Virus - Google Redirigé - Page 2

Précédent
  • 1
  • 2
  1. gen-hackman
     
    c est normal que smitfraudfix soit detecté comme une "risk.tool" par les protections

    par contre nour avons un petit souci je n'ai pas vu la suppression de EverestPoker donc je voudrais verifier si tu peux aller surfer tranquille renvoie s'il te plait l'option 1 de ad-Remover par securité merci
    0
  2. connie
     
    OK. Ci-dessous le log :

    --------- Logfile of AD-Remover 1.0.7.8 by C_XX ---------

    # START at: 13:23:54 | Mer 31/12/2008 | Microsoft® Windows XP™ SP2 (v5.1.2600)
    # BOOT MODE: Normal

    # OPTION: Scan | EXECUTED FROM: C:\Program Files\Ad-remover\AD-Remover.bat

    # PC: PCJO | USER: Geoffroy ( Current user is an administrator)

    # DRIVE(S):
    - C:\ (File System: NTFS)
    - D:\ (File System: NTFS)
    - E:\ (File System: FAT32)

    # Internet Explorer v7.0.5730.11

    --------- [ RUNNING PROCESSES: 49 ] ---------

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\System32\WLTRYSVC.EXE
    C:\WINDOWS\System32\bcmwltry.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
    C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
    C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
    C:\WINDOWS\ehome\mcrdsvc.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    C:\Program Files\QuickTime\QTTask.exe
    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
    C:\WINDOWS\System32\MAFWTray.exe
    C:\APPS\SMP\SmpSys.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\filehippo Update Checker\UpdateChecker.exe
    C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    C:\Program Files\Microsoft ActiveSync\wcescomm.exe
    C:\PROGRA~1\MICROS~3\rapimgr.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
    C:\Program Files\TextPad 4\TextPad.exe
    C:\WINDOWS\system32\ntvdm.exe

    -----------------------------------

    +-----------------------| Boonty/Boonty Games Elements found :

    .

    +-----------------------| Eorezo Elements found :

    .

    +-----------------------| Everest Poker Elements found :

    .

    +-----------------------| FunWebProducts/MyWay/MyWebSearch/MyGlobalSearch Elements found :

    "HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179}"
    .

    +-----------------------| It's TV Elements found :

    .

    +-----------------------| Sweetim Elements found :

    .

    +-----------------------| ADDED SCAN :

    +---------- Scanning prefs.js ... ( # Mozilla User Preferences )

    ...\ixmd6aj4.default\prefs.js :

    ~~~~ Mozilla FireFox version 3.0.5 ~~~~

    Start Page : "https://www.lemonde.fr/"

    +----------+

    +---------------------------------------------------------------------------+

    +--[HKEY_CURRENT_USER\..\Run]

    SmpcSys REG_SZ C:\APPS\SMP\SmpSys.exe
    SpybotSD TeaTimer REG_SZ C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    ctfmon.exe REG_SZ C:\WINDOWS\system32\ctfmon.exe
    filehippo.com REG_SZ "C:\Program Files\filehippo Update Checker\UpdateChecker.exe" /background
    MsnMsgr REG_SZ "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    H/PC Connection Agent REG_SZ "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"

    +--[HKEY_LOCAL_MACHINE\..\Run]

    avgnt REG_SZ "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
    SunJavaUpdateSched REG_SZ "C:\Program Files\Java\jre6\bin\jusched.exe"
    Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    StartCCC REG_SZ "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    QuickTime Task REG_SZ "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    TkBellExe REG_SZ "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
    ZoneAlarm Client REG_SZ "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    H2O REG_SZ C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
    M-Audio Taskbar Icon REG_SZ C:\WINDOWS\System32\MAFWTray.exe
    MAFWTaskbarApp REG_SZ C:\WINDOWS\system32\MAFWTray.exe

    +--[HKEY_USERS\.DEFAULT\..\Run]

    +--[HKEY_CURRENT_USER\..\Internet Explorer\MAIN]

    Start Page : hxxp://www.msn.com/?wl=true

    +--[HKEY_LOCAL_MACHINE\..\Internet Explorer\MAIN]

    Start Page : hxxp://fr.msn.com/

    +---------------------------------------------------------------------------+

    - "C:\AD-report-Scan-31.12.2008.log" (~4952 bytes)

    # END at: 13:24:20 | 31/12/2008 - Time elapsed: 25.5 seconds

    +---------------------------------------------------------------------------+
    +------------------------------- [ E.O.F - 105 lines ]
    +---------------------------------------------------------------------------+
    0
  3. gen-hackman
     
    relance ad-remover option nettoyage en cochant tout
    0
Précédent
  • 1
  • 2