Infection Virus, Trojan et fenètres de pubs..

M. ZzalexX -  
 jetelec -
Bonjour,

J'ai récemment été infecté par des virus et ça s'est tout de suite senti pck mon ordi deviens très lent, je perds parfois ma connexion internet et des fenètres de pubs indésirables s'ouvrent quand internet marche.
Après deux scan minutieux avec Avast et Antivir, j'ai obtenu cela:
Antivir a détecté : TR/ATRAPS.gen
TR/Unpacked.gen
TR/Dropper.gen
TR/Monder.aamv
TR/Crypt.ULPM.gen
et surtout TR/Spy.Agent.fgc qu'antivir détecte et supprime sans arrèt.
ENTRE-AUTRES, car j'ai pas eu le courage de tout noter.
J'ai suivi quelques précédure données sur le forum, mais rien n'y fait, c'est de pire en pire.
Donc j'aurais bien besoin de votre aide, pck j'ai vraiment la flemme de perdre toutes mes données...
Ah oui, j'ai aussi noté les fenètres intempestives qui s'ouvrent :
pro-scanner-online.com , bigmp3online.com , et un truc bisarre du nom de url.adtrgt.com
(ça peut peut-ètre vous aidez, donc m'aider ^^)
Voila, et merci d'avance pour les courageux qui se lanceraient dans cette chasse...

Please Help !
Configuration: Windows XP
Firefox 2.0.0.18

11 réponses

  1.
    neor Messages postés 1119 Statut Membre 30
     
    bonjour,

    Télécharge HijackThis (outils de dignostic) ici :

    -> Fais un clic droit sur un des liens et choisi enregistrer la cible sous .... le bureau
    -> http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe

    -> Fais un double-clic sur HJTInstall.exe afin de lancer l'installation

    -> Clique sur Install ensuite sur I Accept

    -> Clique sur Do a scan system and save log file

    -> Le bloc-notes s'ouvrira, fais un copier-coller de tout son contenu ici dans ta prochaine réponse
    0
    1. M. ZzalexX
       
      Merci de ton Aide.
      Et excuse moi pour le temps de réponse, mais internet buggais (encore et encore... ^^).
      Voici le rapport :


      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 15:39:10, on 06/12/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16735)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\WINDOWS\system32\CTsvcCDA.EXE
      C:\Program Files\CDBurnerXP\NMSAccessU.exe
      C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\WINDOWS\system32\ps2.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\WINDOWS\ALCWZRD.EXE
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\Program Files\Logitech\Video\LogiTray.exe
      C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
      C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
      C:\Program Files\Logitech\Video\FxSvr2.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\MSN Gaming Zone\Windows\shvlzm.exe"
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (file missing)
      O2 - BHO: testCPV6 - {15421B84-3488-49A7-AD18-CBF84A3EFAF6} - C:\Program Files\CPV\CPV7.dll (file missing)
      O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll
      O2 - BHO: (no name) - {4afb5176-8dfd-498b-8aec-7e47194d75bd} - C:\WINDOWS\system32\yezoyihu.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.1852\swg.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
      O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
      O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
      O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
      O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
      O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
      O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
      O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [blaaaa] C:\Documents and Settings\Compaq_Propriétaire\legsvh.exe
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
      O4 - HKLM\..\Run: [bofuvulipi] Rundll32.exe "C:\WINDOWS\system32\fatenuva.dll",s
      O4 - HKLM\..\Run: [CPM7b825354] Rundll32.exe "c:\windows\system32\jemitawa.dll",a
      O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-19\..\Run: [bofuvulipi] Rundll32.exe "C:\WINDOWS\system32\fatenuva.dll",s (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{F2C427ED-DAC7-4C46-8D53-8FBAAE63E69C}: NameServer = 192.168.1.1
      O20 - AppInit_DLLs: c:\windows\system32\nafihuka.dll C:\WINDOWS\system32\gebuhobo.dll c:\windows\system32\jemitawa.dll
      O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\jemitawa.dll
      O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\jemitawa.dll
      O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
      O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
      O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Common\Database\bin\fbserver.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
      O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      0
    2. jetelec
       
      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 19:25:03, on 15/01/2009
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16762)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\LEXBCES.EXE
      C:\WINDOWS\system32\LEXPPS.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
      C:\Program Files\SuperCopier2\SuperCopier2.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\Program Files\Windows Live\Messenger\msnmsgr.exe
      C:\documents and settings\hp_administrateur\local settings\application data\ggowa.exe
      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      C:\WINDOWS\arservice.exe
      C:\PROGRA~1\MICROS~4\rapimgr.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\WINDOWS\system32\drivers\CDAC11BA.EXE
      C:\WINDOWS\eHome\ehRecvr.exe
      C:\WINDOWS\eHome\ehSched.exe
      C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
      C:\WINDOWS\eHome\ehRec.exe
      C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
      C:\WINDOWS\system32\wscntfy.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\system32\dllhost.exe
      C:\WINDOWS\System32\alg.exe
      C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Windows Live\Messenger\usnsvc.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.hp.com/fr/extension-garantie/iconlanding
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\,)),)),,)WW,W,.exe
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O3 - Toolbar: StumbleUpon Toolbar - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
      O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
      O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [ggowa] "c:\documents and settings\hp_administrateur\local settings\application data\ggowa.exe" ggowa
      O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
      O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
      O4 - Global Startup: Barre d'état système d'ATI CATALYST.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
      O8 - Extra context menu item: StumbleUpon PhotoBlog It! - res://StumbleUponIEBar.dll/blogimage
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
      O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
      O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
      O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
      O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: CabBuilder - http://ak.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
      O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} (DjVuCtl Class) - http://downloadcenter.samsung.com/content/common/cab/DjVuControlLite_EN.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
      O16 - DPF: {2D37B9E8-C14C-482C-B1CF-939C5440E179} (VTToolkit Control) - http://saint-valentin.maville.orange.fr/Villes/avignon/php/VTToolkit.ocx
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
      O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
      O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
      O16 - DPF: {65FDEDF3-8ED9-4F5B-825E-18C2D44191A7} (OneCCCtl Class) - http://d.66.155.171.79.downloads.estara.com./as/OneCCDM.php?template=41001&sessionid=161112031_90.4.104.119_2678&=&req=1206369673656OneCC.cab
      O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection.cab
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
      O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://wisup.net/_plateforme/Upload/Aurigma/AurigmaActiveX/ImageUploader4.cab
      O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://photo.laredoute.fr/ImageUploader3.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
      O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
      O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f012.mail.caramail.lycos.fr/app/uploader/FileUploader.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - http://www.pixdiscount.fr/clients/uploader_v2.1.0.56.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O20 - AppInit_DLLs: rgvwbb.dll
      O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
      O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
      O23 - Service: Intel® Quick Resume Technology Drivers (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
      O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
      O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe
      0
  2. neor Messages postés 1119 Statut Membre 30
     
    --------------------rechercher--------------------------

    Important! Désactive ton antivirus / antispyware résident / TeaTimer de Spybot (si présent et actif)

    Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
    ( Merci à Eric_71, Angeldark, Sham_Rock et XmichouX )
    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

    * Lance l'installation du programme en exécutant le fichier téléchargé.
    * Double-clique maintenant sur le raccourci de Toolbar-S&D.
    * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
    * Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
    * Poste le rapport généré. (C:\TB.txt)
    0
    1. M. ZzalexX
       
      -----------\\ ToolBar S&D 1.2.6 XP/Vista

      Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
      X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) 4 CPU 2.93GHz )
      BIOS : BIOS Date: 02/16/05 16:07:13 Ver: 08.00.10
      USER : Compaq_Propriétaire ( Administrator )
      BOOT : Normal boot
      Antivirus : avast! antivirus 4.8.1296 [VPS 081205-0] 4.8.1296 (Not Activated)
      C:\ (Local Disk) - NTFS - Total:182 Go (Free:26 Go)
      D:\ (Local Disk) - FAT32 - Total:4 Go (Free:0 Go)
      E:\ (CD or DVD)
      F:\ (CD or DVD) - UDF - Total:4 Go (Free:0 Go)
      G:\ (USB)
      H:\ (USB)
      I:\ (USB)
      J:\ (USB)

      "C:\ToolBar SD" ( MAJ : 04-12-2008|20:40 )
      Option : [1] ( 06/12/2008|15:46 )

      -----------\\ Recherche de Fichiers / Dossiers ...


      -----------\\ Extensions

      (Compaq_Propri‚taire) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar
      (Compaq_Propri‚taire) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar


      -----------\\ [..\Internet Explorer\Main]

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
      "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
      "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
      "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
      "Start Page"="https://www.google.fr/?gws_rd=ssl"
      "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
      "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
      "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
      "Start Page"="https://www.msn.com/fr-fr/?ocid=iehp"
      "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"


      --------------------\\ Recherche d'autres infections

      --------------------\\ Cracks & Keygens ..

      C:\DOCUME~1\COMPAQ~1\Bureau\Diverses Imcompr‚hensibilit‚s\crack
      C:\DOCUME~1\COMPAQ~1\Bureau\Diverses Imcompr‚hensibilit‚s\crack\FLRegkey.Reg
      C:\DOCUME~1\COMPAQ~1\Bureau\jeux\Worms World Party\WWP\crack.rar
      C:\DOCUME~1\COMPAQ~1\Mes documents\Ableton\Library\Presets\Audio Effects\Vinyl Distortion\Crack.adv



      1 - "C:\ToolBar SD\TB_1.txt" - 06/12/2008|15:50 - Option : [1]

      -----------\\ Fin du rapport a 15:50:48,09
      0
  3. neor Messages postés 1119 Statut Membre 30
     
    va dans ajout supp de programme et desisntalle les toolbar comme SweetIM
    0
    1. M. ZzalexX
       
      J'ai désinstallé SweetIM et Yahoo Toolbar.
      Je dois aussi virer Google Toolbar pour Firefox et Explorer ?
      0
      1. neor Messages postés 1119 Statut Membre 30 > M. ZzalexX
         
        non tu peux la garde
        0
      2. M. ZzalexX > neor Messages postés 1119 Statut Membre
         
        OK. Je relance une recherche avec Toolbar ?
        0
  4. neor Messages postés 1119 Statut Membre 30
     
    --------------recherche----------------------------

    Télécharge Lop S&D :
    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

    Déconnecte toi et ferme toutes tes applications en cours .

    Double-clique sur sur l'.exe que tu viens de télécharger pour lancer l'installe .

    Une fois l'installation faite, clique sur le raccourci pour lancer l'outil .

    Là,laisses toi guider:
    --->choisis l'option 1 (recherche) et valides.

    (Tu ne fais pas l'option de nettoyage ( 2 ou 3) ).

    Une fois le scan terminer ,le Bloc-Notes contenant le rapport va s'ouvrir.
    Poste ce rapport dans ta prochaine réponse pour analyse .
    0
    1. M. ZzalexX
       
      Voici le rapport :


      --------------------\\ Lop S&D 4.2.4-9c XP/Vista

      Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
      X86-based PC ( Uniprocessor Free : Intel(R) Pentium(R) 4 CPU 2.93GHz )
      BIOS : BIOS Date: 02/16/05 16:07:13 Ver: 08.00.10
      USER : Compaq_Propriétaire ( Administrator )
      BOOT : Normal boot
      Antivirus : avast! antivirus 4.8.1296 [VPS 081205-0] 4.8.1296 (Not Activated)
      C:\ (Local Disk) - NTFS - Total:182 Go (Free:26 Go)
      D:\ (Local Disk) - FAT32 - Total:4 Go (Free:0 Go)
      E:\ (CD or DVD)
      F:\ (CD or DVD) - UDF - Total:4 Go (Free:0 Go)
      G:\ (USB)
      H:\ (USB)
      I:\ (USB)
      J:\ (USB)

      "C:\Lop SD" ( MAJ : 01-11-2008|16:30 )
      Option : [1] ( 06/12/2008|16:35 )

      --------------------\\ Listing des dossiers dans APPLIC~1

      [02/01/2005|00:31] C:\DOCUME~1\ADMINI~1\APPLIC~1\Apple Computer
      [01/01/2005|08:29] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
      [02/01/2005|00:23] C:\DOCUME~1\ADMINI~1\APPLIC~1\Intervideo
      [02/01/2005|00:23] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
      [02/01/2005|00:54] C:\DOCUME~1\ADMINI~1\APPLIC~1\SampleView
      [01/01/2005|08:48] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
      [01/01/2005|08:02] C:\DOCUME~1\ADMINI~1\APPLIC~1\Symantec

      [14/11/2008|21:04] C:\DOCUME~1\ALLUSE~1\APPLIC~1\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
      [01/03/2008|12:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
      [13/11/2008|22:32] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
      [15/10/2006|15:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
      [02/02/2006|15:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ArcSoft
      [01/12/2008|22:44] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
      [02/05/2007|15:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Creative
      [05/05/2007|00:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
      [20/02/2008|23:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Downloaded Installations
      [18/01/2008|19:15] C:\DOCUME~1\ALLUSE~1\APPLIC~1\FreeTest
      [20/03/2007|10:56] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
      [04/04/2008|21:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
      [02/01/2005|00:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
      [02/01/2005|00:22] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InterVideo
      [05/12/2008|19:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
      [26/12/2006|15:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\MAGIX
      [09/03/2008|22:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
      [27/10/2008|11:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
      [02/01/2005|00:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Motive
      [24/01/2006|20:58] C:\DOCUME~1\ALLUSE~1\APPLIC~1\QuickTime
      [01/01/2005|08:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
      [13/01/2008|13:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
      [23/10/2006|08:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
      [27/10/2008|15:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
      [09/01/2006|22:00] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems
      [30/12/2006|20:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
      [09/03/2008|21:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

      [07/10/2008|19:24] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Ableton
      [16/01/2008|21:38] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Adobe
      [09/04/2005|19:14] C:\DOCUME~1\COMPAQ~1\APPLIC~1\AdobeUM
      [15/10/2006|15:20] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Apple Computer
      [07/10/2008|19:32] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Applied Acoustics Systems
      [02/02/2006|15:27] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ArcSoft
      [27/08/2008|15:11] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Canneverbe_Limited
      [15/07/2008|22:12] C:\DOCUME~1\COMPAQ~1\APPLIC~1\ConvertTemp
      [29/12/2006|10:10] C:\DOCUME~1\COMPAQ~1\APPLIC~1\CopyToDvd
      [06/10/2007|20:27] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Creative
      [05/05/2007|00:15] C:\DOCUME~1\COMPAQ~1\APPLIC~1\CyberLink
      [30/04/2008|22:49] C:\DOCUME~1\COMPAQ~1\APPLIC~1\DivX
      [10/12/2005|19:28] C:\DOCUME~1\COMPAQ~1\APPLIC~1\FotoWire
      [16/10/2007|19:12] C:\DOCUME~1\COMPAQ~1\APPLIC~1\GibbHill Properties Ltd
      [21/10/2006|18:30] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Google
      [04/12/2005|18:48] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Help
      [01/01/2005|08:29] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Identities
      [08/10/2005|14:49] C:\DOCUME~1\COMPAQ~1\APPLIC~1\InterTrust
      [25/06/2005|16:06] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Intervideo
      [23/05/2005|14:09] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Jasc Software Inc
      [19/10/2006|15:28] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Lavasoft
      [09/04/2005|18:52] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Leadertech
      [30/11/2008|22:06] C:\DOCUME~1\COMPAQ~1\APPLIC~1\LimeWire
      [20/06/2006|19:56] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Macromedia
      [25/08/2007|13:10] C:\DOCUME~1\COMPAQ~1\APPLIC~1\MAGIX
      [06/12/2008|16:20] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Microsoft
      [25/01/2006|21:59] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Motive
      [21/10/2006|18:31] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Mozilla
      [29/08/2007|20:49] C:\DOCUME~1\COMPAQ~1\APPLIC~1\MPEG Streamclip
      [08/03/2008|13:53] C:\DOCUME~1\COMPAQ~1\APPLIC~1\MSNInstaller
      [23/05/2005|13:52] C:\DOCUME~1\COMPAQ~1\APPLIC~1\NetMedia Providers
      [13/11/2008|22:17] C:\DOCUME~1\COMPAQ~1\APPLIC~1\OpenOffice.org
      [27/12/2006|00:02] C:\DOCUME~1\COMPAQ~1\APPLIC~1\OpenOffice.org2
      [23/05/2005|13:52] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Publish Providers
      [11/07/2008|11:50] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Real
      [02/01/2005|00:54] C:\DOCUME~1\COMPAQ~1\APPLIC~1\SampleView
      [12/09/2007|21:58] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Samsung
      [05/06/2005|11:36] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Sierra
      [09/04/2005|18:53] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Sonic
      [23/05/2005|13:55] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Sonic Foundry
      [08/06/2008|18:09] C:\DOCUME~1\COMPAQ~1\APPLIC~1\StarOffice8
      [01/01/2005|08:48] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Sun
      [12/04/2005|13:09] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Symantec
      [12/06/2007|18:30] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Talkback
      [01/11/2006|17:56] C:\DOCUME~1\COMPAQ~1\APPLIC~1\teamspeak2
      [02/02/2007|16:44] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Template
      [05/11/2008|01:18] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Temporary
      [05/11/2008|01:18] C:\DOCUME~1\COMPAQ~1\APPLIC~1\TransRender
      [09/01/2006|21:35] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Ulead Systems
      [27/08/2008|18:58] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Vso
      [15/11/2008|00:56] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Winamp
      [20/12/2007|00:41] C:\DOCUME~1\COMPAQ~1\APPLIC~1\Yahoo!

      [02/01/2005|00:31] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Apple Computer
      [01/01/2005|08:29] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
      [02/01/2005|00:23] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Intervideo
      [02/01/2005|00:23] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft
      [02/01/2005|00:54] C:\DOCUME~1\DEFAUL~1\APPLIC~1\SampleView
      [01/01/2005|08:48] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Sun
      [01/01/2005|08:02] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Symantec

      [26/12/2006|10:42] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

      [01/01/2005|08:31] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft
      [06/11/2005|15:13] C:\DOCUME~1\NETWOR~1\APPLIC~1\Symantec

      --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

      [05/12/2008 19:01][--ah-----] C:\WINDOWS\tasks\User_Feed_Synchronization-{7AACB3C9-AD1F-4B4D-B28A-AD78C787BCE2}.job
      [05/08/2004 11:00][-rah-----] C:\WINDOWS\tasks\desktop.ini
      [06/12/2008 14:30][--ah-----] C:\WINDOWS\tasks\SA.DAT

      --------------------\\ Listing des dossiers dans C:\Program Files

      [07/10/2008|19:28] C:\Program Files\Ableton
      [29/06/2008|22:11] C:\Program Files\Adobe
      [19/10/2006|16:02] C:\Program Files\Alwil Software
      [29/10/2006|21:37] C:\Program Files\ANNO 1602 Version Gold
      [02/02/2006|15:19] C:\Program Files\ArcSoft
      [09/04/2005|18:19] C:\Program Files\ATI Technologies
      [13/08/2007|16:09] C:\Program Files\AutoGK
      [01/12/2008|22:44] C:\Program Files\Avira
      [13/08/2007|15:29] C:\Program Files\AviSynth 2.5
      [04/04/2007|20:02] C:\Program Files\Azureus
      [13/11/2008|22:39] C:\Program Files\Bonjour
      [17/03/2007|23:57] C:\Program Files\Catalencoder
      [04/04/2008|21:03] C:\Program Files\CCleaner
      [02/03/2007|08:11] C:\Program Files\CD Jaquette
      [27/08/2008|15:11] C:\Program Files\CDBurnerXP
      [03/03/2007|18:48] C:\Program Files\coverXP
      [26/09/2005|16:40] C:\Program Files\Creative
      [05/05/2007|00:12] C:\Program Files\CyberLink
      [02/04/2007|14:41] C:\Program Files\Data
      [23/11/2008|20:40] C:\Program Files\Dictionnaire
      [01/07/2007|20:11] C:\Program Files\DigiTech
      [30/04/2008|21:58] C:\Program Files\DivX
      [06/11/2005|18:51] C:\Program Files\DivXCodec
      [13/08/2007|16:10] C:\Program Files\DVD Decrypter
      [27/09/2007|17:28] C:\Program Files\EA Games
      [30/11/2008|23:11] C:\Program Files\eMule
      [03/04/2008|21:55] C:\Program Files\eRightSoft
      [05/12/2008|19:25] C:\Program Files\Fichiers communs
      [26/12/2006|16:49] C:\Program Files\FileZilla
      [11/02/2007|19:49] C:\Program Files\FX-preset
      [13/08/2007|16:08] C:\Program Files\Gabest
      [15/11/2008|00:35] C:\Program Files\Google
      [01/12/2008|20:58] C:\Program Files\GRISOFT
      [29/02/2008|22:38] C:\Program Files\Image-Line
      [02/04/2007|14:41] C:\Program Files\Images
      [01/07/2008|15:49] C:\Program Files\InstallShield Installation Information
      [26/09/2005|12:49] C:\Program Files\Intel Desktop Board
      [28/12/2007|18:51] C:\Program Files\InterActual
      [16/10/2008|22:51] C:\Program Files\Internet Explorer
      [26/12/2006|16:51] C:\Program Files\InterVideo
      [14/11/2008|21:04] C:\Program Files\iPod
      [17/03/2007|22:23] C:\Program Files\IrfanView
      [14/11/2008|21:04] C:\Program Files\iTunes
      [23/05/2005|14:09] C:\Program Files\Jasc Software Inc
      [13/11/2008|22:00] C:\Program Files\Java
      [29/10/2006|23:22] C:\Program Files\Kit ADSL
      [05/12/2008|19:26] C:\Program Files\Lavasoft
      [12/10/2008|20:12] C:\Program Files\LimeWire
      [10/12/2005|19:28] C:\Program Files\Logitech
      [06/12/2008|16:20] C:\Program Files\Macrogaming
      [23/05/2005|14:08] C:\Program Files\Macromedia
      [28/09/2005|11:41] C:\Program Files\Maxis
      [18/08/2008|00:01] C:\Program Files\Messenger
      [05/10/2008|23:15] C:\Program Files\Messenger Plus! Live
      [22/02/2008|21:42] C:\Program Files\Microsoft CAPICOM 2.1.0.2
      [01/01/2005|08:29] C:\Program Files\microsoft frontpage
      [14/08/2007|11:22] C:\Program Files\Microsoft Games
      [19/04/2008|20:30] C:\Program Files\Microsoft Office
      [15/08/2007|14:17] C:\Program Files\Microsoft Works
      [02/11/2007|22:18] C:\Program Files\Movie Maker
      [06/12/2008|16:09] C:\Program Files\Mozilla Firefox
      [19/04/2008|20:30] C:\Program Files\MSECache
      [08/03/2008|13:53] C:\Program Files\MSN
      [04/12/2005|20:03] C:\Program Files\MSN Apps
      [20/06/2006|19:55] C:\Program Files\MSN Games
      [01/01/2005|08:26] C:\Program Files\MSN Gaming Zone
      [08/03/2008|13:49] C:\Program Files\MSN Messenger
      [15/08/2007|14:16] C:\Program Files\MSXML 4.0
      [01/01/2005|09:03] C:\Program Files\NetMeeting
      [06/11/2005|18:51] C:\Program Files\NimoCodec Pack
      [26/10/2008|10:16] C:\Program Files\Oberon Media
      [01/01/2005|08:26] C:\Program Files\Online Services
      [14/11/2008|19:44] C:\Program Files\OpenOffice.org 3
      [14/06/2007|00:10] C:\Program Files\Outlook Express
      [17/03/2007|23:25] C:\Program Files\PSPMovieCreator
      [13/11/2008|22:38] C:\Program Files\QuickTime
      [14/08/2007|00:28] C:\Program Files\QuickZip
      [12/09/2007|21:40] C:\Program Files\Samsung
      [02/01/2005|00:48] C:\Program Files\Services en ligne
      [05/06/2005|11:09] C:\Program Files\Sierra
      [01/01/2005|08:08] C:\Program Files\SiS VGA Utilities V3.63
      [13/01/2008|13:43] C:\Program Files\Skype
      [02/01/2005|00:19] C:\Program Files\Sonic
      [23/05/2005|13:55] C:\Program Files\Sonic Foundry
      [27/10/2006|14:59] C:\Program Files\Sonic Foundry Setup
      [26/12/2006|16:48] C:\Program Files\Sonic RecordNow!
      [11/02/2007|19:49] C:\Program Files\Synth
      [28/02/2007|14:42] C:\Program Files\Teamspeak2_RC2
      [04/04/2008|20:19] C:\Program Files\Trend Micro
      [01/07/2008|15:49] C:\Program Files\Ubi Soft
      [06/10/2005|19:00] C:\Program Files\USB Driver-Express
      [27/08/2008|18:58] C:\Program Files\VSO
      [08/10/2008|20:25] C:\Program Files\VstPlugins
      [15/11/2008|00:52] C:\Program Files\Winamp
      [02/12/2007|22:17] C:\Program Files\Windows Journal Viewer
      [09/03/2008|22:02] C:\Program Files\Windows Live
      [08/11/2007|17:26] C:\Program Files\Windows Media Connect 2
      [08/11/2007|18:17] C:\Program Files\Windows Media Player
      [01/01/2005|09:03] C:\Program Files\Windows NT
      [27/10/2006|21:21] C:\Program Files\WinRAR
      [01/01/2005|08:29] C:\Program Files\xerox
      [06/11/2005|18:51] C:\Program Files\XviD
      [06/12/2008|16:21] C:\Program Files\Yahoo!
      [11/10/2008|20:54] C:\Program Files\YouTube Downloader

      --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

      [01/03/2008|12:17] C:\Program Files\Fichiers communs\Adobe
      [15/11/2008|00:32] C:\Program Files\Fichiers communs\Apple
      [10/12/2005|19:28] C:\Program Files\Fichiers communs\FotoWire
      [26/09/2007|18:29] C:\Program Files\Fichiers communs\InstallShield
      [01/01/2005|08:48] C:\Program Files\Fichiers communs\Java
      [10/12/2005|19:27] C:\Program Files\Fichiers communs\Logitech
      [23/05/2005|14:07] C:\Program Files\Fichiers communs\Macromedia
      [25/08/2007|13:06] C:\Program Files\Fichiers communs\MAGIX Shared
      [19/04/2008|20:30] C:\Program Files\Fichiers communs\Microsoft Shared
      [01/01/2005|08:27] C:\Program Files\Fichiers communs\MSSoap
      [11/07/2008|11:50] C:\Program Files\Fichiers communs\Real
      [01/01/2005|09:03] C:\Program Files\Fichiers communs\Services
      [01/01/2005|09:22] C:\Program Files\Fichiers communs\SpeechEngines
      [02/01/2005|00:20] C:\Program Files\Fichiers communs\SureThing Shared
      [24/10/2006|00:21] C:\Program Files\Fichiers communs\Symantec Shared
      [14/06/2007|00:10] C:\Program Files\Fichiers communs\System
      [08/03/2008|14:04] C:\Program Files\Fichiers communs\WindowsLiveInstaller
      [05/12/2008|19:25] C:\Program Files\Fichiers communs\Wise Installation Wizard

      --------------------\\ Process

      ( 53 Processes )

      ... OK !

      --------------------\\ Recherche avec S_Lop

      Aucun fichier / dossier Lop trouvé !

      --------------------\\ Recherche de Fichiers / Dossiers Lop

      C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\nsqF2.tmp
      C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@banner.cotedazurpalace[2].txt
      C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@cotedazurpalace[1].txt
      C:\DOCUME~1\COMPAQ~1\Cookies\compaq_propriétaire@www.cotedazurpalace[1].txt

      --------------------\\ Verification du Registre

      ..... OK !

      --------------------\\ Verification du fichier Hosts

      Fichier Hosts PROPRE


      --------------------\\ Recherche de fichiers avec Catchme

      catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2008-12-06 16:41:45
      Windows 5.1.2600 Service Pack 2 NTFS
      scanning hidden processes ...
      scanning hidden files ...
      scan completed successfully
      hidden processes: 0
      hidden files: 1886

      --------------------\\ Recherche d'autres infections

      --------------------\\ Cracks & Keygens ..

      C:\DOCUME~1\COMPAQ~1\Bureau\Diverses Imcompr‚hensibilit‚s\crack
      C:\DOCUME~1\COMPAQ~1\Bureau\Diverses Imcompr‚hensibilit‚s\crack\FLRegkey.Reg
      C:\DOCUME~1\COMPAQ~1\Bureau\jeux\Worms World Party\WWP\crack.rar
      C:\DOCUME~1\COMPAQ~1\Mes documents\Ableton\Library\Presets\Audio Effects\Vinyl Distortion\Crack.adv


      [F:74][D:24]-> C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp
      [F:25][D:0]-> C:\DOCUME~1\COMPAQ~1\Cookies
      [F:734][D:8]-> C:\DOCUME~1\COMPAQ~1\LOCALS~1\TEMPOR~1\content.IE5

      1 - "C:\Lop SD\LopR_1.txt" - 06/12/2008|16:45 - Option : [1]

      --------------------\\ Fin du rapport a 16:45:48
      0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. neor Messages postés 1119 Statut Membre 30
     
    dans ajout supp de programme tu a pas messenger plus?

    si oui désinstalle le

    refais un hijack
    0
    1. M. ZzalexX
       
      C'est fait.
      Next Boss ? ^^
      0
      1. M. ZzalexX > M. ZzalexX
         
        Et le rapport Hijack :

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 16:57:36, on 06/12/2008
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v7.00 (7.00.6000.16735)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
        C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        C:\Program Files\Alwil Software\Avast4\ashServ.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
        C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
        C:\Program Files\Bonjour\mDNSResponder.exe
        C:\WINDOWS\system32\CTsvcCDA.EXE
        C:\Program Files\CDBurnerXP\NMSAccessU.exe
        C:\Program Files\CyberLink\Shared Files\RichVideo.exe
        C:\WINDOWS\system32\svchost.exe
        C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
        C:\windows\system\hpsysdrv.exe
        C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
        C:\WINDOWS\AGRSMMSG.exe
        C:\WINDOWS\SOUNDMAN.EXE
        C:\WINDOWS\system32\ps2.exe
        C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
        C:\WINDOWS\ALCWZRD.EXE
        C:\WINDOWS\system32\LVCOMSX.EXE
        C:\Program Files\Logitech\Video\LogiTray.exe
        C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
        C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        C:\Program Files\iTunes\iTunesHelper.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
        C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
        C:\Program Files\Logitech\Video\FxSvr2.exe
        C:\Program Files\iPod\bin\iPodService.exe
        C:\WINDOWS\system32\rundll32.exe
        C:\Program Files\Mozilla Firefox\firefox.exe
        C:\Documents and Settings\Compaq_Propriétaire\Bureau\Hijackthis.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
        R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\MSN Gaming Zone\Windows\shvlzm.exe"
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
        O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (file missing)
        O2 - BHO: testCPV6 - {15421B84-3488-49A7-AD18-CBF84A3EFAF6} - C:\Program Files\CPV\CPV7.dll (file missing)
        O2 - BHO: (no name) - {4afb5176-8dfd-498b-8aec-7e47194d75bd} - C:\WINDOWS\system32\yezoyihu.dll
        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.1852\swg.dll
        O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
        O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
        O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
        O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
        O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
        O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
        O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
        O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
        O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
        O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
        O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
        O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
        O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
        O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
        O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
        O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
        O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
        O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
        O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
        O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
        O4 - HKLM\..\Run: [blaaaa] C:\Documents and Settings\Compaq_Propriétaire\legsvh.exe
        O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
        O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
        O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
        O4 - HKLM\..\Run: [bofuvulipi] Rundll32.exe "C:\WINDOWS\system32\fatenuva.dll",s
        O4 - HKLM\..\Run: [CPM7b825354] Rundll32.exe "c:\windows\system32\jemitawa.dll",a
        O4 - HKLM\..\RunOnce: [MessengerPlusLiveUninstall] "C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\MsgPlusUninstall.exe" /Cleanup
        O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
        O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
        O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-19\..\Run: [bofuvulipi] Rundll32.exe "C:\WINDOWS\system32\fatenuva.dll",s (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
        O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
        O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
        O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
        O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
        O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
        O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
        O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
        O17 - HKLM\System\CCS\Services\Tcpip\..\{F2C427ED-DAC7-4C46-8D53-8FBAAE63E69C}: NameServer = 192.168.1.1
        O20 - AppInit_DLLs: c:\windows\system32\nafihuka.dll C:\WINDOWS\system32\gebuhobo.dll c:\windows\system32\jemitawa.dll
        O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\jemitawa.dll
        O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\jemitawa.dll
        O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
        O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
        O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
        O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
        O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
        O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
        O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
        O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Common\Database\bin\fbserver.exe
        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
        O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
        O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
        0
  7. neor Messages postés 1119 Statut Membre 30
     
    desinstalle msnplus et tu a bien desinstallé sweetim?
    0
    1. M. ZzalexX
       
      Oui je les ais désinstaller les 2, mais apparemment il faudrait un redémarrage pr que la désinstallation soit complète.
      Je redémarre et te reposte un rapport Hijack.
      0
  8. neor Messages postés 1119 Statut Membre 30
     
    -------------------recherche---------------------------

    Télécharges AD-Remover ( de Cyrildu17 / C_XX ) sur ton bureau :
    http://neor244.free.fr/ADR.exe

    /!\ Déconnectes toi et fermes toutes applications en cours

    ● Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( C:\Program files )
    ● Double clique sur l'icône Ad-removersituée sur ton bureau
    ● Au menu principal choisi l'option "A"
    ● Postes le rapport qui apparait à la fin .

    ( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

    (CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

    Note :

    "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
    Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
    Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
    0
    1. M. ZzalexX
       
      --------- Logfile of AD-Remover 1.0.5.9 by C_XX ---------

      # START at: 17:14:26 | 06/12/2008 ON Microsoft® Windows XP ™ v5.1.2600
      # BOOT MODE: Normal

      # OPTION: Scan
      # EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat

      # PC: DEDED3A4C94E6FD | USER: Compaq_Propri‚taire ( Current user is an administrator )

      # DRIVE(S): C:\
      # Systemdrive: C:\ (NTFS)
      # Internet Explorer v7.0.5730.13

      --------- [ RUNNING PROCESSES: 49 ] ---------

      \SystemRoot\System32\smss.exe
      \??\C:\WINDOWS\system32\csrss.exe
      \??\C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
      C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\WINDOWS\system32\ps2.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\WINDOWS\ALCWZRD.EXE
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\Program Files\Logitech\Video\LogiTray.exe
      C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
      C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
      C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
      C:\WINDOWS\system32\CTsvcCDA.EXE
      C:\Program Files\CDBurnerXP\NMSAccessU.exe
      C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Logitech\Video\FxSvr2.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\WINDOWS\System32\alg.exe

      -----------------------------------


      +---------------------------------------------------------------------------+
      +------------------------------- SERVICES FOUND ..
      +---------------------------------------------------------------------------+


      +---------------------------------------------------------------------------+
      +------------------------------- REGISTRY ELEMENTS FOUND ..
      +---------------------------------------------------------------------------+

      "HKEY_CLASSES_ROOT\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}"
      "HKEY_CLASSES_ROOT\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632"
      "HKEY_CLASSES_ROOT\MgMediaPlayer.GifAnimator"
      "HKEY_CLASSES_ROOT\MgMediaPlayer.GifAnimator.1"
      "HKEY_CURRENT_USER\SOFTWARE\SWEETIE"
      "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run" /v "SweetIM"
      "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A0AADCD-3A72-4B5F-900F-E3BB5A838E2A}"
      "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Macrogaming"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1AC67655DD68F8240B2860F2D511EBD8"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9"

      +---------------------------------------------------------------------------+
      +------------------------------- FILES\FOLDERS FOUND ..
      +---------------------------------------------------------------------------+

      [06/12/2008 16:20|d--------] C:\Program Files\Macrogaming
      [06/12/2008 14:32|--a------] C:\WINDOWS\Prefetch\SWEETIM.EXE-162DDC78.pf

      +---------------------------------------------------------------------------+
      +------------------------------- ADDED SCAN ..
      +---------------------------------------------------------------------------+



      +---------- Scanning prefs.js ... ( # Mozilla User Preferences )

      ...\kjzxqjaa.default\prefs.js :

      ~~~~ Mozilla FireFox version 2.0.0.18 ~~~~

      Start Page : "https://www.google.fr/?gws_rd=ssl"

      +----------+


      +---------------------------------------------------------------------------+

      +--[HKEY_CURRENT_USER\...\Run]

      Creative Detector REG_SZ C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
      MsnMsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
      LogitechSoftwareUpdate REG_SZ "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
      swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      ctfmon.exe REG_SZ C:\WINDOWS\system32\ctfmon.exe
      SweetIM REG_SZ C:\Program Files\Macrogaming\SweetIM\SweetIM.exe

      +--[HKEY_LOCAL_MACHINE\...\Run]

      SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
      hpsysdrv REG_SZ c:\windows\system\hpsysdrv.exe
      IgfxTray REG_SZ C:\WINDOWS\system32\igfxtray.exe
      ISUSPM Startup REG_SZ C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
      ISUSScheduler REG_SZ "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
      Recguard REG_SZ C:\WINDOWS\SMINST\RECGUARD.EXE
      VTTimer REG_SZ VTTimer.exe
      SiSPower REG_SZ Rundll32.exe SiSPower.dll,ModeAgent
      AGRSMMSG REG_SZ AGRSMMSG.exe
      SoundMan REG_SZ SOUNDMAN.EXE
      PS2 REG_SZ C:\WINDOWS\system32\ps2.exe
      ATIPTA REG_SZ C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      AlcWzrd REG_SZ ALCWZRD.EXE
      LSBWatcher REG_SZ c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
      LVCOMSX REG_SZ C:\WINDOWS\system32\LVCOMSX.EXE
      LogitechVideoRepair REG_SZ C:\Program Files\Logitech\Video\ISStart.exe
      LogitechVideoTray REG_SZ C:\Program Files\Logitech\Video\LogiTray.exe
      RemoteControl REG_SZ "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
      LanguageShortcut REG_SZ "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
      Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      blaaaa REG_SZ C:\Documents and Settings\Compaq_Propriétaire\legsvh.exe
      avast! REG_SZ C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      iTunesHelper REG_SZ "C:\Program Files\iTunes\iTunesHelper.exe"
      avgnt REG_SZ "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
      bofuvulipi REG_SZ Rundll32.exe "C:\WINDOWS\system32\fatenuva.dll",s
      CPM7b825354 REG_SZ Rundll32.exe "c:\windows\system32\jemitawa.dll",a

      +--[HKEY_USERS\.DEFAULT\...\Run]

      msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

      +--[HKEY_CURRENT_USER\...\Internet Explorer\MAIN]

      Start Page : hxxp://www.google.fr/

      +--[HKEY_LOCAL_MACHINE\...\Internet Explorer\MAIN]

      Start Page : hxxp://go.microsoft.com/fwlink/?LinkId=69157

      +---------------------------------------------------------------------------+
      +------------------------------- [ E.O.F - 179 lines ]
      +---------------------------------------------------------------------------+

      - "C:\AD-report-06.12.2008.log" (11102 octets)

      [ END at: 17:17:42 | 06/12/2008 ] - [ Time elapsed: 3 minutes, 15 seconds ]
      0
  9. neor Messages postés 1119 Statut Membre 30
     
    Lance Malwarebyte's https://download.cnet.com/Malwarebytes/3000-8022_4-10804572.html…

    Fais un scan dit "complet" ( sélectionnes bien tous tes disks avant le scan ! ).

    --> Laisses le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
    --> à la fin tu cliques sur "résultat" .
    --> Vérifies que tous les objets infectés soient validés, puis cliques sur " suppression " .

    Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

    Postes le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)
    0
    1. M. ZzalexX
       
      Désolé, le scan était assez long.
      (antivir s'est déclanché a 5 ou 6 reprises, j'ai supprimé le fichier a chaque)
      voici le rapport :

      Malwarebytes' Anti-Malware 1.31
      Version de la base de données: 1466
      Windows 5.1.2600 Service Pack 2

      06/12/2008 19:30:50
      mbam-log-2008-12-06 (19-30-50).txt

      Type de recherche: Examen complet (C:\|D:\|)
      Eléments examinés: 246063
      Temps écoulé: 1 hour(s), 58 minute(s), 20 second(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 4
      Clé(s) du Registre infectée(s): 23
      Valeur(s) du Registre infectée(s): 4
      Elément(s) de données du Registre infecté(s): 5
      Dossier(s) infecté(s): 0
      Fichier(s) infecté(s): 14

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      C:\WINDOWS\system32\yezoyihu.dll (Trojan.Vundo.H) -> Delete on reboot.
      C:\WINDOWS\system32\fatenuva.dll (Trojan.Vundo.H) -> Delete on reboot.
      c:\WINDOWS\system32\jemitawa.dll (Trojan.Vundo.H) -> Delete on reboot.
      C:\WINDOWS\system32\gebuhobo.dll (Trojan.Vundo.H) -> Delete on reboot.

      Clé(s) du Registre infectée(s):
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4afb5176-8dfd-498b-8aec-7e47194d75bd} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\CLSID\{4afb5176-8dfd-498b-8aec-7e47194d75bd} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{4afb5176-8dfd-498b-8aec-7e47194d75bd} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\CLSID\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\testcpv6.bho (Trojan.Agent) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\testcpv6.bho.1 (Trojan.Agent) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\Interface\{2e4a04a1-a24d-45ae-aca4-949778400813} (Trojan.BHO) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\Interface\{85e06077-c824-43d0-a8dc-5efb17bc348a} (Adware.Zango) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\Interface\{a8b0f390-e6bf-4027-a4d4-1e4363f5e27b} (Trojan.Lop) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\Interface\{a9e33220-0b05-11d7-88d2-444553540000} (Trojan.Lop) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\Interface\{e0abbf96-17dc-44ca-96d0-6217064a97ba} (Trojan.Lop) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\CLSID\{15421b84-3488-49a7-ad18-cbf84a3efaf6} (Trojan.Agent) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\CLSID\{8109fd3d-d891-4f80-8339-50a4913ace6f} (Adware.Zango) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\Typelib\{63334394-3da3-4b29-a041-03535909d361} (Trojan.BHO) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\Typelib\{5937cd7f-1c0b-41e1-9075-60ebdf3c7d34} (Adware.Zango) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\AppID\{ff46f4ab-a85f-487e-b399-3f191ac0fe23} (Trojan.BHO) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{15421b84-3488-49a7-ad18-cbf84a3efaf6} (Trojan.Agent) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{15421b84-3488-49a7-ad18-cbf84a3efaf6} (Trojan.Agent) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\AppID\testCPV6.DLL (Trojan.BHO) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\BO1jiZmwnF2zhi (Trojan.Agent) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\SOFTWARE\xInsiDERexe (Adware.Agent) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.

      Valeur(s) du Registre infectée(s):
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bofuvulipi (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cpm7b825354 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\ssodl (Trojan.Vundo.H) -> Quarantined and deleted successfully.

      Elément(s) de données du Registre infecté(s):
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: c:\windows\system32\jemitawa.dll -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: system32\jemitawa.dll -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: c:\windows\system32\gebuhobo.dll -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\gebuhobo.dll
      0
  10. neor Messages postés 1119 Statut Membre 30
     
    repost un hijack stp
    0
    1. M. ZzalexX
       
      Rapport Hijack :

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 19:53:11, on 06/12/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16735)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
      C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\WINDOWS\system32\CTsvcCDA.EXE
      C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
      C:\Program Files\CDBurnerXP\NMSAccessU.exe
      C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\WINDOWS\system32\ps2.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\WINDOWS\ALCWZRD.EXE
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\Program Files\Logitech\Video\LogiTray.exe
      C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
      C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
      C:\Program Files\Logitech\Video\FxSvr2.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Documents and Settings\Compaq_Propriétaire\Bureau\Hijackthis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = "C:\Program Files\MSN Gaming Zone\Windows\shvlzm.exe"
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (file missing)
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.1852\swg.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
      O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
      O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
      O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
      O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
      O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
      O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
      O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
      O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [blaaaa] C:\Documents and Settings\Compaq_Propriétaire\legsvh.exe
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
      O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-19\..\Run: [bofuvulipi] Rundll32.exe "C:\WINDOWS\system32\fatenuva.dll",s (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User 'Default user')
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{F2C427ED-DAC7-4C46-8D53-8FBAAE63E69C}: NameServer = 192.168.1.1
      O20 - AppInit_DLLs: c:\windows\system32\nafihuka.dll
      O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
      O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
      O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Common\Database\bin\fbserver.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
      O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      0
  11. neor Messages postés 1119 Statut Membre 30
     
    Télécharge AD-Remover de C_XX sur ton Bureau :
    http://neor244.free.fr/ADR.exe

    Ferme toutes les applications en cours, y compris ton navigateur *.
    Désactive ton antivirus.

    Double-clique sur AD-R.exe et installe-le dans le répertoire par défaut. ( C:\Program files )

    Double clique sur l'icône Ad-remover
    https://i75.servimg.com/u/f75/11/05/93/83/ad-r10.jpg

    Au menu principal choisis l'option A

    Poste le rapport qui apparait à la fin du scan.
    Il est sauvegardé ici : C:\Ad-report(date).log

    * Process.exe, un composant de l'outil, est détecté par certains antivirus, (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
    Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
    C'est pourquoi il faut désactiver provisoirement ton antivirus.
    0
    1. M. ZzalexX
       
      Voila :



      --------- Logfile of AD-Remover 1.0.5.9 by C_XX ---------

      # START at: 20:09:21 | 06/12/2008 ON Microsoft® Windows XP ™ v5.1.2600
      # BOOT MODE: Normal

      # OPTION: Scan
      # EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat

      # PC: DEDED3A4C94E6FD | USER: Compaq_Propri‚taire ( Current user is an administrator )

      # DRIVE(S): C:\
      # Systemdrive: C:\ (NTFS)
      # Internet Explorer v7.0.5730.13

      --------- [ RUNNING PROCESSES: 48 ] ---------

      \SystemRoot\System32\smss.exe
      \??\C:\WINDOWS\system32\csrss.exe
      \??\C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
      C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\WINDOWS\system32\CTsvcCDA.EXE
      C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
      C:\Program Files\CDBurnerXP\NMSAccessU.exe
      C:\Program Files\CyberLink\Shared Files\RichVideo.exe
      C:\WINDOWS\AGRSMMSG.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\WINDOWS\system32\ps2.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\WINDOWS\ALCWZRD.EXE
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\Program Files\Logitech\Video\LogiTray.exe
      C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
      C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
      C:\Program Files\Logitech\Video\FxSvr2.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\WINDOWS\System32\alg.exe

      -----------------------------------


      +---------------------------------------------------------------------------+
      +------------------------------- SERVICES FOUND ..
      +---------------------------------------------------------------------------+


      +---------------------------------------------------------------------------+
      +------------------------------- REGISTRY ELEMENTS FOUND ..
      +---------------------------------------------------------------------------+

      "HKEY_CLASSES_ROOT\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}"
      "HKEY_CLASSES_ROOT\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632"
      "HKEY_CLASSES_ROOT\MgMediaPlayer.GifAnimator"
      "HKEY_CLASSES_ROOT\MgMediaPlayer.GifAnimator.1"
      "HKEY_CURRENT_USER\SOFTWARE\SWEETIE"
      "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run" /v "SweetIM"
      "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A0AADCD-3A72-4B5F-900F-E3BB5A838E2A}"
      "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Macrogaming"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1AC67655DD68F8240B2860F2D511EBD8"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4318DF19719275242801CBE292063A4C"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5"
      "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9"

      +---------------------------------------------------------------------------+
      +------------------------------- FILES\FOLDERS FOUND ..
      +---------------------------------------------------------------------------+

      [06/12/2008 16:20|d--------] C:\Program Files\Macrogaming
      [06/12/2008 14:32|--a------] C:\WINDOWS\Prefetch\SWEETIM.EXE-162DDC78.pf

      +---------------------------------------------------------------------------+
      +------------------------------- ADDED SCAN ..
      +---------------------------------------------------------------------------+



      +---------- Scanning prefs.js ... ( # Mozilla User Preferences )

      ...\kjzxqjaa.default\prefs.js :

      ~~~~ Mozilla FireFox version 2.0.0.18 ~~~~

      Start Page : "https://www.google.fr/?gws_rd=ssl"

      +----------+


      +---------------------------------------------------------------------------+

      +--[HKEY_CURRENT_USER\...\Run]

      Creative Detector REG_SZ C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
      MsnMsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
      LogitechSoftwareUpdate REG_SZ "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
      swg REG_SZ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      ctfmon.exe REG_SZ C:\WINDOWS\system32\ctfmon.exe
      SweetIM REG_SZ C:\Program Files\Macrogaming\SweetIM\SweetIM.exe

      +--[HKEY_LOCAL_MACHINE\...\Run]

      SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
      hpsysdrv REG_SZ c:\windows\system\hpsysdrv.exe
      IgfxTray REG_SZ C:\WINDOWS\system32\igfxtray.exe
      ISUSPM Startup REG_SZ C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
      ISUSScheduler REG_SZ "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
      Recguard REG_SZ C:\WINDOWS\SMINST\RECGUARD.EXE
      VTTimer REG_SZ VTTimer.exe
      SiSPower REG_SZ Rundll32.exe SiSPower.dll,ModeAgent
      AGRSMMSG REG_SZ AGRSMMSG.exe
      SoundMan REG_SZ SOUNDMAN.EXE
      PS2 REG_SZ C:\WINDOWS\system32\ps2.exe
      ATIPTA REG_SZ C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      AlcWzrd REG_SZ ALCWZRD.EXE
      LSBWatcher REG_SZ c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
      LVCOMSX REG_SZ C:\WINDOWS\system32\LVCOMSX.EXE
      LogitechVideoRepair REG_SZ C:\Program Files\Logitech\Video\ISStart.exe
      LogitechVideoTray REG_SZ C:\Program Files\Logitech\Video\LogiTray.exe
      RemoteControl REG_SZ "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
      LanguageShortcut REG_SZ "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
      Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      blaaaa REG_SZ C:\Documents and Settings\Compaq_Propriétaire\legsvh.exe
      avast! REG_SZ C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      iTunesHelper REG_SZ "C:\Program Files\iTunes\iTunesHelper.exe"
      avgnt REG_SZ "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

      +--[HKEY_USERS\.DEFAULT\...\Run]

      msnmsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

      +--[HKEY_CURRENT_USER\...\Internet Explorer\MAIN]

      Start Page : hxxp://www.google.fr/

      +--[HKEY_LOCAL_MACHINE\...\Internet Explorer\MAIN]

      Start Page : hxxp://go.microsoft.com/fwlink/?LinkId=69157

      +---------------------------------------------------------------------------+
      +------------------------------- [ E.O.F - 176 lines ]
      +---------------------------------------------------------------------------+

      - "C:\AD-report-06.12.2008.log" (10906 octets)

      [ END at: 20:09:38 | 06/12/2008 ] - [ Time elapsed: 17.0 seconds ]
      0
      1. Tsumals > M. ZzalexX
         
        après avoir installer Malwarebytes' et scanner ton ordi pas "complet" vas dans quarantaine puis supprime les tous
        0
      2. M. ZzalexX > Tsumals
         
        C'est fait.
        0
  12. M. ZzalexX
     
    Bon et bien merci pour aujourd'hui, je ne sais pas si le problème est réglé mais au moins je n'ai plus de fenètre intempestive sur Firefox.
    Merci beaucoup a Neor pour l'aide apportée, je reviendrais demain voir si tout est parti (je dois m'en aller là).
    Bonne soirée a Tsumals aussi.
    0

Discussions similaires

Chrome://newtab
Nova -
snoopy35_ -

14 réponses
Softonic,est-ce un virus ?
techmel1 -
techmel1 -

6 réponses
Désinstaller Softonic
Diguimette -
lilidurhone -

5 réponses
impossible de terminer l’opération car virus Win 7
Slipt -
Malekal_morte- -

2 réponses
Aide pour un virus
cerise92700 -
MisteryBean -

41 réponses