problème adware Résolu/Fermé

Question

Bonjour, comment je peu faire pour suprime l'adware suivant Gen:Adware.Heur.xy9@RSKFplci     , merci .



Configuration: Windows XP / Safari 533.4

Utilisateur anonyme · Answer

bonjour,

* Télécharge ZHPDiag sur ton bureau :

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html 

* Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin. 

* Clique sur l'icône représentant une loupe (« Lancer le diagnostic ») 
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette 
* Héberge le rapport ZHPDiag.txt sur Cijoint, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum :
http://www.cijoint.fr/

tuto zhpdiag :
http://www.premiumorange.com/zeb-help-process/zhpdiag.html

steph0404 · Answer

voici le lien http://www.cijoint.fr/cjlink.php?file=cj201009/cijrpqFpTM.txt

Utilisateur anonyme · Answer

tu n'as pas qu'un adware sur ton pc !

de toutes sortes d'infections !!!

*		/!\Avertissement :
Ce logiciel n'est à utiliser que prescrit par un helper qualifié.
Ne pas utiliser en dehors de ce cas de figure : dangereux! 
	
&#9658; Télécharges ComboFix à partir de ce lien et enregistres le sur ton bureau :
https://forum.pcastuces.com/combofix_renomme_au_telechargement-f31s22.htm 
ou ici :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe 
A lire 
https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix 

Avant d'utiliser ComboFix :
 
&#9658; ferme les fenêtres de tous les programmes en cours.
 
&#9658; Désactive provisoirement et seulement le temps de l'utilisation de ComboFix, la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner fortement la procédure de recherche et de nettoyage de l'outil. 
Une fois fait, sur ton bureau double-clic sur Combofix.exe. 

- Répond oui au message d'avertissement, pour que le programme commence à procéder à l'analyse du pc.
 
- il se peut que Combofix ait besoin de se connecter à internet pour trouver les mises à jour, donc il faut l'autoriser.

/!\ Pendant la durée de cette étape, ne te sert pas du pc et n'ouvre aucun programmes.
 
- En fin de scan il est possible que ComboFix ait besoin de redémarrer le pc pour finaliser la désinfection\recherche, laisses-le faire. 
- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt) 
&#9658; Réactive la protection en temps réel de ton Antivirus et de tes Antispywares, avant de te reconnecter à internet. 
&#9658; Reviens sur le forum, et copie et colle la totalité du contenu de C:\Combofix.txt dans ton prochain message.

steph0404 · Answer

bonjour electricien 69 , j'ai fait se que tu ma écrit au dessus mais je ne retrouve pas le rapport de combofix dans le bloc note

Utilisateur anonyme · Answer

bonsoir,
- Un rapport s'ouvrira ensuite dans le bloc notes, ce fichier rapport Combofix.txt, est automatiquement sauvegardé et rangé à C:\Combofix.txt)

steph0404 · Answer

je ne trouve rien dans le bloc note

Utilisateur anonyme · Answer

ok,
repasse un autre zhpdiag, héberge son rapport sur Cijoint, poste le lien sur ton prochain messge, aide toi de ce poste :

https://forums.commentcamarche.net/forum/affich-19160956-probleme-adware#1

steph0404 · Answer

http://www.cijoint.fr/cjlink.php?file=cj201009/cijEFznYgC.txt
voila

Utilisateur anonyme · Answer

*	Télécharge de AD-Remover sur ton Bureau. (Merci à C_XX)
http://pagesperso-orange.fr/NosTools/C_XX/AD-R.exe

Miroir: 

https://www.androidworld.fr/

/!\ Ferme toutes applications en cours /!\ 

- Double-clique sur l'icône Ad-remover située sur ton Bureau. 
- Sur la page, clique sur le bouton « Nettoyer »
- Confirme lancement du scan
- Laisse travailler l'outil.
- Poste le rapport qui apparaît à la fin. 

(Le rapport est sauvegardé aussi sous C:\Ad-report(Scan/clean).Txt) 

(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

steph0404 · Answer

======= RAPPORT D'AD-REMOVER 2.0.0.1,E | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par C_XX le 06/09/10 à 15:20
Contact: AdRemover.contact[AT]gmail.com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 20:01:21 le 13/09/2010, Mode normal

Microsoft Windows XP Édition familiale Service Pack 3 (X86) 
stephane doux@DOUX-57913096FA ( ) 
 
============== RECHERCHE ==============

Service: "Application Updater" Présent 

0,Dossier trouvé: C:\WINDOWS\Installer\{E1B94435-241E-4519-B1C3-C4DD9EB352A2}
0,Dossier trouvé: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\AbsoluCasino
0,Dossier trouvé: C:\Program Files\Application Updater
0,Dossier trouvé: C:\Documents and Settings\stephane doux\Local Settings\Application Data\Conduit
0,Dossier trouvé: C:\Program Files\Conduit
0,Dossier trouvé: C:\Documents and Settings\stephane doux\Application Data\EoRezo
0,Dossier trouvé: C:\Program Files\EoRezo
0,Dossier trouvé: C:\Documents and Settings\stephane doux\Local Settings\Application Data\IMBooster4web-en
0,Dossier trouvé: C:\Program Files\IMBooster4web-en
0,Dossier trouvé: C:\Program Files\Iminent
0,Dossier trouvé: C:\Documents and Settings\stephane doux\Application Data\ItsLabel
0,Dossier trouvé: C:\Documents and Settings\stephane doux\Application Data\pdfforge
0,Dossier trouvé: C:\Program Files\pdfforge Toolbar
0,Dossier trouvé: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\RelevantKnowledge
0,Dossier trouvé: C:\Program Files\RelevantKnowledge
0,Dossier trouvé: C:\Documents and Settings\stephane doux\Application Data\Search Settings
3,Fichier trouvé: C:\WINDOWS\Installer\28a395.msi  

1,Clé trouvée: HKLM\Software\Classes\CLSID\{1D7D53E9-82D3-4D8F-81E0-8D5197DDACAE}
1,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D7D53E9-82D3-4D8F-81E0-8D5197DDACAE}
1,Clé trouvée: HKLM\Software\Classes\CLSID\{346DE098-61F9-4B42-89DA-6DFBA7091BB6}
1,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{346DE098-61F9-4B42-89DA-6DFBA7091BB6}
1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{346DE098-61F9-4B42-89DA-6DFBA7091BB6}
1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{346DE098-61F9-4B42-89DA-6DFBA7091BB6}
1,Clé trouvée: HKLM\Software\Classes\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350}
1,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}
1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
1,Clé trouvée: HKLM\Software\Classes\CLSID\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
1,Clé trouvée: HKLM\Software\Classes\CLSID\{A6E9BAAF-53CD-4575-967B-2AF710A7D21F}
1,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A6E9BAAF-53CD-4575-967B-2AF710A7D21F}
1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A6E9BAAF-53CD-4575-967B-2AF710A7D21F}
1,Clé trouvée: HKLM\Software\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}
1,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}
1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B922D405-6D13-4A2B-AE89-08A030DA4402}
1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B922D405-6D13-4A2B-AE89-08A030DA4402}
1,Clé trouvée: HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
1,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
1,Clé trouvée: HKLM\Software\Classes\CLSID\{F40E74EF-5EA7-4EAC-9CE4-C2B8D8A210AE}
1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F40E74EF-5EA7-4EAC-9CE4-C2B8D8A210AE}
1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F40E74EF-5EA7-4EAC-9CE4-C2B8D8A210AE}
1,Clé trouvée: HKLM\Software\Classes\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
1,Clé trouvée: HKLM\Software\Classes\TypeLib\{587D1093-12E0-4B0E-9426-AF9DC5ABB77D}
1,Clé trouvée: HKLM\Software\Classes\TypeLib\{77860007-19AE-4C29-B26D-AEA48F3A05C5}
1,Clé trouvée: HKLM\Software\Classes\TypeLib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
0,Clé trouvée: HKLM\Software\Classes\IminentBHONavigationError.CHelperBHO
0,Clé trouvée: HKLM\Software\Classes\IminentBHONavigationError.CHelperBHO.1
0,Clé trouvée: HKLM\Software\Classes\IminentLinkToContent.LinkToContent
0,Clé trouvée: HKLM\Software\Classes\IminentLinkToContent.LinkToContent.1
0,Clé trouvée: HKLM\Software\Classes\Toolbar.CT2032792
0,Clé trouvée: HKLM\Software\Application Updater
0,Clé trouvée: HKLM\Software\Conduit
0,Clé trouvée: HKLM\Software\EoRezo
0,Clé trouvée: HKLM\Software\IMBooster4web-en
0,Clé trouvée: HKLM\Software\Iminent
0,Clé trouvée: HKLM\Software\ItsLabel
0,Clé trouvée: HKLM\Software\pdfforge
0,Clé trouvée: HKLM\Software\Search Settings
0,Clé trouvée: HKCU\Software\Conduit
0,Clé trouvée: HKCU\Software\EoRezo
0,Clé trouvée: HKCU\Software\Grand Virtual
0,Clé trouvée: HKCU\Software\IMBooster4web-en
0,Clé trouvée: HKCU\Software\Iminent
0,Clé trouvée: HKCU\Software\ItsLabel
0,Clé trouvée: HKCU\Software\pdfforge
0,Clé trouvée: HKCU\Software\Search Settings
0,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\EoRezo
0,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\IMBooster
0,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\ItsLabel
0,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\RelevantKnowledge
0,Clé trouvée: HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Iminent.Notifier
3,Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
3,Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\30b4c627-1ace-4e84-9761-6066d00084b3
3,Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\331eb006-39a6-45db-b396-1fa2b6690d8b
3,Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\4fdea6d3-e853-4ce6-9e1e-f56e145962fb
3,Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\ca9c2ed5-70b4-46d6-82e0-e0cb725da94c
0,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5791B7D3-8B34-4218-9750-6A8E45D0AD32}
0,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\IMBooster4web-en Toolbar
0,Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Search Settings
0,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
0,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
0,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SearchTheWeb

0,Valeur trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Eoengine
0,Valeur trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|SearchSettings
0,Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{346DE098-61F9-4B42-89DA-6DFBA7091BB6}
0,Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
0,Valeur trouvée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{B922D405-6D13-4A2B-AE89-08A030DA4402}
0,Valeur trouvée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{346DE098-61F9-4B42-89DA-6DFBA7091BB6}
0,Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{346DE098-61F9-4B42-89DA-6DFBA7091BB6}


============== SCAN ADDITIONNEL ==============

** Internet Explorer Version [8.0.6001.18702] **

[HKCU\Software\Microsoft\Internet Explorer\Main] 
AutoHide: yes
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\WINDOWS\system32\blank.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Show_ToolBar: yes
Start Page: hxxp://www.sfr.fr/fr/adsl.jsp
Use Search Asst: no

[HKLM\Software\Microsoft\Internet Explorer\Main] 
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Delete_Temp_Files_On_Exit: yes
Local Page: C:\WINDOWS\system32\blank.htm
Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] 
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files\Ad-Remover\Quarantine: 0 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 1 Fichier(s)

C:\Ad-Report-SCAN[1].txt - 13/09/2010 (8371 Octet(s)) 

Fin à: 20:06:31, 13/09/2010 
 
============== E.O.F ==============

Utilisateur anonyme · Answer

lance le nettoyage, poste son rapport

steph0404 · Answer

======= RAPPORT D'AD-REMOVER 2.0.0.1,E | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par C_XX le 06/09/10 à 15:20
Contact: AdRemover.contact[AT]gmail.com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 20:12:41 le 13/09/2010, Mode normal

Microsoft Windows XP Édition familiale Service Pack 3 (X86) 
stephane doux@DOUX-57913096FA ( ) 
 
============== ACTION(S) ==============

Service: "Application Updater" Stoppé et supprimé 

0,Dossier supprimé: C:\WINDOWS\Installer\{E1B94435-241E-4519-B1C3-C4DD9EB352A2}
0,Dossier supprimé: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\AbsoluCasino
0,Dossier supprimé: C:\Program Files\Application Updater
0,Dossier supprimé: C:\Documents and Settings\stephane doux\Local Settings\Application Data\Conduit
0,Dossier supprimé: C:\Program Files\Conduit
0,Dossier supprimé: C:\Documents and Settings\stephane doux\Application Data\EoRezo
0,Dossier supprimé: C:\Program Files\EoRezo
0,Dossier supprimé: C:\Documents and Settings\stephane doux\Local Settings\Application Data\IMBooster4web-en
0,Dossier supprimé: C:\Program Files\IMBooster4web-en
0,Dossier supprimé: C:\Program Files\Iminent
0,Dossier supprimé: C:\Documents and Settings\stephane doux\Application Data\ItsLabel
0,Dossier supprimé: C:\Documents and Settings\stephane doux\Application Data\pdfforge
0,Dossier supprimé: C:\Program Files\pdfforge Toolbar
0,Dossier supprimé: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\RelevantKnowledge
0,Dossier supprimé: C:\Program Files\RelevantKnowledge
0,Dossier supprimé: C:\Documents and Settings\stephane doux\Application Data\Search Settings
3,Fichier supprimé: C:\WINDOWS\Installer\28a395.msi  

(!) -- Fichiers temporaires supprimés.


1,Clé supprimée: HKLM\Software\Classes\CLSID\{1D7D53E9-82D3-4D8F-81E0-8D5197DDACAE}
1,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D7D53E9-82D3-4D8F-81E0-8D5197DDACAE}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{346DE098-61F9-4B42-89DA-6DFBA7091BB6}
1,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{346DE098-61F9-4B42-89DA-6DFBA7091BB6}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{346DE098-61F9-4B42-89DA-6DFBA7091BB6}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{346DE098-61F9-4B42-89DA-6DFBA7091BB6}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{64F56FC1-1272-44CD-BA6E-39723696E350}
1,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64F56FC1-1272-44CD-BA6E-39723696E350}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{A6E9BAAF-53CD-4575-967B-2AF710A7D21F}
1,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A6E9BAAF-53CD-4575-967B-2AF710A7D21F}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A6E9BAAF-53CD-4575-967B-2AF710A7D21F}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}
1,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B922D405-6D13-4A2B-AE89-08A030DA4402}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B922D405-6D13-4A2B-AE89-08A030DA4402}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
1,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
1,Clé supprimée: HKLM\Software\Classes\CLSID\{F40E74EF-5EA7-4EAC-9CE4-C2B8D8A210AE}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F40E74EF-5EA7-4EAC-9CE4-C2B8D8A210AE}
1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F40E74EF-5EA7-4EAC-9CE4-C2B8D8A210AE}
1,Clé supprimée: HKLM\Software\Classes\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A}
1,Clé supprimée: HKLM\Software\Classes\TypeLib\{587D1093-12E0-4B0E-9426-AF9DC5ABB77D}
1,Clé supprimée: HKLM\Software\Classes\TypeLib\{77860007-19AE-4C29-B26D-AEA48F3A05C5}
1,Clé supprimée: HKLM\Software\Classes\TypeLib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F}
0,Clé supprimée: HKLM\Software\Classes\IminentBHONavigationError.CHelperBHO
0,Clé supprimée: HKLM\Software\Classes\IminentBHONavigationError.CHelperBHO.1
0,Clé supprimée: HKLM\Software\Classes\IminentLinkToContent.LinkToContent
0,Clé supprimée: HKLM\Software\Classes\IminentLinkToContent.LinkToContent.1
0,Clé supprimée: HKLM\Software\Classes\Toolbar.CT2032792
0,Clé supprimée: HKLM\Software\Application Updater
0,Clé supprimée: HKLM\Software\Conduit
0,Clé supprimée: HKLM\Software\EoRezo
0,Clé supprimée: HKLM\Software\IMBooster4web-en
0,Clé supprimée: HKLM\Software\Iminent
0,Clé supprimée: HKLM\Software\ItsLabel
0,Clé supprimée: HKLM\Software\pdfforge
0,Clé supprimée: HKLM\Software\Search Settings
0,Clé supprimée: HKCU\Software\Conduit
0,Clé supprimée: HKCU\Software\EoRezo
0,Clé supprimée: HKCU\Software\Grand Virtual
0,Clé supprimée: HKCU\Software\IMBooster4web-en
0,Clé supprimée: HKCU\Software\Iminent
0,Clé supprimée: HKCU\Software\ItsLabel
0,Clé supprimée: HKCU\Software\pdfforge
0,Clé supprimée: HKCU\Software\Search Settings
0,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\EoRezo
0,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\IMBooster
0,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\ItsLabel
0,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\RelevantKnowledge
0,Clé supprimée: HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Iminent.Notifier
3,Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
3,Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\30b4c627-1ace-4e84-9761-6066d00084b3
3,Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\331eb006-39a6-45db-b396-1fa2b6690d8b
3,Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\4fdea6d3-e853-4ce6-9e1e-f56e145962fb
3,Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\ca9c2ed5-70b4-46d6-82e0-e0cb725da94c
0,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5791B7D3-8B34-4218-9750-6A8E45D0AD32}
0,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\IMBooster4web-en Toolbar
0,Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Search Settings
0,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
0,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SearchTheWeb

0,Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Eoengine
0,Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|SearchSettings
0,Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{346DE098-61F9-4B42-89DA-6DFBA7091BB6}
0,Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
0,Valeur supprimée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{B922D405-6D13-4A2B-AE89-08A030DA4402}
0,Valeur supprimée: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{346DE098-61F9-4B42-89DA-6DFBA7091BB6}
0,Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{346DE098-61F9-4B42-89DA-6DFBA7091BB6}


============== SCAN ADDITIONNEL ==============

** Internet Explorer Version [8.0.6001.18702] **

[HKCU\Software\Microsoft\Internet Explorer\Main] 
AutoHide: yes
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\WINDOWS\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Use Search Asst: no

[HKLM\Software\Microsoft\Internet Explorer\Main] 
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\WINDOWS\system32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] 
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files\Ad-Remover\Quarantine: 278 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 14 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 13/09/2010 (1793 Octet(s)) 
C:\Ad-Report-SCAN[1].txt - 13/09/2010 (9654 Octet(s)) 

Fin à: 20:15:19, 13/09/2010 
 
============== E.O.F ==============

Utilisateur anonyme · Answer

relance ADR, clique sur désinstaller,

repasse un autre zhpdiag, enregistre le rapport sur ton bureau,

héberge le sur Cijoint, colle le lien sur ton prochain message  :-)

steph0404 · Answer

http://www.cijoint.fr/cjlink.php?file=cj201009/cijuvLS79q.txt

Utilisateur anonyme · Answer

Télécharge Lop S&D (créé par eric 71) sur ton Bureau : 
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2 
* Double-clique dessus pour lancer l'installation 
* Double-clique sur le raccourci Lop S&D présent sur ton Bureau
* Sélectionne la langue souhaitée, puis choisis l'option 2

* Patiente jusqu'à la fin du scan 
* Poste le rapport généré 
* Réactive ton antivirus 

Tutorial pour t'aider : http://www.malekal.com//tutorial_Lop_SD.php

steph0404 · Answer

--------------------\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Uniprocessor Free : AMD Sempron(tm) Processor 2600+ )
   BIOS : Phoenix - AwardBIOS v6.00PG
   USER : stephane doux ( Administrator )
   BOOT : Normal boot
   Antivirus : avast! Antivirus 5.0.83886757 (Activated)
   A:\ (USB)
   C:\ (Local Disk) - NTFS - Total:152 Go (Free:77 Go)
   H:\ (CD or DVD)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [2] ( 14/09/2010| 7:58 )

 
   \\\\\\\\\\\\\\\ 

 
   --------------------\  Listing des dossiers dans APPLIC~1

   [13/04/2009|15:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
   [06/06/2010|08:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\~0
   [06/06/2010|08:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\~1
   [07/04/2010|17:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
   [09/08/2007|00:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ahead
   [19/06/2010|19:24] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Alwil Software
   [04/10/2008|14:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
   [04/07/2010|10:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
   [10/06/2009|20:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\avg8
   [23/08/2009|12:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
   [28/12/2007|13:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Broderbund Software
   [06/09/2009|15:37] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Emjysoft
   [30/12/2007|11:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FLEXnet
   [12/09/2010|10:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
   [22/12/2008|20:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
   [13/09/2010|11:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
   [08/08/2007|20:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
   [23/01/2009|11:46] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logishrd
   [03/09/2007|19:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech
   [26/06/2009|13:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
   [05/06/2010|03:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
   [14/08/2010|18:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
   [21/09/2007|18:17] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MumboJumbo
   [27/10/2007|18:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\muvee Technologies
   [09/08/2007|00:29] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
   [14/08/2008|18:10] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NOS
   [26/09/2009|13:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
   [23/12/2007|19:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PlayFirst
   [25/08/2008|10:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skyline
   [10/09/2010|20:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
   [28/12/2007|15:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\UDL
   [09/08/2007|13:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
   [24/09/2007|12:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Zylom

   [06/08/2008|23:06] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
   [08/08/2007|18:42] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

   [02/09/2009|17:20] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

   [10/06/2009|20:30] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

   [23/01/2009|10:53] C:\DOCUME~1\STEPHA~1\APPLIC~1\Adobe
   [09/08/2007|17:02] C:\DOCUME~1\STEPHA~1\APPLIC~1\Ahead
   [14/02/2009|19:06] C:\DOCUME~1\STEPHA~1\APPLIC~1\Apple Computer
   [30/10/2007|16:18] C:\DOCUME~1\STEPHA~1\APPLIC~1\ArcSoft
   [23/08/2009|12:45] C:\DOCUME~1\STEPHA~1\APPLIC~1\AVS4YOU
   [25/07/2010|06:07] C:\DOCUME~1\STEPHA~1\APPLIC~1\Azureus
   [30/01/2008|21:48] C:\DOCUME~1\STEPHA~1\APPLIC~1\ConvertTemp
   [28/12/2007|13:42] C:\DOCUME~1\STEPHA~1\APPLIC~1\EPSON
   [01/11/2009|16:46] C:\DOCUME~1\STEPHA~1\APPLIC~1\FUJIFILM
   [24/12/2007|15:49] C:\DOCUME~1\STEPHA~1\APPLIC~1\Google
   [08/08/2007|20:47] C:\DOCUME~1\STEPHA~1\APPLIC~1\Grisoft
   [28/12/2007|14:09] C:\DOCUME~1\STEPHA~1\APPLIC~1\Help
   [01/01/2008|17:02] C:\DOCUME~1\STEPHA~1\APPLIC~1\Identities
   [06/09/2009|15:11] C:\DOCUME~1\STEPHA~1\APPLIC~1\Image Zone Express
   [29/12/2009|16:43] C:\DOCUME~1\STEPHA~1\APPLIC~1\InstallShield
   [06/09/2009|16:01] C:\DOCUME~1\STEPHA~1\APPLIC~1\jsoft.fr
   [06/09/2009|15:52] C:\DOCUME~1\STEPHA~1\APPLIC~1\KC Softwares
   [04/05/2008|20:24] C:\DOCUME~1\STEPHA~1\APPLIC~1\Leadertech
   [25/09/2007|18:53] C:\DOCUME~1\STEPHA~1\APPLIC~1\Macromedia
   [18/03/2009|19:06] C:\DOCUME~1\STEPHA~1\APPLIC~1\Media Player Classic
   [12/06/2010|19:33] C:\DOCUME~1\STEPHA~1\APPLIC~1\Microsoft
   [18/11/2007|21:16] C:\DOCUME~1\STEPHA~1\APPLIC~1\Mozilla
   [24/08/2007|11:11] C:\DOCUME~1\STEPHA~1\APPLIC~1\MSNInstaller
   [27/10/2007|19:33] C:\DOCUME~1\STEPHA~1\APPLIC~1\muvee Technologies
   [11/12/2008|12:21] C:\DOCUME~1\STEPHA~1\APPLIC~1\OpenOffice.org
   [07/12/2008|13:36] C:\DOCUME~1\STEPHA~1\APPLIC~1\OpenOffice.org2
   [26/09/2009|13:22] C:\DOCUME~1\STEPHA~1\APPLIC~1\PC Suite
   [23/12/2007|19:16] C:\DOCUME~1\STEPHA~1\APPLIC~1\PlayFirst
   [12/09/2010|12:36] C:\DOCUME~1\STEPHA~1\APPLIC~1\QuickScan
   [26/09/2009|12:38] C:\DOCUME~1\STEPHA~1\APPLIC~1\Samsung
   [06/03/2009|12:50] C:\DOCUME~1\STEPHA~1\APPLIC~1\Shareaza
   [26/05/2008|13:22] C:\DOCUME~1\STEPHA~1\APPLIC~1\Sprite PC Agent
   [26/05/2008|13:22] C:\DOCUME~1\STEPHA~1\APPLIC~1\Sprite Setup Wizard
   [26/05/2008|13:22] C:\DOCUME~1\STEPHA~1\APPLIC~1\Sprite Software
   [24/09/2007|12:50] C:\DOCUME~1\STEPHA~1\APPLIC~1\Sun
   [30/01/2008|21:48] C:\DOCUME~1\STEPHA~1\APPLIC~1\Temporary
   [18/11/2007|21:15] C:\DOCUME~1\STEPHA~1\APPLIC~1\Thunderbird
   [30/01/2008|21:48] C:\DOCUME~1\STEPHA~1\APPLIC~1\TransRender
   [23/08/2009|13:32] C:\DOCUME~1\STEPHA~1\APPLIC~1\Uniblue
   [30/11/2008|16:44] C:\DOCUME~1\STEPHA~1\APPLIC~1\WinRAR
   [01/01/2008|17:02] C:\DOCUME~1\STEPHA~1\APPLIC~1\Zylom
 
   --------------------\  Tâches planifiées dans C:\WINDOWS	asks

   [14/09/2010 07:48][--ah-----] C:\WINDOWS	asks\User_Feed_Synchronization-{318B34C3-FFD3-4B71-9F7B-EC4CB0C38442}.job
   [14/09/2010 07:16][--a------] C:\WINDOWS	asks\GoogleUpdateTaskMachineUA.job
   [14/09/2010 02:16][--a------] C:\WINDOWS	asks\GoogleUpdateTaskMachineCore.job
   [13/09/2010 20:24][--a------] C:\WINDOWS	asks\Google Software Updater.job
   [04/09/2010 22:11][--a------] C:\WINDOWS	asks\AppleSoftwareUpdate.job
   [13/09/2010 20:24][--ah-----] C:\WINDOWS	asks\SA.DAT
   [05/08/2004 14:00][-r-h-----] C:\WINDOWS	asks\desktop.ini

   --------------------\  Listing des dossiers dans C:\Program Files

   [23/08/2008|17:05] C:\Program Files\AbiSuite2
   [11/08/2008|11:22] C:\Program Files\Adobe
   [13/09/2010|21:21] C:\Program Files\Ad-Remover
   [20/06/2010|11:35] C:\Program Files\Alwil Software
   [04/10/2008|14:20] C:\Program Files\Apple Software Update
   [27/10/2007|19:37] C:\Program Files\ArcSoft
   [05/03/2009|20:55] C:\Program Files\AVG
   [23/08/2009|13:39] C:\Program Files\AVS4YOU
   [01/08/2009|19:33] C:\Program Files\Azureus
   [24/02/2008|17:11] C:\Program Files\Babylon
   [13/04/2009|14:30] C:\Program Files\Bonjour
   [28/12/2007|13:04] C:\Program Files\Broderbund
   [23/01/2009|13:50] C:\Program Files\Canal
   [08/08/2007|20:56] C:\Program Files\CCleaner
   [26/06/2009|10:37] C:\Program Files\Cicle Developement
   [08/08/2007|18:39] C:\Program Files\ComPlus Applications
   [26/09/2009|12:39] C:\Program Files\DIFX
   [27/10/2007|18:40] C:\Program Files\DV5X9
   [12/09/2009|16:46] C:\Program Files\eMule
   [28/12/2007|15:18] C:\Program Files\EPSON
   [13/09/2010|18:55] C:\Program Files\Fichiers communs
   [04/10/2009|12:32] C:\Program Files\Foto.com
   [19/06/2010|19:28] C:\Program Files\Google
   [04/09/2007|13:08] C:\Program Files\HP
   [11/08/2008|18:47] C:\Program Files\IncrediMail
   [19/08/2010|12:51] C:\Program Files\InstallShield Installation Information
   [14/08/2010|19:00] C:\Program Files\Internet Explorer
   [21/11/2009|17:20] C:\Program Files\Java
   [10/12/2008|20:47] C:\Program Files\JRE
   [06/09/2009|16:01] C:\Program Files\Jsoft.fr
   [06/09/2009|15:46] C:\Program Files\KC Softwares
   [29/12/2009|16:05] C:\Program Files\Lavalys
   [23/01/2009|11:46] C:\Program Files\Logitech
   [26/09/2009|12:38] C:\Program Files\MarkAny
   [19/08/2010|12:47] C:\Program Files\MarkAnyContentSAFER
   [07/10/2008|18:04] C:\Program Files\Messenger
   [30/01/2010|17:21] C:\Program Files\Messenger Plus! Live
   [22/05/2009|22:10] C:\Program Files\Microsoft
   [26/05/2008|13:21] C:\Program Files\Microsoft ActiveSync
   [05/01/2008|04:01] C:\Program Files\Microsoft CAPICOM 2.1.0.2
   [08/08/2007|18:42] C:\Program Files\microsoft frontpage
   [04/01/2008|11:43] C:\Program Files\Microsoft Office
   [09/09/2010|12:46] C:\Program Files\Microsoft Silverlight
   [22/05/2009|22:07] C:\Program Files\Microsoft SQL Server Compact Edition
   [22/05/2009|22:08] C:\Program Files\Microsoft Sync Framework
   [05/10/2009|20:23] C:\Program Files\Microsoft Works
   [12/06/2010|18:33] C:\Program Files\Mio Technology
   [14/08/2010|18:56] C:\Program Files\Movie Maker
   [18/02/2008|19:13] C:\Program Files\MP3 Player Utilities 3.79
   [18/02/2008|19:20] C:\Program Files\MP3 Player Utilities 4.15
   [21/08/2009|03:13] C:\Program Files\MSBuild
   [09/10/2007|13:36] C:\Program Files\MSECache
   [10/08/2007|13:47] C:\Program Files\MSN
   [08/08/2007|18:38] C:\Program Files\MSN Gaming Zone
   [09/08/2007|10:11] C:\Program Files\MSXML 4.0
   [27/10/2007|18:44] C:\Program Files\muvee Technologies
   [21/11/2009|20:40] C:\Program Files\Navilog1
   [24/02/2008|16:57] C:\Program Files\Neoact
   [09/08/2007|00:29] C:\Program Files\Nero
   [07/10/2008|17:42] C:\Program Files\NetMeeting
   [01/10/2007|11:19] C:\Program Files\Neuf
   [14/08/2008|18:10] C:\Program Files\NOS
   [08/08/2007|18:38] C:\Program Files\Online Services
   [10/12/2008|20:45] C:\Program Files\OpenOffice.org 2.2
   [10/12/2008|20:47] C:\Program Files\OpenOffice.org 3
   [12/05/2010|19:58] C:\Program Files\Outlook Express
   [26/09/2009|12:40] C:\Program Files\PC Connectivity Solution
   [10/09/2010|20:26] C:\Program Files\PC Speed Maximizer
   [01/04/2010|18:48] C:\Program Files\PDFCreator
   [03/10/2009|16:52] C:\Program Files\PhotoScape
   [04/07/2010|10:04] C:\Program Files\QuickTime
   [11/08/2007|11:05] C:\Program Files\RALINK
   [21/08/2009|03:12] C:\Program Files\Reference Assemblies
   [26/05/2008|12:55] C:\Program Files\Ressources Windows Mobile
   [08/08/2007|21:30] C:\Program Files\S3Inc
   [26/09/2009|12:40] C:\Program Files\Samsung
   [08/08/2007|18:40] C:\Program Files\Services en ligne
   [06/03/2009|12:50] C:\Program Files\Shareaza
   [16/03/2009|19:12] C:\Program Files\Skyline
   [08/08/2007|18:56] C:\Program Files\Softwin
   [26/05/2008|13:22] C:\Program Files\Sprite Software
   [08/08/2007|20:59] C:\Program Files\Spybot - Search & Destroy
   [29/12/2009|16:44] C:\Program Files\Sweex
   [28/08/2009|18:56] C:\Program Files	rend micro
   [08/08/2007|18:54] C:\Program Files\Uninstall Information
   [18/02/2008|18:51] C:\Program Files\USBDisk
   [09/08/2007|10:02] C:\Program Files\VIA
   [09/08/2007|10:03] C:\Program Files\VIAudioi
   [22/10/2007|17:35] C:\Program Files\Virtools
   [03/02/2010|15:24] C:\Program Files\VirtualDub-MPEG2
   [28/12/2007|13:09] C:\Program Files\Web Publish
   [04/12/2009|14:44] C:\Program Files\Windows Live
   [03/03/2009|18:20] C:\Program Files\Windows Live Safety Center
   [22/05/2009|22:04] C:\Program Files\Windows Live SkyDrive
   [23/01/2009|10:45] C:\Program Files\Windows Media Connect 2
   [23/01/2009|10:45] C:\Program Files\Windows Media Player
   [06/11/2009|18:17] C:\Program Files\Windows NT
   [08/08/2007|18:40] C:\Program Files\WindowsUpdate
   [30/11/2008|16:43] C:\Program Files\WinRAR
   [08/08/2007|18:42] C:\Program Files\xerox
   [08/08/2007|20:56] C:\Program Files\Yahoo!
   [13/09/2010|21:22] C:\Program Files\ZHPDiag
   [02/01/2008|11:28] C:\Program Files\Zylom Games

   --------------------\  Listing des dossiers dans C:\Program Files\Fichiers communs

   [07/04/2010|17:11] C:\Program Files\Fichiers communs\Adobe
   [04/05/2009|14:54] C:\Program Files\Fichiers communs\Adobe AIR
   [09/08/2007|10:31] C:\Program Files\Fichiers communs\Ahead
   [04/07/2010|10:05] C:\Program Files\Fichiers communs\Apple
   [27/10/2007|19:37] C:\Program Files\Fichiers communs\ArcSoft
   [23/08/2009|13:39] C:\Program Files\Fichiers communs\AVSMedia
   [28/12/2007|13:04] C:\Program Files\Fichiers communs\Broderbund
   [04/01/2008|11:43] C:\Program Files\Fichiers communs\DESIGNER
   [04/09/2007|13:08] C:\Program Files\Fichiers communs\HP
   [08/08/2007|19:09] C:\Program Files\Fichiers communs\InstallShield
   [08/08/2007|21:16] C:\Program Files\Fichiers communs\Java
   [23/01/2009|12:08] C:\Program Files\Fichiers communs\logishrd
   [23/12/2008|18:38] C:\Program Files\Fichiers communs\Logitech
   [12/06/2010|18:34] C:\Program Files\Fichiers communs\Microsoft Shared
   [08/08/2007|18:39] C:\Program Files\Fichiers communs\MSSoap
   [08/08/2007|20:29] C:\Program Files\Fichiers communs\ODBC
   [08/08/2007|19:17] C:\Program Files\Fichiers communs\Python
   [06/09/2009|18:35] C:\Program Files\Fichiers communs\Real
   [08/08/2007|18:40] C:\Program Files\Fichiers communs\Services
   [02/08/2009|12:10] C:\Program Files\Fichiers communs\Softwin
   [08/08/2007|20:29] C:\Program Files\Fichiers communs\SpeechEngines
   [07/10/2008|17:40] C:\Program Files\Fichiers communs\System
   [27/04/2009|13:07] C:\Program Files\Fichiers communs\Windows Live

   --------------------\  Process

   ( 52 Processes )

   ... OK !

   --------------------\  Recherche avec S_Lop

   Aucun fichier / dossier Lop trouvé !
 
   --------------------\  Recherche de Fichiers / Dossiers Lop

   Aucun fichier / dossier Lop trouvé ! 
 
   --------------------\  Verification du Registre
 
   ..... OK !

   --------------------\  Verification du fichier Hosts

   Fichier Hosts PROPRE


   --------------------\  Recherche de fichiers avec Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2010-09-14 08:00:36
   Windows 5.1.2600 Service Pack 3 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !

   [F:14][D:23]-> C:\DOCUME~1\STEPHA~1\LOCALS~1\Temp
   [F:5][D:0]-> C:\DOCUME~1\STEPHA~1\Cookies
   [F:173][D:5]-> C:\DOCUME~1\STEPHA~1\LOCALS~1\TEMPOR~1\content.IE5

   1 - "C:\Lop SD\LopR_1.txt" - 14/09/2010| 8:01 - Option : [2]

   --------------------\  Fin du rapport a  8:01:58

Utilisateur anonyme · Answer

bonjour, 
repasse un autre zhpdiag, enregistre son rapport sur ton bureau, héberge son rapport sur Cijoint, colle le lien fourni sur ton prochain message  :-) 

@++ 
O.o°*??? Membre, Contributeur Sécurité CCM o°.Oø¤º°'°º¤ø

steph0404 · Answer

bonjour voila le rapport http://www.cijoint.fr/cjlink.php?file=cj201009/cij5vXTo82.txt

Utilisateur anonyme · Answer

il y a encore des infections sur ton pc !

? Double-clique sur le raccourci Lop S&D présent sur le Bureau, 

? Sélectionne entièrement ce en gras ci-dessous , puis clic droit et choisir Copier 


C:\Program Files\Cicle Developement 


? Relance Lop S&D 

? Choisis Option 4 : LopScript 

? Une page blanche va s'ouvrir , clic droit dessus et choisir Coller 

? Ferme la page , il sera demandé de l'enregistrer , cliquer sur [Enregistrer] 

? A l'issue du scan, le bloc notes va s'ouvrir avec le résultat de la recherche, copie - colle les résultats a ta prochaine réponse.

steph0404 · Answer

impossible de faire un copier coller de cicle developement

steph0404 · Answer

a

Utilisateur anonyme · Answer

essaie de le désinstaller via ajout/suppression de programme  :-)

steph0404 · Answer

je désinstaller quoi

Utilisateur anonyme · Answer

C:\Program Files\Cicle Developement

steph0404 · Answer

je ne le retrouve pas dans ajout/suppression de programme

Utilisateur anonyme · Answer

ok,
repasse un autre zhpdiag, enregistre son rapport sur ton bureau, héberge son rapport sur Cijoint ....

steph0404 · Answer

http://www.cijoint.fr/cjlink.php?file=cj201009/cijpH32rOg.txt

Utilisateur anonyme · Answer

bonjour,
redemarre ton pc en mode sans echec avec la prise en charge du réseau, puis lance ceci :

https://forums.commentcamarche.net/forum/affich-19160956-probleme-adware?full#19

steph0404 · Answer

bonjour ca ne marche ton lien

steph0404 · Answer

le dossier cicle developement est vide

Utilisateur anonyme · Answer

si le dosseir est vide, vire le direct ! 

relance Combofix, aide toi de ce poste: 

https://forums.commentcamarche.net/forum/affich-19160956-probleme-adware?full#3 


O.o°*??? Membre, Contributeur Sécurité CCM o°.Oø¤º°'°º¤ø

steph0404 · Answer

ComboFix 10-09-14.05 - stephane doux 15/09/2010  19:30:21.3.1 - x86 NETWORK
Microsoft Windows XP Édition familiale  5.1.2600.3.1252.33.1036.18.959.732 [GMT 2:00]
Lancé depuis: c:\documents and settings\stephane doux\Mes documents\Downloads\ComboFix.exe
AV: avast! Antivirus *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((((((((((((((   Autres suppressions   ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\INSTALL.LOG
c:\program files\Internet Explorer\SET45.tmp
c:\program files\Internet Explorer\SET46.tmp
c:\windows\system32\_004270_.tmp.dll
c:\windows\system32\_004271_.tmp.dll
c:\windows\system32\_004272_.tmp.dll
c:\windows\system32\_004273_.tmp.dll
c:\windows\system32\_004280_.tmp.dll
c:\windows\system32\_004281_.tmp.dll
c:\windows\system32\_004282_.tmp.dll
c:\windows\system32\_004283_.tmp.dll
c:\windows\system32\_004285_.tmp.dll
c:\windows\system32\_004286_.tmp.dll
c:\windows\system32\_004289_.tmp.dll
c:\windows\system32\_004290_.tmp.dll
c:\windows\system32\_004292_.tmp.dll
c:\windows\system32\_004293_.tmp.dll
c:\windows\system32\_004294_.tmp.dll
c:\windows\system32\_004296_.tmp.dll
c:\windows\system32\_004299_.tmp.dll
c:\windows\system32\_004300_.tmp.dll
c:\windows\system32\_004302_.tmp.dll
c:\windows\system32\_004304_.tmp.dll
c:\windows\system32\_004305_.tmp.dll
c:\windows\system32\_004307_.tmp.dll
c:\windows\system32\_004310_.tmp.dll
c:\windows\system32\_004312_.tmp.dll
c:\windows\system32\_004313_.tmp.dll
c:\windows\system32\_004314_.tmp.dll
c:\windows\system32\_004315_.tmp.dll
c:\windows\system32\_004316_.tmp.dll
c:\windows\system32\_004319_.tmp.dll
c:\windows\system32\_004320_.tmp.dll
c:\windows\system32\_004321_.tmp.dll
c:\windows\system32\_004322_.tmp.dll
c:\windows\system32\_004323_.tmp.dll
c:\windows\system32\_004328_.tmp.dll
c:\windows\system32\_004330_.tmp.dll
c:\windows\system32\796525
c:\windows	55ft2692f44.dat

.
(((((((((((((((((((((((((((((   Fichiers créés du 2010-08-15 au 2010-09-15  ))))))))))))))))))))))))))))))))))))
.

2010-09-15 16:19 . 2010-09-15 16:19	--------	d-----w-	c:\windows\LastGood
2010-09-14 05:56 . 2010-09-15 16:39	--------	d-----w-	C:\Lop SD
2010-09-13 18:01 . 2010-09-13 19:21	--------	d-----w-	c:\program files\Ad-Remover
2010-09-12 14:11 . 2010-09-14 19:36	--------	d-----w-	c:\program files\ZHPDiag
2010-09-12 10:36 . 2010-09-12 10:36	--------	d-----w-	c:\documents and settings\stephane doux\Application Data\QuickScan
2010-09-12 08:40 . 2010-09-12 08:40	--------	d-----w-	c:\documents and settings\All Users\Application Data\F-Secure
2010-09-10 18:08 . 2010-09-10 18:26	--------	d-----w-	c:\program files\PC Speed Maximizer
2010-08-19 10:47 . 2010-08-19 10:47	--------	d-----w-	c:\program files\MarkAnyContentSAFER
2010-08-19 10:14 . 2010-08-19 10:43	89280248	----a-w-	c:\documents and settings\stephane doux\Application Data\Samsung\New PC Studio\LiveUpdate\Setup_For_Full_Update_IH2_7.exe

.
((((((((((((((((((((((((((((((((((   Compte-rendu de Find3M   ))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-15 11:06 . 2007-08-08 17:40	--------	d-----w-	c:\documents and settings\All Users\Application Data\Google Updater
2010-09-10 18:01 . 2007-08-08 18:58	--------	d-----w-	c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2010-09-09 10:46 . 2009-05-22 20:10	--------	d-----w-	c:\program files\Microsoft Silverlight
2010-09-07 15:12 . 2010-07-21 09:01	38848	----a-w-	c:\windows\avastSS.scr
2010-09-07 15:11 . 2009-05-04 13:55	167592	----a-w-	c:\windows\system32\aswBoot.exe
2010-09-07 14:52 . 2009-05-04 13:55	46672	----a-w-	c:\windows\system32\drivers\aswTdi.sys
2010-09-07 14:52 . 2009-05-04 13:55	165584	----a-w-	c:\windows\system32\drivers\aswSP.sys
2010-09-07 14:47 . 2009-05-04 13:55	23376	----a-w-	c:\windows\system32\drivers\aswRdr.sys
2010-09-07 14:47 . 2009-05-04 13:55	100176	----a-w-	c:\windows\system32\drivers\aswmon2.sys
2010-09-07 14:47 . 2009-05-04 13:55	94544	----a-w-	c:\windows\system32\drivers\aswmon.sys
2010-09-07 14:47 . 2009-05-04 13:55	17744	----a-w-	c:\windows\system32\drivers\aswFsBlk.sys
2010-09-07 14:46 . 2009-05-04 13:55	28880	----a-w-	c:\windows\system32\drivers\aavmker4.sys
2010-08-19 10:51 . 2007-08-08 17:05	--------	d--h--w-	c:\program files\InstallShield Installation Information
2010-08-19 10:45 . 2007-10-25 15:26	5632	----a-w-	c:\windows\system32\drivers\StarOpen.sys
2010-08-19 10:14 . 2004-08-05 12:00	81648	----a-w-	c:\windows\system32\perfc00C.dat
2010-08-19 10:14 . 2004-08-05 12:00	502280	----a-w-	c:\windows\system32\perfh00C.dat
2010-08-14 16:55 . 2008-01-04 09:38	--------	d-----w-	c:\documents and settings\All Users\Application Data\Microsoft Help
2010-07-25 04:07 . 2007-08-08 19:33	--------	d-----w-	c:\documents and settings\stephane doux\Application Data\Azureus
2010-06-30 12:32 . 2008-09-08 16:15	149504	----a-w-	c:\windows\system32\schannel.dll
2010-06-24 12:25 . 2004-08-05 12:00	916480	----a-w-	c:\windows\system32\wininet.dll
2010-06-24 09:02 . 2008-09-08 16:15	1852032	----a-w-	c:\windows\system32\win32k.sys
2010-06-21 15:27 . 2008-09-08 16:15	354304	----a-w-	c:\windows\system32\drivers\srv.sys
.

(((((((((((((((((((((((((((((((((   Points de chargement Reg   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés 
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}]
2009-10-15 08:53	165184	----a-w-	c:\program files\Neuf\Kit\SFRNavErrorHelper.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DL32"="DL32" [X]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]
"SpriteService"="c:\program files\Sprite Software\Sprite Backup\SpriteService.exe" [2006-08-15 544768]
"AutoStartNPSAgent"="c:\program files\Samsung\Samsung New PC Studio\NPSAgent.exe" [2010-08-19 102400]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-08-08 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Synchronization Manager"="c:\windows\system32\mobsync.exe" [2008-04-14 143872]
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2008-12-20 2656528]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
"Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe" [2007-03-16 63712]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]
"Adobe ARM"="c:\program files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-17 421888]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Menu D'marrer\Programmes\D'marrage\
Event Reminder.lnk - c:\program files\Broderbund\PrintMaster\PMremind.exe [2007-12-28 323584]
Monitor.lnk - c:\program files\ArcSoft\Media Card Companion\MCC Monitor.exe [2007-10-27 110592]

[HKLM\~\startupfolder\C:^Documents and Settings^stephane doux^Menu Démarrer^Programmes^Démarrage^OneNote 2007 - Capture d'écran et lancement.lnk]
path=c:\documents and settings\stephane doux\Menu Démarrer\Programmes\Démarrage\OneNote 2007 - Capture d'écran et lancement.lnk
backup=c:\windows\pss\OneNote 2007 - Capture d'écran et lancement.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^stephane doux^Menu Démarrer^Programmes^Démarrage^OpenOffice.org 3.0.lnk]
path=c:\documents and settings\stephane doux\Menu Démarrer\Programmes\Démarrage\OpenOffice.org 3.0.lnk
backup=c:\windows\pss\OpenOffice.org 3.0.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader]
2007-03-16 10:45	63712	----a-w-	c:\program files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-06-20 02:04	35760	----a-w-	c:\program files\Adobe\Reader 9.0\Readereader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-03-17 19:53	421888	----a-w-	c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2007-08-08 17:40	68856	----a-w-	c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe"=
"c:\Program Files\Azureus\Azureus.exe"=
"c:\Program Files\Messenger\msmsgs.exe"=
"c:\Program Files\eMule\eMule.exe"=
"c:\WINDOWS\system32\dpvsetup.exe"=
"c:\Program Files\Fichiers communs\Ahead\Nero Web\SetupX.exe"=
"c:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"=
"%windir%\Network Diagnostic\xpnetdiag.exe"=
"c:\program files\Microsoft ActiveSyncapimgr.exe"= c:\program files\Microsoft ActiveSyncapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"c:\program files\Microsoft ActiveSync\wcescomm.exe"= c:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"c:\program files\Microsoft ActiveSync\WCESMgr.exe"= c:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"c:\Program Files\Sprite Software\Sprite Backup\SpriteService.exe"=
"c:\Program Files\Shareaza\Shareaza.exe"=
"c:\Program Files\Bonjour\mDNSResponder.exe"=
"c:\Program Files\Windows Live\Messenger\wlcsdk.exe"=
"c:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe"=
"c:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe"=
"c:\Program Files\Windows Live\Messenger\msnmsgr.exe"=
"c:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service

S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [04/05/2009 15:55 165584]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [04/05/2009 15:55 17744]
S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [26/09/2009 12:39 233472]
S2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [15/02/2010 19:57 135664]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [26/09/2009 12:39 36608]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\h:
tglm7x.sys --> h:\NTGLM7X.sys [?]
.
Contenu du dossier 'Tâches planifiées'

2010-09-04 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]

2010-09-15 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-08-08 02:31]

2010-09-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-15 17:56]

2010-09-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-15 17:56]

2010-09-15 c:\windows\Tasks\User_Feed_Synchronization-{318B34C3-FFD3-4B71-9F7B-EC4CB0C38442}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 03:31]
.
.
------- Examen supplémentaire -------
.
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Settings,ProxyOverride = *.local;<local>
uInternet Settings,ProxyServer = http=localhost:7171
IE: Add to AMV Convert Tool... - c:\program files\MP3 Player Utilities 3.79\AMVConverter\grab.html
IE: Add to AMV Converter... - c:\program files\MP3 Player Utilities 4.15\AMVConverter\grab.html
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
IE: MediaManager tool grab multimedia file - c:\program files\MP3 Player Utilities 3.79\MediaManager\grab.html
.
- - - - ORPHELINS SUPPRIMES - - - -

HKCU-Run-Uniblue RegistryBooster 2009 - c:\program files\Uniblue\RegistryBooster\RegistryBooster.exe
HKCU-Run-Device Detection - c:\program files\Foto.com\Editeur Foto.com\dd.exe
HKLM-Run-NPSStartup - (no file)
AddRemove-Notification de cadeaux MSN - c:\documents and settings\stephane doux\Application Data\Microsoft\Notification de cadeaux MSN\lsnfier.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-09-15 19:35
Windows 5.1.2600 Service Pack 3 NTFS

Recherche de processus cachés ... 

Recherche d'éléments en démarrage automatique cachés ... 

Recherche de fichiers cachés ... 

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\WINDOWS\system32\Macromed\Flash\FlashUtil10i_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\WINDOWS\system32\Macromed\Flash\FlashUtil10i_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Heure de fin: 2010-09-15  19:37:13
ComboFix-quarantined-files.txt  2010-09-15 17:37

Avant-CF: 82 640 097 280 octets libres
Après-CF: 82 699 366 400 octets libres

- - End Of File - - 457DA3B45F9BF8B33FC1D06E5B49D751

Utilisateur anonyme · Answer

Télécharge Malwarebytes' Anti-Malware et enregistre le sur ton bureau:
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/ 

ou ici : https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/

 
/!\Utilisateur de Vista et Windows 7 : Clique droit sur le logo de Malwarebytes' Anti-Malware, « exécuter en tant qu'Administrateur »

. Double cliques sur le fichier téléchargé pour lancer le processus d'installation. 
. Dans l'onglet "mise à jour", cliques sur le bouton Recherche de mise à jour 
. si le pare-feu demande l'autorisation de se connecter pour malwarebytes, acceptes 
. Une fois la mise à jour terminé
. rend-toi dans l'onglet, Recherche 
. Sélectionnes Exécuter un examen complet
. Cliques sur Rechercher
. Le scan démarre. 
. A la fin de l'analyse, un message s'affiche : L'examen s'est terminé normalement. Cliquez sur 'Afficher les résultats' pour afficher tous les objets trouvés. 
. Cliques sur Ok pour poursuivre. 
. Si des malwares ont été détectés, cliques sur Afficher les résultats 
. Sélectionnes tout (ou laisses cochés) et cliques sur Supprimer la sélection Malwarebytes va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine. 
. Malwarebytes va ouvrir le bloc-notes et y copier le rapport d'analyse. 
. rends toi dans l'onglet rapport/log 
. tu cliques dessus pour l'afficher une fois affiché 
. tu cliques sur edition en haut du boc notes,et puis sur sélectionner tous 
. tu recliques sur edition et puis sur copier et tu reviens sur le forum et dans ta réponse 
. Tu cliques droit dans le cadre de la réponse et coller 
. À la fin du scan, il se peut que MBAM ait besoin de redémarrer le pc pour finaliser la suppression, donc pas de panique, redémarre ton pc !!!

Si tu as besoin d'aide regarde ce tutoriel : 
https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

steph0404 · Answer

bonjour electricien 69 , au boulot toute la journée , avais lancer le scan mais l'ordi a redemarer  pour une mise a jour , oblige de recommencer

steph0404 · Answer

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 4621

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

16/09/2010 21:51:34
mbam-log-2010-09-16 (21-51-34).txt

Type d'examen: Examen complet (C:\|)
Elément(s) analysé(s): 224793
Temps écoulé: 1 heure(s), 1 minute(s), 8 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 1
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 9

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\Interface\{f7d09218-46d7-4d3d-9b7f-315204cd0836} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{e63648f7-3933-440e-b4f6-a8584dd7b7eb} (Trojan.BHO) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\dl32 (Trojan.Agent) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\System Volume Information\_restore{A4539832-D56D-4095-A31B-F288B2AF0C4F}\RP1042\A0130379.dll (Adware.RelevantKnowledge) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A4539832-D56D-4095-A31B-F288B2AF0C4F}\RP1042\A0130380.dll (Adware.RelevantKnowledge) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A4539832-D56D-4095-A31B-F288B2AF0C4F}\RP1042\A0130381.dll (Adware.RelevantKnowledge) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A4539832-D56D-4095-A31B-F288B2AF0C4F}\RP1042\A0130382.exe (Adware.RelevantKnowledge) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A4539832-D56D-4095-A31B-F288B2AF0C4F}\RP1042\A0130383.exe (Adware.RelevantKnowledge) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A4539832-D56D-4095-A31B-F288B2AF0C4F}\RP1042\A0130384.dll (Adware.RelevantKnowledge) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A4539832-D56D-4095-A31B-F288B2AF0C4F}\RP1044\A0132399.dll (Adware.WidgiToolbar) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A4539832-D56D-4095-A31B-F288B2AF0C4F}\RP1044\A0132409.dll (Adware.RelevantKnowledge) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{A4539832-D56D-4095-A31B-F288B2AF0C4F}\RP1044\A0132410.exe (Adware.RelevantKnowledge) -> Quarantined and deleted successfully.

Utilisateur anonyme · Answer

bonsoir,
relance MBAM, vide sa quarantaine.

repasse un autre zhpdiag, enregistre son rapport sur ton bureau, héberge le sur Cijoint, colle le lien sur ton prochain message :-)

steph0404 · Answer

http://www.cijoint.fr/cjlink.php?file=cj201009/cijaxxBJZE.txt

Utilisateur anonyme · Answer

DESACTIVE TON ANTIVIRUS ET TON PAREFEU SI PRESENTS !!!!!(car il est detecté a tort comme infection) 

Télécharge ici :List_Kill'em et enregistre le sur ton bureau 

http://sd-4.archive-host.com/ 

ou 

http://www.archive-host.com 

si tu as XP => double clique 
si tu as Vista ou windows 7 => clic droit "executer en tant que...." 

sur le raccourci sur ton bureau pour lancer l'installation 

Laisse coché : 

Executer List_Kill'em 

une fois terminée , clic sur "terminer" et le programme se lancera seul 

choisis le bouton TOOLS 
puis le bouton KILLPROXY 
poste le rapport

steph0404 · Answer

¤¤¤¤¤¤¤¤¤¤ List'em by g3n-h@ckm@n 2.1.0.6 ¤¤¤¤¤¤¤¤¤¤ User : stephane doux (Administrateurs) Update on 18/09/2010 by g3n-h@ckm@n ::::: 15.20 Start at: 18:27:22 | 18/09/2010 AMD Sempron(tm) Processor 2600+ Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3 Internet Explorer 8.0.6001.18702 Windows Firewall Status : Enabled AV : avast! Antivirus 5.0.83886757 [ Enabled | Updated ] A:\ -> Lecteur de disquettes 3 ½ pouces C:\ -> Disque fixe local | 152,66 Go (76,72 Go free) | NTFS H:\ -> Disque CD-ROM Boot: Normal ¤¤¤¤¤¤ Processes ------- Memory(Ko) ------- Priority ------ Command ------- Signer C:\WINDOWS\System32\smss.exe ---- 416 Ko ---- Normal ---- \SystemRoot\System32\smss.exe ---- C:\WINDOWS\system32\csrss.exe ---- 5500 Ko ---- Normal ---- C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16 ---- C:\WINDOWS\system32\winlogon.exe ---- 4240 Ko ---- High ---- winlogon.exe ---- C:\WINDOWS\system32\services.exe ---- 4204 Ko ---- Normal ---- C:\WINDOWS\system32\services.exe ---- C:\WINDOWS\system32\lsass.exe ---- 1884 Ko ---- Normal ---- C:\WINDOWS\system32\lsass.exe ---- C:\WINDOWS\system32\svchost.exe ---- 5316 Ko ---- Normal ---- C:\WINDOWS\system32\svchost -k DcomLaunch ---- C:\WINDOWS\system32\svchost.exe ---- 4516 Ko ---- Normal ---- C:\WINDOWS\system32\svchost -k rpcss ---- C:\WINDOWS\System32\svchost.exe ---- 38768 Ko ---- Normal ---- C:\WINDOWS\System32\svchost.exe -k netsvcs ---- C:\WINDOWS\system32\svchost.exe ---- 3428 Ko ---- Normal ---- C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup ---- C:\WINDOWS\system32\svchost.exe ---- 4408 Ko ---- Normal ---- C:\WINDOWS\system32\svchost.exe -k NetworkService ---- C:\WINDOWS\system32\svchost.exe ---- 6348 Ko ---- Normal ---- C:\WINDOWS\system32\svchost.exe -k LocalService ---- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe ---- 40256 Ko ---- Normal ---- "C:\Program Files\Alwil Software\Avast5\AvastSvc.exe" ---- ALWIL Software C:\WINDOWS\system32\spoolsv.exe ---- 7956 Ko ---- Normal ---- C:\WINDOWS\system32\spoolsv.exe ---- C:\WINDOWS\Explorer.EXE ---- 27552 Ko ---- Normal ---- C:\WINDOWS\Explorer.EXE ---- C:\Program Files\Logitech\QuickCam\Quickcam.exe ---- 11696 Ko ---- Normal ---- "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide ---- Logitech Inc C:\Program Files\Java\jre6\bin\jusched.exe ---- 5260 Ko ---- Normal ---- "C:\Program Files\Java\jre6\bin\jusched.exe" ---- Sun Microsystems, Inc. C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe ---- 4884 Ko ---- Normal ---- "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe" ---- Adobe Systems Incorporated C:\Program Files\QuickTime\QTTask.exe ---- 2608 Ko ---- Normal ---- "C:\Program Files\QuickTime\QTTask.exe" -atboottime ---- C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe ---- 9672 Ko ---- Normal ---- "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" ---- Nero AG C:\Program Files\Microsoft ActiveSync\wcescomm.exe ---- 5080 Ko ---- Normal ---- "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" ---- Microsoft Corporation C:\Program Files\Sprite Software\Sprite Backup\SpriteService.exe ---- 4288 Ko ---- Normal ---- "C:\Program Files\Sprite Software\Sprite Backup\SpriteService.exe" ---- C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe ---- 3500 Ko ---- Normal ---- "C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe" ---- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe ---- 628 Ko ---- Normal ---- "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" ---- Google Inc C:\WINDOWS\system32\ctfmon.exe ---- 3300 Ko ---- Normal ---- "C:\WINDOWS\system32\ctfmon.exe" ---- C:\WINDOWS\system32\svchost.exe ---- 3904 Ko ---- Normal ---- C:\WINDOWS\system32\svchost.exe -k LocalService ---- C:\Program Files\ArcSoft\Media Card Companion\MCC Monitor.exe ---- 3536 Ko ---- Normal ---- "C:\Program Files\ArcSoft\Media Card Companion\MCC Monitor.exe" -r ---- C:\PROGRA~1\MICROS~4 apimgr.exe ---- 5252 Ko ---- Normal ---- C:\PROGRA~1\MICROS~4 apimgr.exe -Embedding ---- Microsoft Corporation C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe ---- 4608 Ko ---- Normal ---- "C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe" -Embedding ---- Logitech Inc C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe ---- 2688 Ko ---- Normal ---- "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe" ---- Apple Inc. C:\Program Files\Bonjour\mDNSResponder.exe ---- 3696 Ko ---- Normal ---- "C:\Program Files\Bonjour\mDNSResponder.exe" ---- Apple Inc. C:\WINDOWS\system32\FsUsbExService.Exe ---- 2712 Ko ---- Normal ---- C:\WINDOWS\system32\FsUsbExService.Exe ---- C:\Program Files\Java\jre6\bin\jqs.exe ---- 1380 Ko ---- Idle ---- "C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf" ---- Sun Microsystems, Inc. C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe ---- 2624 Ko ---- Normal ---- "C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe" ---- Logitech Inc C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe ---- 8616 Ko ---- Normal ---- "C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe" ---- Microsoft Corporation C:\WINDOWS\system32\svchost.exe ---- 4708 Ko ---- Normal ---- C:\WINDOWS\system32\svchost.exe -k imgsvc ---- C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe ---- 9364 Ko ---- Normal ---- "C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe" ---- Nero AG C:\WINDOWS\System32\alg.exe ---- 3624 Ko ---- Normal ---- C:\WINDOWS\System32\alg.exe ---- C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe ---- 14772 Ko ---- Normal ---- "C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe" -Embedding ---- Nero AG C:\WINDOWS\System32\svchost.exe ---- 3484 Ko ---- Normal ---- C:\WINDOWS\System32\svchost.exe -k HTTPFilter ---- C:\WINDOWS\system32\wbem\wmiapsrv.exe ---- 4580 Ko ---- Normal ---- C:\WINDOWS\system32\wbem\wmiapsrv.exe ---- C:\Program Files\Java\jre6\bin\jucheck.exe ---- 7164 Ko ---- Normal ---- "C:\Program Files\Java\jre6\bin\jucheck.exe" -auto ---- Sun Microsystems, Inc. C:\Program Files\Google\Chrome\Application\chrome.exe ---- 34168 Ko ---- Normal ---- "C:\Program Files\Google\Chrome\Application\chrome.exe" ---- Google Inc C:\Program Files\Google\Chrome\Application\chrome.exe ---- 13492 Ko ---- Normal ---- "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=extension --lang=fr --force-fieldtest=ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_10/SpdyImpact/_npn_with_spdy/ --channel=3292.00F19C00.1057391158 /prefetch:3 --ignored=" --type=renderer " ---- Google Inc C:\Program Files\Google\Chrome\Application\chrome.exe ---- 8016 Ko ---- Normal ---- "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Documents and Settings\stephane doux\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie\0.9.9.38 pqslauncher.dll" --lang=fr --plugin-data-dir="C:\Documents and Settings\stephane doux\Local Settings\Application Data\Google\Chrome\User Data\Default" --channel=3292.0414F64C.1304711495 /prefetch:4 ---- Google Inc C:\Program Files\Google\Chrome\Application\chrome.exe ---- 32264 Ko ---- Normal ---- "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=fr --force-fieldtest=CacheSize/CacheSizeGroup_1/ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_10/SpdyImpact/_npn_with_spdy/ --channel=3292.04633780.2012649177 /prefetch:3 ---- Google Inc C:\Program Files\Google\Chrome\Application\chrome.exe ---- 40560 Ko ---- Normal ---- "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=fr --force-fieldtest=CacheSize/CacheSizeGroup_1/ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_10/SpdyImpact/_npn_with_spdy/ --channel=3292.045FEA80.1469888422 /prefetch:3 ---- Google Inc C:\Program Files\Google\Chrome\Application\chrome.exe ---- 26572 Ko ---- Normal ---- "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=fr --force-fieldtest=CacheSize/CacheSizeGroup_1/ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_10/SpdyImpact/_npn_with_spdy/ --channel=3292.0646A300.1837661077 /prefetch:3 ---- Google Inc C:\Program Files\ZHPDiag\ZHPDiag.exe ---- 2952 Ko ---- Normal ---- "C:\Program Files\ZHPDiag\ZHPDiag.exe" ---- C:\Program Files\Google\Chrome\Application\chrome.exe ---- 21368 Ko ---- Below Normal ---- "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=fr --force-fieldtest=CacheSize/CacheSizeGroup_1/ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_10/SpdyImpact/_npn_with_spdy/ --channel=3292.064CA480.1819801705 /prefetch:3 ---- Google Inc C:\Program Files\Google\Chrome\Application\chrome.exe ---- 36232 Ko ---- Normal ---- "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Program Files\Google\Chrome\Application\6.0.472.59\gcswf32.dll" --lang=fr --plugin-data-dir="C:\Documents and Settings\stephane doux\Local Settings\Application Data\Google\Chrome\User Data\Default" --channel=3292.04486E4C.617596950 /prefetch:4 ---- Google Inc C:\WINDOWS\system32 undll32.exe ---- 2304 Ko ---- Normal ---- "C:\WINDOWS\system32 undll32.exe" C:\WINDOWS\system32\shell32.dll,Control_RunDLL "C:\WINDOWS\system32\wscui.cpl",Centre de sécurité ---- C:\Program Files\Alwil Software\Avast5\AvastUI.exe ---- 4864 Ko ---- Normal ---- "C:\Program Files\Alwil Software\Avast5\AvastUI.exe" ---- ALWIL Software C:\Program Files\Google\Chrome\Application\chrome.exe ---- 33684 Ko ---- Below Normal ---- "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=fr --force-fieldtest=CacheSize/CacheSizeGroup_1/ConnCountImpact/_conn_count_6/DnsImpact/_default_enabled_prefetch/GlobalSdch/_global_enable_sdch/IPv6_Probe/_IPv6_probe_done/IdleSktToImpact/_idle_timeout_10/SpdyImpact/_npn_with_spdy/ --channel=3292.03E9A300.1544328477 /prefetch:3 ---- Google Inc C:\WINDOWS\system32\cmd.exe ---- 2844 Ko ---- Normal ---- C:\WINDOWS\system32\cmd.exe /K List'em.bat ---- C:\WINDOWS\system32\wbem\wmiprvse.exe ---- 6892 Ko ---- Normal ---- C:\WINDOWS\system32\wbem\wmiprvse.exe ---- C:\Program Files\List_Kill'em\pv.exe ---- 2792 Ko ---- Normal ---- pv -o"%f ---- %m Ko ---- %p ---- %l ---- %s" ---- ¤¤¤¤¤¤¤¤¤¤ Keys "Run" ¤¤¤¤¤¤¤¤¤¤ [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} REG_SZ "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" H/PC Connection Agent REG_SZ "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" SpriteService REG_SZ "C:\Program Files\Sprite Software\Sprite Backup\SpriteService.exe" AutoStartNPSAgent REG_SZ C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe swg REG_SZ "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" ctfmon.exe REG_SZ C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] Synchronization Manager REG_EXPAND_SZ %SystemRoot%\system32\mobsync.exe /logon LogitechQuickCamRibbon REG_SZ "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre6\bin\jusched.exe" Adobe Photo Downloader REG_SZ "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe" Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" Adobe ARM REG_SZ "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe" QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] ¤¤¤¤¤¤¤¤¤¤ Other System Keys ¤¤¤¤¤¤¤¤¤¤ [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] NoDriveTypeAutoRun REG_DWORD 323 (0x143) NoDriveAutoRun REG_DWORD 67108863 (0x3ffffff) NoDrives REG_DWORD 0 (0x0) ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] HonorAutoRunSetting REG_DWORD 1 (0x1) NoDriveAutoRun REG_DWORD 67108863 (0x3ffffff) NoDriveTypeAutoRun REG_DWORD 323 (0x143) NoDrives REG_DWORD 0 (0x0) ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell REG_SZ Explorer.exe Userinit REG_SZ C:\WINDOWS\system32\userinit.exe, ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\crypt32chain] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\cryptnet] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\cscdll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\dimsntfy] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\ScCertProp] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\Schedule] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\sclgntfy] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\SensLogn] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify ermsrv] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon otify\wlballoon] ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] {AEB6717E-7E19-11d0-97EE-00C04FD91972} REG_SZ ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] %windir%\system32\sessmgr.exe REG_SZ %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 C:\Program Files\Azureus\Azureus.exe REG_SZ C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus C:\Program Files\Messenger\msmsgs.exe REG_SZ C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger C:\Program Files\eMule\eMule.exe REG_SZ C:\Program Files\eMule\eMule.exe:*:Enabled:eMule Plus C:\WINDOWS\system32\dpvsetup.exe REG_SZ C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test C:\Program Files\Fichiers communs\Ahead\Nero Web\SetupX.exe REG_SZ C:\Program Files\Fichiers communs\Ahead\Nero Web\SetupX.exe:*:Enabled:Nero ProductSetup C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE REG_SZ C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote %windir%\Network Diagnostic\xpnetdiag.exe REG_SZ %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 C:\Program Files\Microsoft ActiveSync apimgr.exe REG_SZ C:\Program Files\Microsoft ActiveSync apimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager C:\Program Files\Microsoft ActiveSync\wcescomm.exe REG_SZ C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager C:\Program Files\Microsoft ActiveSync\WCESMgr.exe REG_SZ C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application C:\Program Files\Sprite Software\Sprite Backup\SpriteService.exe REG_SZ C:\Program Files\Sprite Software\Sprite Backup\SpriteService.exe:*:Enabled:Sprite Backup PC Service C:\Program Files\Shareaza\Shareaza.exe REG_SZ C:\Program Files\Shareaza\Shareaza.exe:*:Enabled:Shareaza C:\Program Files\Bonjour\mDNSResponder.exe REG_SZ C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour C:\Program Files\Windows Live\Messenger\wlcsdk.exe REG_SZ C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call C:\Program Files\Samsung\Samsung New PC Studio psasvr.exe REG_SZ C:\Program Files\Samsung\Samsung New PC Studio psasvr.exe:*:Enabled:KTF MUSIC AoD Server C:\Program Files\Samsung\Samsung New PC Studio psvsvr.exe REG_SZ C:\Program Files\Samsung\Samsung New PC Studio psvsvr.exe:*:Enabled:KTF MUSIC VoD Server C:\Program Files\Windows Live\Messenger\msnmsgr.exe REG_SZ C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe REG_SZ C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] %windir%\system32\sessmgr.exe REG_SZ %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 %windir%\Network Diagnostic\xpnetdiag.exe REG_SZ %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 C:\Program Files\Microsoft ActiveSync apimgr.exe REG_SZ C:\Program Files\Microsoft ActiveSync apimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager C:\Program Files\Microsoft ActiveSync\wcescomm.exe REG_SZ C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager C:\Program Files\Microsoft ActiveSync\WCESMgr.exe REG_SZ C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application C:\Program Files\MSN Messenger\livecall.exe REG_SZ C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) C:\Program Files\Windows Live\Messenger\wlcsdk.exe REG_SZ C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call C:\Program Files\Windows Live\Messenger\msnmsgr.exe REG_SZ C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe REG_SZ C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare ¤¤¤¤¤¤¤¤¤¤ ActivX | COM ¤¤¤¤¤¤¤¤¤¤ [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{166B1BCA-3F9C-11CF-8075-444553540000}] [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{215B8138-A3CF-44C5-803F-8226143CFC0A}] [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{5D637FAD-E202-48D1-8F18-5B9C459BD1E3}] [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{5D6F45B3-9043-443D-A792-115447494D24}] [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{5ED80217-570B-4DA9-BF44-BE107C0EC166}] [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{80DD2229-B8E4-4C77-B72F-F22972D723EA}] [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{8AD9C840-044E-11D1-B3E9-00805F499D93}] [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}] [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{C3F79A2B-B9B4-4A66-B012-3EE46475B072}] [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}] [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}] [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}] [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}] [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}] [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}] [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{D27CDB6E-AE6D-11CF-96B8-444553540000}] [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{D4323BF2-006A-4440-A2F5-27E3E7AB25F8}] [HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{F5A7706B-B9C0-4C89-A715-7A0C6B05DD48}] ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{26923b43-4d38-484f-9b9e-de460746276c}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{CB58DED6-4AF3-4080-9DF1-DEE72075169F}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\D27CDB6E-AE6D-11CF-96B8-444553540000] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10072CEC-8CC1-11D1-986E-00A0C955B42F}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{166B1BCA-3F9C-11CF-8075-444553540000}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{233C1507-6A77-46A4-9443-F871F945D258}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{283807B5-2C60-11D0-A31D-00AA00B92C03}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2A202491-F00D-11cf-87CC-0020AFEECF20}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{36f8ec70-c29a-11d1-b5c7-0000f8051515}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3af36230-a269-11d1-b5bf-0000f8051515}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{3bf42070-b3b1-11d1-b5c5-0000f8051515}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4278c270-a269-11d1-b5bf-0000f8051515}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA851-CC51-11CF-AAFA-00AA00B6015C}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{44BBA855-CC51-11CF-AAFA-00AA00B6015F}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{45ea75a0-a269-11d1-b5bf-0000f8051515}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f216970-c90c-11d1-b5c7-0000f8051515}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{4f645220-306d-11d2-995d-00c04f98bbc9}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5945c046-1e7d-11d1-bc44-00c04fd912be}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5A8D6EE0-3E18-11D0-821E-444553540000}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{5fd399c0-a70a-11d1-9948-00c04f98bbc9}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{630b1da0-b465-11d1-9948-00c04f98bbc9}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6fab99d0-bab8-11d1-994a-00c04f98bbc9}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{73fa19d0-2d75-11d2-995d-00c04f98bbc9}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7790769C-0471-11d2-AF11-00C04FA35D02}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4340}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89820200-ECBD-11cf-8B85-00AA005B4383}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{9381D8F2-0288-11D0-9501-00AA00B911A5}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{B508B3F1-A24A-32C0-B310-85786919EF28}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{C9E9A340-D1F1-11D0-821E-444553540600}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CC2A9BA0-3BDD-11D0-821E-444553540000}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{CDD7975E-60F8-41d5-8149-19E51D6F71D0}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D27CDB6E-AE6D-11cf-96B8-444553540000}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{de5aed00-a4bf-11d1-9948-00c04f98bbc9}] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{E92B03AB-B707-11d2-9CBD-0000F87A369E}] ¤¤¤¤¤¤¤¤¤¤ BHO ¤¤¤¤¤¤¤¤¤¤ [ REG_SZ ] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{53707962-6F74-2D53-2644-206D7942484F}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{5C255C8A-E604-49b4-9D64-90988571CECB}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}] ¤¤¤¤¤¤¤¤¤¤ DNS ¤¤¤¤¤¤¤¤¤¤ HKLM\SYSTEM\CCS\Services\Tcpip\..\{7926326E-C2F3-4914-A942-C3CB97AE0D03}: DhcpNameServer=192.168.1.1 HKLM\SYSTEM\CS1\Services\Tcpip\..\{7926326E-C2F3-4914-A942-C3CB97AE0D03}: DhcpNameServer=192.168.1.1 HKLM\SYSTEM\CS2\Services\Tcpip\..\{7926326E-C2F3-4914-A942-C3CB97AE0D03}: DhcpNameServer=192.168.1.1 HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.1.1 ¤¤¤¤¤¤¤¤¤¤ Internet Explorer ¤¤¤¤¤¤¤¤¤¤ [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] Start Page REG_SZ https://www.msn.com/fr-fr Local Page REG_SZ C:\WINDOWS\system32\blank.htm Default_Search_URL REG_SZ https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF Default_Page_URL REG_SZ https://www.msn.com/fr-fr/?ocid=iehp Search Page REG_SZ https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] Start Page REG_SZ https://www.msn.com/fr-fr Local Page REG_SZ C:\WINDOWS\system32\blank.htm Search Page REG_SZ http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch ¤¤¤¤¤ Proxy Internet Explorer [HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings] ProxyHttp1.1 REG_DWORD 0 (0x0) ProxyEnable REG_DWORD 0 (0x0) ProxyServer REG_SZ http=localhost:7171 ¤¤¤¤¤¤¤¤¤¤ Proxy Firefox ¤¤¤¤¤¤¤¤¤¤ ¤¤¤¤¤¤¤¤¤¤ TaskCache ¤¤¤¤¤¤¤¤¤¤ ¤¤¤¤¤¤¤¤¤¤ IFEO ¤¤¤¤¤¤¤¤¤¤ [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\apitrap.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ASSTE.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\AVSTE.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\Cleanup.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\cqw32.exe] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\divx.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\divxdec.ax] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\DJSMAR00.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\DRMINST.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\enc98.EXE] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\EncodeDivXExt.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\EncryptPatchVer.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\front.exe] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\fullsoft.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\GBROWSER.DLL] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\htmlmarq.ocx] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\htmlmm.ocx] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\install.exe] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ishscan.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ISSTE.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\javai.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\jvm.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\jvm_g.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\main123w.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\mngreg32.exe] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\msci_uno.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\mscoree.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\mscorsvr.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\mscorwks.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\msjava.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\mso.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\NAVOPTRF.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\NeVideoFX.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\NPMLIC.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\NSWSTE.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\photohse.EXE] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\PMSTE.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ppw32hlp.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\printhse.EXE] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\prwin8.EXE] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ps80.EXE] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\psdmt.exe] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\qfinder.EXE] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\qpw.EXE] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\salwrap.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\setup.exe] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\setup32.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\sevinst.exe] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\symlcnet.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options core_ebook.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\TFDTCTT8.DLL] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ua80.EXE] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\udtapi.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\ums.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\vb40032.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\vbe6.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\wpwin8.EXE] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\xlmlEN.dll] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\xwsetup.EXE] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\Your Image File Name Here without a path] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\image file execution options\_INSTPGM.EXE] ¤¤¤¤¤¤¤¤¤¤ File Protection ¤¤¤¤¤¤¤¤¤¤ [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Windows File Protection] SFCDisable REG_DWORD 0 (0x0) ¤¤¤¤¤¤¤¤¤¤ Safemode ¤¤¤¤¤¤¤¤¤¤ HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot : OK !! HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal : OK !! HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network : OK !! ¤¤¤¤¤¤¤¤¤¤ Atapi.sys ¤¤¤¤¤¤¤¤¤¤ [MD5.cdfe4411a69c224bd1d11b2da92dac51] - C:\WINDOWS\$NtServicePackUninstall$\atapi.sys [MD5.9f3a2f5aa6875c72bf062c712cfa2674] - C:\WINDOWS\ERDNT\cache\atapi.sys [MD5.9f3a2f5aa6875c72bf062c712cfa2674] - C:\WINDOWS\ServicePackFiles\i386\atapi.sys [MD5.9f3a2f5aa6875c72bf062c712cfa2674] - C:\WINDOWS\system32\drivers\atapi.sys ¤¤¤¤¤ Reference Win 2000_SP2 : ff953a8f08ca3f822127654375786bbe Win 2000_SP4 : 8c718aa8c77041b3285d55a0ce980867 Win XP_32b : a64013e98426e1877cb653685c5c0009 Win XP_SP1_32b : 95b858761a00e1d4f81f79a0da019aca Win XP_SP2_32b : CDFE4411A69C224BD1D11B2DA92DAC51 Win XP_SP3_32b : 9F3A2F5AA6875C72BF062C712CFA2674 Vista_32b : e03e8c99d15d0381e02743c36afc7c6f Vista_SP1_32b : 2d9c903dc76a66813d350a562de40ed9 Vista_SP2_32b : 1F05B78AB91C9075565A9D8A4B880BC4 Vista_SP2_64b : 1898FAE8E07D97F2F6C2D5326C633FAC Windows 7_32b : 338c86357871c167a96ab976519bf59e Windows 7_64b : 02062C0B390B7729EDC9E69C680A6F3C ¤¤¤¤¤¤¤¤¤¤ Explorer ¤¤¤¤¤¤¤¤¤¤ [MD5.f2317622d29f9ff0f88aeecd5f60f0dd] - C:\WINDOWS\explorer.exe [MD5.b795475444d6d57a572c14b9e1a29839] - C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe [MD5.d0288319660edcfed07c7e74c4ea38a5] - C:\WINDOWS\$NtServicePackUninstall$\explorer.exe [MD5.4c33e5b9a6197b6ed215f6cfba0a2daa] - C:\WINDOWS\$NtUninstallKB938828$\explorer.exe [MD5.f2317622d29f9ff0f88aeecd5f60f0dd] - C:\WINDOWS\ERDNT\cache\explorer.exe [MD5.f2317622d29f9ff0f88aeecd5f60f0dd] - C:\WINDOWS\ServicePackFiles\i386\explorer.exe ¤¤¤¤¤¤¤¤¤¤ Winlogon ¤¤¤¤¤¤¤¤¤¤ [MD5.d2de785aeab0bb8ca4c14a8a199dbe4e] - C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe [MD5.dd73d6b9f6b4cb630cf35b438b540174] - C:\WINDOWS\ERDNT\cache\winlogon.exe [MD5.dd73d6b9f6b4cb630cf35b438b540174] - C:\WINDOWS\ServicePackFiles\i386\winlogon.exe [MD5.dd73d6b9f6b4cb630cf35b438b540174] - C:\WINDOWS\system32\winlogon.exe ¤¤¤¤¤¤¤¤¤¤ Drive ¤¤¤¤¤¤¤¤¤¤ Défragmenteur de disque Windows Copyright (c) 2001 Microsoft Corp. et Executive Software International Inc. Rapport d'analyse 153 Go total, 76,73 Go libre (50%), 5% fragmenté (fragmentation du fichier 10%) Il ne vous est pas nécessaire de défragmenter ce volume. ¤¤¤¤¤¤¤¤¤¤ Mountpoints2 ¤¤¤¤¤¤¤¤¤¤ ¤¤¤¤¤¤¤¤¤¤ Rogues Infections ¤¤¤¤¤¤¤¤¤¤ ¤¤¤¤¤¤¤¤¤¤ Files/folders ¤¤¤¤¤¤¤¤¤¤ Present !! : C:\Program Files\Samsung\Samsung PC Studio 3\Update\util\UnZipTemp\OrgLoadD500.exe Present !! : C:\Program Files\Samsung\Samsung PC Studio 3\Update\util\UnZipTemp\OrgLoadX800.exe Present !! : C:\Program Files\Samsung\Samsung PC Studio 3\Update\util\UnZipTemp\OrgLoadZ510.exe Present !! : C:\WINDOWS\002801_.tmp Present !! : C:\WINDOWS\002809_.tmp Present !! : C:\WINDOWS\SET3.tmp Present !! : C:\WINDOWS\SET4.tmp Present !! : C:\WINDOWS\SET495.tmp Present !! : C:\WINDOWS\SET8.tmp Present !! : C:\WINDOWS\SlantAdj.dll Present !! : C:\WINDOWS\System32\drivers\_004247_.tmp.dll Present !! : C:\WINDOWS\System32\SET103F.tmp Present !! : C:\WINDOWS\System32\SET1040.tmp Present !! : C:\WINDOWS\System32\SET1045.tmp Present !! : C:\WINDOWS\System32\SET104A.tmp Present !! : C:\WINDOWS\System32\SET1058.tmp Present !! : C:\WINDOWS\System32\SET1081.tmp Present !! : C:\WINDOWS\System32\SET18E.tmp Present !! : C:\WINDOWS\System32\SET18F.tmp Present !! : C:\WINDOWS\System32\SET191.tmp Present !! : C:\WINDOWS\System32\SET193.tmp Present !! : C:\WINDOWS\System32\SET195.tmp Present !! : C:\WINDOWS\System32\SET19C.tmp Present !! : C:\WINDOWS\System32\SET19D.tmp Present !! : C:\WINDOWS\System32\SET1A0.tmp Present !! : C:\WINDOWS\System32\SET1AB.tmp Present !! : C:\WINDOWS\System32\SET1AC.tmp Present !! : C:\WINDOWS\System32\SET1AD.tmp Present !! : C:\WINDOWS\System32\SET1AF.tmp Present !! : C:\WINDOWS\System32\SET1B0.tmp Present !! : C:\WINDOWS\System32\SET1B1.tmp Present !! : C:\WINDOWS\System32\SET1B2.tmp Present !! : C:\WINDOWS\System32\SET1B3.tmp Present !! : C:\WINDOWS\System32\SET1B5.tmp Present !! : C:\WINDOWS\System32\SET1B6.tmp Present !! : C:\WINDOWS\System32\SET1B7.tmp Present !! : C:\WINDOWS\System32\SET1BA.tmp Present !! : C:\WINDOWS\System32\SET1C1.tmp Present !! : C:\WINDOWS\System32\SET1C2.tmp Present !! : C:\WINDOWS\System32\SET1C3.tmp Present !! : C:\WINDOWS\System32\SET1C6.tmp Present !! : C:\WINDOWS\System32\SET1C8.tmp Present !! : C:\WINDOWS\System32\SET1CA.tmp Present !! : C:\WINDOWS\System32\SET1CE.tmp Present !! : C:\WINDOWS\System32\SET1D1.tmp Present !! : C:\WINDOWS\System32\SET1D3.tmp Present !! : C:\WINDOWS\System32\SET1D4.tmp Present !! : C:\WINDOWS\System32\SET1D5.tmp Present !! : C:\WINDOWS\System32\SET1D7.tmp Present !! : C:\WINDOWS\System32\SET1DC.tmp Present !! : C:\WINDOWS\System32\SET1DD.tmp Present !! : C:\WINDOWS\System32\SET1DE.tmp Present !! : C:\WINDOWS\System32\SET1DF.tmp Present !! : C:\WINDOWS\System32\SET1E0.tmp Present !! : C:\WINDOWS\System32\SET1E6.tmp Present !! : C:\WINDOWS\System32\SET1EB.tmp Present !! : C:\WINDOWS\System32\SET1EC.tmp Present !! : C:\WINDOWS\System32\SET1EF.tmp Present !! : C:\WINDOWS\System32\SET1F2.tmp Present !! : C:\WINDOWS\System32\SET1F3.tmp Present !! : C:\WINDOWS\System32\SET1FA.tmp Present !! : C:\WINDOWS\System32\SET1FB.tmp Present !! : C:\WINDOWS\System32\SET1FE.tmp Present !! : C:\WINDOWS\System32\SET201.tmp Present !! : C:\WINDOWS\System32\SET202.tmp Present !! : C:\WINDOWS\System32\SET20B.tmp Present !! : C:\WINDOWS\System32\SET20C.tmp Present !! : C:\WINDOWS\System32\SET20F.tmp Present !! : C:\WINDOWS\System32\SET211.tmp Present !! : C:\WINDOWS\System32\SET212.tmp Present !! : C:\WINDOWS\System32\SET213.tmp Present !! : C:\WINDOWS\System32\SET214.tmp Present !! : C:\WINDOWS\System32\SET215.tmp Present !! : C:\WINDOWS\System32\SET225.tmp Present !! : C:\WINDOWS\System32\SET22A.tmp Present !! : C:\WINDOWS\System32\SET22C.tmp Present !! : C:\WINDOWS\System32\SET22E.tmp Present !! : C:\WINDOWS\System32\SET22F.tmp Present !! : C:\WINDOWS\System32\SET230.tmp Present !! : C:\WINDOWS\System32\SET233.tmp Present !! : C:\WINDOWS\System32\SET234.tmp Present !! : C:\WINDOWS\System32\SET238.tmp Present !! : C:\WINDOWS\System32\SET239.tmp Present !! : C:\WINDOWS\System32\SET23D.tmp Present !! : C:\WINDOWS\System32\SET23E.tmp Present !! : C:\WINDOWS\System32\SET244.tmp Present !! : C:\WINDOWS\System32\SET245.tmp Present !! : C:\WINDOWS\System32\SET246.tmp Present !! : C:\WINDOWS\System32\SET24E.tmp Present !! : C:\WINDOWS\System32\SET254.tmp Present !! : C:\WINDOWS\System32\SET255.tmp Present !! : C:\WINDOWS\System32\SET256.tmp Present !! : C:\WINDOWS\System32\SET257.tmp Present !! : C:\WINDOWS\System32\SET259.tmp Present !! : C:\WINDOWS\System32\SET25F.tmp Present !! : C:\WINDOWS\System32\SET26B.tmp Present !! : C:\WINDOWS\System32\SET26D.tmp Present !! : C:\WINDOWS\System32\SET26F.tmp Present !! : C:\WINDOWS\System32\SET270.tmp Present !! : C:\WINDOWS\System32\SET271.tmp Present !! : C:\WINDOWS\System32\SET273.tmp Present !! : C:\WINDOWS\System32\SET274.tmp Present !! : C:\WINDOWS\System32\SET27C.tmp Present !! : C:\WINDOWS\System32\SET27E.tmp Present !! : C:\WINDOWS\System32\SET27F.tmp Present !! : C:\WINDOWS\System32\SET282.tmp Present !! : C:\WINDOWS\System32\SET284.tmp Present !! : C:\WINDOWS\System32\SET287.tmp Present !! : C:\WINDOWS\System32\SET296.tmp Present !! : C:\WINDOWS\System32\SET298.tmp Present !! : C:\WINDOWS\System32\SET299.tmp Present !! : C:\WINDOWS\System32\SET29A.tmp Present !! : C:\WINDOWS\System32\SET2A1.tmp Present !! : C:\WINDOWS\System32\SET2A2.tmp Present !! : C:\WINDOWS\System32\SET2A5.tmp Present !! : C:\WINDOWS\System32\SET2A6.tmp Present !! : C:\WINDOWS\System32\SET2A7.tmp Present !! : C:\WINDOWS\System32\SET2A8.tmp Present !! : C:\WINDOWS\System32\SET2A9.tmp Present !! : C:\WINDOWS\System32\SET2AB.tmp Present !! : C:\WINDOWS\System32\SET2AC.tmp Present !! : C:\WINDOWS\System32\SET2AD.tmp Present !! : C:\WINDOWS\System32\SET2AF.tmp Present !! : C:\WINDOWS\System32\SET2B0.tmp Present !! : C:\WINDOWS\System32\SET2B1.tmp Present !! : C:\WINDOWS\System32\SET2B3.tmp Present !! : C:\WINDOWS\System32\SET2B5.tmp Present !! : C:\WINDOWS\System32\SET2B6.tmp Present !! : C:\WINDOWS\System32\SET2BB.tmp Present !! : C:\WINDOWS\System32\SET2BC.tmp Present !! : C:\WINDOWS\System32\SET2BD.tmp Present !! : C:\WINDOWS\System32\SET2C3.tmp Present !! : C:\WINDOWS\System32\SET2C4.tmp Present !! : C:\WINDOWS\System32\SET2C5.tmp Present !! : C:\WINDOWS\System32\SET2C7.tmp Present !! : C:\WINDOWS\System32\SET2CA.tmp Present !! : C:\WINDOWS\System32\SET2CC.tmp Present !! : C:\WINDOWS\System32\SET2CD.tmp Present !! : C:\WINDOWS\System32\SET2D0.tmp Present !! : C:\WINDOWS\System32\SET2D1.tmp Present !! : C:\WINDOWS\System32\SET2D4.tmp Present !! : C:\WINDOWS\System32\SET2D7.tmp Present !! : C:\WINDOWS\System32\SET2D8.tmp Present !! : C:\WINDOWS\System32\SET2DF.tmp Present !! : C:\WINDOWS\System32\SET2E1.tmp Present !! : C:\WINDOWS\System32\SET2E4.tmp Present !! : C:\WINDOWS\System32\SET2EA.tmp Present !! : C:\WINDOWS\System32\SET2EB.tmp Present !! : C:\WINDOWS\System32\SET2EE.tmp Present !! : C:\WINDOWS\System32\SET2EF.tmp Present !! : C:\WINDOWS\System32\SET2F5.tmp Present !! : C:\WINDOWS\System32\SET2F6.tmp Present !! : C:\WINDOWS\System32\SET2F8.tmp Present !! : C:\WINDOWS\System32\SET2F9.tmp Present !! : C:\WINDOWS\System32\SET2FA.tmp Present !! : C:\WINDOWS\System32\SET2FE.tmp Present !! : C:\WINDOWS\System32\SET2FF.tmp Present !! : C:\WINDOWS\System32\SET300.tmp Present !! : C:\WINDOWS\System32\SET301.tmp Present !! : C:\WINDOWS\System32\SET302.tmp Present !! : C:\WINDOWS\System32\SET303.tmp Present !! : C:\WINDOWS\System32\SET305.tmp Present !! : C:\WINDOWS\System32\SET307.tmp Present !! : C:\WINDOWS\System32\SET30A.tmp Present !! : C:\WINDOWS\System32\SET312.tmp Present !! : C:\WINDOWS\System32\SET314.tmp Present !! : C:\WINDOWS\System32\SET316.tmp Present !! : C:\WINDOWS\System32\SET317.tmp Present !! : C:\WINDOWS\System32\SET318.tmp Present !! : C:\WINDOWS\System32\SET31A.tmp Present !! : C:\WINDOWS\System32\SET31C.tmp Present !! : C:\WINDOWS\System32\SET321.tmp Present !! : C:\WINDOWS\System32\SET323.tmp Present !! : C:\WINDOWS\System32\SET324.tmp Present !! : C:\WINDOWS\System32\SET32B.tmp Present !! : C:\WINDOWS\System32\SET336.tmp Present !! : C:\WINDOWS\System32\SET339.tmp Present !! : C:\WINDOWS\System32\SET33A.tmp Present !! : C:\WINDOWS\System32\SET33B.tmp Present !! : C:\WINDOWS\System32\SET33F.tmp Present !! : C:\WINDOWS\System32\SET347.tmp Present !! : C:\WINDOWS\System32\SET34E.tmp Present !! : C:\WINDOWS\System32\SET350.tmp Present !! : C:\WINDOWS\System32\SET356.tmp Present !! : C:\WINDOWS\System32\SET357.tmp Present !! : C:\WINDOWS\System32\SET359.tmp Present !! : C:\WINDOWS\System32\SET35A.tmp Present !! : C:\WINDOWS\System32\SET35D.tmp Present !! : C:\WINDOWS\System32\SET360.tmp Present !! : C:\WINDOWS\System32\SET37.tmp Present !! : C:\WINDOWS\System32\SET370.tmp Present !! : C:\WINDOWS\System32\SET374.tmp Present !! : C:\WINDOWS\System32\SET376.tmp Present !! : C:\WINDOWS\System32\SET378.tmp Present !! : C:\WINDOWS\System32\SET37C.tmp Present !! : C:\WINDOWS\System32\SET37E.tmp Present !! : C:\WINDOWS\System32\SET38.tmp Present !! : C:\WINDOWS\System32\SET380.tmp Present !! : C:\WINDOWS\System32\SET382.tmp Present !! : C:\WINDOWS\System32\SET390.tmp Present !! : C:\WINDOWS\System32\SET396.tmp Present !! : C:\WINDOWS\System32\SET398.tmp Present !! : C:\WINDOWS\System32\SET399.tmp Present !! : C:\WINDOWS\System32\SET39F.tmp Present !! : C:\WINDOWS\System32\SET3A3.tmp Present !! : C:\WINDOWS\System32\SET3AD.tmp Present !! : C:\WINDOWS\System32\SET3B.tmp Present !! : C:\WINDOWS\System32\SET3B1.tmp Present !! : C:\WINDOWS\System32\SET3B3.tmp Present !! : C:\WINDOWS\System32\SET3B4.tmp Present !! : C:\WINDOWS\System32\SET3B5.tmp Present !! : C:\WINDOWS\System32\SET3C.tmp Present !! : C:\WINDOWS\System32\SET3C1.tmp Present !! : C:\WINDOWS\System32\SET3C6.tmp Present !! : C:\WINDOWS\System32\SET3CD.tmp Present !! : C:\WINDOWS\System32\SET3D.tmp Present !! : C:\WINDOWS\System32\SET3D5.tmp Present !! : C:\WINDOWS\System32\SET3E0.tmp Present !! : C:\WINDOWS\System32\SET3E1.tmp Present !! : C:\WINDOWS\System32\SET40.tmp Present !! : C:\WINDOWS\System32\SET401.tmp Present !! : C:\WINDOWS\System32\SET403.tmp Present !! : C:\WINDOWS\System32\SET404.tmp Present !! : C:\WINDOWS\System32\SET407.tmp Present !! : C:\WINDOWS\System32\SET40C.tmp Present !! : C:\WINDOWS\System32\SET40E.tmp Present !! : C:\WINDOWS\System32\SET41.tmp Present !! : C:\WINDOWS\System32\SET412.tmp Present !! : C:\WINDOWS\System32\SET415.tmp Present !! : C:\WINDOWS\System32\SET416.tmp Present !! : C:\WINDOWS\System32\SET417.tmp Present !! : C:\WINDOWS\System32\SET419.tmp Present !! : C:\WINDOWS\System32\SET41A.tmp Present !! : C:\WINDOWS\System32\SET41B.tmp Present !! : C:\WINDOWS\System32\SET41C.tmp Present !! : C:\WINDOWS\System32\SET41E.tmp Present !! : C:\WINDOWS\System32\SET42.tmp Present !! : C:\WINDOWS\System32\SET420.tmp Present !! : C:\WINDOWS\System32\SET421.tmp Present !! : C:\WINDOWS\System32\SET423.tmp Present !! : C:\WINDOWS\System32\SET426.tmp Present !! : C:\WINDOWS\System32\SET428.tmp Present !! : C:\WINDOWS\System32\SET42D.tmp Present !! : C:\WINDOWS\System32\SET42E.tmp Present !! : C:\WINDOWS\System32\SET436.tmp Present !! : C:\WINDOWS\System32\SET43C.tmp Present !! : C:\WINDOWS\System32\SET441.tmp Present !! : C:\WINDOWS\System32\SET444.tmp Present !! : C:\WINDOWS\System32\SET447.tmp Present !! : C:\WINDOWS\System32\SET449.tmp Present !! : C:\WINDOWS\System32\SET44D.tmp Present !! : C:\WINDOWS\System32\SET44F.tmp Present !! : C:\WINDOWS\System32\SET450.tmp Present !! : C:\WINDOWS\System32\SET454.tmp Present !! : C:\WINDOWS\System32\SET455.tmp Present !! : C:\WINDOWS\System32\SET459.tmp Present !! : C:\WINDOWS\System32\SET45A.tmp Present !! : C:\WINDOWS\System32\SET45D.tmp Present !! : C:\WINDOWS\System32\SET45F.tmp Present !! : C:\WINDOWS\System32\SET465.tmp Present !! : C:\WINDOWS\System32\SET468.tmp Present !! : C:\WINDOWS\System32\SET46C.tmp Present !! : C:\WINDOWS\System32\SET46E.tmp Present !! : C:\WINDOWS\System32\SET470.tmp Present !! : C:\WINDOWS\System32\SETC69.tmp Present !! : C:\WINDOWS\System32\SETC6B.tmp Present !! : C:\WINDOWS\System32\SETC77.tmp Present !! : C:\Documents and Settings\stephane doux\Application Data\Temporary Present !! : C:\Documents and Settings\stephane doux\Local Settings\Temporary Internet Files\SuggestedSites.dat Present !! : C:\Documents and Settings\stephane doux esults.txt ¤¤¤¤¤¤¤¤¤¤ Keys : Present !! : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser : {0E5CBF21-D15F-11D0-8301-00AA005B4383} Present !! : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer : NoDrives Present !! : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer : NoDrives Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Install.exe" Present !! : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe" Present !! : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c7b76b90-3455-4ae6-a752-eac4d19689e5} Present !! : HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\76DA9915C36F3D742951F63351CF5C97 Present !! : HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9B0B0584E80456A4FB98DA3973B1EB3F Present !! : HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A89F1E0FE544529429C8BF82FE74CE39 Present !! : HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\C9667115F6A9CE340B31B63B680FF26F Present !! : HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EFB70E89C3D6D354596520DE424F89D6 Present !! : HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F49A213B5069AC348994D03F81B56C19 FEATURE_BROWSER_EMULATION | svchost : ==================================== ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

Utilisateur anonyme · Answer

? Relance List_Kill'em(soit en clic droit pour vista/7),avec le raccourci sur ton bureau. 
mais cette fois-ci : 

? choisis l'Option Clean 

ton PC va redemarrer, 

laisse travailler l'outil. 

en fin de scan la fenetre se ferme , et tu as un rapport du nom de Kill'em.txt sur ton bureau , 

? colle le contenu dans ta reponse

steph0404 · Answer

¤¤¤¤¤¤¤¤¤¤ Kill'em by g3n-h@ckm@n 2.1.0.6 ¤¤¤¤¤¤¤¤¤¤ 
 

¤¤¤¤¤¤¤¤¤¤ Files/folders : 

Quarantined & Deleted !! : C:\Program Files\Samsung\Samsung PC Studio 3\Update\util\UnZipTemp\OrgLoadD500.exe 
Quarantined & Deleted !! : C:\Program Files\Samsung\Samsung PC Studio 3\Update\util\UnZipTemp\OrgLoadX800.exe 
Quarantined & Deleted !! : C:\Program Files\Samsung\Samsung PC Studio 3\Update\util\UnZipTemp\OrgLoadZ510.exe 
Quarantined & Deleted !! : C:\WINDOWS\002801_.tmp 
Quarantined & Deleted !! : C:\WINDOWS\002809_.tmp 
Quarantined & Deleted !! : C:\WINDOWS\SET3.tmp 
Quarantined & Deleted !! : C:\WINDOWS\SET4.tmp 
Quarantined & Deleted !! : C:\WINDOWS\SET495.tmp 
Quarantined & Deleted !! : C:\WINDOWS\SET8.tmp 
 
Quarantined & Deleted !! : C:\WINDOWS\System32\drivers\_004247_.tmp.dll 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET103F.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1040.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1045.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET104A.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1058.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1081.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET18E.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET18F.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET191.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET193.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET195.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET19C.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET19D.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1A0.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1AB.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1AC.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1AD.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1AF.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1B0.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1B1.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1B2.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1B3.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1B5.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1B6.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1B7.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1BA.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1C1.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1C2.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1C3.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1C6.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1C8.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1CA.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1CE.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1D1.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1D3.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1D4.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1D5.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1D7.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1DC.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1DD.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1DE.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1DF.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1E0.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1E6.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1EB.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1EC.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1EF.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1F2.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1F3.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1FA.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1FB.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET1FE.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET201.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET202.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET20B.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET20C.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET20F.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET211.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET212.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET213.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET214.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET215.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET225.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET22A.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET22C.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET22E.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET22F.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET230.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET233.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET234.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET238.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET239.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET23D.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET23E.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET244.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET245.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET246.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET24E.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET254.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET255.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET256.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET257.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET259.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET25F.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET26B.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET26D.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET26F.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET270.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET271.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET273.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET274.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET27C.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET27E.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET27F.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET282.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET284.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET287.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET296.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET298.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET299.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET29A.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2A1.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2A2.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2A5.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2A6.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2A7.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2A8.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2A9.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2AB.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2AC.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2AD.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2AF.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2B0.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2B1.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2B3.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2B5.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2B6.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2BB.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2BC.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2BD.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2C3.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2C4.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2C5.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2C7.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2CA.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2CC.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2CD.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2D0.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2D1.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2D4.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2D7.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2D8.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2DF.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2E1.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2E4.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2EA.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2EB.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2EE.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2EF.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2F5.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2F6.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2F8.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2F9.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2FA.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2FE.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET2FF.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET300.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET301.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET302.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET303.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET305.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET307.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET30A.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET312.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET314.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET316.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET317.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET318.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET31A.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET31C.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET321.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET323.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET324.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET32B.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET336.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET339.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET33A.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET33B.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET33F.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET347.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET34E.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET350.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET356.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET357.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET359.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET35A.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET35D.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET360.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET37.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET370.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET374.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET376.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET378.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET37C.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET37E.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET38.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET380.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET382.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET390.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET396.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET398.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET399.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET39F.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET3A3.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET3AD.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET3B.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET3B1.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET3B3.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET3B4.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET3B5.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET3C.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET3C1.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET3C6.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET3CD.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET3D.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET3D5.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET3E0.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET3E1.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET40.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET401.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET403.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET404.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET407.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET40C.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET40E.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET41.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET412.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET415.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET416.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET417.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET419.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET41A.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET41B.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET41C.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET41E.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET42.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET420.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET421.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET423.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET426.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET428.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET42D.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET42E.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET436.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET43C.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET441.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET444.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET447.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET449.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET44D.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET44F.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET450.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET454.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET455.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET459.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET45A.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET45D.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET45F.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET465.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET468.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET46C.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET46E.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SET470.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SETC69.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SETC6B.tmp 
Quarantined & Deleted !! : C:\WINDOWS\System32\SETC77.tmp 
Quarantined & Deleted !! : C:\Documents and Settings\stephane doux\Application Data\Temporary 
Quarantined & Deleted !! : C:\Documents and Settings\stephane doux\LOCAL Settings\Temp\catchme.dll 
Quarantined & Deleted !! : C:\Documents and Settings\stephane doux\Local Settings\Temporary Internet Files\SuggestedSites.dat 
Quarantined & Deleted !! : C:\Documents and Settings\stephane doux\results.txt 
 
¤¤¤¤¤¤¤¤¤¤ Hosts ¤¤¤¤¤¤¤¤¤¤

127.0.0.1       localhost   

¤¤¤¤¤¤¤¤¤¤ Registry ¤¤¤¤¤¤¤¤¤¤

Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser : {0E5CBF21-D15F-11D0-8301-00AA005B4383}  
Deleted : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer : NoDrives  
Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer : NoDrives  
Deleted : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Install.exe"  
Deleted : "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe"  
Deleted : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c7b76b90-3455-4ae6-a752-eac4d19689e5}  
Deleted : HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\76DA9915C36F3D742951F63351CF5C97  
Deleted : HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\9B0B0584E80456A4FB98DA3973B1EB3F  
Deleted : HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\A89F1E0FE544529429C8BF82FE74CE39  
Deleted : HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\C9667115F6A9CE340B31B63B680FF26F  
Deleted : HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\EFB70E89C3D6D354596520DE424F89D6  
Deleted : HKLM\software\microsoft\windows\currentversion\installer\userdata\S-1-5-18\Components\F49A213B5069AC348994D03F81B56C19  

¤¤¤¤¤¤¤¤¤¤ Internet Explorer ¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
Start Page	=         	https://www.msn.com/fr-fr/?ocid=iehp
Local Page	=         	C:\WINDOWS\system32\blank.htm
Default_Search_URL	=         	https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
Default_Page_URL	=         	https://www.msn.com/fr-fr/?ocid=iehp
Search Page	=         	https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
Start Page	=         	https://www.google.com/?gws_rd=ssl
Local Page	=         	C:\WINDOWS\system32\blank.htm
Search Page	=         	http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

¤¤¤¤¤¤¤¤¤¤ Security Center ¤¤¤¤¤¤¤¤¤¤

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] 
FirstRunDisabled	=      	1 () 
AntiVirusDisableNotify	=      	0 (0x0) 
FirewallDisableNotify	=      	0 (0x0) 
UpdatesDisableNotify	=      	0 (0x0) 
AntiVirusOverride	=      	0 (0x0) 
FirewallOverride	=      	0 (0x0) 
 
¤¤¤¤¤¤¤¤¤¤ Services ¤¤¤¤¤¤¤¤¤¤

 Ndisuio : Start = 3   
 EapHost : Start = 2   
 Ip6Fw : Start = 2   
 SharedAccess : Start = 2   
 wuauserv : Start = 2   
 wscsvc : Start = 2   

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤
Disk Cleaned
anti-ver blaster : OK 
Prefetch cleaned 
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ 

FEATURE_BROWSER_EMULATION | svchost : 
====================================
 

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys viaide.sys PCIIDEX.SYS 
kernel: MBR read successfully
user & kernel MBR OK 
 
 
 
 
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ( EOF ) ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

Utilisateur anonyme · Answer

bonjour,
relance Listkill'em :

Executer List_Kill'em 

une fois terminée , clic sur "terminer" et le programme se lancera seul 

choisis le bouton TOOLS 
puis le bouton KILLPROXY 
poste le rapport

steph0404 · Answer

¤¤¤¤¤¤¤¤¤¤ Proxy_Kill by Gen-Hackman

¤¤¤¤¤¤¤¤¤¤ Internet Explorer ¤¤¤¤¤¤¤¤¤¤

ProxyServer Deleted !!  
 
¤¤¤¤¤¤¤¤¤¤ Firefox ¤¤¤¤¤¤¤¤¤¤
 



¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ( EOF ) ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

Utilisateur anonyme · Answer

bonjour,

est ec que ton pc fonctionne correctement avant de finaliser la désinfection ?

steph0404 · Answer

bonjour oui il fonctionne tres bien pour l'instant

steph0404 · Answer

j'ai un petit problème avec le site du bon coin , a chaque fois que je lance une recherche dans ma région ça me renvoie sur la page d'accueil , ça n'a peu etre rien a voir .

steph0404 · Answer

mémé problème sur d'autre site

Utilisateur anonyme · Answer

bonsoir,
Vas dans le menu démarre, puis exécuter, à l'invite de commande, taper :

netsh int ip reset all      

 puis cette commande: 

netsh winsock reset    

Puis redémarrer le pc


fais quelques recherches et donne moi des nouvelles

steph0404 · Answer

toujours impossible d'ouvrir une page correctement sur ebay ou le bon coin

Utilisateur anonyme · Answer

tu utilises internet explorer ou FF ?

steph0404 · Answer

j'ai desinstaler google chrome est je l'ai retelecharger cela n'a rien changer toujours le mémé problème avec le bon coin est ebay , j'ai instaler internet explorer 8 mais il est moi rapide

Utilisateur anonyme · Answer

bonsoir,
désinstalle Google chrome, supprime les fichiers restants en manuel, passe un Coup de nettoyage avec Clceaner, puis réinstale le

steph0404 · Answer

bonjour , les quel fichier restants , si tu peu me donner leur non pour que je ne face pas de bêtises merci

Utilisateur anonyme · Answer

désinstalle Google chrome, dans C:\programmes files, tu dois retrouver le répertoire Google Chrome, puis le virer en manuel, un coup de Ccleaner, puis réinstallation de Google chrome  :-)

steph0404 · Answer

je ne trouve que du google toolbar ,google updater , google toolbar notifier

Utilisateur anonyme · Answer

as tu désinstaller Google chrome depuis l'ajout/suppression de prgrammes?

si oui, supprime le reste manuellement, 

regarde sur C: si le répertoire Goolgle chrome ne se trouve pas là dedans  :-)

steph0404 · Answer

oui il est desinstaler , mais sur c: je ne trouve que google toolbar

Utilisateur anonyme · Answer

vire tout,
lance une recherche avec le mot clé Google chrome, supprime tout, puis lance un nettoyage avec Ccleaner, réinstalle le

on verra ce que ça donne  :-)

steph0404 · Answer

ça ne marche toujour pas , toujur le meme probleme

Utilisateur anonyme · Answer

bonjour,
tu utilises surement un bloqueur de pop up, regrade son niveau, si tu l'as réglé trop haut, il ne va pas t'ouvrire certains sites !

steph0404 · Answer

bonjour , le niveau du bloqueur est au plus bas et ça ne marche pas

Utilisateur anonyme · Answer

bonsoir,

*	Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag en cliquant sur l'écusson vert) 
Clique sur l'icone représentant la lettre H (« coller les lignes Helper ») 
Copie/colle les lignes suivantes en gras et place les dans ZHPFix : 

---------------------------------------------------------- 

ProxyFix


---------------------------------------------------------- 

- Clique sur « Tous », puis sur « Nettoyer » 
- Copie/colle la totalité du rapport dans ta prochaine réponse
Tuto :
http://www.premiumorange.com/zeb-help-process/zhpfix.html

steph0404 · Answer

Rapport de ZHPFix v1.12.3149 par Nicolas Coolman, Update du 11/09/2010
Fichier d'export Registre : 
Run by stephane doux at 25/09/2010 13:12:27
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Contact : nicolascoolman@yahoo.fr

========== Autre ==========
ProxyFix  => Format Non supporté


========== Récapitulatif ==========
1 : Autre


End of the scan

steph0404 · Answer

bonjour , je vien de refaire un essais ça remarche , je te tien au courant

steph0404 · Answer

pas ebay par contre

Utilisateur anonyme · Answer

s'il y a juste un site, ce n'est pas bien grave !
refais des essais sur d'autres sites !!

steph0404 · Answer

bonjour elctricien 69 , je te remercie pour ton aide , je pensse que je vais fermer cette discution merci encore .

steph0404 · Answer

comment tu fait pour marquer que le probleme est resolu

Utilisateur anonyme · Answer

bonsoir,

je pense que ton problème est résolu  :-)

je m'en occupe  :-)

bon surf  ;-)

Problème adware

69 réponses

Discussions similaires