Adware, spyware, comment virer cette merde?!

Résolu
Bonjour,

Depuis peu, je vois s'afficher des pubs en relation (ou pas) avec mes recherches Google.
Le problème c'est que ces pubs s'affichent en-dehors de mon navigateur.
Ceci est arrivé après qu'une application (je ne me souviens plus laquelle) m'ait proposé de télécharger Google Chrome et que j'ai, accidentellement, accepté.
Je pense donc que ça part de là.

QUELQU'UN POUR M'AIDER?

MERCI D'AVANCE!
Configuration: Windows Vista
Firefox 3.0.8

34 réponses

Résumé de la discussion

Le fil décrit l’apparition soudaine de publicités associées ou non aux recherches Google qui s’affichent en dehors du navigateur, après l’acceptation d’une proposition de téléchargement suspecte de Chrome. Des éléments de réponse identifient des outils de nettoyage et des traces de logiciels potentiellement malveillants, notamment des variétés de Navilog1, Ad-remover et HijackThis, à lancer pour nettoyer le système. La réponse propose d’exécuter ToolsCleaner version 2.3.5 et d’examiner les rapports qui listent des fichiers trouvés dans de multiples emplacements, puis de supprimer ces éléments et de redémarrer. D'autres éléments du fil mentionnent que l’optimisation passe aussi par la vérification des programmes lancés au démarrage et une suppression complète des restes potentiels afin d’éviter une récidive.

Bobot (l’IA à votre service)
  1. Modérateur
    A ton service.
    Bonne soirée et bonne continuation.
    Crapoulou.
    0
    1. Ok, alors encore merci pour le gros coup de main!
      Ces pubs commençaient à sérieusement m'emmerder!
      Bonne continuation!
      ++
      0
      1. Modérateur
        Ok.
        Si tu décides de changer d'antivirus, désinstalle bien Avast.
        Un coup de Ccleaner sera le bienvenue après.
        0
        1. Ah désolé sur le mail il n'y avait pas la partie après Ccleaner!
          Je m'y attelle tout de suite!
          0
          1. Modérateur
            T'as regardé un peu pour le pare-feu et l'antivirus ?
            0
            1. Ok, tout a bien marché. J'avais déjà fait l'étape de Ccleaner juste avant de supprimer avec Toolscleaner donc je l'ai refait dans le doute et je n'ai plus d'erreurs.
              Encore d'autres programmes à exécuter?
              0
              1. Modérateur
                Très bien, supprime Toolscleaner et passe à la suite.
                0
                1. Ok !
                  Je l'ai redémarré comme tu m'as dit et , effectivement c'était une feinte !
                  Donc voilà :

                  [ Rapport ToolsCleaner version 2.3.5 (par A.Rothstein & dj QUIOU) ]

                  --> Recherche:

                  C:\fixnavi.txt: trouvé !
                  C:\cleannavi.txt: trouvé !
                  C:\TB.txt: trouvé !
                  C:\Toolbar SD: trouvé !
                  C:\Downloads\Software\HJTInstall.exe: trouvé !
                  C:\Downloads\Software\Ad-R.exe: trouvé !
                  C:\Program Files\Navilog1: trouvé !
                  C:\Program Files\Ad-remover: trouvé !
                  C:\Program Files\Navilog1\Navilog1.bat: trouvé !
                  C:\Program Files\Trend Micro\HijackThis: trouvé !
                  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: trouvé !
                  C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\ProgramData\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\ProgramData\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\ProgramData\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\ProgramData\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\ProgramData\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\ProgramData\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\ProgramData\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\ProgramData\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\Users\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\Users\All Users\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\Users\All Users\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\Users\All Users\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\Users\All Users\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\Users\All Users\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\Users\All Users\Microsoft\Windows\Start Menu\Programmes\HijackThis: trouvé !
                  C:\Users\All Users\Microsoft\Windows\Start Menu\Programmes\Navilog1: trouvé !
                  C:\Users\All Users\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis: trouvé !
                  C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Navilog1: trouvé !
                  C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: trouvé !
                  C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: trouvé !
                  C:\Users\Mig'Iwa\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes\Ad-remover: trouvé !
                  C:\Users\Mig'Iwa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ad-remover: trouvé !
                  C:\Users\Mig'Iwa\Desktop\HijackThis.lnk: trouvé !
                  C:\Users\Mig'Iwa\Desktop\Navilog1.exe: trouvé !
                  C:\Users\Mig'Iwa\Desktop\Ad-remover.lnk: trouvé !
                  C:\Users\Mig'Iwa\Desktop\ToolBarSD.exe: trouvé !
                  C:\Users\Mig'Iwa\Desktop\hijackthis.log: trouvé !
                  C:\Users\Mig'Iwa\Desktop\fixnavi.txt: trouvé !
                  C:\Users\Public\Desktop\Navilog1.lnk: trouvé !

                  ---------------------------------
                  --> Suppression:

                  C:\Downloads\Software\HJTInstall.exe: supprimé !
                  C:\Downloads\Software\Ad-R.exe: supprimé !
                  C:\Program Files\Navilog1\Navilog1.bat: supprimé !
                  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe: supprimé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis\HijackThis.lnk: supprimé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1\Navilog1.lnk: supprimé !
                  C:\Users\Mig'Iwa\Desktop\HijackThis.lnk: supprimé !
                  C:\Users\Mig'Iwa\Desktop\Navilog1.exe: supprimé !
                  C:\Users\Mig'Iwa\Desktop\Ad-remover.lnk: supprimé !
                  C:\Users\Mig'Iwa\Desktop\ToolBarSD.exe: supprimé !
                  C:\Users\Public\Desktop\Navilog1.lnk: supprimé !
                  C:\fixnavi.txt: supprimé !
                  C:\cleannavi.txt: supprimé !
                  C:\TB.txt: supprimé !
                  C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
                  C:\Users\Mig'Iwa\Desktop\hijackthis.log: supprimé !
                  C:\Users\Mig'Iwa\Desktop\fixnavi.txt: supprimé !
                  C:\Toolbar SD: supprimé !
                  C:\Program Files\Navilog1: supprimé !
                  C:\Program Files\Ad-remover: supprimé !
                  C:\Program Files\Trend Micro\HijackThis: supprimé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\HijackThis: ERREUR DE SUPPRESSION !!
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Navilog1: ERREUR DE SUPPRESSION !!
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programmes\Ad-remover: ERREUR DE SUPPRESSION !!
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\HijackThis: supprimé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Navilog1: supprimé !
                  C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu\Programs\Ad-remover: supprimé !
                  C:\Users\Mig'Iwa\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes\Ad-remover: ERREUR DE SUPPRESSION !!
                  C:\Users\Mig'Iwa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ad-remover: supprimé !

                  Corbeille vidée!
                  Fichiers temporaires nettoyés !
                  0
                  1. Modérateur
                    C'est normal.
                    Relance le, laisse le travailler et ne touche à rien !
                    Même si tu as l'impression qu'il buggue, laisse le travailler, c'est une feinte ;-) lol.
                    0
                    1. Au bout de quelques minutes, le programme ne répond plus (Toolscleaner).
                      0
                      1. Modérateur
                        Pour finir :

                        Pour supprimer toutes les traces des logiciels qui ont servi à traiter les infections spécifiques :

                        Télécharge toolscleaner sur ton Bureau
                        = = = =>>> En cliquant ici <<<= = = =
                        * Clique droit sur ToolsCleaner2.exe, sélectionne « Exécuter en tant qu’administrateur » et laisse le travailler sans rien toucher !
                        * Clique sur Recherche et laisse le scan se terminer.
                        * Clique sur Suppression pour finaliser.
                        * Tu peux, si tu le souhaites, te servir des Options facultatives.
                        * Clique sur Quitter, pour que le rapport puisse se créer.
                        * Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)...colle le dans ta réponse.

                        ***************

                        Tu peux garder Malwarebytes anti malware en tant qu’anti malware, il est très efficace. (Même s’il ne résout pas tous les problèmes, bien entendu … !)
                        Par contre, il n’a pas de scan résident en mode gratuit ! Il faut donc pour l’utiliser le lancer, faire les mises à jour et faire un scan complet après.

                        ***************

                        * Télécharge Ccleaner Slim :
                        = = = = >>> En cliquant ici <<< = = = =

                        * Installe le.
                        * Choisis l’onglet Nettoyeur

                        Quitte ton navigateur Internet avant de le lancer, décoche la dernière case (Avancé si elle est cochée) puis clique sur "lancer le nettoyage" quand il aura terminé le scan cliques en bas à droite sur "lancer le nettoyage" et accepte par oui.
                        Attention, il risque de vider ta corbeille : si tu veux récupérer des fichiers effacés par erreur, mieux vaut le faire maintenant.

                        * Choisis l’onglet Registre

                        - Clique sur Chercher des erreurs
                        - Une fois la recherche terminée, clic sur Réparer les erreurs sélectionnées (par défaut, tout est sélectionné, laisse comme ça)
                        - Au message Voulez-vous sauvegarder les changements faits dans le registre, réponds Oui et enregistre le fichier au format « .reg » en le nommant par la date par exemple en le mettant sur le bureau. Puis continue.
                        - A la fenêtre qui s’ouvre ensuite, clique sur Corriger toutes les erreurs sélectionnées puis OK
                        - Recommence jusqu’à ce qu’aucune erreur n’apparaisse (ou une seule récurrente).
                        - Ferme Ccleaner.

                        * Tutoriel en images ICI si besoin.

                        Note : La sauvegarde utilisée permet de remettre tel que la base était avant la manipulation au cas où il y aurait des soucis mais cela ne m’est jamais arrivé ! Il vaut mieux prendre des précautions, c’est tout. ;-)

                        ****************

                        Installe un pare feu car celui de Windows n’est pas suffisant.
                        ZoneAlarm :
                        = = = = >>> En cliquant ici <<< = = = =
                        Un tutorial pour le configurer
                        = = = = >>> En cliquant ici <<< = = = =

                        ***************

                        Réactive l'UAC et le Teatimer de Spybot

                        ****************

                        Pour information, Antivir d’Avira est meilleur qu’Avast ou autre antivirus gratuit.
                        Si ça t’intéresse, désinstalle bien le tien et installe Antivir.
                        Tout est expliqué sur ce lien, du téléchargement à la configuration.
                        Autre lien utile : ICI
                        0
                        1. Et bien, je crois que ça a très bien marché!

                          C'est vraiment sympa de ta part d'avoir perdu du temps à m'aider!

                          Un grand MERCI à toi crapoulou!
                          0
                          1. Le PC a l'air d'aller mieux.
                            Pour l'instant je ne me suis pas repris de pubs.
                            Je fais ce que tu m'as dit, je fais un test et je te tiens au courant.
                            0
                            1. Modérateur
                              Comment va le PC ?

                              Relance Hijackthis par clic droit, ‘Exécuter en tant qu’administrateur’.
                              Clic sur "Do a system scan only".
                              Coche ces lignes :
                              R3 - Default URLSearchHook is missing
                              O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                              O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
                              O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                              O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                              O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
                              O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                              O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)

                              Clic ensuite sur fix checked.
                              0
                              1. Ad-remover :

                                ------- LOGFILE OF AD-REMOVER 1.1.3.1 | ONLY XP/VISTA -------

                                Updated by C_XX on 18/04/2009 at 17:50
                                Contact: AdRemover.contact@gmail.com
                                Website: http://pagesperso-orange.fr/FindyKill.Ad.Remover/

                                **** LIMITED TO ****

                                Eorezo

                                ********************

                                Start at: 23:03:08, 18/04/2009 | Boot mode: Normal Boot
                                Option: CLEAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
                                Operating System: Microsoft® Windows Vista™ Home Basic Service Pack 1 (version 6.0.6001)
                                Computer Name: PC_DE_MCFLY
                                Current User: Mig'Iwa - Administrator
                                Drive(s):
                                - C:\ (File System: NTFS)

                                (!) ---- IE start pages/Tabs reset

                                +-----------------| Eorezo Elements Deleted :

                                HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoengine
                                HKCU\Software\EoRezo
                                .
                                C:\Users\Mig'Iwa\AppData\Roaming\EoRezo

                                (!) ---- Temp files deleted.
                                (!) ---- Recycle bin emptied in all drives.

                                +-----------------| Added Scan :

                                ---- Mozilla FireFox Version 3.0.8 ----

                                ProfilePath: 55n4ncml.default (Mig'Iwa)
                                .
                                .
                                .
                                .
                                .
                                .

                                ---- Internet Explorer Version 8.0.6001.18702 ----

                                [HKEY_CURRENT_USER\..\Internet Explorer\Main]

                                Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                                Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                                Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
                                Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
                                Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                                Start page: hxxp://fr.msn.com/?ocid=iehp

                                [HKEY_USERS\S-1-5-21-3188970863-350882058-1908172791-1000\..\Internet Explorer\Main]

                                Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                                Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                                Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
                                Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
                                Start page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                                Start page: hxxp://fr.msn.com/?ocid=iehp

                                [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

                                Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                                Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                                Search bar: hxxp://search.msn.com/spbasic.htm
                                Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                                Start page: hxxp://fr.msn.com/

                                [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

                                Tabs: hxxp://ieframe.dll/tabswelcome.htm

                                +---------------------------------------------------------------------------+

                                2586 Byte(s) - C:\Ad-Report-Clean-18.04.2009.log
                                2427 Byte(s) - C:\Ad-Report-Scan-18.04.2009.log

                                1 File(s) - C:\Program Files\Ad-remover\TOOLS\BACKUP
                                0 File(s) - C:\Program Files\Ad-remover\TOOLS\QUARANTINE

                                End at: 23:04:04 | 18/04/2009
                                .
                                +-----------------| E.O.F
                                .

                                HiJackThis :

                                Logfile of Trend Micro HijackThis v2.0.2
                                Scan saved at 23:07:09, on 18/04/2009
                                Platform: Windows Vista SP1 (WinNT 6.00.1905)
                                MSIE: Internet Explorer v8.00 (8.00.6001.18702)
                                Boot mode: Normal

                                Running processes:
                                C:\Windows\system32\taskeng.exe
                                C:\Windows\system32\Dwm.exe
                                C:\Program Files\Windows Defender\MSASCui.exe
                                C:\Windows\System32\igfxtray.exe
                                C:\Windows\System32\hkcmd.exe
                                C:\Windows\System32\igfxpers.exe
                                C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                                C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
                                C:\Program Files\Launch Manager\LManager.exe
                                C:\Program Files\Apoint2K\Apoint.exe
                                C:\Windows\RtHDVCpl.exe
                                C:\Program Files\Java\jre6\bin\jusched.exe
                                C:\Program Files\Alwil Software\Avast4\ashDisp.exe
                                C:\Program Files\DAEMON Tools Lite\daemon.exe
                                C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe
                                C:\Program Files\Free Download Manager\fdm.exe
                                C:\Program Files\DNA\btdna.exe
                                C:\Windows\system32\wbem\unsecapp.exe
                                C:\Windows\system32\igfxsrvc.exe
                                C:\Program Files\Windows Media Player\wmpnscfg.exe
                                C:\Program Files\Apoint2K\ApMsgFwd.exe
                                C:\Program Files\Apoint2K\Apntex.exe
                                C:\Windows\system32\igfxext.exe
                                C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                                C:\Windows\explorer.exe
                                C:\Program Files\Mozilla Firefox\firefox.exe
                                C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                                R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                                R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                                R3 - Default URLSearchHook is missing
                                O1 - Hosts: ::1 localhost
                                O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                                O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                                O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                                O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
                                O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                                O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
                                O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
                                O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
                                O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                                O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
                                O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                                O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
                                O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
                                O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
                                O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
                                O4 - HKLM\..\Run: [BkupTray] "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe"
                                O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
                                O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe
                                O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
                                O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
                                O4 - HKLM\..\Run: [WarReg_PopUp] C:\Program Files\eMachines\WR_PopUp\WarReg_PopUp.exe
                                O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                                O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                                O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                                O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
                                O4 - HKCU\..\Run: [EPSON SX100 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIEDE.EXE /FU "C:\Windows\TEMP\E_SC32F.tmp" /EF "HKCU"
                                O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
                                O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                                O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
                                O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                                O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
                                O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                                O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                                O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                                O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
                                O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
                                O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
                                O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
                                O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
                                O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
                                O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
                                O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
                                O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
                                O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                                O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                                O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
                                O13 - Gopher Prefix:
                                O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
                                O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                                O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                                O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                                O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                                O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
                                O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\EMACHINES\eMachines Recovery Management\Service\ETService.exe
                                O23 - Service: Google Desktop Manager 5.7.807.15159 (GoogleDesktopManager-071508-051939) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                                O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                                O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
                                O23 - Service: LibUsb-Win32 - Daemon, Version 0.1.10.1 (libusbd) - https://sourceforge.net/p/libusb-win32/wiki/Home/ - C:\Windows\system32\libusbd-nt.exe
                                O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
                                O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
                                O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
                                O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
                                0
                                1. Modérateur
                                  Nettoyage avec Ad-Remover :

                                  * /!\ Déconnecte toi et fermes toutes applications en cours /!\

                                  * Relance "Ad-remover" par clic droit > "Exécuter en tant qu’administrateur".
                                  * Au menu principal choisi l'option "B".
                                  = = = =>>> Comme sur cette image <<<= = = =

                                  * Ensuite coche :

                                  Eorezo
                                  Pour ‘cocher’, tape chaque numéro correspondant puis entrée pour valider.

                                  * Puis tape S
                                  * Le programme va travailler ...
                                  * Poste le rapport qui apparaît à la fin + un nouveau rapport Hijackthis pour analyse.

                                  (Le rapport est sauvegardé aussi sous C:\Ad-report.log.)

                                  /!\ Si le Bureau ne réapparaît pas presse Ctrl + Alt + Suppr , Onglet "Fichier" , "Nouvelle tâche" , tape explorer.exe et valide) /!\
                                  0
                                  1. Voilà :

                                    ------- LOGFILE OF AD-REMOVER 1.1.3.1 | ONLY XP/VISTA -------

                                    Updated by C_XX on 18/04/2009 at 17:50
                                    Contact: AdRemover.contact@gmail.com
                                    Website: http://pagesperso-orange.fr/FindyKill.Ad.Remover/

                                    Start at: 22:42:41, 18/04/2009 | Boot mode: Normal Boot
                                    Option: SCAN | Executed from: C:\Program Files\Ad-remover\Ad-remover.bat
                                    Operating System: Microsoft® Windows Vista™ Home Basic Service Pack 1 (version 6.0.6001)
                                    Computer Name: PC_DE_MCFLY
                                    Current User: Mig'Iwa - Administrator
                                    Drive(s):
                                    - C:\ (File System: NTFS)

                                    ============ Known Adwares Found ============

                                    .
                                    HKLM\Software\Trymedia Systems
                                    .
                                    C:\ProgramData\Trymedia

                                    +-----------------| Eorezo Elements Found:

                                    HKCU\Software\EoRezo
                                    HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoengine
                                    .
                                    C:\Users\Mig'Iwa\AppData\Roaming\EoRezo

                                    +-----------------| It's TV Elements Found:

                                    .

                                    +-----------------| Sweetim Elements Found:

                                    .

                                    +-----------------| Added Scan:

                                    ---- Mozilla FireFox Version 3.0.8 ----

                                    ProfilePath: 55n4ncml.default (Mig'Iwa)
                                    .
                                    .
                                    .
                                    .
                                    .
                                    .

                                    ---- Internet Explorer Version 8.0.6001.18702 ----

                                    [HKEY_CURRENT_USER\..\Internet Explorer\Main]

                                    Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
                                    Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
                                    Start page: hxxp://go.microsoft.com/fwlink/?LinkId=69157
                                    Start page: hxxp://fr.msn.com/?ocid=iehp

                                    [HKEY_USERS\S-1-5-21-3188970863-350882058-1908172791-1000\..\Internet Explorer\Main]

                                    Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
                                    Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
                                    Start page: hxxp://go.microsoft.com/fwlink/?LinkId=69157
                                    Start page: hxxp://fr.msn.com/?ocid=iehp

                                    [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

                                    Default_Page_URL: hxxp://homepage.emachines.com/rdr.aspx?b=ACEW&l=040c&s=2&o=vb32&d=1208&m=e520
                                    Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
                                    Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
                                    Start page: hxxp://www.msn.com/

                                    [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

                                    Tabs: hxxp://ieframe.dll/tabswelcome.htm

                                    +---------------------------------------------------------------------------+

                                    2198 Byte(s) - C:\Ad-Report-Scan-18.04.2009.log

                                    0 File(s) - C:\Program Files\Ad-remover\TOOLS\BACKUP
                                    0 File(s) - C:\Program Files\Ad-remover\TOOLS\QUARANTINE

                                    End at: 22:49:50 | 18/04/2009
                                    .
                                    +-----------------| E.O.F
                                    .
                                    0
                                    • 1
                                    • 2