Rapport ZHPDiag Résolu

Question

Bonjour,  
Mon PC sous XP rame et fai un bruit pas possible. 
Je pense être infecté. 
A l'AIDE!!!!!! 
Voilà mon rapport ZHPDiag (Rapport MBAM à venir!)
http://www.cijoint.fr/cjlink.php?file=cj201101/cijdK9jHgp.txt 
Merci

Excessimo · Answer

Salut :) 

1) 
=============AD-REMOVER================== 

* Télécharge AD-Remover ici 
ferme toutes les applications en cours !!! 

Note : Utilisateurs de vista/seven -> Clic droit sur "Ad-R.exe" puis " Exécuter en tant qu'administrateur " 

* Double-clique sur l'icône AD-Remover 
* Au menu principal, clique sur "Nettoyer" 
* Confirme le lancement de l'analyse et laisse l'outil travailler 
* Poste le rapport qui apparait à la fin (il est aussi sauvegardé sous C:\Ad-report-CLEAN.txt ) 

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

Utilisateur anonyme · Answer

Salut 





                 
            Membre Contributeur sécurité CCM

manolo · Answer

je trouve pas ad-report clean txt mais just ad-report scan txt

manolo · Answer

Voilà mon rapport MBAM

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Version de la base de données: 5633

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

29/01/2011 10:08:13
mbam-log-2011-01-29 (10-08-13).txt

Type d'examen: Examen rapide
Elément(s) analysé(s): 151411
Temps écoulé: 8 minute(s), 35 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

manolo · Answer

ça yé je l'ai refait!! voilà mon rapport ad-remover


======= RAPPORT D'AD-REMOVER 2.0.0.2,D | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 20/01/11 à 19:00
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [2]) -> Lancé à 10:11:48 le 29/01/2011, Mode normal

Microsoft Windows XP Édition familiale Service Pack 3 (X86) 
Milka@GÉNÉRAL ( ) 
 
============== ACTION(S) ==============



(!) -- Fichiers temporaires supprimés.




============== SCAN ADDITIONNEL ==============

** Mozilla Firefox Version [3.6.2pre (fr)] **

-- C:\Documents and Settings\Milka\Application Data\Mozilla\FireFox\Profiles\k7qt8sqr.default\Prefs.js --
browser.download.dir, C:\Documents and Settings\Milka\Bureau\Programm
browser.download.lastDir, C:\Documents and Settings\Milka\Local Settings\Application Data\Google
browser.search.selectedEngine, Yahoo
browser.startup.homepage_override.mstone, rv:1.9.2.2
keyword.URL, hxxp://urlseek.vmn.net/search.php?type=dns&tbn=photopos2_0&q=
privacy.popups.showBrowserMessage, false

========================================

** Internet Explorer Version [8.0.6001.18702] **

[HKCU\Software\Microsoft\Internet Explorer\Main] 
AutoHide: yes
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\WINDOWS\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Use Custom Search URL: 1
Use Search Asst: no

[HKLM\Software\Microsoft\Internet Explorer\Main] 
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\windows\system32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] 
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files\Ad-Remover\Quarantine: 45 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 16 Fichier(s)

C:\Ad-Report-SCAN[1].txt - 29/01/2011 (7248 Octet(s)) 
C:\Ad-Report-CLEAN[1].txt - 29/01/2011 (7324 Octet(s)) 
C:\Ad-Report-CLEAN[2].txt - 29/01/2011 (587 Octet(s)) 

Fin à: 10:12:57, 29/01/2011 
 
============== E.O.F ==============

Excessimo · Answer

Tu as lancé mbam qu'une seule fois ? Postes le rapport scan de Adremover si tu n'as pas le clean.

===============ZHPFIX====================

* Lance ZHPFix il se trouve sur le bureau (si tu es sous Windows Vista ou Windows 7, lance le par un clic-droit dessus --> exécuter en temps qu'administrateur).

* Copie les lignes suivantes :

---------------------------------------------------

[MD5.4BFE28145799174386393B1E09764ED4] - (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Milka\Local Settings\Application Data\Google\Chrome\Application\chrome.exe [991800]
O42 - Logiciel: Search Settings 1.1 - (.Pas de propriétaire.) [HKLM] -- {32AD1A7A-25F1-44B9-A396-EA8A4A6605B0}
[HKCU\Software\Official-eMule]
[HKCU\Software\PriceGong]
[HKCU\Software\Search Settings]
[HKLM\Software\Freeze.com]
[HKLM\Software\Official-eMule]
[HKLM\Software\Search Settings]
O43 - CFD: 15/03/2008 - 12:25:50 ----D- C:\Documents and Settings\Milka\Application Data\Search Settings
O43 - CFD: 19/11/2010 - 20:03:08 ----D- C:\Documents and Settings\Milka\Application Data\PriceGong
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Milka\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <chrome.exe> <>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Milka\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Milka\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
O42 - Logiciel: Search Settings 1.1 - (.Pas de propriétaire.) [HKLM] -- {32AD1A7A-25F1-44B9-A396-EA8A4A6605B0}
[HKCU\Software\Search Settings]
[HKLM\Software\Search Settings]

---------------------------------------------------

* Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)
* Les lignes se collent automatiquement dans ZHPFix.
* Clique sur « Ok » puis sur « Tous », puis sur « Nettoyer »

postes le rapport

manolo · Answer

========== Processus mémoire ==========
C:\Documents and Settings\Milka\Local Settings\Application Data\Google\Chrome\Application\chrome.exe [991800] => Supprimé et mis en quarantaine

========== Clé(s) du Registre ==========
HKCU\Software\Official-eMule => Clé supprimée avec succès
HKCU\Software\PriceGong => Clé absente
HKCU\Software\Search Settings => Clé absente
HKLM\Software\Freeze.com => Clé absente
HKLM\Software\Official-eMule => Clé supprimée avec succès
HKLM\Software\Search Settings => Clé absente
O67 - Shell Spawning: <.html> <ChromeHTML>[HKCR\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Milka\Local Settings\Application Data\Google\Chrome\Application\chrome.exe => Clé absente

========== Elément(s) de donnée du Registre ==========
O68 - StartMenuInternet: <chrome.exe> <>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Milka\Local Settings\Application Data\Google\Chrome\Application\chrome.exe => Donnée supprimée avec succès
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Documents and Settings\Milka\Local Settings\Application Data\Google\Chrome\Application\chrome.exe => Donnée supprimée avec succès

========== Dossier(s) ==========
C:\Documents and Settings\Milka\Application Data\Search Settings => Dossier absent
C:\Documents and Settings\Milka\Application Data\PriceGong => Dossier absent

========== Fichier(s) ==========

========== Logiciel(s) ==========
O42 - Logiciel: Search Settings 1.1 - (.Pas de propriétaire.) [HKLM] -- {32AD1A7A-25F1-44B9-A396-EA8A4A6605B0} => Logiciel déjà supprimé

========== Récapitulatif ==========
1 : Processus mémoire
7 : Clé(s) du Registre
2 : Elément(s) de donnée du Registre
2 : Dossier(s)
1 : Logiciel(s)

End of the scan

manolo · Answer

c'est normal ke mon navigateur (google chrome) a été désinstallé??

Excessimo · Answer

-+-+-+-+-> USBFix <-+-+-+-+-

Note : Ton PC est victime d'une infection par médias amovibles. Tu trouveras plus d'informations sur cette infection ici.

[x] Télécharge USBfix ( d'El desaparecido et C_XX ) sur ton bureau.

[x] Si ton anvirus affiche une alerte, ignore le et désactive le momentanément.

[x] Branche TOUT tes médias amovibles à ton PC ( Clé USB, disque dur externe, carte SD etc.. ) sans les ouvrir.

[x] Double clic sur le raccourci UsbFix présent sur le bureau .

[x] Choisir l'option suppression

[x] USBFix va rechercher les infections possibles, ne t'inquiète pas si le menu démarrer et les incônes de ton bureau disparaissent, c'est normal

[x] Il est possible que USBFix te demande de redémarrer ton PC, fais le.

[x] Au redémarrage, USBFix va se lancer pour appliquer les fix, laisse le faire

[x] Le bloc note s'ouvre avec un rapport, envoies le dans la prochaine réponse, pour info : le rapport UsbFix.txt est sauvegardé a la racine du disque ( C:\UsbFix.txt ).

( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

manolo · Answer

voilà le rapport USBFIX 


############################## | UsbFix 7.038 | [Suppression] 

Utilisateur: Milka (Administrateur) # GÉNÉRAL [ ] 
Mis à jour le 14/01/2011 par El Desaparecido / C_XX 
Lancé à 10:43:22 | 29/01/2011 
Site Web: http://www.teamxscript.org 
Contact: eldesaparecido@teamxscript.org 

CPU: Intel(R) Celeron(R) CPU 2.93GHz 
Microsoft Windows XP Édition familiale (5.1.2600 32-Bit) # Service Pack 3 
Internet Explorer 8.0.6001.18702 

Pare-feu Windows: Activé 
Antivirus: Bitdefender Antivirus 8.0 [(!) Disabled | (!) Outdated] 
Antivirus: AntiVir Desktop 10.0.1.56 [Enabled | Updated] 
Firewall: Bitdefender Firewall 8.0 [(!) Disabled] 
RAM -> 479 Mo 
C:\ (%systemdrive%) -> Disque fixe # 73 Go (27 Go libre(s) - 37%) [ACER] # FAT32 
D:\ -> Disque fixe # 73 Go (36 Go libre(s) - 50%) [ACERDATA] # NTFS 
E:\ -> CD-ROM 
F:\ -> Disque amovible # 15 Go (13 Go libre(s) - 85%) [VOITURE] # FAT32 
G:\ -> Disque fixe # 466 Go (327 Go libre(s) - 70%) [FREECOM] # FAT32 

################## | Éléments infectieux | 


Supprimé! C:\WINDOWS\system32\autorun 
Supprimé! D:\Recycler\S-1-5-21-2447095445-731099913-2687225915-1006 
Supprimé! D:\Recycler\S-1-5-21-2447095445-731099913-2687225915-500 

################## | Registre | 

Supprimé! HKLM\software\microsoft\windows nt\currentversion\winlogon|Taskman 
Supprimé! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System|DisableRegistryTools 
Supprimé! HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives 
Supprimé! HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\explorer|NoDrives 

################## | Mountpoints2 | 


################## | Listing | 

[08/04/2005 - 02:25:22 | D ] C:\i386 
[05/08/2004 - 05:00:00 | D ] C:\VALUEADD 
[05/08/2004 - 05:00:00 | D ] C:\dotnetfx 
[04/05/2005 - 10:18:22 | N | 75] C:\PRELOAD.AAA 
[14/03/2010 - 20:48:02 | D ] C:	emp 
[29/01/2011 - 09:47:18 | ASH | 754974720] C:\pagefile.sys 
[01/07/2010 - 10:06:44 | N | 6386] C:apport.txt 
[19/05/2006 - 12:31:44 | N | 4747264] C:
sb76.tmp 
[03/05/2005 - 01:45:04 | D ] C:\drv 
[03/05/2005 - 01:45:38 | D ] C:\GUIDE 
[11/04/2005 - 01:17:12 | D ] C:\WINDOWS 
[05/08/2004 - 05:00:00 | N | 4952] C:\Bootfont.bin 
[02/10/2008 - 14:16:26 | N | 252240] C:
tldr 
[05/08/2004 - 05:00:00 | N | 47564] C:\NTDETECT.COM 
[05/07/2010 - 09:35:16 | N | 286] C:\boot.ini 
[03/05/2005 - 01:53:50 | D ] C:\Documents and Settings 
[29/06/2010 - 16:50:48 | D ] C:\Program Files 
[03/05/2005 - 02:02:26 | N | 0] C:\CONFIG.SYS 
[03/05/2005 - 02:17:52 | N | 50] C:\AUTOEXEC.BAT 
[03/05/2005 - 02:02:26 | N | 0] C:\IO.SYS 
[03/05/2005 - 02:02:26 | N | 0] C:\MSDOS.SYS 
[03/05/2005 - 02:07:28 | SHD ] C:\System Volume Information 
[04/05/2005 - 10:18:24 | D ] C:\SYSINFO 
[05/07/2010 - 10:03:42 | N | 28739] C:\ComboFix.txt 
[26/06/2010 - 07:44:58 | D ] C:\VundoFix Backups 
[05/07/2010 - 09:35:10 | D ] C:\cmdcons 
[20/03/2010 - 10:53:26 | D ] C:\Pilotes-pciv92v4v4l 
[23/03/2010 - 10:53:24 | N | 316] C:\drmHeader.bin 
[27/03/2010 - 12:37:34 | D ] C:\Nouveau dossier 
[27/03/2010 - 12:38:14 | D ] C:\moi 
[06/05/2010 - 20:12:40 | D ] C:\DynamicPhotoManager_Vcredist 
[03/08/2004 - 23:00:08 | N | 263488] C:\cmldr 
[02/08/2010 - 09:52:14 | D ] C:\sys336 
[27/05/2010 - 09:29:10 | D ] C:\bdtmp 
[12/08/2010 - 13:09:58 | RASHD ] C:\autorun.inf 
[05/07/2010 - 09:30:56 | D ] C:\Qoobox 
[26/06/2010 - 08:27:04 | N | 261] C:\VundoFix.txt 
[27/05/2010 - 09:29:44 | RAD ] C:\info.exe 
[06/07/2010 - 17:05:40 | SHD ] C:\Recycled 
[27/05/2010 - 09:19:56 | N | 216] C:\Boot.bak 
[12/08/2010 - 12:38:30 | N | 3973] C:\FindyKill.txt 
[29/01/2011 - 10:42:50 | N | 1223] C:\UsbFix.txt 
[29/01/2011 - 09:37:14 | N | 7248] C:\Ad-Report-SCAN[1].txt 
[29/01/2011 - 09:46:18 | N | 7324] C:\Ad-Report-CLEAN[1].txt 
[13/06/2010 - 19:01:32 | D ] C:\UsbFix 
[29/01/2011 - 10:13:30 | N | 2626] C:\Ad-Report-CLEAN[2].txt 
[29/01/2011 - 10:19:04 | N | 2760] C:\ZHPExportRegistry-29-01-2011-10-19-02.txt 
[27/02/2009 - 20:15:32 | N | 5804032] C:\ffastun0.ffx 
[27/02/2009 - 20:15:32 | N | 954368] C:\ffastun.ffo 
[26/04/2006 - 20:13:52 | N | 1532416] C:
se77.tmp 
[27/02/2009 - 20:15:32 | N | 2695168] C:\ffastun.ffl 
[27/02/2009 - 20:15:32 | N | 4413] C:\ffastun.ffa 
[21/02/2010 - 21:07:38 | N | 921624] C:\img2-001.raw 
[05/03/2008 - 17:35:12 | D ] C:\fsaua.data 
[05/03/2008 - 19:03:32 | N | 2049] C:\cleannavi.txt 
[05/03/2008 - 19:12:48 | N | 2049] C:\cleannavi2.txt 
[26/04/2006 - 20:13:52 | N | 1532416] C:
sh78.tmp 
[26/04/2006 - 20:13:52 | N | 1532416] C:
sf79.tmp 
[26/04/2006 - 20:13:52 | N | 1532416] C:
sh7A.tmp 
[29/02/2004 - 17:44:34 | N | 52576] C:\orange.bmp 
[05/10/2005 - 00:47:48 | D ] C:\AcerBKTemp 
[19/05/2006 - 12:31:44 | N | 4747264] C:
sg7B.tmp 
[16/08/2009 - 20:27:36 | N | 9365] C:\NTFY_CD.LOG 
[11/10/2005 - 12:56:12 | D ] C:\Microapp 
[04/03/2006 - 20:39:28 | N | 1117184] C:
sy7C.tmp 
[04/03/2006 - 20:39:28 | N | 1117184] C:
su7D.tmp 
[04/03/2006 - 20:39:28 | N | 1117184] C:
sy7E.tmp 
[13/03/2008 - 16:59:12 | D ] C:\Downloads 
[28/02/2009 - 03:29:02 | N | 2203648] C:\ffastunT.ffl 
[26/11/2008 - 14:30:48 | D ] C:\AHCache 
[13/12/2009 - 19:49:46 | D ] C:\FindyKill 
[01/04/2007 - 15:46:28 | D ] C:\b0ff95a78a38ad7661 
[01/04/2007 - 18:21:18 | D ] C:\6cec3b800d3dc1d7fbb79aac9a 
[18/04/2007 - 19:13:20 | D ] C:\Config.Msi 
[28/05/2007 - 05:53:28 | D ] C:\Themes 
[15/10/2009 - 11:46:47 | DC ] D:\3eac07cfcbda4d2f4148b023cc5daf 
[16/08/2009 - 20:24:20 | DC ] D:\484149d9181b3c6b49 
[15/10/2009 - 11:46:48 | DC ] D:\896a38881a0961815725 
[13/06/2010 - 18:20:06 | DC ] D:\autorun 
[12/08/2010 - 12:09:57 | RASHDC ] D:\autorun.inf 
[02/06/2010 - 13:40:48 | DC ] D:\cartes 
[26/06/2010 - 06:44:08 | DC ] D:\Cours 
[27/05/2010 - 08:29:45 | RADC ] D:\info.exe 
[13/06/2010 - 13:39:29 | DC ] D:\Le Saint Coran (par Cheikh Saad El Ghamidi) 
[13/06/2010 - 14:12:14 | DC ] D:\M.A.O 
[10/01/2006 - 09:41:48 | C | 5614784] D:\Mobylette.mpg 
[21/07/2010 - 05:18:48 | DC ] D:\moi 
[29/01/2011 - 10:46:26 | SHD ] D:\RECYCLER 
[16/12/2010 - 20:38:15 | DC ] D:\Spécial mix 
[02/08/2010 - 08:57:54 | DC ] D:\Style police 
[21/12/2010 - 18:48:47 | SHD ] D:\System Volume Information 
[10/10/2010 - 15:53:52 | DC ] D:\Videos 
[08/09/2010 - 15:14:27 | C | 43629] D:\VirtualDJ Local Database v6.xml 
[13/10/2009 - 11:28:12 | D ] F:ap 
[27/05/2010 - 17:32:34 | D ] F:\Ben - Soul Wach - L'oncle Soul (2009) 
[18/05/2010 - 13:52:38 | N | 6186959] F:\02-dontcha-ghetto_street_feat_diams_et_sinik.mp3 
[07/05/2009 - 02:53:52 | N | 5761704] F:\Mellissa et Khaled - Benthi.mp3 
[27/05/2010 - 17:43:44 | D ] F:\Christophe.Mae-On.Trace.La.Route.2010 
[28/05/2010 - 21:09:18 | D ] F:\Corneille 
[28/05/2010 - 21:09:30 | D ] F:\Jermaine Dupri 
[28/05/2010 - 21:09:42 | D ] F:\Kery James 
[28/05/2010 - 21:10:14 | D ] F:\Soprano 
[28/05/2010 - 21:10:30 | D ] F:\compil incognito 
[28/05/2010 - 21:10:44 | D ] F:\Kool Shen 
[28/05/2010 - 21:11:26 | D ] F:\Artiste inconnu 
[28/05/2010 - 21:12:12 | D ] F:\Diam's 
[28/05/2010 - 21:13:52 | D ] F:\Dry-Les_Derniers_Seront_Les_Premiers-2009 
[23/06/2010 - 21:04:08 | D ] F:\Michael Jackson 
[09/07/2010 - 18:56:56 | D ] F:\Muzik mariage Toto 
[26/07/2010 - 18:48:54 | D ] F:\Psy 4 de la Rime 
[26/07/2010 - 18:53:08 | D ] F:\MUSE.The Resistance (2009) 
[26/07/2010 - 18:55:04 | D ] F:\ZAHO - DIMA -2008 
[26/07/2010 - 18:56:58 | D ] F:\VV Brown - Travelling Like the Light (2009) 
[26/07/2010 - 18:57:22 | D ] F:\Genesis 
[12/08/2010 - 13:10:00 | RASHD ] F:\autorun.inf 
[14/08/2010 - 08:57:42 | D ] F:\The Offspring - Greatest Hits 
[03/08/2010 - 19:07:38 | N | 3148904] F:\Bruce Springsteen - Streets of Philadelphia.mp3 
[03/08/2010 - 20:23:12 | N | 5377846] F:\Gun's And Roses - Guns N Roses] Knockin' On Heaven's Door.mp3 
[14/08/2010 - 08:58:06 | D ] F:\The Offspring - Americana 
[14/08/2010 - 09:18:00 | D ] F:\Joeystarr-Gare_Au_Jaguarr-CD-FR-2006-OBC-David91 
[03/08/2010 - 19:05:00 | N | 4102936] F:\Moos - Au Nom De La Rose.mp3 
[14/07/2010 - 10:38:02 | SHD ] G:\System Volume Information 
[14/07/2010 - 10:38:02 | D ] G:\Config 
[14/07/2010 - 10:38:28 | D ] G:\Films 
[14/07/2010 - 10:38:36 | D ] G:\Musiques 
[14/07/2010 - 11:27:58 | SHD ] G:\Recycled 
[17/07/2010 - 09:58:26 | D ] G:\Photos 
[12/08/2010 - 13:10:00 | RASHD ] G:\autorun.inf 

################## | Vaccin | 

C:\info.exe -> Dossier créé par VaccinUSB (Gof) 
C:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX) 
D:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX) 
D:\info.exe -> Dossier créé par VaccinUSB (Gof) 
F:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX) 
G:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX) 

################## | Upload | 

Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_GÉNÉRAL.zip 
http://www.teamxscript.org/Upload.php 
Merci de votre contribution. 

################## | E.O.F |

Excessimo · Answer

1- NOUS ALLONS METTRE A JOUR TON PC

Tout dabord désinstalles tout ce qui ne te sert pas, ça te fait de l'espace en plus

Il est important d'avoir les dernières mises à jour sur ton PC. En effet, celles ci corrigent des failles de sécurité qui peuvent parfois être exploitées par un programme malveillant.

1ère étape : Java

> Télécharge JavaRa puis décompresse le sur ton bureau.
> Ouvre le dossier JavaRa puis exécute JavaRa.exe.
> Clique sur "Search For Updates".
> Sélectionne "Update Using jucheck.exe" puis clique sur "Search".
> Autorise le processus à se connecter s'il te le demande, clique sur "install" et suis la procédure d'installation.
> Une fois l'installation terminée, revient à l'écran de JavaRa et clique sur "Remove Older Versions".
> Clique sur " Oui " pour confirmer. Laisse l'outil travailler, puis clique sur " Ok " et une nouvelle fois sur " Ok ".
> Un rapport s'ouvrira, copie/colle son contenu dans ton prochain message.

/!\ Si la méthode "Update Using jucheck.exe" ne fonctionne pas, télécharge la dernière version de java à cette adresse puis passe directement à la partie " Remove Older Versions " /!\

2ème étape : Adobe Reader

> Si tu utilises adobe reader, il est important qu'il soit à jour.
> Si il n'est pas à jour, certains programmes malveillants peuvent exploiter différentes failles et infecter ton PC
> Pour vérifier qu'adobe reader est à jour, lance le puis clique sur [Aide] -> [Rechercher les mises à jour]

3ème étape : Mise à jour des logiciels

> Il est également primordial de garder tes logiciels à jour. Pour ce faire, il existe un petit utilitaire, Update Checker.
> Télécharge le Ici
> Un tutoriel pour son utilisation est disponible Ici.


2- Vacciner les supports amovibles

> Si nous n'avons pas utilisé USBfix lors de la procédure, tu peux vacciner tes supports amovibles pour éviter qu'ils ne s'infectent.
> Télécharge USBfix puis lance le. (Clique droit/Exéuter en tant qu'administrateur pour Vista/7).
> Branche tout tes médias amovibles ( Clé USB, Disque dur externe, carte SD ) puis sélectionne l'option [Vacciner].
> Appuie sur [Ok] au message de confirmation.
> Une fois la vaccination terminée, relance usbfix et choisis l'option désinstaller.

Note : Si ton anvirus émet une alerte, désactive le momentanément ( il s'agit d'un faux positif )


3- DelFix

> Télécharge DelFix sur ton bureau.
> Lance le.
> Clique sur Supression puis valide en appuyant sur [Entrée].
> Patiente pendant le scan jusqu'à l'ouverture du rapport.
> Copie/Colle le contenu du rapport dans ta prochaine réponse.

Note : Le rapport se trouve également sous C:\DelFixSearch


4- Optimisation

1ère étape : Suppression des fichiers inutiles

> Télécharge CCleaner
> Installe le, puis lance le.
> Va dans l'onglet "Options" puis " Avancé " et décoche " Effacer uniquement les fichiers[...] ".
> Cliques sur l'onglet " Nettoyeur " puis cliques sur [Analyser] . A la fin de l'analyse, clique sur [Nettoyer].
> Rends toi à l'onglet " Registre " puis cliques sur [Chercher les erreurs]. Cliques ensuite sur [Corriger les erreurs séléctionnées].
> Accepte la sauvegarde puis enregistre la dans tes documents ( tu pourras la supprimer si aucun problème n'apparaît après 

la suppression )
> Cliques ensuite sur [Corriger toutes les erreurs sélectionnées] puis sur [Fermer]
> Tu peux renouveller ces opérations tous les jours.

2ème étape : Défragmentation

Au fur et à mesure que tu installes des logiciels, copies des fichiers etc.. le disque dur se fragmente et les accès en lecture/écriture sont plus longs.

> Ouvre l'explorateur, puis fais un clique droit sur ta partition principale ( généralement C:\ )
> Clique sur [Propriété] puis sur l'onglet [Outils]
> Clique sur [Defragmenter maintenant] puis sélectionne le disque dur à défragmenter (le C:\ en temps normal).

3ème étape : Vérification des disques

> Ouvre l'explorateur, puis fais un clique droit sur ta partition principale ( généralement C:\ )
> Clique sur [Propriété] puis sur l'onglet [Outils]
> Clique sur [Vérifier maintenant] puis coche les deux cases présentes.
> Clique sur [Démarrer] ( Tu devras éventuellement redémarrer ton PC et le scan du disque s'effectuera au prochain démarrage )

4ème étape : Désactivation des programmes au démarrage

> Lance CCleaner
> Va dans [Outils] puis [Démarrage]
> Désactives les lignes que tu jugent inutiles
> Veilles à ne pas désactiver la/les lignes correspondantes à ton antivirus

4- Purge de la restauration système


La restauration système est un endroit que windows utilise pour créer des sauvegardes. En cas de soucis, tu peux utiliser ces sauvegardes pour revenir à un état antérieur au problème.

> Après une désinfection, il faut purger la restauration système pour supprimer toutes traces de malwares y résidant.

> Tutoriels :

- Windows XP
- Windows Vista
- Windows 7

N'oublies pas de réactiver la restauration système.


5- UAC ( Uniquement pour Vista/Seven )

Si tu as désactivé l'UAC, il est important de la réactiver.

-> Pourquoi garder l'UAC activée?


6- Secunia PSI

Afin de vérifier si toutes les mise à jour ont bien été installées , nous allons utiliser un petit programme.

->met à jour les autres avec secunia téléchargeable ici.
->TUTO, voir section Secunia Personal Software Inspector (Secunia PSI)

7- Liens utiles

Ces liens sont en rapport direct avec la sécurité de ton PC.
Prends le temps de les lire pour comprendre pourquoi tu as été infecté.

- Les dangers du P2P
- La sécurité de son PC, c'est quoi?
- Sécuriser son ordinateur
- Pourquoi maintenir son navigateur à jour?
- Les toolbars c'est pas obligatoire

Bon surf et @+++ ;) 
(je te conseille de garder Malwarebyte's et de passer des scans complet de temps en temps, ne pas oublier de le mettre à jour avant un scan ;)
Et n'oublies pas de passer ton sujet en RESOLU.

[FIN]

manolo · Answer

COOL MERCI ENCORE VOUS ETES TROP FORT!!!!!!!!!!!!!!!!!!

manolo · Answer

Voilà mon rapport JAVA

JavaRa 1.15 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Sat Jan 29 11:32:47 2011

Found and removed: C:\Program Files\Java\jre1.6.0_07

Found and removed: C:\Documents and Settings\Milka\Application Data\Sun\Java\jre1.6.0_11

Found and removed: C:\Documents and Settings\Milka\Application Data\Sun\Java\jre1.6.0_12

Found and removed: C:\Documents and Settings\Milka\Application Data\Sun\Java\jre1.6.0_13

Found and removed: C:\Documents and Settings\Milka\Application Data\Sun\Java\jre1.6.0_15

Found and removed: C:\Documents and Settings\Milka\Application Data\Sun\Java\jre1.6.0_17

Found and removed: C:\Documents and Settings\Milka\Application Data\Sun\Java\jre1.6.0_20

Found and removed: C:\Documents and Settings\Milka\Application Data\Sun\Java\jre1.6.0_22

Found and removed: Software\JavaSoft\Java2D\1.5.0

Found and removed: SOFTWARE\Classes\JavaWebStart.isInstalled.1.5.0.0

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2

Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01

Found and removed: Software\JavaSoft\Java2D\1.6.0_02

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}

Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}

Found and removed: SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500}

JavaRa 1.16 Removal Log.

Report follows after line.

------------------------------------

The JavaRa removal process was started on Sat Jan 29 11:38:26 2011

Found and removed: Applications\java.exe

Found and removed: Applications\javaw.exe

Found and removed: JavaPlugin.FamilyVersionSupport

Found and removed: CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}

Found and removed: CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}

Found and removed: JavaScript

Found and removed: JavaScript Author

Found and removed: JavaScript1.1

Found and removed: JavaScript1.1 Author

Found and removed: JavaScript1.2

Found and removed: JavaScript1.2 Author

Found and removed: Software\Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}

Found and removed: Software\JavaSoft\Java Update

Found and removed: SOFTWARE\Classes\JavaPlugin

Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_15

Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders\C:\Program Files\Java\jre1.6.0_07\

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3412062B02

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3412062B03

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3612062B02

Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0357E4991DA5FF14F9615B3612062B03

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.1.3

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.2

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.2.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.3

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.3.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.4

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.4.1

Found and removed: SOFTWARE\MozillaPlugins\@java.com/JavaPlugin\MimeTypes\application/x-java-applet;version=1.5

------------------------------------

Finished reporting.

wafifo · Answer

Bonjour ,
voila j'ai fais un nettoyage avec AD REMOVER et j'aimerais bien que quel qu'un m'aide pour le rapport ;
Merci .

======= RAPPORT D'AD-REMOVER 2.0.0.2,F | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 01/03/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 11:26:11 le 08/03/2011, Mode normal

Microsoft Windows XP Professionnel Service Pack 3 (X86) 
Administrateur@SWEET-00D4E2F2C ( ) 
 
============== ACTION(S) ==============


Dossier supprimé: C:\Program Files\Trymedia

(!) -- Fichiers temporaires supprimés.


Clé supprimée: HKLM\Software\Trymedia Systems


============== SCAN ADDITIONNEL ==============

**** Google Chrome Version [9.0.597.107] ****


-- C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\User Data\Default --
Preferences - default_search_provider: "Google" (Activé: true) (?)
Preferences - homepage: hxxp://www.google.com
Preferences - homepage_is_newtabpage: true
Plugin - "Silverlight 3" (Activé: true)

========================================

**** Internet Explorer Version [7.0.5730.13] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)
BHO\{CC59E0F9-7E43-44FA-9FAA-8377850BF205} - "FDMIECookiesBHO Class" (C:\Program Files\Free Download Manager\iefdm2.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 4 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 13 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 08/03/2011 11:26:22 (1099 Octet(s)) 

Fin à: 11:27:20, 08/03/2011 
 
============== E.O.F ==============

Rapport ZHPDiag

14 réponses

Discussions similaires

Newsletters