Gros probleme avec mon pc

gabyy -  
 gen-hackman -
bonjour j'ai un probleme mon pc est infecté de pub mon antivirus y peut rien internet ce coupe et il es tres lent!!

voici le rapport :
http://www.cijoint.fr/cjlink.php?file=cj201005/cijXcX54Ay.txt

merci d'avance!

13 réponses

  1. gen-hackman
     
    ▶ Télécharge Ad-remover ( de C_XX ) sur ton bureau :

    ▶ Déconnecte toi et ferme toutes applications en cours !

    ▶ Double clique sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut .

    ▶ Double-clique sur le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .

    ▶ Au menu principal choisis "option clean " et tape sur [entrée] .

    ▶ Laisse travailler l'outil et ne touche à rien ...

    ▶ Poste le rapport qui apparait à la fin , sur le forum ...

    ( Le rapport est sauvegardé aussi sous C:\Ad-report.log )
    ( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

    ▶ Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
    Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
    Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
    0
  2. gabyy
     
    mon 1er rapport ne convien pas ??
    j'ai pas l'ordi devant moi je fait ta manipulation quand je rentrerais!
    0
  3. gen-hackman
     
    ton premier rapport me montre une infection que l on va traiter avec ad-remover !:)
    0
  4. gabyy
     
    voila le rapport!
    http://www.cijoint.fr/cjlink.php?file=cj201005/cijBIZcx5Z.txt
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. gabyy
     
    .
    ======= RAPPORT D'AD-REMOVER 2.0.0.0,D | UNIQUEMENT XP/VISTA/7 =======
    .
    Mis à jour par C_XX le 01/05/10 à 19:50
    Contact: AdRemover.contact@gmail.com
    Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
    .
    Lancé à: 11:27:58 le 06/05/2010 | Mode normal | Option: SCAN
    Exécuté de: C:\Ad-Remover\ADR.exe
    SE: Microsoft® Windows XP(TM) Service Pack 3 - X86
    Nom du PC: PROPRIET-696611
    Utilisateur actuel: BUREAU
    .
    ============== ÉLÉMENT(S) TROUVÉ(S) ==============
    .
    .
    C:\Documents and Settings\BUREAU\Application Data\Dealio
    C:\Documents and Settings\BUREAU\Application Data\EoRezo
    C:\Documents and Settings\BUREAU\Application Data\Search Settings
    C:\Documents and Settings\BUREAU\Local Settings\Application Data\EoRezo
    C:\Program Files\Application Updater
    C:\Program Files\Dealio Toolbar
    C:\Program Files\EoRezo
    C:\Program Files\Mozilla FireFox\extensions\dealio@mybrowserbar.com
    C:\Program Files\Mozilla Firefox\extensions\searchsettings@spigot.com
    C:\Program Files\Search Guard PlusU
    .
    HKCU\Software\Dealio
    HKCU\Software\EoRezo
    HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0EC78F3C-12FC-4FCA-8FA3-1DFD7C463D98}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
    HKCU\Software\Search Settings
    HKLM\Software\Application Updater
    HKLM\Software\Classes\AppID\{AFBB7970-789A-4264-BA70-E8127DECE400}
    HKLM\Software\Classes\AppID\EoEngineBHO.DLL
    HKLM\Software\Classes\CLSID\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
    HKLM\Software\Classes\CLSID\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
    HKLM\Software\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
    HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
    HKLM\Software\Classes\EoEngineBHO.EOBHO
    HKLM\Software\Classes\EoEngineBHO.EOBHO.1
    HKLM\Software\Classes\Installer\Products\96DC878CBD58B624183A7E1157AABE19
    HKLM\Software\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
    HKLM\Software\Classes\Interface\{DF76E9B7-35EC-46FC-AF56-5B79DED9D64F}
    HKLM\Software\Classes\SearchSettings.BHO
    HKLM\Software\Classes\SearchSettings.BHO.1
    HKLM\Software\Classes\TypeLib\{18AF7201-4F14-4BCF-93FE-45617CF259FF}
    HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
    HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
    HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook
    HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook.1
    HKLM\Software\Dealio
    HKLM\Software\EoRezo
    HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B49C433C-502B-4946-B8D4-1484BEA46B69}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\96DC878CBD58B624183A7E1157AABE19
    HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C878CD69-85DB-426B-81A3-E71175AAEB91}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\EoRezo_is1
    HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
    HKLM\Software\Search Settings
    HKU\.DEFAULT\Software\Dealio
    HKU\.DEFAULT\Software\FBSearch
    HKU\.DEFAULT\Software\Search Settings
    HKU\S-1-5-18\Software\Dealio
    HKU\S-1-5-18\Software\FBSearch
    HKU\S-1-5-18\Software\Search Settings
    HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
    HKLM\Software\Microsoft\Internet Explorer\Toolbar|{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Eorezo
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run|SearchSettings
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Softwarehelper
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Application Updater\ApplicationUpdater.exe
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\chrome.manifest
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\chrome\locale\EN-US\widgitoolbarplugin.properties
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\components\dealioToolbarFF.dll
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\install.rdf
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\FF\chrome\locale\en-US\searchsettingsplugin.dtd
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\FF\components\SearchSettingsFF.dll
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\FF\install.rdf
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\SearchSettings.dll
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\SearchSettings.exe
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\SearchSettingsRes409.dll
    .
    .
    ============== SCAN ADDITIONNEL ==============
    .
    * Mozilla FireFox Version 3.5.9 (fr) *
    .
    C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.download.lastDir: C:\\Documents and Settings\\BUREAU\\Bureau
    C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.search.defaultenginename: Fast Browser Search
    C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.search.selectedEngine: Google
    C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.startup.homepage: hxxp://y.lo.st
    C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.1.9
    .
    TROUVÉ: C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - user_pref("browser.search.defaultenginename", "Fast Browser Search");
    TROUVÉ: C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - user_pref("browser.search.order.1", "Fast Browser Search");
    TROUVÉ: C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - user_pref("browser.startup.homepage", "hxxp://y.lo.st");
    .
    * Internet Explorer Version 8.0.6001.18702 *
    .
    [HKCU\Software\Microsoft\Internet Explorer\Main]
    .
    AutoHide: yes
    Do404Search: 0x01000000
    Enable Browser Extensions: yes
    Local Page: C:\WINDOWS\system32\blank.htm
    Show_ToolBar: yes
    Start Page: hxxp://orange.fr/
    .
    [HKLM\Software\Microsoft\Internet Explorer\Main]
    .
    Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
    Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Delete_Temp_Files_On_Exit: yes
    Local Page: C:\WINDOWS\system32\blank.htm
    Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
    Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157
    .
    [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
    .
    Tabs: hxxp://y.lo.st
    Blank: res://mshtml.dll/blank.htm
    .
    ========================================
    .
    C:\Ad-Remover\Quarantine: 0 Fichier(s)
    C:\Ad-Remover\Backup: 1 Fichier(s)
    .
    C:\Ad-Report-SCAN[1].txt - 7601 Octet(s)
    .
    Fin à: 11:30:58, 06/05/2010
    .
    ============== E.O.F - SCAN[1] ==============
    0
  7. gen-hackman
     
    bonjour tu n'as pas lu les directives
    0
  8. gabyy
     
    pardon!

    .
    ======= RAPPORT D'AD-REMOVER 2.0.0.0,D | UNIQUEMENT XP/VISTA/7 =======
    .
    Mis à jour par C_XX le 01/05/10 à 19:50
    Contact: AdRemover.contact@gmail.com
    Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
    .
    Lancé à: 15:51:23 le 06/05/2010 | Mode normal | Option: CLEAN
    Exécuté de: C:\Ad-Remover\ADR.exe
    SE: Microsoft® Windows XP(TM) Service Pack 3 - X86
    Nom du PC: PROPRIET-696611
    Utilisateur actuel: BUREAU
    .
    ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
    .
    .
    C:\Documents and Settings\BUREAU\Application Data\Dealio
    C:\Documents and Settings\BUREAU\Application Data\EoRezo
    C:\Documents and Settings\BUREAU\Application Data\Search Settings
    C:\Documents and Settings\BUREAU\Local Settings\Application Data\EoRezo
    C:\Program Files\Application Updater
    C:\Program Files\Dealio Toolbar
    C:\Program Files\EoRezo
    C:\Program Files\Mozilla FireFox\extensions\dealio@mybrowserbar.com
    C:\Program Files\Search Guard PlusU

    (!) -- Fichiers temporaires supprimés.
    .
    HKCU\Software\Dealio
    HKCU\Software\EoRezo
    HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0EC78F3C-12FC-4FCA-8FA3-1DFD7C463D98}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
    HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
    HKCU\Software\Search Settings
    HKLM\Software\Application Updater
    HKLM\Software\Classes\AppID\{AFBB7970-789A-4264-BA70-E8127DECE400}
    HKLM\Software\Classes\AppID\EoEngineBHO.DLL
    HKLM\Software\Classes\CLSID\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
    HKLM\Software\Classes\CLSID\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
    HKLM\Software\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
    HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
    HKLM\Software\Classes\EoEngineBHO.EOBHO
    HKLM\Software\Classes\EoEngineBHO.EOBHO.1
    HKLM\Software\Classes\Installer\Products\96DC878CBD58B624183A7E1157AABE19
    HKLM\Software\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
    HKLM\Software\Classes\Interface\{DF76E9B7-35EC-46FC-AF56-5B79DED9D64F}
    HKLM\Software\Classes\SearchSettings.BHO
    HKLM\Software\Classes\SearchSettings.BHO.1
    HKLM\Software\Classes\TypeLib\{18AF7201-4F14-4BCF-93FE-45617CF259FF}
    HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
    HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
    HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook
    HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook.1
    HKLM\Software\Dealio
    HKLM\Software\EoRezo
    HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B49C433C-502B-4946-B8D4-1484BEA46B69}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\96DC878CBD58B624183A7E1157AABE19
    HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C878CD69-85DB-426B-81A3-E71175AAEB91}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\EoRezo_is1
    HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
    HKLM\Software\Search Settings
    HKU\.DEFAULT\Software\Dealio
    HKU\.DEFAULT\Software\FBSearch
    HKU\.DEFAULT\Software\Search Settings
    HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
    HKLM\Software\Microsoft\Internet Explorer\Toolbar|{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Eorezo
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run|SearchSettings
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Softwarehelper
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Application Updater\ApplicationUpdater.exe
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\chrome.manifest
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\chrome\locale\EN-US\widgitoolbarplugin.properties
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\components\dealioToolbarFF.dll
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\install.rdf
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\FF\chrome\locale\en-US\searchsettingsplugin.dtd
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\FF\components\SearchSettingsFF.dll
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\FF\install.rdf
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\SearchSettings.dll
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\SearchSettings.exe
    HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\SearchSettingsRes409.dll
    .
    (Orpheline) HKLM,Run - InCD - C:\Program Files\Nero\Nero 7\InCD\InCD.exe (Fichier manquant)
    (Orpheline) HKLM,Run - WinVNC - C:\Program Files\TightVNC\WinVNC.exe (Fichier manquant)
    (Orpheline) HKLM,Run - Adobe ARM - C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe (Fichier manquant)
    (Orpheline) BHO: (Spybot-S&D IE Protection) -{53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll (Fichier manquant)
    (Orpheline) BHO: () -{9059D032-77E0-475A-89DA-226323E2FA5A} - c:\windows\system32\ntajztq.dll (Fichier manquant)
    (Orpheline) HKLM,Uninstall - ie7 - C:\WINDOWS\ie7\spuninst\spuninst.exe (Fichier manquant)
    .
    ============== SCAN ADDITIONNEL ==============
    .
    * Mozilla FireFox Version 3.5.9 (fr) *
    .
    C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.download.lastDir: C:\\Documents and Settings\\BUREAU\\Bureau
    C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.search.defaultenginename: Fast Browser Search
    C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.search.selectedEngine: Google
    C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.startup.homepage: hxxp://y.lo.st
    C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.1.9
    .
    EFFACÉ: C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - user_pref("browser.search.defaultenginename", "Fast Browser Search");
    EFFACÉ: C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - user_pref("browser.search.order.1", "Fast Browser Search");
    EFFACÉ: C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - user_pref("browser.startup.homepage", "hxxp://y.lo.st");
    .
    * Internet Explorer Version 8.0.6001.18702 *
    .
    [HKCU\Software\Microsoft\Internet Explorer\Main]
    .
    AutoHide: yes
    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Do404Search: 0x01000000
    Enable Browser Extensions: yes
    Local Page: C:\WINDOWS\system32\blank.htm
    Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
    Show_ToolBar: yes
    Start Page: hxxp://fr.msn.com/
    .
    [HKLM\Software\Microsoft\Internet Explorer\Main]
    .
    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Delete_Temp_Files_On_Exit: yes
    Local Page: C:\WINDOWS\system32\blank.htm
    Search bar: hxxp://search.msn.com/spbasic.htm
    Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Start Page: hxxp://fr.msn.com/
    .
    [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
    .
    Tabs: res://ieframe.dll/tabswelcome.htm
    Blank: res://mshtml.dll/blank.htm
    .
    ========================================
    .
    C:\Ad-Remover\Quarantine: 7 Fichier(s)
    C:\Ad-Remover\Backup: 14 Fichier(s)
    .
    C:\Ad-Report-CLEAN[1].txt - 8437 Octet(s)
    C:\Ad-Report-SCAN[1].txt - 7725 Octet(s)
    .
    Fin à: 15:54:45, 06/05/2010
    .
    ============== E.O.F - CLEAN[1] ==============
    0
  9. gabyy
     
    apres nettoyage de ccleaner
    le nouveau rapport

    .
    ======= RAPPORT D'AD-REMOVER 2.0.0.0,D | UNIQUEMENT XP/VISTA/7 =======
    .
    Mis à jour par C_XX le 01/05/10 à 19:50
    Contact: AdRemover.contact@gmail.com
    Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
    .
    Lancé à: 16:11:27 le 06/05/2010 | Mode normal | Option: CLEAN
    Exécuté de: C:\Ad-Remover\ADR.exe
    SE: Microsoft® Windows XP(TM) Service Pack 3 - X86
    Nom du PC: PROPRIET-696611
    Utilisateur actuel: BUREAU
    .
    ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
    .
    .

    (!) -- Fichiers temporaires supprimés.
    .
    .
    (Orpheline) BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} (CLSID manquant)
    .
    ============== SCAN ADDITIONNEL ==============
    .
    * Mozilla FireFox Version 3.5.9 (fr) *
    .
    C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.download.lastDir: C:\\Documents and Settings\\BUREAU\\Bureau
    C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.search.selectedEngine: Google
    C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.1.9
    .
    .
    * Internet Explorer Version 8.0.6001.18702 *
    .
    [HKCU\Software\Microsoft\Internet Explorer\Main]
    .
    AutoHide: yes
    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Do404Search: 0x01000000
    Enable Browser Extensions: yes
    Local Page: C:\WINDOWS\system32\blank.htm
    Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
    Show_ToolBar: yes
    Start Page: hxxp://fr.msn.com/
    .
    [HKLM\Software\Microsoft\Internet Explorer\Main]
    .
    Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Delete_Temp_Files_On_Exit: yes
    Local Page: C:\WINDOWS\system32\blank.htm
    Search bar: hxxp://search.msn.com/spbasic.htm
    Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Start Page: hxxp://fr.msn.com/
    .
    [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
    .
    Tabs: res://ieframe.dll/tabswelcome.htm
    Blank: res://mshtml.dll/blank.htm
    .
    ========================================
    .
    C:\Ad-Remover\Quarantine: 7 Fichier(s)
    C:\Ad-Remover\Backup: 14 Fichier(s)
    .
    C:\Ad-Report-CLEAN[1].txt - 8605 Octet(s)
    C:\Ad-Report-CLEAN[2].txt - 2323 Octet(s)
    C:\Ad-Report-SCAN[1].txt - 7725 Octet(s)
    .
    Fin à: 16:13:05, 06/05/2010
    .
    ============== E.O.F - CLEAN[2] ==============
    0
  10. gen-hackman
     
    ▶ Télécharge ZHPDiag (de Nicolas Coolman)

    ou :ZHPDiag

    Enregistre le sur ton Bureau.

    Une fois le téléchargement achevé,

    ▶ lance ZHPDiag.exe et clique sur Unzip dans la fenêtre qui s'ouvre.

    ▶ Clique sur le tournevis puis sur Tous pour cocher toutes les cases des options.

    ▶ Clique sur la loupe pour lancer l'analyse.

    A la fin de l'analyse,

    ▶ clique sur l'appareil photo et enregistre le rapport sur ton Bureau.

    Pour me le transmettre clique sur ce lien :

    http://www.cijoint.fr/

    ▶ Clique sur Parcourir et cherche le fichier C:\Documents and settings\le_nom_de_ta_session\.ZHPDiag.txt

    ▶ Clique sur Ouvrir.

    ▶ Clique sur "Cliquez ici pour déposer le fichier".

    Un lien de cette forme :

    http://www.cijoint.fr/cjlink.php?file=cj200905/cib7SU.txt

    est ajouté dans la page.

    ▶ Copie ce lien dans ta réponse.
    0
  11. gabyy
     
    http://www.cijoint.fr/cjlink.php?file=cj201005/cijCfplONw.txt
    0
  12. gen-hackman
     
    Run by BUREAU at 04/05/2010 09:34:15
    0