Sujet Précédent Sujet Suivant

Internet Explorer s'ouvre tout seul

Mayh3m Messages postés 5 Statut Membre -  
 Utilisateur anonyme -
Bonjour,

Je commence a vraiment m'énerver sur Internet Explorer (que je n'utilise JAMAIS, favorisant Google Chrome).
Mais voila, depuis quelques temps, Internet Explorer s'ouvre seul pour m'assaillir de pub (Meetic, Trombinoscope, et autres...). Il y a trois semaines, je n'avais pas ce problème mais la ca en devient super chiant car ca me le fait toute les dix minutes!
J'ai téléchargé Ad Remover pour WIndows XP et j'ai cliquer sur Nettoyer et ci-dessous vous trouverez le rapport complet.
J'espère que vous allez pouvoir m'aider.
Merci beaucoup!
Bonne journée/Soirée

PS: J'ai changee mon nom dans ce rapport par la mention "Mayhem"

======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 =======

Updated by TeamXscript on 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
website: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Launched at 03:37:41 on 09/08/2011, Normal boot

Microsoft Windows XP Home Edition Service Pack 3 (X86)
Mayhem@MAYHEM ( )

============== SEARCH ==============

File found: C:\WINDOWS\system32\ConduitEngine.tmp
File found: C:\Documents and Settings\Mayhem\Application Data\Mozilla\FireFox\Profiles\x5ycrl86.default\prefs.js.ask.bak
File found: C:\Documents and Settings\Mayhem\Application Data\Mozilla\FireFox\Profiles\x5ycrl86.default\searchplugins\ask.uk.xml
Folder found: C:\Documents and Settings\Mayhem\Application Data\Mozilla\FireFox\Profiles\x5ycrl86.default\conduit
Folder found: C:\Documents and Settings\Mayhem\Application Data\Mozilla\FireFox\Profiles\x5ycrl86.default\ConduitEngine
Folder found: C:\Documents and Settings\Mayhem\Application Data\Mozilla\FireFox\Profiles\x5ycrl86.default\extensions\engine@conduit.com
File found: C:\Documents and Settings\Mayhem\Application Data\Mozilla\FireFox\Profiles\x5ycrl86.default\searchplugins\conduit.xml
Folder found: C:\Documents and Settings\Mayhem\Application Data\Agence-Exclusive
Folder found: C:\Documents and Settings\Mayhem\Local Settings\Application Data\Agence-Exclusive
Folder found: C:\Program Files\Agence-Exclusive
Folder found: C:\Documents and Settings\Mayhem\Local Settings\Application Data\Conduit
Folder found: C:\Program Files\Conduit
Folder found: C:\Documents and Settings\Mayhem\Local Settings\Application Data\ConduitEngine
Folder found: C:\Program Files\ConduitEngine
Folder found: C:\Documents and Settings\Mayhem\Application Data\PriceGong
Folder found: C:\Documents and Settings\Mayhem\Application Data\EoRezo
Folder found: C:\Documents and Settings\Mayhem\Local Settings\Application Data\EoRezo
Folder found: C:\Program Files\EoRezo
Folder found: C:\Documents and Settings\All Users\Start Menu\Programs\PCTuto
Folder found: C:\Program Files\PCTuto

-- File opened: C:\Documents and Settings\Mayhem\Application Data\Mozilla\FireFox\Profiles\x5ycrl86.default\Prefs.js --
Line found: user_pref("CT2542115.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT254...
Line found: user_pref("CT2905330.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT290...
Line found: user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT2905330");
Line found: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1297255/1292926/FR", "\"0\"...
Line found: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/AU", "\"0\"")...
Line found: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/935078/930862/AU", "\"0\"")...
Line found: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/935078/930862/TH", "\"0\"")...
Line found: user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2542115", ...
Line found: user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2905330", ...
Line found: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo...
Line found: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc...
Line found: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo...
Line found: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local...
Line found: user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63447123010783...
Line found: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63...
Line found: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=1/11/20...
Line found: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20...
Line found: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2542115/CT2542115...
Line found: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2905330/CT2905330...
Line found: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Funky/minimize.gif...
Line found: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Funky/play.gif", "...
Line found: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Funky/stop.gif", "...
Line found: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Funky/stopped.GIF"...
Line found: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Funky/vol.gif", "\...
Line found: user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=fr-fr", "\"...
Line found: user_pref("CommunityToolbar.EngineOwner", "CT2542115");
Line found: user_pref("CommunityToolbar.EngineOwnerGuid", "{4daac69c-cba7-45e2-9bc8-1044483d3352}");
Line found: user_pref("CommunityToolbar.EngineOwnerToolbarId", "softonic_france");
Line found: user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Line found: user_pref("CommunityToolbar.OriginalEngineOwner", "CT2542115");
Line found: user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{4daac69c-cba7-45e2-9bc8-1044483d3352}");
Line found: user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "softonic_france");
Line found: user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr...
Line found: user_pref("CommunityToolbar.ToolbarsList", "ConduitEngine,CT2542115,CT2905330");
Line found: user_pref("CommunityToolbar.ToolbarsList2", "CT2542115,CT2905330");
Line found: user_pref("CommunityToolbar.alert.alertInfoInterval", 60);
Line found: user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Thu Aug 04 2011 18:56:41 GMT+1000");
Line found: user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Line found: user_pref("CommunityToolbar.alert.locale", "en");
Line found: user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Line found: user_pref("CommunityToolbar.alert.loginLastCheckTime", "Thu Aug 04 2011 18:56:40 GMT+1000");
Line found: user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Line found: user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Line found: user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Line found: user_pref("CommunityToolbar.alert.showTrayIcon", false);
Line found: user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Line found: user_pref("CommunityToolbar.alert.userId", "3e1f3627-515b-4f31-b775-0bd66518020d");
Line found: user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2905330");
Line found: user_pref("ConduitEngine.FirstServerDate", "02/03/2011 22");
Line found: user_pref("ConduitEngine.FirstTime", true);
Line found: user_pref("ConduitEngine.FirstTimeFF3", true);
Line found: user_pref("ConduitEngine.HasUserGlobalKeys", true);
Line found: user_pref("ConduitEngine.Initialize", true);
Line found: user_pref("ConduitEngine.InitializeCommonPrefs", true);
Line found: user_pref("ConduitEngine.InstalledDate", "Fri Feb 04 2011 05:31:10 GMT+1000");
Line found: user_pref("ConduitEngine.IsMulticommunity", false);
Line found: user_pref("ConduitEngine.IsOpenThankYouPage", false);
Line found: user_pref("ConduitEngine.IsOpenUninstallPage", true);
Line found: user_pref("ConduitEngine.LanguagePackLastCheckTime", "Wed Jul 20 2011 03:47:52 GMT+1000");
Line found: user_pref("ConduitEngine.LastLogin_3.2.5.2", "Wed Jul 20 2011 03:47:53 GMT+1000");
Line found: user_pref("ConduitEngine.PublisherContainerWidth", 0);
Line found: user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Line found: user_pref("ConduitEngine.SettingsLastCheckTime", "Wed Jul 20 2011 03:47:52 GMT+1000");
Line found: user_pref("ConduitEngine.UserID", "UN60535612432068815");
Line found: user_pref("ConduitEngine.engineLocale", "fr");
Line found: user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Wed Jul 20 2011 03:47:53 GMT+1000");
Line found: user_pref("ConduitEngine.initDone", true);
Line found: user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2905330&Sea...
Line found: user_pref("browser.startup.homepage", "hxxp://y.lo.st");
-- File closed --

Key found: HKLM\Software\Classes\CLSID\{293A63F7-C3B6-423a-9845-901AC0A7EE6E}
Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{293A63F7-C3B6-423a-9845-901AC0A7EE6E}
Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{293A63F7-C3B6-423a-9845-901AC0A7EE6E}
Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{293A63F7-C3B6-423a-9845-901AC0A7EE6E}
Key found: HKLM\Software\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key found: HKLM\Software\Classes\CLSID\{3E7510F5-DE20-4DB6-B378-7CE10790EAAB}
Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E7510F5-DE20-4DB6-B378-7CE10790EAAB}
Key found: HKLM\Software\Classes\CLSID\{601ac3dc-786a-4eb0-bf40-ee3521e70bfb}
Key found: HKLM\Software\Classes\CLSID\{72b3882f-453a-4633-aac9-8c3dced62aff}
Key found: HKLM\Software\Classes\CLSID\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
Key found: HKLM\Software\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key found: HKLM\Software\Classes\Interface\{DF76E9B7-35EC-46FC-AF56-5B79DED9D64F}
Key found: HKLM\Software\Classes\TypeLib\{0BF73E27-2734-4F7B-925A-4BBB1457F5FA}
Key found: HKLM\Software\Classes\TypeLib\{18AF7201-4F14-4BCF-93FE-45617CF259FF}
Key found: HKLM\Software\Classes\Conduit.Engine
Key found: HKLM\Software\Classes\EoEngineBHO.EOBHO
Key found: HKLM\Software\Classes\EoEngineBHO.EOBHO.1
Key found: HKLM\Software\Classes\Toolbar.CT2542115
Key found: HKLM\Software\Classes\Toolbar.CT2905330
Key found: HKLM\Software\Classes\AppID\EoEngineBHO.DLL
Key found: HKLM\Software\Classes\AppID\{AFBB7970-789A-4264-BA70-E8127DECE400}
Key found: HKLM\Software\Conduit
Key found: HKLM\Software\conduitEngine
Key found: HKLM\Software\EoRezo
Key found: HKCU\Software\Conduit
Key found: HKCU\Software\conduitEngine
Key found: HKCU\Software\EoRezo
Key found: HKCU\Software\PriceGong
Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\PCTuto
Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2421A373-D96F-3CDC-008A-868F6F7EB9AA}
Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key found: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3F4C76C7-FA26-464D-9277-A33248A64C34}
Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\EoRezo_is1

Value found: HKLM\Software\Mozilla\Firefox\Extensions|AgenceChromeBHO@eorezo.com
Value found: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|PCTuto
Value found: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Eorezo
Value found: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Softwarehelper
Value found: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{30F9B915-B755-4826-820B-08FBA6BD249D}
Value found: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{30F9B915-B755-4826-820B-08FBA6BD249D}

============== ADDITIONNAL SCAN ==============

**** Mozilla Firefox Version [3.6.18 (fr)] ****

HKLM_MozillaPlugins\Adobe Reader (x)
Extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} (Skype extension )
HKLM_Extensions|AgenceChromeBHO@eorezo.com - C:\Program Files\EoRezo

-- C:\Documents and Settings\Mayhem\Application Data\Mozilla\FireFox\Profiles\x5ycrl86.default --
Extensions\engine@conduit.com (Conduit Engine )
Extensions\{3d4d238c-9c48-47cd-a95c-53259acf9e56} (Messenger Plus FR Community Toolbar)
Extensions\{4daac69c-cba7-45e2-9bc8-1044483d3352} (Softonic_France Community Toolbar)
Searchplugins\ask.uk.xml (?)
Searchplugins\conduit.xml (hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2905330&SearchSource=3&q={searchTerms} /)
Prefs.js - browser.search.defaulturl, hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2905330&SearchSource=3&q={searchTerms}
Prefs.js - browser.search.selectedEngine, Messenger Plus FR Customized Web Search
Prefs.js - browser.startup.homepage, hxxp://y.lo.st
Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.18

========================================

**** Google Chrome Version [13.0.782.107] ****

Extension\lifbcibllhkdhoafpjfnlhfpfgnpldfl (C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx) (?)

-- C:\Documents and Settings\Mayhem\Local Settings\Application Data\Google\Chrome\User Data\Default --
Preferences - default_search_provider: "Google" (Enabled: true) (?)
Preferences - homepage: hxxp://www.google.com
Preferences - homepage_is_newtabpage: true

========================================

**** Internet Explorer Version [8.0.6001.18702] ****

HKCU_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Start Page - hxxp://y.lo.st
HKCU_Main|Start Page Restore - hxxp://www.google.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157
HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=69157
AboutUrls|Tabs - hxxp://y.lo.st
HKCU_URLSearchHooks|{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files\Softonic_France\prxtbSof0.dll)
HKCU_URLSearchHooks|{3d4d238c-9c48-47cd-a95c-53259acf9e56} - "Messenger Plus FR Toolbar" (C:\Program Files\Messenger_Plus_FR\prxtbMess.dll)
HKCU_SearchScopes\{2421A373-D96F-3CDC-008A-868F6F7EB9AA} - "Ask" (hxxp://bksl.asksearch.com/s/?q={searchTerms}&iesrc={referrer:source?}&cfg=2-453-...)
HKCU_SearchScopes\{453738BB-A806-4C8C-ADE4-49240242C102} - "Amazon" (hxxp://amazon.fr/s/ref=nb_ss_w/171-2062367-8750663?__mk_fr_FR=%C5M%C5Z%D5%D1&url...)
HKCU_SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} - "Messenger Plus FR Customized Web Search" (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...)
HKCU_SearchScopes\{B6B1AFCE-324E-491E-91C8-8E8DE5F2B2B4} - "Lycos" (hxxp://vachercher.lycos.fr/cgi-bin/pursuit?query={searchTerms}&tld=com&family=of...)
HKCU_SearchScopes\{DEF76E7C-DDD8-4A29-9EAD-3E12CACD89D3} - "Wikipedia" (hxxp://fr.wikipedia.org/wiki/Special:Search?search={searchTerms})
HKCU_SearchScopes\{F6F48753-5F36-46B5-8C01-42769AAA1746} - "eBay" (hxxp://search.ebay.fr/search/search.dll?cgiurl=hxxp%3A%2F%2Fcgi.ebay.fr%2Fws%2F&...)
HKCU_Toolbar\WebBrowser|{4DAAC69C-CBA7-45E2-9BC8-1044483D3352} (C:\Program Files\Softonic_France\prxtbSof0.dll)
HKCU_Toolbar\WebBrowser|{30F9B915-B755-4826-820B-08FBA6BD249D} (C:\Program Files\ConduitEngine\prxConduitEngine.dll)
HKCU_Toolbar\WebBrowser|{3D4D238C-9C48-47CD-A95C-53259ACF9E56} (C:\Program Files\Messenger_Plus_FR\prxtbMess.dll)
HKLM_Toolbar|{4daac69c-cba7-45e2-9bc8-1044483d3352} (C:\Program Files\Softonic_France\prxtbSof0.dll)
HKLM_Toolbar|{30F9B915-B755-4826-820B-08FBA6BD249D} (C:\Program Files\ConduitEngine\prxConduitEngine.dll)
HKLM_Toolbar|{3d4d238c-9c48-47cd-a95c-53259acf9e56} (C:\Program Files\Messenger_Plus_FR\prxtbMess.dll)
HKLM_ElevationPolicy\{3A409434-3FD9-4A23-80FC-5C555D339267} - C:\Documents and Settings\Mayhem\Local Settings\Application Data\Conduit\CT2542115\Softonic_FranceAutoUpdaterHelper.exe (?)
HKLM_ElevationPolicy\{3F4C76C7-FA26-464D-9277-A33248A64C34} - C:\Program Files\ConduitEngine\ConduitEngineHelper.exe (?)
HKLM_ElevationPolicy\{569591D2-F221-4115-9A89-762956BEB3C0} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe (?)
HKLM_ElevationPolicy\{C07F6D39-017E-471D-80CA-FF866A9723AF} - C:\Program Files\Messenger_Plus_FR\Messenger_Plus_FRToolbarHelper1.exe (?)
HKLM_ElevationPolicy\{F2663AD9-DB7C-47CC-8A36-09EA763DB26A} - C:\Documents and Settings\Mayhem\Local Settings\Application Data\Conduit\CT2905330\Messenger_Plus_FRAutoUpdateHelper.exe (?)
HKLM_Extensions\{CCA281CA-C863-46ef-9331-5C8D4460577F} - "@btrez.dll,-4015" (C:\Program Files\WIDCOMM\Bluetooth Software\bt_cold_icon.ico)
HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?)
BHO\{293A63F7-C3B6-423a-9845-901AC0A7EE6E} - "PCTBHO Class" (C:\Program Files\Agence-Exclusive\pctutoBHO.dll)
BHO\{30F9B915-B755-4826-820B-08FBA6BD249D} - "Conduit Engine " (C:\Program Files\ConduitEngine\prxConduitEngine.dll)
BHO\{3d4d238c-9c48-47cd-a95c-53259acf9e56} - "Messenger Plus FR Toolbar" (C:\Program Files\Messenger_Plus_FR\prxtbMess.dll)
BHO\{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files\Softonic_France\prxtbSof0.dll)
BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)
BHO\{9030D464-4C02-4ABF-8ECC-5164760863C6} - "Windows Live Sign-in Helper" (C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll)
BHO\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - "Skype Browser Helper" (C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll)
BHO\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8} - "EOBHO Class" (C:\Program Files\EoRezo\EoRezoBHO.dll)
BHO\{CC59E0F9-7E43-44FA-9FAA-8377850BF205} - "FDMIECookiesBHO Class" (C:\Program Files\Free Download Manager\iefdm2.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 0 File(s)
C:\Program Files\Ad-Remover\Backup: 0 File(s)

C:\Ad-Report-SCAN[1].txt - 09/08/2011 03:37:53 (17330 Byte(s))

End at: 03:39:52, 09/08/2011

============== E.O.F ==============
A voir également:

5 réponses

Réponse 1 / 5
Utilisateur anonyme
 
Bobjour

Relances Ad remover mais avec l'option suppression.Post le rapport

===============================================================

On va faire une analyse de ton systéme.

* Télécharge ZHPDiag ( de Nicolas coolman ).
ou
ZHPDiag
ou
https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

Ou le lien FTP en secours :
ftp://zebulon.fr/ZHPDiag2.exe

***********************
/!\Utilisateurs de Vista et Windows 7 : Clique droit sur le logo de ZHPDiag.exe, " exécuter en tant qu'Administrateur /!\
* Laisse toi guider lors de l'installation
* Il se lancera automatiquement à la fin de l'installation
* Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
* Héberge le rapport ZHPDiag.txt sur le site pjjoint.malekal.com ou cijoint.fr ou toofiles puis copie/colle le lien fournit dans ta prochaine réponse sur le forum
0
Réponse 2 / 5
Mayh3m Messages postés 5 Statut Membre
 
Coucou! Enfin Re!

Merci pour ton aide!

Voila le lien du rapport http://ww38.toofiles.com/fr/oip/documents/txt/zhpdiagg.html

Biz!

PS: Je n'ai pas pu relancer Ad Remover, je n'ai pas trouvé l'option suppression
0
Utilisateur anonyme
 
Tu dois cliquer sur nettoyer ;)
0
Mayh3m Messages postés 5 Statut Membre
 
Et je refais un Scan avec ZHP Diag?
0
Réponse 3 / 5
Mayh3m Messages postés 5 Statut Membre
 
Voila!

J'ai nettoyer avec Add Remover et j'ai refait avec ZHP Diag. Voila le NOUVEAU fichier APRES le nettoyage avec Add Remover.

Je fais quoi ensuite?

http://www.cijoint.fr/cjlink.php?file=cj201108/cijOyk1GGR.txt
0
Réponse 4 / 5
Utilisateur anonyme
 
1/ Copie/colle les lignes suivantes et place les dans ZHPFix :
2/Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag)
3/Clique sur l''icone représentant la lettre H (« coller les lignes Helper »)

----------------------------------------------------------
[MD5.4635935FC972C582632BF45C26BFCB0E] - (...) -- C:\WINDOWS\system32\srvany.exe [8192]
[MD5.82865FF17BC664C711EFA674759F9991] - (...) -- C:\WINDOWS\KMService.exe [77824]
O4 - HKLM\..\Run: [autoupdater] C:\Documents and Settings\Mayhem\Application Data\Agence-Exclusive\Agence-Exclusive\autoupdater.exe (.not file.)
O4 - HKLM\..\Run: [SoftwareHelper] C:\Documents and Settings\Mayhem\Application Data\EoRezo\EoRezo\SoftwareUpdateHP.exe (.not file.)
O23 - Service: KMService (KMService) . (...) - C:\WINDOWS\system32\srvany.exe
O42 - Logiciel: PcTuto 1.1 - (.Agence-Exclusive.) [HKLM] -- PcTuto_is1
O42 - Logiciel: Tuto The Gimp1.0.0.0 - (.pctuto.) [HKLM] -- Tuto The Gimp_is1
[HKCU\Software\Agence-Exclusive]
[HKCU\Software\EoRezo]
[HKLM\Software\Agence-Exclusive]
[HKLM\Software\Classes\PCTutoBHO.PCTBHO]
[HKLM\Software\Classes\PCTutoBHO.PCTBHO.1]
[HKLM\Software\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}]
[HKLM\Software\Classes\Interface\{E2ED56B6-35FC-4484-9530-EC87FB458E78}]
[HKCU\Software\eorezo]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\PcTuto_is1]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Run]:autoupdater
[HKLM\Software\Microsoft\Windows\CurrentVersion\Run]:Softwarehelper
SR - | Auto 09/08/2011 8192 | (KMService) . (...) - C:\WINDOWS\system32\srvany.exe
R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) (6.3.2.0) -- C:\Program Files\Softonic_France\prxtbSof0.dll
R3 - URLSearchHook: Messenger Plus FR Toolbar - {3d4d238c-9c48-47cd-a95c-53259acf9e56} . (.Conduit Ltd. - Conduit Toolbar.) (6.3.2.0) -- C:\Program Files\Messenger_Plus_FR\prxtbMess.dll
O2 - BHO: Messenger Plus FR - {3d4d238c-9c48-47cd-a95c-53259acf9e56} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Messenger_Plus_FR\prxtbMess.dll
O2 - BHO: Softonic_France - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\prxtbSof0.dll
O3 - Toolbar: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\prxtbSof0.dll
O3 - Toolbar: Messenger Plus FR Toolbar - {3d4d238c-9c48-47cd-a95c-53259acf9e56} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Messenger_Plus_FR\prxtbMess.dll
O42 - Logiciel: Messenger Plus FR Toolbar - (.Messenger Plus FR.) [HKLM] -- Messenger_Plus_FR Toolbar
O42 - Logiciel: Softonic_France Toolbar - (.Softonic_France.) [HKLM] -- Softonic_France Toolbar
[HKCU\Software\Messenger_Plus_FR]
[HKCU\Software\Softonic_France]
[HKLM\Software\Messenger_Plus_FR]
[HKLM\Software\Softonic_France]
O43 - CFD: 01/05/2011 - 01:47:14 - [8809768] ----D- C:\Program Files\Messenger_Plus_FR
O43 - CFD: 31/05/2011 - 03:48:56 - [11968380] ----D- C:\Program Files\Softonic_France
O43 - CFD: 08/08/2011 - 03:08:36 - [12889937] ----D- C:\Documents and Settings\Mayhem\Local Settings\Application Data\Messenger_Plus_FR
O43 - CFD: 07/08/2011 - 11:56:02 - [7587081] ----D- C:\Documents and Settings\Mayhem\Local Settings\Application Data\Softonic_France
[HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3d4d238c-9c48-47cd-a95c-53259acf9e56}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3d4d238c-9c48-47cd-a95c-53259acf9e56}]
[HKLM\Software\Classes\CLSID\{3d4d238c-9c48-47cd-a95c-53259acf9e56}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3d4d238c-9c48-47cd-a95c-53259acf9e56}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
[HKLM\Software\Classes\CLSID\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
[HKCU\Software\Messenger_Plus_FR]
[HKLM\Software\Messenger_Plus_FR]
[HKCU\Software\Softonic_France]
[HKLM\Software\Softonic_France]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Toolbar]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Messenger_Plus_FR Toolbar]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Softonic_France Toolbar]
C:\Program Files\Softonic_France
C:\Documents and Settings\Mayhem\Local Settings\Application Data\Softonic_France
O69 - SBI: SearchScopes [HKCU] {B6B1AFCE-324E-491E-91C8-8E8DE5F2B2B4} - (Lycos) - http://www.lycos.fr
EmptyTemp
FirewallRaz
--------------------------------------------------------

- Clique sur le bouton « GO » pour lancer le nettoyage,
- Copie/colle la totalité du rapport dans ta prochaine réponse
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 5
Mayh3m Messages postés 5 Statut Membre
 
Mais cela sert a quoi de faire tout cela?
0
Utilisateur anonyme
 
Cela sert a supprimer les infections qui sont sur ton pc.===>PcTuto ..EoRezo et Cie

En apparence ton ordi se comporte beaucoup mieux mais les adwares présent dans ton pc te pompes des informations et t'envoie des pubs.
0

Discussions similaires

App explorer Sa sert a quoi ?
Mada_alpha -
SATS_fr -

1 réponse
Xiaomi Redmi Note 11 : volume augment tout seul
Wasa -
oblixx -

3 réponses