Lost

chris -  
crapoulou Messages postés 42848 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   -

je n'arrive pas à enlever lost de ma page d'accueil voilà le rapport adreport. merci de m'aider!

.
======= RAPPORT D'AD-REMOVER 2.0.0.0,D | UNIQUEMENT XP/VISTA/7 =======
.
Mis à jour par C_XX le 01/05/10 à 19:50
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 21:40:42 le 02/05/2010 | Mode normal | Option: SCAN
Exécuté de: C:\Ad-Remover\ADR.exe
SE: Microsoft® Windows XP(TM) Service Pack 3 - X86
Nom du PC: RICHARD-E55A9D1
Utilisateur actuel: Richard
.
============== ÉLÉMENT(S) TROUVÉ(S) ==============
.
.
C:\Documents and Settings\Richard\Application Data\AskToolbar
C:\Documents and Settings\Richard\Application Data\EoRezo
C:\Documents and Settings\Richard\Application Data\Mozilla\FireFox\Profiles\b2ghi31p.default\extensions\toolbar@ask.com
C:\Documents and Settings\Richard\Application Data\Mozilla\FireFox\Profiles\b2ghi31p.default\searchplugins\askcom.xml
C:\Documents and Settings\Richard\Local Settings\Application Data\AskToolbar
C:\Documents and Settings\Richard\Local Settings\Application Data\EoRezo
C:\Program Files\Ask.com
C:\Program Files\EoRezo
C:\Program Files\Mozilla FireFox\Components\AskHPRFF.js
C:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
.
HKCU\Software\AppDataLow\AskBarDis
HKCU\Software\AppDataLow\AskHomePage
HKCU\Software\AppDataLow\AskToolbarInfo
HKCU\Software\Ask.com
HKCU\Software\AskToolbar
HKCU\Software\EoRezo
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
HKLM\Software\Classes\AppID\{AFBB7970-789A-4264-BA70-E8127DECE400}
HKLM\Software\Classes\AppID\EoEngineBHO.DLL
HKLM\Software\Classes\AppID\GenericAskToolbar.DLL
HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
HKLM\Software\Classes\CLSID\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\Software\Classes\EoEngineBHO.EOBHO
HKLM\Software\Classes\EoEngineBHO.EOBHO.1
HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd
HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1
HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
HKLM\Software\Classes\Interface\{DF76E9B7-35EC-46FC-AF56-5B79DED9D64F}
HKLM\Software\Classes\TypeLib\{18AF7201-4F14-4BCF-93FE-45617CF259FF}
HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
HKLM\Software\EoRezo
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\EoRezo_is1
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{00000000-6E41-4FD3-8538-502F5495E5FC}
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\post platform|AskTB5.5
HKLM\Software\Microsoft\Internet Explorer\Toolbar|{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Eorezo
HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Softwarehelper
HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Ask.com\GenericAskToolbar.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Ask.com\UpdateTask.exe
.
.
============== SCAN ADDITIONNEL ==============
.
* Mozilla FireFox Version 3.6.3 (fr) *
.
C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - browser.download.lastDir: C:\\Documents and Settings\\Richard\\Mes documents
C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - browser.search.defaultenginename: Ask.com
C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - browser.search.selectedEngine: Ask.com
C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - browser.startup.homepage: google.com
C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.2.3
C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - keyword.URL: hxxp://supertoolbar.ask.com/redirect?client=ff&src=kw&tb=NRO&o=101917&locale=fr_FR&q=
.
TROUVÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("browser.search.defaultengine", "Ask.com");
TROUVÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("browser.search.defaultenginename", "Ask.com");
TROUVÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("browser.search.order.1", "Ask.com");
TROUVÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("browser.search.selectedEngine", "Ask.com");
TROUVÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.cbid", "EV");
TROUVÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.default-channel-url-mask", "hxxp://fr.ask.com/web?q={query}&qsrc={qsrc}&o={o}&l={l}&dm=lang");
TROUVÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.fresh-install", false);
TROUVÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.l", "dis");
TROUVÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.last-config-req", "1284156838135");
TROUVÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.locale", "fr_FR");
TROUVÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.nero.userName", "");
TROUVÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.o", "101917");
TROUVÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.options-lang", "fr");
TROUVÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.options-locale", "FR");
TROUVÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.overlay-reloaded-using-restart", true);
TROUVÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.qsrc", "2871");
TROUVÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.r", "2");
TROUVÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.enabledItems", "toolbar@ask.com:3.5.2.106,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,jqs@sun.com:1.0,{20a82645-c095-46ed-80e3-08825760534b}:1.1,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.3");
TROUVÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("keyword.URL", "hxxp://supertoolbar.ask.com/redirect?client=ff&src=kw&tb=NRO&o=101917&locale=fr_FR&q=");
.
* Internet Explorer Version 8.0.6001.18702 *
.
[HKCU\Software\Microsoft\Internet Explorer\Main]
.
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Default_Search_URL: hxxp://www.google.com/ie
Do404Search: 0x01000000
Enable Browser Extensions: yes
First Home Page: hxxp://y.lo.st
Search bar: hxxp://www.google.com/ie
Search Page: hxxp://www.google.com
Show_ToolBar: yes
Start Page: hxxp://y.lo.st
.
[HKLM\Software\Microsoft\Internet Explorer\Main]
.
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Delete_Temp_Files_On_Exit: yes
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157
.
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
.
Tabs: hxxp://y.lo.st
Blank: res://mshtml.dll/blank.htm
.
========================================
.
C:\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Ad-Remover\Backup: 0 Fichier(s)
.
C:\Ad-Report-SCAN[1].txt - 9210 Octet(s)
.
Fin à: 21:43:39, 02/05/2010
.
============== E.O.F - SCAN[1] ==============

3 réponses

crapoulou Messages postés 42848 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   8 017
 
Salut,

* Exécute AD-R.
* Au menu principal clique sur le bouton "Nettoyer".
* Poste le rapport qui apparaît à la fin.
(Le rapport est sauvegardé aussi sous Ad-Report-CLEAN[1].txt)
0
chris
 
voici le rapport merci!

.
======= RAPPORT D'AD-REMOVER 2.0.0.0,D | UNIQUEMENT XP/VISTA/7 =======
.
Mis à jour par C_XX le 01/05/10 à 19:50
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 22:05:08 le 02/05/2010 | Mode normal | Option: CLEAN
Exécuté de: C:\Ad-Remover\ADR.exe
SE: Microsoft® Windows XP(TM) Service Pack 3 - X86
Nom du PC: RICHARD-E55A9D1
Utilisateur actuel: Richard
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
.
C:\Documents and Settings\Richard\Application Data\AskToolbar
C:\Documents and Settings\Richard\Application Data\EoRezo
C:\Documents and Settings\Richard\Application Data\Mozilla\FireFox\Profiles\b2ghi31p.default\extensions\toolbar@ask.com
C:\Documents and Settings\Richard\Application Data\Mozilla\FireFox\Profiles\b2ghi31p.default\searchplugins\askcom.xml
C:\Documents and Settings\Richard\Local Settings\Application Data\AskToolbar
C:\Documents and Settings\Richard\Local Settings\Application Data\EoRezo
C:\Program Files\Ask.com
C:\Program Files\EoRezo
C:\Program Files\Mozilla FireFox\Components\AskHPRFF.js
C:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job

(!) -- Fichiers temporaires supprimés.
.
HKCU\Software\AppDataLow\AskBarDis
HKCU\Software\AppDataLow\AskHomePage
HKCU\Software\AppDataLow\AskToolbarInfo
HKCU\Software\Ask.com
HKCU\Software\AskToolbar
HKCU\Software\EoRezo
HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
HKLM\Software\Classes\AppID\{AFBB7970-789A-4264-BA70-E8127DECE400}
HKLM\Software\Classes\AppID\EoEngineBHO.DLL
HKLM\Software\Classes\AppID\GenericAskToolbar.DLL
HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
HKLM\Software\Classes\CLSID\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\Software\Classes\EoEngineBHO.EOBHO
HKLM\Software\Classes\EoEngineBHO.EOBHO.1
HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd
HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1
HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
HKLM\Software\Classes\Interface\{DF76E9B7-35EC-46FC-AF56-5B79DED9D64F}
HKLM\Software\Classes\TypeLib\{18AF7201-4F14-4BCF-93FE-45617CF259FF}
HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
HKLM\Software\EoRezo
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\EoRezo_is1
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{00000000-6E41-4FD3-8538-502F5495E5FC}
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\post platform|AskTB5.5
HKLM\Software\Microsoft\Internet Explorer\Toolbar|{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Eorezo
HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Softwarehelper
HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Ask.com\GenericAskToolbar.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Ask.com\UpdateTask.exe
.
(Orpheline) BHO: {02478D38-C3F9-4efb-9B51-7695ECA05670} (CLSID manquant)
.
============== SCAN ADDITIONNEL ==============
.
* Mozilla FireFox Version 3.6.3 (fr) *
.
C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - browser.download.lastDir: C:\\Documents and Settings\\Richard\\Mes documents
C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - browser.search.defaultenginename: Ask.com
C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - browser.search.selectedEngine: Ask.com
C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - browser.startup.homepage: google.com
C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.2.3
C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - keyword.URL: hxxp://supertoolbar.ask.com/redirect?client=ff&src=kw&tb=NRO&o=101917&locale=fr_FR&q=
.
EFFACÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("browser.search.defaultengine", "Ask.com");
EFFACÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("browser.search.defaultenginename", "Ask.com");
EFFACÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("browser.search.order.1", "Ask.com");
EFFACÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("browser.search.selectedEngine", "Ask.com");
EFFACÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.cbid", "EV");
EFFACÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.default-channel-url-mask", "hxxp://fr.ask.com/web?q={query}&qsrc={qsrc}&o={o}&l={l}&dm=lang");
EFFACÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.fresh-install", false);
EFFACÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.l", "dis");
EFFACÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.last-config-req", "1284156838135");
EFFACÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.locale", "fr_FR");
EFFACÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.nero.userName", "");
EFFACÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.o", "101917");
EFFACÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.options-lang", "fr");
EFFACÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.options-locale", "FR");
EFFACÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.overlay-reloaded-using-restart", true);
EFFACÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.qsrc", "2871");
EFFACÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.asktb.r", "2");
EFFACÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("extensions.enabledItems", "toolbar@ask.com:3.5.2.106,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,jqs@sun.com:1.0,{20a82645-c095-46ed-80e3-08825760534b}:1.1,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.3");
EFFACÉ: C:\Documents and Settings\Richard\..\b2ghi31p.default\prefs.js - user_pref("keyword.URL", "hxxp://supertoolbar.ask.com/redirect?client=ff&src=kw&tb=NRO&o=101917&locale=fr_FR&q=");
.
* Internet Explorer Version 8.0.6001.18702 *
.
[HKCU\Software\Microsoft\Internet Explorer\Main]
.
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
.
[HKLM\Software\Microsoft\Internet Explorer\Main]
.
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
.
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
.
========================================
.
C:\Ad-Remover\Quarantine: 3 Fichier(s)
C:\Ad-Remover\Backup: 13 Fichier(s)
.
C:\Ad-Report-CLEAN[1].txt - 9434 Octet(s)
C:\Ad-Report-SCAN[1].txt - 9334 Octet(s)
.
Fin à: 22:08:41, 02/05/2010
.
============== E.O.F - CLEAN[1] ==============
0
crapoulou Messages postés 42848 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   8 017
 
Tu étais infecté par Eorezo.
Ne retourne pas sur ce site pour télécharger quoi que ce soit.
Et une barre d'outils infectieuse : Ask Toolbar.

Comment va le PC ?
Besoin d'une analyse complémentaire ?
0
chris
 
le pc a l'air d'aller .mais c'est quoi ccm ? merci pour tous!
0
crapoulou Messages postés 42848 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   8 017
 
Ceci n'est pas un message qui t'es adressé.
C'est ma signature.
CCM signifie Comment Ca Marche : site sur lequel tu te situes en ce moment même.

Désires-tu faire une analyse complémentaire de ton virus (voir s'il y a d'autres infections) ?
0
chris
 
oui je veux bien merci!
0
crapoulou Messages postés 42848 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   8 017
 
Pour établir un diagnostic plus en profondeur de ton PC :
Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur le Bureau.
= = = = >>> En cliquant ici <<< = = = =

* Double clique sur RSIT.exe pour le lancer.
* Une première fenêtre s'ouvre, clique alors sur Continue (Disclaimer).
* Si la dernière version de HijackThis n'est pas détectée sur ton PC, RSIT le téléchargera et te demandera d'accepter la licence.
* Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-notes).
* Poste le contenu de log.txt.
0