Gros probleme avec mon pc

bonjour j'ai un probleme mon pc est infecté de pub mon antivirus y peut rien internet ce coupe et il es tres lent!!

voici le rapport :
http://www.cijoint.fr/cjlink.php?file=cj201005/cijXcX54Ay.txt

merci d'avance!

13 réponses

  1. ▶ Télécharge Ad-remover ( de C_XX ) sur ton bureau :

    ▶ Déconnecte toi et ferme toutes applications en cours !

    ▶ Double clique sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut .

    ▶ Double-clique sur le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .

    ▶ Au menu principal choisis "option clean " et tape sur [entrée] .

    ▶ Laisse travailler l'outil et ne touche à rien ...

    ▶ Poste le rapport qui apparait à la fin , sur le forum ...

    ( Le rapport est sauvegardé aussi sous C:\Ad-report.log )
    ( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

    ▶ Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
    Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
    Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
    0
    1. mon 1er rapport ne convien pas ??
      j'ai pas l'ordi devant moi je fait ta manipulation quand je rentrerais!
      0
      1. ton premier rapport me montre une infection que l on va traiter avec ad-remover !:)
        0
        1. voila le rapport!
          http://www.cijoint.fr/cjlink.php?file=cj201005/cijBIZcx5Z.txt
          0
          1. .
            ======= RAPPORT D'AD-REMOVER 2.0.0.0,D | UNIQUEMENT XP/VISTA/7 =======
            .
            Mis à jour par C_XX le 01/05/10 à 19:50
            Contact: AdRemover.contact@gmail.com
            Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
            .
            Lancé à: 11:27:58 le 06/05/2010 | Mode normal | Option: SCAN
            Exécuté de: C:\Ad-Remover\ADR.exe
            SE: Microsoft® Windows XP(TM) Service Pack 3 - X86
            Nom du PC: PROPRIET-696611
            Utilisateur actuel: BUREAU
            .
            ============== ÉLÉMENT(S) TROUVÉ(S) ==============
            .
            .
            C:\Documents and Settings\BUREAU\Application Data\Dealio
            C:\Documents and Settings\BUREAU\Application Data\EoRezo
            C:\Documents and Settings\BUREAU\Application Data\Search Settings
            C:\Documents and Settings\BUREAU\Local Settings\Application Data\EoRezo
            C:\Program Files\Application Updater
            C:\Program Files\Dealio Toolbar
            C:\Program Files\EoRezo
            C:\Program Files\Mozilla FireFox\extensions\dealio@mybrowserbar.com
            C:\Program Files\Mozilla Firefox\extensions\searchsettings@spigot.com
            C:\Program Files\Search Guard PlusU
            .
            HKCU\Software\Dealio
            HKCU\Software\EoRezo
            HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0EC78F3C-12FC-4FCA-8FA3-1DFD7C463D98}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
            HKCU\Software\Search Settings
            HKLM\Software\Application Updater
            HKLM\Software\Classes\AppID\{AFBB7970-789A-4264-BA70-E8127DECE400}
            HKLM\Software\Classes\AppID\EoEngineBHO.DLL
            HKLM\Software\Classes\CLSID\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
            HKLM\Software\Classes\CLSID\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
            HKLM\Software\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
            HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
            HKLM\Software\Classes\EoEngineBHO.EOBHO
            HKLM\Software\Classes\EoEngineBHO.EOBHO.1
            HKLM\Software\Classes\Installer\Products\96DC878CBD58B624183A7E1157AABE19
            HKLM\Software\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
            HKLM\Software\Classes\Interface\{DF76E9B7-35EC-46FC-AF56-5B79DED9D64F}
            HKLM\Software\Classes\SearchSettings.BHO
            HKLM\Software\Classes\SearchSettings.BHO.1
            HKLM\Software\Classes\TypeLib\{18AF7201-4F14-4BCF-93FE-45617CF259FF}
            HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
            HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
            HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook
            HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook.1
            HKLM\Software\Dealio
            HKLM\Software\EoRezo
            HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B49C433C-502B-4946-B8D4-1484BEA46B69}
            HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
            HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
            HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
            HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\96DC878CBD58B624183A7E1157AABE19
            HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C878CD69-85DB-426B-81A3-E71175AAEB91}
            HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\EoRezo_is1
            HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
            HKLM\Software\Search Settings
            HKU\.DEFAULT\Software\Dealio
            HKU\.DEFAULT\Software\FBSearch
            HKU\.DEFAULT\Software\Search Settings
            HKU\S-1-5-18\Software\Dealio
            HKU\S-1-5-18\Software\FBSearch
            HKU\S-1-5-18\Software\Search Settings
            HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
            HKLM\Software\Microsoft\Internet Explorer\Toolbar|{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
            HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Eorezo
            HKLM\Software\Microsoft\Windows\CurrentVersion\Run|SearchSettings
            HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Softwarehelper
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Application Updater\ApplicationUpdater.exe
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\chrome.manifest
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\chrome\locale\EN-US\widgitoolbarplugin.properties
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\components\dealioToolbarFF.dll
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\install.rdf
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\FF\chrome\locale\en-US\searchsettingsplugin.dtd
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\FF\components\SearchSettingsFF.dll
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\FF\install.rdf
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\SearchSettings.dll
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\SearchSettings.exe
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\SearchSettingsRes409.dll
            .
            .
            ============== SCAN ADDITIONNEL ==============
            .
            * Mozilla FireFox Version 3.5.9 (fr) *
            .
            C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.download.lastDir: C:\\Documents and Settings\\BUREAU\\Bureau
            C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.search.defaultenginename: Fast Browser Search
            C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.search.selectedEngine: Google
            C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.startup.homepage: hxxp://y.lo.st
            C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.1.9
            .
            TROUVÉ: C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - user_pref("browser.search.defaultenginename", "Fast Browser Search");
            TROUVÉ: C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - user_pref("browser.search.order.1", "Fast Browser Search");
            TROUVÉ: C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - user_pref("browser.startup.homepage", "hxxp://y.lo.st");
            .
            * Internet Explorer Version 8.0.6001.18702 *
            .
            [HKCU\Software\Microsoft\Internet Explorer\Main]
            .
            AutoHide: yes
            Do404Search: 0x01000000
            Enable Browser Extensions: yes
            Local Page: C:\WINDOWS\system32\blank.htm
            Show_ToolBar: yes
            Start Page: hxxp://orange.fr/
            .
            [HKLM\Software\Microsoft\Internet Explorer\Main]
            .
            Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
            Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
            Delete_Temp_Files_On_Exit: yes
            Local Page: C:\WINDOWS\system32\blank.htm
            Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
            Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157
            .
            [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
            .
            Tabs: hxxp://y.lo.st
            Blank: res://mshtml.dll/blank.htm
            .
            ========================================
            .
            C:\Ad-Remover\Quarantine: 0 Fichier(s)
            C:\Ad-Remover\Backup: 1 Fichier(s)
            .
            C:\Ad-Report-SCAN[1].txt - 7601 Octet(s)
            .
            Fin à: 11:30:58, 06/05/2010
            .
            ============== E.O.F - SCAN[1] ==============
            0
            1. bonjour tu n'as pas lu les directives
              0
              1. pardon!

                .
                ======= RAPPORT D'AD-REMOVER 2.0.0.0,D | UNIQUEMENT XP/VISTA/7 =======
                .
                Mis à jour par C_XX le 01/05/10 à 19:50
                Contact: AdRemover.contact@gmail.com
                Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
                .
                Lancé à: 15:51:23 le 06/05/2010 | Mode normal | Option: CLEAN
                Exécuté de: C:\Ad-Remover\ADR.exe
                SE: Microsoft® Windows XP(TM) Service Pack 3 - X86
                Nom du PC: PROPRIET-696611
                Utilisateur actuel: BUREAU
                .
                ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
                .
                .
                C:\Documents and Settings\BUREAU\Application Data\Dealio
                C:\Documents and Settings\BUREAU\Application Data\EoRezo
                C:\Documents and Settings\BUREAU\Application Data\Search Settings
                C:\Documents and Settings\BUREAU\Local Settings\Application Data\EoRezo
                C:\Program Files\Application Updater
                C:\Program Files\Dealio Toolbar
                C:\Program Files\EoRezo
                C:\Program Files\Mozilla FireFox\extensions\dealio@mybrowserbar.com
                C:\Program Files\Search Guard PlusU

                (!) -- Fichiers temporaires supprimés.
                .
                HKCU\Software\Dealio
                HKCU\Software\EoRezo
                HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0EC78F3C-12FC-4FCA-8FA3-1DFD7C463D98}
                HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
                HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
                HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                HKCU\Software\Search Settings
                HKLM\Software\Application Updater
                HKLM\Software\Classes\AppID\{AFBB7970-789A-4264-BA70-E8127DECE400}
                HKLM\Software\Classes\AppID\EoEngineBHO.DLL
                HKLM\Software\Classes\CLSID\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                HKLM\Software\Classes\CLSID\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
                HKLM\Software\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
                HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                HKLM\Software\Classes\EoEngineBHO.EOBHO
                HKLM\Software\Classes\EoEngineBHO.EOBHO.1
                HKLM\Software\Classes\Installer\Products\96DC878CBD58B624183A7E1157AABE19
                HKLM\Software\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
                HKLM\Software\Classes\Interface\{DF76E9B7-35EC-46FC-AF56-5B79DED9D64F}
                HKLM\Software\Classes\SearchSettings.BHO
                HKLM\Software\Classes\SearchSettings.BHO.1
                HKLM\Software\Classes\TypeLib\{18AF7201-4F14-4BCF-93FE-45617CF259FF}
                HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
                HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
                HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook
                HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook.1
                HKLM\Software\Dealio
                HKLM\Software\EoRezo
                HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B49C433C-502B-4946-B8D4-1484BEA46B69}
                HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
                HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\96DC878CBD58B624183A7E1157AABE19
                HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C878CD69-85DB-426B-81A3-E71175AAEB91}
                HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\EoRezo_is1
                HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
                HKLM\Software\Search Settings
                HKU\.DEFAULT\Software\Dealio
                HKU\.DEFAULT\Software\FBSearch
                HKU\.DEFAULT\Software\Search Settings
                HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                HKLM\Software\Microsoft\Internet Explorer\Toolbar|{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Eorezo
                HKLM\Software\Microsoft\Windows\CurrentVersion\Run|SearchSettings
                HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Softwarehelper
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Application Updater\ApplicationUpdater.exe
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\chrome.manifest
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\chrome\locale\EN-US\widgitoolbarplugin.properties
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\components\dealioToolbarFF.dll
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\install.rdf
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\FF\chrome\locale\en-US\searchsettingsplugin.dtd
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\FF\components\SearchSettingsFF.dll
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\FF\install.rdf
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\SearchSettings.dll
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\SearchSettings.exe
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\SearchSettingsRes409.dll
                .
                (Orpheline) HKLM,Run - InCD - C:\Program Files\Nero\Nero 7\InCD\InCD.exe (Fichier manquant)
                (Orpheline) HKLM,Run - WinVNC - C:\Program Files\TightVNC\WinVNC.exe (Fichier manquant)
                (Orpheline) HKLM,Run - Adobe ARM - C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe (Fichier manquant)
                (Orpheline) BHO: (Spybot-S&D IE Protection) -{53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll (Fichier manquant)
                (Orpheline) BHO: () -{9059D032-77E0-475A-89DA-226323E2FA5A} - c:\windows\system32\ntajztq.dll (Fichier manquant)
                (Orpheline) HKLM,Uninstall - ie7 - C:\WINDOWS\ie7\spuninst\spuninst.exe (Fichier manquant)
                .
                ============== SCAN ADDITIONNEL ==============
                .
                * Mozilla FireFox Version 3.5.9 (fr) *
                .
                C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.download.lastDir: C:\\Documents and Settings\\BUREAU\\Bureau
                C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.search.defaultenginename: Fast Browser Search
                C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.search.selectedEngine: Google
                C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.startup.homepage: hxxp://y.lo.st
                C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.1.9
                .
                EFFACÉ: C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - user_pref("browser.search.defaultenginename", "Fast Browser Search");
                EFFACÉ: C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - user_pref("browser.search.order.1", "Fast Browser Search");
                EFFACÉ: C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - user_pref("browser.startup.homepage", "hxxp://y.lo.st");
                .
                * Internet Explorer Version 8.0.6001.18702 *
                .
                [HKCU\Software\Microsoft\Internet Explorer\Main]
                .
                AutoHide: yes
                Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                Do404Search: 0x01000000
                Enable Browser Extensions: yes
                Local Page: C:\WINDOWS\system32\blank.htm
                Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
                Show_ToolBar: yes
                Start Page: hxxp://fr.msn.com/
                .
                [HKLM\Software\Microsoft\Internet Explorer\Main]
                .
                Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                Delete_Temp_Files_On_Exit: yes
                Local Page: C:\WINDOWS\system32\blank.htm
                Search bar: hxxp://search.msn.com/spbasic.htm
                Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                Start Page: hxxp://fr.msn.com/
                .
                [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
                .
                Tabs: res://ieframe.dll/tabswelcome.htm
                Blank: res://mshtml.dll/blank.htm
                .
                ========================================
                .
                C:\Ad-Remover\Quarantine: 7 Fichier(s)
                C:\Ad-Remover\Backup: 14 Fichier(s)
                .
                C:\Ad-Report-CLEAN[1].txt - 8437 Octet(s)
                C:\Ad-Report-SCAN[1].txt - 7725 Octet(s)
                .
                Fin à: 15:54:45, 06/05/2010
                .
                ============== E.O.F - CLEAN[1] ==============
                0
                1. apres nettoyage de ccleaner
                  le nouveau rapport

                  .
                  ======= RAPPORT D'AD-REMOVER 2.0.0.0,D | UNIQUEMENT XP/VISTA/7 =======
                  .
                  Mis à jour par C_XX le 01/05/10 à 19:50
                  Contact: AdRemover.contact@gmail.com
                  Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
                  .
                  Lancé à: 16:11:27 le 06/05/2010 | Mode normal | Option: CLEAN
                  Exécuté de: C:\Ad-Remover\ADR.exe
                  SE: Microsoft® Windows XP(TM) Service Pack 3 - X86
                  Nom du PC: PROPRIET-696611
                  Utilisateur actuel: BUREAU
                  .
                  ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
                  .
                  .

                  (!) -- Fichiers temporaires supprimés.
                  .
                  .
                  (Orpheline) BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} (CLSID manquant)
                  .
                  ============== SCAN ADDITIONNEL ==============
                  .
                  * Mozilla FireFox Version 3.5.9 (fr) *
                  .
                  C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.download.lastDir: C:\\Documents and Settings\\BUREAU\\Bureau
                  C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.search.selectedEngine: Google
                  C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.1.9
                  .
                  .
                  * Internet Explorer Version 8.0.6001.18702 *
                  .
                  [HKCU\Software\Microsoft\Internet Explorer\Main]
                  .
                  AutoHide: yes
                  Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                  Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                  Do404Search: 0x01000000
                  Enable Browser Extensions: yes
                  Local Page: C:\WINDOWS\system32\blank.htm
                  Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
                  Show_ToolBar: yes
                  Start Page: hxxp://fr.msn.com/
                  .
                  [HKLM\Software\Microsoft\Internet Explorer\Main]
                  .
                  Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                  Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                  Delete_Temp_Files_On_Exit: yes
                  Local Page: C:\WINDOWS\system32\blank.htm
                  Search bar: hxxp://search.msn.com/spbasic.htm
                  Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                  Start Page: hxxp://fr.msn.com/
                  .
                  [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
                  .
                  Tabs: res://ieframe.dll/tabswelcome.htm
                  Blank: res://mshtml.dll/blank.htm
                  .
                  ========================================
                  .
                  C:\Ad-Remover\Quarantine: 7 Fichier(s)
                  C:\Ad-Remover\Backup: 14 Fichier(s)
                  .
                  C:\Ad-Report-CLEAN[1].txt - 8605 Octet(s)
                  C:\Ad-Report-CLEAN[2].txt - 2323 Octet(s)
                  C:\Ad-Report-SCAN[1].txt - 7725 Octet(s)
                  .
                  Fin à: 16:13:05, 06/05/2010
                  .
                  ============== E.O.F - CLEAN[2] ==============
                  0
                  1. ▶ Télécharge ZHPDiag (de Nicolas Coolman)

                    ou :ZHPDiag

                    ▶ Enregistre le sur ton Bureau.

                    Une fois le téléchargement achevé,

                    ▶ lance ZHPDiag.exe et clique sur Unzip dans la fenêtre qui s'ouvre.

                    ▶ Clique sur le tournevis puis sur Tous pour cocher toutes les cases des options.

                    ▶ Clique sur la loupe pour lancer l'analyse.

                    A la fin de l'analyse,

                    ▶ clique sur l'appareil photo et enregistre le rapport sur ton Bureau.

                    Pour me le transmettre clique sur ce lien :

                    http://www.cijoint.fr/

                    ▶ Clique sur Parcourir et cherche le fichier C:\Documents and settings\le_nom_de_ta_session\.ZHPDiag.txt

                    ▶ Clique sur Ouvrir.

                    ▶ Clique sur "Cliquez ici pour déposer le fichier".

                    Un lien de cette forme :

                    http://www.cijoint.fr/cjlink.php?file=cj200905/cib7SU.txt

                    est ajouté dans la page.

                    ▶ Copie ce lien dans ta réponse.
                    0
                    1. http://www.cijoint.fr/cjlink.php?file=cj201005/cijCfplONw.txt
                      0
                      1. Run by BUREAU at 04/05/2010 09:34:15
                        0