Mon pc rame

Résolu
nina53400 -  
Bonjour,
jai un soucis avecmon pc il rame
et jouvre ma boutique dans 15 jours ilfaut que mon pc soit operationnel
pouvervous maider
jai avast comme antivirus mais je ne voitplus licone en bas a droite de mon pc alors je me demande si il fonctionne
je vient de faire uneanalyse avec
malwarebytes il trouve 10 elements infecte
pouvervous maidersilvous plait
Configuration: Windows Vista Internet Explorer 7.0

9 réponses

  • Votes
  • Date
  • Date décroissante
  1. Utilisateur anonyme
    bonjour,

    •/!\ Utilisateur de Vista : Ne pas oublier de désactiver l’UAC juste le temps de désinfection de ton pc, il sera à réactiver plus tard :
    Tuto : https://www.commentcamarche.net/faq/8343-vista-desactiver-l-uac­er-l-uac

    /!\Utilisateur de Vista : Clique droit sur le logo de navilog1, « exécuter en tant qu’Administrateur »
    1. Utilisateur anonyme
      c'est le bon, tu te débrouilles très bien :-)

      il y a encore du boulot là dessus :

      •/!\ Utilisateur de Vista : Ne pas oublier de désactiver l’UAC juste le temps de désinfection de ton pc, il sera à réactiver plus tard :
      Tuto : https://www.commentcamarche.net/faq/8343-vista-desactiver-l-uac

      Télécharge navilog1 sur ton bureau :
      http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe

      = Double-clic sur navilog1.exe présent sur ton bureau
      /!\Utilisateur de Vista : Clique droit sur le logo de navilog1, « exécuter en tant qu’Administrateur »

      = Sélectionne la langue désirée dans le menu puis valide le choix par la touche « entrer »
      = Petit message d’avertissement, appuie sur une touche pour passe à la suite
      = un nouveau avertissement, appuie sur une touche pour suivre
      = Vérification de l’installation de Navilo1 : si tout est bon, appuie sur une touche pour continuer
      = Choisir option 1 : recherche/désinfection automatique
      = La recherche va se lancer automatiquement et peut durée quelques minutes, patiente
      = Une fois l’analyse terminé, ferme et enregistre ton travail en cours, puis appuie sur une touche pour que ton pc puisse démarrer
      = au redémarrage du pc, Navilog va supprimer ce qu’il a trouvé, patiente quelques instants
      = Le rapport cleannavi.txt s’ouvre, poste le rapport en copier coller sur ton prochain message.
      Le rapport se trouve ici :
      XP : demarrer/poste de travail/cleannavi.txt
      Vista : logo « demarrer »/ordinateur/ cleannavi.txt

      Note : tu peux désinstaller Navilog via ajout/surpression de programme de windows.
      Tuto en image :
      https://kerio.probb.fr/t3324-tuto-navilog
      1. nina53400
        bonsoir
        sa marche pas
        une fois le choix de la langue y a plus rien
        que dois je faire
        desoler du retard jetait partit pour mon materiel pour ma boutique
    2. Utilisateur anonyme
      bonjour,
      suis bien ce que je t'ai noté sur ce poste :

      https://forums.commentcamarche.net/forum/affich-15414125-mon-pc-rame#1

      tu ne l'as pas installé comme il faut la dernière fois, c'est pour cette raison que tu le retrouves pas :

      C:\Users\Stef\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6W8ZVUHL\RSIT[1].exe
      1. nina53400
        jespere que ces le bon javoue jai du mal
        Logfile of random's system information tool 1.06 (written by random/random)
        Run by Stef at 2009-12-02 12:38:48
        Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
        System drive C: has 57 GB (48%) free of 119 GB
        Total RAM: 3061 MB (45% free)

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 12:39:45, on 02/12/2009
        Platform: Windows Vista SP2 (WinNT 6.00.1906)
        MSIE: Internet Explorer v8.00 (8.00.6001.18828)
        Boot mode: Normal

        Running processes:
        C:\Windows\System32\smss.exe
        C:\Windows\system32\csrss.exe
        C:\Windows\system32\wininit.exe
        C:\Windows\system32\csrss.exe
        C:\Windows\system32\services.exe
        C:\Windows\system32\lsass.exe
        C:\Windows\system32\lsm.exe
        C:\Windows\system32\winlogon.exe
        C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe
        C:\Windows\System32\svchost.exe
        C:\Windows\System32\svchost.exe
        C:\Windows\System32\svchost.exe
        C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe
        C:\Windows\system32\SLsvc.exe
        C:\Windows\system32\svchost.exe
        C:\Windows\system32\svchost.exe
        C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        C:\Program Files\Alwil Software\Avast4\ashServ.exe
        C:\Windows\system32\WLANExt.exe
        C:\Windows\System32\spoolsv.exe
        C:\Windows\system32\svchost.exe
        C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
        C:\Program Files\Bonjour\mDNSResponder.exe
        C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
        C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
        C:\Windows\system32\svchost.exe
        C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
        C:\Windows\system32\svchost.exe
        C:\Windows\System32\svchost.exe
        C:\Windows\system32\SearchIndexer.exe
        C:\Windows\system32\DRIVERS\xaudio.exe
        C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
        C:\Windows\system32\WUDFHost.exe
        C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
        C:\Windows\system32\taskeng.exe
        C:\Program Files\Windows Media Player\wmpnetwk.exe
        C:\Windows\system32\Dwm.exe
        C:\Windows\system32\taskeng.exe
        C:\Windows\Explorer.EXE
        C:\Windows\System32\hkcmd.exe
        C:\Windows\System32\igfxpers.exe
        C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
        C:\Program Files\iTunes\iTunesHelper.exe
        C:\Windows\system32\igfxsrvc.exe
        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        C:\Program Files\Skype\Phone\Skype.exe
        C:\Users\Stef\AppData\Local\udcpx.exe
        C:\Program Files\Free Download Manager\fdm.exe
        C:\Program Files\Windows Media Player\wmpnscfg.exe
        C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
        C:\Windows\system32\wbem\unsecapp.exe
        C:\Windows\system32\wbem\wmiprvse.exe
        C:\Program Files\iPod\bin\iPodService.exe
        C:\Program Files\OrangeHSS\systray\systrayapp.exe
        C:\Program Files\Windows Live\Contacts\wlcomm.exe
        C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
        C:\Program Files\Windows Live\Toolbar\wltuser.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Program Files\Windows Defender\MSASCui.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Windows\system32\conime.exe
        C:\Windows\system32\wbem\WmiApSrv.exe
        C:\Windows\system32\msiexec.exe
        C:\Program Files\Spyware Doctor\pctsAuxs.exe
        C:\Program Files\Spyware Doctor\pctsSvc.exe
        C:\Program Files\Spyware Doctor\pctsTray.exe
        C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Program Files\Spyware Doctor\Update.exe
        C:\Users\Stef\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6W8ZVUHL\RSIT[1].exe
        C:\Windows\system32\wbem\wmiprvse.exe
        C:\Program Files\trend micro\Stef.exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.durable.com/recherche
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.durable.com/recherche
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.durable.com/recherche
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.durable.com/recherche
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.durable.com/recherche
        R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.durable.com/recherche
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.durable.com/recherche
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
        R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.durable.com/recherche
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
        R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
        O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
        O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
        O2 - BHO: Shareware.Pro-FR Toolbar - {280b5d37-4a76-467a-b3d6-942fca90acde} - C:\Program Files\Shareware.Pro-FR\tbSha1.dll
        O2 - BHO: Browser Defender BHO - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll
        O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
        O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
        O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
        O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
        O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
        O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
        O3 - Toolbar: Shareware.Pro-FR Toolbar - {280b5d37-4a76-467a-b3d6-942fca90acde} - C:\Program Files\Shareware.Pro-FR\tbSha1.dll
        O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O3 - Toolbar: WalterShop - {9ec204df-0e48-4c32-816e-2e928a4fd9c2} - mscoree.dll (file missing)
        O3 - Toolbar: PC Tools Browser Guard - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll
        O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
        O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
        O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
        O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
        O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
        O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
        O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
        O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
        O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
        O4 - HKCU\..\Run: [Search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
        O4 - HKCU\..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
        O4 - HKCU\..\Run: [udcpx] "c:\users\stef\appdata\local\udcpx.exe" udcpx
        O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
        O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
        O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
        O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
        O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
        O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
        O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
        O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
        O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files\Bonjour\ExplorerPlugin.dll
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
        O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
        O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
        O13 - Gopher Prefix:
        O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
        O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
        O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
        O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
        O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
        O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
        O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
        O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
        O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
        O23 - Service: Browser Defender Update Service - Threat Expert Ltd. - C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
        O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
        O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
        O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
        O23 - Service: Service Google Update (gupdate1c9f8c25692ce9b) (gupdate1c9f8c25692ce9b) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
        O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
        O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: Nero BackItUp Scheduler 4.0 - Unknown owner - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (file missing)
        O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
        O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
        O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
        O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
      2. nina53400
        bonsoir
        je narrive pas
        une fois la langue choisit y a plus rien
        que dois je faire
    3. Utilisateur anonyme
      très bien :-)

      repasse un autre rsit et poste son rapport
      note : tu n'auras qu'un seul rapport log.txt
      merci
      1. nina53400
        bonjour ,
        peut tu me renvoier le lien sil te plait
        merci
    5. Utilisateur anonyme
      suis ceci, tout est noté dedans :
      https://forums.commentcamarche.net/forum/affich-15414125-mon-pc-rame#5
      1. nina53400
        voici le rapport jespere ne pas mettre tromper

        --------------------\\ Lop S&D 4.2.5-0 XP/Vista

        Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
        X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz )
        BIOS : Default System BIOS
        USER : Stef ( Not Administrator ! )
        BOOT : Normal boot
        Antivirus : avast! antivirus 4.8.1335 [VPS 090718-1] 4.8.1335 (Activated)
        C:\ (Local Disk) - NTFS - Total:116 Go (Free:57 Go)
        D:\ (Local Disk) - NTFS - Total:116 Go (Free:116 Go)
        E:\ (CD or DVD)
        F:\ (USB)

        "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
        Option : [2] ( 01/12/2009|13:44 )

        [ UAC => 0 ]

        \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

        Supprime! - C:\Users\Stef\AppData\Roaming\MICROS~1\Windows\Cookies\stef@advertising[2].txt
        Supprime! - C:\ProgramData\Itch Spam Spam.fonusn
        Supprime! - C:\ProgramData\Itch Spam Spam.hmloeq6
        -
        [ Fichier Hosts ] .. Restaure!

        \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

        --------------------\\ Listing des dossiers dans Local

        [07/06/2009|07:04] C:\Users\Stef\AppData\Local\{BAD7C248-517D-4CE1-B65A-829C01BEFDB1}
        [10/11/2009|22:24] C:\Users\Stef\AppData\Local\Adobe
        [25/05/2009|19:35] C:\Users\Stef\AppData\Local\Ahead
        [10/07/2009|21:04] C:\Users\Stef\AppData\Local\Apple
        [12/10/2009|17:45] C:\Users\Stef\AppData\Local\Apple Computer
        [12/10/2009|17:45] C:\Users\Stef\AppData\Local\Apple_Inc
        [02/02/2009|17:09] C:\Users\Stef\AppData\Local\Application Data
        [02/02/2009|17:41] C:\Users\Stef\AppData\Local\BVRP Software
        [21/08/2009|09:47] C:\Users\Stef\AppData\Local\d3d9caps.dat
        [22/11/2009|11:32] C:\Users\Stef\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
        [12/05/2009|17:41] C:\Users\Stef\AppData\Local\Downloaded Installations
        [10/11/2009|18:02] C:\Users\Stef\AppData\Local\EBP
        [28/08/2009|10:59] C:\Users\Stef\AppData\Local\eMule
        [10/07/2009|21:04] C:\Users\Stef\AppData\Local\FileMaker
        [11/11/2009|14:53] C:\Users\Stef\AppData\Local\GDIPFONTCACHEV1.DAT
        [21/10/2009|23:15] C:\Users\Stef\AppData\Local\Google
        [02/02/2009|17:09] C:\Users\Stef\AppData\Local\Historique
        [01/12/2009|13:26] C:\Users\Stef\AppData\Local\IconCache.db
        [10/07/2009|21:04] C:\Users\Stef\AppData\Local\L8457789100
        [17/04/2009|17:48] C:\Users\Stef\AppData\Local\Micro Application
        [09/09/2009|12:38] C:\Users\Stef\AppData\Local\Microsoft
        [01/08/2009|12:01] C:\Users\Stef\AppData\Local\Microsoft Games
        [19/11/2009|14:50] C:\Users\Stef\AppData\Local\MLSofts
        [02/02/2009|18:27] C:\Users\Stef\AppData\Local\Mozilla
        [21/08/2009|13:39] C:\Users\Stef\AppData\Local\Nero
        [20/03/2009|20:08] C:\Users\Stef\AppData\Local\Neuf
        [10/11/2009|18:02] C:\Users\Stef\AppData\Local\PackageAware
        [01/12/2009|13:44] C:\Users\Stef\AppData\Local\Temp
        [02/02/2009|17:09] C:\Users\Stef\AppData\Local\Temporary Internet Files
        [01/12/2009|13:28] C:\Users\Stef\AppData\Local\udcpx.bat
        [01/12/2009|13:43] C:\Users\Stef\AppData\Local\udcpx.dat
        [01/12/2009|11:44] C:\Users\Stef\AppData\Local\udcpx.exe
        [01/12/2009|11:44] C:\Users\Stef\AppData\Local\udcpx_nav.dat
        [01/12/2009|13:44] C:\Users\Stef\AppData\Local\udcpx_navps.dat
        [02/02/2009|23:26] C:\Users\Stef\AppData\Local\VirtualStore
        [30/11/2009|11:13] C:\Users\Stef\AppData\Local\WDSetup
        [10/08/2009|15:43] C:\Users\Stef\AppData\Local\Zylom Games

        --------------------\\ Tâches planifiées dans C:\Windows\tasks

        [01/12/2009 12:06][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{9C3EA654-4056-4838-B18D-56CEF306948D}.job
        [01/12/2009 13:02][--a------] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
        [01/12/2009 13:27][--a------] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
        [01/12/2009 13:27][--ah-----] C:\Windows\tasks\SA.DAT
        [01/12/2009 13:26][--a------] C:\Windows\tasks\SCHEDLGU.TXT

        --------------------\\ Listing des dossiers dans C:\ProgramData

        [10/11/2009|18:03] C:\ProgramData\{0D4B0712-BA13-4FEB-9DA1-3FEF7B25F8B1}
        [10/11/2009|18:06] C:\ProgramData\{4890FF13-BFC8-467A-AD6A-71025F041ADD}
        [14/09/2009|11:58] C:\ProgramData\{755AC846-7372-4AC8-8550-C52491DAA8BD}
        [19/07/2009|13:34] C:\ProgramData\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
        [11/11/2009|21:02] C:\ProgramData\Adobe
        [10/07/2009|21:03] C:\ProgramData\Apple
        [19/07/2009|13:33] C:\ProgramData\Apple Computer
        [02/11/2006|14:02] C:\ProgramData\Application Data
        [02/02/2009|18:40] C:\ProgramData\Atheros
        [10/08/2009|15:54] C:\ProgramData\AVS4YOU
        [02/02/2009|17:07] C:\ProgramData\Bureau
        [02/02/2009|22:22] C:\ProgramData\CyberLink
        [25/04/2009|21:29] C:\ProgramData\D0D3D24DDF.sys
        [02/11/2006|14:02] C:\ProgramData\Desktop
        [02/11/2006|14:02] C:\ProgramData\Documents
        [17/05/2009|21:38] C:\ProgramData\Downloaded Installations
        [10/11/2009|18:03] C:\ProgramData\EBP
        [13/05/2009|20:50] C:\ProgramData\Electronic Arts
        [28/08/2009|10:59] C:\ProgramData\eMule
        [15/02/2009|12:59] C:\ProgramData\ezsidmv.dat
        [02/02/2009|17:07] C:\ProgramData\Favoris
        [02/11/2006|14:02] C:\ProgramData\Favorites
        [12/06/2009|21:34] C:\ProgramData\Google
        [09/05/2009|16:21] C:\ProgramData\InstallShield
        [25/04/2009|21:31] C:\ProgramData\KGyGaAvL.sys
        [30/11/2009|13:14] C:\ProgramData\Malwarebytes
        [21/11/2009|14:02] C:\ProgramData\manager dent data
        [10/11/2009|22:42] C:\ProgramData\McAfee
        [10/11/2009|22:24] C:\ProgramData\McAfee Security Scan
        [02/02/2009|17:07] C:\ProgramData\Menu D‚marrer
        [25/07/2009|15:52] C:\ProgramData\Messenger Plus!
        [15/02/2009|12:28] C:\ProgramData\Microsoft
        [02/02/2009|17:07] C:\ProgramData\ModŠles
        [01/10/2009|10:35] C:\ProgramData\MSN Pictures Displayer
        [30/08/2009|15:44] C:\ProgramData\Nero
        [11/11/2009|14:52] C:\ProgramData\NOS
        [10/08/2009|22:51] C:\ProgramData\PopCap Games
        [30/11/2009|10:01] C:\ProgramData\ServeurFax
        [12/06/2009|20:56] C:\ProgramData\Skype
        [18/11/2009|20:51] C:\ProgramData\Spybot - Search & Destroy
        [02/11/2006|14:02] C:\ProgramData\Start Menu
        [30/11/2009|11:14] C:\ProgramData\StockItEasy
        [17/11/2009|08:13] C:\ProgramData\TEMP
        [02/11/2006|14:02] C:\ProgramData\Templates
        [12/05/2009|00:15] C:\ProgramData\Vodafone
        [30/11/2009|10:10] C:\ProgramData\WDGold Lite
        [27/05/2009|23:16] C:\ProgramData\WinZip
        [15/02/2009|12:11] C:\ProgramData\WLInstaller
        [13/10/2009|09:43] C:\ProgramData\Yahoo!
        [13/10/2009|09:44] C:\ProgramData\Yahoo! Companion
        [09/08/2009|17:36] C:\ProgramData\Zylom

        --------------------\\ Listing des dossiers dans C:\Program Files

        [28/11/2009|15:08] C:\Program Files\AbiWord
        [10/11/2009|22:27] C:\Program Files\Adobe
        [02/02/2009|18:02] C:\Program Files\Alwil Software
        [02/02/2009|17:50] C:\Program Files\Apoint2K
        [19/07/2009|13:35] C:\Program Files\Apple Software Update
        [26/06/2009|13:39] C:\Program Files\Ask Search Assistant
        [14/08/2009|13:20] C:\Program Files\AskTBar
        [09/09/2009|12:15] C:\Program Files\Astonsoft
        [02/02/2009|18:43] C:\Program Files\Atheros
        [02/02/2009|18:21] C:\Program Files\Auslogics
        [17/11/2009|18:25] C:\Program Files\AVS4YOU
        [19/07/2009|13:28] C:\Program Files\Bonjour
        [02/02/2009|17:49] C:\Program Files\Broadcom
        [30/11/2009|13:07] C:\Program Files\CCleaner
        [07/03/2009|16:51] C:\Program Files\CIF USB Camera
        [21/11/2009|14:01] C:\Program Files\Circle Developeent
        [03/10/2009|14:18] C:\Program Files\Circle Dvelopement
        [02/02/2009|18:41] C:\Program Files\Cisco
        [19/11/2009|12:09] C:\Program Files\ColiPoste
        [30/11/2009|09:59] C:\Program Files\Common Files
        [09/08/2009|17:43] C:\Program Files\Conduit
        [28/02/2009|19:21] C:\Program Files\CONEXANT
        [25/04/2009|21:40] C:\Program Files\Corel
        [09/09/2009|12:06] C:\Program Files\Dealio Toolbar
        [10/08/2009|10:52] C:\Program Files\Deenero
        [01/08/2009|10:56] C:\Program Files\directx
        [12/05/2009|17:20] C:\Program Files\EA Sports
        [10/11/2009|18:06] C:\Program Files\EBP
        [12/05/2009|17:43] C:\Program Files\Electronic Arts
        [30/11/2009|13:23] C:\Program Files\EoRezo
        [02/02/2009|18:18] C:\Program Files\EVEREST Ultimate Edition 4_20_1319
        [30/11/2009|10:25] C:\Program Files\FastCaisse
        [02/02/2009|17:07] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
        [10/07/2009|21:02] C:\Program Files\FileMaker
        [30/11/2009|10:12] C:\Program Files\Firebird
        [01/12/2009|11:45] C:\Program Files\Free Download Manager
        [09/09/2009|12:08] C:\Program Files\Free Easy Burner
        [01/10/2009|10:29] C:\Program Files\Google
        [14/08/2009|13:46] C:\Program Files\InstallShield Installation Information
        [02/02/2009|17:34] C:\Program Files\Intel
        [28/10/2009|11:27] C:\Program Files\Internet Explorer
        [16/11/2009|08:59] C:\Program Files\iPod
        [16/11/2009|08:59] C:\Program Files\iTunes
        [07/06/2009|07:13] C:\Program Files\Java
        [01/10/2009|10:41] C:\Program Files\LimeWire
        [30/11/2009|13:15] C:\Program Files\Malwarebytes' Anti-Malware
        [23/05/2009|14:32] C:\Program Files\Messenger
        [21/11/2009|14:01] C:\Program Files\Messenger Plus! Live
        [15/02/2009|12:25] C:\Program Files\Microsoft
        [02/11/2006|13:37] C:\Program Files\Microsoft Games
        [10/07/2009|20:17] C:\Program Files\Microsoft Office
        [10/09/2009|08:42] C:\Program Files\Microsoft Silverlight
        [25/05/2009|12:11] C:\Program Files\Microsoft SQL Server Compact Edition
        [15/02/2009|12:29] C:\Program Files\Microsoft Sync Framework
        [19/11/2009|14:50] C:\Program Files\MLSofts
        [13/09/2009|11:41] C:\Program Files\Movie Maker
        [14/08/2009|13:50] C:\Program Files\Mozilla Firefox
        [02/11/2006|13:37] C:\Program Files\MSBuild
        [10/07/2009|20:17] C:\Program Files\MSECache
        [15/08/2009|09:54] C:\Program Files\MSXML 4.0
        [30/08/2009|15:43] C:\Program Files\Nero
        [02/02/2009|17:41] C:\Program Files\NetWaiting
        [27/10/2009|16:34] C:\Program Files\OrangeHSS
        [14/09/2009|11:56] C:\Program Files\QuickTime
        [02/11/2006|13:37] C:\Program Files\Reference Assemblies
        [17/11/2009|18:27] C:\Program Files\Registry Mechanic
        [30/08/2009|15:10] C:\Program Files\Rocket Division Software
        [09/09/2009|12:07] C:\Program Files\Search Settings
        [27/10/2009|16:33] C:\Program Files\Securitoo
        [12/08/2009|11:40] C:\Program Files\Shareware.Pro-FR
        [01/10/2009|10:29] C:\Program Files\Skype
        [12/08/2009|12:23] C:\Program Files\Skyrock
        [01/08/2009|11:10] C:\Program Files\Speed Thief
        [21/03/2009|11:46] C:\Program Files\SplitCam
        [18/11/2009|20:51] C:\Program Files\Spybot - Search & Destroy
        [30/11/2009|11:14] C:\Program Files\StockItEasy
        [06/05/2009|22:47] C:\Program Files\TeamViewer
        [30/11/2009|21:15] C:\Program Files\trend micro
        [02/11/2006|14:01] C:\Program Files\Uninstall Information
        [14/09/2009|11:58] C:\Program Files\Utilitaire de configuration iPhone
        [25/04/2009|18:47] C:\Program Files\VCW VicMan's Photo Editor
        [08/02/2009|12:48] C:\Program Files\VideoLAN
        [09/09/2009|20:24] C:\Program Files\VirginMega
        [25/04/2009|18:49] C:\Program Files\Web Photo Album
        [13/09/2009|11:41] C:\Program Files\Windows Calendar
        [13/09/2009|11:41] C:\Program Files\Windows Collaboration
        [13/09/2009|11:41] C:\Program Files\Windows Defender
        [13/09/2009|11:41] C:\Program Files\Windows Journal
        [24/11/2009|07:57] C:\Program Files\Windows Live
        [12/08/2009|12:34] C:\Program Files\Windows Live Safety Center
        [15/02/2009|12:24] C:\Program Files\Windows Live SkyDrive
        [12/11/2009|09:25] C:\Program Files\Windows Mail
        [28/10/2009|11:27] C:\Program Files\Windows Media Player
        [02/02/2009|17:07] C:\Program Files\Windows NT
        [13/09/2009|11:41] C:\Program Files\Windows Photo Gallery
        [18/11/2009|10:21] C:\Program Files\Windows Portable Devices
        [13/09/2009|11:41] C:\Program Files\Windows Sidebar
        [02/02/2009|18:26] C:\Program Files\WinRAR
        [13/10/2009|09:44] C:\Program Files\Yahoo!
        [10/08/2009|15:36] C:\Program Files\Zylom Games

        --------------------\\ Listing des dossiers dans C:\Program Files\Common Files

        [10/11/2009|22:27] C:\Program Files\Common Files\Adobe
        [26/06/2009|13:25] C:\Program Files\Common Files\Ahead
        [16/11/2009|08:59] C:\Program Files\Common Files\Apple
        [17/11/2009|18:25] C:\Program Files\Common Files\AVSMedia
        [27/10/2009|16:31] C:\Program Files\Common Files\France Telecom
        [09/05/2009|16:20] C:\Program Files\Common Files\InstallShield
        [10/07/2009|20:27] C:\Program Files\Common Files\microsoft shared
        [30/08/2009|15:44] C:\Program Files\Common Files\Nero
        [30/11/2009|09:59] C:\Program Files\Common Files\PC SOFT
        [01/10/2009|10:12] C:\Program Files\Common Files\PX Storage Engine
        [02/11/2006|12:18] C:\Program Files\Common Files\Services
        [01/10/2009|10:29] C:\Program Files\Common Files\Skype
        [02/11/2006|12:18] C:\Program Files\Common Files\SpeechEngines
        [13/09/2009|11:41] C:\Program Files\Common Files\System
        [15/02/2009|12:15] C:\Program Files\Common Files\Windows Live
        [02/02/2009|18:52] C:\Program Files\Common Files\WindowsLiveInstaller

        --------------------\\ Process

        ( 74 Processes )

        ... OK !

        --------------------\\ Recherche avec S_Lop

        Aucun fichier / dossier Lop trouvé !

        --------------------\\ Recherche de Fichiers / Dossiers Lop

        Aucun fichier / dossier Lop trouvé !

        --------------------\\ Verification du Registre

        [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

        ..... OK !

        --------------------\\ Verification du fichier Hosts

        Fichier Hosts PROPRE

        --------------------\\ Recherche de fichiers avec Catchme

        catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
        Rootkit scan 2009-12-01 13:44:19
        Windows 6.0.6002 Service Pack 2 NTFS
        scanning hidden processes ...
        scanning hidden files ...
        scan completed successfully
        hidden processes: 0
        hidden files: 0

        --------------------\\ Recherche d'autres infections

        C:\Users\Stef\AppData\Local\udcpx.bat
        C:\Users\Stef\AppData\Local\udcpx.dat
        C:\Users\Stef\AppData\Local\udcpx.exe
        C:\Users\Stef\AppData\Local\udcpx_nav.dat
        C:\Users\Stef\AppData\Local\udcpx_navps.dat
        [b]==> EGDACCESS <==/b

        [F:720][D:21]-> C:\Users\Stef\AppData\Local\Temp
        [F:162][D:1]-> C:\Users\Stef\AppData\Roaming\MICROS~1\Windows\Cookies
        [F:471][D:6]-> C:\Users\Stef\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
        [F:866][D:25]-> C:\$Recycle.Bin

        1 - "C:\Lop SD\LopR_1.txt" - 01/12/2009|13:47 - Option : [2]

        --------------------\\ Fin du rapport a 13:47:04
        [ UAC => 1 ]
      2. nina53400
        rapport

        -----------\\ ToolBar S&D 1.2.9 XP/Vista

        Microsoft® Windows Vista™ Édition Familiale Premium ( v6.0.6002 ) Service Pack 2
        X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU T2370 @ 1.73GHz )
        BIOS : Default System BIOS
        USER : Stef ( Not Administrator ! )
        BOOT : Normal boot
        Antivirus : avast! antivirus 4.8.1335 [VPS 090718-1] 4.8.1335 (Activated)
        C:\ (Local Disk) - NTFS - Total:116 Go (Free:57 Go)
        D:\ (Local Disk) - NTFS - Total:116 Go (Free:116 Go)
        E:\ (CD or DVD)
        F:\ (USB)

        "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
        Option : [2] ( 01/12/2009|14:23 )

        [ UAC => 0 ]

        -----------\\ Recherche de Fichiers / Dossiers ...

        -----------\\ [..\Internet Explorer\Main]

        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
        "Local Page"="C:\\Windows\\system32\\blank.htm"
        "Start Page"="https://www.msn.com/fr-fr"
        "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
        "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
        "Search Bar"="http://go.microsoft.com/fwlink/?linkid=54896"

        [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
        "Start Page"="https://www.msn.com/fr-fr/"
        "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
        "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
        "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
        "Local Page"="C:\\Windows\\System32\\blank.htm"
        "Search bar"="http://www.bing.com/spresults.aspx"

        --------------------\\ Recherche d'autres infections

        C:\Users\Stef\AppData\Local\udcpx.bat
        C:\Users\Stef\AppData\Local\udcpx.dat
        C:\Users\Stef\AppData\Local\udcpx.exe
        C:\Users\Stef\AppData\Local\udcpx_nav.dat
        C:\Users\Stef\AppData\Local\udcpx_navps.dat
        [b]==> EGDACCESS <==/b

        [ UAC => 1 ]

        1 - "C:\ToolBar SD\TB_1.txt" - 01/12/2009|14:24 - Option : [2]

        -----------\\ Fin du rapport a 14:24:16,84
    6. Utilisateur anonyme
      Essaie d'executer les programmes en mode administrateur et donne moi les résultats
      merci
      1. nina53400
        ok met peut tu me dire comment faire car jai un peut de mal
        merci
    7. Utilisateur anonyme
      bonjour,
      ton pc est bien infecté, tu suis ceci dans l'odre et poses les rapports au fur et à mesure :

      /!\ Utilisateur de Vista : Ne pas oublier de désactiver l’UAC juste le temps de désinfection de ton pc, il sera à réactiver plus tard :
      Tuto : https://www.commentcamarche.net/faq/8343-vista-desactiver-l-uac

      1° Télécharge Lop S&D (créé par eric 71) sur ton Bureau :
      https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2
      • Double-clique dessus pour lancer l'installation
      • Double-clique sur le raccourci Lop S&D présent sur ton Bureau
      /!\Utilisateur de Vista : Clique droit sur le logo de Lop S&D, « exécuter en tant qu’Administrateur »

      Note : Avec VISTA => clic droit et => Exécuter en tant qu'administrateur.
      • Sélectionne la langue souhaitée, puis choisis l'option 2 (suppression)
      • Patiente jusqu'à la fin du scan
      • Poste le rapport généré
      • Réactive ton antivirus

      Tutorial pour t’aider : http://www.malekal.com//tutorial_Lop_SD.php

      2° /!\ Déconnecte-toi et ferme toutes applications en cours /!\

      Télécharge de AD-Remover (Merci à Cyrildu17 / C_XX) sur ton Bureau.
      http://pagesperso-orange.fr/NosTools/C_XX/AD-R.exe

      Miroir:

      https://www.androidworld.fr/

      - Double-clique sur le programme d'installation, installe-le dans son emplacement par défaut (C:\Program files).
      - Double-clique sur l'icône Ad-remover située sur ton Bureau.
      /!\Utilisateur de Vista : Clique droit sur le logo de AD-Remover, « exécuter en tant qu’Administrateur »
      - Au menu principal, choisis l'option « L ».
      - Laisse travailler l’outil.
      - Poste le rapport qui apparaît à la fin.

      (Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)

      (CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

      Note :
      "Process.exe", une composante de l'outil, est détectée par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
      Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.

      Tuto : http://pagesperso-orange.fr/NosTools/tuto_adr_3.html

      3° Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
      https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cpVobGk5bHnxrhQ4yaoEUDJvOYNnEGyYjgqHZz5GqZLfutR3fMFPlsC3-CGIilfupPAguYATNyua3csodN_frdMK8sSzUpit10Yac-QJCOkMqJKkbdKcP6ySs8trWPgoNVIq4TGGWCe6o0txXQv-ZueJF9vZzw3RXsGwFYIqN2lvF2LPdQzS8mE1d5kWOVOz6EMzQuE5-lClSJM869uq3oc7-t7yg%3D%3D&attredirects=3
      ou ici : https://sites.google.com/site/toolbarsd/

      * Lance l'installation du programme en exécutant le fichier téléchargé.
      * Double-clique maintenant sur le raccourci de Toolbar-S&D.
      /!\Utilisateur de Vista : Clique droit sur le logo de Toolbar-S&D, « exécuter en tant qu’Administrateur »

      * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
      * Choisis maintenant l'option 2 (suppression)
      . Patiente jusqu'à la fin de la recherche.
      * Poste le rapport généré. (C:\TB.txt)

      Tuto :
      https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/

      à++++
      1. nina53400
        bonjour
        je ne peut pas aller dans panneau de configuration a chaque fois sa me met
        explorateur a cesser de fonctionner
        et sa coupe mon ordi une fraction de seconde et il se rallume
        jai essaier plusieurs fois je peut pas du tout y aller
      2. nina53400
        rapport
        .
        ======= RAPPORT D'AD-REMOVER 1.1.4.6_D | UNIQUEMENT XP/VISTA/7 =======
        .
        Mit à jour par C_XX le 30.11.2009 à 22:59
        Contact: AdRemover.contact@gmail.com
        Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
        .
        Lancé à: 14:08:02, 01/12/2009 | Mode Normal | Option: CLEAN
        Exécuté de: C:\Program Files\Ad-Remover\
        Système d'exploitation: Microsoft® Windows Vista™ Home Premium Service Pack 2 v6.0.6002
        Nom du PC: PC-DE-STEF | Utilisateur actuel: Stef
        .
        ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
        .
        C:\Users\Stef\AppData\Roaming\EoRezo
        C:\Users\Stef\AppData\Roaming\ItsLabel
        C:\Users\Stef\AppData\LocalLow\Dealio
        C:\Users\Stef\AppData\LocalLow\Kiwee Toolbar
        C:\Users\Stef\AppData\LocalLow\Search Settings ... [b]ERREUR SUPPRESSION !![/b]
        C:\Program Files\Ask Search Assistant
        C:\Program Files\AskTBar
        C:\Program Files\Dealio Toolbar
        C:\Program Files\Deenero
        C:\Program Files\EoRezo
        C:\Program Files\Mozilla Firefox\extensions\deenero_toolbar@aedgency.com
        C:\Program Files\Search Settings
        C:\Users\Stef\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Deenero
        C:\Windows\Installer\2e278fa.msi
        C:\Windows\Installer\2e27901.msi
        C:\Windows\Prefetch\SOFTWAREUPDATEHP.EXE-8805214E.pf
        C:\Users\Stef\AppData\Roaming\MICROS~1\Windows\Cookies\Low\stef@ask[2].txt

        (!) -- Fichiers temporaires supprimés.

        .
        HKCU\software\aedgency
        HKCU\software\appdatalow\software\Dealio
        HKCU\software\EoRezo
        HKCU\software\fcn
        HKCU\software\ItsLabel
        HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Search Settings
        HKCU\Software\Microsoft\Internet Explorer\ProtocolExecute\deenero
        HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{FE063DB9-4EC0-403e-8DD8-394C54984B2C}
        HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{9CB65206-89C4-402c-BA80-02D8C59F9B1D}
        HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
        HKLM\software\aedgency
        HKLM\software\classes\appid\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
        HKLM\software\classes\appid\EoRezoBHO.DLL
        HKLM\Software\Classes\CLSID\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
        HKLM\Software\Classes\CLSID\{66886C4D-B307-4ECA-A228-52CA9B9851A4}
        HKLM\Software\Classes\CLSID\{9CB65201-89C4-402c-BA80-02D8C59F9B1D}
        HKLM\Software\Classes\CLSID\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
        HKLM\Software\Classes\CLSID\{CB9D600D-9848-48F4-993F-D46ACB5D8F67}
        HKLM\Software\Classes\CLSID\{CD782347-A4E5-4874-AC58-0A22BB25C0DE}
        HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
        HKLM\Software\Classes\CLSID\{e83f3650-aa4d-4293-a5c9-1b4905c7f742}
        HKLM\Software\Classes\CLSID\{FE063DB1-4EC0-403e-8DD8-394C54984B2C}
        HKLM\Software\Classes\CLSID\{FE063DB9-4EC0-403e-8DD8-394C54984B2C}
        HKLM\Software\Classes\CLSID\{FE063DBB-4EC0-403e-8DD8-394C54984B2C}
        HKLM\software\classes\deenero
        HKLM\software\classes\Deenero.Deenero.1
        HKLM\software\classes\DeeneroSvr.DeeneroSvr.1
        HKLM\software\classes\DeeneroSvr.DeeneroSvr.1.1
        HKLM\software\classes\EoRezoBHO.EoBHO
        HKLM\software\classes\EoRezoBHO.EoBHO.1
        HKLM\Software\Classes\Interface\{050DA195-4ACE-4BA8-8A16-2948F6820E2F}
        HKLM\Software\Classes\Interface\{147BB7CE-BC0C-4DFD-AC48-94BD8BEB39DC}
        HKLM\Software\Classes\Interface\{49737D22-3267-4D0D-888B-B861D7BA29A5}
        HKLM\Software\Classes\Interface\{819DB72D-1C28-4387-9778-E2FF3DC86F74}
        HKLM\Software\Classes\Interface\{CB9D600D-9848-48F4-993F-D46ACB5D8F67}
        HKLM\Software\Classes\Interface\{CD782347-A4E5-4874-AC58-0A22BB25C0DE}
        HKLM\Software\Classes\Interface\{FFB59430-E0E7-4A20-B543-692BF7F7816D}
        HKLM\software\classes\SearchSettings.BHO
        HKLM\software\classes\SearchSettings.BHO.1
        HKLM\Software\Classes\TypeLib\{68BBECA4-3A7B-4963-A27D-AFB86AF1D629}
        HKLM\Software\Classes\TypeLib\{937936AF-28CA-4973-B8AE-F250406149A2}
        HKLM\Software\Classes\TypeLib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
        HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
        HKLM\software\Dealio
        HKLM\software\ItsLabel
        HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
        HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
        HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{66886C4D-B307-4ECA-A228-52CA9B9851A4}
        HKLM\Software\Microsoft\Internet Explorer\Toolbar\\{FE063DB9-4EC0-403e-8DD8-394C54984B2C}
        HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\AskSearchAsst.exe
        HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
        HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CB65201-89C4-402c-BA80-02D8C59F9B1D}
        HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
        HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
        HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FE063DB1-4EC0-403e-8DD8-394C54984B2C}
        HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SearchSettings
        HKLM\software\microsoft\windows\currentversion\uninstall\{0B1AAC97-8563-41D9-AE47-58E6A222F0E1}
        HKLM\software\microsoft\windows\currentversion\uninstall\{94C3BB3A-56A1-43DE-A242-8B41F46E97EF}
        HKLM\software\microsoft\windows\currentversion\uninstall\Ask.com Search Assistant
        HKLM\software\microsoft\windows\currentversion\uninstall\Deenero
        HKLM\software\microsoft\windows\currentversion\uninstall\eoEngine_is1
        HKLM\software\microsoft\windows\currentversion\uninstall\SoftwareUpdate_is1
        HKLM\software\Search Settings
        .
        ============== Scan additionnel ==============
        .
        .
        * Mozilla FireFox Version [Impossible d'obtenir la version] *
        .
        Nom du profil: ifj4cmq9.default (Stef)
        .
        (Stef, prefs.js) Browser.download.dir, C:\Users\Stef\Downloads
        (Stef, prefs.js) Browser.download.lastDir, C:\Users\Stef\Desktop
        (Stef, prefs.js) Browser.search.defaultenginename, Live Search
        (Stef, prefs.js) Browser.search.defaulturl, hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
        (Stef, prefs.js) Browser.search.selectedEngine, Ask
        (Stef, prefs.js) Browser.startup.homepage, hxxp://y.lo.st
        .
        (Stef, prefs.js) EFFACE - Browser.startup.homepage, hxxp://y.lo.st
        .
        .
        .
        * Internet Explorer Version 8.0.6001.18828 *
        .
        [HKEY_CURRENT_USER\..\Internet Explorer\Main]
        .
        Start Page: hxxp://fr.msn.com/
        Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
        Search Bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
        .
        [HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]
        .
        Start Page: hxxp://fr.msn.com/
        Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
        Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
        Search bar: hxxp://search.msn.com/spbasic.htm
        .
        [HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]
        .
        Tabs: res://ieframe.dll/tabswelcome.htm
        .
        ===================================
        .
        7133 Octet(s) - C:\Ad-Report-CLEAN[1].log
        .
        0 Fichier(s) - C:\Users\Stef\AppData\Local\Temp
        1 Fichier(s) - C:\Windows\Temp
        .
        18 Fichier(s) - C:\Program Files\Ad-Remover\BACKUP
        145 Fichier(s) - C:\Program Files\Ad-Remover\QUARANTINE
        .
        Fin à: 14:15:44 | 01/12/2009 - CLEAN[1]
        .
        ============== E.O.F ==============
        .
    8. Utilisateur anonyme
      ok, bon courage ;-)
      1. nina53400
        voici mon rapport
        Logfile of random's system information tool 1.06 (written by random/random)
        Run by Stef at 2009-11-30 21:12:56
        Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2
        System drive C: has 60 GB (50%) free of 119 GB
        Total RAM: 3061 MB (56% free)

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 21:15:13, on 30/11/2009
        Platform: Windows Vista SP2 (WinNT 6.00.1906)
        MSIE: Internet Explorer v8.00 (8.00.6001.18828)
        Boot mode: Normal

        Running processes:
        C:\Windows\system32\taskeng.exe
        C:\Windows\system32\Dwm.exe
        C:\Windows\System32\hkcmd.exe
        C:\Windows\System32\igfxpers.exe
        C:\Program Files\Search Settings\SearchSettings.exe
        C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
        C:\Program Files\iTunes\iTunesHelper.exe
        C:\Windows\system32\igfxsrvc.exe
        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        C:\Windows\ehome\ehtray.exe
        C:\Program Files\Windows Media Player\wmpnscfg.exe
        C:\Program Files\Skype\Phone\Skype.exe
        C:\Windows\ehome\ehmsas.exe
        C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\0\AlertModule.exe
        C:\Windows\system32\wbem\unsecapp.exe
        C:\Program Files\Windows Live\Contacts\wlcomm.exe
        C:\Program Files\Windows Defender\MSASCui.exe
        C:\Program Files\OrangeHSS\systray\systrayapp.exe
        C:\Windows\explorer.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
        C:\Program Files\Windows Live\Toolbar\wltuser.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe
        C:\Users\Stef\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6W8ZVUHL\RSIT[1].exe
        C:\Program Files\trend micro\Stef.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Windows\system32\SearchProtocolHost.exe
        C:\Windows\system32\SearchFilterHost.exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://y.lo.st
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tropal.net/
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://y.lo.st
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
        R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
        R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
        R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
        O1 - Hosts: ::1 localhost
        O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
        O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
        O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
        O2 - BHO: Shareware.Pro-FR Toolbar - {280b5d37-4a76-467a-b3d6-942fca90acde} - C:\Program Files\Shareware.Pro-FR\tbSha1.dll
        O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
        O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
        O2 - BHO: EoBHO - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
        O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
        O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
        O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
        O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
        O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
        O3 - Toolbar: Deenero - {66886C4D-B307-4ECA-A228-52CA9B9851A4} - C:\Program Files\Deenero\deenero_1,0,2,0.dll
        O3 - Toolbar: Shareware.Pro-FR Toolbar - {280b5d37-4a76-467a-b3d6-942fca90acde} - C:\Program Files\Shareware.Pro-FR\tbSha1.dll
        O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
        O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
        O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
        O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
        O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
        O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
        O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
        O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
        O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
        O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\OrangeHSS\SessionManager\SessionManager.exe
        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
        O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
        O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
        O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
        O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
        O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
        O4 - HKCU\..\Run: [Search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
        O4 - HKCU\..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
        O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
        O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
        O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
        O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files\Bonjour\ExplorerPlugin.dll
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
        O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
        O13 - Gopher Prefix:
        O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
        O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
        O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
        O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
        O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
        O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
        O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
        O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
        O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
        O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
        O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
        O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
        O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
        O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
        O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
        O23 - Service: Service Google Update (gupdate1c9f8c25692ce9b) (gupdate1c9f8c25692ce9b) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
        O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
        O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
        O23 - Service: Nero BackItUp Scheduler 4.0 - Unknown owner - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (file missing)
        O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
        O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
    9. Utilisateur anonyme
      bonjour,
      on va regarder ceci mais fais un effort d'écire comme il le faut, qu'on puisse déchiffrer ce que tu marques :-)

      •Télécharge random's system information tool (RSIT) et enregistre le sur ton bureau.
      http://images.malwareremoval.com/random/RSIT.exe

      Tuto : https://forum.pcastuces.com/randoms_system_information_tool_rsit-f31s31.htm
      Double clique sur RSIT.exe pour lancer l'outil.
      Clique sur ' continue ' à l'écran Disclaimer.
      Si l'outil HIjackThis (version à jour) n'est pas présent ou non détecté sur l'ordinateur, RSIT le téléchargera et tu devras accepter la licence.
      Une fois le scan fini, 2 rapports vont apparaître. Poste le contenu des 2 rapports séparément. Ils se trouvent sur c :
      (log.txt & info.txt)
      (CTRL+A Pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)
      1. nina53400
        desoler
        okje vais prendre plus le temps
        desoler je verrais plus tard jai une urgence mon fils malade
      2. nina53400 Auteur
        bonsoir desoler je n'est pas eut le temps de m'occuper de mon pc avant voici le premier rapport
        Logfile of random's system information tool 1.08 (written by random/random)
        Run by truc at 2010-12-06 18:40:09
        Microsoft Windows XP Édition familiale Service Pack 3
        System drive C: has 132 GB (87%) free of 153 GB
        Total RAM: 959 MB (24% free)

        Logfile of Trend Micro HijackThis v2.0.4
        Scan saved at 18:40:16, on 06/12/2010
        Platform: Windows XP SP3 (WinNT 5.01.2600)
        MSIE: Internet Explorer v8.00 (8.00.6001.18702)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\SOUNDMAN.EXE
        C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
        C:\Program Files\Alwil Software\Avast5\avastUI.exe
        C:\Program Files\InstallPedia\lnetworker.exe
        C:\Facemoi\facemoi.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\SFR\Kit\9props.exe
        C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
        C:\Program Files\Bonjour\mDNSResponder.exe
        C:\Program Files\OpenOffice.org 3\program\soffice.exe
        C:\Program Files\Java\jre6\bin\jqs.exe
        C:\Program Files\CDBurnerXP\NMSAccessU.exe
        C:\WINDOWS\system32\HPZipm12.exe
        C:\Program Files\OpenOffice.org 3\program\soffice.bin
        C:\Documents and Settings\All Users\Application Data\ResultBar\resultbar113.exe
        C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
        C:\WINDOWS\system32\svchost.exe
        C:\Program Files\ResultBar\resultbar.exe
        C:\WINDOWS\system32\wbem\wmiapsrv.exe
        C:\Program Files\Windows Live\Toolbar\wltuser.exe
        C:\Program Files\Internet Explorer\IEXPLORE.EXE
        C:\Program Files\Internet Explorer\IEXPLORE.EXE
        C:\Program Files\Mozilla Firefox\firefox.exe
        C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe
        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        C:\Program Files\Windows Live\Contacts\wlcomm.exe
        C:\Documents and Settings\truc\Mes documents\Téléchargements\RSIT(2).exe
        C:\Program Files\trend micro\truc.exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        R3 - URLSearchHook: MessengerPlusLive France TB Toolbar - {b9e20919-fa55-471f-989b-b107bf8de785} - C:\Program Files\MessengerPlusLive_France_TB\tbMes1.dll
        R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
        R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSoft.dll
        O2 - BHO: Aide à la navigation SFR - {0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - C:\Program Files\SFR\Kit\SFRNavErrorHelper.dll
        O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
        O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
        O2 - BHO: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSoft.dll
        O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
        O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
        O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
        O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
        O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
        O2 - BHO: OfferBox - {FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C} - C:\Program Files\OfferBox\OfferBoxBHO.dll
        O3 - Toolbar: MessengerPlusLive France TB Toolbar - {b9e20919-fa55-471f-989b-b107bf8de785} - C:\Program Files\MessengerPlusLive_France_TB\tbMes1.dll
        O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
        O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
        O3 - Toolbar: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSoft.dll
        O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
        O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
        O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe"
        O4 - HKLM\..\Run: [BEWINTERNET-FR-DMGP-V2SessionManager] "C:\Program Files\Orange\IEWInternet\SessionManager\SessionManager.exe"
        O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
        O4 - HKLM\..\Run: [ISW] "C:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /icon="hidden"
        O4 - HKLM\..\Run: [IP Network] C:\Program Files\InstallPedia\lnetworker.exe
        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
        O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
        O4 - HKLM\..\Run: [Facemoi] c:\Facemoi\facemoi.exe
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
        O4 - HKLM\..\RunOnce: [MessengerPlusLiveUninstall] "C:\DOCUME~1\truc\LOCALS~1\Temp\MsgPlusUninstall.exe" /Cleanup
        O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
        O4 - HKCU\..\Run: [Connexion SFR 9props.exe] "C:\Program Files\SFR\Kit\9props.exe" /trayicon
        O4 - HKCU\..\Run: [Facemoi] C:\Facemoi\facemoi.exe
        O4 - HKCU\..\Run: [RegistryBooster] "C:\Program Files\Uniblue\RegistryBooster\launcher.exe" delay 20000
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
        O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
        O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
        O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
        O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
        O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
        O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/...
        O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
        O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
        O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
        O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
        O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
        O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
        O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
        O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
        O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
        O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
        O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
        O23 - Service: service de mise a jour pour IP networker (IP netservices) - Unknown owner - C:\Program Files\InstallPedia\service.exe
        O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
        O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
        O23 - Service: NMSAccess - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
        O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
        O23 - Service: QueryExplorer Service - Unknown owner - C:\Documents and Settings\All Users\Application Data\QueryExplorer\queryexplorer117.exe
        O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
        O23 - Service: ResultBar Service - Unknown owner - C:\Documents and Settings\All Users\Application Data\ResultBar\resultbar113.exe
        O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
        O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
        O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
        O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe