Désinstaller TornTV et Nation Zoom

Pour nation zoom suis ceci :: http://www.sosvirus.net/nation-zoom-nation-zoom-t5167.html#p20850

Bonjour,
Les deux liens ci-dessus sont infectés et bloqués par Avast. Une autre idée s'il vous plait ?
Merci.

Bonsoir,

Désactive le, il s'agit de faux positif. Tu ne risque rien du tout :)

J'ai mis le temps mais voici mon rapport.
Merci encore !

¤¤¤¤¤¤¤¤¤¤ | Shortcut_Module 26.01.2014.1 - g3n-h@ckm@n

08:08:57 - 27/01/2014

(956) -- nvvsvc.exe
(980) -- nvSCPAPISvr.exe
(1348) -- nvxdsync.exe
(1356) -- nvvsvc.exe
(1720) -- spoolsv.exe
(1196) -- AppleMobileDeviceService.exe
(1640) -- mDNSResponder.exe
(1572) -- SkypeC2CAutoUpdateSvc.exe
(1404) -- GregHSRW.exe
(1884) -- CommandService.exe
(1988) -- LMS.exe
(2036) -- integratedoffice.exe
(2588) -- UpdaterService.exe
(2616) -- USBS3S4Detection.exe
(2640) -- WLIDSVC.EXE
(2672) -- IAANTmon.exe
(2712) -- WLIDSVCM.EXE
(2944) -- SDUpdSvc.exe
(2060) -- SDWSCSvc.exe
(2876) -- taskhost.exe
(592) -- taskeng.exe
(3076) -- explorer.exe
(3144) -- taskeng.exe
(3440) -- IAAnotif.exe
(3656) -- HP1006MC.EXE
(3716) -- RAVCpl64.exe
(3856) -- nvtray.exe
(3884) -- sidebar.exe
(4032) -- SpotifyWebHelper.exe
(3220) -- MusicManager.exe
(3516) -- winampa.exe
(548) -- SDTray.exe
(3780) -- iTunesHelper.exe
(2764) -- Monitor.exe
(4252) -- CCleaner64.exe
(4544) -- MSOSYNC.EXE
(4744) -- iPodService.exe
(4840) -- alg.exe
(4064) -- SMARTC~1.EXE
(4508) -- SMARTL~1.EXE
(3452) -- SearchIndexer.exe
(4608) -- WUDFHost.exe
(2784) -- SearchProtocolHost.exe
(2964) -- LWS.exe
(3988) -- CameraHelperShell.exe
(3584) -- chrome.exe
(5260) -- chrome.exe
(5860) -- sppsvc.exe
(4984) -- SDUpdate.exe
(1008) -- UNS.exe
(2444) -- mcupdate.exe
(4340) -- EgisUpdate.exe
(6120) -- GoogleUpdate.exe
(5016) -- SearchFilterHost.exe

¤¤¤¤¤¤¤¤¤¤ | Hijack Links

Disinfected : C:\Users\Jérôme\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Google Chrome.lnk : C:\Users\Jérôme\AppData\Local\Google\Chrome\Application\chrome.exe (hxxp://www.nationzoom.com/?type=sc&ts=1387149417&from=ild&uid=WDCXWD10EADS-22M2B0_WD-WCAV5837174071740)
Disinfected : C:\Users\Jérôme\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\eTeks Sweet Home 3D\Sweet Home 3D.lnk : C:\Windows\SysWOW64\javaws.exe (-localfile -offline -J-Djnlp.application.href=hxxp://www.sweethome3d.com/SweetHome3D.jnlp "C:\Users\Jérôme\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\247e2df4-35228190")
Disinfected : C:\Users\Jérôme\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk : C:\Users\Jérôme\AppData\Local\Google\Chrome\Application\chrome.exe (hxxp://www.nationzoom.com/?type=sc&ts=1387149417&from=ild&uid=WDCXWD10EADS-22M2B0_WD-WCAV5837174071740)

¤¤¤¤¤¤¤¤¤¤ | Hijack Internet Explorer

Repaired : [HKU\S-1-5-21-2803296524-3355837807-3043302450-1000\Software\Microsoft\Internet Explorer\Main]|[Search Bar] : www.bing.com -> https://www.google.com/?gws_rd=ssl
Repaired : [HKU\S-1-5-21-2803296524-3355837807-3043302450-1000\Software\Microsoft\Internet Explorer\Main]|[Start Page] : www.bing.com -> https://www.google.com/?gws_rd=ssl
Repaired : [HKU\S-1-5-21-2803296524-3355837807-3043302450-1000\Software\Microsoft\Internet Explorer\Main]|[Local Page] : C:\Windows\system32\blank.htm -> C:\Windows\SysWOW64\blank.htm
Repaired : [HKU\S-1-5-21-2803296524-3355837807-3043302450-1000\Software\Microsoft\Internet Explorer\Main]|[Search Page] : https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&src=IE-SearchBox&FORM=IE10SR -> http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Repaired : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Search Bar] : http://www.bing.com/spresults.aspx -> https://www.google.com/?gws_rd=ssl
Repaired : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Start Page] : https://www.google.com/?gws_rd=ssl -> https://www.msn.com/fr-fr/?ocid=iehp
Repaired : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Default_Search_URL] : https://www.google.com/?gws_rd=ssl -> https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
Repaired : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Default_Page_URL] : https://www.google.com/?gws_rd=ssl -> https://www.msn.com/fr-fr/?ocid=iehp
Repaired : [HKLM\Software\Microsoft\Internet Explorer\Main]|[Search Page] : https://www.google.com/?gws_rd=ssl -> https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
Repaired : [HKLM\Software\Microsoft\Internet Explorer\AboutURLs]|[Tabs] : http://start.mysearchdial.com/?f=2&a=tele0101&cd=2XzuyEtN2Y1L1QzuzytD0F0B0AyCyE0DtC0FtC0ByDtD0C0CtN0D0Tzu0SyBtAyDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=614717593&ir= -> res://ieframe.dll/tabswelcome.htm
Repaired : [HKLM64\Software\Microsoft\Internet Explorer\Main]|[Start Page] : http://start.mysearchdial.com/?f=1&a=tele0101&cd=2XzuyEtN2Y1L1QzuzytD0F0B0AyCyE0DtC0FtC0ByDtD0C0CtN0D0Tzu0SyBtAyDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=614717593&ir= -> https://www.msn.com/fr-fr/?ocid=iehp
Repaired : [HKLM64\Software\Microsoft\Internet Explorer\Main]|[Local Page] : C:\Windows\System32\blank.htm -> C:\Windows\SysWOW64\blank.htm
Repaired : [HKLM64\Software\Microsoft\Internet Explorer\Main]|[Default_Search_URL] : http://ww7.nationzoom.com{searchTerms} -> https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
Repaired : [HKLM64\Software\Microsoft\Internet Explorer\Main]|[Default_Page_URL] : http://ww7.nationzoom.com -> https://www.msn.com/fr-fr/?ocid=iehp
Repaired : [HKLM64\Software\Microsoft\Internet Explorer\Main]|[Search Page] : http://ww7.nationzoom.com{searchTerms} -> https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
Repaired : [HKU\S-1-5-21-2803296524-3355837807-3043302450-1000\Software\Microsoft\Windows\CurrentVersion\Internet settings]|[WarnonZoneCrossing] : 0 -> 1

¤¤¤¤¤¤¤¤¤¤ | Hijack Google Chrome

[Nat'] Successfull reset : SearchURL
[Nat'] Successfull reset : Preferences
[Jérôme] Successfull reset : SearchURL
[Jérôme] Successfull reset : Preferences

¤¤¤¤¤¤¤¤¤¤ | Hijack Firefox

[Nat'] Replaced : user_pref("browser.search.defaultengine", "Yahoo-Mp3Tube"); -> user_pref("browser.search.defaultengine", "google.com");
[Nat'] Replaced : user_pref("browser.search.defaultenginename", "Mysearchdial"); -> user_pref("browser.search.defaultenginename", "google");
[Nat'] Replaced : user_pref("browser.search.order.1", "Yahoo-Mp3Tube"); -> user_pref("browser.search.order.1", "google.com");
[Nat'] Replaced : user_pref("browser.search.selectedEngine", "Mysearchdial"); -> user_pref("browser.search.selectedEngine", "google");
[Nat'] Replaced : user_pref("browser.startup.homepage", "http://start.mysearchdial.com/?f=1&a=tele0101&cd=2XzuyEtN2Y1L1QzuzytD0F0B0AyCyE0DtC0FtC0ByDtD0C0CtN0D0Tzu0SyBtAyDtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R&cr=614717593&ir="); -> user_pref("browser.startup.homepage", "https://www.google.fr/?gws_rd=ssl");

¤¤¤¤¤¤¤¤¤¤ | Hijack StartMenuInternet

Repaired : [HKLM\Software\Clients\StartMenuInternet\IExplore.exe\shell\open\command] : iexplore.exe -> "C:\Program Files (x86)\Internet Explorer\iexplore.exe"
Repaired : [HKLM\Software\Clients\StartMenuInternet\Google Chrome\shell\open\command] : "C:\Users\Jérôme\AppData\Local\Google\Chrome\Application\chrome.exe" http://ww7.nationzoom.com -> "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"

¤¤¤¤¤¤¤¤¤¤ | Hijack Jscript

Hijack Jscript Repaired !!! : HKCR\CLSID\{f414c260-6ac0-11cf-b6d1-00aa00bbbb58}\InProcServer32 : C:\Program Files\AVAST Software\Avast\AhAScr.dll -> C:\Windows\SysWow64\Jscript.dll
Hijack Jscript Repaired !!! : HKCR\CLSID\{f414c262-6ac0-11cf-b6d1-00aa00bbbb58}\InProcServer32 : C:\Program Files\AVAST Software\Avast\AhAScr.dll -> C:\Windows\SysWow64\Jscript.dll

¤¤¤¤¤¤¤¤¤¤ | TEMP Files

[All Users] TEMP Files deleted : 0 Ko
[Default User] TEMP Files deleted : 0 Ko
[Default] TEMP Files deleted : 0 Ko
[Nat'] TEMP Files deleted : 3 Ko
[UpdatusUser] TEMP Files deleted : 0 Ko
[Public] TEMP Files deleted : 0 Ko
[Jérôme] TEMP Files deleted : 39756 Ko


¤¤¤¤¤¤¤¤¤¤ |EOF| ¤¤¤¤¤¤¤¤¤¤