Virus publicitaire
Résolu
freesky
Messages postés
71
Date d'inscription
Statut
Membre
Dernière intervention
-
jlpjlp Messages postés 51580 Date d'inscription Statut Contributeur sécurité Dernière intervention -
jlpjlp Messages postés 51580 Date d'inscription Statut Contributeur sécurité Dernière intervention -
Bonjour, depuis plus d'une semaine maintenant j'ai des pages publicitaires intempestives qui apparaissent assez souvent quand je navigue sur chrome. J'ai déjà eu ce genre de problème et j'imagine qu'il faut que je télécharge HijackThis et que je colle un rapport ici non?
A voir également:
- Virus publicitaire
- Virus mcafee - Accueil - Piratage
- Sms publicitaire - Guide
- Virus facebook demande d'amis - Accueil - Facebook
- Undisclosed-recipients virus - Guide
- Panda anti virus gratuit - Télécharger - Antivirus & Antimalwares
54 réponses
des pubs de quoi?
freesky
Messages postés
71
Date d'inscription
Statut
Membre
Dernière intervention
du genre sonneire, vetements etc...
Toufatomic
D'ailleurs, j'avais des recherches sur ce qui s'affiche en première URL au chargement, ça commence par "tracking.publicidees..." et ça m'a l'air d'être une belle ********** de système commercial.
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
analyse les 3 fichiers en gras suivants sur le site de virus total et colle les rapports: https://www.virustotal.com/gui/
C:\Windows\System32\dgdersvc.exe
C:\Windows\System32\CmdLineExt03.dll
C:\Windows\System32\FsUsbExDisk.Sys
C:\Windows\System32\dgdersvc.exe
C:\Windows\System32\CmdLineExt03.dll
C:\Windows\System32\FsUsbExDisk.Sys
File name: dgdersvc.exe
Submission date: 2011-08-08 11:24:00 (UTC)
Current status: finished
Result: 0 /43 (0.0%)
File name: e89e37a82ebff55263f804af64b2b620
Submission date: 2011-01-23 01:59:16 (UTC)
Current status: finished
Result: 1 /42 (2.4%)
VT Community
File name: 07A18DA4204CA93B8F5000B83BEF470088A3B37D.sys
Submission date: 2011-08-06 13:43:56 (UTC)
Current status: finished
Result: 0 /43 (0.0%)
Analyse dans l'ordre, si c'est bien ces rapports que tu voulais.
Submission date: 2011-08-08 11:24:00 (UTC)
Current status: finished
Result: 0 /43 (0.0%)
File name: e89e37a82ebff55263f804af64b2b620
Submission date: 2011-01-23 01:59:16 (UTC)
Current status: finished
Result: 1 /42 (2.4%)
VT Community
File name: 07A18DA4204CA93B8F5000B83BEF470088A3B37D.sys
Submission date: 2011-08-06 13:43:56 (UTC)
Current status: finished
Result: 0 /43 (0.0%)
Analyse dans l'ordre, si c'est bien ces rapports que tu voulais.
bon rien alors
repasse malwarebyte antimalware après l'avoir mis à jour et ton antivirus si rien c'est que c'est bon
repasse malwarebyte antimalware après l'avoir mis à jour et ton antivirus si rien c'est que c'est bon
Rien, mais j'ai toujours des pubs, peut-être que c'est normal mais j'ai toujours l'impression que c'est assez fréquent. Je vais attendre un peu pour conclure, encore merci pour tout =)
il y a toujours des pubs effectivement pour tous ... si tu en as beaucoup on reverra mais coté infections c'est bon sur les rapports
Là ça devient insupportable, je vais sur youtube et des que je clique sur qqch ça me met une pub, même la barre de recherche, je pense que les pubs s'amplifients par moment...
Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection):
- Va dans démarrer puis panneau de configuration
- Double Clique sur l'icône "Comptes d'utilisateurs"
- Clique ensuite sur désactiver et valide.
télécharge combofix (par sUBs) ici :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
et enregistre le sur le bureau.
déconnecte toi d'internet et ferme toutes tes applications.
désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)
double-clique sur combofix.exe et suis les instructions
à la fin, il va produire un rapport C:\ComboFix.txt
réactive ton parefeu, ton antivirus, la garde de ton antispyware
copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.
Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.
Tu as un tutoriel complet ici :
https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
- Va dans démarrer puis panneau de configuration
- Double Clique sur l'icône "Comptes d'utilisateurs"
- Clique ensuite sur désactiver et valide.
télécharge combofix (par sUBs) ici :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
et enregistre le sur le bureau.
déconnecte toi d'internet et ferme toutes tes applications.
désactive tes protections (antivirus, parefeu, garde en temps réel de l'antispyware)
double-clique sur combofix.exe et suis les instructions
à la fin, il va produire un rapport C:\ComboFix.txt
réactive ton parefeu, ton antivirus, la garde de ton antispyware
copie/colle le rapport C:\ComboFix.txt dans ta prochaine réponse.
Attention, n'utilise pas ta souris ni ton clavier (ni un autre système de pointage) pendant que le programme tourne. Cela pourrait figer l'ordi.
Tu as un tutoriel complet ici :
https://www.bleepingcomputer.com/combofix/fr/comment-utiliser-combofix
J'avais oublier de désactiver Windows Defender :/
ComboFix 11-09-01.02 - Lee 01/09/2011 18:06:42.1.4 - x86
Running from: c:\users\Lee\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Keyword Search
c:\program files\Keyword Search\uninstall.exe
c:\users\Lee\AppData\Roaming\Microsoft\Windows\Recent\Thumbs.db
c:\windows\system32\E_FD4BCDE.DLL
c:\windows\system32\lvci13101216.dll
c:\windows\system32\lvci13251014.dll
c:\windows\system32\muzapp.exe
c:\windows\system32\system32
c:\windows\system32\system32\cis-2.4.dll
c:\windows\system32\system32\issacapi_bs-2.3.dll
c:\windows\system32\system32\issacapi_pe-2.3.dll
c:\windows\system32\system32\issacapi_se-2.3.dll
c:\windows\system32\system32\MACXMLProto.dll
c:\windows\system32\system32\MaDRM.dll
c:\windows\system32\system32\MaJGUILib.dll
c:\windows\system32\system32\MaJUtilLib.dll
c:\windows\system32\system32\MAMACExtract.dll
c:\windows\system32\system32\MASetupCaller.dll
c:\windows\system32\system32\MASetupCleaner.exe
c:\windows\system32\system32\MaXMLProto.dll
c:\windows\system32\system32\MK_Lyric.dll
c:\windows\system32\system32\MSCLib.dll
c:\windows\system32\system32\MSFLib.dll
c:\windows\system32\system32\MSLUR71.dll
c:\windows\system32\system32\msvcp60.dll
c:\windows\system32\system32\MTTELECHIP.dll
c:\windows\system32\system32\MTXSYNCICON.dll
c:\windows\system32\system32\muzaf1.dll
c:\windows\system32\system32\muzapp.dll
c:\windows\system32\system32\muzapp.exe
c:\windows\system32\system32\muzdecode.ax
c:\windows\system32\system32\muzeffect.ax
c:\windows\system32\system32\muzmp4sp.ax
c:\windows\system32\system32\muzmpgsp.ax
c:\windows\system32\system32\muzoggsp.ax
c:\windows\system32\system32\muzwmts.dll
c:\windows\system32\system32\psapi.dll
c:\windows\unin0412.exe
.
.
((((((((((((((((((((((((( Files Created from 2011-08-01 to 2011-09-01 )))))))))))))))))))))))))))))))
.
.
2011-09-01 16:14 . 2011-09-01 16:14 -------- d-----w- c:\users\Lee\AppData\Local\temp
2011-09-01 16:14 . 2011-09-01 16:14 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-08-30 07:46 . 2011-08-12 02:44 7152464 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C3403C07-7C06-4DA7-AD43-887A0F3FDC23}\mpengine.dll
2011-08-27 10:10 . 2011-08-27 10:10 -------- d-----w- c:\users\Lee\AppData\Roaming\Malwarebytes
2011-08-27 10:10 . 2011-07-06 17:52 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-08-27 10:10 . 2011-08-27 10:10 -------- d-----w- c:\programdata\Malwarebytes
2011-08-27 10:10 . 2011-07-06 17:52 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-08-27 10:10 . 2011-08-27 10:10 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-08-25 21:52 . 2011-08-25 21:53 -------- d-----w- c:\users\Lee\??
2011-08-24 07:39 . 2011-07-09 04:30 2048 ----a-w- c:\windows\system32\tzres.dll
2011-08-23 11:29 . 2011-08-23 11:29 512 ------w- C:\PhysicalMBR.bin
2011-08-18 00:49 . 2011-08-18 00:53 -------- d-----w- c:\program files\Common Files\Steam
2011-08-18 00:49 . 2011-09-01 11:43 -------- d-----w- c:\program files\Steam
2011-08-14 08:30 . 2011-08-14 08:30 -------- d-----w- c:\users\Lee\AppData\Local\Ilivid Player
2011-08-14 08:30 . 2011-08-14 08:30 -------- d--h--w- c:\programdata\{9CD61942-8DA1-4781-925C-4FE1471E0820}
2011-08-14 08:28 . 2011-08-14 08:28 -------- d-----w- c:\users\Lee\AppData\Local\PackageAware
2011-08-05 10:52 . 2011-08-05 10:52 -------- d-----w- c:\program files\iPod
2011-08-05 10:51 . 2011-08-05 10:51 -------- d-----w- c:\program files\Bonjour
2011-08-05 10:48 . 2011-08-05 10:48 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin7.dll
2011-08-05 10:48 . 2011-08-05 10:48 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2011-08-05 10:48 . 2011-08-05 10:48 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2011-08-05 10:48 . 2011-08-05 10:48 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2011-08-05 10:48 . 2011-08-05 10:48 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2011-08-05 10:48 . 2011-08-05 10:48 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2011-08-05 10:48 . 2011-08-05 10:48 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2011-08-05 10:48 . 2011-08-05 10:48 -------- d-----w- c:\program files\QuickTime
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-13 09:23 . 2011-07-01 12:44 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-07-12 09:20 . 2011-07-12 09:20 83816 ----a-w- c:\windows\system32\dns-sd.exe
2011-07-12 09:20 . 2011-07-12 09:20 73064 ----a-w- c:\windows\system32\dnssd.dll
2011-07-12 09:20 . 2011-07-12 09:20 50536 ----a-w- c:\windows\system32\jdns_sd.dll
2011-07-12 09:20 . 2011-07-12 09:20 178536 ----a-w- c:\windows\system32\dnssdX.dll
2011-07-05 16:37 . 2011-07-05 16:37 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2011-07-05 16:37 . 2011-07-05 16:37 69632 ----a-w- c:\windows\system32\QuickTime.qts
2011-07-04 11:43 . 2011-04-11 20:58 40112 ----a-w- c:\windows\avastSS.scr
2011-07-04 11:43 . 2011-04-11 20:58 199304 ----a-w- c:\windows\system32\aswBoot.exe
2011-07-04 11:36 . 2011-04-11 20:58 441176 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-07-04 11:36 . 2011-04-11 20:59 309848 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-07-04 11:35 . 2011-04-11 20:58 43608 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-07-04 11:32 . 2011-04-11 20:58 25432 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-07-04 11:32 . 2011-04-11 20:58 54104 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-07-04 11:32 . 2011-04-11 20:59 19544 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-06-12 23:27 . 2011-06-12 23:27 43520 ----a-w- c:\windows\system32\CmdLineExt03.dll
2011-06-11 02:37 . 2011-07-13 06:45 2332672 ----a-w- c:\windows\system32\win32k.sys
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-07-04 11:43 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"KiesTrayAgent"="c:\program files\Samsung\Kies\/\KiesTrayAgent.exe" [2010-07-28 3365176]
"DaumCleaner"="c:\program files\Daum\Cleaner\DaumCleaner.exe" [2011-07-29 3089800]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2009-12-09 284696]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-02-02 98304]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-12-03 8120864]
"LWS"="c:\program files\Logitech\LWS\Webcam Software\LWS.exe" [2011-03-01 190808]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-07-04 3493720]
"PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2010-04-12 180224]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-07-05 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-07-19 421736]
.
c:\users\Lee\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
hp psc 1000 series.lnk - c:\program files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe [2002-12-2 147456]
hpoddt01.exe.lnk - c:\program files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [2002-12-2 40960]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-08-21 135664]
R3 DaumCleanerService;DaumCleanerService;c:\program files\Daum\Cleaner\DaumCleanerService.exe [2011-07-29 161160]
R3 gupdatem;Service Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-08-21 135664]
R3 scsk5;SCSK5 Driver Service;c:\windows\system32\drivers\scsk5.sys [x]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 98432]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 14848]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 123648]
R3 ss_bserd;SAMSUNG USB Mobile Logging Driver;c:\windows\system32\DRIVERS\ss_bserd.sys [2009-09-19 100224]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2010-08-22 1343400]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-02-03 172032]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-07-04 54104]
S2 dgdersvc;Device Error Recovery Service;c:\windows\system32\dgdersvc.exe [2010-07-26 95568]
S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2009-12-22 217088]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-12-09 13336]
S2 UMVPFSrv;UMVPFSrv;c:\program files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2011-04-01 428640]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [2010-02-03 5313536]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-02-03 150016]
S3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [2010-07-26 18136]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2010-07-26 36640]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-11-05 230912]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - FSUSBEXDISK
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
Contents of the 'Scheduled Tasks' folder
.
2011-09-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-08-21 15:20]
.
2011-09-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-08-21 15:20]
.
2011-08-31 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4293211140-3593489584-51308726-1000Core.job
- c:\users\Lee\AppData\Local\Google\Update\GoogleUpdate.exe [2011-04-18 09:20]
.
2011-09-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4293211140-3593489584-51308726-1000UA.job
- c:\users\Lee\AppData\Local\Google\Update\GoogleUpdate.exe [2011-04-18 09:20]
.
.
------- Supplementary Scan -------
.
uInternet Settings,ProxyOverride = *.local
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
IE: {{0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - https://www.ebay.fr
TCP: DhcpNameServer = 212.27.40.241 212.27.40.240
TCP: Interfaces\{171CBB1B-B7C7-48DF-975A-34C94CDB7E05}: NameServer = 85.17.255.198,46.19.33.120
DPF: {180C8380-22BA-4A62-A0E8-79F8DCE56B19} - hxxp://sub.sharebox.co.kr/ShareBoxCtrl.cab
DPF: {27E4B2A9-D554-40DE-B6CD-F11E9B44FBD0} - hxxp://simfile.chol.com/activex/SimFileControl.cab
DPF: {48ACDFDC-9F77-422E-A207-03E4FCE6BF5C} - hxxp://yahoo.myfolder.net/InnoFD.cab
DPF: {66413DC2-F891-40BC-822D-B7EEC8ADC281} - hxxp://img.shinhan.com/rib/common/ProWorksGrid_86.cab
DPF: {9A7D9941-6DB0-4AD7-8454-509D2793C5E8} - hxxp://beefile.com/mmsv/BeefileWebControl.CAB
DPF: {B9B38E70-EEF6-4E3A-AE84-DDE59A053B7C} - hxxp://mail.daum.net/hanmail-ax/DaumActiveX/2_0_0_9/DaumActiveX.cab?ver=2,0,0,9
DPF: {F54F8CD6-BF63-452F-AFC9-49103EAE5E8B} - hxxp://down.multidownload.co.kr/info/MultiDownloadActProj.cab
.
- - - - ORPHANS REMOVED - - - -
.
URLSearchHooks-{ba14329e-9550-4989-b3f2-9732e92d17cc} - (no file)
URLSearchHooks-{cd90bf73-20f6-44ef-993d-bb920303bd2e} - (no file)
URLSearchHooks-{3248f342-70c6-418d-a300-b8e925e95556} - c:\program files\Jeux-\tbJeux.dll
BHO-{3248f342-70c6-418d-a300-b8e925e95556} - c:\program files\Jeux-\tbJeux.dll
Toolbar-{3248f342-70c6-418d-a300-b8e925e95556} - c:\program files\Jeux-\tbJeux.dll
WebBrowser-{BA14329E-9550-4989-B3F2-9732E92D17CC} - (no file)
WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)
WebBrowser-{CD90BF73-20F6-44EF-993D-BB920303BD2E} - (no file)
WebBrowser-{3248F342-70C6-418D-A300-B8E925E95556} - c:\program files\Jeux-\tbJeux.dll
HKLM-Run-HncUpdate - c:\hnc\HncUpdate.exe
AddRemove-IMBoosterARP - c:\program files\Iminent\IMBooster\inst\Bootstrapper\Bootstrapper.exe
AddRemove-Jeux- Toolbar - c:\progra~1\Jeux-\UNWISE.EXE
AddRemove-Keyword Search - c:\program files\Keyword Search\uninstall.exe
AddRemove-ReducBarre - c:\program files\ReducBarre\bt-uninst.exe
AddRemove-01_Simmental - c:\program files\SAMSUNG\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\program files\SAMSUNG\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\program files\SAMSUNG\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\SAMSUNG\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-05_Sloan - c:\program files\SAMSUNG\USB Drivers\05_Sloan\Uninstall.exe
AddRemove-06_Spencer - c:\program files\SAMSUNG\USB Drivers\06_Spencer\Uninstall.exe
AddRemove-07_Schorl - c:\program files\SAMSUNG\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-08_EMPChipset - c:\program files\SAMSUNG\USB Drivers\08_EMPChipset\Uninstall.exe
AddRemove-09_Hsp - c:\program files\SAMSUNG\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - c:\program files\SAMSUNG\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-12_Symbian_USB_Download_Driver - c:\program files\SAMSUNG\USB Drivers\12_Symbian_USB_Download_Driver\Uninstall.exe
AddRemove-15_Symbian_Samsung_PC_DLC_Driver - c:\program files\SAMSUNG\USB Drivers\15_Symbian_Samsung_PC_DLC_Driver\Uninstall.exe
AddRemove-16_Shrewsbury - c:\program files\SAMSUNG\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-17_EMP_Chipset2 - c:\program files\SAMSUNG\USB Drivers\17_EMP_Chipset2\Uninstall.exe
AddRemove-18_Zinia_Serial_Driver - c:\program files\SAMSUNG\USB Drivers\18_Zinia_Serial_Driver\Uninstall.exe
AddRemove-19_VIA_driver - c:\program files\SAMSUNG\USB Drivers\19_VIA_driver\Uninstall.exe
AddRemove-20_NXP_Driver - c:\program files\SAMSUNG\USB Drivers\20_NXP_Driver\Uninstall.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-4293211140-3593489584-51308726-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-4293211140-3593489584-51308726-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_USERS\S-1-5-21-4293211140-3593489584-51308726-1000\Software\SecuROM\License information*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2011-09-01 18:15:24
ComboFix-quarantined-files.txt 2011-09-01 16:15
.
Pre-Run: 826?471?649?280 octets libres
Post-Run: 826?026?000?384 octets libres
.
- - End Of File - - D33359558D8DB18766F44BCD5F058959
ComboFix 11-09-01.02 - Lee 01/09/2011 18:06:42.1.4 - x86
Running from: c:\users\Lee\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Keyword Search
c:\program files\Keyword Search\uninstall.exe
c:\users\Lee\AppData\Roaming\Microsoft\Windows\Recent\Thumbs.db
c:\windows\system32\E_FD4BCDE.DLL
c:\windows\system32\lvci13101216.dll
c:\windows\system32\lvci13251014.dll
c:\windows\system32\muzapp.exe
c:\windows\system32\system32
c:\windows\system32\system32\cis-2.4.dll
c:\windows\system32\system32\issacapi_bs-2.3.dll
c:\windows\system32\system32\issacapi_pe-2.3.dll
c:\windows\system32\system32\issacapi_se-2.3.dll
c:\windows\system32\system32\MACXMLProto.dll
c:\windows\system32\system32\MaDRM.dll
c:\windows\system32\system32\MaJGUILib.dll
c:\windows\system32\system32\MaJUtilLib.dll
c:\windows\system32\system32\MAMACExtract.dll
c:\windows\system32\system32\MASetupCaller.dll
c:\windows\system32\system32\MASetupCleaner.exe
c:\windows\system32\system32\MaXMLProto.dll
c:\windows\system32\system32\MK_Lyric.dll
c:\windows\system32\system32\MSCLib.dll
c:\windows\system32\system32\MSFLib.dll
c:\windows\system32\system32\MSLUR71.dll
c:\windows\system32\system32\msvcp60.dll
c:\windows\system32\system32\MTTELECHIP.dll
c:\windows\system32\system32\MTXSYNCICON.dll
c:\windows\system32\system32\muzaf1.dll
c:\windows\system32\system32\muzapp.dll
c:\windows\system32\system32\muzapp.exe
c:\windows\system32\system32\muzdecode.ax
c:\windows\system32\system32\muzeffect.ax
c:\windows\system32\system32\muzmp4sp.ax
c:\windows\system32\system32\muzmpgsp.ax
c:\windows\system32\system32\muzoggsp.ax
c:\windows\system32\system32\muzwmts.dll
c:\windows\system32\system32\psapi.dll
c:\windows\unin0412.exe
.
.
((((((((((((((((((((((((( Files Created from 2011-08-01 to 2011-09-01 )))))))))))))))))))))))))))))))
.
.
2011-09-01 16:14 . 2011-09-01 16:14 -------- d-----w- c:\users\Lee\AppData\Local\temp
2011-09-01 16:14 . 2011-09-01 16:14 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-08-30 07:46 . 2011-08-12 02:44 7152464 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C3403C07-7C06-4DA7-AD43-887A0F3FDC23}\mpengine.dll
2011-08-27 10:10 . 2011-08-27 10:10 -------- d-----w- c:\users\Lee\AppData\Roaming\Malwarebytes
2011-08-27 10:10 . 2011-07-06 17:52 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-08-27 10:10 . 2011-08-27 10:10 -------- d-----w- c:\programdata\Malwarebytes
2011-08-27 10:10 . 2011-07-06 17:52 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-08-27 10:10 . 2011-08-27 10:10 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-08-25 21:52 . 2011-08-25 21:53 -------- d-----w- c:\users\Lee\??
2011-08-24 07:39 . 2011-07-09 04:30 2048 ----a-w- c:\windows\system32\tzres.dll
2011-08-23 11:29 . 2011-08-23 11:29 512 ------w- C:\PhysicalMBR.bin
2011-08-18 00:49 . 2011-08-18 00:53 -------- d-----w- c:\program files\Common Files\Steam
2011-08-18 00:49 . 2011-09-01 11:43 -------- d-----w- c:\program files\Steam
2011-08-14 08:30 . 2011-08-14 08:30 -------- d-----w- c:\users\Lee\AppData\Local\Ilivid Player
2011-08-14 08:30 . 2011-08-14 08:30 -------- d--h--w- c:\programdata\{9CD61942-8DA1-4781-925C-4FE1471E0820}
2011-08-14 08:28 . 2011-08-14 08:28 -------- d-----w- c:\users\Lee\AppData\Local\PackageAware
2011-08-05 10:52 . 2011-08-05 10:52 -------- d-----w- c:\program files\iPod
2011-08-05 10:51 . 2011-08-05 10:51 -------- d-----w- c:\program files\Bonjour
2011-08-05 10:48 . 2011-08-05 10:48 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin7.dll
2011-08-05 10:48 . 2011-08-05 10:48 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2011-08-05 10:48 . 2011-08-05 10:48 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2011-08-05 10:48 . 2011-08-05 10:48 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2011-08-05 10:48 . 2011-08-05 10:48 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2011-08-05 10:48 . 2011-08-05 10:48 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2011-08-05 10:48 . 2011-08-05 10:48 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2011-08-05 10:48 . 2011-08-05 10:48 -------- d-----w- c:\program files\QuickTime
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-13 09:23 . 2011-07-01 12:44 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-07-12 09:20 . 2011-07-12 09:20 83816 ----a-w- c:\windows\system32\dns-sd.exe
2011-07-12 09:20 . 2011-07-12 09:20 73064 ----a-w- c:\windows\system32\dnssd.dll
2011-07-12 09:20 . 2011-07-12 09:20 50536 ----a-w- c:\windows\system32\jdns_sd.dll
2011-07-12 09:20 . 2011-07-12 09:20 178536 ----a-w- c:\windows\system32\dnssdX.dll
2011-07-05 16:37 . 2011-07-05 16:37 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2011-07-05 16:37 . 2011-07-05 16:37 69632 ----a-w- c:\windows\system32\QuickTime.qts
2011-07-04 11:43 . 2011-04-11 20:58 40112 ----a-w- c:\windows\avastSS.scr
2011-07-04 11:43 . 2011-04-11 20:58 199304 ----a-w- c:\windows\system32\aswBoot.exe
2011-07-04 11:36 . 2011-04-11 20:58 441176 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-07-04 11:36 . 2011-04-11 20:59 309848 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-07-04 11:35 . 2011-04-11 20:58 43608 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-07-04 11:32 . 2011-04-11 20:58 25432 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-07-04 11:32 . 2011-04-11 20:58 54104 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-07-04 11:32 . 2011-04-11 20:59 19544 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-06-12 23:27 . 2011-06-12 23:27 43520 ----a-w- c:\windows\system32\CmdLineExt03.dll
2011-06-11 02:37 . 2011-07-13 06:45 2332672 ----a-w- c:\windows\system32\win32k.sys
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-07-04 11:43 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"KiesTrayAgent"="c:\program files\Samsung\Kies\/\KiesTrayAgent.exe" [2010-07-28 3365176]
"DaumCleaner"="c:\program files\Daum\Cleaner\DaumCleaner.exe" [2011-07-29 3089800]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2009-12-09 284696]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-02-02 98304]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2009-12-03 8120864]
"LWS"="c:\program files\Logitech\LWS\Webcam Software\LWS.exe" [2011-03-01 190808]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-07-04 3493720]
"PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2010-04-12 180224]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2011-07-05 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-07-19 421736]
.
c:\users\Lee\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
hp psc 1000 series.lnk - c:\program files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe [2002-12-2 147456]
hpoddt01.exe.lnk - c:\program files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [2002-12-2 40960]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Service Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-08-21 135664]
R3 DaumCleanerService;DaumCleanerService;c:\program files\Daum\Cleaner\DaumCleanerService.exe [2011-07-29 161160]
R3 gupdatem;Service Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-08-21 135664]
R3 scsk5;SCSK5 Driver Service;c:\windows\system32\drivers\scsk5.sys [x]
R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 98432]
R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 14848]
R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 123648]
R3 ss_bserd;SAMSUNG USB Mobile Logging Driver;c:\windows\system32\DRIVERS\ss_bserd.sys [2009-09-19 100224]
R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2010-08-22 1343400]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-02-03 172032]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-07-04 54104]
S2 dgdersvc;Device Error Recovery Service;c:\windows\system32\dgdersvc.exe [2010-07-26 95568]
S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2009-12-22 217088]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-12-09 13336]
S2 UMVPFSrv;UMVPFSrv;c:\program files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2011-04-01 428640]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [2010-02-03 5313536]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-02-03 150016]
S3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [2010-07-26 18136]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2010-07-26 36640]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-11-05 230912]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - FSUSBEXDISK
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
Contents of the 'Scheduled Tasks' folder
.
2011-09-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-08-21 15:20]
.
2011-09-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-08-21 15:20]
.
2011-08-31 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4293211140-3593489584-51308726-1000Core.job
- c:\users\Lee\AppData\Local\Google\Update\GoogleUpdate.exe [2011-04-18 09:20]
.
2011-09-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4293211140-3593489584-51308726-1000UA.job
- c:\users\Lee\AppData\Local\Google\Update\GoogleUpdate.exe [2011-04-18 09:20]
.
.
------- Supplementary Scan -------
.
uInternet Settings,ProxyOverride = *.local
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
IE: {{0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - https://www.ebay.fr
TCP: DhcpNameServer = 212.27.40.241 212.27.40.240
TCP: Interfaces\{171CBB1B-B7C7-48DF-975A-34C94CDB7E05}: NameServer = 85.17.255.198,46.19.33.120
DPF: {180C8380-22BA-4A62-A0E8-79F8DCE56B19} - hxxp://sub.sharebox.co.kr/ShareBoxCtrl.cab
DPF: {27E4B2A9-D554-40DE-B6CD-F11E9B44FBD0} - hxxp://simfile.chol.com/activex/SimFileControl.cab
DPF: {48ACDFDC-9F77-422E-A207-03E4FCE6BF5C} - hxxp://yahoo.myfolder.net/InnoFD.cab
DPF: {66413DC2-F891-40BC-822D-B7EEC8ADC281} - hxxp://img.shinhan.com/rib/common/ProWorksGrid_86.cab
DPF: {9A7D9941-6DB0-4AD7-8454-509D2793C5E8} - hxxp://beefile.com/mmsv/BeefileWebControl.CAB
DPF: {B9B38E70-EEF6-4E3A-AE84-DDE59A053B7C} - hxxp://mail.daum.net/hanmail-ax/DaumActiveX/2_0_0_9/DaumActiveX.cab?ver=2,0,0,9
DPF: {F54F8CD6-BF63-452F-AFC9-49103EAE5E8B} - hxxp://down.multidownload.co.kr/info/MultiDownloadActProj.cab
.
- - - - ORPHANS REMOVED - - - -
.
URLSearchHooks-{ba14329e-9550-4989-b3f2-9732e92d17cc} - (no file)
URLSearchHooks-{cd90bf73-20f6-44ef-993d-bb920303bd2e} - (no file)
URLSearchHooks-{3248f342-70c6-418d-a300-b8e925e95556} - c:\program files\Jeux-\tbJeux.dll
BHO-{3248f342-70c6-418d-a300-b8e925e95556} - c:\program files\Jeux-\tbJeux.dll
Toolbar-{3248f342-70c6-418d-a300-b8e925e95556} - c:\program files\Jeux-\tbJeux.dll
WebBrowser-{BA14329E-9550-4989-B3F2-9732E92D17CC} - (no file)
WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)
WebBrowser-{CD90BF73-20F6-44EF-993D-BB920303BD2E} - (no file)
WebBrowser-{3248F342-70C6-418D-A300-B8E925E95556} - c:\program files\Jeux-\tbJeux.dll
HKLM-Run-HncUpdate - c:\hnc\HncUpdate.exe
AddRemove-IMBoosterARP - c:\program files\Iminent\IMBooster\inst\Bootstrapper\Bootstrapper.exe
AddRemove-Jeux- Toolbar - c:\progra~1\Jeux-\UNWISE.EXE
AddRemove-Keyword Search - c:\program files\Keyword Search\uninstall.exe
AddRemove-ReducBarre - c:\program files\ReducBarre\bt-uninst.exe
AddRemove-01_Simmental - c:\program files\SAMSUNG\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\program files\SAMSUNG\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\program files\SAMSUNG\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\SAMSUNG\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-05_Sloan - c:\program files\SAMSUNG\USB Drivers\05_Sloan\Uninstall.exe
AddRemove-06_Spencer - c:\program files\SAMSUNG\USB Drivers\06_Spencer\Uninstall.exe
AddRemove-07_Schorl - c:\program files\SAMSUNG\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-08_EMPChipset - c:\program files\SAMSUNG\USB Drivers\08_EMPChipset\Uninstall.exe
AddRemove-09_Hsp - c:\program files\SAMSUNG\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - c:\program files\SAMSUNG\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-12_Symbian_USB_Download_Driver - c:\program files\SAMSUNG\USB Drivers\12_Symbian_USB_Download_Driver\Uninstall.exe
AddRemove-15_Symbian_Samsung_PC_DLC_Driver - c:\program files\SAMSUNG\USB Drivers\15_Symbian_Samsung_PC_DLC_Driver\Uninstall.exe
AddRemove-16_Shrewsbury - c:\program files\SAMSUNG\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-17_EMP_Chipset2 - c:\program files\SAMSUNG\USB Drivers\17_EMP_Chipset2\Uninstall.exe
AddRemove-18_Zinia_Serial_Driver - c:\program files\SAMSUNG\USB Drivers\18_Zinia_Serial_Driver\Uninstall.exe
AddRemove-19_VIA_driver - c:\program files\SAMSUNG\USB Drivers\19_VIA_driver\Uninstall.exe
AddRemove-20_NXP_Driver - c:\program files\SAMSUNG\USB Drivers\20_NXP_Driver\Uninstall.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-4293211140-3593489584-51308726-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-4293211140-3593489584-51308726-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_USERS\S-1-5-21-4293211140-3593489584-51308726-1000\Software\SecuROM\License information*]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2011-09-01 18:15:24
ComboFix-quarantined-files.txt 2011-09-01 16:15
.
Pre-Run: 826?471?649?280 octets libres
Post-Run: 826?026?000?384 octets libres
.
- - End Of File - - D33359558D8DB18766F44BCD5F058959
supprime ce fichier en gras en suivant le lien:
c:\users\Lee\AppData\Local\Ilivid Player
=================
tu as mis daumcleaner?
analyse ce fichier en gras sur virus total et colle le rapport http://www.virustotal.com/index.html
c:\program files\Daum\Cleaner\DaumCleaner.exe
c:\users\Lee\AppData\Local\Ilivid Player
=================
tu as mis daumcleaner?
analyse ce fichier en gras sur virus total et colle le rapport http://www.virustotal.com/index.html
c:\program files\Daum\Cleaner\DaumCleaner.exe
File name: DaumCleaner.exe
Submission date: 2011-09-01 19:59:53 (UTC)
Current status: finished
Result: 1/ 44 (2.3%)
Submission date: 2011-09-01 19:59:53 (UTC)
Current status: finished
Result: 1/ 44 (2.3%)
Toujours pareil pour Youtube, je me demande si c'est moi où si tout le monde commence à avoir des pubs sur youtube (nouvelle page du navigateur qui s'ouvre), sur certains sites ça me semblait normal du moment que c'était de temps en temps mais voilà ça dépend des sites.
tu peux vérifier avec un antivirus en ligne
sinon donne moi des liens de youytube pour voir si j'ai aussi les pubs
sinon donne moi des liens de youytube pour voir si j'ai aussi les pubs
C'est assez aléatoire https://www.youtube.com/watch?v=KQ6zr6kCPj8 par exmple mais là je n'ai pas de pubs, donc je dirai que c'est aléatoire.Un clic sur un lien ou sur la barre de recherche et c'est pareil.
tu as une pub de quoi sur ce lien ?
désinstalle daumcleaner pour voir aussi
si cela persiste initialise ton navigateur:
https://forums.commentcamarche.net/forum/affich-37585758-reinitialiser-son-navigateur
désinstalle daumcleaner pour voir aussi
si cela persiste initialise ton navigateur:
https://forums.commentcamarche.net/forum/affich-37585758-reinitialiser-son-navigateur
