Pub cid
Résolu
mimi94300
Messages postés
27
Statut
Membre
-
mimi94300 Messages postés 27 Statut Membre -
mimi94300 Messages postés 27 Statut Membre -
Bonjour,
boy94450,peu tu maider aregler mon probleme de pub cid??,
merci d'avance
boy94450,peu tu maider aregler mon probleme de pub cid??,
merci d'avance
Configuration: Windows Vista Internet Explorer 7.0
9 réponses
Résumé de la discussion
Un problème de publicité indésirable et de logiciels potentiellement indésirables est signalé sur un système Windows Vista avec Internet Explorer 7, nécessitant une analyse et des mesures de retrait. Plusieurs réponses décrivent l'installation d'un outil supposé résoudre le problème, des instructions de téléchargement et le déploiement de scans, puis des vérifications via Malwarebytes et HijackThis. Le suivi montre un rapport de Malwarebytes indiquant une suppression de Adware.MyWebSearch dans le registre et une recommandation de réanalyse, avec des échanges sur la conservation ou la suppression des outils utilisés. En cas de nouvelle analyse, il est suggéré de recommencer le scan et de vérifier les éléments détectés, sans conclure sur l'état final du problème.
-
Salut fais ceci:
*Téléchargez lopS&D.exe sur votre bureau (Clique-droit sur le lien > Enregistrer la cible du lien sous)
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
*Désactivez votre antivirus au cas où (vous pourrez le réactiver après la fin du scan)
*Double-clique sur lopS&D pour lancer l'installation
*Une fois installé, double-clique sur Lop S&D
*Sélectionne la langue en appuyant sur la touche F, puis choisissez l'option 1 (Recherche)
*Si lopS&D vous demande de redémarrer acceptez et attendez la fin du scan.-
-
Téléchargez >> Lop S&D.exe https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2 << puis enregistrez-le sur votre Bureau .
- Allez dans Démarrer puis Panneau de configuration
- Double Cliquez sur l'icône "Comptes d'utilisateurs"
- Cliquez ensuite sur Désactiver et validez.
- Redémarrez l'ordinateur.
A présent,nous allons passer à l'installation proprement dite de Lop SD.
Pour les utilisateurs de Vista faire un clic-droit "Exécuter en tant qu'Administrateur"
pour les autres un simple double-clic sur le fichier LopSD.exe suffira à
lancer l'installation :
Cochez la case et cliquez sur Suivant:
Cliquez sur Oui pour poursuivre :
Cliquez sur Suivant :
L'installation est terminé cliquez sur Quitter : -
-
-
voila le rapport
-----------------------[ Lop S&D 4.2.1-7 XP/Vista ]---------------------
[ Windows 'Longhorn' (NT 6.0) Workstation Build 6001, Service Pack 1 ]
[ USER : emeline ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 22/06/2008 | 20:06:17,22 ] [ PC : PC-DE-EMELINE ]
[ MAJ : 21-06-2008 | 15:15 ]
[ UAC => 0 ]
-------------[ Listing des dossiers dans Roaming ]------------
[26/03/2008|13:35] C:\Users\emeline\AppData\Roaming\Adobe\Linguistics
[26/03/2008|13:34] C:\Users\emeline\AppData\Roaming\Adobe\Acrobat
[16/12/2007|13:41] C:\Users\emeline\AppData\Roaming\ArcSoft\PhotoStudio
[03/06/2008|15:55] C:\Users\emeline\AppData\Roaming\Canon\MP160
[03/06/2008|15:52] C:\Users\emeline\AppData\Roaming\Canon\MP Navigator V30
[28/03/2008|01:24] C:\Users\emeline\AppData\Roaming\CyberLink\PowerDVD
[20/12/2007|22:05] C:\Users\emeline\AppData\Roaming\CyberLink\MagicDirector
[20/12/2007|22:05] C:\Users\emeline\AppData\Roaming\CyberLink\MediaCache
[20/12/2007|22:04] C:\Users\emeline\AppData\Roaming\CyberLink\PowerCinema
[24/12/2007|16:56] C:\Users\emeline\AppData\Roaming\DivX\DivX Player
[23/12/2007|17:25] C:\Users\emeline\AppData\Roaming\DivX\DivX Codec
[25/11/2007|20:55] C:\Users\emeline\AppData\Roaming\Identities\{D3C2F837-5F15-4680-8A88-17DE082D23D8}
[20/06/2008|12:18] C:\Users\emeline\AppData\Roaming\InstallShield\ISEngine12.0
[14/02/2008|21:17] C:\Users\emeline\AppData\Roaming\LimeWire\.NetworkShare
[10/02/2008|15:56] C:\Users\emeline\AppData\Roaming\LimeWire\xml
[10/02/2008|15:47] C:\Users\emeline\AppData\Roaming\LimeWire\.AppSpecialShare
[10/02/2008|15:46] C:\Users\emeline\AppData\Roaming\LimeWire\themes
[22/06/2008|16:29] C:\Users\emeline\AppData\Roaming\Macromedia\Flash Player
[21/06/2008|17:07] C:\Users\emeline\AppData\Roaming\Microsoft\Templates
[21/06/2008|16:55] C:\Users\emeline\AppData\Roaming\Microsoft\Word
[02/06/2008|15:18] C:\Users\emeline\AppData\Roaming\Microsoft\OC
[26/05/2008|16:44] C:\Users\emeline\AppData\Roaming\Microsoft\Office
[26/05/2008|16:44] C:\Users\emeline\AppData\Roaming\Microsoft\Clip Organizer
[26/05/2008|16:04] C:\Users\emeline\AppData\Roaming\Microsoft\Excel
[23/05/2008|18:40] C:\Users\emeline\AppData\Roaming\Microsoft\MSN Messenger
[25/04/2008|15:08] C:\Users\emeline\AppData\Roaming\Microsoft\Windows Photo Gallery
[18/04/2008|11:45] C:\Users\emeline\AppData\Roaming\Microsoft\HTML Help
[30/03/2008|14:28] C:\Users\emeline\AppData\Roaming\Microsoft\Publisher
[15/03/2008|22:18] C:\Users\emeline\AppData\Roaming\Microsoft\IMJP10
[15/03/2008|22:18] C:\Users\emeline\AppData\Roaming\Microsoft\InfoPath
[09/03/2008|18:26] C:\Users\emeline\AppData\Roaming\Microsoft\ModŠles
[01/03/2008|21:43] C:\Users\emeline\AppData\Roaming\Microsoft\PowerPoint
[01/03/2008|19:43] C:\Users\emeline\AppData\Roaming\Microsoft\Macros compl‚mentaires
[01/03/2008|19:42] C:\Users\emeline\AppData\Roaming\Microsoft\Outlook
[17/02/2008|20:54] C:\Users\emeline\AppData\Roaming\Microsoft\UProof
[10/02/2008|14:42] C:\Users\emeline\AppData\Roaming\Microsoft\Pack Emoticones Love
[13/01/2008|00:06] C:\Users\emeline\AppData\Roaming\Microsoft\WLTB Custom Buttons
[13/01/2008|00:06] C:\Users\emeline\AppData\Roaming\Microsoft\MSNLiveFav
[11/01/2008|15:25] C:\Users\emeline\AppData\Roaming\Microsoft\SystemCertificates
[11/01/2008|15:25] C:\Users\emeline\AppData\Roaming\Microsoft\Crypto
[05/01/2008|20:59] C:\Users\emeline\AppData\Roaming\Microsoft\MMC
[27/12/2007|20:28] C:\Users\emeline\AppData\Roaming\Microsoft\Windows Live Call
[27/12/2007|20:28] C:\Users\emeline\AppData\Roaming\Microsoft\IdentityCRL
[23/12/2007|17:33] C:\Users\emeline\AppData\Roaming\Microsoft\Speech
[23/12/2007|17:28] C:\Users\emeline\AppData\Roaming\Microsoft\eHome
[22/12/2007|19:06] C:\Users\emeline\AppData\Roaming\Microsoft\preuve
[22/12/2007|18:54] C:\Users\emeline\AppData\Roaming\Microsoft\CLView
[07/12/2007|17:38] C:\Users\emeline\AppData\Roaming\Microsoft\QuickStyles
[06/12/2007|21:27] C:\Users\emeline\AppData\Roaming\Microsoft\Internet Explorer
[02/12/2007|12:43] C:\Users\emeline\AppData\Roaming\Microsoft\Network
[28/11/2007|19:10] C:\Users\emeline\AppData\Roaming\Microsoft\Windows
[28/11/2007|18:59] C:\Users\emeline\AppData\Roaming\Microsoft\Installer
[25/11/2007|22:54] C:\Users\emeline\AppData\Roaming\Microsoft\Proof
[25/11/2007|22:44] C:\Users\emeline\AppData\Roaming\Microsoft\Document Building Blocks
[25/11/2007|22:44] C:\Users\emeline\AppData\Roaming\Microsoft\AddIns
[25/11/2007|20:55] C:\Users\emeline\AppData\Roaming\Microsoft\Protect
[25/11/2007|20:55] C:\Users\emeline\AppData\Roaming\Microsoft\Credentials
[31/01/2008|17:29] C:\Users\emeline\AppData\Roaming\Mozilla\Firefox
[09/04/2008|11:41] C:\Users\emeline\AppData\Roaming\Nero\Nero8
[28/03/2008|22:35] C:\Users\emeline\AppData\Roaming\ScanSoft\OmniPageSE4.0
[24/12/2007|19:39] C:\Users\emeline\AppData\Roaming\U3\0DB0D96153218948
[05/01/2008|21:05] C:\Users\emeline\AppData\Roaming\vlc\cache
----------------[ Tâches planifiées dans C:\Windows\tasks ]---------------
[12/01/2008 21:33][--a------] C:\Windows\tasks\V‚rifier les mises … jour de Windows Live Toolbar.job
[22/06/2008 13:19][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{F4B63CE4-CE77-4B2A-A3B1-D1F7077904D9}.job
[22/06/2008 20:00][--ah-----] C:\Windows\tasks\SA.DAT
[22/06/2008 20:00][--a------] C:\Windows\tasks\SCHEDLGU.TXT
------[ Listing des dossiers dans C:\ProgramData ]------
[10/07/2007|15:21] C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}
[26/03/2008|13:34] C:\ProgramData\Adobe
[02/11/2006|15:02] C:\ProgramData\Application Data
[25/11/2007|20:51] C:\ProgramData\Bureau
[28/11/2007|18:23] C:\ProgramData\CanonBJ
[20/12/2007|22:05] C:\ProgramData\CyberLink
[02/11/2006|15:02] C:\ProgramData\Desktop
[02/11/2006|15:02] C:\ProgramData\Documents
[25/11/2007|20:58] C:\ProgramData\eSobi
[25/11/2007|20:51] C:\ProgramData\Favoris
[02/11/2006|15:02] C:\ProgramData\Favorites
[26/05/2008|10:32] C:\ProgramData\Gram cool rdr.duafag
[28/11/2007|18:34] C:\ProgramData\InstallShield
[26/05/2008|10:32] C:\ProgramData\Inter site
[08/04/2008|23:06] C:\ProgramData\LightScribe
[04/03/2008|11:43] C:\ProgramData\LogiShrd
[28/11/2007|18:57] C:\ProgramData\Logitech
[09/12/2007|15:37] C:\ProgramData\Media Center Programs
[25/11/2007|20:51] C:\ProgramData\Menu D‚marrer
[05/06/2008|15:15] C:\ProgramData\Messenger Plus!
[02/06/2008|15:13] C:\ProgramData\Microsoft
[20/05/2008|20:51] C:\ProgramData\Microsoft Help
[25/11/2007|20:51] C:\ProgramData\ModŠles
[16/04/2008|23:09] C:\ProgramData\Nero
[29/11/2007|20:57] C:\ProgramData\NtiDvdCopy
[22/06/2008|16:36] C:\ProgramData\ntuser.pol
[29/04/2008|08:43] C:\ProgramData\rdrplatformplatform.2yea34
[03/04/2008|11:18] C:\ProgramData\rdrplatformplatform.aqa7ys
[26/05/2008|10:31] C:\ProgramData\rdrplatformplatform.bftpwk
[26/05/2008|10:31] C:\ProgramData\rdrplatformplatform.r8gzs
[03/04/2008|10:55] C:\ProgramData\rdrplatformplatform.tpre55f
[03/04/2008|10:55] C:\ProgramData\rdrplatformplatform.vms9o
[28/11/2007|18:34] C:\ProgramData\ScanSoft
[07/04/2008|20:01] C:\ProgramData\Spybot - Search & Destroy
[02/11/2006|15:02] C:\ProgramData\Start Menu
[15/12/2007|00:00] C:\ProgramData\Symantec
[18/04/2008|10:34] C:\ProgramData\TEMP
[02/11/2006|15:02] C:\ProgramData\Templates
[26/05/2008|10:32] C:\ProgramData\Tool Eggs Less City
[23/01/2008|23:47] C:\ProgramData\WLInstaller
[06/12/2007|17:00] C:\ProgramData\Yahoo! Companion
---------------[ Listing des dossiers dans C:\Program Files ]--------------
[10/07/2007|15:52] C:\Program Files\Acer Arcade Live
[21/09/2007|21:47] C:\Program Files\Acer Inc
[10/07/2007|15:21] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[26/03/2008|13:33] C:\Program Files\Adobe
[15/12/2007|00:11] C:\Program Files\Alwil Software
[28/11/2007|18:32] C:\Program Files\ArcSoft
[23/01/2008|11:20] C:\Program Files\AskTBar
[05/04/2008|13:41] C:\Program Files\a-squared Anti-Malware
[28/11/2007|18:39] C:\Program Files\Canon
[28/11/2007|18:21] C:\Program Files\CanonBJ
[17/02/2008|17:22] C:\Program Files\CCleaner
[08/04/2008|22:54] C:\Program Files\Common Files
[10/07/2007|15:48] C:\Program Files\CyberLink
[28/05/2008|07:08] C:\Program Files\desktop.ini
[15/05/2008|20:39] C:\Program Files\DivX
[25/11/2007|20:51] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[06/02/2008|22:08] C:\Program Files\Google
[16/05/2008|12:25] C:\Program Files\Incomplete
[20/06/2008|12:18] C:\Program Files\InstallShield Installation Information
[28/05/2008|07:01] C:\Program Files\Internet Explorer
[21/04/2008|18:35] C:\Program Files\Java
[23/05/2008|14:23] C:\Program Files\LimeWire
[16/05/2008|14:47] C:\Program Files\Logitech
[30/05/2008|19:32] C:\Program Files\Lopxp
[03/06/2008|17:45] C:\Program Files\Messenger Plus! Live
[06/12/2007|16:05] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[27/03/2008|19:42] C:\Program Files\Microsoft Office
[20/05/2008|20:51] C:\Program Files\Microsoft Silverlight
[06/12/2007|16:42] C:\Program Files\Microsoft SQL Server Compact Edition
[15/03/2008|15:30] C:\Program Files\Microsoft Visual Studio
[15/03/2008|15:23] C:\Program Files\Microsoft Visual Studio 8
[22/06/2008|13:16] C:\Program Files\Microsoft Windows OneCare Live
[15/03/2008|15:28] C:\Program Files\Microsoft.NET
[28/05/2008|07:01] C:\Program Files\Movie Maker
[15/03/2008|15:30] C:\Program Files\MSBuild
[06/12/2007|15:57] C:\Program Files\MSXML 4.0
[10/07/2007|15:38] C:\Program Files\NewTech Infosystems
[20/06/2008|12:24] C:\Program Files\Orange HSS
[30/05/2008|21:23] C:\Program Files\Panicware
[10/06/2008|23:19] C:\Program Files\Picasa2
[14/12/2007|11:13] C:\Program Files\QuickTime
[10/07/2007|15:07] C:\Program Files\Realtek
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[20/06/2008|12:18] C:\Program Files\SAGEM
[08/06/2008|21:05] C:\Program Files\Samsung
[28/11/2007|18:33] C:\Program Files\ScanSoft
[20/06/2008|12:18] C:\Program Files\Securitoo
[21/09/2007|21:41] C:\Program Files\SiS VGA Utilities
[22/06/2008|15:10] C:\Program Files\SmartDraw 2008
[07/04/2008|19:12] C:\Program Files\Spybot - Search & Destroy
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[05/01/2008|21:03] C:\Program Files\VideoLAN
[28/05/2008|07:01] C:\Program Files\Windows Calendar
[28/05/2008|07:01] C:\Program Files\Windows Collaboration
[28/05/2008|07:01] C:\Program Files\Windows Defender
[28/05/2008|07:01] C:\Program Files\Windows Journal
[27/02/2008|19:38] C:\Program Files\Windows Live
[12/01/2008|21:33] C:\Program Files\Windows Live Favorites
[12/01/2008|21:33] C:\Program Files\Windows Live Toolbar
[11/06/2008|11:23] C:\Program Files\Windows Mail
[28/05/2008|07:01] C:\Program Files\Windows Media Player
[25/11/2007|20:51] C:\Program Files\Windows NT
[28/05/2008|07:01] C:\Program Files\Windows Photo Gallery
[28/05/2008|07:01] C:\Program Files\Windows Sidebar
[25/11/2007|20:55] C:\Program Files\Yahoo!
------[ Listing des dossiers dans C:\Program Files\Common Files ]------
[26/03/2008|13:34] C:\Program Files\Common Files\Adobe
[15/03/2008|15:30] C:\Program Files\Common Files\DESIGNER
[06/12/2007|15:17] C:\Program Files\Common Files\France Telecom
[28/11/2007|18:34] C:\Program Files\Common Files\InstallShield
[10/02/2008|15:45] C:\Program Files\Common Files\Java
[10/07/2007|15:37] C:\Program Files\Common Files\LightScribe
[04/03/2008|11:44] C:\Program Files\Common Files\LogiShrd
[16/05/2008|19:57] C:\Program Files\Common Files\microsoft shared
[10/07/2007|15:37] C:\Program Files\Common Files\muvee Technologies
[16/04/2008|23:09] C:\Program Files\Common Files\Nero
[10/07/2007|15:38] C:\Program Files\Common Files\NewTech Infosystems
[02/06/2008|15:10] C:\Program Files\Common Files\PX Storage Engine
[28/11/2007|18:34] C:\Program Files\Common Files\ScanSoft Shared
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[15/12/2007|00:03] C:\Program Files\Common Files\Symantec Shared
[28/05/2008|07:01] C:\Program Files\Common Files\System
[06/12/2007|16:39] C:\Program Files\Common Files\WindowsLiveInstaller
---------------------------[ Process ]--------------------------
... 78
iexplore.exe ~ [2256]
iexplore.exe ~ [3400]
iexplore.exe ~ [4020]
----------------------[ Recherche avec S_Lop ]---------------------
C:\ProgramData\Gram cool rdr.duafag
C:\ProgramData\Gram cool rdr.duafag
-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------
C:\ProgramData\Tool Eggs Less City
C:\ProgramData\Tool Eggs Less City\User City.exe
C:\Windows\Prefetch\USER CITY.EXE-1F089215.pf
----------------------[ Verification du Registre ]----------------------
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
..... OK !
--------------------[ Verification du fichier Hosts ]---------------------
Fichier Hosts PROPRE
----------------[ Recherche de fichiers avec Catchme ]-----------------
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-22 20:06:51
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------[ Recherche d'autres infections ]---------------------
C:\Users\emeline\AppData\Local\hfvvims_navps.dat
C:\Users\emeline\AppData\Local\hfvvims_nav.dat
C:\Users\emeline\AppData\Local\hfvvims.dat
[b]! EGDACCESS !/b
=> C:\Users\emeline\AppData\Roaming\Microsoft\Windows\Recent\Super SCRABBLE 2005 Complet avec Crack.lnk
=> C:\Users\emeline\AppData\Roaming\Microsoft\Windows\Recent\NERO.8.ULTRA.EDITION.KeyGen.Only.lnk
=> C:\Users\emeline\AppData\Roaming\Microsoft\Windows\Recent\Nero.8.Ultra.Edition.v8.2.8.0.FR.Incl-Keygen.lnk
[F:58][D:10]-> C:\Users\emeline\AppData\Local\Temp
[F:60][D:1]-> C:\Users\emeline\AppData\Roaming\MICROS~1\Windows\Cookies
[F:415][D:6]-> C:\Users\emeline\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:8][D:3]-> C:\$Recycle.Bin
[ UAC => 1 ]
--------------------[ Fin du rapport a 20:07:39,15 ]----------------------
-
-
bonsoir a tous
pour avancer
fais ca:
Fais un clic droit sur ce lien : (IL-MAFIOSO)
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).
Laisse-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord)
Patiente jusqu'au message :
*** Analyse Termine le ..... ***
Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
Copie-colle l'intégralité dans une réponse. Referme le blocnote.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt) -
boy94450
malwarebytes ne detectera pas :
C:\Users\emeline\AppData\Local\hfvvims_navps.dat
C:\Users\emeline\AppData\Local\hfvvims_nav.dat
C:\Users\emeline\AppData\Local\hfvvims.dat
seul navilog trouve ces fichier!-
Ok merci maintenant fais un scan en ligne avec Internet Explorer stp:
BitDefender en ligne: http://www.bitdefender.fr/scan_fr/scan8/ie.html
Tutoriel BitDefender en ligne (si tu as XP): http://cybersecurite.xooit.com/t201-Scan-en-ligne-BitDefender.htm
Tutoriel BitDefender en ligne (si tu as Vista): https://forum.pcastuces.com/sujet.asp?f=25&s=31584&page=1- le voici
BitDefender Online Scanner
Rapport d'analyse généré à: Sun, Jun 22, 2008 - 23:15:47
Voie d'analyse: C:\;D:\;E:\;F:\;G:\;H:\;I:\;
Statistiques
Temps
00:23:20
Fichiers
74322
Directoires
16161
Secteurs de boot
4
Archives
1037
Paquets programmes
7087
Résultats
Virus identifiés
0
Fichiers infectés
0
Fichiers suspects
0
Avertissements
0
Désinfectés
0
Fichiers effacés
0
Info sur les moteurs
Définition virus
1262450
Version des moteurs
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
Analyse des plugins
16
Archive des plugins
42
Unpack des plugins
7
E-mail plugins
6
Système plugins
5
Paramètres d'analyse
Première action
Désinfecté
Seconde Action
Supprimé
Heuristique
Oui
Acceptez les avertissements
Oui
Extensions analysées
exe;com;dll;ocx;scr;bin;dat;386;vxd;sys;wdm;cla;class;ovl;ole;hlp;doc;dot;xls;ppt;wbk;wiz;pot;ppa;xla;xlt;vbs;vbe;mdb;rtf;htm;hta;html;xml;xtp;php;asp;js;shs;chm;lnk;pif;prc;url;smm;pfd;msi;ini;csc;cmd;bas;
Excludez les extensions
Analyse d'emails
Oui
Analyse des Archives
Oui
Analyser paquets programmes
Oui
Analyse des fichiers
Oui
Analyse de boot
Oui
Fichier analysé
Statut - le voila merci pour tout et a demain
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:25:31, on 22/06/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Acer\Empowering Technology\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
C:\Program Files\SiS VGA Utilities\SiSTray.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpWareSE4.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\Program Files\Orange HSS\Systray\SystrayApp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\ehome\ehmsas.exe
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Orange HSS\Launcher\Launcher.exe
C:\Program Files\Orange HSS\connectivity\connectivitymanager.exe
C:\Program Files\Orange HSS\connectivity\CoreCom\CoreCom.exe
C:\Program Files\Orange HSS\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\emeline\Downloads\test.exe.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange HSS\SearchURLHook\SearchPageURL.dll
R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [PCMMediaSharing] C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
O4 - HKLM\..\Run: [SiSTray] "C:\Program Files\SiS VGA Utilities\SiSTray.exe"
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] "C:\Program Files\Orange HSS\SessionManager\SessionManager.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe"
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange HSS\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [denttick] "C:\ProgramData\rdrplatformplatform.vg73o"
O4 - HKLM\..\Run: [LESS CITY AMEN SETUP] "C:\ProgramData\Exit browse open.m7jbu3"
O4 - HKCU\..\Run: [Sidebar] "C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [RunSpySweeperScheduleAtStartup] "C:\Windows\system32\msfeedssync.exe" /ScheduleSweep=User_Feed_Synchronization-{F4B63CE4-CE77-4B2A-A3B1-D1F7077904D9}
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [denttick] "C:\ProgramData\rdrplatformplatform.gnuafjx"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O15 - Trusted Zone: https://www.orange.fr/portail
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://copainsdavant.linternaute.com/html_include_bibliotheque/objimageuploader/ImageUploader4.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cid-8e650c1a96f4e003.spaces.live.com/PhotoUpload/VistaMsnPUpldfr-fr.cab
O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - https://www.nordnet.com/securite
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://orange.securitoo.com/ols/fscax.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
-
-
bonsoir boy94450 est ce que la desinfection est terminer ou pas??
si nn pe tu me dire ce qu'il faut que je fasse pour la suite!!!
merci pour la reponse que tu m'apporteras! -
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question -
-
-
par contre si mon probleme est regler faut t'il que je garde les logiciels que tu ma fait telecharger ou je peut les supprimer??
-
*Relance HijackThis:
*Choisis Do a scan only:
*Coche la case devant les lignes suivantes:
*R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - (no file
*O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
*O4 - HKLM\..\Run: [PCMMediaSharing] C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe
*O4 - HKLM\..\Run: [SiSTray] "C:\Program Files\SiS VGA Utilities\SiSTray.exe"
*O4 - HKLM\..\Run: [denttick] "C:\ProgramData\rdrplatformplatform.vg73o"
*O4 - HKLM\..\Run: [LESS CITY AMEN SETUP] "C:\ProgramData\Exit browse open.m7jbu3"
*O4 - HKCU\..\Run: [RunSpySweeperScheduleAtStartup] "C:\Windows\system32\msfeedssync.exe" /ScheduleSweep=User_Feed_Synchronization-{F4B63CE4-CE77-4B2A-A3B1-D1F7077904D9}
*O4 - HKCU\..\Run: [denttick] "C:\ProgramData\rdrplatformplatform.gnuafjx"
*O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://cid-8e650c1a96f4e003.spaces.live.com/PhotoUpload/VistaMsnPUpldfr-fr.cab
*Ferme toutes les fenêtres (hormis HijackThis), y compris ton navigateur:
*Clique sur fix checked:
*Ferme Hijackthis:
*Puis refait un nouveau rapport.- voila le rapport!!
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:10:52, on 23/06/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Acer\Empowering Technology\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSLoader.exe
C:\Program Files\SiS VGA Utilities\SiSTray.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpWareSE4.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
C:\Program Files\Orange HSS\Systray\SystrayApp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\ehome\ehmsas.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE
C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE
C:\Windows\System32\mobsync.exe
C:\Program Files\Orange HSS\Launcher\Launcher.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Orange HSS\connectivity\connectivitymanager.exe
C:\Program Files\Orange HSS\connectivity\CoreCom\CoreCom.exe
C:\Program Files\Orange HSS\connectivity\CoreCom\OraConfigRecover.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTCOMModule\0\FTCOMModule.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\emeline\Downloads\test.exe.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange HSS\SearchURLHook\SearchPageURL.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\system32\eDStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [SiSTray] "C:\Program Files\SiS VGA Utilities\SiSTray.exe"
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] "C:\Program Files\Orange HSS\SessionManager\SessionManager.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [OneCareUI] "C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe"
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\Orange HSS\Systray\SystrayApp.exe"
O4 - HKCU\..\Run: [Sidebar] "C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O15 - Trusted Zone: https://www.orange.fr/portail
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://copainsdavant.linternaute.com/html_include_bibliotheque/objimageuploader/ImageUploader4.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - https://www.nordnet.com/securite
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://orange.securitoo.com/ols/fscax.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe
O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: eDSService.exe (eDataSecurity Service) - HiTRSUT - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
- * Téléchargez ToolsCleaner http://www.commentcamarche.net/telecharger/telecharger 34055291
* Une fois téléchargé, installez-le et lancez-le.
* Cliquez sur Recherche et laissez le scan se terminer.
* Cliquez sur Suppression pour finaliser.
* Vous pouvez, si vous le souhaitez, vous servir des options suivantes :
o Point de Restauration.
o Corbeille.
o Nettoyage des fichiers Temporaires.
o Sauvegarde du registre.
* Cliquez sur Quitter, pour que le rapport puisse se créer.
* Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)
-
-
je pe le lancer en gardant les logiciels que tu ma fait telecharger auparavant ou pa??
-
voila le rapport
-->- Recherche:
C:\Lop SD: trouvé !
C:\Lop SD\Lop S&D.lnk: trouvé !
C:\Users\emeline\AppData\Local\VirtualStore\Program Files\MsnFix: trouvé !
C:\Users\emeline\AppData\Roaming\Microsoft\Windows\Recent\HijackThis.lnk: trouvé !
C:\Users\emeline\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes\Lop S&D: trouvé !
C:\Users\emeline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lop S&D: trouvé !
C:\Users\emeline\Desktop\Lop S&D.lnk: trouvé !
C:\Users\emeline\Downloads\LopSD.exe: trouvé !
---------------------------------
-->- Suppression:
C:\Lop SD\Lop S&D.lnk: supprimé !
C:\Users\emeline\AppData\Roaming\Microsoft\Windows\Recent\HijackThis.lnk: supprimé !
C:\Users\emeline\Desktop\Lop S&D.lnk: supprimé !
C:\Users\emeline\Downloads\LopSD.exe: supprimé !
C:\Lop SD: supprimé !
C:\Users\emeline\AppData\Local\VirtualStore\Program Files\MsnFix: supprimé !
C:\Users\emeline\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes\Lop S&D: ERREUR DE SUPPRESSION !!
C:\Users\emeline\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lop S&D: supprimé !
Point de restauration crée !
Corbeille vidée!
Fichiers temporaires nettoyés !
Sauvegarde du registre crée !
