Problème svchost.exe et rapport ZHPDiag Résolu/Fermé

Question

Bonjour à tous, 

j'ai besoin d'aide.

Malwarebytes rien trouvé, par contre voici le rapport de ZHPDiag : 

http://www.cijoint.fr/cjlink.php?file=cj201108/cijLqSkqA3.txt 

Merci beaucoup pour votre aide.

jlpjlp · Answer

slt 

colle un rapport de suppression avec adwcleaner
http://general-changelog-team.fr/telechargements/logiciels/viewdownload/75-outils-de-xplode/28-adwcleaner


puis

 colle un rapport de suppression avec ad remover 




puis remets un rapport zhpdiag et explique tes problèmes

jlpjlp · Answer

désactive le tea timer de spybot ou désinstalle le 

pour ad remover il fallait faire l'option de suppression et non de recherche ... 

puis comme tu as malwarebyte colle un analyse rapide avec

et ensuite remettre un rapport zhpdiag

jlpjlp · Answer

Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag en cliquant sur l'écusson vert) 
Copie/colle les lignes en gras suivantes : 

----------------------------------------------------------  
 

O87 - FAEL: "{880520A7-CEF6-4D6D-913B-613664B085EF}" | In - Domain - P6 - TRUE | .(.MusicLab, LLC - BearShare.) -- C:\Program Files\BearShare Applications\BearShare\BearShare.exe 
O87 - FAEL: "{5F5E4B94-A134-4624-9689-99E3237FFA0A}" | In - Domain - P17 - TRUE | .(.MusicLab, LLC - BearShare.) -- C:\Program Files\BearShare Applications\BearShare\BearShare.exe 
O87 - FAEL: "{15B5092B-F73F-44B5-9D09-D203C526AD58}" | In - Private - P6 - TRUE | .(.MusicLab, LLC - BearShare.) -- C:\Program Files\BearShare Applications\BearShare\BearShare.exe 
O87 - FAEL: "{3B0F91C7-3A39-46FA-A8A2-9C60BAB483A1}" | In - Private - P17 - TRUE | .(.MusicLab, LLC - BearShare.) -- C:\Program Files\BearShare Applications\BearShare\BearShare.exe 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\ForceRenive]    
[HKLM\Software\Classes\AppID\BearShare.exe]    
[HKLM\Software\Classes\AppID\DiscoveryHelper.DLL]    
[HKLM\Software\Classes\AppID\GIFAnimator.DLL]    
[HKLM\Software\Classes\AppID\IMTrProgress.DLL]   
[HKLM\Software\Classes\AppID\IMWeb.DLL]    
[HKLM\Software\Classes\AppID\WMHelper.DLL]    
[HKLM\Software\Classes\imweb.imwebcontrol]    
[HKLM\Software\Classes\AppID\{1fc41815-fa4c-4f8b-b143-2c045c8ea2fc}]   
[HKLM\Software\Classes\AppID\{21493C1F-D071-496A-9C27-450578888291}]    
[HKLM\Software\Classes\TypeLib\{252c2315-cce0-4446-8da7-c00292a690ba}]    
[HKLM\Software\Classes\CLSID\{2656B92B-0207-4afb-BEBF-F5FD231ECD39}]    
[HKLM\Software\Classes\CLSID\{27BF8F8D-58B8-D41C-F913-B7EEB57EF6F6}]    
[HKLM\Software\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}]    
[HKLM\Software\Classes\CLSID\{31F8B21E-8674-4589-A37F-31A4D4B55CC5}]    
[HKLM\Software\Classes\CLSID\{34CB0620-E343-4772-BBA8-D3074BC47516}]  
[HKLM\Software\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}]    
[HKLM\Software\Classes\AppID\{403A885F-CB00-40C1-BDC1-EB09053194F7}]  
[HKLM\Software\Classes\TypeLib\{403A885F-CB00-40C1-BDC1-EB09053194F7}]    
[HKLM\Software\Classes\CLSID\{412CD209-DDA4-4275-8C79-55F1C93FBD47}]    
[HKLM\Software\Classes\AppID\{55C1727F-5535-4C2A-9601-8C2458608B48}]    
[HKLM\Software\Classes\TypeLib\{55C1727F-5535-4C2A-9601-8C2458608B48}]   = 
[HKLM\Software\Classes\CLSID\{59570C1F-B692-48c9-91B4-7809E6945287}]   = 
[HKLM\Software\Classes\CLSID\{63A0F7FA-2C95-4d7e-AF25-EFCC303D20A1}]    
[HKLM\Software\Classes\CLSID\{6559E502-6EE1-46b8-A83C-F3A45BDA23EE}]    
[HKLM\Software\Classes\AppID\{756C097C-6BDB-45de-A8F1-83E01AB86BA4}]    
[HKLM\Software\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}]   =>PUP.BearShare 
[HKLM\Software\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}]   =>PUP.BearShare 
[HKLM\Software\Classes\TypeLib\{96F7FABC-5789-EFA4-B6ED-1272F4C1D27B}]   =>Toolbar.SweetIM 
[HKLM\Software\Classes\CLSID\{A2858A72-758F-4486-B6A1-7F1DCC0924FA}]    
[HKLM\Software\Classes\AppID\{A7DDCBDE-5C86-415c-8A37-763AE183E7E4}]   
[HKLM\Software\Classes\CLSID\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD}]   
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD}]    
[HKLM\Software\Classes\CLSID\{C63CA8A4-AB4E-49e5-A6C0-33FC86D80205}]    
[HKLM\Software\Classes\CLSID\{C6A7847E-8931-4a9a-B4EF-72A91E3CCF4D}]   =>PUP.BearShare 
[HKLM\Software\Classes\CLSID\{DD0F1D24-E250-4e93-966C-65615720AEFB}]   =>PUP.BearShare 
[HKLM\Software\Classes\CLSID\{EC1277BB-1C71-4c0d-BA6D-BFEA16E773A6}]    
C:\Users\Alain\AppData\Local\Temp\AskSearch    

 



---------------------------------------------------------- 
- Clique sur l'icône représentant la lettre H (« coller les lignes Helper ») 
- Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes 
- Clique sur le bouton « GO » pour lancer le nettoyage, 
- Copie/colle la totalité du rapport dans ta prochaine réponse 





ensuite colle un rapport avec un antivirus en ligne <= ici   comme nod32 

et pour finir explique tes soucis actuels 


a plus

ab34 · Answer

Résultat :

ESET Online Scanner

C:\Program Files\PCFix\AssistPCFix.exe	Win32/Adware.PCFixCleaner application	nettoyé par suppression - mis en quarantaine
C:\Program Files\PCFixebooter.exe	Win32/Adware.PCFixCleaner application	nettoyé par suppression - mis en quarantaine
C:\Users\Alain\AppData\Roaming\AVG\Rescue\Track Eraser\110819101434576.rsc	menaces multiples	supprimé - mis en quarantaine
C:\Users\Alain\Downloads\pcfix-v302-fr.exe	Win32/Adware.PCFixCleaner application	supprimé - mis en quarantaine
C:\Users\Alain\Downloads\PCSpeedMasterSetup.exe	une variante de Win32/SlowPCfighter application	nettoyé par suppression - mis en quarantaine
C:\Users\Alain\Downloadsegistrybooster.exe	une variante de Win32/RegistryBooster application	supprimé - mis en quarantaine
C:\Users\Alain\Downloads\RegistryReviverSetup.exe	une variante de Win32/SlowPCfighter application	nettoyé par suppression - mis en quarantaine
C:\Users\Alain\Downloads\speedupmypc.exe	Win32/SpeedUpMyPC application	supprimé - mis en quarantaine
C:\Users\Alain\Downloads
etorbit
etorbit-trial.zip	Win32/Monitor.RetinaX application	supprimé - mis en quarantaine
C:\Windows.old\Documents and Settings\Alain\Downloads\CheatEngine55.exe	menaces multiples	supprimé - mis en quarantaine
C:\Windows.old\Program Files\Cheat Engine\Cheat Engine.exe	une variante de Win32/HackTool.CheatEngine.AA application	nettoyé par suppression - mis en quarantaine
C:\Windows.old\Program Files\Cheat Engine\systemcallsignal.exe	une variante de Win32/HackTool.SystemCall.AA application	nettoyé par suppression - mis en quarantaine

Nota : 
J'ai comme antivirus avast payant pour 3 ordinateurs il ne m'as rien signalé merci avast.
J'ai supprimé complètement le programme "PCFix".

Voici le nouveau lien pour le fichier ZHPDiag :
http://www.cijoint.fr/cjlink.php?file=cj201108/cij6hAWVhe.txt

Pour HiJackThis j'ai toujours beaucoup de croix rouge surtout au fichier "svchost".

jlpjlp · Answer

supprime ad aware et spybot qui sont dépassés et consomment de la ressource  

internet explorer en est à la version 9 et firefox à la version 6...  

il faut éviter de multiplier les logiciels: PC Speed Maximizer à virer, tuneup utilities n'est pas terrible et à trop nettoyer le pc va planter avec ce logiciel. reste en à ccleaner et glary utilities à la rigueur 



_____________________ 



Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag en cliquant sur l'écusson vert) 
Copie/colle les lignes en gras suivantes : 

----------------------------------------------------------  


 

G1 - GCS: Preference [User Data\Default] http://search.bearshare.net/ 
M3 - MFPP: Plugins - [Alain] -- C:\Program Files\Mozilla FireFox\searchplugins\babylon.xml 

O87 - FAEL: "{880520A7-CEF6-4D6D-913B-613664B085EF}" | In - Domain - P6 - TRUE | .(.MusicLab, LLC - BearShare.) -- C:\Program Files\BearShare Applications\BearShare\BearShare.exe
O87 - FAEL: "{5F5E4B94-A134-4624-9689-99E3237FFA0A}" | In - Domain - P17 - TRUE | .(.MusicLab, LLC - BearShare.) -- C:\Program Files\BearShare Applications\BearShare\BearShare.exe
O87 - FAEL: "{15B5092B-F73F-44B5-9D09-D203C526AD58}" | In - Private - P6 - TRUE | .(.MusicLab, LLC - BearShare.) -- C:\Program Files\BearShare Applications\BearShare\BearShare.exe
O87 - FAEL: "{3B0F91C7-3A39-46FA-A8A2-9C60BAB483A1}" | In - Private - P17 - TRUE | .(.MusicLab, LLC - BearShare.) -- C:\Program Files\BearShare Applications\BearShare\BearShare.exe
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\ForceRenive] 
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\PCFix.job 
O42 - Logiciel: BearShare - (.Musiclab, LLC.) [HKLM] -- BearShare 
O42 - Logiciel: BearShare - (.Musiclab, LLC.) [HKLM] -- {5F624839-947D-46EA-BD63-FD847C1AC6F1} 
O42 - Logiciel: PCFix - (.Dubai Click LLC.) [HKLM] -- PC Fix 2011_is1 
O43 - CFD: 09/04/2011 - 08:01:22 - [218642] --H-D- C:\Users\Alain\AppData\Roaming\PCFix 
O69 - SBI: SearchScopes [HKCU] {29d95239-2b67-42be-bcac-38b4706ac9b7} - (Wibeez) - https://www.hugedomains.com/domain_profile.cfm?d=wibeez&e=com 
O69 - SBI: SearchScopes [HKCU] {9BB47C17-9C68-4BB3-B188-DD9AF0FD22} - (Web Search) - http://search.bearshare.net/ 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\ForceRenive]   =>PUP.OfferBox 
[HKLM\Software\Classes\AppID\BearShare.exe]    
[HKLM\Software\Classes\AppID\DiscoveryHelper.DLL]    
[HKLM\Software\Classes\AppID\GIFAnimator.DLL]    
[HKLM\Software\Classes\AppID\IMTrProgress.DLL]    
[HKLM\Software\Classes\AppID\IMWeb.DLL]    
[HKLM\Software\Classes\AppID\WMHelper.DLL]   
[HKLM\Software\Classes\imweb.imwebcontrol]    
[HKLM\Software\Classes\AppID\{1fc41815-fa4c-4f8b-b143-2c045c8ea2fc}]    
[HKLM\Software\Classes\AppID\{21493C1F-D071-496A-9C27-450578888291}]    
[HKLM\Software\Classes\TypeLib\{252c2315-cce0-4446-8da7-c00292a690ba}]   
[HKLM\Software\Classes\CLSID\{2656B92B-0207-4afb-BEBF-F5FD231ECD39}]    
[HKLM\Software\Classes\CLSID\{27BF8F8D-58B8-D41C-F913-B7EEB57EF6F6}]    
[HKLM\Software\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}]    
[HKLM\Software\Classes\CLSID\{31F8B21E-8674-4589-A37F-31A4D4B55CC5}]    
[HKLM\Software\Classes\CLSID\{34CB0620-E343-4772-BBA8-D3074BC47516}]    
[HKLM\Software\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}]    
[HKLM\Software\Classes\AppID\{403A885F-CB00-40C1-BDC1-EB09053194F7}]    
[HKLM\Software\Classes\TypeLib\{403A885F-CB00-40C1-BDC1-EB09053194F7}]    
[HKLM\Software\Classes\CLSID\{412CD209-DDA4-4275-8C79-55F1C93FBD47}]   
[HKLM\Software\Classes\AppID\{55C1727F-5535-4C2A-9601-8C2458608B48}]    
[HKLM\Software\Classes\TypeLib\{55C1727F-5535-4C2A-9601-8C2458608B48}]    
[HKLM\Software\Classes\CLSID\{59570C1F-B692-48c9-91B4-7809E6945287}]    
[HKLM\Software\Classes\CLSID\{63A0F7FA-2C95-4d7e-AF25-EFCC303D20A1}]    
[HKLM\Software\Classes\CLSID\{6559E502-6EE1-46b8-A83C-F3A45BDA23EE}]   
[HKLM\Software\Classes\AppID\{756C097C-6BDB-45de-A8F1-83E01AB86BA4}]    
[HKLM\Software\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}]    
[HKLM\Software\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}]    
[HKLM\Software\Classes\TypeLib\{96F7FABC-5789-EFA4-B6ED-1272F4C1D27B}]    
[HKLM\Software\Classes\CLSID\{A2858A72-758F-4486-B6A1-7F1DCC0924FA}]   
[HKLM\Software\Classes\AppID\{A7DDCBDE-5C86-415c-8A37-763AE183E7E4}]    
[HKLM\Software\Classes\CLSID\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD}]    
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD}]    
[HKLM\Software\Classes\CLSID\{C63CA8A4-AB4E-49e5-A6C0-33FC86D80205}]   =>PUP.BearShare 
[HKLM\Software\Classes\CLSID\{C6A7847E-8931-4a9a-B4EF-72A91E3CCF4D}]   =>PUP.BearShare 
[HKLM\Software\Classes\CLSID\{DD0F1D24-E250-4e93-966C-65615720AEFB}]   = 
[HKLM\Software\Classes\CLSID\{EC1277BB-1C71-4c0d-BA6D-BFEA16E773A6}]    
C:\Users\Alain\AppData\Local\Temp\AskSearch    
 


---------------------------------------------------------- 
- Clique sur l'icône représentant la lettre H (« coller les lignes Helper ») 
- Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes 
- Clique sur le bouton « GO » pour lancer le nettoyage, 
- Copie/colle la totalité du rapport dans ta prochaine réponse 


________________________ 

ensuite colle un rapport avec dr web cureit  

https://www.commentcamarche.net/telecharger/securite/7749-dr-web-cureit/  

________________________ 


puis colle un rapport hijackthis en mettant en ras les lignes suspectes

ab34 · Answer

Le docteur rien trouvé.

Pour le rapport hijackthis voici les lignes avec des croix rouges.

O20 - AppInit_DLLs: C:\PROGRA~1\BearShare Applications\MediaBar\Datamngr\datamngr.dll C:\PROGRA~1\BearShare Applications\MediaBar\Datamngr\IEBHO.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe
O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32
etman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32
etprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32
lasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32
sisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\peerdistsvc.dll,-9000 (PeerDistSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32asauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%Systemroot%\system32asmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe
O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe
O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (StiSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32	apisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32	bssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32	hemeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umrdp.dll,-1000 (UmRdpService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe
O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe

jlpjlp · Answer

fais zhpfix comme demandé


pour hijackthis tu as quelle version?

ab34 · Answer

zhpfix comme demandé ? je ne comprends pas.

version de hijackthis est v2.04

jlpjlp · Answer

Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag en cliquant sur l'écusson vert)
Copie/colle les lignes en gras suivantes :

----------------------------------------------------------




G1 - GCS: Preference [User Data\Default] http://search.bearshare.net/
M3 - MFPP: Plugins - [Alain] -- C:\Program Files\Mozilla FireFox\searchplugins\babylon.xml

O87 - FAEL: "{880520A7-CEF6-4D6D-913B-613664B085EF}" | In - Domain - P6 - TRUE | .(.MusicLab, LLC - BearShare.) -- C:\Program Files\BearShare Applications\BearShare\BearShare.exe
O87 - FAEL: "{5F5E4B94-A134-4624-9689-99E3237FFA0A}" | In - Domain - P17 - TRUE | .(.MusicLab, LLC - BearShare.) -- C:\Program Files\BearShare Applications\BearShare\BearShare.exe
O87 - FAEL: "{15B5092B-F73F-44B5-9D09-D203C526AD58}" | In - Private - P6 - TRUE | .(.MusicLab, LLC - BearShare.) -- C:\Program Files\BearShare Applications\BearShare\BearShare.exe
O87 - FAEL: "{3B0F91C7-3A39-46FA-A8A2-9C60BAB483A1}" | In - Private - P17 - TRUE | .(.MusicLab, LLC - BearShare.) -- C:\Program Files\BearShare Applications\BearShare\BearShare.exe
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\ForceRenive]
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\PCFix.job
O42 - Logiciel: BearShare - (.Musiclab, LLC.) [HKLM] -- BearShare
O42 - Logiciel: BearShare - (.Musiclab, LLC.) [HKLM] -- {5F624839-947D-46EA-BD63-FD847C1AC6F1}
O42 - Logiciel: PCFix - (.Dubai Click LLC.) [HKLM] -- PC Fix 2011_is1
O43 - CFD: 09/04/2011 - 08:01:22 - [218642] --H-D- C:\Users\Alain\AppData\Roaming\PCFix
O69 - SBI: SearchScopes [HKCU] {29d95239-2b67-42be-bcac-38b4706ac9b7} - (Wibeez) - https://www.hugedomains.com/domain_profile.cfm?d=wibeez&e=com
O69 - SBI: SearchScopes [HKCU] {9BB47C17-9C68-4BB3-B188-DD9AF0FD22} - (Web Search) - http://search.bearshare.net/
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\ForceRenive] =>PUP.OfferBox
[HKLM\Software\Classes\AppID\BearShare.exe]
[HKLM\Software\Classes\AppID\DiscoveryHelper.DLL]
[HKLM\Software\Classes\AppID\GIFAnimator.DLL]
[HKLM\Software\Classes\AppID\IMTrProgress.DLL]
[HKLM\Software\Classes\AppID\IMWeb.DLL]
[HKLM\Software\Classes\AppID\WMHelper.DLL]
[HKLM\Software\Classes\imweb.imwebcontrol]
[HKLM\Software\Classes\AppID\{1fc41815-fa4c-4f8b-b143-2c045c8ea2fc}]
[HKLM\Software\Classes\AppID\{21493C1F-D071-496A-9C27-450578888291}]
[HKLM\Software\Classes\TypeLib\{252c2315-cce0-4446-8da7-c00292a690ba}]
[HKLM\Software\Classes\CLSID\{2656B92B-0207-4afb-BEBF-F5FD231ECD39}]
[HKLM\Software\Classes\CLSID\{27BF8F8D-58B8-D41C-F913-B7EEB57EF6F6}]
[HKLM\Software\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}]
[HKLM\Software\Classes\CLSID\{31F8B21E-8674-4589-A37F-31A4D4B55CC5}]
[HKLM\Software\Classes\CLSID\{34CB0620-E343-4772-BBA8-D3074BC47516}]
[HKLM\Software\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}]
[HKLM\Software\Classes\AppID\{403A885F-CB00-40C1-BDC1-EB09053194F7}]
[HKLM\Software\Classes\TypeLib\{403A885F-CB00-40C1-BDC1-EB09053194F7}]
[HKLM\Software\Classes\CLSID\{412CD209-DDA4-4275-8C79-55F1C93FBD47}]
[HKLM\Software\Classes\AppID\{55C1727F-5535-4C2A-9601-8C2458608B48}]
[HKLM\Software\Classes\TypeLib\{55C1727F-5535-4C2A-9601-8C2458608B48}]
[HKLM\Software\Classes\CLSID\{59570C1F-B692-48c9-91B4-7809E6945287}]
[HKLM\Software\Classes\CLSID\{63A0F7FA-2C95-4d7e-AF25-EFCC303D20A1}]
[HKLM\Software\Classes\CLSID\{6559E502-6EE1-46b8-A83C-F3A45BDA23EE}]
[HKLM\Software\Classes\AppID\{756C097C-6BDB-45de-A8F1-83E01AB86BA4}]
[HKLM\Software\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}]
[HKLM\Software\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}]
[HKLM\Software\Classes\TypeLib\{96F7FABC-5789-EFA4-B6ED-1272F4C1D27B}]
[HKLM\Software\Classes\CLSID\{A2858A72-758F-4486-B6A1-7F1DCC0924FA}]
[HKLM\Software\Classes\AppID\{A7DDCBDE-5C86-415c-8A37-763AE183E7E4}]
[HKLM\Software\Classes\CLSID\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD}]
[HKLM\Software\Classes\CLSID\{C63CA8A4-AB4E-49e5-A6C0-33FC86D80205}] =>PUP.BearShare
[HKLM\Software\Classes\CLSID\{C6A7847E-8931-4a9a-B4EF-72A91E3CCF4D}] =>PUP.BearShare
[HKLM\Software\Classes\CLSID\{DD0F1D24-E250-4e93-966C-65615720AEFB}] =
[HKLM\Software\Classes\CLSID\{EC1277BB-1C71-4c0d-BA6D-BFEA16E773A6}]
C:\Users\Alain\AppData\Local\Temp\AskSearch



----------------------------------------------------------
- Clique sur l'icône représentant la lettre H (« coller les lignes Helper »)
- Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes
- Clique sur le bouton « GO » pour lancer le nettoyage,
- Copie/colle la totalité du rapport dans ta prochaine réponse

ab34 · Answer

Désolé pour la réponse après tout ce temps mais j'ai eu de gros problèmes personnel  impossible de répondre, voici le rapport de ZHPFix :


Rapport de ZHPFix 1.12.3357 par Nicolas Coolman, Update du 23/08/2011
Fichier d'export Registre : 
Run by Alain at 08/09/2011 10:59:10
Windows 7 Ultimate Edition, 32-bit  (Build 7600)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Logiciel(s) ==========
ABSENT Software Key: BearShare
ABSENT Software Key: {5F624839-947D-46EA-BD63-FD847C1AC6F1}
ABSENT Software Key: PC Fix 2011_is1

========== Clé(s) du Registre ==========
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\ForceRenive
ABSENT SearchScopes :{29d95239-2b67-42be-bcac-38b4706ac9b7}
ABSENT SearchScopes :{9BB47C17-9C68-4BB3-B188-DD9AF0FD22}
ABSENT Key: HKLM\Software\Classes\AppID\BearShare.exe
ABSENT Key: HKLM\Software\Classes\AppID\DiscoveryHelper.DLL
ABSENT Key: HKLM\Software\Classes\AppID\GIFAnimator.DLL
ABSENT Key: HKLM\Software\Classes\AppID\IMTrProgress.DLL
ABSENT Key: HKLM\Software\Classes\AppID\IMWeb.DLL
ABSENT Key: HKLM\Software\Classes\AppID\WMHelper.DLL
ABSENT Key: HKLM\Software\Classes\imweb.imwebcontrol
ABSENT Key: HKLM\Software\Classes\AppID\{1fc41815-fa4c-4f8b-b143-2c045c8ea2fc}
ABSENT Key: HKLM\Software\Classes\AppID\{21493C1F-D071-496A-9C27-450578888291}
ABSENT Key: HKLM\Software\Classes\TypeLib\{252c2315-cce0-4446-8da7-c00292a690ba}
ABSENT Key: HKLM\Software\Classes\CLSID\{2656B92B-0207-4afb-BEBF-F5FD231ECD39}
ABSENT Key: HKLM\Software\Classes\CLSID\{27BF8F8D-58B8-D41C-F913-B7EEB57EF6F6}
ABSENT Key: HKLM\Software\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
ABSENT Key: HKLM\Software\Classes\CLSID\{31F8B21E-8674-4589-A37F-31A4D4B55CC5}
ABSENT Key: HKLM\Software\Classes\CLSID\{34CB0620-E343-4772-BBA8-D3074BC47516}
ABSENT Key: HKLM\Software\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}
ABSENT Key: HKLM\Software\Classes\AppID\{403A885F-CB00-40C1-BDC1-EB09053194F7}
ABSENT Key: HKLM\Software\Classes\TypeLib\{403A885F-CB00-40C1-BDC1-EB09053194F7}
ABSENT Key: HKLM\Software\Classes\CLSID\{412CD209-DDA4-4275-8C79-55F1C93FBD47}
ABSENT Key: HKLM\Software\Classes\AppID\{55C1727F-5535-4C2A-9601-8C2458608B48}
ABSENT Key: HKLM\Software\Classes\TypeLib\{55C1727F-5535-4C2A-9601-8C2458608B48}
ABSENT Key: HKLM\Software\Classes\CLSID\{59570C1F-B692-48c9-91B4-7809E6945287}
ABSENT Key: HKLM\Software\Classes\CLSID\{63A0F7FA-2C95-4d7e-AF25-EFCC303D20A1}
ABSENT Key: HKLM\Software\Classes\CLSID\{6559E502-6EE1-46b8-A83C-F3A45BDA23EE}
ABSENT Key: HKLM\Software\Classes\AppID\{756C097C-6BDB-45de-A8F1-83E01AB86BA4}
ABSENT Key: HKLM\Software\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}
ABSENT Key: HKLM\Software\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}
ABSENT Key: HKLM\Software\Classes\TypeLib\{96F7FABC-5789-EFA4-B6ED-1272F4C1D27B}
ABSENT Key: HKLM\Software\Classes\CLSID\{A2858A72-758F-4486-B6A1-7F1DCC0924FA}
ABSENT Key: HKLM\Software\Classes\AppID\{A7DDCBDE-5C86-415c-8A37-763AE183E7E4}
ABSENT Key: HKLM\Software\Classes\CLSID\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD}
ABSENT Key: HKLM\Software\Classes\CLSID\{C63CA8A4-AB4E-49e5-A6C0-33FC86D80205}
ABSENT Key: HKLM\Software\Classes\CLSID\{C6A7847E-8931-4a9a-B4EF-72A91E3CCF4D}
ABSENT Key: HKLM\Software\Classes\CLSID\{DD0F1D24-E250-4e93-966C-65615720AEFB}
ABSENT Key: HKLM\Software\Classes\CLSID\{EC1277BB-1C71-4c0d-BA6D-BFEA16E773A6}

========== Valeur(s) du Registre ==========
ABSENT {880520A7-CEF6-4D6D-913B-613664B085EF}
ABSENT {5F5E4B94-A134-4624-9689-99E3237FFA0A}
ABSENT {15B5092B-F73F-44B5-9D09-D203C526AD58}
ABSENT {3B0F91C7-3A39-46FA-A8A2-9C60BAB483A1}

========== Préférences navigateur ==========
PRESENT Chrome File: C:\Users\Alain\AppData\Local\Google\Chrome\User Data\Default\Preferences
ABSENT Chrome Site: http://search.bearshare.net/

========== Dossier(s) ==========
ABSENT C:\Users\Alain\AppData\Roaming\PCFix

========== Fichier(s) ==========
ABSENT File: c:\program files\mozilla firefox\searchplugins\babylon.xml
ABSENT File: c:\windows	asks\pcfix.job
ABSENT Folder/File: c:\users\alain\appdata\local	emp\asksearch


========== Récapitulatif ==========
39 : Clé(s) du Registre
4 : Valeur(s) du Registre
1 : Dossier(s)
3 : Fichier(s)
3 : Logiciel(s)
2 : Préférences navigateur


End of the scan in 00mn 00s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R3].txt - 08/09/2011 09:58:57 [4892]
C:\ZHP\ZHPFix[R1].txt - 27/08/2011 11:24:44 [3805]
C:\ZHP\ZHPFix[R2].txt - 27/08/2011 18:55:25 [3778]
C:\ZHP\ZHPFix[R4].txt - 08/09/2011 10:59:10 [4614]

jlpjlp · Answer

ok remets un rapport zhpdiag

et explique tes problèmes actuels

a plus

ab34 · Answer

Bonjour,

Après les modifications l'ordinateur marche mieux.

Par contre j'ai supprimé ad-aware j'ai laissé Avast car les deux en même temps ralentisse mon pc.

Quel est d'après toi le meilleur nettoyeur et le meilleur anti-virus ?

Merci beaucoup encore de ton aide.

jlpjlp · Answer

slt tu peux remettre zhpdiag pour vérifier?

et

pour ta question lire ceci
et liens liens en annexes

https://www.commentcamarche.net/faq/24687-les-logiciels-de-securite-gratuits-indispensables

ab34 · Answer

Rapport de ZHPScan v1.28 par Nicolas Coolman, Update du 24/08/2011
Run by Alain at 10/09/2011 18:41:37
Web site :  http://www.premiumorange.com/zeb-help-process/zhpdiag.html


---\ Clés de Registre trouvées (Registry Keys found)
[HKLM\Software\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}]   =>Adware.Hotbar
[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar]   =>Toolbar.AskTBar

---\ Valeurs de clé de Registre trouvées (Registry Values found)
*** None ***

---\ Dossiers trouvés (Directories found)
*** None ***

---\ Fichiers Firefox trouvés (Files found)
*** None ***

---\ Fichiers trouvés (Files found)
*** None ***

---\ Bilan de la recherche (Scan Result)
Database Version : 8621 - (24/08/2011)
Clés trouvées (Keys found) : 2
Valeurs de clé trouvées (Values found) : 0
Dossiers trouvés (Folders found) : 0
Fichiers trouvés (Files found) : 0

End of the scan in 00mn 13s

jlpjlp · Answer

un rapport Zhpdiag  et non Zhpscan


a plus

jlpjlp · Answer

il faut faire passer le rapport via le site cijoint comme tu as fais dans ta première demande sinon il en manque la moitié

ab34 · Answer

Désolé mais j'ai vraiment pas ma tête à moi, j'ai trop de problème actuellement.

Voici le lien :

http://www.cijoint.fr/cjlink.php?file=cj201109/cij6ga5ZX5.txt

Encore merci pour ta patience.

jlpjlp · Answer

Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag en cliquant sur l'écusson vert) 
Copie/colle les lignes en gras suivantes : 

---------------------------------------------------------- 


[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\ForceRenive]   
[HKLM\Software\Classes\AppID\BearShare.exe]    
[HKLM\Software\Classes\AppID\DiscoveryHelper.DLL]   
[HKLM\Software\Classes\AppID\GIFAnimator.DLL]   
[HKLM\Software\Classes\AppID\IMTrProgress.DLL]   
[HKLM\Software\Classes\AppID\IMWeb.DLL]  
[HKLM\Software\Classes\AppID\WMHelper.DLL]   
[HKLM\Software\Classes\imweb.imwebcontrol]   
[HKLM\Software\Classes\AppID\{1fc41815-fa4c-4f8b-b143-2c045c8ea2fc}]   
[HKLM\Software\Classes\AppID\{21493C1F-D071-496A-9C27-450578888291}]   
[HKLM\Software\Classes\TypeLib\{252c2315-cce0-4446-8da7-c00292a690ba}]   
[HKLM\Software\Classes\CLSID\{2656B92B-0207-4afb-BEBF-F5FD231ECD39}] 
[HKLM\Software\Classes\CLSID\{27BF8F8D-58B8-D41C-F913-B7EEB57EF6F6}]   =>PUP.BearShare 
[HKLM\Software\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}]   =>Adware.Hotbar 
[HKLM\Software\Classes\CLSID\{31F8B21E-8674-4589-A37F-31A4D4B55CC5}]   =>PUP.BearShare 
[HKLM\Software\Classes\CLSID\{34CB0620-E343-4772-BBA8-D3074BC47516}]   =>PUP.BearShare 
[HKLM\Software\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}]   =>PUP.BearShare 
[HKLM\Software\Classes\AppID\{403A885F-CB00-40C1-BDC1-EB09053194F7}]   =>PUP.iMesh 
[HKLM\Software\Classes\TypeLib\{403A885F-CB00-40C1-BDC1-EB09053194F7}]   =>PUP.iMesh 
[HKLM\Software\Classes\CLSID\{412CD209-DDA4-4275-8C79-55F1C93FBD47}]   =>PUP.BearShare 
[HKLM\Software\Classes\AppID\{55C1727F-5535-4C2A-9601-8C2458608B48}]   =>PUP.iMesh 
[HKLM\Software\Classes\TypeLib\{55C1727F-5535-4C2A-9601-8C2458608B48}]   =>PUP.iMesh 
[HKLM\Software\Classes\CLSID\{59570C1F-B692-48c9-91B4-7809E6945287}]   =>PUP.BearShare 
[HKLM\Software\Classes\CLSID\{63A0F7FA-2C95-4d7e-AF25-EFCC303D20A1}]   =>PUP.BearShare 
[HKLM\Software\Classes\CLSID\{6559E502-6EE1-46b8-A83C-F3A45BDA23EE}]   =>Adware.BHO 
[HKLM\Software\Classes\AppID\{756C097C-6BDB-45de-A8F1-83E01AB86BA4}]   =>PUP.BearShare 
[HKLM\Software\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}]   =>PUP.BearShare 
[HKLM\Software\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}]   =>PUP.BearShare 
[HKLM\Software\Classes\TypeLib\{96F7FABC-5789-EFA4-B6ED-1272F4C1D27B}]   =>Toolbar.SweetIM 
[HKLM\Software\Classes\CLSID\{A2858A72-758F-4486-B6A1-7F1DCC0924FA}]   =>PUP.BearShare 
[HKLM\Software\Classes\AppID\{A7DDCBDE-5C86-415c-8A37-763AE183E7E4}]   =>PUP.iMesh 
[HKLM\Software\Classes\CLSID\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD}]   =>PUP.iMesh 
[HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD}]   =>PUP.iMesh 
[HKLM\Software\Classes\CLSID\{C63CA8A4-AB4E-49e5-A6C0-33FC86D80205}]   =>PUP.BearShare 
[HKLM\Software\Classes\CLSID\{C6A7847E-8931-4a9a-B4EF-72A91E3CCF4D}]   =>PUP.BearShare 
[HKLM\Software\Classes\CLSID\{DD0F1D24-E250-4e93-966C-65615720AEFB}]   =>PUP.BearShare 
[HKLM\Software\Classes\CLSID\{EC1277BB-1C71-4c0d-BA6D-BFEA16E773A6}]   =>PUP.BearShare 
C:\Users\Alain\AppData\Local\Temp\AskSearch    


---------------------------------------------------------- 
- Clique sur l'icône représentant la lettre H (« coller les lignes Helper ») 
- Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes 
- Clique sur le bouton « GO » pour lancer le nettoyage, 
- Copie/colle la totalité du rapport dans ta prochaine réponse 







ensuite pour supprimer ce qui a été utilisé: 
http://www.commentcamarche.net/faq/24877-supprimer-les-logiciels-de-desinfection 



rq: tuneup utility il faut faire attention à ne pas trop nettoyer avec sinon le pc plante...

ab34 · Answer

Voici le rapport :


Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-12-09-2011-07-36-42.txt
Run by Alain at 12/09/2011 07:36:42
Windows 7 Ultimate Edition, 32-bit  (Build 7600)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Clé(s) du Registre ==========
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\ForceRenive
ABSENT Key: HKLM\Software\Classes\AppID\BearShare.exe
ABSENT Key: HKLM\Software\Classes\AppID\DiscoveryHelper.DLL
ABSENT Key: HKLM\Software\Classes\AppID\GIFAnimator.DLL
ABSENT Key: HKLM\Software\Classes\AppID\IMTrProgress.DLL
ABSENT Key: HKLM\Software\Classes\AppID\IMWeb.DLL
ABSENT Key: HKLM\Software\Classes\AppID\WMHelper.DLL
ABSENT Key: HKLM\Software\Classes\imweb.imwebcontrol
ABSENT Key: HKLM\Software\Classes\AppID\{1fc41815-fa4c-4f8b-b143-2c045c8ea2fc}
ABSENT Key: HKLM\Software\Classes\AppID\{21493C1F-D071-496A-9C27-450578888291}
ABSENT Key: HKLM\Software\Classes\TypeLib\{252c2315-cce0-4446-8da7-c00292a690ba}
ABSENT Key: HKLM\Software\Classes\CLSID\{2656B92B-0207-4afb-BEBF-F5FD231ECD39}
ABSENT Key: HKLM\Software\Classes\CLSID\{27BF8F8D-58B8-D41C-F913-B7EEB57EF6F6}
SUPPRIME Key: HKLM\Software\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}
ABSENT Key: HKLM\Software\Classes\CLSID\{31F8B21E-8674-4589-A37F-31A4D4B55CC5}
ABSENT Key: HKLM\Software\Classes\CLSID\{34CB0620-E343-4772-BBA8-D3074BC47516}
ABSENT Key: HKLM\Software\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}
ABSENT Key: HKLM\Software\Classes\AppID\{403A885F-CB00-40C1-BDC1-EB09053194F7}
ABSENT Key: HKLM\Software\Classes\TypeLib\{403A885F-CB00-40C1-BDC1-EB09053194F7}
ABSENT Key: HKLM\Software\Classes\CLSID\{412CD209-DDA4-4275-8C79-55F1C93FBD47}
ABSENT Key: HKLM\Software\Classes\AppID\{55C1727F-5535-4C2A-9601-8C2458608B48}
ABSENT Key: HKLM\Software\Classes\TypeLib\{55C1727F-5535-4C2A-9601-8C2458608B48}
ABSENT Key: HKLM\Software\Classes\CLSID\{59570C1F-B692-48c9-91B4-7809E6945287}
ABSENT Key: HKLM\Software\Classes\CLSID\{63A0F7FA-2C95-4d7e-AF25-EFCC303D20A1}
ABSENT Key: HKLM\Software\Classes\CLSID\{6559E502-6EE1-46b8-A83C-F3A45BDA23EE}
ABSENT Key: HKLM\Software\Classes\AppID\{756C097C-6BDB-45de-A8F1-83E01AB86BA4}
ABSENT Key: HKLM\Software\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}
ABSENT Key: HKLM\Software\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}
ABSENT Key: HKLM\Software\Classes\TypeLib\{96F7FABC-5789-EFA4-B6ED-1272F4C1D27B}
ABSENT Key: HKLM\Software\Classes\CLSID\{A2858A72-758F-4486-B6A1-7F1DCC0924FA}
ABSENT Key: HKLM\Software\Classes\AppID\{A7DDCBDE-5C86-415c-8A37-763AE183E7E4}
ABSENT Key: HKLM\Software\Classes\CLSID\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD}
ABSENT Key: HKLM\Software\Classes\CLSID\{C63CA8A4-AB4E-49e5-A6C0-33FC86D80205}
ABSENT Key: HKLM\Software\Classes\CLSID\{C6A7847E-8931-4a9a-B4EF-72A91E3CCF4D}
ABSENT Key: HKLM\Software\Classes\CLSID\{DD0F1D24-E250-4e93-966C-65615720AEFB}
ABSENT Key: HKLM\Software\Classes\CLSID\{EC1277BB-1C71-4c0d-BA6D-BFEA16E773A6}

========== Fichier(s) ==========
ABSENT Folder/File: c:\users\alain\appdata\local	emp\asksearch


========== Récapitulatif ==========
37 : Clé(s) du Registre
1 : Fichier(s)


End of the scan in 00mn 08s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 27/08/2011 11:24:44 [3805]
C:\ZHP\ZHPFix[R2].txt - 27/08/2011 18:55:25 [3778]
C:\ZHP\ZHPFix[R3].txt - 12/09/2011 07:36:42 [3518]

jlpjlp · Answer

ensuite pour supprimer ce qui a été utilisé:
http://www.commentcamarche.net/faq/24877-supprimer-les-logiciels-de-desinfection



rq: tuneup utility il faut faire attention à ne pas trop nettoyer avec sinon le pc plante...

ab34 · Answer

Encore merci beaucoup de ton aide.

Problème svchost.exe et rapport ZHPDiag

21 réponses

Discussions similaires