IEXPLORE.EXE

Bonjour, encore un problème IEXPLORE.EXE qui se lance sans qu'aucun navigateur ne soit lancé, et qui a pour effet de m'afficher des pages de publicité, de lancer des musiques, et de couper les mon son WAVE.
L'IEPLORE.EXE se lance à peu près toutes les cinq minutes et à chaque lancement, le son WAVE se coupe (obligé de le remettre à chaque fois), retour bureau si je joue, des musiques ainsi que des fenêtres publicitaires parfois... :fou:

HELP ME PLEASE :cry:

Voici mon LOG HijackThis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:33:11, on 14/07/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Razer\DeathAdder\razerhid.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files\Cyberlink\Shared files\brs.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Application Updater\ApplicationUpdater.exe
C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
C:\Program Files\Razer\Lycosa\razerhid.exe
C:\Program Files\AskBarDis\bar\bin\AskService.exe
C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Razer\DeathAdder\razerofa.exe
C:\WINDOWS\system32\SNDVOL32.EXE
C:\Program Files\Razer\Lycosa\razertra.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Wanadoo\GestionnaireInternet.exe
C:\Program Files\Wanadoo\ComComp.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Wanadoo\Watch.exe
C:\Program Files\SecondLife\SecondLife.exe
C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\boulay\Mes documents\Téléchargements\HiJackThis(2).exe

R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\SearchSettings.dll
O1 - Hosts: 74.208.105.171 gs.apple.com
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\SearchSettings.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [Six Engine] "C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe" -r
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [DeathAdder] C:\Program Files\Razer\DeathAdder\razerhid.exe
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [MigrationAnalyzer] "C:\Program Files\FT_Migration\MigrationAnalyzer\MigrationAnalyzer.exe"
O4 - HKLM\..\Run: [SMSTray] C:\Program Files\Samsung\Samsung Media Studio 5\SMSTray.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [BDRegion] C:\Program Files\Cyberlink\Shared files\brs.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Lycosa] "C:\Program Files\Razer\Lycosa\razerhid.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\Program Files\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~2\INetRepl.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O18 - Protocol: skyline - {3A4F9195-65A8-11D5-85C1-0001023952C1} - C:\Program Files\Skyline\TerraExplorer\TerraExplorerX.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: ASKService - Unknown owner - C:\Program Files\AskBarDis\bar\bin\AskService.exe
O23 - Service: ASKUpgrade - Unknown owner - C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe

--
End of file - 9057 bytes

21 réponses

  1. Contributeur sécurité
    Hello à vous deux,

    Ça sent le TR/Clicker , y'a du boulot..
    1. Contributeur sécurité
      Un virus qui se loge dans le MBR ( master boot record ) du disque dur :)

      Dur à repérer mais les symptômes sont généralement identiques.
      1. Apparemment non, un grand merci a toi.
        D'ou venais le problème alors, j'ai pas très bien compris?
        1. Bootkit Remover version 1.0.0.1
          (c) 2009 eSage Lab
          www.esagelab.com

          \\.\C: -> \\.\PhysicalDrive0
          MD5: 6def5ffcbcdbdb4082f1015625e597bd

          Size Device Name MBR Status
          --------------------------------------------
          698 GB \\.\PhysicalDrive0 OK (DOS/Win32 Boot code found)

          Press any key to quit...
          1. Contributeur sécurité
            -+-+-+-+-> Bootkit Remover <-+-+-+-+-

            [x] Relance BTKR_Runbox mais sélectionne cette fois ci l'option n°3 puis [Entrée]

            [x] Confirme en appuyant sur " 1 " puis [Entrée]

            [x] Ton PC redémarrera. Au redémarrage, relance BTKR_Runbox avec l'option n°1 et copie/colle le rapport.
            1. Bootkit Remover version 1.0.0.1
              (c) 2009 eSage Lab
              www.esagelab.com

              \\.\C: -> \\.\PhysicalDrive0
              MD5: b19ee33a0168d5f0bb9afbe12e2bc035

              Size Device Name MBR Status
              --------------------------------------------
              698 GB \\.\PhysicalDrive0 Unknown boot code

              Unknown boot code has been found on some of your physical disks.
              To inspect the boot code manually, dump the master boot sector:
              remover.exe dump <device_name> [output_file]
              To disinfect the master boot sector, use the following command:
              remover.exe fix <device_name>

              Press any key to quit...
              1. Contributeur sécurité
                Bon.. je vais avancer nanard.

                -+-+-+-+-> Bootkit Remover <-+-+-+-+-

                [x] Télécharge Bootkit Remover et décompresse le sur ton bureau.

                [x] Télécharge BTKR_Runbox ( de jeanmimigab ) également sur ton bureau.

                Note : Tu dois avoir ces deux fichiers sur ton bureau -> Remover.exe et BTKR_Runbox.exe

                [x] Lance BTKR_Runbox, puis sélectionne l'option n°1. Valide en appuyant sur [Entrée]

                [x] Suis les instructions et copie/colle le rapport dans ta prochaine réponse.
                1. Rapport de ZHPFix v1.12.3120 par Nicolas Coolman, Update du 11/07/2010
                  Fichier d'export Registre : C:\ZHPExportRegistry-14-07-2010-12-36-17.txt
                  Run by boulay at 14/07/2010 12:36:17
                  Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
                  Contact : nicolascoolman@yahoo.fr

                  ========== Clé du Registre ==========
                  O69 - SBI: SearchScopes {0F36E18A-6296-4333-9D99-269AAFE3D111}_Chercher => Clé absente

                  ========== Logiciel ==========
                  O42 - Logiciel: Search Settings v1.2.3 - (.Spigot, Inc..) [HKLM] => Logiciel supprimé avec succès

                  ========== Autre ==========
                  Antivirus Version Dernière mise à jour Résultat => Format Non supporté
                  a-squared 5.0.0.31 2010.07.14 - => Format Non supporté
                  AhnLab-V3 2010.07.14.01 2010.07.14 - => Format Non supporté
                  AntiVir 8.2.4.10 2010.07.14 - => Format Non supporté
                  Antiy-AVL 2.0.3.7 2010.07.14 Client-IRC/Win32.mIRC.gen => Format Non supporté
                  Authentium 5.2.0.5 2010.07.14 - => Format Non supporté
                  Avast 4.8.1351.0 2010.07.14 - => Format Non supporté
                  Avast5 5.0.332.0 2010.07.14 Win32:Mirc-Z => Format Non supporté
                  AVG 9.0.0.836 2010.07.14 - => Format Non supporté
                  BitDefender 7.2 2010.07.14 - => Format Non supporté
                  CAT-QuickHeal 11.00 2010.07.14 - => Format Non supporté
                  ClamAV 0.96.0.3-git 2010.07.14 - => Format Non supporté
                  Comodo 5422 2010.07.14 - => Format Non supporté
                  DrWeb 5.0.2.03300 2010.07.14 - => Format Non supporté
                  eSafe 7.0.17.0 2010.07.11 - => Format Non supporté
                  eTrust-Vet 36.1.7706 2010.07.14 - => Format Non supporté
                  F-Prot 4.6.1.107 2010.07.14 - => Format Non supporté
                  F-Secure 9.0.15370.0 2010.07.14 - => Format Non supporté
                  Fortinet 4.1.143.0 2010.07.14 - => Format Non supporté
                  GData 21 2010.07.14 - => Format Non supporté
                  Ikarus T3.1.1.84.0 2010.07.14 - => Format Non supporté
                  Jiangmin 13.0.900 2010.07.14 - => Format Non supporté
                  Kaspersky 7.0.0.125 2010.07.14 not-a-virus:Client-IRC.Win32.mIRC.g => Format Non supporté
                  McAfee 5.400.0.1158 2010.07.14 - => Format Non supporté
                  McAfee-GW-Edition 2010.1 2010.07.14 - => Format Non supporté
                  Microsoft 1.5902 2010.07.14 - => Format Non supporté
                  NOD32 5277 2010.07.14 - => Format Non supporté
                  Norman 6.05.11 2010.07.14 - => Format Non supporté
                  nProtect 2010-07-14.01 2010.07.14 - => Format Non supporté
                  Panda 10.0.2.7 2010.07.14 - => Format Non supporté
                  PCTools 7.0.3.5 2010.07.14 - => Format Non supporté
                  Prevx 3.0 2010.07.14 - => Format Non supporté
                  Rising 22.56.02.04 2010.07.14 - => Format Non supporté
                  Sophos 4.55.0 2010.07.14 - => Format Non supporté
                  Sunbelt 6579 2010.07.14 - => Format Non supporté
                  SUPERAntiSpyware 4.40.0.1006 2010.07.14 - => Format Non supporté
                  Symantec 20101.1.1.7 2010.07.14 - => Format Non supporté
                  TheHacker 6.5.2.1.313 2010.07.13 - => Format Non supporté
                  TrendMicro 9.120.0.1004 2010.07.14 - => Format Non supporté
                  TrendMicro-HouseCall 9.120.0.1004 2010.07.14 - => Format Non supporté
                  VBA32 3.12.12.6 2010.07.13 - => Format Non supporté
                  ViRobot 2010.7.12.3932 2010.07.14 - => Format Non supporté
                  VirusBuster 5.0.27.0 2010.07.13 - => Format Non supporté
                  Information additionnelle => Format Non supporté
                  File size: 2810880 bytes => Format Non supporté
                  MD5...: 2f63a83968f9586fe4fb48134253619c => Format Non supporté
                  SHA1..: 8aa09b7a2647336feb5f8816b7a2f7ae3668e2e8 => Format Non supporté
                  SHA256: 4b7654f1275f9e411a2766780d699341155cd025f31d3fd3fe894374f0f9a612 => Format Non supporté
                  ssdeep: 49152:oijwLRbeHeRJMmhVZFoF4OAsnbR7XTXHE:oSYRbtUmh/20s9HE => Format Non supporté
                  PEiD..: - => Format Non supporté
                  PEInfo: PE Structure information => Format Non supporté
                  ( base data ) => Format Non supporté
                  entrypointaddress.: 0x1df5dd => Format Non supporté
                  timedatestamp.....: 0x48f84f57 (Fri Oct 17 08:39:51 2008) => Format Non supporté
                  machinetype.......: 0x14c (I386) => Format Non supporté
                  ( 4 sections ) => Format Non supporté
                  name viradd virsiz rawdsiz ntrpy md5 => Format Non supporté
                  .text 0x1000 0x1f2b6a 0x1f2c00 6.62 244aa5867527fd5be47c5fbb87c51874 => Format Non supporté
                  .rdata 0x1f4000 0x235a2 0x23600 6.22 902070d53f0dc7bedaf039a4bfbaf217 => Format Non supporté
                  .data 0x218000 0x9b6b0 0x6000 4.10 550fba6f3b3c6b24bf52c5b8c4336eab => Format Non supporté
                  .rsrc 0x2b4000 0x91df0 0x91e00 4.82 d4f6a03ed501f19d7cb64d11377758fd => Format Non supporté
                  ( 13 imports ) => Format Non supporté
                  > COMCTL32.dll: ImageList_Draw, ImageList_Destroy, ImageList_Create, ImageList_GetIconSize, ImageList_ReplaceIcon => Format Non supporté
                  > MPR.dll: WNetCloseEnum, WNetOpenEnumA, WNetEnumResourceA => Format Non supporté
                  > VERSION.dll: GetFileVersionInfoA, GetFileVersionInfoSizeA, VerQueryValueA => Format Non supporté
                  > WINMM.dll: sndPlaySoundA, mciSendStringA, mciGetDeviceIDA, timeEndPeriod, timeSetEvent, timeKillEvent, timeBeginPeriod, timeGetDevCaps, mixerClose, mixerSetControlDetails, mixerGetControlDetailsA, mixerGetLineControlsA, mixerGetLineInfoA, mixerOpen, mci => Format Non supporté
                  > WSOCK32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, - => Format Non supporté
                  > KERNEL32.dll: GetSystemDefaultLCID, GetWindowsDirectoryA, SetEndOfFile, GetModuleFileNameA, GlobalUnlock, GlobalLock, GlobalFree, GlobalAlloc, lstrcatW, lstrlenW, lstrcpyW, GetVersionExA, QueryPerformanceCounter, QueryPerformanceFrequency, CreateFileA, meA, CompareFileTime, GetFileTime, ReleaseMutex, GetTimeZoneInformation, LocalAlloc, LocalReAlloc, LocalFree, CopyFileA, MoveFileA, SetLastError, GetTempPathA, EnterCriticalSection, SetStdHandle, GetSystemTimeAsFileTime, CreateThread, TlsGetValue, TlsSetValue, ExitThread, RtlUnwind, HeapFree, HeapAlloc, TerminateProcess, GetModuleHandleA, ExitProcess, GetSystemDefaultLangID, CreateEventA, WaitForSingleObject, LoadLibraryA, GetProcAddress, FreeLibrary, GetCurrentThread, SetThreadPriority, SetEvent, Sleep, WideCharToMultiByte, CloseHandle, MultiByteToWideChar, GetTickCount, FindResourceA, LoadResource, LockResource, LeaveCriticalSection, HeapReAlloc, FileTimeToSystemTime, FileTimeToLocalFileTime, SetConsoleCtrlHandler, GetACP, GetOEMCP, GetCPInfo, RaiseExceptio => Format Non supporté
                  n, GetTimeFormatA, GetDateFormatA, GetStartupInfoA, GetCommandLineA, TlsFree, TlsAlloc, DeleteCriticalSection, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, IsBadWritePtr, UnhandledExceptionFilter, LCMapStringA, LCMapStringW, SetHandleCount, GetStdH => Format Non supporté
                  > USER32.dll: DdeNameService, DdeFreeDataHandle, DdeUnaccessData, DdeAccessData, DdeQueryStringA, DdeCreateDataHandle, DdeClientTransaction, DdeConnect, DdeCreateStringHandleA, DdeInitializeA, CallWindowProcA, GetMessageA, ClipCursor, SetKeyboardState, GemeControl, RegisterClassA, CopyImage, CreateIconIndirect, GetWindowRgn, SetWindowRgn, IsRectEmpty, OffsetRect, SetScrollInfo, SystemParametersInfoA, GetForegroundWindow, DdeUninitialize, IntersectRect, SetCapture, GetWindow, GetMessagePos, GetAsyncKeyState, GetWindowLongA, IsClipboardFormatAvailable, EmptyClipboard, SetClipboardData, OpenClipboard, EnumClipboardFormats, GetClipboardFormatNameA, CreateWindowExA, GetClipboardData, DestroyWindow, CloseClipboard, MessageBeep, GetTopWindow, IsZoomed, GetActiveWindow, IsWindow, IsCharAlphaA, IsCharAlphaNumericA, GetDesktopWindow, IsIconic, GetDialogBaseUnits, SetDlgItemInt, GetDlgItemInt, GetSystemMenu, CheckMenuItem, CreatePopupMenu, DestroyMenu, GetMenu, GetSubMenu, GetMenuItemCount, DeleteMenu, EnableMenuItem, A => Format Non supporté
                  ppendMenuA, DrawMenuBar, GetWindowTextA, FrameRect, GetParent, GetSysColor, DrawFocusRect, GetKeyState, LoadCursorA, SetCursor, PeekMessageA, MsgWaitForMultipleObjects, BeginPaint, EndPaint, DrawIconEx, DestroyIcon, LoadImageA, IsWindowVisible, FillRect, indowFromPoint, BringWindowToTop, SetWindowLongA, GetClassNameA, GetFocus, GetIconInfo, DrawTextA, EqualRect, WinHelpA, ShowWindow, MoveWindow, GetClientRect, SetTimer, KillTimer, IsWindowEnabled, DialogBoxParamA => Format Non supporté
                  > GDI32.dll: BitBlt, GetObjectA, CreateCompatibleDC, SetBrushOrgEx, SetStretchBltMode, StretchBlt, CreateCompatibleBitmap, GetDIBits, CreateDIBitmap, CreateDIBSection, CombineRgn, LineTo, MoveToEx, CreatePen, SelectClipRgn, CreateRectRgn, GetNearestColor, => Format Non supporté
                  > comdlg32.dll: ChooseColorA, CommDlgExtendedError, ChooseFontA => Format Non supporté
                  > ADVAPI32.dll: RegSetValueA, RegCreateKeyA, RegQueryValueA, RegOpenKeyA, RegDeleteKeyA, RegCreateKeyExA, RegSetValueExA, RegOpenKeyExA, RegEnumKeyA, RegCloseKey => Format Non supporté
                  > SHELL32.dll: SHBrowseForFolderA, SHGetDesktopFolder, SHGetMalloc, SHFileOperationA, SHGetSpecialFolderLocation, SHGetPathFromIDListA, DragQueryFileA, FindExecutableA, ShellExecuteExA, ShellExecuteA, SHAppBarMessage, ExtractIconExA, ExtractIconA, Shell_N => Format Non supporté
                  > ole32.dll: ReleaseStgMedium, RegisterDragDrop, CoTaskMemFree, CoGetInterfaceAndReleaseStream, RevokeDragDrop, CoCreateInstance, ProgIDFromCLSID, OleSetContainedObject, CoGetClassObject, CoLockObjectExternal, OleInitialize, CLSIDFromProgID, OleUninitiali => Format Non supporté
                  > OLEAUT32.dll: -, -, -, -, -, -, -, -, -, -, -, -, - => Format Non supporté
                  ( 0 exports ) => Format Non supporté
                  RDS...: NSRL Reference Data Set => Format Non supporté
                  - => Format Non supporté
                  pdfid.: - => Format Non supporté
                  trid..: Win32 Executable MS Visual C++ (generic) (75.0%) => Format Non supporté
                  Win32 Executable Generic (16.9%) => Format Non supporté
                  Generic Win/DOS Executable (3.9%) => Format Non supporté
                  DOS Executable Generic (3.9%) => Format Non supporté
                  Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) => Format Non supporté
                  sigcheck: => Format Non supporté
                  publisher....: mIRC Co. Ltd. => Format Non supporté
                  copyright....: Copyright (c) 1995-2008 mIRC Co. Ltd. => Format Non supporté
                  product......: mIRC => Format Non supporté
                  description..: mIRC => Format Non supporté
                  original name: mirc.exe => Format Non supporté
                  internal name: mIRC => Format Non supporté
                  file version.: 6.35 => Format Non supporté
                  comments.....: n/a => Format Non supporté
                  signers......: - => Format Non supporté
                  signing date.: - => Format Non supporté
                  verified.....: Unsigned => Format Non supporté
                  Malin [DefaultScope] - (Chercher Malin) - http://www.cherchermalin.com => Format Non supporté

                  ========== Récapitulatif ==========
                  1 : Clé du Registre
                  1 : Logiciel
                  99 : Autre

                  End of the scan
                  1. Antivirus Version Dernière mise à jour Résultat
                    a-squared 5.0.0.31 2010.07.14 -
                    AhnLab-V3 2010.07.14.01 2010.07.14 -
                    AntiVir 8.2.4.10 2010.07.14 -
                    Antiy-AVL 2.0.3.7 2010.07.14 Client-IRC/Win32.mIRC.gen
                    Authentium 5.2.0.5 2010.07.14 -
                    Avast 4.8.1351.0 2010.07.14 -
                    Avast5 5.0.332.0 2010.07.14 Win32:Mirc-Z
                    AVG 9.0.0.836 2010.07.14 -
                    BitDefender 7.2 2010.07.14 -
                    CAT-QuickHeal 11.00 2010.07.14 -
                    ClamAV 0.96.0.3-git 2010.07.14 -
                    Comodo 5422 2010.07.14 -
                    DrWeb 5.0.2.03300 2010.07.14 -
                    eSafe 7.0.17.0 2010.07.11 -
                    eTrust-Vet 36.1.7706 2010.07.14 -
                    F-Prot 4.6.1.107 2010.07.14 -
                    F-Secure 9.0.15370.0 2010.07.14 -
                    Fortinet 4.1.143.0 2010.07.14 -
                    GData 21 2010.07.14 -
                    Ikarus T3.1.1.84.0 2010.07.14 -
                    Jiangmin 13.0.900 2010.07.14 -
                    Kaspersky 7.0.0.125 2010.07.14 not-a-virus:Client-IRC.Win32.mIRC.g
                    McAfee 5.400.0.1158 2010.07.14 -
                    McAfee-GW-Edition 2010.1 2010.07.14 -
                    Microsoft 1.5902 2010.07.14 -
                    NOD32 5277 2010.07.14 -
                    Norman 6.05.11 2010.07.14 -
                    nProtect 2010-07-14.01 2010.07.14 -
                    Panda 10.0.2.7 2010.07.14 -
                    PCTools 7.0.3.5 2010.07.14 -
                    Prevx 3.0 2010.07.14 -
                    Rising 22.56.02.04 2010.07.14 -
                    Sophos 4.55.0 2010.07.14 -
                    Sunbelt 6579 2010.07.14 -
                    SUPERAntiSpyware 4.40.0.1006 2010.07.14 -
                    Symantec 20101.1.1.7 2010.07.14 -
                    TheHacker 6.5.2.1.313 2010.07.13 -
                    TrendMicro 9.120.0.1004 2010.07.14 -
                    TrendMicro-HouseCall 9.120.0.1004 2010.07.14 -
                    VBA32 3.12.12.6 2010.07.13 -
                    ViRobot 2010.7.12.3932 2010.07.14 -
                    VirusBuster 5.0.27.0 2010.07.13 -
                    Information additionnelle
                    File size: 2810880 bytes
                    MD5...: 2f63a83968f9586fe4fb48134253619c
                    SHA1..: 8aa09b7a2647336feb5f8816b7a2f7ae3668e2e8
                    SHA256: 4b7654f1275f9e411a2766780d699341155cd025f31d3fd3fe894374f0f9a612
                    ssdeep: 49152:oijwLRbeHeRJMmhVZFoF4OAsnbR7XTXHE:oSYRbtUmh/20s9HE
                    PEiD..: -
                    PEInfo: PE Structure information

                    ( base data )
                    entrypointaddress.: 0x1df5dd
                    timedatestamp.....: 0x48f84f57 (Fri Oct 17 08:39:51 2008)
                    machinetype.......: 0x14c (I386)

                    ( 4 sections )
                    name viradd virsiz rawdsiz ntrpy md5
                    .text 0x1000 0x1f2b6a 0x1f2c00 6.62 244aa5867527fd5be47c5fbb87c51874
                    .rdata 0x1f4000 0x235a2 0x23600 6.22 902070d53f0dc7bedaf039a4bfbaf217
                    .data 0x218000 0x9b6b0 0x6000 4.10 550fba6f3b3c6b24bf52c5b8c4336eab
                    .rsrc 0x2b4000 0x91df0 0x91e00 4.82 d4f6a03ed501f19d7cb64d11377758fd

                    ( 13 imports )
                    > COMCTL32.dll: ImageList_Draw, ImageList_Destroy, ImageList_Create, ImageList_GetIconSize, ImageList_ReplaceIcon
                    > MPR.dll: WNetCloseEnum, WNetOpenEnumA, WNetEnumResourceA
                    > VERSION.dll: GetFileVersionInfoA, GetFileVersionInfoSizeA, VerQueryValueA
                    > WINMM.dll: sndPlaySoundA, mciSendStringA, mciGetDeviceIDA, timeEndPeriod, timeSetEvent, timeKillEvent, timeBeginPeriod, timeGetDevCaps, mixerClose, mixerSetControlDetails, mixerGetControlDetailsA, mixerGetLineControlsA, mixerGetLineInfoA, mixerOpen, mciGetErrorStringA
                    > WSOCK32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
                    > KERNEL32.dll: GetSystemDefaultLCID, GetWindowsDirectoryA, SetEndOfFile, GetModuleFileNameA, GlobalUnlock, GlobalLock, GlobalFree, GlobalAlloc, lstrcatW, lstrlenW, lstrcpyW, GetVersionExA, QueryPerformanceCounter, QueryPerformanceFrequency, CreateFileA, EnumResourceNamesA, EnumResourceTypesA, LoadLibraryExA, GetDiskFreeSpaceA, GetCurrentProcess, QueryDosDeviceA, GetFileType, GetFileAttributesA, WinExec, FindClose, FindNextFileA, FindFirstFileA, WriteFile, GlobalSize, MulDiv, InterlockedIncrement, InterlockedDecrement, GetLastError, SetFilePointer, ReadFile, FlushFileBuffers, CreateDirectoryA, DeleteFileA, GetLocaleInfoA, GetDriveTypeA, GetLogicalDriveStringsA, SetFileAttributesA, WritePrivateProfileStringA, GetPrivateProfileStringA, RemoveDirectoryA, GetLocalTime, GetCurrentThreadId, UnmapViewOfFile, MapViewOfFile, OpenFileMappingA, CreateMutexA, SetErrorMode, FindCloseChangeNotification, FindNextChangeNotification, WaitForMultipleObjects, FindFirstChangeNotificationA, GetEnvironmentVariableA, GetShortPathNameA, CompareFileTime, GetFileTime, ReleaseMutex, GetTimeZoneInformation, LocalAlloc, LocalReAlloc, LocalFree, CopyFileA, MoveFileA, SetLastError, GetTempPathA, EnterCriticalSection, SetStdHandle, GetSystemTimeAsFileTime, CreateThread, TlsGetValue, TlsSetValue, ExitThread, RtlUnwind, HeapFree, HeapAlloc, TerminateProcess, GetModuleHandleA, ExitProcess, GetSystemDefaultLangID, CreateEventA, WaitForSingleObject, LoadLibraryA, GetProcAddress, FreeLibrary, GetCurrentThread, SetThreadPriority, SetEvent, Sleep, WideCharToMultiByte, CloseHandle, MultiByteToWideChar, GetTickCount, FindResourceA, LoadResource, LockResource, LeaveCriticalSection, HeapReAlloc, FileTimeToSystemTime, FileTimeToLocalFileTime, SetConsoleCtrlHandler, GetACP, GetOEMCP, GetCPInfo, RaiseException, GetTimeFormatA, GetDateFormatA, GetStartupInfoA, GetCommandLineA, TlsFree, TlsAlloc, DeleteCriticalSection, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, IsBadWritePtr, UnhandledExceptionFilter, LCMapStringA, LCMapStringW, SetHandleCount, GetStdHandle, InitializeCriticalSection, GetFullPathNameA, GetCurrentDirectoryA, SetCurrentDirectoryA, GetStringTypeA, GetStringTypeW, HeapSize, SetUnhandledExceptionFilter, SetEnvironmentVariableA, SetEnvironmentVariableW, VirtualProtect, GetSystemInfo, VirtualQuery, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCurrentProcessId, CompareStringA, CompareStringW, IsBadReadPtr, IsBadCodePtr, GetFileInformationByHandle, GetVolumeInformationA, PeekNamedPipe
                    > USER32.dll: DdeNameService, DdeFreeDataHandle, DdeUnaccessData, DdeAccessData, DdeQueryStringA, DdeCreateDataHandle, DdeClientTransaction, DdeConnect, DdeCreateStringHandleA, DdeInitializeA, CallWindowProcA, GetMessageA, ClipCursor, SetKeyboardState, GetKeyboardState, ToAscii, ScrollDC, GetSystemMetrics, MessageBoxA, FlashWindow, RedrawWindow, ShowScrollBar, CharLowerBuffA, CharLowerA, EndDeferWindowPos, DeferWindowPos, BeginDeferWindowPos, VkKeyScanA, GetKeyboardLayout, CopyAcceleratorTableA, MapVirtualKeyA, CallNextHookEx, GetCapture, CharUpperBuffA, DrawIcon, LoadIconA, GetWindowDC, DefMDIChildProcA, GetScrollInfo, IsMenu, GetMenuState, RemoveMenu, SetMenuItemInfoA, GetMenuItemInfoA, GetMenuItemID, TrackPopupMenu, RegisterWindowMessageA, SetWindowsHookExA, GetWindowThreadProcessId, LoadAcceleratorsA, DispatchMessageA, TranslateMessage, TranslateMDISysAccel, IsDialogMessageA, LoadMenuA, PostQuitMessage, DefFrameProcA, RegisterClassExA, UnhookWindowsHookEx, ValidateRect, InvertRect, DefWindowProcA, DrawFrameControl, RegisterClassA, CopyImage, CreateIconIndirect, GetWindowRgn, SetWindowRgn, IsRectEmpty, OffsetRect, SetScrollInfo, SystemParametersInfoA, GetForegroundWindow, DdeUninitialize, IntersectRect, SetCapture, GetWindow, GetMessagePos, GetAsyncKeyState, GetWindowLongA, IsClipboardFormatAvailable, EmptyClipboard, SetClipboardData, OpenClipboard, EnumClipboardFormats, GetClipboardFormatNameA, CreateWindowExA, GetClipboardData, DestroyWindow, CloseClipboard, MessageBeep, GetTopWindow, IsZoomed, GetActiveWindow, IsWindow, IsCharAlphaA, IsCharAlphaNumericA, GetDesktopWindow, IsIconic, GetDialogBaseUnits, SetDlgItemInt, GetDlgItemInt, GetSystemMenu, CheckMenuItem, CreatePopupMenu, DestroyMenu, GetMenu, GetSubMenu, GetMenuItemCount, DeleteMenu, EnableMenuItem, AppendMenuA, DrawMenuBar, GetWindowTextA, FrameRect, GetParent, GetSysColor, DrawFocusRect, GetKeyState, LoadCursorA, SetCursor, PeekMessageA, MsgWaitForMultipleObjects, BeginPaint, EndPaint, DrawIconEx, DestroyIcon, LoadImageA, IsWindowVisible, FillRect, DrawEdge, IsDlgButtonChecked, EndDialog, SetFocus, ReleaseCapture, GetWindowPlacement, SetWindowPlacement, GetWindowTextLengthA, CheckDlgButton, SetRect, SendMessageA, GetDlgCtrlID, GetCursorPos, ScreenToClient, SetWindowPos, UpdateWindow, PtInRect, SetWindowTextA, EnableWindow, DdeDisconnect, DdeFreeStringHandle, LoadStringA, IsChild, InsertMenuA, ModifyMenuA, GetNextDlgTabItem, ChildWindowFromPointEx, GetScrollPos, GetScrollRange, SetScrollPos, CreateMenu, SetMenu, FindWindowA, SetScrollRange, IsWindowUnicode, SetActiveWindow, GetMenuStringA, CreateDialogParamA, ReleaseDC, PostMessageA, MapWindowPoints, GetWindowRect, GetDlgItem, GetDC, SendDlgItemMessageA, InvalidateRect, CopyRect, FindWindowExA, SetForegroundWindow, ClientToScreen, ChildWindowFromPoint, WindowFromPoint, BringWindowToTop, SetWindowLongA, GetClassNameA, GetFocus, GetIconInfo, DrawTextA, EqualRect, WinHelpA, ShowWindow, MoveWindow, GetClientRect, SetTimer, KillTimer, IsWindowEnabled, DialogBoxParamA
                    > GDI32.dll: BitBlt, GetObjectA, CreateCompatibleDC, SetBrushOrgEx, SetStretchBltMode, StretchBlt, CreateCompatibleBitmap, GetDIBits, CreateDIBitmap, CreateDIBSection, CombineRgn, LineTo, MoveToEx, CreatePen, SelectClipRgn, CreateRectRgn, GetNearestColor, GetDeviceCaps, CreateFontIndirectA, PtInRegion, CreatePolygonRgn, DeleteDC, CreatePatternBrush, Rectangle, RoundRect, Ellipse, GetStockObject, SetROP2, SetBkMode, IntersectClipRect, GetClipRgn, GetBkColor, GetTextColor, GetCurrentObject, EnumFontFamiliesExA, GetTextCharset, ExtTextOutW, GetTextExtentPointW, GetTextExtentPointA, Polyline, ExcludeClipRect, GetObjectType, CreateBitmap, Polygon, FrameRgn, CreateRoundRectRgn, CreateRectRgnIndirect, RectInRegion, CreateFontA, CreateHatchBrush, GetTextMetricsA, ExtTextOutA, CreateSolidBrush, DeleteObject, SelectObject, SetTextColor, SetBkColor, GetPixel, ExtFloodFill, SetPixelV
                    > comdlg32.dll: ChooseColorA, CommDlgExtendedError, ChooseFontA
                    > ADVAPI32.dll: RegSetValueA, RegCreateKeyA, RegQueryValueA, RegOpenKeyA, RegDeleteKeyA, RegCreateKeyExA, RegSetValueExA, RegOpenKeyExA, RegEnumKeyA, RegCloseKey
                    > SHELL32.dll: SHBrowseForFolderA, SHGetDesktopFolder, SHGetMalloc, SHFileOperationA, SHGetSpecialFolderLocation, SHGetPathFromIDListA, DragQueryFileA, FindExecutableA, ShellExecuteExA, ShellExecuteA, SHAppBarMessage, ExtractIconExA, ExtractIconA, Shell_NotifyIconA
                    > ole32.dll: ReleaseStgMedium, RegisterDragDrop, CoTaskMemFree, CoGetInterfaceAndReleaseStream, RevokeDragDrop, CoCreateInstance, ProgIDFromCLSID, OleSetContainedObject, CoGetClassObject, CoLockObjectExternal, OleInitialize, CLSIDFromProgID, OleUninitialize
                    > OLEAUT32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -

                    ( 0 exports )
                    RDS...: NSRL Reference Data Set
                    -
                    pdfid.: -
                    trid..: Win32 Executable MS Visual C++ (generic) (75.0%)
                    Win32 Executable Generic (16.9%)
                    Generic Win/DOS Executable (3.9%)
                    DOS Executable Generic (3.9%)
                    Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
                    sigcheck:
                    publisher....: mIRC Co. Ltd.
                    copyright....: Copyright (c) 1995-2008 mIRC Co. Ltd.
                    product......: mIRC
                    description..: mIRC
                    original name: mirc.exe
                    internal name: mIRC
                    file version.: 6.35
                    comments.....: n/a
                    signers......: -
                    signing date.: -
                    verified.....: Unsigned
                    1. Je pense a un FP mais dans le doute analyse le fichier suivant.

                      * Rends toi sur le site https://www.virustotal.com/gui/
                      * Clique sur Parcourir, et navigue jusqu'au fichier suivant et valide : C:\Program Files\mIRC\mirc.exe
                      * Clique sur "Envoyer le fichier" : s'il a déjà été analysé, demande une nouvelle analyse.
                      * Fais un copier/coller du rapport sur le forum.

                      =========================================================

                      * Lance ZHPFix (soit via le raccourci sur ton Bureau, soit via ZHPDiag)
                      * Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)
                      * Copie/colle les lignes suivantes et place les dans ZHPFix :

                      ----------------------------------------------------------

                      O42 - Logiciel: Search Settings v1.2.3 - (.Spigot, Inc..) [HKLM]
                      O69 - SBI: SearchScopes {0F36E18A-6296-4333-9D99-269AAFE3D111}_Chercher Malin [DefaultScope] - (Chercher Malin) - http://www.cherchermalin.com

                      ----------------------------------------------------------

                      * Clique sur « Tous », puis sur « Nettoyer »
                      * Copie/colle la totalité du rapport dans ta prochaine réponse

                      1. Pour analyser ton pc .

                        * Télécharge [https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html ZHPDiag ( de Nicolas coolman ).
                        /!\Utilisateurs de Vista et Windows 7 : Clique droit sur le logo de ZHPDiag.exe, " exécuter en tant qu'Administrateur /!\
                        * Laisse toi guider lors de l'installation
                        * Il se lancera automatiquement à la fin de l'installation
                        * Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
                        * Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
                        * Héberge le rapport ZHPDiag.txt sur le site cijoint.fr, puis copie/colle le lien fournit dans ta prochaine réponse sur le forum
                        1. ======= RAPPORT D'AD-REMOVER 2.0.0.1,C | UNIQUEMENT XP/VISTA/7 =======

                          Mis à jour par C_XX le 23/06/10 à 19:20
                          Contact: AdRemover.contact@gmail.com
                          Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html

                          C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 11:55:12 le 14/07/2010, Mode normal

                          Microsoft Windows XP Édition familiale Service Pack 3 (X86)
                          boulay@BOULAY-3C0802CB ( )

                          ============== ACTION(S) ==============

                          Service: "Application Updater" Stoppé et supprimé
                          Service: "ASKService" Stoppé et supprimé
                          Service: "ASKUpgrade" Stoppé et supprimé

                          0,Fichier supprimé: C:\Program Files\Mozilla Firefox\extensions\searchsettings@spigot.com
                          0,Dossier supprimé: C:\Program Files\Application Updater
                          0,Dossier supprimé: C:\Program Files\AskBarDis
                          0,Dossier supprimé: C:\Documents and Settings\boulay\Application Data\Dealio
                          0,Dossier supprimé: C:\Documents and Settings\boulay\Application Data\Search Settings
                          0,Dossier supprimé: C:\Program Files\Search Settings
                          3,Fichier supprimé: C:\WINDOWS\Installer\f53c98.msi
                          3,Fichier supprimé: C:\WINDOWS\Installer\f53c9e.msi

                          (!) -- Fichiers temporaires supprimés.

                          1,Clé supprimée: HKLM\Software\Classes\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
                          1,Clé supprimée: HKLM\Software\Classes\CLSID\{08993A7C-E764-4172-9627-BFB5EA6897B2}
                          1,Clé supprimée: HKLM\Software\Classes\CLSID\{128A6C66-AC6A-4617-8268-AB7F47B7215E}
                          1,Clé supprimée: HKLM\Software\Classes\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
                          1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
                          1,Clé supprimée: HKLM\Software\Classes\CLSID\{571715D7-3395-4DF0-B43C-784836209E60}
                          1,Clé supprimée: HKLM\Software\Classes\CLSID\{622fd888-4e91-4d68-84d4-7262fd0811bf}
                          1,Clé supprimée: HKLM\Software\Classes\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
                          1,Clé supprimée: HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                          1,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                          1,Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                          1,Clé supprimée: HKLM\Software\Classes\Interface\{4634804A-F0B0-4A74-A550-FC0EEF8A4362}
                          1,Clé supprimée: HKLM\Software\Classes\Interface\{4C07EA4F-5F52-4222-B170-4CD9ED33BAEA}
                          1,Clé supprimée: HKLM\Software\Classes\Interface\{C44FEFF4-EF0C-4CF7-83D0-92B4266A32B9}
                          1,Clé supprimée: HKLM\Software\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
                          1,Clé supprimée: HKLM\Software\Classes\Interface\{F131923C-381D-4E4C-A472-4A17118FD742}
                          1,Clé supprimée: HKLM\Software\Classes\TypeLib\{4B1C1E16-6B34-430E-B074-5928ECA4C150}
                          1,Clé supprimée: HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
                          1,Clé supprimée: HKLM\Software\Classes\TypeLib\{D2E5FA06-DCC7-46F9-BEFF-BFD06F69B9B2}
                          0,Clé supprimée: HKLM\Software\Classes\AskIBar.PopSwatterBarButton
                          0,Clé supprimée: HKLM\Software\Classes\AskIBar.PopSwatterBarButton.1
                          0,Clé supprimée: HKLM\Software\Classes\AskIBar.PopSwatterSettingsControl
                          0,Clé supprimée: HKLM\Software\Classes\AskIBar.PopSwatterSettingsControl.1
                          0,Clé supprimée: HKLM\Software\Classes\AskToolBar.SettingsPlugin
                          0,Clé supprimée: HKLM\Software\Classes\AskToolBar.SettingsPlugin.1
                          0,Clé supprimée: HKLM\Software\Classes\SearchSettings.BHO
                          0,Clé supprimée: HKLM\Software\Classes\SearchSettings.BHO.1
                          0,Clé supprimée: HKLM\Software\Application Updater
                          0,Clé supprimée: HKLM\Software\AskBarDis
                          0,Clé supprimée: HKLM\Software\Dealio
                          0,Clé supprimée: HKLM\Software\Search Settings
                          0,Clé supprimée: HKLM\Software\AppDataLow\AskBarDis
                          0,Clé supprimée: HKCU\Software\AskBarDis
                          0,Clé supprimée: HKCU\Software\Dealio
                          0,Clé supprimée: HKCU\Software\Search Settings
                          0,Clé supprimée: HKCU\Software\AppDataLow\AskBarDis
                          0,Clé supprimée: HKU\.DEFAULT\Software\Search Settings
                          0,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C878CD69-85DB-426B-81A3-E71175AAEB91}
                          0,Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1

                          0,Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|SearchSettings
                          0,Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                          0,Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{3041D03E-FD4B-44E0-B742-2D9B88305F98}

                          ============== SCAN ADDITIONNEL ==============

                          ** Mozilla Firefox Version [3.6.6 (fr)] **

                          -- C:\Documents and Settings\boulay\Application Data\Mozilla\FireFox\Profiles\cm7p4w9p.default\Prefs.js --
                          browser.startup.homepage_override.mstone, rv:1.9.2.6

                          ========================================

                          ** Internet Explorer Version [6.0.2900.5512] **

                          [HKCU\Software\Microsoft\Internet Explorer\Main]
                          Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                          Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                          Do404Search: 0x01000000
                          Local Page: C:\WINDOWS\system32\blank.htm
                          Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
                          Show_ToolBar: yes
                          Start Page: hxxp://fr.msn.com/
                          Use Custom Search URL: 1
                          Use Search Asst: no

                          [HKLM\Software\Microsoft\Internet Explorer\Main]
                          Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
                          Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                          Delete_Temp_Files_On_Exit: yes
                          Enable Browser Extensions: yes
                          Local Page: C:\WINDOWS\system32\blank.htm
                          Search bar: hxxp://search.msn.com/spbasic.htm
                          1. Télécharge Ad-Remover sur ton bureau:
                            http://pagesperso-orange.fr/NosTools/C_XX/AD-R.exe
                            https://www.androidworld.fr/

                            /!\ Ferme toutes tes applications ouvertes. /!\

                            * Désactive la protection en temps réel de ton Antivirus et de tes Antispywares, qui peuvent gêner la procédure de recherche et de nettoyage de l'outil.

                            Double clique sur le fichier que tu viens de télécharger, à l'écran qui apparait, clique sur "Nettoyer".
                            Laisse travailler l'outil.
                            Poste le rapport qui s'affiche à l'écran quand l'analyse est terminée.
                            Si le rapport n'apparait pas il se trouve à cet emplacement :C:\Ad-Report-CLEAN[1].txt
                            1. RAPPORT SCAN AD-REMOVER :

                              ======= RAPPORT D'AD-REMOVER 2.0.0.1,C | UNIQUEMENT XP/VISTA/7 =======

                              Mis à jour par C_XX le 23/06/10 à 19:20
                              Contact: AdRemover.contact@gmail.com
                              Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html

                              C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 11:42:56 le 14/07/2010, Mode normal

                              Microsoft Windows XP Édition familiale Service Pack 3 (X86)
                              boulay@BOULAY-3C0802CB ( )

                              ============== RECHERCHE ==============

                              Service: "Application Updater" Présent
                              Service: "ASKService" Présent
                              Service: "ASKUpgrade" Présent

                              0,Fichier trouvé: C:\Program Files\Mozilla Firefox\extensions\searchsettings@spigot.com
                              0,Dossier trouvé: C:\Program Files\Application Updater
                              0,Dossier trouvé: C:\Program Files\AskBarDis
                              0,Dossier trouvé: C:\Documents and Settings\boulay\Application Data\Dealio
                              0,Dossier trouvé: C:\Documents and Settings\boulay\Application Data\Search Settings
                              0,Dossier trouvé: C:\Program Files\Search Settings
                              3,Fichier trouvé: C:\WINDOWS\Installer\f53c98.msi
                              3,Fichier trouvé: C:\WINDOWS\Installer\f53c9e.msi

                              1,Clé trouvée: HKLM\Software\Classes\CLSID\{0702a2b6-13aa-4090-9e01-bcdc85dd933f}
                              1,Clé trouvée: HKLM\Software\Classes\CLSID\{08993A7C-E764-4172-9627-BFB5EA6897B2}
                              1,Clé trouvée: HKLM\Software\Classes\CLSID\{128A6C66-AC6A-4617-8268-AB7F47B7215E}
                              1,Clé trouvée: HKLM\Software\Classes\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
                              1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3041d03e-fd4b-44e0-b742-2d9b88305f98}
                              1,Clé trouvée: HKLM\Software\Classes\CLSID\{571715D7-3395-4DF0-B43C-784836209E60}
                              1,Clé trouvée: HKLM\Software\Classes\CLSID\{622fd888-4e91-4d68-84d4-7262fd0811bf}
                              1,Clé trouvée: HKLM\Software\Classes\CLSID\{b0de3308-5d5a-470d-81b9-634fc078393b}
                              1,Clé trouvée: HKLM\Software\Classes\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                              1,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                              1,Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                              1,Clé trouvée: HKLM\Software\Classes\Interface\{4634804A-F0B0-4A74-A550-FC0EEF8A4362}
                              1,Clé trouvée: HKLM\Software\Classes\Interface\{4C07EA4F-5F52-4222-B170-4CD9ED33BAEA}
                              1,Clé trouvée: HKLM\Software\Classes\Interface\{C44FEFF4-EF0C-4CF7-83D0-92B4266A32B9}
                              1,Clé trouvée: HKLM\Software\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
                              1,Clé trouvée: HKLM\Software\Classes\Interface\{F131923C-381D-4E4C-A472-4A17118FD742}
                              1,Clé trouvée: HKLM\Software\Classes\TypeLib\{4B1C1E16-6B34-430E-B074-5928ECA4C150}
                              1,Clé trouvée: HKLM\Software\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
                              1,Clé trouvée: HKLM\Software\Classes\TypeLib\{D2E5FA06-DCC7-46F9-BEFF-BFD06F69B9B2}
                              0,Clé trouvée: HKLM\Software\Classes\AskIBar.PopSwatterBarButton
                              0,Clé trouvée: HKLM\Software\Classes\AskIBar.PopSwatterBarButton.1
                              0,Clé trouvée: HKLM\Software\Classes\AskIBar.PopSwatterSettingsControl
                              0,Clé trouvée: HKLM\Software\Classes\AskIBar.PopSwatterSettingsControl.1
                              0,Clé trouvée: HKLM\Software\Classes\AskToolBar.SettingsPlugin
                              0,Clé trouvée: HKLM\Software\Classes\AskToolBar.SettingsPlugin.1
                              0,Clé trouvée: HKLM\Software\Classes\SearchSettings.BHO
                              0,Clé trouvée: HKLM\Software\Classes\SearchSettings.BHO.1
                              0,Clé trouvée: HKLM\Software\Application Updater
                              0,Clé trouvée: HKLM\Software\AskBarDis
                              0,Clé trouvée: HKLM\Software\Dealio
                              0,Clé trouvée: HKLM\Software\Search Settings
                              0,Clé trouvée: HKLM\Software\AppDataLow\AskBarDis
                              0,Clé trouvée: HKCU\Software\AskBarDis
                              0,Clé trouvée: HKCU\Software\Dealio
                              0,Clé trouvée: HKCU\Software\Search Settings
                              0,Clé trouvée: HKCU\Software\AppDataLow\AskBarDis
                              0,Clé trouvée: HKU\.DEFAULT\Software\Search Settings
                              0,Clé trouvée: HKU\S-1-5-18\Software\Search Settings
                              0,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C878CD69-85DB-426B-81A3-E71175AAEB91}
                              0,Clé trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ask Toolbar_is1

                              0,Valeur trouvée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|SearchSettings
                              0,Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks|{E312764E-7706-43F1-8DAB-FCDD2B1E416D}
                              0,Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{3041D03E-FD4B-44E0-B742-2D9B88305F98}

                              ============== SCAN ADDITIONNEL ==============

                              ** Mozilla Firefox Version [3.6.6 (fr)] **

                              -- C:\Documents and Settings\boulay\Application Data\Mozilla\FireFox\Profiles\cm7p4w9p.default\Prefs.js --
                              browser.startup.homepage_override.mstone, rv:1.9.2.6

                              ========================================

                              ** Internet Explorer Version [6.0.2900.5512] **

                              [HKCU\Software\Microsoft\Internet Explorer\Main]
                              Do404Search: 0x01000000
                              Local Page: C:\WINDOWS\system32\blank.htm
                              Search bar: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                              Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                              Show_ToolBar: yes
                              Start Page: hxxp://www.google.com
                              Use Custom Search URL: 1
                              Use Search Asst: no

                              [HKLM\Software\Microsoft\Internet Explorer\Main]
                              Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
                              Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                              Delete_Temp_Files_On_Exit: yes
                              Enable Browser Extensions: yes
                              Local Page: C:\WINDOWS\system32\blank.htm
                              Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
                              Start Page: hxxp://www.google.com

                              [HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
                              Blank: res://mshtml.dll/blank.htm

                              ========================================

                              C:\Program Files\Ad-Remover\Quarantine: 2 Fichier(s)
                              C:\Program Files\Ad-Remover\Backup: 2 Fichier(s)

                              C:\Ad-Report-SCAN[1].txt - 14/07/2010 (561 Octet(s))

                              Fin à: 11:44:21, 14/07/2010

                              ============== E.O.F ==============
                              • 1
                              • 2