hijackthis rapport Fermé

Question

Bonjour, 



Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 21:05:37, on 10/12/2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)

FIREFOX: 22.0 (fr)
Boot mode: Normal

Running processes:
C:\WINDOWS.1\System32\smss.exe
C:\WINDOWS.1\system32\winlogon.exe
C:\WINDOWS.1\system32\services.exe
C:\WINDOWS.1\system32\lsass.exe
C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe
C:\WINDOWS.1\system32\svchost.exe
C:\WINDOWS.1\System32\svchost.exe
C:\WINDOWS.1\System32\svchost.exe
C:\WINDOWS.1\system32\spoolsv.exe
C:\WINDOWS.1\system32\ctfmon.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS.1\system32\hkcmd.exe
C:\WINDOWS.1\system32\igfxpers.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Fichiers communs\Spigot\Search Settings\SearchSettings.exe
C:\Program Files\WinMover\WinMover.exe
C:\WINDOWS.1\system32\igfxsrvc.exe
C:\Program Files\IObit\Advanced SystemCare 7\ASCTray.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Application Updater\ApplicationUpdater.exe
C:\WINDOWS.1\system32\hasplms.exe
C:\WINDOWS.1\System32\svchost.exe
C:\WINDOWS.1\system32\KaraokeSer.exe
C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Documents and Settings\All Users.WINDOWS.1\Application Data\MobileBrServ\mbbservice.exe
C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
C:\WINDOWS.1\system32\svchost.exe
C:\Documents and Settings\Administrateur.SWEET-4381DBC18\Local Settings\Application Data\Torch\Update\TorchCrashHandler.exe
C:\Program Files\Fichiers communs\AVG Secure Search\vToolbarUpdater\17.1.2\ToolbarUpdater.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
C:\Program Files\Movies Toolbar\Datamngr\DatamngrCoordinator.exe
C:\Program Files\Movies Toolbar\Datamngr\DatamngrCoordinator.exe
C:\WINDOWS.1\explorer.exe
C:\Documents and Settings\Administrateur.SWEET-4381DBC18\Local Settings\Application Data\iLivid\iLivid.exe
C:\Documents and Settings\Administrateur.SWEET-4381DBC18\Local Settings\Application Data\WebPlayer\FLV Player\WebPlayer.exe
D:\Program Files\Microsoft Office\Office12\EXCEL.EXE
C:\Program Files\Opera\18.0.1284.63\opera.exe
C:\Program Files\Opera\18.0.1284.63\opera_crashreporter.exe
C:\Program Files\Opera\18.0.1284.63\opera.exe
C:\Program Files\Opera\18.0.1284.63\opera.exe
C:\Program Files\Opera\18.0.1284.63\opera.exe
C:\Program Files\Opera\18.0.1284.63\opera.exe
C:\Program Files\Opera\18.0.1284.63\opera.exe
C:\Documents and Settings\Administrateur.SWEET-4381DBC18\Mes documents\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.search.ask.com/?o=APN10646A&gct=hp&d=102-230&v=n9659-154&t=4
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://isearch.brothersoft.com?f=undefined
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favoris
R3 - URLSearchHook: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files\IObit Apps Toolbar\IE\8.3\iobitappsToolbarIE.dll
R3 - URLSearchHook: (no name) - {539F76FD-084E-4858-86D5-62F02F54AE86} - (no file)
O2 - BHO: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files\IObit Apps Toolbar\IE\8.3\iobitappsToolbarIE.dll
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.130\McAfeeMSS_IE.dll
O2 - BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll
O2 - BHO: Speed Analysis 2 - {18DBB6CE-3148-4FEC-B481-103CB3290427} - C:\Program Files\Speed Analysis 2\ScriptHost.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Music Toolbar (Dist. by Bandoo Media, Inc.) - {251ef57c-0612-478c-978e-c86d3879caa4} - C:\PROGRA~1\MUSICT~1\Datamngr\SRTOOL~1\IE\searchresultsDx.dll
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users.WINDOWS.1\Application Data\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O2 - BHO: Movies Toolbar (Dist. by Somoto Ltd.) - {3444c3c5-6c56-4a16-a453-832b05bf6ea4} - C:\PROGRA~1\MOVIES~1\SAFETY~1\SRTOOL~1\IE\searchresultsDx.dll
O2 - BHO: Movies Toolbar (Dist. by Bandoo Media, Inc.) - {3d86a75b-cb6b-4764-885d-ca6336f04ba2} - C:\PROGRA~1\MOVIES~1\Datamngr\SRTOOL~1\IE\searchresultsDx.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - (no file)
O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~1\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
O2 - BHO: saafe ssaVea - {FED65E74-7AC3-D0C9-2B2F-D2057C345B9A} - C:\Documents and Settings\All Users.WINDOWS.1\Application Data\saafe ssaVea\51e13a9e8c5af.dll
O3 - Toolbar: (no name) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - (no file)
O3 - Toolbar: (no name) - {82E1477C-B154-48D3-9891-33D83C26BCD3} - (no file)
O3 - Toolbar: Movies Toolbar (Dist. by Somoto Ltd.) - {3444c3c5-6c56-4a16-a453-832b05bf6ea4} - C:\PROGRA~1\MOVIES~1\SAFETY~1\SRTOOL~1\IE\searchresultsDx.dll
O3 - Toolbar: Music Toolbar (Dist. by Bandoo Media, Inc.) - {251ef57c-0612-478c-978e-c86d3879caa4} - C:\PROGRA~1\MUSICT~1\Datamngr\SRTOOL~1\IE\searchresultsDx.dll
O3 - Toolbar: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll
O3 - Toolbar: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files\IObit Apps Toolbar\IE\8.3\iobitappsToolbarIE.dll
O3 - Toolbar: Movies Toolbar (Dist. by Bandoo Media, Inc.) - {3d86a75b-cb6b-4764-885d-ca6336f04ba2} - C:\PROGRA~1\MOVIES~1\Datamngr\SRTOOL~1\IE\searchresultsDx.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS.1\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS.1\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS.1\system32\igfxpers.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files\Fichiers communs\Spigot\Search Settings\SearchSettings.exe"
O4 - HKCU\..\Run: [WinMover] "C:\Program Files\WinMover\WinMover.exe" /q
O4 - HKCU\..\Run: [Pokki] C:\WINDOWS.1\system32\rundll32.exe "%USERPROFILE%\local settings\application data\Pokki\Engine\Launcher.dll",RunLaunchPlatform
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS.1\system32\ctfmon.exe
O4 - HKCU\..\Run: [Advanced SystemCare 7] "C:\Program Files\IObit\Advanced SystemCare 7\ASCTray.exe" /Auto
O4 - HKCU\..\Run: [RDReminder] C:\Program Files\PC Performer\PCPerformer.exe -rem
O4 - HKCU\..\Run: [iLivid] "C:\Documents and Settings\Administrateur.SWEET-4381DBC18\Local Settings\Application Data\iLivid\iLivid.exe" -autorun
O4 - HKCU\..\Run: [FLV Player] C:\Documents and Settings\Administrateur.SWEET-4381DBC18\Local Settings\Application Data\WebPlayer\FLV Player\WebPlayer.exe
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS.1\system32\Macromed\Flash\FlashUtil32_11_9_900_117_Plugin.exe -update plugin
O4 - HKUS\S-1-5-19\..\RunOnce: [JkDefrag] rundll32 advpack.dll,LaunchINFSection JKDEFRAG.INF,RunOnce,1,N (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [SweetRegistry] rundll32 advpack.dll,LaunchINFSection SweetReg.inf,PerUserStub (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\RunOnce: [JkDefrag] rundll32 advpack.dll,LaunchINFSection JKDEFRAG.INF,RunOnce,1,N (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\RunOnce: [JkDefrag] rundll32 advpack.dll,LaunchINFSection JKDEFRAG.INF,RunOnce,1,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [JkDefrag] rundll32 advpack.dll,LaunchINFSection JKDEFRAG.INF,RunOnce,1,N (User 'Default user')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Visit AppsHat.com - {AAA38851-3CFF-475F-B5E0-720D3645E4A5} - C:\WINDOWS.1\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS.1\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS.1\Network Diagnostic\xpnetdiag.exe
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Fichiers communs\AVG Secure Search\ViProtocolInstaller\17.1.2\ViProtocol.dll
O20 - AppInit_DLLs: C:\DOCUME~1\ALLUSE~1.1\APPLIC~1\Wincert\WIN32C~1.DLL   c:\progra~1\movies~1\datamngr\mgrldr.dll
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS.1\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS.1\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS.1\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 7 (AdvancedSystemCareService7) - IObit - C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: BitGuard - Avira Operations GmbH & Co. KG - (no file)
O23 - Service: Datamngr Coordinator (DatamngrCoordinator) - Bandoo Media Inc. - C:\Program Files\Movies Toolbar\Datamngr\DatamngrCoordinator.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS.1\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS.1\system32\services.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: HASP License Manager (hasplms) - Aladdin Knowledge Systems Ltd. - C:\WINDOWS.1\system32\hasplms.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS.1\system32\imapi.exe
O23 - Service: VIA Karaoke digital mixer Service (KaraokeService) - VIA Technologies, Inc. - C:\WINDOWS.1\system32\KaraokeSer.exe
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.8.130\McCHSvc.exe
O23 - Service: Mobile Broadband HL Service - Unknown owner - C:\Documents and Settings\All Users.WINDOWS.1\Application Data\MobileBrServ\mbbservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS.1\system32\services.exe
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS.1\System32\SCardSvr.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS.1\system32\smlogsvc.exe
O23 - Service: Torch Crash Handler (TorchCrashHandler) - TorchMedia Inc. - C:\Documents and Settings\Administrateur.SWEET-4381DBC18\Local Settings\Application Data\Torch\Update\TorchCrashHandler.exe
O23 - Service: Uniblue Powersuite Service (Uniblue.PowersuiteSvc) - Unknown owner - C:\Program Files\Uniblue\Powersuite\powersuite_service.exe
O23 - Service: Volume Shadow Copy (VSS) - Unknown owner - C:\WINDOWS.1\System32\vssvc.exe
O23 - Service: vToolbarUpdater17.1.2 - Unknown owner - C:\Program Files\Fichiers communs\AVG Secure Search\vToolbarUpdater\17.1.2\ToolbarUpdater.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS.1\system32\wbem\wmiapsrv.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe

loumax91 · Answer

Bonjour,

Utilise cet outil de désinfection spécifique aux logiciels publicitaires : 

    ¶ Télécharge sur ton bureau  AdwCleaner de Xplode
    ¶ Lance AdwCleaner
    ¶ Clique sur "Scanner"
    ¶ Une fois l'analyse terminée, clique sur "Nettoyer".
    ¶ Patiente le temps du nettoyage.
    ¶ Une fois le nettoyage terminé, il se peut qu'il te sera proposé de redémarrer.
    ¶ Au redémarrage du PC, un rapport s'ouvrira. Poste le  contenu dans ta prochaine réponse.
    &deg; Notes:
    - Le rapport est également sauvegardé sous  C:\AdwCleaner\AdwCleaner[S0].txt
    - Pour t'aider

ommifella · Answer

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Microsoft Windows XP x86
Ran by Administrateur on 31/05/2014 at 13:01:04,56
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [Service] backupstack 
Successfully deleted: [Service] backupstack 



~~~ Registry Values




~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\baidu
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\crossrider
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\optimizer pro
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\baidu
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\yourfiledownloader
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\searchquiehelper.dnsguard
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\searchquiehelper.dnsguard.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\mypc backup
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\optimizer pro_is1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550355285550}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660366286650}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440344284450}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550355285550}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660366286650}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440344284450}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488}



~~~ Files

Successfully deleted: [File] C:\WINDOWS.1\Tasks\SMupdate1.job
Successfully deleted: [File] C:\WINDOWS.1\Tasks\SMupdate2.job
Successfully deleted: [File] C:\WINDOWS.1\Tasks\SMupdate3.job



~~~ Folders

Successfully deleted: [Folder] "C:\Documents and Settings\All Users.WINDOWS.1\application data\baidu"
Successfully deleted: [Folder] "C:\Documents and Settings\All Users.WINDOWS.1\application data\youtubeadblocker"
Successfully deleted: [Folder] "C:\Documents and Settings\Administrateur.SWEET-4381DBC18\Application Data\baidu"
Successfully deleted: [Folder] "C:\Documents and Settings\Administrateur.SWEET-4381DBC18\Application Data\goforfiles"
Successfully deleted: [Folder] "C:\Documents and Settings\Administrateur.SWEET-4381DBC18\Application Data\pdfforge"
Successfully deleted: [Folder] "C:\Documents and Settings\Administrateur.SWEET-4381DBC18\Application Data\yourfiledownloader"
Successfully deleted: [Folder] "C:\Documents and Settings\Administrateur.SWEET-4381DBC18\appdata\locallow\datamngr"
Successfully deleted: [Folder] "C:\Documents and Settings\Administrateur.SWEET-4381DBC18\Local Settings\Application Data\mobogenie"
Successfully deleted: [Folder] "C:\Documents and Settings\Administrateur.SWEET-4381DBC18\Local Settings\Application Data	orch"
Failed to delete: [Folder] "C:\Program Files\baidu"
Failed to delete: [Folder] "C:\Program Files\browse~2"
Successfully deleted: [Folder] "C:\Program Files\goforfiles"
Failed to delete: [Folder] "C:\Program Files\mobogenie"
Successfully deleted: [Folder] "C:\Program Files\mypc backup"
Successfully deleted: [Folder] "C:\Program Files\speeditup free"
Successfully deleted: [Folder] "C:\Program Files\yourfiledownloader"
Successfully deleted: [Folder] "C:\Program Files\youtubeadblocker"



~~~ FireFox

Failed to delete: [File] "C:\Program Files\Mozilla Firefox\searchplugins\ask.xml"
Successfully deleted: [File] C:\Documents and Settings\Administrateur.SWEET-4381DBC18\Application Data\mozilla\firefox\profiles\cmqijjd6.default\searchplugins\ask.xml
Successfully deleted: [Folder] C:\Documents and Settings\Administrateur.SWEET-4381DBC18\Application Data\mozilla\firefox\profiles\cmqijjd6.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com
Successfully deleted the following from C:\Documents and Settings\Administrateur.SWEET-4381DBC18\Application Data\mozilla\firefox\profiles\cmqijjd6.default\prefs.js

user_pref("extensions.1Fh.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||u
user_pref("extensions.1Fh.url", "hxxp://firsttshare.us/sync2/?q=hfZ9ofV9CShEAen0rjC6rihTB6lKDzt4olmptNtVh7n0rjnErHa6rTwEpjkFtMFHhd9Fqda8rjgGrdaErjnMDMlGojUMAe4UojgGqTa7rTU9qjU
user_pref("extensions.6JkR9YvzA.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")
user_pref("extensions.6JkR9YvzA.url", "hxxp://terminalukusaa.us/sync2/?q=hfZ9ofV9CShEAen0rja4rihTB6lKDzt4olmptNtVh7n0rjnEqjw7rjrFpdkHtMFHhd9Fqda8rjgGrdaEqjCMDMlGojUMAe4Uojr4qj
user_pref("extensions.AVIRA-V7C.com.avira.dnt.rules", "\"{\\"Version\\":42,\\"Companies\\":[{\\"company\\":\\"Google Inc\\",\\"rules\\":[{\\"name\\":\\"Google Ana
user_pref("extensions.AVIRA-V7C.domain", "\"avira.search.ask.com\"");
user_pref("extensions.DzU.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||u
user_pref("extensions.NYb.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||u
user_pref("extensions.lE0q.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11.com\")>-1||
user_pref("extensions.lE0q.url", "hxxp://storagemagic.eu/sync2/?q=hfZ9ofV9CShEAen0rTs7rihTB6lKDzt4olmptNtVh7n0rjnErHwFrjU9qHa9tMFHhd9Fqda8rjgGrdaEqjCMDMlGojUMAe4UojwHpjY4rdwFq
user_pref("keyword.URL", "hxxp://dts.search.ask.com/sr?src=ffb&gct=ds&appid=101&systemid=488&v=a12834-352&apn_dtid=TCH001&apn_ptnrs=AG1&apn_uid=7256581448034653&o=APN11459&q="
user_pref("browser.newtab.url", "hxxp://www.my-online-search.com/?babsrc=NT_ofln&mntrId=B0580025225E6AAA&cat=buenosearch&dlb=2&affID=128235&tsp=5263");
user_pref("browser.startup.homepage", "hxxp://www.my-online-search.com/?babsrc=HP_ofln&mntrId=B0580025225E6AAA&cat=buenosearch&dlb=2&affID=128235&tsp=5263");
user_pref("browser.startup.homepage", "hxxp://www.mystart.com/?pr=vmn&id=zgametb&v=2_0&utm_campaign=6252&ent=hp_6252");





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 31/05/2014 at 13:11:52,32
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Hijackthis rapport

2 réponses

Discussions similaires