Bonjour, voilà depuis 1 semaine j'ai un probleme avec internet explorer. J'ai plein de fenetre qui s'ouvre s'en mon accord et se sont des publicités. De plus, il y a des publicité qui s'introduisent sur n'importe qu'elle page. Ces pub disent " votre ordi est infecté, effectué un test ..." J'ai donc fait la Méthode préliminaire de désinfection - Version Fr de Kristopher est donc voici les rapports. J'ai windows vista, voici les differents rapports. Merci Beaucoup Gilles. Ccleaner : ANALYSE COMPLETE - (28.404 secs) ------------------------------------------------------------------------------------------ 12,1MB ont été supprimés. (Taille approximative) ------------------------------------------------------------------------------------------ Détails des fichiers à supprimer (Note: AUCUN fichier n'a pour l'instant été supprimé) ------------------------------------------------------------------------------------------ Fichiers Temporaires d'Internet Explorer (fichiers 1166) 8,80MB C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\gilles@ads.pointroll[2].txt 769 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\gilles@bluestreak[2].txt 140 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\gilles@c.msn[1].txt 68 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\gilles@live[1].txt 351 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\gilles@messenger.msn[1].txt 96 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\gilles@msn[1].txt 433 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\gilles@rad.msn[2].txt 690 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\gilles@t.msn[1].txt 323 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@2.gmodules[1].txt 388 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@2.gmodules[3].txt 417 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@5.gmodules[1].txt 387 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@5.gmodules[3].txt 417 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@8.gmodules[1].txt 417 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@85.12.43[1].txt 175 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@85.17.166[1].txt 173 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@89.188.16[2].txt 76 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@89.188.16[3].txt 75 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@89.188.16[4].txt 75 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@ad.yieldmanager[2].txt 693 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@adnetserver[2].txt 266 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@adtrgt[2].txt 485 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@advertising[1].txt 417 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@antiver2008[2].txt 1,24KB C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@atdmt[1].txt 104 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@auctionads[1].txt 97 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@bluestreak[2].txt 183 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@bs.serving-sys[1].txt 111 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@doubleclick[1].txt 89 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@edt02[1].txt 300 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@em.gad-network[1].txt 186 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@google[1].txt 130 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@google[2].txt 137 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@hopelessromantic[1].txt 97 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@iapref.orange[1].txt 95 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@mediaplex[1].txt 85 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@orange[1].txt 250 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@primecasino[2].txt 207 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@programme[2].txt 374 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@reparateurdesysteme[1].txt 1,24KB C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@safe.reparateurdesysteme[1].txt 610 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@sdv[1].txt 326 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@server.iad.liveperson[2].txt 217 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@serving-sys[1].txt 554 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@smartadserver[1].txt 298 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@storageprotector[1].txt 321 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@wanadoo[1].txt 87 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@weborama[1].txt 91 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@www.admedia365[2].txt 103 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@www.google[2].txt 512 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@www.google[3].txt 835 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@www.jackpotmadness[1].txt 122 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@www.orange[1].txt 78 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@www.primecasino[1].txt 79 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@www.web-mediaplayer[1].txt 115 bytes C:\Users\Gilles\AppData\Roaming\Microsoft\Windows\Cookies\low\gilles@xiti[1].txt 106 bytes C:\Users\Gilles\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012008021320080214\index.dat 32,00KB C:\Users\Gilles\AppData\Local\Microsoft\Windows\History\Low\History.IE5\MSHist012008021220080213\index.dat 32,00KB Marqué pour l'effacement: C:\Users\Gilles\Local Settings\Temporary Internet Files\Content.IE5\index.dat C:\Users\Gilles\AppData\Local\Temp\LastScan.txt 1,73KB C:\Users\Gilles\AppData\Local\Temp\tmp0000a17c 39,50KB C:\Users\Gilles\AppData\Local\Temp\ycomp_setup.exe 1,56MB C:\Windows\system32\wbem\Logs\wmiprov.log 1,41KB C:\Windows\Debug\mrt.log 1,19KB C:\Windows\Debug\mrteng.log 586 bytes C:\Windows\Debug\UserMode\ChkAcc.log 0 bytes C:\Windows\Debug\UserMode\ChkAcc.bak 0 bytes C:\Windows\system32\LogFiles\HTTPERR\httperr1.log 1,65KB C:\Windows\system32\LogFiles\Scm\SCM.EVM.1 0,28MB C:\Windows\system32\LogFiles\Scm\SCM.EVM.2 0,41MB C:\Windows\system32\LogFiles\Scm\SCM.EVM.3 0,47MB C:\Windows\system32\LogFiles\Scm\SCM.EVM.4 0,41MB C:\Users\Gilles\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol 405 bytes C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\logfile.txt 288 bytes C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{8083E289-2DF6-472B-804A-8BDFE921B4B2} 5,89KB ------------------------------------------------------------------------------------------ AVG Anti spyware : AVG Anti-Spyware - Rapport d'analyse --------------------------------------------------------- + Créé à: 20:25:03 13/02/2008 + Résultat de l'analyse: Rien à signaler. Fin du rapport Bitdefender : le scan ne marche pas en ligne pour moi J ai testé avec AVAST est aucun virus HijackThis V2.02 : Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:03:13, on 11/02/2008 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16575) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\Program Files\QuickTime\QTTask.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Maxtor\MaxBlast\MaxBlastMonitor.exe C:\Program Files\Common Files\Maxtor\Schedule2\schedhlp.exe C:\Program Files\Maxtor\MaxBlast\TimounterMonitor.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe C:\Windows\System32\rundll32.exe C:\Windows\DvzCommon\DvzMsgr.exe C:\Program Files\Palm\HOTSYNC.EXE C:\Windows\System32\mobsync.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Internet Explorer\ieuser.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\Windows\system32\Macromed\Flash\FlashUtil9e.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\explorer.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe C:\Windows\system32\DllHost.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O1 - Hosts: ::1 localhost O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\Windows\system32\NeroCheck.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [MaxBlastMonitor.exe] C:\Program Files\Maxtor\MaxBlast\MaxBlastMonitor.exe O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Maxtor\MaxBlast\TimounterMonitor.exe O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Maxtor\Schedule2\schedhlp.exe" O4 - HKLM\..\Run: [Windows Audio Control] ppnsvc.exe O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe" O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [MSServer] rundll32.exe C:\Users\Gilles\AppData\Local\Temp\ddabb.dll,#1 O4 - HKCU\..\Run: [cmds] rundll32.exe C:\Users\Gilles\AppData\Local\Temp\gebab.dll,c O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user') O4 - Startup: CCC.lnk = ? O4 - Startup: HotSync Manager.lnk = C:\Program Files\Palm\HOTSYNC.EXE O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Dataviz Messenger.lnk = C:\Windows\DvzCommon\DvzMsgr.exe O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O13 - Gopher Prefix: O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{C4001682-89C7-48F8-B1E2-3896BF36CCD0}: NameServer = 80.10.246.130 81.253.149.10 O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Maxtor\Schedule2\schedul2.exe O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LEC TranslateDotNet Server - Language Engineering Corporation, LLC - C:\Program Files\Reverso\Reverso Translation Server\LogoMedia TranslateDotNet Server.exe

Probleme d'infection publicitaire. - Page 2

Réponse 21 / 23

jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041

ook c'est bon!

ras

bonne continuation!

Réponse 22 / 23

gilles.vp

Ok
MERCI BEAUCOUP SINCEREMENT D'AVOIR PRIS DE TON TEMPS POUR M'AIDER
MERCI GILLES.

Réponse 23 / 23

jlpjlp Messages postés 52399 Statut Contributeur sécurité 5 041

de rien!

Discussions similaires

Bande de pub sur ma TV TCL

Enlever le mode magasin tv tcl

Enlever la pub sur sa tv?

Perche selfie manuel rien ne se passe

Compte publicitaire instagram désactivé

Discussions similaires

Newsletters