Virus

Dac je vais voir merci pour ton aide.

Sujet résolu

j'ai pas dit qu on avait fini refais un scan OTL stp

Ok désolé =), pour OTL je lance juste analyse ou je met le truc en gras que ma dit avant ?

OTL.txt
https://pjjoint.malekal.com/files.php?id=OTL_20111220_s7t10p5b13s8

Extras.txt
https://pjjoint.malekal.com/files.php?id=OTL_Extras_20111220_t13g9i12r9n7

▶ Télécharge ici : Ad-remover sur ton bureau :


▶ Déconnecte toi et ferme toutes applications en cours !

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."

▶ sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut .

▶ clique le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .

▶ Au menu principal choisis "option Nettoyer" et tape sur [entrée] .

▶ Laisse travailler l'outil et ne touche à rien ...

▶ Poste le rapport qui apparait à la fin , sur le forum ...

( Le rapport est sauvegardé aussi sous C:\Ad-report.log )
( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 01:37:10 le 22/12/2011, Mode normal

Microsoft Windows 7 Édition Familiale Premium Service Pack 1 (X86)
adam@ADAM-PC (Dell Inc. Vostro 1015)

============== ACTION(S) ==============


Fichier supprimé: C:\Users\adam\AppData\Roaming\Mozilla\FireFox\Profiles\a800i2cw.default\searchplugins\web-search.xml
Fichier supprimé: C:\Users\adam\Downloads\vshare-plugin.exe

(!) -- Fichiers temporaires supprimés.


-- Fichier ouvert: C:\Users\adam\AppData\Roaming\Mozilla\FireFox\Profiles\a800i2cw.default\Prefs.js --
Ligne supprimée: user_pref("extensions.enabledItems", "{22C7F6C6-8D67-4534-92B5-529A0EC09405}:5.8.0.1092,engine@condu...
Ligne supprimée: user_pref("extensions.vshare@toolbar.update.enabled", false);
Ligne supprimée: user_pref("vshare.install.date", "1303776000000");
Ligne supprimée: user_pref("vshare.install.dumpFileCount", 0);
Ligne supprimée: user_pref("vshare.install.dumpFileDisabled", false);
Ligne supprimée: user_pref("vshare.install.finished", "1.0.0");
Ligne supprimée: user_pref("vshare.install.guid", "{c40b6c3d-a8d7-4844-b5e8-01436e298334}");
Ligne supprimée: user_pref("vshare.install.isHidden", true);
Ligne supprimée: user_pref("vshare.install.istoolbarhp", true);
Ligne supprimée: user_pref("vshare.install.istoolbarsearch", true);
Ligne supprimée: user_pref("vshare.install.laststatreq", "1308614400000");
Ligne supprimée: user_pref("vshare.install.newtab", true);
Ligne supprimée: user_pref("vshare.install.overlayVersion", 1);
Ligne supprimée: user_pref("vshare.install.userHPSettings", "hxxp://www.msn.fr/");
Ligne supprimée: user_pref("vshare.install.userSPSettings", "");
-- Fichier Fermé --


Clé supprimée: HKLM\Software\Classes\CLSID\{3B9AEEC9-2998-400B-9B38-2043A76EDF14}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3B9AEEC9-2998-400B-9B38-2043A76EDF14}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3B9AEEC9-2998-400B-9B38-2043A76EDF14}
Clé supprimée: HKLM\Software\Classes\CLSID\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Clé supprimée: HKLM\Software\Classes\CLSID\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Clé supprimée: HKLM\Software\Classes\CLSID\{D77FCBA6-FD49-4B21-A05C-45E769E32907}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D77FCBA6-FD49-4B21-A05C-45E769E32907}
Clé supprimée: HKLM\Software\Classes\TypeLib\{79D60450-56C5-4A8C-9321-6D5BC2A81E5A}
Clé supprimée: HKLM\Software\Classes\TypeLib\{99C22A61-21BA-4F81-85FF-CDC9EB5DB10B}
Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{595471C7-8D56-4DD2-A119-2D27D48307F0}


============== SCAN ADDITIONNEL ==============

**** Mozilla Firefox Version [8.0 (fr)] ****

Plugins\npvsharetvplg.dll (vShare.tv )
HKLM_MozillaPlugins\@checkpoint.com/FFApi (x)
HKLM_MozillaPlugins\Adobe Reader (x)
Searchplugins\bing.xml ( hxxp://www.bing.com/search)
Components\browsercomps.dll (Mozilla Foundation)
HKLM_Extensions|{22C7F6C6-8D67-4534-92B5-529A0EC09405} - c:\Program Files\Trend Micro\Client Server Security Agent\bho\1009\FirefoxExtension

-- C:\Users\adam\AppData\Roaming\Mozilla\FireFox\Profiles\a800i2cw.default --
Extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D} (??????? @Mail.Ru)
Searchplugins\mailru---.xml (?)
Searchplugins\startsear.xml (?)
Prefs.js - browser.download.lastDir, C:\\Users\\adam\\Pictures
Prefs.js - browser.search.defaultenginename, hxxp://www.mail.ru/
Prefs.js - browser.search.defaulturl, hxxp://go.mail.ru/search?fr=fftb&utf8in&q=
Prefs.js - browser.search.selectedEngine, Web Search...
Prefs.js - browser.startup.homepage, msn.fr
Prefs.js - browser.startup.homepage_override.buildID, 20111104165243
Prefs.js - browser.startup.homepage_override.mstone, rv:8.0
Prefs.js - keyword.URL, hxxp://go.mail.ru/search?utf8in=1&fr=fftbUFix&q=

========================================

**** Internet Explorer Version [9.0.8112.16421] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_URLSearchHooks|{09900DE8-1DCA-443F-9243-26FF581438AF} (x)
HKCU_SearchScopes\{CD9CD07F-03E7-4387-8723-74C2058554EE} - "Web Search" (hxxp://startsear.ch/?aff=1&src=sp&cf=ada3cff8-fdaa-11e0-87ff-889ffa54977e&q={sea...)
HKCU_SearchScopes\{E88E0043-C9D4-4e33-8555-FEE4F5B63060} - "mail.ru: ????? ? ?????????" (hxxp://go.mail.ru/search?q={searchTerms}&utf8in=1&fr=ietb)
HKCU_Toolbar\WebBrowser|{09900DE8-1DCA-443F-9243-26FF581438AF} (x)
HKCU_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files\Veetle\Player\vtl_hfs.exe (?)
HKCU_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files\Veetle\Player\player.exe (?)
HKCU_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files\Veetle\Player\vtl_hfax.exe (?)
HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\System32\wpcer.exe (x)
HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\System32\winfxdocobj.exe (x)
HKLM_ElevationPolicy\{6052BF20-EA23-4A04-B3C1-A20EFE01A95A} - C:\Program Files\Veetle\Player\vtl_hfs.exe (?)
HKLM_ElevationPolicy\{680FA47E-AB59-46BE-B594-7358726E108B} - C:\Program Files\Veetle\Player\player.exe (?)
HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x)
HKLM_ElevationPolicy\{E8BC6C2B-DD90-4397-96EB-2AAF0E48ABE6} - C:\Program Files\Veetle\Player\vtl_hfax.exe (?)
BHO\{1CA1377B-DC1D-4A52-9585-6E06050FAC53} - "TmIEPlugInBHO Class" (c:\Program Files\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 2 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 14 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 22/12/2011 01:37:19 (6942 Octet(s))

Fin à: 01:38:10, 22/12/2011

============== E.O.F ==============

Tu sais pas comment supprimer Mail.ru définitivement de l'ordinateur stp ? j'ai tout fait j'ai désinstaller le programme mais il y a des chose qui veulent pas partir.

hello

Télécharge SEAF.exe de C_XX


*Double clique sur SF.exe (Exécuter en tant qu'administrateur pour Vista/7) .

*Une fenêtre va s'ouvrir .

*Tape Mail.ru

dans cette fenêtre

confirme la recherche "aussi" dans le registre et [Entrée].

*Patiente pendant la recherche.

*Une fenêtre avec un log.txt va s'afficher.

*Copie/colle ce rapport dans ta prochaine réponse.

Bonjour,

1. ========================= SEAF 1.0.1.0 - C_XX
2.
3. Commencé à: 13:24:07 le 22/12/2011
4.
5. Valeur(s) recherchée(s):
6. Mail.ru
7.
8. Légende: TC => Date de création, TM => Date de modification, DA => Dernier accès
9.
10. (!) --- Recherche registre
11.
12. ====== Fichier(s) ======
13.
14.
15. "C:\Qoobox\Quarantine\Registry_backups\MSConfigStartUp-Guard.Mail.ru.reg.dat" [ ARCHIVE | 940 o ]
16. TC: 15/12/2011,20:26:10 | TM: 15/12/2011,20:26:10 | DA: 15/12/2011,20:26:10
17.
18.
19. =========================
20.
21.
22. "C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\content\mail.ru.xml" [ NOT_CONTENT_INDEXED|ARCHIVE | 11 Ko ]
23. TC: 15/12/2011,23:00:26 | TM: 13/12/2011,15:38:02 | DA: 13/12/2011,15:38:02
24.
25.
26. =========================
27.
28.
29. "C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\locale\ru-RU\mail.ru.searchtools.xml" [ NOT_CONTENT_INDEXED|ARCHIVE | 1 Ko ]
30. TC: 15/12/2011,23:00:25 | TM: 13/12/2011,15:38:04 | DA: 13/12/2011,15:38:04
31.
32.
33. =========================
34.
35.
36. "C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\locale\ru-RU\mail.ru.search_provider.xml" [ NOT_CONTENT_INDEXED|ARCHIVE | 1 Ko ]
37. TC: 15/12/2011,23:00:24 | TM: 13/12/2011,15:38:04 | DA: 13/12/2011,15:38:04
38.
39.
40. =========================
41.
42.
43. "C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\locale\ru-RU\mail.ru.toolbar.properties" [ NOT_CONTENT_INDEXED|ARCHIVE | 3 Ko ]
44. TC: 15/12/2011,23:00:26 | TM: 13/12/2011,15:38:04 | DA: 13/12/2011,15:38:04
45.
46.
47. =========================
48.
49.
50. "C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\locale\ru-RU\mail.ru.weather_city.xml" [ NOT_CONTENT_INDEXED|ARCHIVE | 118 Ko ]
51. TC: 15/12/2011,23:00:24 | TM: 13/12/2011,15:38:04 | DA: 13/12/2011,15:38:04
52.
53.
54. =========================
55.
56.
57. "C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\locale\ru-RU\sputnik\mail.ru.cyrrencies.xml" [ NOT_CONTENT_INDEXED|ARCHIVE | 1 Ko ]
58. TC: 15/12/2011,23:00:25 | TM: 13/12/2011,15:38:04 | DA: 13/12/2011,15:38:04
59.
60.
61. =========================
62.
63.
64. "C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\locale\ru-RU\sputnik\mail.ru.fast-services.xml" [ NOT_CONTENT_INDEXED|ARCHIVE | 5 Ko ]
65. TC: 15/12/2011,23:00:25 | TM: 13/12/2011,15:38:04 | DA: 13/12/2011,15:38:04
66.
67.
68. =========================
69.
70.
71. "C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\locale\ru-RU\sputnik\mail.ru.search.xml" [ NOT_CONTENT_INDEXED|ARCHIVE | 4 Ko ]
72. TC: 15/12/2011,23:00:26 | TM: 13/12/2011,15:38:04 | DA: 13/12/2011,15:38:04
73.
74.
75. =========================
76.
77.
78. "C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\locale\ru-RU\sputnik\mail.ru.services.xml" [ NOT_CONTENT_INDEXED|ARCHIVE | 12 Ko ]
79. TC: 15/12/2011,23:00:25 | TM: 13/12/2011,15:38:04 | DA: 13/12/2011,15:38:04
80.
81.
82. =========================
83.
84.
85. "C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\locale\ru-RU\sputnik\mail.ru.toolbar.dtd" [ NOT_CONTENT_INDEXED|ARCHIVE | 9 Ko ]
86. TC: 15/12/2011,23:00:26 | TM: 13/12/2011,15:38:04 | DA: 13/12/2011,15:38:04
87.
88.
89. =========================
90.
91.
92. "C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\skin\mail.ru.search.css" [ NOT_CONTENT_INDEXED|ARCHIVE | 190 o ]
93. TC: 15/12/2011,23:00:24 | TM: 13/12/2011,15:38:04 | DA: 13/12/2011,15:38:04
94.
95.
96. =========================
97.
98.
99. "C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\skin\mail.ru.tabs.css" [ NOT_CONTENT_INDEXED|ARCHIVE | 6 Ko ]
100. TC: 15/12/2011,23:00:25 | TM: 13/12/2011,15:38:04 | DA: 13/12/2011,15:38:04
101.
102.
103. =========================
104.
105.
106. "C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\skin\mail.ru.toolbar.css" [ NOT_CONTENT_INDEXED|ARCHIVE | 10 Ko ]
107. TC: 15/12/2011,23:00:25 | TM: 13/12/2011,15:38:04 | DA: 13/12/2011,15:38:04
108.
109.
110. =========================
111.
112.
113. "C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\defaults\preferences\mail.ru.js" [ NOT_CONTENT_INDEXED|ARCHIVE | 1 Ko ]
114. TC: 15/12/2011,23:00:25 | TM: 13/12/2011,15:38:04 | DA: 13/12/2011,15:38:04
115.
116.
117. =========================
118.
119.
120. "C:\Users\adam\Favorites\Mail.Ru ????? - ????????? ??? ???????!.url" [ ARCHIVE | 210 o ]
121. TC: 18/03/2011,01:06:36 | TM: 02/11/2011,22:30:09 | DA: 20/07/2011,14:00:21
122.
123.
124. =========================
125.
126.
127. "C:\Users\adam\Favorites\Mail.Ru.url" [ ARCHIVE | 144 o ]
128. TC: 18/03/2011,01:06:36 | TM: 02/11/2011,22:30:09 | DA: 20/07/2011,14:00:21
129.
130.
131. =========================
132.
133.
134.
135. ====== Entrée(s) du registre ======
136.
137.
138. [HKLM\Software\Mail.Ru]
139. DA: 21/12/2011 00:18:36
140.
141. [HKLM\Software\Microsoft\MediaPlayer\UIPlugins\{171B4B25-2DD9-4b0b-912A-1AFAE79369B8}]
142. "FriendlyName"="Mail.Ru ìîäóëü äëÿ Windows Media" (REG_SZ)
143.
144. [HKLM\Software\Microsoft\MediaPlayer\UIPlugins\{171B4B25-2DD9-4b0b-912A-1AFAE79369B8}]
145. "Description"="Îòîáðàæàåò òåêóùóþ ìåëîäèþ â ñòàòóñå Mail.Ru Àãåíò." (REG_SZ)
146.
147. [HKU\.DEFAULT\Software\AppDataLow\Software\Mail.Ru]
148. DA: 18/03/2011 01:11:38
149.
150. [HKU\S-1-5-21-1324639905-1579318482-2899199702-1002\Software\AppDataLow\Software\Mail.Ru]
151. DA: 15/12/2011 13:16:32
152.
153. [HKU\S-1-5-21-1324639905-1579318482-2899199702-1002\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\5d686216_0]
154. ""="{0.0.0.00000000}.{63050f51-68aa-4e9b-9ad6-50ab41d5ab14}|\Device\HarddiskVolume3\Program Files\Mail.Ru\Agent\magent.exe%b{00000000-0000-0000-0000-000000000000}" (REG_SZ)
155.
156. [HKU\S-1-5-21-1324639905-1579318482-2899199702-1002\Software\Microsoft\Internet Explorer\SearchScopes]
157. "DoNotAskAgain"="live.com
158. mail.ru
159. conduit.com" (REG_MULTI_SZ)
160.
161. [HKU\S-1-5-21-1324639905-1579318482-2899199702-1002\Software\Microsoft\Internet Explorer\SearchScopes\{E88E0043-C9D4-4e33-8555-FEE4F5B63060}]
162. "DisplayName"="mail.ru: ????? ? ?????????" (REG_SZ)
163.
164. [HKU\S-1-5-21-1324639905-1579318482-2899199702-1002\Software\Microsoft\Internet Explorer\SearchScopes\{E88E0043-C9D4-4e33-8555-FEE4F5B63060}]
165. "URL"="https://go.mail.ru/{searchTerms}&utf8in=1&fr=ietb" (REG_SZ)
166.
167. [HKU\S-1-5-21-1324639905-1579318482-2899199702-1002\Software\Microsoft\Internet Explorer\SearchScopes\{E88E0043-C9D4-4e33-8555-FEE4F5B63060}]
168. "SuggestionsURL"="http://suggests.go.mail.ru/ie8?q={searchTerms}" (REG_SZ)
169.
170. [HKU\S-1-5-21-1324639905-1579318482-2899199702-1002\Software\Microsoft\Internet Explorer\URLSearchHooks]
171. "{09900DE8-1DCA-443F-9243-26FF581438AF}"="???????@Mail.Ru" (REG_SZ)
172.
173. [HKU\S-1-5-18\Software\AppDataLow\Software\Mail.Ru]
174. DA: 18/03/2011 01:11:38
175.
176. =========================
177.
178. Fin à: 13:31:11 le 22/12/2011
179. 452555 Éléments analysés
180.
181. =========================
182. E.O.F

ATTENTION !!! : Script personnalisé pour cette machine uniquement , ne pas reproduire !!

si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."

sur OTL.exe pour le lancer.


▶Copie la liste qui se trouve en gras ci-dessous,

▶ colle-la dans la zone sous "Personnalisation" :


:processes
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
Teatimer.exe


:Reg
[-HKLM\Software\Mail.Ru]
[-HKLM\Software\Microsoft\MediaPlayer\UIPlugins\{171B4B25-2DD9-4b0b-912A-1AFAE79369B8}]
[-HKU\.DEFAULT\Software\AppDataLow\Software\Mail.Ru]
[-HKU\S-1-5-21-1324639905-1579318482-2899199702-1002\Software\AppDataLow\Software\Mail.Ru]
[HKU\S-1-5-21-1324639905-1579318482-2899199702-1002\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\5d686216_0]
""=""
[HKU\S-1-5-21-1324639905-1579318482-2899199702-1002\Software\Microsoft\Internet Explorer\SearchScopes]
"mail.ru"=-
[-HKU\S-1-5-21-1324639905-1579318482-2899199702-1002\Software\Microsoft\Internet Explorer\SearchScopes\{E88E0043-C9D4-4e33-8555-FEE4F5B63060}]
[HKU\S-1-5-21-1324639905-1579318482-2899199702-1002\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{09900DE8-1DCA-443F-9243-26FF581438AF}"=-
[HKU\S-1-5-18\Software\AppDataLow\Software\Mail.Ru]

:Files
C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}
C:\Users\adam\Favorites\Mail.Ru.url
C:\Users\adam\Favorites\Mail.Ru ????? - ????????? ??? ???????!.url

:commands
[CLEARALLRESTOREPOINTS]
[emptytemp]
[start explorer]
[reboot]


▶ Clique sur "Correction" pour lancer la suppression.


▶ Poste le rapport qui logiquement s'ouvrira tout seul en fin de travail appres le redemarrage.

¤¤¤¤¤¤¤¤¤¤_g3n-h@ckm@n_Developpement_¤¤¤¤¤¤¤¤¤¤
¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤_Pre_Scan_¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
No active process named iexplore.exe was found!
No active process named firefox.exe was found!
No active process named msnmsgr.exe was found!
No active process named Teatimer.exe was found!
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\Software\Mail.Ru\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\MediaPlayer\UIPlugins\{171B4B25-2DD9-4b0b-912A-1AFAE79369B8}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{171B4B25-2DD9-4b0b-912A-1AFAE79369B8}\ not found.
Registry key HKEY_USERS\.DEFAULT\Software\AppDataLow\Software\Mail.Ru\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-1324639905-1579318482-2899199702-1002\Software\AppDataLow\Software\Mail.Ru\ deleted successfully.
HKU\S-1-5-21-1324639905-1579318482-2899199702-1002\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\5d686216_0\\""|"" /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-1324639905-1579318482-2899199702-1002\Software\Microsoft\Internet Explorer\SearchScopes\\mail.ru not found.
Registry key HKEY_USERS\S-1-5-21-1324639905-1579318482-2899199702-1002\Software\Microsoft\Internet Explorer\SearchScopes\{E88E0043-C9D4-4e33-8555-FEE4F5B63060}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E88E0043-C9D4-4e33-8555-FEE4F5B63060}\ not found.
Registry value HKEY_USERS\S-1-5-21-1324639905-1579318482-2899199702-1002\Software\Microsoft\Internet Explorer\URLSearchHooks\\{09900DE8-1DCA-443F-9243-26FF581438AF} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{09900DE8-1DCA-443F-9243-26FF581438AF}\ not found.
========== FILES ==========
C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\META-INF folder moved successfully.
C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\lib folder moved successfully.
C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\defaults\preferences folder moved successfully.
C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\defaults folder moved successfully.
C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\components folder moved successfully.
C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\skin\weather folder moved successfully.
C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\skin\tabs folder moved successfully.
C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\skin\services folder moved successfully.
C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\skin\currencies folder moved successfully.
C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\skin folder moved successfully.
C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\locale\ru-RU\sputnik folder moved successfully.
C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\locale\ru-RU folder moved successfully.
C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\locale folder moved successfully.
C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\form folder moved successfully.
C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\content\sputnik folder moved successfully.
C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome\content folder moved successfully.
C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D}\chrome folder moved successfully.
C:\Users\adam\AppData\Roaming\Mozilla\Firefox\Profiles\a800i2cw.default\extensions\{37964A3C-4EE8-47b1-8321-34DE2C39BA4D} folder moved successfully.
C:\Users\adam\Favorites\Mail.Ru.url moved successfully.
C:\Users\adam\Favorites\Mail.Ru ????? - ????????? ??? ???????!.url moved successfully.
========== COMMANDS ==========


[EMPTYTEMP]

User: adam
->Temp folder emptied: 23566672 bytes
->Temporary Internet Files folder emptied: 9810928 bytes
->Java cache emptied: 152796 bytes
->FireFox cache emptied: 389746905 bytes
->Google Chrome cache emptied: 6549679 bytes
->Flash cache emptied: 97817 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 56475 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 5157159 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 415,00 mb


OTL by OldTimer - Version 3.2.31.0 log created on 12232011_185855

Files\Folders moved on Reboot...
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.
File\Folder C:\Windows\temp\TMP00000179AB28442D7A4DF9E0 not found!
File move failed. C:\Windows\temp\tm_icrcL_A606D985_38CA_41ab_BCD9_60F771CF800D scheduled to be moved on reboot.

Registry entries deleted on Reboot...

re

toujours Mail.ru ?

Bonjour,

Pour l'instant je ne pas vu de mail.ru.

ok re

mise à jour de malwarebytes , => scan complet => rapport

Je vais faire de suite mais j'ai une question je vien d'acheter un pc fixe et j'ai pas d'antivirus quelle est le meilleur antivirus gratuit svp ?

re

ben j'en ai pas moi....

sinon Avast pour le moment en gratuit

Re,

dac et un autre problème, j'ai un clé WIFI mais quand j'installe avec le cd il me dit d'inséré la clé et quand j'insère il ne le détécte pas alors qu'il a fonctionner parfaitement avec l'autre pc.

meme apres redemarrage ?

Oui, mais j'ai réussie j'ai installer le pilote a partir de l'internet mais bon en WiFI le signal n'est pas top

ah ben je peux rien pour un signal wifi ^^

du moment que tu as la connection......