Gros probleme avec mon pc

gabyy -  
bonjour j'ai un probleme mon pc est infecté de pub mon antivirus y peut rien internet ce coupe et il es tres lent!!

voici le rapport :
http://www.cijoint.fr/cjlink.php?file=cj201005/cijXcX54Ay.txt

merci d'avance!

13 réponses

  1. gen-hackman
    Run by BUREAU at 04/05/2010 09:34:15
    0
    3. gabyy
      http://www.cijoint.fr/cjlink.php?file=cj201005/cijCfplONw.txt
      0
      2. gen-hackman
        ▶ Télécharge ZHPDiag (de Nicolas Coolman)

        ou :ZHPDiag

        ▶ Enregistre le sur ton Bureau.

        Une fois le téléchargement achevé,

        ▶ lance ZHPDiag.exe et clique sur Unzip dans la fenêtre qui s'ouvre.

        ▶ Clique sur le tournevis puis sur Tous pour cocher toutes les cases des options.

        ▶ Clique sur la loupe pour lancer l'analyse.

        A la fin de l'analyse,

        ▶ clique sur l'appareil photo et enregistre le rapport sur ton Bureau.

        Pour me le transmettre clique sur ce lien :

        http://www.cijoint.fr/

        ▶ Clique sur Parcourir et cherche le fichier C:\Documents and settings\le_nom_de_ta_session\.ZHPDiag.txt

        ▶ Clique sur Ouvrir.

        ▶ Clique sur "Cliquez ici pour déposer le fichier".

        Un lien de cette forme :

        http://www.cijoint.fr/cjlink.php?file=cj200905/cib7SU.txt

        est ajouté dans la page.

        ▶ Copie ce lien dans ta réponse.
        0
        1. gabyy
          apres nettoyage de ccleaner
          le nouveau rapport

          .
          ======= RAPPORT D'AD-REMOVER 2.0.0.0,D | UNIQUEMENT XP/VISTA/7 =======
          .
          Mis à jour par C_XX le 01/05/10 à 19:50
          Contact: AdRemover.contact@gmail.com
          Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
          .
          Lancé à: 16:11:27 le 06/05/2010 | Mode normal | Option: CLEAN
          Exécuté de: C:\Ad-Remover\ADR.exe
          SE: Microsoft® Windows XP(TM) Service Pack 3 - X86
          Nom du PC: PROPRIET-696611
          Utilisateur actuel: BUREAU
          .
          ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
          .
          .

          (!) -- Fichiers temporaires supprimés.
          .
          .
          (Orpheline) BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} (CLSID manquant)
          .
          ============== SCAN ADDITIONNEL ==============
          .
          * Mozilla FireFox Version 3.5.9 (fr) *
          .
          C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.download.lastDir: C:\\Documents and Settings\\BUREAU\\Bureau
          C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.search.selectedEngine: Google
          C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.1.9
          .
          .
          * Internet Explorer Version 8.0.6001.18702 *
          .
          [HKCU\Software\Microsoft\Internet Explorer\Main]
          .
          AutoHide: yes
          Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
          Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
          Do404Search: 0x01000000
          Enable Browser Extensions: yes
          Local Page: C:\WINDOWS\system32\blank.htm
          Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
          Show_ToolBar: yes
          Start Page: hxxp://fr.msn.com/
          .
          [HKLM\Software\Microsoft\Internet Explorer\Main]
          .
          Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
          Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
          Delete_Temp_Files_On_Exit: yes
          Local Page: C:\WINDOWS\system32\blank.htm
          Search bar: hxxp://search.msn.com/spbasic.htm
          Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
          Start Page: hxxp://fr.msn.com/
          .
          [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
          .
          Tabs: res://ieframe.dll/tabswelcome.htm
          Blank: res://mshtml.dll/blank.htm
          .
          ========================================
          .
          C:\Ad-Remover\Quarantine: 7 Fichier(s)
          C:\Ad-Remover\Backup: 14 Fichier(s)
          .
          C:\Ad-Report-CLEAN[1].txt - 8605 Octet(s)
          C:\Ad-Report-CLEAN[2].txt - 2323 Octet(s)
          C:\Ad-Report-SCAN[1].txt - 7725 Octet(s)
          .
          Fin à: 16:13:05, 06/05/2010
          .
          ============== E.O.F - CLEAN[2] ==============
          0
          1. gabyy
            pardon!

            .
            ======= RAPPORT D'AD-REMOVER 2.0.0.0,D | UNIQUEMENT XP/VISTA/7 =======
            .
            Mis à jour par C_XX le 01/05/10 à 19:50
            Contact: AdRemover.contact@gmail.com
            Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
            .
            Lancé à: 15:51:23 le 06/05/2010 | Mode normal | Option: CLEAN
            Exécuté de: C:\Ad-Remover\ADR.exe
            SE: Microsoft® Windows XP(TM) Service Pack 3 - X86
            Nom du PC: PROPRIET-696611
            Utilisateur actuel: BUREAU
            .
            ============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
            .
            .
            C:\Documents and Settings\BUREAU\Application Data\Dealio
            C:\Documents and Settings\BUREAU\Application Data\EoRezo
            C:\Documents and Settings\BUREAU\Application Data\Search Settings
            C:\Documents and Settings\BUREAU\Local Settings\Application Data\EoRezo
            C:\Program Files\Application Updater
            C:\Program Files\Dealio Toolbar
            C:\Program Files\EoRezo
            C:\Program Files\Mozilla FireFox\extensions\dealio@mybrowserbar.com
            C:\Program Files\Search Guard PlusU

            (!) -- Fichiers temporaires supprimés.
            .
            HKCU\Software\Dealio
            HKCU\Software\EoRezo
            HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0EC78F3C-12FC-4FCA-8FA3-1DFD7C463D98}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
            HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
            HKCU\Software\Search Settings
            HKLM\Software\Application Updater
            HKLM\Software\Classes\AppID\{AFBB7970-789A-4264-BA70-E8127DECE400}
            HKLM\Software\Classes\AppID\EoEngineBHO.DLL
            HKLM\Software\Classes\CLSID\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
            HKLM\Software\Classes\CLSID\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
            HKLM\Software\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
            HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
            HKLM\Software\Classes\EoEngineBHO.EOBHO
            HKLM\Software\Classes\EoEngineBHO.EOBHO.1
            HKLM\Software\Classes\Installer\Products\96DC878CBD58B624183A7E1157AABE19
            HKLM\Software\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
            HKLM\Software\Classes\Interface\{DF76E9B7-35EC-46FC-AF56-5B79DED9D64F}
            HKLM\Software\Classes\SearchSettings.BHO
            HKLM\Software\Classes\SearchSettings.BHO.1
            HKLM\Software\Classes\TypeLib\{18AF7201-4F14-4BCF-93FE-45617CF259FF}
            HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
            HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
            HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook
            HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook.1
            HKLM\Software\Dealio
            HKLM\Software\EoRezo
            HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B49C433C-502B-4946-B8D4-1484BEA46B69}
            HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
            HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
            HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
            HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\96DC878CBD58B624183A7E1157AABE19
            HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C878CD69-85DB-426B-81A3-E71175AAEB91}
            HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\EoRezo_is1
            HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
            HKLM\Software\Search Settings
            HKU\.DEFAULT\Software\Dealio
            HKU\.DEFAULT\Software\FBSearch
            HKU\.DEFAULT\Software\Search Settings
            HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
            HKLM\Software\Microsoft\Internet Explorer\Toolbar|{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
            HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Eorezo
            HKLM\Software\Microsoft\Windows\CurrentVersion\Run|SearchSettings
            HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Softwarehelper
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Application Updater\ApplicationUpdater.exe
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\chrome.manifest
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\chrome\locale\EN-US\widgitoolbarplugin.properties
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\components\dealioToolbarFF.dll
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\install.rdf
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\FF\chrome\locale\en-US\searchsettingsplugin.dtd
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\FF\components\SearchSettingsFF.dll
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\FF\install.rdf
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\SearchSettings.dll
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\SearchSettings.exe
            HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\SearchSettingsRes409.dll
            .
            (Orpheline) HKLM,Run - InCD - C:\Program Files\Nero\Nero 7\InCD\InCD.exe (Fichier manquant)
            (Orpheline) HKLM,Run - WinVNC - C:\Program Files\TightVNC\WinVNC.exe (Fichier manquant)
            (Orpheline) HKLM,Run - Adobe ARM - C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe (Fichier manquant)
            (Orpheline) BHO: (Spybot-S&D IE Protection) -{53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll (Fichier manquant)
            (Orpheline) BHO: () -{9059D032-77E0-475A-89DA-226323E2FA5A} - c:\windows\system32\ntajztq.dll (Fichier manquant)
            (Orpheline) HKLM,Uninstall - ie7 - C:\WINDOWS\ie7\spuninst\spuninst.exe (Fichier manquant)
            .
            ============== SCAN ADDITIONNEL ==============
            .
            * Mozilla FireFox Version 3.5.9 (fr) *
            .
            C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.download.lastDir: C:\\Documents and Settings\\BUREAU\\Bureau
            C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.search.defaultenginename: Fast Browser Search
            C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.search.selectedEngine: Google
            C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.startup.homepage: hxxp://y.lo.st
            C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.1.9
            .
            EFFACÉ: C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - user_pref("browser.search.defaultenginename", "Fast Browser Search");
            EFFACÉ: C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - user_pref("browser.search.order.1", "Fast Browser Search");
            EFFACÉ: C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - user_pref("browser.startup.homepage", "hxxp://y.lo.st");
            .
            * Internet Explorer Version 8.0.6001.18702 *
            .
            [HKCU\Software\Microsoft\Internet Explorer\Main]
            .
            AutoHide: yes
            Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
            Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
            Do404Search: 0x01000000
            Enable Browser Extensions: yes
            Local Page: C:\WINDOWS\system32\blank.htm
            Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
            Show_ToolBar: yes
            Start Page: hxxp://fr.msn.com/
            .
            [HKLM\Software\Microsoft\Internet Explorer\Main]
            .
            Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
            Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
            Delete_Temp_Files_On_Exit: yes
            Local Page: C:\WINDOWS\system32\blank.htm
            Search bar: hxxp://search.msn.com/spbasic.htm
            Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
            Start Page: hxxp://fr.msn.com/
            .
            [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
            .
            Tabs: res://ieframe.dll/tabswelcome.htm
            Blank: res://mshtml.dll/blank.htm
            .
            ========================================
            .
            C:\Ad-Remover\Quarantine: 7 Fichier(s)
            C:\Ad-Remover\Backup: 14 Fichier(s)
            .
            C:\Ad-Report-CLEAN[1].txt - 8437 Octet(s)
            C:\Ad-Report-SCAN[1].txt - 7725 Octet(s)
            .
            Fin à: 15:54:45, 06/05/2010
            .
            ============== E.O.F - CLEAN[1] ==============
            0
            1. gen-hackman
              bonjour tu n'as pas lu les directives
              0
              1. gabyy
                .
                ======= RAPPORT D'AD-REMOVER 2.0.0.0,D | UNIQUEMENT XP/VISTA/7 =======
                .
                Mis à jour par C_XX le 01/05/10 à 19:50
                Contact: AdRemover.contact@gmail.com
                Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
                .
                Lancé à: 11:27:58 le 06/05/2010 | Mode normal | Option: SCAN
                Exécuté de: C:\Ad-Remover\ADR.exe
                SE: Microsoft® Windows XP(TM) Service Pack 3 - X86
                Nom du PC: PROPRIET-696611
                Utilisateur actuel: BUREAU
                .
                ============== ÉLÉMENT(S) TROUVÉ(S) ==============
                .
                .
                C:\Documents and Settings\BUREAU\Application Data\Dealio
                C:\Documents and Settings\BUREAU\Application Data\EoRezo
                C:\Documents and Settings\BUREAU\Application Data\Search Settings
                C:\Documents and Settings\BUREAU\Local Settings\Application Data\EoRezo
                C:\Program Files\Application Updater
                C:\Program Files\Dealio Toolbar
                C:\Program Files\EoRezo
                C:\Program Files\Mozilla FireFox\extensions\dealio@mybrowserbar.com
                C:\Program Files\Mozilla Firefox\extensions\searchsettings@spigot.com
                C:\Program Files\Search Guard PlusU
                .
                HKCU\Software\Dealio
                HKCU\Software\EoRezo
                HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0EC78F3C-12FC-4FCA-8FA3-1DFD7C463D98}
                HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
                HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
                HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                HKCU\Software\Search Settings
                HKLM\Software\Application Updater
                HKLM\Software\Classes\AppID\{AFBB7970-789A-4264-BA70-E8127DECE400}
                HKLM\Software\Classes\AppID\EoEngineBHO.DLL
                HKLM\Software\Classes\CLSID\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                HKLM\Software\Classes\CLSID\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
                HKLM\Software\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
                HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                HKLM\Software\Classes\EoEngineBHO.EOBHO
                HKLM\Software\Classes\EoEngineBHO.EOBHO.1
                HKLM\Software\Classes\Installer\Products\96DC878CBD58B624183A7E1157AABE19
                HKLM\Software\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
                HKLM\Software\Classes\Interface\{DF76E9B7-35EC-46FC-AF56-5B79DED9D64F}
                HKLM\Software\Classes\SearchSettings.BHO
                HKLM\Software\Classes\SearchSettings.BHO.1
                HKLM\Software\Classes\TypeLib\{18AF7201-4F14-4BCF-93FE-45617CF259FF}
                HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
                HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
                HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook
                HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook.1
                HKLM\Software\Dealio
                HKLM\Software\EoRezo
                HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B49C433C-502B-4946-B8D4-1484BEA46B69}
                HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8}
                HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\96DC878CBD58B624183A7E1157AABE19
                HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C878CD69-85DB-426B-81A3-E71175AAEB91}
                HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\EoRezo_is1
                HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
                HKLM\Software\Search Settings
                HKU\.DEFAULT\Software\Dealio
                HKU\.DEFAULT\Software\FBSearch
                HKU\.DEFAULT\Software\Search Settings
                HKU\S-1-5-18\Software\Dealio
                HKU\S-1-5-18\Software\FBSearch
                HKU\S-1-5-18\Software\Search Settings
                HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                HKLM\Software\Microsoft\Internet Explorer\Toolbar|{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
                HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Eorezo
                HKLM\Software\Microsoft\Windows\CurrentVersion\Run|SearchSettings
                HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Softwarehelper
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Application Updater\ApplicationUpdater.exe
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\chrome.manifest
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\chrome\locale\EN-US\widgitoolbarplugin.properties
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\components\dealioToolbarFF.dll
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\install.rdf
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\FF\chrome\locale\en-US\searchsettingsplugin.dtd
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\FF\components\SearchSettingsFF.dll
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\FF\install.rdf
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\SearchSettings.dll
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\SearchSettings.exe
                HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Search Settings\SearchSettingsRes409.dll
                .
                .
                ============== SCAN ADDITIONNEL ==============
                .
                * Mozilla FireFox Version 3.5.9 (fr) *
                .
                C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.download.lastDir: C:\\Documents and Settings\\BUREAU\\Bureau
                C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.search.defaultenginename: Fast Browser Search
                C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.search.selectedEngine: Google
                C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.startup.homepage: hxxp://y.lo.st
                C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.1.9
                .
                TROUVÉ: C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - user_pref("browser.search.defaultenginename", "Fast Browser Search");
                TROUVÉ: C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - user_pref("browser.search.order.1", "Fast Browser Search");
                TROUVÉ: C:\Documents and Settings\BUREAU\..\nm4vu7yz.default\prefs.js - user_pref("browser.startup.homepage", "hxxp://y.lo.st");
                .
                * Internet Explorer Version 8.0.6001.18702 *
                .
                [HKCU\Software\Microsoft\Internet Explorer\Main]
                .
                AutoHide: yes
                Do404Search: 0x01000000
                Enable Browser Extensions: yes
                Local Page: C:\WINDOWS\system32\blank.htm
                Show_ToolBar: yes
                Start Page: hxxp://orange.fr/
                .
                [HKLM\Software\Microsoft\Internet Explorer\Main]
                .
                Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=69157
                Default_Search_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
                Delete_Temp_Files_On_Exit: yes
                Local Page: C:\WINDOWS\system32\blank.htm
                Search Page: hxxp://go.microsoft.com/fwlink/?LinkId=54896
                Start Page: hxxp://go.microsoft.com/fwlink/?LinkId=69157
                .
                [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
                .
                Tabs: hxxp://y.lo.st
                Blank: res://mshtml.dll/blank.htm
                .
                ========================================
                .
                C:\Ad-Remover\Quarantine: 0 Fichier(s)
                C:\Ad-Remover\Backup: 1 Fichier(s)
                .
                C:\Ad-Report-SCAN[1].txt - 7601 Octet(s)
                .
                Fin à: 11:30:58, 06/05/2010
                .
                ============== E.O.F - SCAN[1] ==============
                0
                1. gabyy
                  voila le rapport!
                  http://www.cijoint.fr/cjlink.php?file=cj201005/cijBIZcx5Z.txt
                  0
                  1. gen-hackman
                    ton premier rapport me montre une infection que l on va traiter avec ad-remover !:)
                    0
                    1. gabyy
                      mon 1er rapport ne convien pas ??
                      j'ai pas l'ordi devant moi je fait ta manipulation quand je rentrerais!
                      0
                      1. gen-hackman
                        ▶ Télécharge Ad-remover ( de C_XX ) sur ton bureau :

                        ▶ Déconnecte toi et ferme toutes applications en cours !

                        ▶ Double clique sur "Ad-R.exe" pour lancer l'installation et laisse les paramètres d'installation par défaut .

                        ▶ Double-clique sur le raccourci Ad-remover qui est sur ton bureau pour lancer l'outil .

                        ▶ Au menu principal choisis "option clean " et tape sur [entrée] .

                        ▶ Laisse travailler l'outil et ne touche à rien ...

                        ▶ Poste le rapport qui apparait à la fin , sur le forum ...

                        ( Le rapport est sauvegardé aussi sous C:\Ad-report.log )
                        ( CTRL+A Pour tout sélectionner , CTRL+C pour copier et CTRL+V pour coller )

                        ▶ Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
                        Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
                        Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.
                        0