Comment supprimer "bigseekpro" ? Résolu/Fermé

Question

Bonjour, 
depuis un certain moment ma page d'accueil firefox a changer. Mon moteur de recherche aussi et quand j'ouvre un nouvel onglet cette page s'affiche http://www.bigseekpro.com/mp3rocket/%7B29663269-BDBD-46C1-B4B0-CDF0212EF7E8%7D?s_src=newtab ça m'énerve. Quelqu'un peut m'aider ????
 

Configuration: Windows 7 / Firefox 7.0.1

boule97 · Answer

Bonjour,

Tu es infecté, tu as du installer un programme contenant cette joyeuseté sans y faire attention :

- Télécharge Ad-Remover sur ton bureau.
- Si tu es sous Vista ou Windows 7 : clic droit dessus puis choisir "Exécuter en tant qu'administrateur".
- Clic sur l'option "Scanner"
- Patiente puis copie et colle ici le contenu du rapport généré.

thefred70 · Answer

Ok merci

thefred70 · Answer

======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 =======

Updated by TeamXscript on 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
website: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Launched at 13:41:50 on 25/10/2011, Normal boot

Microsoft Windows 7 Édition Starter  Service Pack 1 (X86) 
TOSHIBQ@TOSHIBQ-PC (TOSHIBA TOSHIBA NB305) 
 
============== SEARCH ==============


File found: C:\windows\system32\ConduitEngine.tmp
Folder found: C:\Users\TOSHIBQ\AppData\Roaming\Mozilla\FireFox\Profiles\a1wwhu57.default\extensions\{33E0DAA6-3AF3-D8B5-6752-10E949C61516}
Folder found: C:\Users\TOSHIBQ\AppData\Local\Conduit
Folder found: C:\Users\TOSHIBQ\AppData\LocalLow\Conduit
Folder found: C:\Program Files\Conduit
Folder found: C:\Users\TOSHIBQ\AppData\Roaming\Complitly
Folder found: C:\Program Files\Complitly
Folder found: C:\Users\TOSHIBQ\AppData\Roaming\OpenCandy
Folder found: C:\Users\TOSHIBQ\AppData\Local\OpenCandy
Folder found: C:\ProgramData\PopCap Games
Folder found: C:\Users\TOSHIBQ\AppData\LocalLow\PriceGong
Folder found: C:\Users\TOSHIBQ\AppData\LocalLow\ShoppingReport2
Folder found: C:\Program Files\ShoppingReport2
Folder found: C:\Users\TOSHIBQ\AppData\LocalLow\Toolbar4

Key found: HKLM\Software\Classes\CLSID\{D27FC31C-6E3D-4305-8D53-ACDAEFA5F862}
Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D27FC31C-6E3D-4305-8D53-ACDAEFA5F862}
Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D27FC31C-6E3D-4305-8D53-ACDAEFA5F862}
Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D27FC31C-6E3D-4305-8D53-ACDAEFA5F862}
Key found: HKLM\Software\Classes\Interface\{0EB3F101-224A-4B2B-9E5B-DF720857529C}
Key found: HKLM\Software\Classes\Interface\{384FE458-A963-450D-9187-EEFF81913FD0}
Key found: HKLM\Software\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Key found: HKLM\Software\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key found: HKLM\Software\Classes\Interface\{A1F1ECD3-4806-44C6-A869-F0DADF11C57C}
Key found: HKLM\Software\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Key found: HKLM\Software\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Key found: HKLM\Software\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Key found: HKLM\Software\Classes\TypeLib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6}
Key found: HKLM\Software\Classes\TypeLib\{D44FD6F0-9746-484E-B5C4-C66688393872}
Key found: HKLM\Software\Classes\Conduit.Engine
Key found: HKLM\Software\Classes\ShoppingReport2.HbAx
Key found: HKLM\Software\Classes\ShoppingReport2.HbAx.1
Key found: HKLM\Software\Classes\ShoppingReport2.HbInfoBand
Key found: HKLM\Software\Classes\ShoppingReport2.HbInfoBand.1
Key found: HKLM\Software\Classes\ShoppingReport2.IEButton
Key found: HKLM\Software\Classes\ShoppingReport2.IEButton.1
Key found: HKLM\Software\Classes\ShoppingReport2.IEButtonA
Key found: HKLM\Software\Classes\ShoppingReport2.IEButtonA.1
Key found: HKLM\Software\Classes\ShoppingReport2.RprtCtrl
Key found: HKLM\Software\Classes\ShoppingReport2.RprtCtrl.1
Key found: HKLM\Software\Classes\SuggestMeYes.SuggestMeYesBHO
Key found: HKLM\Software\Classes\SuggestMeYes.SuggestMeYesBHO.1
Key found: HKLM\Software\Classes\Toolbar.CT1210541
Key found: HKLM\Software\Classes\Toolbar.CT2851639
Key found: HKLM\Software\Classes\Toolbar.CT3080215
Key found: HKLM\Software\Conduit
Key found: HKLM\Software\ShoppingReport2
Key found: HKCU\Software\Complitly
Key found: HKCU\Software\Conduit
Key found: HKCU\Software\PopCap
Key found: HKCU\Software\ShoppingReport2
Key found: HKCU\Software\Zugo
Key found: HKCU\Software\AppDataLow\Toolbar
Key found: HKCU\Software\AppDataLow\Software\Conduit
Key found: HKCU\Software\AppDataLow\Software\PriceGong
Key found: HKCU\Software\AppDataLow\Software\ShoppingReport2
Key found: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Complitly_is1
Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\ShoppingReport2
Key found: HKLM\Software\Google\Chrome\Extensions\defdhglnppeioeflggkmglipcecffkhk

Value found: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{CA3EB689-8F09-4026-AA10-B9534C691CE0}
Value found: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}


============== ADDITIONNAL SCAN ==============

**** Mozilla Firefox Version [7.0.1 (fr)] ****

HKLM_MozillaPlugins\Adobe Reader (x)
HKCU_MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin (x)
Searchplugins\bing.xml (    hxxp://www.bing.com/search)
Components\browsercomps.dll (Mozilla Foundation)
HKLM_Extensions|searchpredict@speedbit.com - C:\Program Files\SearchPredict\PRFireFox (x)
HKLM_Extensions|{0329E7D6-6F54-462D-93F6-F5C3118BADF2} - C:\Program Files\SpeedBit Video Downloader\SPFireFox (x)
HKCU_Extensions|mozilla_cc@internetdownloadmanager.com - C:\Users\TOSHIBQ\AppData\Roaming\IDM\idmmzcc3

-- C:\Users\TOSHIBQ\AppData\Roaming\Mozilla\FireFox\Profiles\a1wwhu57.default --
Extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516} (Complitly - Speed up your search with your personal search suggestions tool)
Extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D} (?)

========================================

**** Google Chrome Version [14.0.835.202] ****

Extension\defdhglnppeioeflggkmglipcecffkhk (C:\Program Files\Complitly\chrome\ComplitlyChrome.crx) (?)
Extension\figdphohhlffelolcabcjpikobidapnk (C:\Users\TOSHIBQ\AppData\Local\Temp\figdphohhlffelolcabcjpikobidapnk.crx) (x)
Extension - jfmjfhklogoienhpfnppmbcbjfjnkonk (x)
Extension\kdnpfbghejbddakgogiibkcfcblmeaci (C:\Users\TOSHIBQ\AppData\Local\Temp\kdnpfbghejbddakgogiibkcfcblmeaci.crx) (?)
Extension\paoponfhfdfnjgddpnpjkambkcgdaaib (C:\Users\TOSHIBQ\AppData\Local\Temp\crx7753.tmp) (x)

-- C:\Users\TOSHIBQ\AppData\Local\Google\Chrome\User Data\Default --
Preferences - default_search_provider: "Google" (Enabled: true) (?)
Preferences - homepage: hxxp://www.google.fr/
Preferences - homepage_is_newtabpage: false
Plugin - Remoting Viewer (Enabled: true) (internal-remoting-viewer) (x)
Plugin - Native Client (Enabled: true) (C:\Users\TOSHIBQ\AppData\Local\Google\Chrome\Application\14.0.835.202\ppGoogleNaClPluginChrome.dll)
Plugin - Bing Bar (Enabled: true) (C:\Program Files\MSN Toolbar\Platform\5.0.1407.0
pwinext.dll) (x)
Plugin - RealJukebox NS Plugin (Enabled: true) (C:\Program Files\Real\RealPlayer\Netscape6
prjplug.dll) (x)
Plugin - Windows Live\u0099 Photo Gallery (Enabled: true) (C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll)
Plugin - RealNetworks(tm) Chrome Background Extension Plug-In (32-bit)  (Enabled: true) (C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins
prpchromebrowserrecordext.dll) (x)
Plugin - "Java" (Enabled: true)
Plugin - "Silverlight" (Enabled: true)
Plugin - "Remoting Viewer" (Enabled: true)
Plugin - "Native Client" (Enabled: true)
Plugin - "Bing Bar" (Enabled: true)
Plugin - "RealJukebox NS Plugin" (Enabled: true)
Plugin - "Windows Live\u0099 Photo Gallery" (Enabled: true)
Plugin - "RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) " (Enabled: true)
Preferences - urls_to_restore_on_startup:  hxxp://search.conduit.com/?ctid=ct1210541&SearchSource=48 

========================================

**** Internet Explorer Version [9.0.8112.16421] ****

HKCU_Main|Default_Page_URL - hxxp://fr.msn.com/?ocid=OIE9HP
HKCU_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157
HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Start Page - hxxp://www.bigseekpro.com/mp3rocket/{29663269-BDBD-46C1-B4B0-CDF0212EF7E8}
AboutUrls|Tabs - hxxp://www.bigseekpro.com/mp3rocket/{29663269-BDBD-46C1-B4B0-CDF0212EF7E8}?s_src=newtab
HKCU_URLSearchHooks|{09900DE8-1DCA-443F-9243-26FF581438AF} - "???????@Mail.Ru" (C:\Program Files\Mail.Ru\Sputnik\MailRuSputnik.dll)
HKCU_URLSearchHooks|{c34bfb11-eff0-4123-a7a5-79051ef24cf5} - "ChatVibes.com Toolbar" (C:\Program Files\ChatVibes.com\prxtbChat.dll)
HKCU_URLSearchHooks|{8567a644-e36c-470c-86cf-9c5b4f37db81} - "Online Sharing Toolbar" (C:\Program Files\Online_Sharing\prxtbOnli.dll)
HKCU_URLSearchHooks|{CA3EB689-8F09-4026-AA10-B9534C691CE0} - "ToolbarURLSearchHook Class" (C:\Program Files\MP3 Rocket DB Toolbar	bhelper.dll)
HKLM_URLSearchHooks|{8567a644-e36c-470c-86cf-9c5b4f37db81} - "Online Sharing Toolbar" (C:\Program Files\Online_Sharing\prxtbOnli.dll)
HKCU_SearchScopes\{06D246E6-1518-46C1-9F80-78E39C20148C} - "?" (?)
HKCU_SearchScopes\{7F4EFF06-7032-458e-AE16-1C1D8255C28A} - "SpeedBit Search" (hxxp://search.speedbit.com/searchresults.asp?src=default&q={searchTerms})
HKCU_SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e} - "Search" (hxxp://www.bigseekpro.com/search/browser/mp3rocket/{29663269-BDBD-46C1-B4B0-CDF0...)
HKCU_SearchScopes\{E88E0043-C9D4-4e33-8555-FEE4F5B63060} - "mail.ru: ????? ? ?????????" (hxxp://go.mail.ru/search?q={searchTerms}&utf8in=1&fr=ietb)
HKCU_SearchScopes\{FD5CD67F-DA82-6C3B-A049-4E82BBB6B6E2} - "Yahoo!" (hxxp://www.etypestart.com/s/?q={searchTerms}&src=defsearch&provider=&provider_na...)
HKLM_SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} - "uTorrentBar_FR Customized Web Search" (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...)
HKCU_Toolbar\ShellBrowser|{C55BBCD6-41AD-48AD-9953-3609C48EACC7} (x)
HKCU_Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} (x)
HKCU_Toolbar\WebBrowser|{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E} (x)
HKCU_Toolbar\WebBrowser|{C55BBCD6-41AD-48AD-9953-3609C48EACC7} (x)
HKCU_Toolbar\WebBrowser|{0329E7D6-6F54-462D-93F6-F5C3118BADF2} (C:\Program Files\SpeedBit Video Downloader\Toolbar	bcore3.dll) (x)
HKCU_Toolbar\WebBrowser|{09900DE8-1DCA-443F-9243-26FF581438AF} (C:\Program Files\Mail.Ru\Sputnik\MailRuSputnik.dll)
HKCU_Toolbar\WebBrowser|{C34BFB11-EFF0-4123-A7A5-79051EF24CF5} (C:\Program Files\ChatVibes.com\prxtbChat.dll)
HKLM_Toolbar|{98889811-442D-49dd-99D7-DC866BE87DBC} (C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.31.2\BabylonToolbarTlbr.dll) (x)
HKLM_Toolbar|{09900DE8-1DCA-443F-9243-26FF581438AF} (C:\Program Files\Mail.Ru\Sputnik\MailRuSputnik.dll)
HKLM_Toolbar|{c34bfb11-eff0-4123-a7a5-79051ef24cf5} (C:\Program Files\ChatVibes.com\prxtbChat.dll)
HKLM_Toolbar|{8567a644-e36c-470c-86cf-9c5b4f37db81} (C:\Program Files\Online_Sharing\prxtbOnli.dll)
HKLM_Toolbar|{338B4DFE-2E2C-4338-9E41-E176D497299E} (C:\Program Files\MP3 Rocket DB Toolbar	bcore3.dll)
HKCU_ElevationPolicy\{1024F1BE-76DC-40d5-AB98-664A4185E5FA} - C:\Users\TOSHIBQ\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe (Skype Limited)
HKCU_ElevationPolicy\{1902485B-CE75-42C1-BA2D-57E660793D9A} - C:\Program Files\Internet Download Manager\IEMonitor.exe (Tonec Inc.)
HKCU_ElevationPolicy\{30E4B230-AC56-4D52-B19E-36E2C3A2804D} - C:\Users\TOSHIBQ\AppData\Local\Hook Network\Raccourcis Internet Explorer 9\2.0.0.1\IE9PinnedSitesHelper.exe (Hook Network)
HKCU_ElevationPolicy\{603C4CC9-5DC6-4C44-873F-8281509DF953} - C:\Program Files\SpeedBit Video Downloader\Converter.exe (x)
HKCU_ElevationPolicy\{B40B5D5D-B7FB-4AA1-897E-65A14E9477BC} - C:\Program Files\Mail.Ru\Sputnik\SputnikHelper.exe (Mail.Ru)
HKCU_ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4} - C:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.)
HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\System32\wpcer.exe (x)
HKLM_ElevationPolicy\{08FF730A-494F-4cba-AA0B-E4F1D44715F9} - C:\Program Files\Norton Internet Security\Engine\19.0.0.128\symerr.exe (x)
HKLM_ElevationPolicy\{09E9B8FC-3D94-4A9B-AD2E-A64255121895} - C:\Program Files\Kaspersky Lab\Kaspersky PURE\klwtbws.exe (Kaspersky Lab)
HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\System32\winfxdocobj.exe (x)
HKLM_ElevationPolicy\{1024F1BE-76DC-40d5-AB98-664A4185E5FA} - C:\Users\TOSHIBQ\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe (Skype Limited)
HKLM_ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2} - C:\Program Files\Orbitdownloader\orbitdm.exe (x)
HKLM_ElevationPolicy\{4671F4B7-89F5-4701-B641-570278D5C856} - C:\Program Files\Kaspersky Lab\Kaspersky PURE\klwtblfs.exe (Kaspersky Lab)
HKLM_ElevationPolicy\{55D63CA6-E797-456A-82E9-156F80C89041} - C:\Users\TOSHIBQ\AppData\Local\Conduit\CT3080215\ChatVibes.comAutoUpdateHelper.exe (?)
HKLM_ElevationPolicy\{594F9FD6-9FFF-4D9F-84B0-6E5949756C95} - C:\Program Files\ChatVibes.com\ChatVibes.comToolbarHelper.exe (?)
HKLM_ElevationPolicy\{603C4CC9-5DC6-4C44-873F-8281509DF953} - C:\Program Files\SpeedBit Video Downloader\Converter.exe (x)
HKLM_ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291} - C:\Program Files\MP3 Rocket DB Toolbar\TbHelper2.exe (?)
HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x)
HKLM_ElevationPolicy\{823F4993-B6D9-49BA-86EB-F14B7D924A33} - C:\Users\TOSHIBQ\AppData\Local\Conduit\CT1210541\Online_SharingAutoUpdateHelper.exe (?)
HKLM_ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.31.2\BabylonToolbarsrv.exe (x)
HKLM_ElevationPolicy\{971DBD45-EF8F-4EBB-B00D-D9E9BC42580B} - C:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.)
HKLM_ElevationPolicy\{BAAD75C5-F8A6-4B71-82D9-DF637FA13CF3} - C:\Program Files\Mail.Ru\Sputnik\SputnikHelper.exe (Mail.Ru)
HKLM_ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4} - C:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.)
HKLM_ElevationPolicy\{F300C06E-203F-4006-85B7-CA6B761E0405} - C:\Program Files\Online_Sharing\Online_SharingToolbarHelper.exe (?)
BHO\{0055C089-8582-441B-A0BF-17B458C2A3A8} - "IDMIEHlprObj Class" (C:\Program Files\Internet Download Manager\IDMIECC.dll)
BHO\{2EECD738-5844-4a99-B4B6-146BF802613B} - "Babylon toolbar helper" (C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.31.2\bh\BabylonToolbar.dll) (x)
BHO\{8567a644-e36c-470c-86cf-9c5b4f37db81} - "Online Sharing Toolbar" (C:\Program Files\Online_Sharing\prxtbOnli.dll)
BHO\{8984B388-A5BB-4DF7-B274-77B879E179DB} - "MailRuBHO Class" (C:\Program Files\Mail.Ru\Sputnik\MailRuSputnik.dll)
BHO\{c34bfb11-eff0-4123-a7a5-79051ef24cf5} - "ChatVibes.com Toolbar" (C:\Program Files\ChatVibes.com\prxtbChat.dll)
BHO\{D27FC31C-6E3D-4305-8D53-ACDAEFA5F862} - "Complitly" (C:\Users\TOSHIBQ\AppData\Roaming\Complitly\Complitly.dll)
BHO\{FCBCCB87-9224-4B8D-B117-F56D924BEB18} - "SMTTB2009 Class" (C:\Program Files\MP3 Rocket DB Toolbar	bcore3.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 0 File(s)
C:\Program Files\Ad-Remover\Backup: 2 File(s)

C:\Ad-Report-SCAN[1].txt - 25/10/2011 13:42:01 (15057 Byte(s)) 
C:\Ad-Report-SCAN[2].txt - 25/10/2011 13:42:47 (4513 Byte(s)) 

End at: 13:46:16, 25/10/2011 
 
============== E.O.F ==============