A pour tout selectionner

    ctrl + C pour enregistrer la copie dans la souris ,

    clique là ou tu veux ecrire dans ta reponse , et ctrl + V pour tout coller
    0
  7. titheo
     
    voici le resultat
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{2E381D29-398E-4E14-B978-05C5E7F6958C}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{2E381D29-398E-4E14-B978-05C5E7F6958C}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{2E381D29-398E-4E14-B978-05C5E7F6958C}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{2E381D29-398E-4E14-B978-05C5E7F6958C}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{2E381D29-398E-4E14-B978-05C5E7F6958C}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{2E381D29-398E-4E14-B978-05C5E7F6958C}: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1
    0
  8. gen-hackman
     
    tu ne l'as pas executé avec le clic droit "executer en tant que....." à l installation

    ferme le si ce n'est fait et clique sur l'icone blanc et noir qui s'est affiché sur ton bureau avec le clic droit "executer en tant que......" et relance l'option search
    0
  9. titheo
     
    je n arrive pas a renvoyer le resultat
    0
  11. titheo
     
    http://www.cijoint.fr/cjlink.php?file=cj201004/cijOsA175o.txt
    0
  12. gen-hackman
     
    bien on va deja utiliser un outil adequat pour un infection qui n'est pas totalement contrôlée par mon outil :

    ▶ Télécharge Ad-remover ( de C_XX ) sur ton bureau :

    ▶ Déconnecte toi et ferme toutes applications en cours !

    ▶ clic droit sur "Ad-R.exe" en tant qu'administrateur pour lancer l'installation et laisse les paramètres d'installation par défaut .

    ▶ clic droit sur le raccourci Ad-remover en tant qu'administrateur qui est sur ton bureau pour lancer l'outil .

    ▶ Au menu principal choisis "option Nettoyer" et tape sur [entrée] .

    ▶ Laisse travailler l'outil et ne touche à rien ...

    ▶ Poste le rapport qui apparait à la fin , sur le forum ...

    ( Le rapport est sauvegardé aussi sous C:\Ad-report.log )
    ( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

    ▶ Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
    Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
    Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
    0
  13. titheo
     
    comment puisje retrouver le rapport d adr merci
    0
  14. gen-hackman
     
    c'est indiqué dans mes instructions
    0
  15. titheo
     
    .
    ======= RAPPORT D'AD-REMOVER 2.0.0.0,B | UNIQUEMENT XP/VISTA/7 =======
    .
    Mis à jour par C_XX le 31/03/10 à 21:30
    Contact: AdRemover.contact@gmail.com
    Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
    .
    Lancé à: 18:35:08 le 18/04/2010 | Mode normal | Option: CLEAN
    Exécuté de: C:\Ad-Remover\ADR.exe
    SE: Microsoft® Windows Vista(TM) HomePremium Service Pack 2 - X86
    Nom du PC: PC-DE-HP | Utilisateur actuel: hp (Administrateur)
    .
    ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
    .
    Service: *MyWebSearchService*
    .
    C:\Program Files\FunWebProducts
    C:\Program Files\Mozilla FireFox\chrome\m3ffxtbr.jar
    C:\Program Files\Mozilla FireFox\chrome\m3ffxtbr.manifest
    C:\Program Files\Mozilla FireFox\Plugins\NPMyWebS.dll
    C:\Program Files\MyWebSearch
    C:\Program Files\ShoppingReport
    C:\Program Files\Viewpoint
    C:\Program Files\Windows Live\Messenger\Msimg32.dll
    C:\Program Files\Windows Live\Messenger\Riched20.dll
    C:\ProgramData\Games-Attack
    C:\ProgramData\Viewpoint
    C:\Users\hp\AppData\Local\psbgaj.dat
    C:\Users\hp\AppData\Local\psbgaj.exe
    C:\Users\hp\AppData\Local\psbgaj_nav.dat
    C:\Users\hp\AppData\Local\psbgaj_navps.dat
    C:\Users\hp\AppData\Local\rokgros.bat
    C:\Users\hp\AppData\Local\Temp\kiwee_toolbar_installer.exe
    C:\Users\hp\AppData\LocalLow\FunWebProducts
    C:\Users\hp\AppData\LocalLow\Kiwee Toolbar
    C:\Users\hp\AppData\LocalLow\MyWebSearch
    C:\Users\hp\AppData\LocalLow\ShoppingReport
    C:\Users\hp\AppData\Roaming\Mozilla\FireFox\Profiles\pyjd9t7v.default\searchplugins\mywebsearch.xml
    C:\Users\hp\AppData\Roaming\Mozilla\FireFox\Profiles\pyjd9t7v.default\searchplugins\sweetim.xml
    C:\Windows\system32\f3PSSavr.scr

    (!) -- Fichiers temporaires supprimés.
    .
    HKCU\Software\AppDataLow\Software\Fun Web Products
    HKCU\Software\AppDataLow\Software\FunWebProducts
    HKCU\Software\AppDataLow\Software\MyWebSearch
    HKCU\Software\AppDataLow\Software\ShoppingReport
    HKCU\Software\fcn
    HKCU\Software\Microsoft\Internet Explorer\Explorer Bars\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE}
    HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Search
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{00A6FAF1-072E-44cf-8957-5838F569A31D}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{100EB1FD-D03E-47FD-81F3-EE91287F9465}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44cf-8957-5838F569A31D}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF6-072E-44cf-8957-5838F569A31D}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{03F998B2-0E00-11D3-A498-00104B6EB52E}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{100EB1FD-D03E-47FD-81F3-EE91287F9465}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25560540-9571-4D7B-9389-0F166788785A}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4260e0cc-0f75-462e-88a3-1e05c248bf4c}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9FF05104-B030-46FC-94B8-81276E4E27DF}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C5428486-50A0-4A02-9D20-520B59A9F9B2}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C5428486-50A0-4A02-9D20-520B59A9F9B3}
    HKCU\Software\MyWebSearch
    HKCU\Software\ShoppingReport
    HKCU\Software\soft2PC
    HKLM\Software\Classes\AxMetaStream.MetaStreamCtl
    HKLM\Software\Classes\AxMetaStream.MetaStreamCtl.1
    HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary
    HKLM\Software\Classes\AxMetaStream.MetaStreamCtlSecondary.1
    HKLM\Software\Classes\CLSID\{00A6FAF1-072E-44cf-8957-5838F569A31D}
    HKLM\Software\Classes\CLSID\{00A6FAF6-072E-44cf-8957-5838F569A31D}
    HKLM\Software\Classes\CLSID\{03F998B2-0E00-11D3-A498-00104B6EB52E}
    HKLM\Software\Classes\CLSID\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
    HKLM\Software\Classes\CLSID\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
    HKLM\Software\Classes\CLSID\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
    HKLM\Software\Classes\CLSID\{0F8ECF4F-3646-4C3A-8881-8E138FFCAF70}
    HKLM\Software\Classes\CLSID\{100EB1FD-D03E-47FD-81F3-EE91287F9465}
    HKLM\Software\Classes\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239}
    HKLM\Software\Classes\CLSID\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
    HKLM\Software\Classes\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC}
    HKLM\Software\Classes\CLSID\{20EA9658-6BC3-4599-A87D-6371FE9295FC}
    HKLM\Software\Classes\CLSID\{25560540-9571-4D7B-9389-0F166788785A}
    HKLM\Software\Classes\CLSID\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
    HKLM\Software\Classes\CLSID\{3E720452-B472-4954-B7AA-33069EB53906}
    HKLM\Software\Classes\CLSID\{4260e0cc-0f75-462e-88a3-1e05c248bf4c}
    HKLM\Software\Classes\CLSID\{53CED2D0-5E9A-4761-9005-648404E6F7E5}
    HKLM\Software\Classes\CLSID\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
    HKLM\Software\Classes\CLSID\{67FA02C4-AB30-4e77-A640-78EE8EC8673B}
    HKLM\Software\Classes\CLSID\{7473D292-B7BB-4f24-AE82-7E2CE94BB6A9}
    HKLM\Software\Classes\CLSID\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}
    HKLM\Software\Classes\CLSID\{7473D296-B7BB-4f24-AE82-7E2CE94BB6A9}
    HKLM\Software\Classes\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983}
    HKLM\Software\Classes\CLSID\{8E6F1832-9607-4440-8530-13BE7C4B1D14}
    HKLM\Software\Classes\CLSID\{938AA51A-996C-4884-98CE-80DD16A5C9DA}
    HKLM\Software\Classes\CLSID\{98D9753D-D73B-42D5-8C85-4469CDA897AB}
    HKLM\Software\Classes\CLSID\{9FF05104-B030-46FC-94B8-81276E4E27DF}
    HKLM\Software\Classes\CLSID\{A16AD1E9-F69A-45AF-9462-B1C286708842}
    HKLM\Software\Classes\CLSID\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE}
    HKLM\Software\Classes\CLSID\{A9571378-68A1-443d-B082-284F960C6D17}
    HKLM\Software\Classes\CLSID\{ADB01E81-3C79-4272-A0F1-7B2BE7A782DC}
    HKLM\Software\Classes\CLSID\{B813095C-81C0-4E40-AA14-67520372B987}
    HKLM\Software\Classes\CLSID\{C9CCBB35-D123-4A31-AFFC-9B2933132116}
    HKLM\Software\Classes\CLSID\{C9D7BE3E-141A-4C85-8CD6-32461F3DF2C7}
    HKLM\Software\Classes\CLSID\{CFF4CE82-3AA2-451F-9B77-7165605FB835}
    HKLM\Software\Classes\CLSID\{D9FFFB27-D62A-4D64-8CEC-1FF006528805}
    HKLM\Software\Classes\CLSID\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}
    HKLM\Software\Classes\FunWebProducts.DataControl
    HKLM\Software\Classes\FunWebProducts.DataControl.1
    HKLM\Software\Classes\FunWebProducts.HistoryKillerScheduler
    HKLM\Software\Classes\FunWebProducts.HistoryKillerScheduler.1
    HKLM\Software\Classes\FunWebProducts.HistorySwatterControlBar
    HKLM\Software\Classes\FunWebProducts.HistorySwatterControlBar.1
    HKLM\Software\Classes\FunWebProducts.HTMLMenu
    HKLM\Software\Classes\FunWebProducts.HTMLMenu.1
    HKLM\Software\Classes\FunWebProducts.HTMLMenu.2
    HKLM\Software\Classes\FunWebProducts.IECookiesManager
    HKLM\Software\Classes\FunWebProducts.IECookiesManager.1
    HKLM\Software\Classes\FunWebProducts.KillerObjManager
    HKLM\Software\Classes\FunWebProducts.KillerObjManager.1
    HKLM\Software\Classes\FunWebProducts.PopSwatterBarButton
    HKLM\Software\Classes\FunWebProducts.PopSwatterBarButton.1
    HKLM\Software\Classes\FunWebProducts.PopSwatterSettingsControl
    HKLM\Software\Classes\FunWebProducts.PopSwatterSettingsControl.1
    HKLM\Software\Classes\Interface\{07B18EAA-A523-4961-B6BB-170DE4475CCA}
    HKLM\Software\Classes\Interface\{07B18EAC-A523-4961-B6BB-170DE4475CCA}
    HKLM\Software\Classes\Interface\{1093995A-BA37-41D2-836E-091067C4AD17}
    HKLM\Software\Classes\Interface\{120927BF-1700-43BC-810F-FAB92549B390}
    HKLM\Software\Classes\Interface\{17DE5E5E-BFE3-4E83-8E1F-8755795359EC}
    HKLM\Software\Classes\Interface\{1F52A5FA-A705-4415-B975-88503B291728}
    HKLM\Software\Classes\Interface\{247A115F-06C2-4FB3-967D-2D62D3CF4F0A}
    HKLM\Software\Classes\Interface\{2E3537FC-CF2F-4F56-AF54-5A6A3DD375CC}
    HKLM\Software\Classes\Interface\{2E9937FC-CF2F-4F56-AF54-5A6A3DD375CC}
    HKLM\Software\Classes\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495}
    HKLM\Software\Classes\Interface\{3E53E2CB-86DB-4A4A-8BD9-FFEB7A64DF82}
    HKLM\Software\Classes\Interface\{3E720451-B472-4954-B7AA-33069EB53906}
    HKLM\Software\Classes\Interface\{3E720453-B472-4954-B7AA-33069EB53906}
    HKLM\Software\Classes\Interface\{63D0ED2B-B45B-4458-8B3B-60C69BBBD83C}
    HKLM\Software\Classes\Interface\{63D0ED2D-B45B-4458-8B3B-60C69BBBD83C}
    HKLM\Software\Classes\Interface\{6E74766C-4D93-4CC0-96D1-47B8E07FF9CA}
    HKLM\Software\Classes\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A}
    HKLM\Software\Classes\Interface\{741DE825-A6F0-4497-9AA6-8023CF9B0FFF}
    HKLM\Software\Classes\Interface\{7473D291-B7BB-4F24-AE82-7E2CE94BB6A9}
    HKLM\Software\Classes\Interface\{7473D293-B7BB-4F24-AE82-7E2CE94BB6A9}
    HKLM\Software\Classes\Interface\{7473D295-B7BB-4F24-AE82-7E2CE94BB6A9}
    HKLM\Software\Classes\Interface\{7473D297-B7BB-4F24-AE82-7E2CE94BB6A9}
    HKLM\Software\Classes\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}
    HKLM\Software\Classes\Interface\{90449521-D834-4703-BB4E-D3AA44042FF8}
    HKLM\Software\Classes\Interface\{991AAC62-B100-47CE-8B75-253965244F69}
    HKLM\Software\Classes\Interface\{A626CDBD-3D13-4F78-B819-440A28D7E8FC}
    HKLM\Software\Classes\Interface\{AEBF09E2-0C15-43C8-99BF-928C645D98A0}
    HKLM\Software\Classes\Interface\{BBABDC90-F3D5-4801-863A-EE6AE529862D}
    HKLM\Software\Classes\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE}
    HKLM\Software\Classes\Interface\{D6FF3684-AD3B-48EB-BBB4-B9E6C5A355C1}
    HKLM\Software\Classes\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082}
    HKLM\Software\Classes\Interface\{DE38C398-B328-4F4C-A3AD-1B5E4ED93477}
    HKLM\Software\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25E}
    HKLM\Software\Classes\Interface\{E342AF55-B78A-4CD0-A2BB-DA7F52D9D25F}
    HKLM\Software\Classes\Interface\{E79DFBC9-5697-4FBD-94E5-5B2A9C7C1612}
    HKLM\Software\Classes\Interface\{E79DFBCB-5697-4FBD-94E5-5B2A9C7C1612}
    HKLM\Software\Classes\Interface\{EB9E5C1C-B1F9-4C2B-BE8A-27D6446FDAF8}
    HKLM\Software\Classes\Interface\{F87D7FB5-9DC5-4C8C-B998-D8DFE02E2978}
    HKLM\Software\Classes\MyWebSearch.ChatSessionPlugin
    HKLM\Software\Classes\MyWebSearch.ChatSessionPlugin.1
    HKLM\Software\Classes\MyWebSearch.HTMLPanel
    HKLM\Software\Classes\MyWebSearch.HTMLPanel.1
    HKLM\Software\Classes\MyWebSearch.OutlookAddin
    HKLM\Software\Classes\MyWebSearch.OutlookAddin.1
    HKLM\Software\Classes\MyWebSearch.PseudoTransparentPlugin
    HKLM\Software\Classes\MyWebSearch.PseudoTransparentPlugin.1
    HKLM\Software\Classes\MyWebSearchToolBar.SettingsPlugin
    HKLM\Software\Classes\MyWebSearchToolBar.SettingsPlugin.1
    HKLM\Software\Classes\MyWebSearchToolBar.ToolbarPlugin
    HKLM\Software\Classes\MyWebSearchToolBar.ToolbarPlugin.1
    HKLM\Software\Classes\screensavercontrol.screensaverinstaller
    HKLM\Software\Classes\screensavercontrol.screensaverinstaller.1
    HKLM\Software\Classes\shoppingreport.hbax
    HKLM\Software\Classes\shoppingreport.hbax.1
    HKLM\Software\Classes\shoppingreport.hbinfoband
    HKLM\Software\Classes\shoppingreport.hbinfoband.1
    HKLM\Software\Classes\shoppingreport.iebutton
    HKLM\Software\Classes\shoppingreport.iebutton.1
    HKLM\Software\Classes\shoppingreport.iebuttona
    HKLM\Software\Classes\shoppingreport.iebuttona.1
    HKLM\Software\Classes\shoppingreport.rprtctrl
    HKLM\Software\Classes\shoppingreport.rprtctrl.1
    HKLM\Software\Classes\TypeLib\{07B18EA0-A523-4961-B6BB-170DE4475CCA}
    HKLM\Software\Classes\TypeLib\{0D26BC71-A633-4E71-AD31-EADC3A1B6A3A}
    HKLM\Software\Classes\TypeLib\{29D67D3C-509A-4544-903F-C8C1B8236554}
    HKLM\Software\Classes\TypeLib\{3E720450-B472-4954-B7AA-33069EB53906}
    HKLM\Software\Classes\TypeLib\{7473D290-B7BB-4F24-AE82-7E2CE94BB6A9}
    HKLM\Software\Classes\TypeLib\{8CA01F0E-987C-49C3-B852-2F1AC4A7094C}
    HKLM\Software\Classes\TypeLib\{8E6F1830-9607-4440-8530-13BE7C4B1D14}
    HKLM\Software\Classes\TypeLib\{C8CECDE3-1AE1-4C4A-AD82-6D5B00212144}
    HKLM\Software\Classes\TypeLib\{CDCA70D8-C6A6-49EE-9BED-7429D6C477A2}
    HKLM\Software\Classes\TypeLib\{D136987F-E1C4-4CCC-A220-893DF03EC5DF}
    HKLM\Software\Classes\TypeLib\{D518921A-4A03-425E-9873-B9A71756821E}
    HKLM\Software\Classes\TypeLib\{E343EDFC-1E6C-4CB5-AA29-E9C922641C80}
    HKLM\Software\Classes\TypeLib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D}
    HKLM\Software\Classes\TypeLib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612}
    HKLM\Software\Classes\TypeLib\{F42228FB-E84E-479E-B922-FBBD096E792C}
    HKLM\Software\FocusInteractive
    HKLM\Software\Fun Web Products
    HKLM\Software\FunWebProducts
    HKLM\Software\MetaStream
    HKLM\Software\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E}
    HKLM\Software\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD}
    HKLM\Software\Microsoft\Code Store Database\Distribution Units\CabBuilder
    HKLM\Software\Microsoft\Internet Explorer\Extensions\{c5428486-50a0-4a02-9d20-520b59a9f9b2}
    HKLM\Software\Microsoft\Internet Explorer\Extensions\{c5428486-50a0-4a02-9d20-520b59a9f9b3}
    HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481}
    HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45DD-9B68-D6A12C30E5D7}
    HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907}
    HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48dd-9B6D-7A13A3E42127}
    HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40fd-8DAE-FF14757F60C7}
    HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA}
    HKLM\Software\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll
    HKLM\Software\Microsoft\Multimedia\WMPlayer\Schemes\f3pss
    HKLM\Software\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin
    HKLM\Software\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{100EB1FD-D03E-47FD-81F3-EE91287F9465}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4D7B-9389-0F166788785A}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98D9753D-D73B-42D5-8C85-4469CDA897AB}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9FF05104-B030-46FC-94B8-81276E4E27DF}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612}
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall
    HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\rokgros
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShoppingReport
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ViewpointMediaPlayer
    HKLM\Software\MyWebSearch
    HKLM\Software\ShoppingReport
    HKLM\Software\soft2PC
    HKLM\Software\Viewpoint
    HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{00A6FAF6-072E-44CF-8957-5838F569A31D}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Run|MyWebSearch Email Plugin
    HKCU\Software\Microsoft\Windows\CurrentVersion\Run|psbgaj
    HKLM\Software\Microsoft\Internet Explorer\Toolbar|{07B18EA9-A523-4961-B6BB-170DE4475CCA}
    HKLM\Software\Microsoft\Windows Media\Wmsdk\Sources|F3PopularScreenSavers
    HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\post platform|FunWebProducts
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run|My Web Search Bar Search Scope Monitor
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run|MyWebSearch Email Plugin
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run|MyWebSearch Plugin
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run|soft2PC
    .
    (Orpheline) HKCU,Run - Picasa Media Detector - C:\Program Files\Picasa2\PicasaMediaDetector.exe (Fichier manquant)
    (Orpheline) HKCU,Run - sysconfig32 - C:\Users\hp\AppData\Local\Temp\sysconfig32.exe (Fichier manquant)
    (Orpheline) BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} (CLSID manquant)
    .
    ============== SCAN ADDITIONNEL ==============
    .
    * Mozilla FireFox Version 3.6.3 (fr) *
    .
    C:\Users\hp\..\pyjd9t7v.default\prefs.js - browser.download.dir: C:\\Users\\hp\\Downloads
    C:\Users\hp\..\pyjd9t7v.default\prefs.js - browser.download.lastDir: C:\\Users\\hp\\Documents
    C:\Users\hp\..\pyjd9t7v.default\prefs.js - browser.search.defaultenginename: Gdark
    C:\Users\hp\..\pyjd9t7v.default\prefs.js - browser.search.defaulturl: hxxp://fr.gdark.com/search.php?cx=partner-pub-7902900401080901%3Ae94ctf-nqmg&cof=FORID%3A10&ie=UTF-8&q=
    C:\Users\hp\..\pyjd9t7v.default\prefs.js - browser.search.selectedEngine: Orange
    C:\Users\hp\..\pyjd9t7v.default\prefs.js - browser.startup.homepage: hxxp://www.google.fr/webhp
    C:\Users\hp\..\pyjd9t7v.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.2.3
    C:\Users\hp\..\pyjd9t7v.default\prefs.js - keyword.URL: hxxp://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZVxdm011YYFR&fl=0&ptb=StRx96dMAA4kIFah.PD2Zg&url=hxxp://search.mywebsearch.com/mywebsearch/dft_redir.jhtml&st=kwd&si=48072&searchfor=
    .
    EFFACÉ: C:\Users\hp\..\pyjd9t7v.default\prefs.js - user_pref("extensions.mywebsearch.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/opensearch.jhtml?id=ZVxdm011YYFR&ptb=StRx96dMAA4kIFah.PD2Zg");
    EFFACÉ: C:\Users\hp\..\pyjd9t7v.default\prefs.js - user_pref("extensions.mywebsearch.prevKwdEnabled", true);
    EFFACÉ: C:\Users\hp\..\pyjd9t7v.default\prefs.js - user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://www.searcheo.fr/france?search&q=");
    EFFACÉ: C:\Users\hp\..\pyjd9t7v.default\prefs.js - user_pref("keyword.URL", "hxxp://www.mywebsearch.com/jsp/cfg_redir2.jsp?id=ZVxdm011YYFR&fl=0&ptb=StRx96dMAA4kIFah.PD2Zg&url=hxxp://search.mywebsearch.com/mywebsearch/dft_redir.jhtml&st=kwd&si=48072&searchfor=");
    .
    * Internet Explorer Version 8.0.6001.18904 *
    .
    [HKCU\Software\Microsoft\Internet Explorer\Main]
    .
    AutoHide: yes
    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Do404Search: 0x01000000
    Enable Browser Extensions: yes
    Local Page: C:\Windows\system32\blank.htm
    Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
    Show_ToolBar: yes
    Start Page: hxxp://fr.msn.com/
    .
    [HKLM\Software\Microsoft\Internet Explorer\Main]
    .
    AutoHide: yes
    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Delete_Temp_Files_On_Exit: yes
    Local Page: C:\Windows\System32\blank.htm
    Search bar: hxxp://search.msn.com/spbasic.htm
    Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Start Page: hxxp://fr.msn.com/
    .
    [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
    .
    Tabs: res://ieframe.dll/tabswelcome.htm
    Blank: res://mshtml.dll/blank.htm
    .
    ========================================
    .
    C:\Users\hp\AppData\Local\Temp: 3 Fichier(s), 489 Dossier(s)
    C:\Windows\temp: 0 Fichier(s), 358 Dossier(s)
    C:\Users\hp\AppData\Roaming\Microsoft\Windows\Cookies: 2 Fichier(s), 2 Dossier(s)
    Temporary Internet Files: 2 Fichier(s), 88 Dossier(s)
    .
    C:\Ad-Remover\Quarantine: 169 Fichier(s)
    C:\Ad-Remover\Backup: 14 Fichier(s)
    .
    C:\Ad-Report-CLEAN[1].txt - 20437 Octet(s)
    .
    Fin à: 18:44:00, 18/04/2010
    .
    ============== E.O.F - CLEAN[1] ==============
    0
  16. gen-hackman
     
    ▶ Relance List_Kill'em(soit en clic droit pour vista/7),avec le raccourci sur ton bureau.
    mais cette fois-ci :

    ▶ choisis l'Option Clean

    ton PC va redemarrer,

    laisse travailler l'outil.

    en fin de scan la fenetre se ferme , et tu as un rapport du nom de Kill'em.txt sur ton bureau ,

    ▶ colle le contenu dans ta reponse
    0
  17. titheo
     
    Kill'em by g3n-h@ckm@n 1.7.1.2

    User : hp (Administrateurs)
    Update on 18/04/2010 by g3n-h@ckm@n ::::: 14.00
    Start at: 19:22:12 | 18/04/2010

    Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz
    Microsoft® Windows Vista(TM) Édition Familiale Premium (6.0.6002 32-bit) # Service Pack 2
    Internet Explorer 8.0.6001.18904
    Windows Firewall Status : Disabled
    AV : avast! antivirus 4.8.1296 [VPS 090110-0] 4.8.1296 [ Enabled | Updated ]

    C:\ -> Disque fixe local | 137,22 Go (24,66 Go free) | NTFS
    D:\ -> Disque fixe local | 11,83 Go (2,16 Go free) [HP_RECOVERY] | NTFS
    E:\ -> Disque CD-ROM

    ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Processes running

    C:\Windows\System32\smss.exe
    C:\Windows\system32\csrss.exe
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\csrss.exe
    C:\Windows\system32\services.exe
    C:\Windows\system32\lsass.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\nvvsvc.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\winlogon.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\SLsvc.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Windows\system32\WLANExt.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe
    C:\Program Files\Common Files\AVerMedia\Service\AVerRemote.exe
    C:\Program Files\Common Files\AVerMedia\Service\AVerScheduleService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
    C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
    C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
    C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
    C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
    C:\Windows\system32\rundll32.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\SearchIndexer.exe
    C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Windows\System32\alg.exe
    C:\Windows\system32\runonce.exe
    C:\Windows\system32\cmd.exe
    C:\Windows\system32\conime.exe
    C:\Windows\system32\PresentationSettings.exe
    C:\Program Files\List_Kill'em\ERUNT.EXE
    C:\Program Files\List_Kill'em\pv.exe

    ¤¤¤¤¤¤¤¤¤¤ Files/folders :

    Quarantined & Deleted !! : C:\ProgramData\DVD.exe
    Quarantined & Deleted !! : C:\ProgramData\Games.exe
    Quarantined & Deleted !! : C:\ProgramData\hpqp.ini
    Quarantined & Deleted !! : C:\ProgramData\hpqp.txt
    Quarantined & Deleted !! : C:\ProgramData\Karaoke.exe
    Quarantined & Deleted !! : C:\ProgramData\LuUninstall.LiveUpdate
    Quarantined & Deleted !! : C:\ProgramData\MobileTV.exe
    Quarantined & Deleted !! : C:\ProgramData\MPV.exe
    Quarantined & Deleted !! : C:\ProgramData\nvModes.001
    Quarantined & Deleted !! : C:\ProgramData\nvModes.dat

    Quarantined & Deleted !! : C:\Users\hp\AppData\Local\d3d9caps.dat
    Quarantined & Deleted !! : C:\Users\hp\AppData\Local\GDIPFONTCACHEV1.DAT
    Quarantined & Deleted !! : C:\Users\hp\Local Settings\Temp\hp.bmp
    Deleted !! : C:\$Recycle.bin\S-1-5-21-2494908402-957095204-3137527926-1000\$I03TN24.ics
    Deleted !! : C:\$Recycle.bin\S-1-5-21-2494908402-957095204-3137527926-1000\$I6RQJWH.exe
    Deleted !! : C:\$Recycle.bin\S-1-5-21-2494908402-957095204-3137527926-1000\$IE1RF8J.lnk
    Deleted !! : C:\$Recycle.bin\S-1-5-21-2494908402-957095204-3137527926-1000\$INLAJ0J
    Deleted !! : C:\$Recycle.bin\S-1-5-21-2494908402-957095204-3137527926-1000\$IP4ZI04.exe

    ==============
    host file OK !
    ==============

    ========
    Registry
    ========

    Deleted : HKCR\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}
    Deleted : HKCR\CLSID\{a4730ebe-43a6-443e-9776-36915d323ad3}
    Deleted : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb}
    Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb}
    =================
    Internet Explorer
    =================

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
    Start Page REG_SZ https://www.msn.com/fr-fr/?ocid=iehp
    Local Page REG_SZ C:\WINDOWS\system32\blank.htm
    Default_Search_URL REG_SZ https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    Default_Page_URL REG_SZ https://www.msn.com/fr-fr/?ocid=iehp
    Search Page REG_SZ https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
    Start Page REG_SZ https://www.google.com/?gws_rd=ssl
    Local Page REG_SZ C:\WINDOWS\system32\blank.htm
    Search Page REG_SZ http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

    ===============
    Security Center
    ===============

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
    cval REG_DWORD 1 (0x1)
    UacDisableNotify REG_DWORD 0 (0x0)
    InternetSettingsDisableNotify REG_DWORD 0 (0x0)
    AutoUpdateDisableNotify REG_DWORD 0 (0x0)
    FirstRunDisabled REG_DWORD 1 (0x1)
    AntiVirusDisableNotify REG_DWORD 0 (0x0)
    FirewallDisableNotify REG_DWORD 0 (0x0)
    UpdatesDisableNotify REG_DWORD 0 (0x0)
    AntiVirusOverride REG_DWORD 1 (0x1)
    FirewallOverride REG_DWORD 1 (0x1)

    ========
    Services
    =========

    Ndisuio : Start = 3
    EapHost : Start = 2
    Wlansvc : Start = 2
    SharedAccess : Start = 2
    windefend : Start = 2
    wuauserv : Start = 2
    wscsvc : Start = 2

    ============
    Disk Cleaned
    ============

    =================
    anti-ver blaster : OK !!
    =================

    ================
    Prefetch cleaned
    ================

    ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
    0

Discussions similaires

Ouvrir un fichier .pub sans Publisher
baissaoui -
baissaoui -

0 réponse
Ouvrir document Publisher sans Publisher
Curtis Hayes -
Curtis Hayes -

7 réponses
Lire, afficher, exécuter un fichier *.pub sans Publisher
jeannoellaurenti -
informatique_fujitsu -

1 réponse
Publicité "Bidru n'en peut plus"
_Ritchi_ -
Didier -

5 réponses
musique de pub
zabou -
Rr75020 -

7 réponses