connexion internet Résolu/Fermé

Question

Bonjour, j'ai déjà mis 1message dans systeme mais j'ai du me tromper de forum j'ai eu des réponses mais rien n'est changé connexion internet tres tres longue suite a intrusion browser safeguard puis supression malgré tout se que j'ai fait la connexion est très difficile voir 1 a 2 h voir plus mais une démarré tout va bien cette nuit je ne l'ai pas éteint pour pouvoir vous contacter est ce dangereux de le laisser allumé 24h sur 24 ???? merci config>Windows XP / Internet Explorer 8.0

securitest · Answer

Ok, le pc ne marche plus???

Bon on commence par utiliser malwarebytes_free
http://fr.malwarebytes.org/products/malwarebytes_free

Lancé une recherche complète, une fois la recherche effectuée
Sélectionnez tout les virus qui ont été détectés en cochant toutes les cases

L'ordinateur va redémarrer
Puis faite un copier coller du texte du rapport

douchka23 · Answer

re
et si internet ne redemarre pas je ne pourrai pas vous contacter ??

douchka23 · Answer

re
j'ai malwarebytes anti malwares sur mon ordi
est ce le même 
je l'ai fait hier et je n'ai rien mais s'il faut le refaire je refait

douchka23 · Answer

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Version de la base de données: v2014.02.16.04

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Françoise :: CAILLAT-6410850 [administrateur]

17/02/2014 10:56:36
mbam-log-2014-02-17 (10-56-36).txt

Type d'examen: Examen complet (A:\|D:\|E:\|F:\|I:\|)
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 317312
Temps écoulé: 2 heure(s), 13 minute(s), 39 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 0
(Aucun élément nuisible détecté)

(fin)

douchka23 · Answer

# AdwCleaner v3.018 - Rapport créé le 17/02/2014 à 13:23:36
# Mis à jour le 28/01/2014 par Xplode
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)
# Nom d'utilisateur : Françoise - CAILLAT-6410850
# Exécuté depuis : D:\Documents and Settings\Françoise\Mes documents\adwcleaner.exe
# Option : Scanner

***** [ Services ] *****


***** [ Fichiers / Dossiers ] *****


***** [ Raccourcis ] *****


***** [ Registre ] *****


***** [ Navigateurs ] *****

-\ Internet Explorer v8.0.6001.18702


*************************

AdwCleaner[R0].txt - [706 octets] - [16/02/2014 22:24:00]
AdwCleaner[R1].txt - [627 octets] - [17/02/2014 13:23:36]

########## EOF - D:\AdwCleaner\AdwCleaner[R1].txt - [686 octets] ##########

douchka23 · Answer

re
j'ai ce probleme depuis mardi 11 fevrier
et le 13 fev suprimés avec malarebytes 8 ele pup..optio..

douchka23 · Answer

bonjour
aucune infection active n'a été détectée sur votre PC

douchka23 · Answer

~ Rapport de ZHPDiag v2014.2.17.15 - Nicolas Coolman (17/02/2014) ~ Lancé par Françoise (19/02/2014 13:21:29) ~ Adresse du Site Web https://nicolascoolman.webs.com/ ~ Forums gratuits d'Assistance à la désinfection : https://nicolascoolman.webs.com/ ~ Traduit par Nicolas Coolman ~ Etat de la version : ~ Liste blanche : Activée par le programme ~ Elévation des Privilèges : OK ~ User Account Control (UAC): Not Found ---\ Navigateurs Internet MSIE: Internet Explorer v8.0.6001.18702 (Defaut) ---\ Informations sur les produits Windows ~ Langage: Français Microsoft Windows XP, 32-bit Service Pack 3 (Build 2600) Windows Automatic Updates : OK Windows Genuine Advantage : OK ---\ Logiciels de protection du système avast! Antivirus v4.8 Malwarebytes Anti-Malware version 1.75.0.1300 Spybot - Search & Destroy v2.2.25 ---\ Logiciels d'optimisation du système CCleaner v4.10 =>Piriform Ltd ---\ Logiciels de partage PeerToPeer ---\ Surveillance de Logiciels Adobe Flash Player 12 ActiveX Adobe Reader XI Java 7 Update 45 ---\ Informations sur le système ~ Processor: x86 Family 6 Model 10 Stepping 0, AuthenticAMD ~ Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 511 MB (48% free) System Restore: Activé (Enable) System drive D: has 52 GB (48%) free of 108 GB ---\ Mode de connexion au système ~ Computer Name: CAILLAT-6410850 ~ User Name: Françoise ~ All Users Names: SUPPORT_388945a0, Paul, HelpAssistant, Françoise, ASPNET, Administrateur, ~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89 Logged in as Administrator ---\ Variables d'environnement ~ System Unit : D:\ ~ %AppZHP% : D:\Documents and Settings\Françoise\Application Data\ZHP\ ~ %AppData% : D:\Documents and Settings\Françoise\Application Data\ ~ %Desktop% : D:\Documents and Settings\Françoise\Bureau\ ~ %Favorites% : D:\Documents and Settings\Françoise\Favoris\ ~ %LocalAppData% : D:\Documents and Settings\Françoise\Local Settings\Application Data\ ~ %StartMenu% : D:\Documents and Settings\Françoise\Menu Démarrer\ ~ %Windir% : D:\WINDOWS\ ~ %System% : D:\WINDOWS\system32\ ---\ Enumération des unités disques A: Floppy drive, Flash card reader, USB Key (Not Inserted) D: Hard drive, Flash drive, Thumb drive (Free 52 Go of 108 Go) E: CD-ROM drive (Not Inserted) F: CD-ROM drive (Not Inserted) I: Hard drive, Flash drive, Thumb drive (Free 3 Go of 4 Go) ---\ Etat du Centre de Sécurité Windows ~ Security Center: 45 Legitimates Filtered in 00mn 00s ---\ Recherche particulière de fichiers génériques [MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.13/04/2008 - 18:34:04.) -- D:\WINDOWS\Explorer.exe [1037824] [MD5.2988BFF8257A55EA8AFD038F49F81A34] - (.Microsoft Corporation - Internet Extensions for Win32.) (.06/02/2014 - 00:20:01.) -- D:\WINDOWS\system32\wininet.dll [920064] [MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.13/04/2008 - 18:34:30.) -- D:\WINDOWS\system32\Winlogon.exe [512000] [MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 14:49:54.) -- D:\WINDOWS\system32\Drivers\AFD.sys [138496] [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 10:40:32.) -- D:\WINDOWS\system32\Drivers\atapi.sys [96512] [MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 11:14:22.) -- D:\WINDOWS\system32\Drivers\Cdfs.sys [63744] [MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 10:40:48.) -- D:\WINDOWS\system32\Drivers\Cdrom.sys [62976] [MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.13/04/2008 - 17:57:40.) -- D:\WINDOWS\system32\Drivers\Fips.sys [44672] [MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 08:36:06.) -- D:\WINDOWS\system32\Drivers\HDAudBus.sys [144384] [MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.13/04/2008 - 18:00:54.) -- D:\WINDOWS\system32\Drivers\i8042prt.sys [54144] [MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 10:41:00.) -- D:\WINDOWS\system32\Drivers\Imapi.sys [42112] [MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 10:57:16.) -- D:\WINDOWS\system32\Drivers\IpNat.sys [152832] [MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 11:19:44.) -- D:\WINDOWS\system32\Drivers\IPSec.sys [75264] [MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 14:29:31.) -- D:\WINDOWS\system32\Drivers\MRxSmb.sys [456320] [MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/04/2008 - 11:21:02.) -- D:\WINDOWS\system32\Drivers etBT.sys [162816] [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 11:15:54.) -- D:\WINDOWS\system32\Drivers tfs.sys [574976] [MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.13/04/2008 - 18:09:42.) -- D:\WINDOWS\system32\Drivers\Parport.sys [80384] [MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 11:19:44.) -- D:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328] [MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 10:32:52.) -- D:\WINDOWS\system32\Drivers dpdr.sys [196224] [MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.13/04/2008 - 17:57:36.) -- D:\WINDOWS\system32\Drivers edbook.sys [58752] [MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.13/04/2008 - 17:56:06.) -- D:\WINDOWS\system32\Drivers\volsnap.sys [53376] ~ Generic Processes: Scanned in 00mn 01s ---\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 3/1080 ~ Mes musiques (My Musics) : 1/2 ~ Mes Videos (My Videos) : 1/65 ~ Mes Favoris (My Favorites) : 1/35 ~ Mes Documents (My Documents) : 8/2062 ~ Mon Bureau (My Desktop) : 0/19 ~ Menu demarrer (Programs) : 1/22 ~ Hidden Files: Scanned in 00mn 08s ---\ Processus lancés [MD5.5DEBC3519D489411073FA7E56FFB4A93] - (.ALWIL Software - avast! Antivirus updating service.) -- D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [18752] [PID.1388] [MD5.0AAF6B848185899CF76AE04E62EAB3D2] - (.ALWIL Software - avast! antivirus service.) -- D:\Program Files\Alwil Software\Avast4\ashServ.exe [138680] [PID.1436] [MD5.0A7E9FDF3BF1980CA09FEEAC7F52EFBC] - (.ALWIL Software - avast! service GUI component.) -- D:\Program Files\Alwil Software\Avast4\ashDisp.exe [81000] [PID.1924] [MD5.11F714F85530A2BD134074DC30E99FCA] - (.Microsoft Corporation - Machine Debug Manager.) -- D:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.exe [322120] [PID.1648] [MD5.0C28BCC9A8A9E8CAC62A348D93DE8A46] - (.Smart Link - Pas de description.) -- D:\WINDOWS\system32\slserv.exe [73796] [PID.1308] [MD5.8EF654045E518AC00E52E7A1E2D3AD70] - (.Canon Inc. - Canon Camera Access Library 8.) -- D:\Program Files\Canon\CAL\CALMAIN.exe [96370] [PID.632] [MD5.D86010C96ABADDA75356834D6113D37D] - (.ALWIL Software - avast! Web Scanner.) -- D:\Program Files\Alwil Software\Avast4\ashWebSv.exe [352920] [PID.2080] [MD5.2FC33C8AF0EFEAE056F326D67AF716A0] - (.eBay Inc. - eBay Toolbar Daemon.) -- D:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe [632048] [PID.1676] =>Toolbar.eBay [MD5.98EF79CC2B07398AC525F9EA1AE0366F] - (.Safer-Networking Ltd. - Spybot-S&D 2 Scanner Service.) -- D:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880] [PID.1008] [MD5.14BF6B3AB327D519ED007CDDC56F6900] - (.Safer-Networking Ltd. - Spybot-S&D 2 Background update service.) -- D:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272] [PID.1580] [MD5.B2F564DC59B67763C73269E1A9DA7F18] - (.ALWIL Software - avast! e-Mail Scanner Service.) -- D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [254040] [PID.3416] [MD5.0DAD93BB0FECF5016AE3C06CBB0A873B] - (.Microsoft Corporation - COM Surrogate.) -- D:\WINDOWS\system32\dllhost.exe [5120] [PID.2452] [MD5.AB44884BC129FC04D75A4649E0710203] - (.Nicolas Coolman - ZHPDiag.) -- D:\Program Files\ZHPDiag\ZHPDiag.exe [8338432] [PID.832] ~ Processes Running: Scanned in 00mn 02s ---\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://portail.free.fr/ ~ IE Browser: 13 Legitimates Filtered in 00mn 00s ---\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback> =>Hijacker.Proxy R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=D:\WINDOWS\system32\userinit.exe, F2 - REG:system.ini: Shell=D:\WINDOWS\explorer.exe F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ~ Keys: Scanned in 00mn 00s ---\ Hosts file redirection (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 01s ~ Nombre de lignes (Lines number): 15499 ---\ Internet Explorer Toolbars (O3) O3 - Toolbar: eBay Toolbar - [HKLM]{92085AD4-F48A-450D-BD93-B28CC7DF67CE} . (.eBay Inc. - eBayTb Dynamic Link Library.) -- D:\Program Files\eBay\eBay Toolbar2\eBayTB.dll =>Toolbar.eBay O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- D:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google O3 - Toolbar: Canon Easy-WebPrint EX - [HKLM]{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} . (.CANON INC. - Easy-WebPrint EX.) -- D:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline O3 - Toolbar\WebBrowser: (no name) - [HKCU]{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} Clé orpheline ~ Toolbar: Scanned in 00mn 00s ---\ Autres liens utilisateurs (O4) O4 - GS\Program [AllUsers]: MSN.lnk . (.Microsoft Corporation - Win32 Cabinet Self-Extractor.) -- D:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe =>.Microsoft Corporation O4 - GS\Program [AllUsers]: Photorécit 3 pour Windows.lnk . (.Microsoft Corp. - Photo Story 3 for Windows.) -- D:\Program Files\Photo Story 3 for Windows\PhotoStory3.exe O4 - GS\Program [AllUsers]: PowerpointImageExtractor V1.2.lnk . (.--- - Pas de description.) -- D:\Program Files\PowerpointImageExtractor_V1_2\PowerpointImageExtractor.exe O4 - GS\Program [AllUsers]: Spybot-S&D Start Center.lnk . (.Safer-Networking Ltd. - Start Center.) -- D:\Program Files\Spybot - Search & Destroy 2\SDWelcome.exe O4 - GS\Program [Paul]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- D:\Program Files\Internet Explorer\iexplore.exe O4 - GS\Program [Françoise]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- D:\Program Files\Internet Explorer\iexplore.exe ~ Global Startup: 17 Legitimates Filtered in 00mn 03s ---\ Applications lancées au démarrage du sytème (O4) O4 - HKLM\..\Run: [avast!] . (.ALWIL Software - avast! service GUI component.) -- D:\Program Files\Alwil Software\Avast4\ashDisp.exe O4 - HKLM\..\Run: [MSConfig] . (.Microsoft Corporation - Utilitaire de configuration système.) -- D:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe O4 - HKLM\..\Run: [VTTimer] . (.S3 Graphics, Inc. - Pas de description.) -- D:\WINDOWS\system32\VTTimer.exe O4 - HKLM\..\Run: [UserFaultCheck] Clé orpheline O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\jre6\bin\jusched.exe (.not file.) =>.Oracle Corporation O4 - HKLM\..\Run: [SoundMan] . (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- D:\WINDOWS\SOUNDMAN.exe O4 - HKLM\..\Run: [SDTray] . (.Safer-Networking Ltd. - Spybot - Search & Destroy tray access.) -- D:\Program Files\Spybot - Search & Destroy 2\SDTray.exe O4 - HKLM\..\Run: [mobilegeni daemon] D:\Program Files\Mobogenie\DaemonProcess.exe (.not file.) =>PUP.Mobogenie O4 - HKLM\..\Run: [HPDJ Taskbar Utility] . (.HP - Pas de description.) -- D:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe O4 - HKLM\..\Run: [HP Component Manager] . (.Hewlett-Packard Company - HP Framework Component Manager Service.) -- D:\Program Files\HP\hpcoretech\hpcmpmgr.exe O4 - HKLM\..\Run: [eBayToolbar] . (.eBay Inc. - eBay Toolbar Daemon.) -- D:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe =>Toolbar.eBay O4 - HKLM\..\Run: [DXDllRegExe] Clé orpheline O4 - HKLM\..\Run: [CanonSolutionMenuEx] . (.CANON INC. - Canon Solution Menu EX.) -- D:\Program Files\Canon\Solution Menu EX\CNSEMAIN.exe O4 - HKLM\..\Run: [CanonMyPrinter] . (.CANON INC. - Canon My Printer.) -- D:\Program Files\Canon\MyPrinter\BJMyPrt.exe O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- D:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated O4 - HKCU\..\Run: [SystweakASP] D:\Program Files\RegClean Pro\SystweakASP.exe (.not file.) =>Rogue.RegistryPowerCleaner O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (.not file.) O4 - HKCU\..\Run: [NextLive] D:\Documents and Settings\Françoise\Application Data ewnext.me engine.dll (.not file.) =>PUP.NextLive O4 - HKCU\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- D:\Program Files\Messenger\msmsgs.exe O4 - HKCU\..\Run: [Google+ Auto Backup] D:\Program Files\Google\Google+ Auto Backup\Google+ Auto Backup.exe (.not file.) O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Advanced System Protector_startup] D:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe (.not file.) =>PUP.AdvancedSystemProtector O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\CTFMON.exe O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] . (.Microsoft Corporation - Watson Subscriber for SENS Network Notifica.) -- D:\Program Files\Fichiers communs\Microsoft Shared\DW\DWTRIG20.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] . (.Microsoft Corporation - Watson Subscriber for SENS Network Notifica.) -- D:\Program Files\Fichiers communs\Microsoft Shared\DW\DWTRIG20.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-21-1844237615-1532298954-725345543-1005\..\Run: [SystweakASP] D:\Program Files\RegClean Pro\SystweakASP.exe (.not file.) =>Rogue.RegistryPowerCleaner O4 - HKUS\S-1-5-21-1844237615-1532298954-725345543-1005\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google O4 - HKUS\S-1-5-21-1844237615-1532298954-725345543-1005\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (.not file.) O4 - HKUS\S-1-5-21-1844237615-1532298954-725345543-1005\..\Run: [NextLive] D:\Documents and Settings\Françoise\Application Data ewnext.me engine.dll (.not file.) =>PUP.NextLive O4 - HKUS\S-1-5-21-1844237615-1532298954-725345543-1005\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- D:\Program Files\Messenger\msmsgs.exe O4 - HKUS\S-1-5-21-1844237615-1532298954-725345543-1005\..\Run: [Google+ Auto Backup] D:\Program Files\Google\Google+ Auto Backup\Google+ Auto Backup.exe (.not file.) O4 - HKUS\S-1-5-21-1844237615-1532298954-725345543-1005\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-21-1844237615-1532298954-725345543-1005\..\Run: [Advanced System Protector_startup] D:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe (.not file.) =>PUP.AdvancedSystemProtector ~ Application: Scanned in 00mn 02s ---\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- D:\Program Files\Microsoft Office\OFFICE11\REFBARH.ICO O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -- Clé orpheline O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- D:\Program Files\Messenger\msmsgs.exe ~ IE Extra Buttons: Scanned in 00mn 00s ---\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} ((no name)) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab O16 - DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} ((no name)) - https://www.bitdefender.com/toolbox/ O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} ((no name)) - http://copainsdavant.linternaute.com/framework/lib/objimageuploader/html_include/5.1.1.0/ImageUploader5.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} ((no name)) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1343895655437 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} ((no name)) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1349603141218 O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} ((no name)) - http://fichiers.touslesdrivers.com/maconfig/MaConfig_5_1_2_1.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} ((no name)) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab ~ Objets ActiveX: Scanned in 00mn 00s ---\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{B256370B-3DDC-440C-B7BB-61533EAA6A8D}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{B256370B-3DDC-440C-B7BB-61533EAA6A8D}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{B256370B-3DDC-440C-B7BB-61533EAA6A8D}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS3\Services\Tcpip\..\{B256370B-3DDC-440C-B7BB-61533EAA6A8D}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ~ Domain: Scanned in 00mn 00s ---\ Protocole additionnel (O18) O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- D:\WINDOWS\system32\wiascr.dll O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- D:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.dll =>.Microsoft Corporation ~ Protocole Additionnel: Scanned in 00mn 00s ---\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- D:\WINDOWS\system32\crypt32.dll O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- D:\WINDOWS\system32\cryptnet.dll O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- D:\WINDOWS\system32\cscdll.dll O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- D:\WINDOWS\system32\dimsntfy.dll O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- D:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- D:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- D:\WINDOWS\system32\sclgntfy.dll O20 - Winlogon Notify: SDWinLogon . (...) -- SDWinLogon.dll O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- D:\WINDOWS\system32\WlNotify.dll O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- D:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- D:\WINDOWS\system32\wlnotify.dll ~ Winlogon: Scanned in 00mn 00s ---\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: avast! iAVS4 Control Service (aswUpdSv) . (.ALWIL Software - avast! Antivirus updating service.) - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) . (.Safer-Networking Ltd. - Windows Security Center integration..) - D:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe ~ Services: 6 Legitimates Filtered in 00mn 05s ---\ Enumération Active Desktop & MHTML Editor (O24) O24 - Desktop General: BackupWallPaper - .(...) - D:\Documents and Settings\Françoise\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O24 - Desktop General: WallPaper - .(...) - D:\Documents and Settings\Françoise\Local Settings\Application Data\Microsoft\Wallpaper1.bmp ~ Desktop Component: 4 Legitimates Filtered in 00mn 00s ---\ Logiciels installés (O42) O42 - Logiciel: Camera Suite - (...) [HKLM] -- {AD13BFB0-FDD2-4AFA-A8AF-9F4A950D56B7} O42 - Logiciel: ImageScanTool V2.0.2 - (.Nom de votre société.) [HKLM] -- {F0ACDDA3-1DC3-43C0-84E6-43E927C3E2F7} ~ Logic: 41 Legitimates Filtered in 00mn 01s ---\ HKCU & HKLM Software Keys [HKCU\Software\IncrediMail] [HKLM\Software\FasterPC] ~ Key Software: 275 Legitimates Filtered in 00mn 01s ---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 01/10/2012 - 15:48:27 - [0,024] ----D D:\Program Files\FileConverter_1.5 O43 - CFD: 15/04/2013 - 10:00:27 - [1,414] ----D D:\Program Files\ScreenMates O43 - CFD: 30/11/2013 - 12:19:01 - [7,447] ----D D:\Program Files\Sim AQUARIUM 2 O43 - CFD: 01/10/2012 - 16:00:15 - [0,024] ----D D:\Program Files\WiseConvert_1.5 =>Toolbar.Conduit O43 - CFD: 01/07/2013 - 09:57:35 - [0] ----D D:\Documents and Settings\All Users\Application Data\IM O43 - CFD: 01/07/2013 - 09:53:54 - [0,012] ----D D:\Documents and Settings\All Users\Application Data\IncrediMail O43 - CFD: 01/08/2011 - 11:43:27 - [0,010] ----D D:\Documents and Settings\All Users\Application Data\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42}(2) O43 - CFD: 06/10/2012 - 15:13:58 - [0,767] ----D D:\Documents and Settings\Françoise\Local Settings\Application Data\FileConverter_1.5 O43 - CFD: 12/02/2014 - 15:22:11 - [0] ----D D:\Documents and Settings\Françoise\Local Settings\Application Data\genienext O43 - CFD: 01/07/2013 - 09:59:15 - [11,415] ----D D:\Documents and Settings\Françoise\Local Settings\Application Data\IM O43 - CFD: 06/10/2012 - 15:20:15 - [0,799] ----D D:\Documents and Settings\Françoise\Local Settings\Application Data\WiseConvert_1.5 =>Toolbar.Conduit O43 - CFD: 16/04/2013 - 13:17:55 - [0,001] ----D D:\Documents and Settings\Françoise\Menu Démarrer\Programmes\Felix II - Français ~ Program Folder: 188 Legitimates Filtered in 00mn 21s ---\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/02/2014 - 11:49:07 ----- . (...) -- D:\WINDOWS\Sti_Trace.log [0] O44 - LFC:[MD5.C804F5458B60CB3C9F5CD8560B3E8BAD] - 16/02/2014 - 14:55:38 ----- . (...) -- D:\WINDOWS\wiaservc.log [50] O44 - LFC:[MD5.2202F650AB66933DC385C9AEBF1B5596] - 19/02/2014 - 06:46:19 ----- . (...) -- D:\WINDOWS\wiadebug.log [513] O44 - LFC:[MD5.C9DD76D0EF94637C77FF8CA5E0FB0684] - 19/02/2014 - 08:29:09 ---A- . (...) -- D:\WINDOWS\system.ini [227] O44 - LFC:[MD5.902B26896FFE676588281B1303027F03] - 19/02/2014 - 08:29:09 ---A- . (...) -- D:\WINDOWS\win.ini [759] O44 - LFC:[MD5.C8CB90E735C0541D7BF2ABCA6076D752] - 19/02/2014 - 13:21:45 ---A- . (...) -- D:\Documents [120] ~ Files: 40 Legitimates Filtered in 00mn 41s ---\ Opérations et fonctions au démarrage de Windows Explorer (O46) O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll ~ ShellExecuteHooks: Scanned in 00mn 00s ---\ Export de clé d'application autorisée (O47) O47 - AAKE:Key Export SP - "D:\Program Files\IncrediMail\Bin\IncMail.exe" [Enabled] .(...) -- D:\Program Files\IncrediMail\Bin\IncMail.exe (.not file.) O47 - AAKE:Key Export SP - "D:\Program Files\IncrediMail\Bin\ImApp.exe" [Enabled] .(...) -- D:\Program Files\IncrediMail\Bin\ImApp.exe (.not file.) O47 - AAKE:Key Export SP - "D:\Program Files\IncrediMail\Bin\ImpCnt.exe" [Enabled] .(...) -- D:\Program Files\IncrediMail\Bin\ImpCnt.exe (.not file.) ~ Keys Export: 14 Legitimates Filtered in 00mn 00s ---\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d ~ IFEO: Scanned in 00mn 00s ---\ Enumération des clés de registre StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\Felix II [Key] . (...) -- D:\Program Files\ScreenMates\Felix II\Fr\Felix2.exe ~ SMSR Keys: 1 Legitimates Filtered in 00mn 00s ---\ Liste des pilotes du système (SDL) (O58) O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32\ansi.sys [9037] O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32\country.sys [27097] O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32\himem.sys [4912] O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32\key01.sys [42809] O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32\keyboard.sys [42537] O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32 tdos.sys [27916] O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32 tdos404.sys [29146] O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32 tdos411.sys [29370] O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32 tdos412.sys [29274] O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32 tdos804.sys [29146] O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32 tio.sys [34000] O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32 tio404.sys [34560] O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32 tio411.sys [35648] O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32 tio412.sys [35424] O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32 tio804.sys [34560] ~ Drivers: 5 Legitimates Filtered in 00mn 01s ---\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\ Liste les services legacy du registre (LALS) (O64) O64 - Services: CurCS - 24/11/2009 - D:\WINDOWS\system32\Drivers\Aavmker4.sys (Aavmker4) .(.ALWIL Software - avast! Base Kernel-Mode Device Driver for W.) - LEGACY_AAVMKER4 O64 - Services: CurCS - 24/11/2009 - D:\WINDOWS\system32\Drivers\aswMon2.sys (aswMon2) .(.ALWIL Software - avast! File System Filter Driver for Window.) - LEGACY_ASWMON2 O64 - Services: CurCS - 24/11/2009 - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe (aswUpdSv) .(.ALWIL Software - avast! Antivirus updating service.) - LEGACY_ASWUPDSV O64 - Services: CurCS - 24/11/2009 - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe (avast! Mail Scanner) .(.ALWIL Software - avast! e-Mail Scanner Service.) - LEGACY_AVAST!_MAIL_SCANNER O64 - Services: CurCS - 24/11/2009 - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe (avast! Web Scanner) .(.ALWIL Software - avast! Web Scanner.) - LEGACY_AVAST!_WEB_SCANNER O64 - Services: CurCS - 15/10/2013 - D:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe (SDScannerService) .(.Safer-Networking Ltd. - Spybot-S&D 2 Scanner Service.) - LEGACY_SDSCANNERSERVICE O64 - Services: CurCS - 20/09/2013 - D:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe (SDUpdateService) .(.Safer-Networking Ltd. - Spybot-S&D 2 Background update service.) - LEGACY_SDUPDATESERVICE ~ Legacy: 146 Legitimates Filtered in 00mn 03s ---\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Not Key.) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- D:\Program Files\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\ Recherche d'infection sur les navigateurs internet (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8 O69 - SBI: SearchScopes [HKCU] {E8C45DC7-EEB0-433B-9C7A-30632563842B} - (Google) - https://www.google.com/?gws_rd=ssl O69 - SBI: SearchScopes [HKCU] {F746E47D-9786-4780-84E0-18E9236FB29C} - (Yahoo! Search) - https://fr.search.yahoo.com/ ~ Keys: Scanned in 00mn 00s ---\ Enumère les codes produits des logiciels (PUC) (O90) O90 - PUC: "3ADDCA0F3CD10C34486E349E723C2E7F" . (.ImageScanTool V2.0.2.) -- D:\WINDOWS\Installer\{F0ACDDA3-1DC3-43C0-84E6-43E927C3E2F7}\ARPPRODUCTICON.exe ~ Update Products: 34 Legitimates Filtered in 00mn 00s ---\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS) [MD5.977CE56F479042E8932FEC5BACFBBE48] [WIS][26/12/2013] (.35mm Film Scanner - ImageScanTool V2.0.2.) -- D:\Windows\Installer\1b5599f.msi [828928] ~ WIS: 37 Legitimates Filtered in 00mn 04s ---\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 05/02/2014 257928 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - D:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe SS - | Demand 13/04/2008 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - D:\WINDOWS\system32\dmadmin.exe SS - | Demand 15/05/2011 182768 | (gusvc) . (.Google.) - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe SS - | Demand 12/04/2011 311744 | (maconfservice) . (.CybelSoft.) - D:\Program Files\ma-config.com\maconfservice.exe SS - | Auto 10/07/1658 0 | (moohelp) . (...) - D:\Program Files\The Cleaner\mhelper.exe SS - | Demand 18/03/2004 65536 | (Pml Driver HPZ12) . (.HP.) - D:\WINDOWS\system32\HPZipm12.exe SS - | Auto 13/09/2013 171416 | (SDWSCService) . (.Safer-Networking Ltd..) - D:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe SR - | Auto 24/11/2009 18752 | (aswUpdSv) . (.ALWIL Software.) - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe SR - | Auto 24/11/2009 138680 | (avast! Antivirus) . (.ALWIL Software.) - D:\Program Files\Alwil Software\Avast4\ashServ.exe SR - | Demand 24/11/2009 254040 | (avast! Mail Scanner) . (.ALWIL Software.) - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe SR - | Demand 24/11/2009 352920 | (avast! Web Scanner) . (.ALWIL Software.) - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe SR - | Auto 31/01/2007 96370 | (CCALib8) . (.Canon Inc..) - D:\Program Files\Canon\CAL\CALMAIN.exe SR - | Auto 15/10/2013 3921880 | (SDScannerService) . (.Safer-Networking Ltd..) - D:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe SR - | Auto 20/09/2013 1042272 | (SDUpdateService) . (.Safer-Networking Ltd..) - D:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe SR - | Auto 13/04/2008 73796 | (SLService) . (.Smart Link.) - D:\WINDOWS\system32\slserv.exe ~ Services: Scanned in 00mn 06s ---\ Scan Additionnel (O88) Database Version : 13031 - (17/02/2014) Clés trouvées (Keys found) : 1 Valeurs trouvées (Values found) : 3 Dossiers trouvés (Folders found) : 3 Fichiers trouvés (Files found) : 1 [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\PriceGong] =>Adware.PriceGong [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{92085AD4-F48A-450D-BD93-B28CC7DF67CE} =>Toolbar.eBay^ [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:mobilegeni daemon =>PUP.Mobogenie^ [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:SystweakASP =>Rogue.RegistryPowerCleaner^ D:\Program Files\WiseConvert_1.5 =>Toolbar.Conduit^ D:\Documents and Settings\Françoise\Local Settings\Application Data\WiseConvert_1.5 =>Toolbar.Conduit^ D:\Documents and Settings\Françoise\Application Data\mediabarbs =>PUP.BearShare D:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe =>Toolbar.eBay^ ~ Additionnel Scan: 189642 Items scanned in 00mn 27s ---\ Récapitulatif des détections trouvées sur votre station ~ http://nicolascoolman.webs.com/apps/blog/show/27232411-hijacker-proxy =>Hijacker.Proxy ~ http://nicolascoolman.webs.com/apps/blog/show/41034005-pup-mobogenie =>PUP.Mobogenie ~ http://nicolascoolman.webs.com/apps/blog/show/29295819-rogue-registrypowercleaner =>Rogue.RegistryPowerCleaner ~ http://nicolascoolman.webs.com/apps/blog/show/40528410-pup-nextlive =>PUP.NextLive ~ http://nicolascoolman.webs.com/apps/blog/show/26630283-pup-advancedsystemprotector =>PUP.AdvancedSystemProtector ~ http://nicolascoolman.webs.com/apps/blog/show/29507721-toolbar-conduit =>Toolbar.Conduit ~ http://nicolascoolman.webs.com/apps/blog/show/26666995-adware-pricegong =>Adware.PriceGong ~ http://nicolascoolman.webs.com/apps/blog/show/26705717-pup-bearshare =>PUP.BearShare ~ MSI: 8 link(s) detected in 00mn 27s ~ 943 Legitimates filtered by white list End of the scan (483 lines in 02mn 37s)(0)

douchka23 · Answer

https://www.cjoint.com/c/DBtp1WiZtih

finalement ça a marché ( lien 12) il faut peut être le temps ??
j'ai desinstaller spybot
merci
oui mais comment savoir les personnes capables

lilidurhone · Answer

Moi par exemple!


Avast pas à jour!

lilidurhone · Answer

On est à la version 9.0.2013

Désinstalles ta version

douchka23 · Answer

Information à propos de la mise à jour en cours :
Temps total : 1:55

- Programme : Déjà à jour
  (version actuelle 4.8.1368)
- Vps : Déjà à jour
  (version actuelle 140219-0)

Serveur : k5712753.iavs4x.u.avast.com (46.165.210.10)
Fichiers téléchargés : 10 (1,61 KB)
Temps de téléchargement : 7 s

lilidurhone · Answer

4.8.1368 

Or aujourd'hui 9.0.2014

Désinstalles ta version et installe la dernière version!

douchka23 · Answer

re
ma version est desinstallée,mais je ne trouve pas la même version familiale avast 4 , version avec la boule bleue ou faut'il prendre l'orange ???
merci

lilidurhone · Answer

Tu installes la version 9!

douchka23 · Answer

re
est 'elle gratuite ?

lilidurhone · Answer

Oui

MSE est déconseillé par Microsoft lui même!

douchka23 · Answer

re
téléchargement avast 9 impossible 

detected corrupted etc  mais je ne comprends mais il me semble corruption ???
j'ai essayé plusieures fois

lilidurhone · Answer

Tu as un proxy!

Tu as bien désinstallé Spybot??

douchka23 · Answer

re
c'est quoi 1 proxy ??
oui j'ai suprimer spybot

lilidurhone · Answer

Refais un zhpdiag

douchka23 · Answer

~ Rapport de ZHPDiag v2014.2.17.15 - Nicolas Coolman (17/02/2014) ~ Lancé par Françoise (19/02/2014 18:57:41) ~ Adresse du Site Web https://nicolascoolman.webs.com/ ~ Forums gratuits d'Assistance à la désinfection : https://nicolascoolman.webs.com/ ~ Traduit par Nicolas Coolman ~ Etat de la version : ~ Liste blanche : Activée par le programme ~ Elévation des Privilèges : OK ~ User Account Control (UAC): Not Found ---\ Navigateurs Internet MSIE: Internet Explorer v8.0.6001.18702 (Defaut) ---\ Informations sur les produits Windows ~ Langage: Français Microsoft Windows XP, 32-bit Service Pack 3 (Build 2600) Windows Automatic Updates : OK Windows Genuine Advantage : OK ---\ Logiciels de protection du système Malwarebytes Anti-Malware version 1.75.0.1300 ---\ Logiciels d'optimisation du système CCleaner v4.10 =>Piriform Ltd ---\ Logiciels de partage PeerToPeer ---\ Surveillance de Logiciels Adobe Flash Player 12 ActiveX Adobe Reader XI Java 7 Update 45 ---\ Informations sur le système ~ Processor: x86 Family 6 Model 10 Stepping 0, AuthenticAMD ~ Operating System: 32 Bits Boot mode: Normal (Normal boot) Total RAM: 511 MB (52% free) System Restore: Activé (Enable) System drive D: has 52 GB (48%) free of 108 GB ---\ Mode de connexion au système ~ Computer Name: CAILLAT-6410850 ~ User Name: Françoise ~ All Users Names: SUPPORT_388945a0, Paul, HelpAssistant, Françoise, ASPNET, Administrateur, ~ Unselected Option: None Logged in as Administrator ---\ Variables d'environnement ~ System Unit : D:\ ~ %AppZHP% : D:\Documents and Settings\Françoise\Application Data\ZHP\ ~ %AppData% : D:\Documents and Settings\Françoise\Application Data\ ~ %Desktop% : D:\Documents and Settings\Françoise\Bureau\ ~ %Favorites% : D:\Documents and Settings\Françoise\Favoris\ ~ %LocalAppData% : D:\Documents and Settings\Françoise\Local Settings\Application Data\ ~ %StartMenu% : D:\Documents and Settings\Françoise\Menu Démarrer\ ~ %Windir% : D:\WINDOWS\ ~ %System% : D:\WINDOWS\system32\ ---\ Enumération des unités disques A: Floppy drive, Flash card reader, USB Key (Not Inserted) D: Hard drive, Flash drive, Thumb drive (Free 52 Go of 108 Go) E: CD-ROM drive (Not Inserted) F: CD-ROM drive (Not Inserted) I: Hard drive, Flash drive, Thumb drive (Free 3 Go of 4 Go) ---\ Etat du Centre de Sécurité Windows ~ Security Center: 45 Legitimates Filtered in 00mn 00s ---\ Recherche particulière de fichiers génériques [MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - (.Microsoft Corporation - Explorateur Windows.) (.13/04/2008 - 18:34:04.) -- D:\WINDOWS\Explorer.exe [1037824] [MD5.2988BFF8257A55EA8AFD038F49F81A34] - (.Microsoft Corporation - Internet Extensions for Win32.) (.06/02/2014 - 00:20:01.) -- D:\WINDOWS\system32\wininet.dll [920064] [MD5.DD73D6B9F6B4CB630CF35B438B540174] - (.Microsoft Corporation - Application d'ouverture de session Windows NT.) (.13/04/2008 - 18:34:30.) -- D:\WINDOWS\system32\Winlogon.exe [512000] [MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.17/08/2011 - 14:49:54.) -- D:\WINDOWS\system32\Drivers\AFD.sys [138496] [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - (.Microsoft Corporation - IDE/ATAPI Port Driver.) (.13/04/2008 - 10:40:32.) -- D:\WINDOWS\system32\Drivers\atapi.sys [96512] [MD5.C885B02847F5D2FD45A24E219ED93B32] - (.Microsoft Corporation - CD-ROM File System Driver.) (.13/04/2008 - 11:14:22.) -- D:\WINDOWS\system32\Drivers\Cdfs.sys [63744] [MD5.1F4260CC5B42272D71F79E570A27A4FE] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.13/04/2008 - 10:40:48.) -- D:\WINDOWS\system32\Drivers\Cdrom.sys [62976] [MD5.31F923EB2170FC172C81ABDA0045D18C] - (.Microsoft Corporation - Pilote de cryptographie FIPS.) (.13/04/2008 - 17:57:40.) -- D:\WINDOWS\system32\Drivers\Fips.sys [44672] [MD5.573C7D0A32852B48F3058CFD8026F511] - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) (.13/04/2008 - 08:36:06.) -- D:\WINDOWS\system32\Drivers\HDAudBus.sys [144384] [MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - (.Microsoft Corporation - Pilote de port i8042.) (.13/04/2008 - 18:00:54.) -- D:\WINDOWS\system32\Drivers\i8042prt.sys [54144] [MD5.083A052659F5310DD8B6A6CB05EDCF8E] - (.Microsoft Corporation - IMAPI Kernel Driver.) (.13/04/2008 - 10:41:00.) -- D:\WINDOWS\system32\Drivers\Imapi.sys [42112] [MD5.CC748EA12C6EFFDE940EE98098BF96BB] - (.Microsoft Corporation - IP Network Address Translator.) (.13/04/2008 - 10:57:16.) -- D:\WINDOWS\system32\Drivers\IpNat.sys [152832] [MD5.23C74D75E36E7158768DD63D92789A91] - (.Microsoft Corporation - IPSec Driver.) (.13/04/2008 - 11:19:44.) -- D:\WINDOWS\system32\Drivers\IPSec.sys [75264] [MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.15/07/2011 - 14:29:31.) -- D:\WINDOWS\system32\Drivers\MRxSmb.sys [456320] [MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - (.Microsoft Corporation - MBT Transport driver.) (.13/04/2008 - 11:21:02.) -- D:\WINDOWS\system32\Drivers etBT.sys [162816] [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - (.Microsoft Corporation - NT File System Driver.) (.13/04/2008 - 11:15:54.) -- D:\WINDOWS\system32\Drivers tfs.sys [574976] [MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - (.Microsoft Corporation - Pilote de port parallèle.) (.13/04/2008 - 18:09:42.) -- D:\WINDOWS\system32\Drivers\Parport.sys [80384] [MD5.11B4A627BC9614B885C4969BFA5FF8A6] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.13/04/2008 - 11:19:44.) -- D:\WINDOWS\system32\Drivers\Rasl2tp.sys [51328] [MD5.15CABD0F7C00C47C70124907916AF3F1] - (.Microsoft Corporation - Microsoft RDP Device redirector.) (.13/04/2008 - 10:32:52.) -- D:\WINDOWS\system32\Drivers dpdr.sys [196224] [MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) (.13/04/2008 - 17:57:36.) -- D:\WINDOWS\system32\Drivers edbook.sys [58752] [MD5.46DE1126684369BACE4849E4FC8C43CA] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.13/04/2008 - 17:56:06.) -- D:\WINDOWS\system32\Drivers\volsnap.sys [53376] ~ Generic Processes: Scanned in 00mn 01s ---\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 3/1080 ~ Mes musiques (My Musics) : 1/2 ~ Mes Videos (My Videos) : 1/65 ~ Mes Favoris (My Favorites) : 1/30 ~ Mes Documents (My Documents) : 8/2064 ~ Mon Bureau (My Desktop) : 0/19 ~ Menu demarrer (Programs) : 1/22 ~ Hidden Files: Scanned in 00mn 07s ---\ Processus lancés [MD5.0AAF6B848185899CF76AE04E62EAB3D2] - (.ALWIL Software - avast! antivirus service.) -- D:\Program Files\Alwil Software\Avast4\ashServ.exe [138680] [PID.1436] [MD5.11F714F85530A2BD134074DC30E99FCA] - (.Microsoft Corporation - Machine Debug Manager.) -- D:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.exe [322120] [PID.1648] [MD5.0C28BCC9A8A9E8CAC62A348D93DE8A46] - (.Smart Link - Pas de description.) -- D:\WINDOWS\system32\slserv.exe [73796] [PID.1308] [MD5.8EF654045E518AC00E52E7A1E2D3AD70] - (.Canon Inc. - Canon Camera Access Library 8.) -- D:\Program Files\Canon\CAL\CALMAIN.exe [96370] [PID.632] [MD5.2FC33C8AF0EFEAE056F326D67AF716A0] - (.eBay Inc. - eBay Toolbar Daemon.) -- D:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe [632048] [PID.1676] =>Toolbar.eBay [MD5.0DAD93BB0FECF5016AE3C06CBB0A873B] - (.Microsoft Corporation - COM Surrogate.) -- D:\WINDOWS\system32\dllhost.exe [5120] [PID.2452] [MD5.AB44884BC129FC04D75A4649E0710203] - (.Nicolas Coolman - ZHPDiag.) -- D:\Program Files\ZHPDiag\ZHPDiag.exe [8338432] [PID.2500] ~ Processes Running: Scanned in 00mn 01s ---\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://portail.free.fr/ ~ IE Browser: 13 Legitimates Filtered in 00mn 00s ---\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback> =>Hijacker.Proxy R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=D:\WINDOWS\system32\userinit.exe, F2 - REG:system.ini: Shell=D:\WINDOWS\explorer.exe F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ~ Keys: Scanned in 00mn 00s ---\ Hosts file redirection (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 01s ~ Nombre de lignes (Lines number): 15499 ---\ Internet Explorer Toolbars (O3) O3 - Toolbar: eBay Toolbar - [HKLM]{92085AD4-F48A-450D-BD93-B28CC7DF67CE} . (.eBay Inc. - eBayTb Dynamic Link Library.) -- D:\Program Files\eBay\eBay Toolbar2\eBayTB.dll =>Toolbar.eBay O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- D:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll =>Toolbar.Google O3 - Toolbar: Canon Easy-WebPrint EX - [HKLM]{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} . (.CANON INC. - Easy-WebPrint EX.) -- D:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Clé orpheline O3 - Toolbar\WebBrowser: (no name) - [HKCU]{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} Clé orpheline ~ Toolbar: Scanned in 00mn 00s ---\ Autres liens utilisateurs (O4) O4 - GS\Program [AllUsers]: MSN.lnk . (.Microsoft Corporation - Win32 Cabinet Self-Extractor.) -- D:\Program Files\MSN\MSNCoreFiles\Install\msnsusii.exe =>.Microsoft Corporation O4 - GS\Program [AllUsers]: Photorécit 3 pour Windows.lnk . (.Microsoft Corp. - Photo Story 3 for Windows.) -- D:\Program Files\Photo Story 3 for Windows\PhotoStory3.exe O4 - GS\Program [AllUsers]: PowerpointImageExtractor V1.2.lnk . (.--- - Pas de description.) -- D:\Program Files\PowerpointImageExtractor_V1_2\PowerpointImageExtractor.exe O4 - GS\Program [Paul]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- D:\Program Files\Internet Explorer\iexplore.exe O4 - GS\Program [Françoise]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- D:\Program Files\Internet Explorer\iexplore.exe ~ Global Startup: 16 Legitimates Filtered in 00mn 02s ---\ Applications lancées au démarrage du sytème (O4) O4 - HKLM\..\Run: [VTTimer] . (.S3 Graphics, Inc. - Pas de description.) -- D:\WINDOWS\system32\VTTimer.exe O4 - HKLM\..\Run: [UserFaultCheck] Clé orpheline O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\jre6\bin\jusched.exe (.not file.) =>.Oracle Corporation O4 - HKLM\..\Run: [SoundMan] . (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- D:\WINDOWS\SOUNDMAN.exe O4 - HKLM\..\Run: [mobilegeni daemon] D:\Program Files\Mobogenie\DaemonProcess.exe (.not file.) =>PUP.Mobogenie O4 - HKLM\..\Run: [HPDJ Taskbar Utility] . (.HP - Pas de description.) -- D:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe O4 - HKLM\..\Run: [HP Component Manager] . (.Hewlett-Packard Company - HP Framework Component Manager Service.) -- D:\Program Files\HP\hpcoretech\hpcmpmgr.exe O4 - HKLM\..\Run: [eBayToolbar] . (.eBay Inc. - eBay Toolbar Daemon.) -- D:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe =>Toolbar.eBay O4 - HKLM\..\Run: [DXDllRegExe] Clé orpheline O4 - HKLM\..\Run: [CanonSolutionMenuEx] . (.CANON INC. - Canon Solution Menu EX.) -- D:\Program Files\Canon\Solution Menu EX\CNSEMAIN.exe O4 - HKLM\..\Run: [CanonMyPrinter] . (.CANON INC. - Canon My Printer.) -- D:\Program Files\Canon\MyPrinter\BJMyPrt.exe O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- D:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated O4 - HKCU\..\Run: [SystweakASP] D:\Program Files\RegClean Pro\SystweakASP.exe (.not file.) =>Rogue.RegistryPowerCleaner O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (.not file.) O4 - HKCU\..\Run: [NextLive] D:\Documents and Settings\Françoise\Application Data ewnext.me engine.dll (.not file.) =>PUP.NextLive O4 - HKCU\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- D:\Program Files\Messenger\msmsgs.exe O4 - HKCU\..\Run: [Google+ Auto Backup] D:\Program Files\Google\Google+ Auto Backup\Google+ Auto Backup.exe (.not file.) O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Advanced System Protector_startup] D:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe (.not file.) =>PUP.AdvancedSystemProtector O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\CTFMON.exe O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] . (.Microsoft Corporation - Watson Subscriber for SENS Network Notifica.) -- D:\Program Files\Fichiers communs\Microsoft Shared\DW\DWTRIG20.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] . (.Microsoft Corporation - Watson Subscriber for SENS Network Notifica.) -- D:\Program Files\Fichiers communs\Microsoft Shared\DW\DWTRIG20.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\CTFMON.exe O4 - HKUS\S-1-5-21-1844237615-1532298954-725345543-1005\..\Run: [SystweakASP] D:\Program Files\RegClean Pro\SystweakASP.exe (.not file.) =>Rogue.RegistryPowerCleaner O4 - HKUS\S-1-5-21-1844237615-1532298954-725345543-1005\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- D:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe =>Toolbar.Google O4 - HKUS\S-1-5-21-1844237615-1532298954-725345543-1005\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (.not file.) O4 - HKUS\S-1-5-21-1844237615-1532298954-725345543-1005\..\Run: [NextLive] D:\Documents and Settings\Françoise\Application Data ewnext.me engine.dll (.not file.) =>PUP.NextLive O4 - HKUS\S-1-5-21-1844237615-1532298954-725345543-1005\..\Run: [MSMSGS] . (.Microsoft Corporation - Windows Messenger.) -- D:\Program Files\Messenger\msmsgs.exe O4 - HKUS\S-1-5-21-1844237615-1532298954-725345543-1005\..\Run: [Google+ Auto Backup] D:\Program Files\Google\Google+ Auto Backup\Google+ Auto Backup.exe (.not file.) O4 - HKUS\S-1-5-21-1844237615-1532298954-725345543-1005\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-21-1844237615-1532298954-725345543-1005\..\Run: [Advanced System Protector_startup] D:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe (.not file.) =>PUP.AdvancedSystemProtector ~ Application: Scanned in 00mn 02s ---\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (...) -- D:\Program Files\Microsoft Office\OFFICE11\REFBARH.ICO O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} -- Clé orpheline O9 - Extra button: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} . (.Microsoft Corporation - Windows Messenger.) -- D:\Program Files\Messenger\msmsgs.exe ~ IE Extra Buttons: Scanned in 00mn 00s ---\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} ((no name)) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab O16 - DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} ((no name)) - https://www.bitdefender.com/toolbox/ O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} ((no name)) - http://copainsdavant.linternaute.com/framework/lib/objimageuploader/html_include/5.1.1.0/ImageUploader5.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} ((no name)) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1343895655437 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} ((no name)) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1349603141218 O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} ((no name)) - http://fichiers.touslesdrivers.com/maconfig/MaConfig_5_1_2_1.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} ((no name)) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab ~ Objets ActiveX: Scanned in 00mn 00s ---\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{B256370B-3DDC-440C-B7BB-61533EAA6A8D}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{B256370B-3DDC-440C-B7BB-61533EAA6A8D}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{B256370B-3DDC-440C-B7BB-61533EAA6A8D}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS3\Services\Tcpip\..\{B256370B-3DDC-440C-B7BB-61533EAA6A8D}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ~ Domain: Scanned in 00mn 00s ---\ Protocole additionnel (O18) O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- D:\WINDOWS\system32\wiascr.dll O18 - Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- D:\Program Files\Fichiers communs\Microsoft Shared\OFFICE11\MSOXMLMF.dll =>.Microsoft Corporation ~ Protocole Additionnel: Scanned in 00mn 00s ---\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: crypt32chain . (.Microsoft Corporation - Crypto API32.) -- D:\WINDOWS\system32\crypt32.dll O20 - Winlogon Notify: cryptnet . (.Microsoft Corporation - Crypto Network Related API.) -- D:\WINDOWS\system32\cryptnet.dll O20 - Winlogon Notify: cscdll . (.Microsoft Corporation - Agent réseau hors connexion.) -- D:\WINDOWS\system32\cscdll.dll O20 - Winlogon Notify: dimsntfy . (.Microsoft Corporation - DIMS Notification Handler.) -- D:\WINDOWS\system32\dimsntfy.dll O20 - Winlogon Notify: ScCertProp . (.Microsoft Corporation - DLL commune de réception des notifications.) -- D:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: Schedule . (.Microsoft Corporation - DLL commune de réception des notifications.) -- D:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: sclgntfy . (.Microsoft Corporation - DLL secondaire de notification de service d.) -- D:\WINDOWS\system32\sclgntfy.dll O20 - Winlogon Notify: SensLogn . (.Microsoft Corporation - DLL commune de réception des notifications.) -- D:\WINDOWS\system32\WlNotify.dll O20 - Winlogon Notify: termsrv . (.Microsoft Corporation - DLL commune de réception des notifications.) -- D:\WINDOWS\system32\wlnotify.dll O20 - Winlogon Notify: wlballoon . (.Microsoft Corporation - DLL commune de réception des notifications.) -- D:\WINDOWS\system32\wlnotify.dll ~ Winlogon: Scanned in 00mn 00s ---\ Enumération Active Desktop & MHTML Editor (O24) O24 - Desktop General: BackupWallPaper - .(...) - D:\Documents and Settings\Françoise\Local Settings\Application Data\Microsoft\Wallpaper1.bmp O24 - Desktop General: WallPaper - .(...) - D:\Documents and Settings\Françoise\Local Settings\Application Data\Microsoft\Wallpaper1.bmp ~ Desktop Component: 4 Legitimates Filtered in 00mn 00s ---\ Logiciels installés (O42) O42 - Logiciel: Camera Suite - (...) [HKLM] -- {AD13BFB0-FDD2-4AFA-A8AF-9F4A950D56B7} O42 - Logiciel: ImageScanTool V2.0.2 - (.Nom de votre société.) [HKLM] -- {F0ACDDA3-1DC3-43C0-84E6-43E927C3E2F7} ~ Logic: 41 Legitimates Filtered in 00mn 01s ---\ HKCU & HKLM Software Keys [HKCU\Software\IncrediMail] [HKLM\Software\FasterPC] ~ Key Software: 272 Legitimates Filtered in 00mn 01s ---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 01/10/2012 - 15:48:27 - [0,024] ----D D:\Program Files\FileConverter_1.5 O43 - CFD: 15/04/2013 - 10:00:27 - [1,414] ----D D:\Program Files\ScreenMates O43 - CFD: 30/11/2013 - 12:19:01 - [7,447] ----D D:\Program Files\Sim AQUARIUM 2 O43 - CFD: 01/10/2012 - 16:00:15 - [0,024] ----D D:\Program Files\WiseConvert_1.5 =>Toolbar.Conduit O43 - CFD: 01/07/2013 - 09:57:35 - [0] ----D D:\Documents and Settings\All Users\Application Data\IM O43 - CFD: 01/07/2013 - 09:53:54 - [0,012] ----D D:\Documents and Settings\All Users\Application Data\IncrediMail O43 - CFD: 01/08/2011 - 11:43:27 - [0,010] ----D D:\Documents and Settings\All Users\Application Data\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42}(2) O43 - CFD: 06/10/2012 - 15:13:58 - [0,767] ----D D:\Documents and Settings\Françoise\Local Settings\Application Data\FileConverter_1.5 O43 - CFD: 12/02/2014 - 15:22:11 - [0] ----D D:\Documents and Settings\Françoise\Local Settings\Application Data\genienext O43 - CFD: 01/07/2013 - 09:59:15 - [11,415] ----D D:\Documents and Settings\Françoise\Local Settings\Application Data\IM O43 - CFD: 06/10/2012 - 15:20:15 - [0,799] ----D D:\Documents and Settings\Françoise\Local Settings\Application Data\WiseConvert_1.5 =>Toolbar.Conduit O43 - CFD: 16/04/2013 - 13:17:55 - [0,001] ----D D:\Documents and Settings\Françoise\Menu Démarrer\Programmes\Felix II - Français ~ Program Folder: 188 Legitimates Filtered in 00mn 19s ---\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 16/02/2014 - 11:49:07 ----- . (...) -- D:\WINDOWS\Sti_Trace.log [0] O44 - LFC:[MD5.C804F5458B60CB3C9F5CD8560B3E8BAD] - 16/02/2014 - 14:55:38 ----- . (...) -- D:\WINDOWS\wiaservc.log [50] O44 - LFC:[MD5.2202F650AB66933DC385C9AEBF1B5596] - 19/02/2014 - 06:46:19 ----- . (...) -- D:\WINDOWS\wiadebug.log [513] O44 - LFC:[MD5.C9DD76D0EF94637C77FF8CA5E0FB0684] - 19/02/2014 - 08:29:09 ---A- . (...) -- D:\WINDOWS\system.ini [227] O44 - LFC:[MD5.902B26896FFE676588281B1303027F03] - 19/02/2014 - 08:29:09 ---A- . (...) -- D:\WINDOWS\win.ini [759] O44 - LFC:[MD5.D9F6F3ED055F5C45F7B26BE770687625] - 19/02/2014 - 16:13:21 ---A- . (...) -- D:\WINDOWS\wininit.ini [1442] O44 - LFC:[MD5.C8CB90E735C0541D7BF2ABCA6076D752] - 19/02/2014 - 18:57:53 ---A- . (...) -- D:\Documents [120] ~ Files: 41 Legitimates Filtered in 00mn 36s ---\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.CE04DBD7F44E3FEA7B54AC06AD7C9981] - 18/02/2014 - 10:25:23 ---A- - D:\WINDOWS\Prefetch\ASHDISP.EXE-204B2541.pf O45 - LFCP:[MD5.F6AE8009132957D79881813DB53E3023] - 18/02/2014 - 13:10:43 ---A- - D:\WINDOWS\Prefetch\MICROSOFT-FIX-IT-CENTER-2010_-0329FFDF.pf O45 - LFCP:[MD5.A862A2203B234BFDDB1BE4CB09698893] - 18/02/2014 - 13:10:48 ---A- - D:\WINDOWS\Prefetch\AUTORUN.EXE-3693A1EC.pf O45 - LFCP:[MD5.1F648CBBD3131627C0917C5491F585AC] - 18/02/2014 - 20:28:28 ---A- - D:\WINDOWS\Prefetch\CAPTVTY-1.11.14.1-AUTOEXTRACT-1BBEC276.pf O45 - LFCP:[MD5.5DF5C61A51DAD6BCBC9BAD0E10875CCE] - 19/02/2014 - 06:38:36 ---A- - D:\WINDOWS\Prefetch\CAMERAWINDOWDC.EXE-18604746.pf O45 - LFCP:[MD5.CBF4FBD090722C8AB11CE057312F5C03] - 19/02/2014 - 06:55:10 ---A- - D:\WINDOWS\Prefetch\SPUNINST.EXE-00BF0844.pf O45 - LFCP:[MD5.A19DD74A485D178E28BE264C294D2308] - 19/02/2014 - 06:55:22 ---A- - D:\WINDOWS\Prefetch\PSCUSTOMSETUPUTIL.EXE-054BB274.pf O45 - LFCP:[MD5.D3412CA3B0D1B9DE5648EF5B2F5EA8B9] - 19/02/2014 - 15:08:08 ---A- - D:\WINDOWS\Prefetch\ASW6NOTI.EXE-20595E87.pf O45 - LFCP:[MD5.521D90B626B82E20ADDD8BCC3B6E32A9] - 19/02/2014 - 16:11:34 ---A- - D:\WINDOWS\Prefetch\_IU14D2N.TMP-140BFB8F.pf O45 - LFCP:[MD5.7E15B3FBAEAAC634DCB8CBB6F2F3A981] - 19/02/2014 - 17:15:20 ---A- - D:\WINDOWS\Prefetch\ASHLOGV.EXE-1BE54756.pf O45 - LFCP:[MD5.A7D92CDC4F8AF92D9B045FC033FB4D86] - 19/02/2014 - 17:44:57 ---A- - D:\WINDOWS\Prefetch\ASHCNSNT.EXE-251535F0.pf O45 - LFCP:[MD5.9A38EFFCACC344027913DE93DD99A45C] - 19/02/2014 - 17:45:04 ---A- - D:\WINDOWS\Prefetch\ASHPOPWZ.EXE-060AD6CA.pf O45 - LFCP:[MD5.86F4C63DDD9951769996C3C1AC1B9480] - 19/02/2014 - 18:10:08 ---A- - D:\WINDOWS\Prefetch\HPZTSB09.EXE-0B2F530F.pf O45 - LFCP:[MD5.6BA7CD1ED21035A7F532E9E930FBB5DD] - 19/02/2014 - 18:10:14 ---A- - D:\WINDOWS\Prefetch\VTTIMER.EXE-23FE10E9.pf O45 - LFCP:[MD5.FBEB438D94BC9FAB99454FB47E6F8652] - 19/02/2014 - 18:10:16 ---A- - D:\WINDOWS\Prefetch\EBAYTBDAEMON.EXE-02C07143.pf =>Toolbar.eBay O45 - LFCP:[MD5.6C37FB0ADFEDF16E6AD154E19333128E] - 19/02/2014 - 18:10:16 ---A- - D:\WINDOWS\Prefetch\HPCMPMGR.EXE-0429AD9A.pf ~ Prefetcher: 112 Legitimates Filtered in 00mn 01s ---\ Opérations et fonctions au démarrage de Windows Explorer (O46) O46 - SEH:ShellExecuteHooks - URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - shell32.dll ~ ShellExecuteHooks: Scanned in 00mn 00s ---\ Export de clé d'application autorisée (O47) O47 - AAKE:Key Export SP - "D:\Program Files\IncrediMail\Bin\IncMail.exe" [Enabled] .(...) -- D:\Program Files\IncrediMail\Bin\IncMail.exe (.not file.) O47 - AAKE:Key Export SP - "D:\Program Files\IncrediMail\Bin\ImApp.exe" [Enabled] .(...) -- D:\Program Files\IncrediMail\Bin\ImApp.exe (.not file.) O47 - AAKE:Key Export SP - "D:\Program Files\IncrediMail\Bin\ImpCnt.exe" [Enabled] .(...) -- D:\Program Files\IncrediMail\Bin\ImpCnt.exe (.not file.) ~ Keys Export: 10 Legitimates Filtered in 00mn 00s ---\ Image File Execution Options (IFEO) (O50) O50 - IFEO:Image File Execution Options - Your Image File Name Here without a path - ntsd -d ~ IFEO: Scanned in 00mn 00s ---\ Enumération des clés de registre StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\Felix II [Key] . (...) -- D:\Program Files\ScreenMates\Felix II\Fr\Felix2.exe ~ SMSR Keys: 1 Legitimates Filtered in 00mn 00s ---\ Liste des pilotes du système (SDL) (O58) O58 - SDL:[MD5.6D3ADA4CE95CECA7BCE527A08C4C474E] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32\ansi.sys [9037] O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32\country.sys [27097] O58 - SDL:[MD5.C6D29F29DE7427B1B0775E53E577B623] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32\himem.sys [4912] O58 - SDL:[MD5.582BCDD47CF4B68B5CB528F18E3CB808] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32\key01.sys [42809] O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32\keyboard.sys [42537] O58 - SDL:[MD5.7D30A74B5FB9FE3B245A6CE5FBCD71D5] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32 tdos.sys [27916] O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32 tdos404.sys [29146] O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32 tdos411.sys [29370] O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32 tdos412.sys [29274] O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32 tdos804.sys [29146] O58 - SDL:[MD5.CAAA108FD7BF71989946B39704323455] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32 tio.sys [34000] O58 - SDL:[MD5.6F73F50162DEF60C84B725C18CD9140F] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32 tio404.sys [34560] O58 - SDL:[MD5.0FDD5E69C1FF3B58043D44F2CC743D45] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32 tio411.sys [35648] O58 - SDL:[MD5.8842837C4D8311BF8E72BEE8CCC42217] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32 tio412.sys [35424] O58 - SDL:[MD5.6B56CEB3C6F9D5CD7293DBD9FE23B311] - 02/03/2006 - 13:00:00 ---A- . (...) -- D:\WINDOWS\system32 tio804.sys [34560] ~ Drivers: 5 Legitimates Filtered in 00mn 01s ---\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC: 16/02/2014 - 18:59:45 ---A- . (...) -- D:\Documents and Settings\Françoise\Favoris\Liens\Abonnement Adsl Haut débit avec Alice France. Page d'accueil du portail.url [721] O61 - LFC: 16/02/2014 - 18:59:45 R--A- . (...) -- D:\Documents and Settings\Françoise\Application Data\ZHP\HOSTS.txt [449958] =>.Nicolas Coolman O61 - LFC: 16/02/2014 - 18:59:57 ---A- . (...) -- D:\Documents and Settings\Françoise\Local Settings\Application Data\Microsoft\Internet Explorer\frameiconcache.dat [18382] O61 - LFC: 17/02/2014 - 18:59:45 ---A- . (...) -- D:\Documents and Settings\Françoise\Bureau\Microsoft Office Word 2003.lnk [2573] O61 - LFC: 18/02/2014 - 18:59:22 -SHA- . (...) -- D:\Documents and Settings\Françoise\Application Data\Microsoft\Internet Explorer\Desktop.htt [2708] O61 - LFC: 18/02/2014 - 18:59:45 ---A- . (...) -- D:\Documents and Settings\Françoise\Bureau\Crédit Agricole de Champagne-Bourgogne - Accueil - Particuliers - Crédit Agricole.url [233] O61 - LFC: 18/02/2014 - 18:59:45 ---A- . (...) -- D:\Documents and Settings\Françoise\Bureau\Forum Logiciels.url [272] O61 - LFC: 18/02/2014 - 18:59:45 ---A- . (...) -- D:\Documents and Settings\Françoise\Bureau\Vos messages.url [1380] O61 - LFC: 18/02/2014 - 18:59:45 ---A- . (...) -- D:\Documents and Settings\Françoise\Favoris\Activation de Java via le panneau de configuration.url [259] O61 - LFC: 18/02/2014 - 18:59:45 ---A- . (...) -- D:\Documents and Settings\Françoise\Favoris\Astuces et Depannages Informatique.url [178] O61 - LFC: 18/02/2014 - 18:59:45 ---A- . (...) -- D:\Documents and Settings\Françoise\Favoris\Résolution des problèmes Windows Update ne fonctionne pas.url [275] O61 - LFC: 18/02/2014 - 18:59:57 ---A- . (...) -- D:\Documents and Settings\Françoise\Local Settings\Application Data\Microsoft\HelpCtr\HelpSessionHistory.dat [12334] O61 - LFC: 19/02/2014 - 18:59:22 ---A- . (...) -- D:\Documents and Settings\Françoise\Application Data\eBay\eBay Toolbar2\User_ulka23.dat [4646] =>Toolbar.eBay O61 - LFC: 19/02/2014 - 18:59:23 -SHA- . (...) -- D:\Documents and Settings\Françoise\Application Data\Microsoft\Internet Explorer\UserData\index.dat [32768] O61 - LFC: 19/02/2014 - 18:59:45 ---A- . (...) -- D:\Documents and Settings\Françoise\Application Data\ZHP\Log.txt [133666] =>.Nicolas Coolman O61 - LFC: 19/02/2014 - 18:59:45 ---A- . (...) -- D:\Documents and Settings\Françoise\Application Data\ZHP\TestsZHPDiag.txt [3390] =>.Nicolas Coolman O61 - LFC: 19/02/2014 - 18:59:45 ---A- . (...) -- D:\Documents and Settings\Françoise\Application Data\ZHP\ZHPDiag.txt [43633] =>.Nicolas Coolman O61 - LFC: 19/02/2014 - 18:59:45 ---A- . (...) -- D:\Documents and Settings\Françoise\Bureau\Connexion internet.url [318] O61 - LFC: 19/02/2014 - 18:59:45 ---A- . (...) -- D:\Documents and Settings\Françoise\Bureau\ZHPDiag.lnk [1523] =>.Nicolas Coolman O61 - LFC: 19/02/2014 - 18:59:45 ---A- . (...) -- D:\Documents and Settings\Françoise\Bureau\ZHPFix.lnk [1628] =>.Nicolas Coolman O61 - LFC: 19/02/2014 - 18:59:45 ---A- . (...) -- D:\Documents and Settings\Françoise\Favoris\AVAST installation & réglages !.url [238] O61 - LFC: 19/02/2014 - 18:59:45 ---A- . (...) -- D:\Documents and Settings\Françoise\Favoris\Cjoint Héberger un document Blog Informatique SHZ.url [2310] O61 - LFC: 19/02/2014 - 18:59:45 ---A- . (...) -- D:\Documents and Settings\Françoise\Favoris\Les mises à jour ne s'installent plus avec Windows Update - Microsoft Community.url [1218] O61 - LFC: 19/02/2014 - 18:59:45 ---A- . (...) -- D:\Documents and Settings\Françoise\Favoris\Télécharger Avast Antivirus (gratuit).url [611] O61 - LFC: 19/02/2014 - 18:59:45 -SHA- . (...) -- D:\Documents and Settings\Françoise\IECompatCache\index.dat [65536] O61 - LFC: 19/02/2014 - 18:59:46 -SHA- . (...) -- D:\Documents and Settings\Françoise\IETldCache\index.dat [262144] O61 - LFC: 19/02/2014 - 18:59:48 ---A- . (...) -- D:\Documents and Settings\Françoise\Local Settings\Application Data\Google\Chrome\User Data\Default\History [1196032] O61 - LFC: 19/02/2014 - 19:00:07 ---A- . (...) -- D:\Documents and Settings\Françoise\Mes documents\Raccourci vers ZHP.lnk [443] =>.Nicolas Coolman O61 - LFC: 19/02/2014 - 19:00:07 ---A- . (...) -- D:\Documents and Settings\Françoise\Mes documents r_ Fw_ L'amour n'a pas de prix.eml [11878] O61 - LFC: 19/02/2014 - 19:00:07 -SHA- . (...) -- D:\Documents and Settings\Françoise\PrivacIE\index.dat [16187392] O61 - LFC: 19/02/2014 - 19:00:08 ---A- . (...) -- D:\Documents and Settings\Françoise\Recent\WINDOWS.lnk [392] O61 - LFC: 19/02/2014 - 19:00:08 ---A- . (...) -- D:\Documents and Settings\Françoise\Recent\WindowsUpdate.lnk [554] O61 - LFC: 19/02/2014 - 19:00:08 ---A- . (...) -- D:\Documents and Settings\Françoise\Recent\ZHP.lnk [459] =>.Nicolas Coolman O61 - LFC: 19/02/2014 - 19:00:08 ---A- . (...) -- D:\Documents and Settings\Françoise\Recent\ZHPDiag (2).lnk [508] =>.Nicolas Coolman O61 - LFC: 19/02/2014 - 19:00:08 ---A- . (...) -- D:\Documents and Settings\Françoise\Recent\ZHPDiag.lnk [483] =>.Nicolas Coolman O61 - LFC: 19/02/2014 - 19:00:08 ---A- . (...) -- D:\Documents and Settings\Françoise\Recent\ZHPScan.lnk [666] =>.Nicolas Coolman ~ 9 Fichiers temporaires (Temporary files) ~ 120 Fichiers cookies (Cookies files) ~ Files: 220 Legitimates Filtered in 00mn 46s ---\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Not Key.) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- D:\Program Files\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\ Recherche d'infection sur les navigateurs internet (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8 O69 - SBI: SearchScopes [HKCU] {E8C45DC7-EEB0-433B-9C7A-30632563842B} - (Google) - https://www.google.com/?gws_rd=ssl O69 - SBI: SearchScopes [HKCU] {F746E47D-9786-4780-84E0-18E9236FB29C} - (Yahoo! Search) - https://fr.search.yahoo.com/ ~ Keys: Scanned in 00mn 00s ---\ Enumère les codes produits des logiciels (PUC) (O90) O90 - PUC: "3ADDCA0F3CD10C34486E349E723C2E7F" . (.ImageScanTool V2.0.2.) -- D:\WINDOWS\Installer\{F0ACDDA3-1DC3-43C0-84E6-43E927C3E2F7}\ARPPRODUCTICON.exe ~ Update Products: 34 Legitimates Filtered in 00mn 00s ---\ Recherche des packages WindowsInstaller (WIS) (O93) (NTFS) [MD5.977CE56F479042E8932FEC5BACFBBE48] [WIS][26/12/2013] (.35mm Film Scanner - ImageScanTool V2.0.2.) -- D:\Windows\Installer\1b5599f.msi [828928] ~ WIS: 37 Legitimates Filtered in 00mn 04s ---\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 05/02/2014 257928 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - D:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe SS - | Demand 13/04/2008 225280 | (dmadmin) . (.Microsoft Corp., Veritas Software.) - D:\WINDOWS\system32\dmadmin.exe SS - | Demand 15/05/2011 182768 | (gusvc) . (.Google.) - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe SS - | Demand 12/04/2011 311744 | (maconfservice) . (.CybelSoft.) - D:\Program Files\ma-config.com\maconfservice.exe SS - | Auto 10/07/1658 0 | (moohelp) . (...) - D:\Program Files\The Cleaner\mhelper.exe SS - | Demand 18/03/2004 65536 | (Pml Driver HPZ12) . (.HP.) - D:\WINDOWS\system32\HPZipm12.exe SR - | Disabled 10/07/1658 0 | (aswUpdSv) . (...) - D:\Program Files\Alwil Software\Avast4\aswUpdSv.exe SR - | Disabled 24/11/2009 138680 | (avast! Antivirus) . (.ALWIL Software.) - D:\Program Files\Alwil Software\Avast4\ashServ.exe SR - | Disabled 10/07/1658 0 | (avast! Mail Scanner) . (...) - D:\Program Files\Alwil Software\Avast4\ashMaiSv.exe SR - | Disabled 10/07/1658 0 | (avast! Web Scanner) . (...) - D:\Program Files\Alwil Software\Avast4\ashWebSv.exe SR - | Auto 31/01/2007 96370 | (CCALib8) . (.Canon Inc..) - D:\Program Files\Canon\CAL\CALMAIN.exe SR - | Auto 13/04/2008 73796 | (SLService) . (.Smart Link.) - D:\WINDOWS\system32\slserv.exe ~ Services: Scanned in 00mn 06s ---\ Recherche d'infection sur le Master Boot Record (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net Run by Françoise at 19/02/2014 19:01:05 device: opened successfully user: MBR read successfully Disk trace: called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys viaide.sys PCIIDEX.SYS 1 nt!IofCallDriver[0x804E3735] >> \Device\Harddisk0\DR0[0x83317AB8] kernel: MBR read successfully user & kernel MBR OK ~ MBR: 13 Legitimates Filtered in 00mn 02s ---\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by Françoise at 19/02/2014 19:01:07 ********* Dump file Name ********* D:\PhysicalDisk0_MBR.bin ~ MBR: Scanned in 00mn 04s ---\ Scan Additionnel (O88) Database Version : 13031 - (17/02/2014) Clés trouvées (Keys found) : 1 Valeurs trouvées (Values found) : 3 Dossiers trouvés (Folders found) : 3 Fichiers trouvés (Files found) : 1 [HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\PriceGong] =>Adware.PriceGong [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{92085AD4-F48A-450D-BD93-B28CC7DF67CE} =>Toolbar.eBay^ [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:mobilegeni daemon =>PUP.Mobogenie^ [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:SystweakASP =>Rogue.RegistryPowerCleaner^ D:\Program Files\WiseConvert_1.5 =>Toolbar.Conduit^ D:\Documents and Settings\Françoise\Local Settings\Application Data\WiseConvert_1.5 =>Toolbar.Conduit^ D:\Documents and Settings\Françoise\Application Data\mediabarbs =>PUP.BearShare D:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe =>Toolbar.eBay^ ~ Additionnel Scan: 188816 Items scanned in 00mn 32s ---\ Récapitulatif des détections trouvées sur votre station ~ http://nicolascoolman.webs.com/apps/blog/show/27232411-hijacker-proxy =>Hijacker.Proxy ~ http://nicolascoolman.webs.com/apps/blog/show/41034005-pup-mobogenie =>PUP.Mobogenie ~ http://nicolascoolman.webs.com/apps/blog/show/29295819-rogue-registrypowercleaner =>Rogue.RegistryPowerCleaner ~ http://nicolascoolman.webs.com/apps/blog/show/40528410-pup-nextlive =>PUP.NextLive ~ http://nicolascoolman.webs.com/apps/blog/show/26630283-pup-advancedsystemprotector =>PUP.AdvancedSystemProtector ~ http://nicolascoolman.webs.com/apps/blog/show/29507721-toolbar-conduit =>Toolbar.Conduit ~ http://nicolascoolman.webs.com/apps/blog/show/26666995-adware-pricegong =>Adware.PriceGong ~ http://nicolascoolman.webs.com/apps/blog/show/26705717-pup-bearshare =>PUP.BearShare ~ MSI: 8 link(s) detected in 00mn 32s ~ 1271 Legitimates filtered by white list End of the scan (541 lines in 03mn 59s)(0)

lilidurhone · Answer

J'ai vu ton message :)

On continue demain :)

douchka23 · Answer

bonjour
je n'arrivais pas a envoyer de réponses
donc j'ai fait une restauration ce qui m'a m a ramené a avast 4.5 familiale qui ne fonctionne pas donc surement a suprimer ??et apparament je peut me connecter!!!!!? 
  du moins j'espere

donc probleme avec avast 9 ????

lilidurhone · Answer

Tout est à refaire :(

Tu n'avais même pas installé avast 9 puisque le téléchargement te disais qu'il était corrompu :(

douchka23 · Answer

re
si je l'ai installé apres un redemarrage de l'ordi
et c'est là que je pouvais plus ecrire ou repondre aux messages

lilidurhone · Answer

Du coup je te propose de passer sur AVG !

Tu va pas rester sur une vieille version d'Avast

Qu'en penses tu?

douchka23 · Answer

re
oui je suis d'accord mais il va falloir  réinstaller avast 4.5 familial
j'ai toutes les boules bleues mais ne fonctionne pas

lilidurhone · Answer

Désinstaller plutôt?
:)

douchka23 · Answer

re
donc je désinstalle et essaie de réinstaller avast familiale bleu  ??

lilidurhone · Answer

Tu désinstalles avast et installe AVG :)

douchka23 · Answer

re
c'est quoi AVG ?

lilidurhone · Answer

Un antivirus tout comme Avira ou avast :)

A toi de choisir ;)

douchka23 · Answer

re
avast 4.5 ne veut pas ce désinstaller
faut'il que je face une restauration pour revenir a avast 9 et là desinstaller ce dernier pour installer un autre anti virus ???

lilidurhone · Answer

Utilise revo pour le désinstaller :)

https://www.commentcamarche.net/telecharger/utilitaires/19405-revo-uninstaller/

douchka23 · Answer

re
j'ai enfin desinstaller avast je n'ai plus d'antivirus lequel est le mieux en gratuit ??
j'avais l'ancienne version boule bleue je vais essayer de la trouver
merci

lilidurhone · Answer

http://www.filehippo.com/fr/download_avg_antivirus/

douchka23 · Answer

re
enfin me revoilà j'ai effectivement retrouvé avast 4.5 familial pas la même clé
exiprant le 1er avril2014 at date expiration mises a jour lundi 1 avril 2013 01 00 00 ou est ce un N°
voilà ce qui est ecrit, je ne comprend pas
mais au redémarrage ie ne démarrait pas (c'est mon 1er poste)
j'ai entré avast avant d'avoir vu votre dernier message ???? me proposant filehippo

lilidurhone · Answer

Désinstalles cette version d'avast qui est largement dépassée

Installes AVG

douchka23 · Answer

ok je vais essayé
merci mais quelle version ??
ccm il y en a plusieurs  est ce la 8.5 et sur fillippo aussi 32 ou 64 bit ?

douchka23 · Answer

re
j'attends votre réponse pour savoir ce que je fais
je suis sans doute pénible mais j'ai toujours  peur de faire des bêtises
merci

lilidurhone · Answer

Version 2014 pour AVG

" Microsoft Windows XP, 32-bit Service Pack 3 "

32 -bit

douchka23 · Answer

re encore moi
faut'il selectionné personnalisé ou recommandé pour avg 2014

douchka23 · Answer

re
donc avg est activé j'espere que mon message va rester
j'ai redémarré pour pouvoir ecrire 
j'ai l'mpression que ça c'est bien passé enfin 1 antivirus qui convient!!!! j'espere que ça va durer
merci

lilidurhone · Answer

:)

Refais un zhpdiag :)

douchka23 · Answer

https://www.cjoint.com/?DBuvgSD0dXP

lilidurhone · Answer

Attention script personnalisé à ne pas reproduire sur un autre ordinateur risque de plantage !   
* Copies uniquement les lignes indiquées en gras ci-dessous dans le presse papier soit le bloc note(tu surlignes avec la souris puis clic droit copier de Script ZHPFix jusqu'à la fin soit sysrestore)


Script ZHPFix
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback> =>Hijacker.Proxy
O4 - HKLM\..\Run: [UserFaultCheck] Clé orpheline 
O4 - HKLM\..\Run: [mobilegeni daemon] D:\Program Files\Mobogenie\DaemonProcess.exe (.not file.) =>PUP.Mobogenie
O4 - HKCU\..\Run: [SystweakASP] D:\Program Files\RegClean Pro\SystweakASP.exe (.not file.) =>Rogue.RegistryPowerCleaner
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (.not file.) 
OPT:O4 - HKCU\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\ctfmon.exe 
OPT:O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\CTFMON.exe 

OPT:O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\CTFMON.exe 
OPT:O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\CTFMON.exe 
OPT:O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\CTFMON.exe 
OPT:O4 - HKUS\S-1-5-21-1844237615-1532298954-725345543-1005\..\Run: [ctfmon.exe] . (.Microsoft Corporation - CTF Loader.) -- D:\WINDOWS\system32\ctfmon.exe 
O4 - HKUS\S-1-5-21-1844237615-1532298954-725345543-1005\..\Run: [Advanced System Protector_startup] D:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe (.not file.) =>PUP.AdvancedSystemProtector
O4 - HKUS\S-1-5-21-1844237615-1532298954-725345543-1005\..\Run: [SystweakASP] D:\Program Files\RegClean Pro\SystweakASP.exe (.not file.) =>Rogue.RegistryPowerCleaner
O4 - HKUS\S-1-5-21-1844237615-1532298954-725345543-1005\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (.not file.)
O4 - HKCU\..\Run: [Advanced System Protector_startup] D:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe (.not file.) =>PUP.AdvancedSystemProtector
[HKCU\Software\IncrediMail]
[HKLM\Software\FasterPC]
O43 - CFD: 01/10/2012 - 16:00:15 - [0,024] ----D D:\Program Files\WiseConvert_1.5 =>Toolbar.Conduit
O43 - CFD: 01/07/2013 - 09:57:35 - [0] ----D D:\Documents and Settings\All Users\Application Data\IM
O43 - CFD: 12/02/2014 - 15:22:11 - [0] ----D D:\Documents and Settings\Françoise\Local Settings\Application Data\genienext
O43 - CFD: 06/10/2012 - 15:20:15 - [0,799] ----D D:\Documents and Settings\Françoise\Local Settings\Application Data\WiseConvert_1.5 =>Toolbar.Conduit
O47 - AAKE:Key Export SP - "D:\Program Files\IncrediMail\Bin\IncMail.exe" [Enabled] .(...) -- D:\Program Files\IncrediMail\Bin\IncMail.exe (.not file.)
O47 - AAKE:Key Export SP - "D:\Program Files\IncrediMail\Bin\ImApp.exe" [Enabled] .(...) -- D:\Program Files\IncrediMail\Bin\ImApp.exe (.not file.)
O47 - AAKE:Key Export SP - "D:\Program Files\IncrediMail\Bin\ImpCnt.exe" [Enabled] .(...) -- D:\Program Files\IncrediMail\Bin\ImpCnt.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\NextLive  [Key] . (...) -- D:\Documents and Settings\Françoise\Application Data
ewnext.me
engine.dll (.not file.) =>PUP.NextLive
[HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\NextLive]   =>PUP.NextLive^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\PriceGong]   =>Adware.PriceGong
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{92085AD4-F48A-450D-BD93-B28CC7DF67CE}   =>Toolbar.eBay^
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:mobilegeni daemon   =>PUP.Mobogenie^
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:SystweakASP   =>Rogue.RegistryPowerCleaner^
D:\Program Files\WiseConvert_1.5   =>Toolbar.Conduit^
D:\Documents and Settings\Françoise\Local Settings\Application Data\WiseConvert_1.5   =>Toolbar.Conduit^
D:\Documents and Settings\Françoise\Application Data\mediabarbs   =>PUP.BearShare
D:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe   =>Toolbar.eBay^
sysrestore


* Lance ZHPFix (icône seringue)en tant qu'administrateur(si tu es sous Vista/7/8)sinon double clique sur l'icône en forme de seringue  puis clique sur OK pour continuer.

* Cliques sur importer(Dans certains cas le script se colle automatiquement dans la zone de script et ne nécessite pas de cliquer sur le bouton "IMPORTER".)

* Si tu ne vois pas les lignes clic droit dans l'encadré puis coller

* Clique sur le bouton GO pour lancer le nettoyage, et laisse l'outil travailler.

* Zhpfix te proposera de vider la corbeille si tu le souhaites cliques sur oui si tu ne le souhaites pas cliques sur non

* Redémarre le PC et poste le rapport C:\ZHP\ZHPFixReport.txt

douchka23 · Answer

bonjour,
quand je clic sur continuer j'ai une fenêtre d'avertissement
je clic sur ok mais rien ne se passe 
je reclic sur continuer et idem, que faire
merci

lilidurhone · Answer

Tu copies bien de Script ZHPFix à sysrestore?

douchka23 · Answer

re
ecoute je clic sur zhp fix sur bureau que j'ai eu avec zhp diag là s'ouvre la fenêtre je clic sur importer puis sur go et la fenêtre d'avertissement je clic sur ok et je reparre a zero

douchka23 · Answer

re
 Rapport de ZHPFix 2014.2.16.5 par Nicolas Coolman, Update du 16/02/2014
Fichier d'export Registre : 
Run by Françoise at 21/02/2014 09:16:09
High Elevated Privileges : OK
Windows XP Home Edition Service Pack 3 (Build 2600)

Corbeille vidée (00mn 01s)


========== Récapitulatif ==========


End of clean in 00mn 01s

========== Chemin de fichier rapport ==========
D:\Documents and Settings\Françoise\Application Data\ZHP\ZHPFix[R1].txt - 21/02/2014 09:16:11 [380]

je ne suis  pas douée !!! estce ça ??

lilidurhone · Answer

Tu copies les lignes (de Script zhpfix jusqu'à sysrestore)

Tu ouvres zhpfix puis tu fais importer et tu colles les lignes

douchka23 · Answer

re
j'ai les lignes collées mais quand je fait go pour nettoyage
idem fenêtre avertissement

lilidurhone · Answer

Il doit manquer Script ZHPFix au début

lilidurhone · Answer

Et bien recommences :)

lilidurhone · Answer

Oui

douchka23 · Answer

re, je vous donne de la misere j'espere que tout le monde n'est pas comme moi



https://www.cjoint.com/?DBvlgPUZO2Q

lilidurhone · Answer

Plus de souci?

douchka23 · Answer

re

alors tout est terminé plus rien a faire ???
alors pourquoi mon ie démarrait si mal ??
d'ailleurs je n'ose plus le fermer le soir

j'ai églement des soucis avec les mises a jour update plus d'historique c'est peut être normal !!!! 
merci pour tout votre gentillesse et votre patience

lilidurhone · Answer

Refais zhpdiag

douchka23 · Answer

https://www.cjoint.com/?DBvlRFxhrvF

lilidurhone · Answer

Tu te sert de la barre Google?

douchka23 · Answer

re 
pour faire des recherches  oui

lilidurhone · Answer

Plus infecté :D

douchka23 · Answer

re
si je comprends bien il était infecté c'est le pourquoi de mon probleme ????
merci mille fois merci
mais est ce que je peut laisser mon ordi allumé 24 h sur 24 ??

lilidurhone · Answer

Oui :)

Mets java à jour :)

* Télécharge http://www.archive-host.com SFTGC.exe 
(de Pierre13) sur ton Bureau. 

*  Lance SFTGC, exécuter en tant qu'administrateur sous Windows : 7/8 et Vista 

* Clique sur GO 
image http://img11.hostingpics.net/pics/122370401.png 

* Note : A la fin un rapport va s'ouvrir 

* Une fois le scan terminé rends toi sur le bureau, le fichier SFT.txt à été créé. 

*  Héberge le rapport sur https://www.cjoint.com/ ==> Copie/colle la totalité du rapport SFT.txt dans ta prochaine réponse.

douchka23 · Answer

https://www.cjoint.com/?3Bvmu4lERwG

douchka23 · Answer

voila deux que je reçois çà et comme je ne comprend que le francais ?? FEEDBACKProtection that won't slow you down. Upgrade to AVG AntiVirus now! Is your PC slowing you down? Restore your PC to top speed and keep it at peak performance with PC TuneUp. Download free trial! AVG Threat Labs Sign Up/Log InPsst! We need your help. Please, take the survey Website Safety & Reviews Virus Encyclopedia Virus Removal FAQ Free Downloads Website Owner Tools Virus detected. What now? How to remove a virus? How to remove a virus that keeps coming back? How to clean system files? How can I be fully protected from malware and spyware? See more questions You had an AVG Detection pop-up alert! Please search below for the name of the threat as it appears on the pop-up to get more information. Check emptyPopular searches: Trojan Horse, Exploit threats, Win32/Heur, Tracking cookies, Adware, Rootkit Virus Removal Options Many virus problems are prevented using AVG Internet Security, our best and most complete virus and privacy protection. One-on-one remote unlimited support is also available 24/7, to solve your device's virus problems for you. Upgrade to premium or Get Tech Help Not interested in upgrading your antivirus? Improve your PC performance with PC TuneUp Virus & Malware trends and Analytics by AVG Take a look at the tabs below to learn more about the domains affected by malware, the evolution of virus attacks over time and more. Over the last 30 days the top active malware in the world detected by users of AVG was Adware Generic, representing the greatest percentage of all world-wide detections. Domains AffectedAndroid Apps AffectedTimelineDetection Map These are the websites that caused the greatest number of malware detections by users of AVG products. The website mydatastatssrv.com (view website safety) was the worst offender, causing 0.61 % of all threat detections world-wide during the last 7 days. # site name popularity rating % of detections 1 view website safety: mydatastatssrv.com POPULAR Surf with caution < 0.01 % 2 view website safety: oceangave.com POPULAR Active malware! < 0.01 % 3 view website safety: flashplayer-new.us POPULAR Surf with caution < 0.01 % 4 view website safety: adcbeoo.com POPULAR Surf with caution < 0.01 % 5 view website safety: aobcoe.com POPULAR Surf with caution < 0.01 % 6 view website safety: java-update.co POPULAR Active malware! < 0.01 % 7 view website safety: altervista.org VERY POPULAR Surf with caution < 0.01 % 8 view website safety: javas.biz POPULAR Active malware! < 0.01 % 9 view website safety: flash-up.us POPULAR Surf with caution < 0.01 % 10 view website safety: liketoseee.com POPULAR Active malware! < 0.01 % 11 view website safety: alpo29.com POPULAR Active malware! < 0.01 % 12 view website safety: fixpcnow.net POPULAR Active malware! < 0.01 % 13 view website safety: web24news.com POPULAR Surf with caution < 0.01 % 14 view website safety: yourwwwcop.com POPULAR Active malware! < 0.01 % 15 view website safety: java-updates.org POPULAR Surf with caution < 0.01 % 16 view website safety: java-updating.com POPULAR Surf with caution < 0.01 % 17 view website safety: mywebcop.com POPULAR Active malware! < 0.01 % 18 view website safety: jensenpropertiesinternational.com POPULAR Surf with caution < 0.01 % 19 view website safety: japanvo.com POPULAR Active malware! < 0.01 % 20 view website safety: rtadtrack.com POPULAR Active malware! < 0.01 % 21 view website safety: sportinghall.com POPULAR Active malware! < 0.01 % 22 view website safety: interestingweb.co.uk POPULAR Active malware! < 0.01 % 23 view website safety: densand.pw POPULAR Active malware! < 0.01 % 24 view website safety: naughtyupdates.info POPULAR Active malware! < 0.01 % 25 view website safety: t4586.com POPULAR Surf with caution < 0.01 % 26 view website safety: h1219.com POPULAR Surf with caution < 0.01 % 27 view website safety: t4647.com POPULAR Surf with caution < 0.01 % 28 view website safety: s9096.com POPULAR Surf with caution < 0.01 % 29 view website safety: luckydesire.com POPULAR Active malware! < 0.01 % 30 view website safety: meetlocalhoes.com POPULAR Active malware! < 0.01 % 31 view website safety: myonlinecop.com POPULAR Active malware! < 0.01 % 32 view website safety: 51.la VERY POPULAR Surf with caution < 0.01 % 33 view website safety: imgbabes.com VERY POPULAR Active malware! < 0.01 % 34 view website safety: nazwa.pl VERY POPULAR Surf with caution < 0.01 % 35 view website safety: mywwwcop.com POPULAR Active malware! < 0.01 % 36 view website safety: shoppingsuggestion.com POPULAR Active malware! < 0.01 % 37 view website safety: veb4.com POPULAR Active malware! < 0.01 % 38 view website safety: sabayacafe.com VERY POPULAR Active malware! < 0.01 % 39 view website safety: masterpolar.com POPULAR Active malware! < 0.01 % 40 view website safety: importantcomputerupdates.com POPULAR Active malware! < 0.01 % 41 view website safety: gorselyazilim.net POPULAR Active malware! < 0.01 % 42 view website safety: ge.tt VERY POPULAR Active malware! < 0.01 % 43 view website safety: fedpolice.info POPULAR Active malware! < 0.01 % 44 view website safety: rox2.com POPULAR Active malware! < 0.01 % 45 view website safety: msg7.com POPULAR Active malware! < 0.01 % 46 view website safety: trg5.com POPULAR Active malware! < 0.01 % 47 view website safety: beautyspaguide.com POPULAR Surf with caution < 0.01 % 48 view website safety: weeklyrewardpay.com POPULAR Active malware! < 0.01 % 49 view website safety: 250e.com POPULAR Active malware! < 0.01 % 50 view website safety: twrank.com POPULAR Surf with caution < 0.01 % 51 view website safety: livetelevids.com POPULAR Active malware! < 0.01 % 52 view website safety: mynetcop.com POPULAR Active malware! < 0.01 % 53 view website safety: yourjavascript.com POPULAR Active malware! < 0.01 % 54 view website safety: 2014give-aways.com POPULAR Active malware! < 0.01 % 55 view website safety: losturbanity.net POPULAR Surf with caution < 0.01 % 56 view website safety: iq11download.com POPULAR Surf with caution < 0.01 % 57 view website safety: chillsgolfing.pw POPULAR Surf with caution < 0.01 % 58 view website safety: vitalmovies.com POPULAR Active malware! < 0.01 % 59 view website safety: healthblog411.com POPULAR Active malware! < 0.01 % 60 view website safety: gedachten-gedichten.nl POPULAR Active malware! < 0.01 % 61 view website safety: myphotoworld.us POPULAR Active malware! < 0.01 % 62 view website safety: vip-flash24.com POPULAR Active malware! < 0.01 % 63 view website safety: analisislibre.org POPULAR Active malware! < 0.01 % 64 view website safety: orangemodels.com.pl POPULAR Active malware! < 0.01 % 65 view website safety: airdlr8.com POPULAR Surf with caution < 0.01 % 66 view website safety: 0wheel.org POPULAR Active malware! < 0.01 % 67 view website safety: cloudfront.net VERY POPULAR Surf with caution < 0.01 % 68 view website safety: vidrealmagic.com POPULAR Active malware! < 0.01 % 69 view website safety: typo3server.info POPULAR Surf with caution < 0.01 % 70 view website safety: glowgaze.com VERY POPULAR Active malware! < 0.01 % 71 view website safety: breakingnewsph.com POPULAR Active malware! < 0.01 % 72 view website safety: offitnow.com POPULAR Surf with caution < 0.01 % 73 view website safety: newnext.me POPULAR Surf with caution < 0.01 % 74 view website safety: anuevil.com POPULAR Active malware! < 0.01 % 75 view website safety: twoolz.com POPULAR Active malware! < 0.01 % 76 view website safety: zone.mn POPULAR Surf with caution < 0.01 % 77 view website safety: 0839f88ae61efaa3e91fdf5b732b242f.com POPULAR Surf with caution < 0.01 % 78 view website safety: consiguagalaxy.es POPULAR Surf with caution < 0.01 % 79 view website safety: getinfojob.com POPULAR Active malware! < 0.01 % 80 view website safety: atbux.com POPULAR Active malware! < 0.01 % 81 view website safety: absolu-wood.com POPULAR Active malware! < 0.01 % 82 view website safety: vidy.es POPULAR Surf with caution < 0.01 % 83 view website safety: viduki.com POPULAR Surf with caution < 0.01 % 84 view website safety: bigdaddyart.com POPULAR Surf with caution < 0.01 % 85 view website safety: imgflare.com POPULAR Active malware! < 0.01 % 86 view website safety: joydownload.com VERY POPULAR Active malware! < 0.01 % 87 view website safety: sexuallnude.com POPULAR Surf with caution < 0.01 % 88 view website safety: alltopcompanies.com POPULAR Active malware! < 0.01 % 89 view website safety: asoserwis.pl POPULAR Active malware! < 0.01 % 90 view website safety: gratisnovelas.net POPULAR Active malware! < 0.01 % 91 view website safety: chillsmove.pw POPULAR Surf with caution < 0.01 % 92 view website safety: glovescustoms.pw POPULAR Surf with caution < 0.01 % 93 view website safety: mybb.ru POPULAR Surf with caution < 0.01 % 94 view website safety: chobs21.com POPULAR Active malware! < 0.01 % 95 view website safety: acoben.com POPULAR Surf with caution < 0.01 % 96 view website safety: jocuri18.net POPULAR Active malware! < 0.01 % 97 view website safety: safe0001.com POPULAR Surf with caution < 0.01 % 98 view website safety: dech.vn POPULAR Active malware! < 0.01 % 99 view website safety: geekologie.com POPULAR Active malware! < 0.01 % 100 view website safety: gmter.com POPULAR Active malware! < 0.01 % 1 - 5 of 100>» These are the apps that caused the greatest number of threat detections by users of AVG products. The android app com.indiagames.gamehub (view app report) was the worst offender, causing 5.72 % of all threat detections world-wide during the last 7 days. # app name popularity rating % of detections 1 view app report: com.indiagames.gamehub unofficial LESS POPULAR Active malware! 5% 2 view app report: org.orangenose.games unofficial LESS POPULAR Beware of Adware! 4% 3 view app report: com.indiagames.milive unofficial LESS POPULAR Active malware! 4% 4 view app report: Hardest Game Ever 2 official TOP APP Beware of Adware! 3% 5 view app report: taskkiller.apk unofficial LESS POPULAR Download with caution 3% 6 view app report: signed_ScreenLock.apk unofficial LESS POPULAR Beware of Adware! 3% 7 view app report: com.burningpassion.hindidictionary unofficial LESS POPULAR Active malware! 3% 8 view app report: jsq.apk unofficial LESS POPULAR Beware of Adware! 3% 9 view app report: cn.andouya unofficial LESS POPULAR Beware of Adware! 3% 10 view app report: vStudio.Android.Camera360 unofficial LESS POPULAR Active malware! 3% 11 view app report: Recoder.apk unofficial LESS POPULAR Beware of Adware! 3% 12 view app report: ScreenLock.apk unofficial LESS POPULAR Beware of Adware! 2% 13 view app report: com.truecaller unofficial LESS POPULAR Beware of Adware! 2% 14 view app report: com.netqin.mm unofficial LESS POPULAR Beware of Adware! 2% 15 view app report: com.outfit7.talkingnewsfree unofficial LESS POPULAR Active malware! 2% 16 view app report: alec.marocco unofficial LESS POPULAR Beware of Adware! 2% 17 view app report: com.lock.screen.screenlock unofficial LESS POPULAR Active malware! 2% 18 view app report: com.bestcoolfungames.antsmasher unofficial LESS POPULAR Active malware! 2% 19 view app report: Call Blocker official VERY POPULAR Beware of Adware! 2% 20 view app report: ty.com.android.SmsService unofficial LESS POPULAR Active malware! 1% 21 view app report: com.oopoolxx.ius8xs unofficial LESS POPULAR Active malware! 1% 22 view app report: Truecaller - Caller ID & Block official TOP APP Beware of Adware! 1% 23 view app report: pkg.apk unofficial LESS POPULAR Download with caution 1% 24 view app report: com.integer3d.toytruckrally unofficial LESS POPULAR Beware of Adware! 1% 25 view app report: com.mck.speedparking unofficial LESS POPULAR Active malware! 1% 26 view app report: com.rechild.advancedtaskkiller unofficial LESS POPULAR Active malware! 1% 27 view app report: com.cootek.smartinputv5 unofficial LESS POPULAR Active malware! 1% 28 view app report: system.apk unofficial LESS POPULAR Active malware! 1% 29 view app report: bundle.candy.crush.tips.guide unofficial LESS POPULAR Beware of Adware! 1% 30 view app report: com.outfit7.talkingtom unofficial LESS POPULAR Active malware! 1% 31 view app report: com.numsol.indoTv unofficial LESS POPULAR Beware of Adware! 1% 32 view app report: com.isysway.free.alquran unofficial LESS POPULAR Beware of Adware! 1% 33 view app report: com.cooee.launcherS3 unofficial LESS POPULAR Active malware! 1% 34 view app report: com.racergame.crazyracer unofficial LESS POPULAR Beware of Adware! 1% 35 view app report: com.feelingtouch.gnz unofficial LESS POPULAR Active malware! 1% 36 view app report: com.fungames.truck.parking.bus unofficial LESS POPULAR Beware of Adware! 1% 37 view app report: com.feelingtouch.xrush unofficial LESS POPULAR Beware of Adware! 1% 38 view app report: Toy Truck Rally 3D official TOP APP Beware of Adware! 1% 39 view app report: ric.smart.kon unofficial LESS POPULAR Beware of Adware! 1% 40 view app report: Truck Parking 3D official VERY POPULAR Beware of Adware! 1% 41 view app report: com.easygame.marblelegend unofficial LESS POPULAR Beware of Adware! 1% 42 view app report: com.feelingtouch.gnz.realistic unofficial LESS POPULAR Beware of Adware! 1% 43 view app report: com.lsdroid.cerberus unofficial LESS POPULAR Active malware! 1% 44 view app report: Cerberus anti theft official VERY POPULAR Active malware! 1% 45 view app report: com.detxxn.wpass unofficial LESS POPULAR Active malware! 1% 46 view app report: com.softwego.lockscreen unofficial LESS POPULAR Active malware! 1% 47 view app report: com.action.metal.slug unofficial LESS POPULAR Active malware! 1% 48 view app report: com.mt.mtxx.mtxx unofficial LESS POPULAR Beware of Adware! 1% 49 view app report: Marble Legend official VERY POPULAR Beware of Adware! 1% 50 view app report: com.nd.android.launcher91 unofficial LESS POPULAR Active malware! 1% 1 - 5 of 50>» The timeline below shows the evolution of world-wide malware detection by over the past 30 days. AVG users world-wide detected the most malware on Feb 20. The most prevalent malware in the world was Adware Generic, representing 10.66% of virus detections world-wide. View threats aggregate View threats individual % of Detections by Threat Adware Generic 10.66% Android/Airpush 5.60% Trojan horse Generic 5.42% Android/Hnd Airpush a 3.80% Downloader Generic 3.66% The map below has two views. The victims map shows that 31.51% of all viruses were detected by users living in Philippines. The hosts map shows that over the last 30-days, 60.62% of all threats were hosted on websites in United States. Victim CountriesHost Countries This content requires Flash and Javascript You may need to enable Javascript and/or download Flash Player to see this content correctly. % of Users by Country % of Detections by Country No detections by users in any country Top Active Malware PCAndroid Below are the most active malware detected on the web and on PCs, ranked by percentage of total detections during the past 30 days. 1 Adware Generic 10.66% 2 Trojan horse Generic 5.42% 3 Downloader Generic 3.66% 4 Adware Generic_r 3.40% 5 Crack 2.25% 6 Facebook Scam 2.13% 7 Dropper Generic 1.93% 8 Worm/AutoRun 1.62% 9 Fake Flash Player 1.23% 10 Trojan horse Generic_c 1.17% 11 Win/Sality 0.94% 12 Win/Heur 0.90% 13 Agent 0.88% 14 HackTool 0.75% 15 Blackhat SEO 0.74% 16 Adware Generic_c 0.72% 17 Worm/Generic 0.71% 18 Fake Java Update 0.71% 19 Luhe Fiha 0.64% 20 BackDoor Generic 0.62% 1 - 5 of 20>» Below are the most active malware detected on android apps, ranked by percentage of total detections during the past 30 days. 1 Android/Airpush 5.60% 2 Android/Hnd Airpush a 3.80% 3 Android/Apperhand 3.14% 4 Android/Hnd LeadBolt a 1.91% 5 Android/Dgen AirPush G 1.58% 6 Android/Dgen Airpush 1.44% 7 Android/Dgen mimobsms a 1.11% 8 Android/Leadbolt 1.00% 9 Android/Hnd Youmi 0.72% 10 Android/Dgen trojan downloader f 0.63% 11 Android/Ev-trojan-sms-agent 0.54% 12 Android/Dgen Gantlet 0.54% 13 Android/Dgen trojan-sms agent ce 0.50% 14 Android/Dgen trojan fakeinst dc 0.37% 15 Android/Smsagent 0.36% 16 Android/Dgen viser a 0.33% 17 Android/Adwo 0.30% 18 Android/Ganlet 0.23% 19 Android/Hnd SmsKey a 0.23% 20 Android/Ev-adware-youmi 0.23% 1 - 5 of 20>» Support AVG Virus removal support Unlimited tech and virus removal support by an AVG experts Customer Support Problems, Comments, Questions? Contact us Report an Incorrect Detection If you believe AVG has incorrectly rated a web page as being unsafe, let us know. Virus removal tools Prevent and remove viruses with our virus removal tools. AVG Software updates Download software updates and access our latest release notes.Removal Video Guide About ThreatLabs | Virus Removal Guide | AVG Store Buy Antivirus | Internet Security | Business Security | Free Trial Downloads | Free Widgets Homepage | Contacts | Privacy Policy | Imprint | Terms of Use | Affiliate Program © 2013 AVG Technologies

douchka23 · Answer

re
je reçois en deux fois des menaces infections de la pert AVG et comme je ne suis pas habituée que faut'il faire ?
merci

lilidurhone · Answer

Oui rassure toi on va désinstaller les outils avec Delfix

Tu cochera "purger les points de restauration"

https://www.commentcamarche.net/telecharger/securite/7111-delfix/

douchka23 · Answer

il y a dejà de coché suprimer les outils de desinfection je laisse coché ou il doit y avoir uniquement: purger les points de restautations

lilidurhone · Answer

Les 2 :)

douchka23 · Answer

# DelFix v10.6 - Rapport créé le 21/02/2014 à 15:47:09
# Mis à jour le 11/11/2013 par Xplode
# Nom d'utilisateur : Françoise - CAILLAT-6410850
# Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits)

~ Suppression des outils de désinfection ...

Supprimé : D:\AdwCleaner
Supprimé : D:\Documents and Settings\Françoise\Application Data\ZHP
Supprimé : D:\Documents and Settings\All Users\Menu Démarrer\Programmes\ZHP
Supprimé : D:\Program Files\ZHPDiag
Supprimé : D:\PhysicalDisk0_MBR.bin
Supprimé : D:\Documents and Settings\Françoise\Bureau\SFTGC.txt
Supprimé : D:\Documents and Settings\Françoise\Bureau\ZHPDiag.lnk
Supprimé : D:\Documents and Settings\Françoise\Bureau\ZHPDiag.txt
Supprimé : D:\Documents and Settings\Françoise\Bureau\ZHPFix.lnk
Supprimé : D:\Documents and Settings\Françoise\Bureau\ZHPFixReport.txt
Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\ZHP
Supprimée : HKLM\SOFTWARE\AdwCleaner
Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1

~ Purge de la restauration système ...

Supprimé : RP #1507 [paul paul | 02/14/2014 09:44:54]
Supprimé : RP #1508 [Point de vérification système | 02/15/2014 11:42:03]
Supprimé : RP #1509 [Opération de restauration | 02/16/2014 10:22:12]
Supprimé : RP #1510 [Opération de restauration | 02/16/2014 12:40:51]
Supprimé : RP #1511 [Point de vérification système | 02/17/2014 13:19:49]
Supprimé : RP #1512 [Installed %1 %2. | 02/18/2014 11:03:29]
Supprimé : RP #1513 [Removed Microsoft Fix it Center | 02/18/2014 11:11:33]
Supprimé : RP #1514 [Removed Microsoft Fix it Center | 02/18/2014 12:22:30]
Supprimé : RP #1515 [Software Distribution Service 3.0 | 02/18/2014 15:57:25]
Supprimé : RP #1516 [Point de vérification système | 02/19/2014 19:00:53]
Supprimé : RP #1517 [avast! antivirus system restore point | 02/19/2014 20:40:42]
Supprimé : RP #1518 [Opération de restauration | 02/20/2014 07:54:25]
Supprimé : RP #1519 [Opération de restauration | 02/20/2014 09:21:54]
Supprimé : RP #1520 [Opération de restauration | 02/20/2014 09:31:50]
Supprimé : RP #1521 [Revo Uninstaller's restore point - avast! Antivirus | 02/20/2014 10:25:40]
Supprimé : RP #1522 [Revo Uninstaller's restore point - avast! Antivirus | 02/20/2014 10:30:57]
Supprimé : RP #1523 [Opération de restauration | 02/20/2014 10:35:39]
Supprimé : RP #1524 [avast! antivirus system restore point | 02/20/2014 10:44:51]
Supprimé : RP #1525 [Installé AVG 2014 | 02/20/2014 16:53:08]
Supprimé : RP #1526 [Supprimé AVG 2014 | 02/20/2014 16:53:32]
Supprimé : RP #1527 [Installé AVG 2014 | 02/20/2014 17:14:41]
Supprimé : RP #1528 [Supprimé AVG 2014 | 02/20/2014 17:14:58]
Supprimé : RP #1529 [Installé AVG 2014 | 02/20/2014 17:54:41]
Supprimé : RP #1530 [Installé AVG 2014 | 02/20/2014 17:55:10]
Supprimé : RP #1531 [ZHPFix Restore System Point | 02/21/2014 09:50:34]

Nouveau point de restauration créé !

########## - EOF - ##########

lilidurhone · Answer

Super :)

Il reste juste les consignes de fin de desinfs

douchka23 · Answer

c'est a dire ??

lilidurhone · Answer

2)N'oublies pas de mettre à jour java adobe reader et flashplayer pour IE (chrome l'intègre déjà)
Un lien utile à lire https://www.commentcamarche.net/faq/13362-mettre-a-jour-son-pc-contre-les-failles-de-securite
N'oublies pas aussi de maintenir Windows à jour via Windows update
https://www.java.com/fr/download/manual.jsp



3)Pour permettre de mettre à jour tes logiciels je te conseille d'utiliser Filehippo update checker

Tu peux le télécharger ici https://www.commentcamarche.net/telecharger/utilitaires/9771-filehippo-app-manager/

Pour l'installation de filehippo décoches seulement mettre l'icône dans la barre de lancement rapide



4)Pour nettoyer les fichiers temporaires (attention pas de nettoyage registre ) tu peux utiliser Ccleaner avec tuto pour bien le configurer (https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/
Lien du téléchargement https://www.commentcamarche.net/telecharger/utilitaires/5647-ccleaner/
Tu peux aussi utiliser le nettoyeur de disque windows
N'oublies pas de défragmenter de temps en temps ton disque dur soit par le biais de l'utilitaire soit par le biais d'un logiciel tiers comme par exemple Deffagler ou auslogic Disk Defrag

Oublies les genres de nettoyeurs comme Tuneup ,Glary et autre nettoyeurs miracles ils ne te feront que ralentir ta machine et nettoyer plus blanc que blanc peut provoquer de graves dysfonctionnements



5)Sécurise tes navigateurs par exemple avec WOT et simple adblock pour Internet explorer
Pour télécharger WOT pour ie c'est par ici https://chrome.google.com/webstore/detail/wot-web-of-trust-website/bhmmomiinigofkjcapegjjndpbikblnp
https://adblockplus.org/
Pour chrome(si tu possèdes Chrome)

Wot disponible ici https://chrome.google.com/webstore/detail/wot-web-of-trust-website/bhmmomiinigofkjcapegjjndpbikblnp?hl=fr

Adblock disponible ici https://www.commentcamarche.net/telecharger/web-internet/2555-adblock-plus-pour-chrome/

Lien du téléchargement pour wot sur firefox
https://addons.mozilla.org/fr/firefox/addon/wot-safe-browsing-tool/

Lien pour télécharger adblock +

https://addons.mozilla.org/fr/firefox/addon/adblock-plus/?src=ss


6)Fais attention à ce que tu télécharges où et comment
Evites si possible de télécharger sur O1net,tom's guide,télécharger.com et Softonic et compagnie car ils repackent les logiciels avec des programmes potientellement indésirables
A lire
http://www.stoppublicites.fr/
https://www.malekal.com/adwares-pup-protection/

7)Pourquoi faut-il éviter de télécharger sur du p2p

Les risques sont gros la machine risque de devenir un pc zombie
Un peu de lecture concernant les dangers et le risque
https://forum.malekal.com/viewtopic.php?t=3208&start=
https://forum.malekal.com/viewtopic.php?t=893&start=

douchka23 · Answer

re
 est ce que je dois le faire de suite

Connexion internet

77 réponses

Discussions similaires

Newsletters