Total commander ne s'ouvre plus, virus?

Bonjour,

Depuis ce week-end, je ne peux plus ouvrir total commander, j'ai essayé de le désinstaller et de le réinstaller, même problème, le programme se lance bien dans les processus puis disparaît. J'ai donc essayé d'installer free commander, ibidem, j'ai donc pensé à un virus.
J'ai bitdefender, j'ai scanné de façon approfondie, j'avais deux virus qui ont été supprimés, mais je ne peux toujours pas ouvrir total commander ou free commander. J'ai ensuite essayé avec "anti-malware", sans succès.

En dehors de ce problème, tout fonctionne, bien qu'aucun virus ne soit à présent détecté, pensez-vous que mon problème soit lié à un virus?

Merci d'avance

41 réponses

Résumé de la discussion

Le problème porte sur l’impossibilité d’ouvrir Total Commander et Free Commander, malgré des tentatives de réinstallation et des analyses antivirus répétées. Des outils antivirus ont détecté des menaces comme Trojan.Downloader, PUP.OfferBox et d’autres fichiers malveillants, entraînant des quarantaines et suppressions partielles sans résolution du lancement des applications. Plusieurs réponses décrivent des étapes de nettoyage en profondeur, notamment l’utilisation de Malwarebytes, CCleaner pour les barres d’outils Babylon, Ad-Remover et des scripts OTL, afin de supprimer les composants Conduit, Babylon et autres toolbar malveillantes. En fin de fil, Ad-Remover est utilisé avec un rapport et la suppression de dossiers et clés de registre, confirmant une approche de nettoyage en profondeur sans garantie immédiate de résolution.

Bobot (l’IA à votre service)
  1. mets malwarebytes à jour et refais un scan complet supprime la sélection , et poste le rapport
    G3?-?@¢??@?......Concepteur de List_Kill'em...Pre_Scan....MBR_Repair....
    1. Oui oui, il fonctionnait parfaitement, du jour au lendemain il n'a plus fonctionné.

      Pour le moment, je l'ai remplacé par "explorer xp" mais il n'est pas aussi bien.
      1. salut

        desolé pour le temps , ma box a sauté ^^

        il est bien compatible pour cet OS ce logiciel ? il fonctionnait sur ce meme pc avant ,
        1. Bonjour,

          Alors, quand je lance le programme, il apparaît bien dans les processus, mais il ne se passe rien, le programme ne se lance jamais et disparaît des processus en quelques secondes.
          1. Je ne peux toujours pas ouvrir total commander ou free commander,

            explique-moi exactement ce qu'il se passe quant tu les ouvre pas-à-pas
            1. Bonjour,

              Je ne peux toujours pas ouvrir total commander ou free commander, je ne pense pas pouvoir ouvrir un programme alternatif au gestionnaire de fichiers de Windows du tout.

              Je me demande si ce problème pourrait venir d'une mise à jour automatique qui aurait été faite la nuit, j'étais persuadée que j'avais un virus, je n'ai donc pas pensé à restaurer mon système, est-ce une bonne idée?
              1. on a gagné 3 Go sur ton disque dur ^^

                quels soucis persistent ?
                1. Ok merci!

                  All processes killed
                  ========== PROCESSES ==========
                  No active process named explorer.exe was found!
                  No active process named iexplore.exe was found!
                  No active process named firefox.exe was found!
                  No active process named msnmsgr.exe was found!
                  No active process named Teatimer.exe was found!
                  ========== SERVICES/DRIVERS ==========
                  Service Bonjour Service stopped successfully!
                  Service Bonjour Service deleted successfully!
                  ========== OTL ==========
                  Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} deleted successfully.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}\ deleted successfully.
                  C:\Program Files\myBabylon_English\tbmyB2.dll moved successfully.
                  Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{ba14329e-9550-4989-b3f2-9732e92d17cc} deleted successfully.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ba14329e-9550-4989-b3f2-9732e92d17cc}\ deleted successfully.
                  C:\Program Files\Vuze_Remote\prxtbVuz0.dll moved successfully.
                  Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{ef79f67a-6ad7-4715-a0f8-932fca442023} deleted successfully.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ef79f67a-6ad7-4715-a0f8-932fca442023}\ deleted successfully.
                  C:\Program Files\BittorrentBar_FR\tbBitt.dll moved successfully.
                  C:\Documents and Settings\Alexandra\Application Data\Mozilla\Firefox\Profiles\le6uty75.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\searchplugin folder moved successfully.
                  C:\Documents and Settings\Alexandra\Application Data\Mozilla\Firefox\Profiles\le6uty75.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\META-INF folder moved successfully.
                  C:\Documents and Settings\Alexandra\Application Data\Mozilla\Firefox\Profiles\le6uty75.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\lib folder moved successfully.
                  C:\Documents and Settings\Alexandra\Application Data\Mozilla\Firefox\Profiles\le6uty75.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\defaults folder moved successfully.
                  C:\Documents and Settings\Alexandra\Application Data\Mozilla\Firefox\Profiles\le6uty75.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components folder moved successfully.
                  C:\Documents and Settings\Alexandra\Application Data\Mozilla\Firefox\Profiles\le6uty75.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\chrome folder moved successfully.
                  C:\Documents and Settings\Alexandra\Application Data\Mozilla\Firefox\Profiles\le6uty75.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc} folder moved successfully.
                  C:\Documents and Settings\Alexandra\Application Data\Mozilla\Firefox\Profiles\le6uty75.default\extensions\{ef79f67a-6ad7-4715-a0f8-932fca442023}\searchplugin folder moved successfully.
                  C:\Documents and Settings\Alexandra\Application Data\Mozilla\Firefox\Profiles\le6uty75.default\extensions\{ef79f67a-6ad7-4715-a0f8-932fca442023}\META-INF folder moved successfully.
                  C:\Documents and Settings\Alexandra\Application Data\Mozilla\Firefox\Profiles\le6uty75.default\extensions\{ef79f67a-6ad7-4715-a0f8-932fca442023}\lib folder moved successfully.
                  C:\Documents and Settings\Alexandra\Application Data\Mozilla\Firefox\Profiles\le6uty75.default\extensions\{ef79f67a-6ad7-4715-a0f8-932fca442023}\defaults folder moved successfully.
                  C:\Documents and Settings\Alexandra\Application Data\Mozilla\Firefox\Profiles\le6uty75.default\extensions\{ef79f67a-6ad7-4715-a0f8-932fca442023}\components folder moved successfully.
                  C:\Documents and Settings\Alexandra\Application Data\Mozilla\Firefox\Profiles\le6uty75.default\extensions\{ef79f67a-6ad7-4715-a0f8-932fca442023}\chrome folder moved successfully.
                  C:\Documents and Settings\Alexandra\Application Data\Mozilla\Firefox\Profiles\le6uty75.default\extensions\{ef79f67a-6ad7-4715-a0f8-932fca442023} folder moved successfully.
                  Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}\ deleted successfully.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{53707962-6F74-2D53-2644-206D7942484F}\ deleted successfully.
                  C:\Program Files\Spybot - Search & Destroy\SDHelper.dll moved successfully.
                  Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}\ deleted successfully.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}\ not found.
                  File C:\Program Files\myBabylon_English\tbmyB2.dll not found.
                  Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ba14329e-9550-4989-b3f2-9732e92d17cc}\ deleted successfully.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ba14329e-9550-4989-b3f2-9732e92d17cc}\ not found.
                  File C:\Program Files\Vuze_Remote\prxtbVuz0.dll not found.
                  Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ef79f67a-6ad7-4715-a0f8-932fca442023}\ deleted successfully.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ef79f67a-6ad7-4715-a0f8-932fca442023}\ not found.
                  File C:\Program Files\BittorrentBar_FR\tbBitt.dll not found.
                  Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} deleted successfully.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}\ not found.
                  File C:\Program Files\myBabylon_English\tbmyB2.dll not found.
                  Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{ba14329e-9550-4989-b3f2-9732e92d17cc} deleted successfully.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ba14329e-9550-4989-b3f2-9732e92d17cc}\ not found.
                  File C:\Program Files\Vuze_Remote\prxtbVuz0.dll not found.
                  Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{ef79f67a-6ad7-4715-a0f8-932fca442023} deleted successfully.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ef79f67a-6ad7-4715-a0f8-932fca442023}\ not found.
                  File C:\Program Files\BittorrentBar_FR\tbBitt.dll not found.
                  Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{B2E293EE-FD7E-4C71-A714-5F4750D8D7B7} deleted successfully.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B2E293EE-FD7E-4C71-A714-5F4750D8D7B7}\ not found.
                  File C:\Program Files\myBabylon_English\tbmyB2.dll not found.
                  Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{BA14329E-9550-4989-B3F2-9732E92D17CC} deleted successfully.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BA14329E-9550-4989-B3F2-9732E92D17CC}\ not found.
                  File C:\Program Files\Vuze_Remote\prxtbVuz0.dll not found.
                  Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EF79F67A-6AD7-4715-A0F8-932FCA442023} deleted successfully.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EF79F67A-6AD7-4715-A0F8-932FCA442023}\ not found.
                  File C:\Program Files\BittorrentBar_FR\tbBitt.dll not found.
                  Registry key HKEY_LOCAL_MACHINE\\Software\Microsoft\Windows\CurrentVersion\Run not found.
                  Registry key HKEY_LOCAL_MACHINE\\Software\Microsoft\Windows\CurrentVersion\Run not found.
                  Registry key HKEY_CURRENT_USER\\Software\Microsoft\Windows\CurrentVersion\Run not found.
                  C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe moved successfully.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2}\ deleted successfully.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2}\ not found.
                  File C:\Program Files\Spybot - Search & Destroy\SDHelper.dll not found.
                  Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
                  Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
                  Starting removal of ActiveX control {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\ deleted successfully.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\ deleted successfully.
                  Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\ deleted successfully.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\ not found.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\ not found.
                  Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
                  Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
                  ========== REGISTRY ==========
                  Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\RTHDCPL deleted successfully.
                  Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\TkBellExe deleted successfully.
                  Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
                  Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task deleted successfully.
                  ========== FILES ==========
                  C:\Program Files\a43.dat moved successfully.
                  C:\Program Files\A43.exe moved successfully.
                  C:\WINDOWS\System32\phar_histprot.dat moved successfully.
                  C:\WINDOWS\System32\phar_unmip.dat moved successfully.
                  C:\WINDOWS\System32\pc_drugs.dat moved successfully.
                  C:\WINDOWS\System32\pc_gambling.dat moved successfully.
                  C:\WINDOWS\System32\pc_games.dat moved successfully.
                  C:\WINDOWS\System32\pc_hate.dat moved successfully.
                  C:\WINDOWS\System32\pc_illegal.dat moved successfully.
                  C:\WINDOWS\System32\pc_im.dat moved successfully.
                  C:\WINDOWS\System32\pc_news.dat moved successfully.
                  C:\WINDOWS\System32\pc_onlinedating.dat moved successfully.
                  C:\WINDOWS\System32\pc_onlinepay.dat moved successfully.
                  C:\WINDOWS\System32\pc_onlineshop.dat moved successfully.
                  C:\WINDOWS\System32\pc_pornography.dat moved successfully.
                  C:\WINDOWS\System32\pc_regionaltlds.dat moved successfully.
                  C:\WINDOWS\System32\pc_searchengines.dat moved successfully.
                  C:\WINDOWS\System32\pc_socialnetworks.dat moved successfully.
                  C:\WINDOWS\System32\pc_tabloids.dat moved successfully.
                  C:\WINDOWS\System32\pc_video.dat moved successfully.
                  C:\WINDOWS\System32\pc_webproxy.dat moved successfully.
                  C:\WINDOWS\System32\shortcut_ex.dat moved successfully.
                  C:\WINDOWS\System32\rezumatenoi.dat moved successfully.
                  C:\WINDOWS\System32\wsbl.dat moved successfully.
                  C:\WINDOWS\System32\ph_black.dat moved successfully.
                  C:\WINDOWS\System32\ph_summ.dat moved successfully.
                  C:\WINDOWS\System32\ph_white.dat moved successfully.
                  C:\WINDOWS\System32\pcwords2.dat moved successfully.
                  C:\WINDOWS\System32\pcwords.dat moved successfully.
                  ADS C:\Documents and Settings\All Users\Application Data\TEMP:3ED99525 deleted successfully.
                  ADS C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2 deleted successfully.
                  ========== COMMANDS ==========

                  [EMPTYTEMP]

                  User: Alexandra
                  ->Temp folder emptied: 2758663944 bytes
                  ->Temporary Internet Files folder emptied: 34301 bytes
                  ->Java cache emptied: 64863118 bytes
                  ->FireFox cache emptied: 101875822 bytes
                  ->Google Chrome cache emptied: 6128283 bytes
                  ->Opera cache emptied: 32035593 bytes
                  ->Flash cache emptied: 404411 bytes

                  User: All Users

                  User: Default User
                  ->Temp folder emptied: 0 bytes
                  ->Temporary Internet Files folder emptied: 32902 bytes
                  ->Flash cache emptied: 56502 bytes

                  User: LocalService
                  ->Temp folder emptied: 66016 bytes
                  ->Temporary Internet Files folder emptied: 33170 bytes

                  User: NetworkService
                  ->Temp folder emptied: 0 bytes
                  ->Temporary Internet Files folder emptied: 1192761 bytes

                  %systemdrive% .tmp files removed: 0 bytes
                  %systemroot% .tmp files removed: 0 bytes
                  %systemroot%\System32 .tmp files removed: 1944064 bytes
                  %systemroot%\System32\dllcache .tmp files removed: 0 bytes
                  %systemroot%\System32\drivers .tmp files removed: 0 bytes
                  Windows Temp folder emptied: 18134 bytes
                  %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 169881654 bytes
                  %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
                  RecycleBin emptied: 0 bytes

                  Total Files Cleaned = 2 992,00 mb

                  OTL by OldTimer - Version 3.2.22.3 log created on 04242011_132935

                  Files\Folders moved on Reboot...

                  Registry entries deleted on Reboot...
                  1. ATTENTION !!! : Script personnalisé pour cette machine uniquement , ne pas reproduire !!

                    si tu as XP => double clique
                    si tu as Vista ou windows 7 => clic droit "executer en tant que...."


                    sur OTL.exe pour le lancer.

                    ▶Copie la liste qui se trouve en gras ci-dessous,

                    ▶ colle-la dans la zone sous "Personnalisation" :


                    :processes
                    explorer.exe
                    iexplore.exe
                    firefox.exe
                    msnmsgr.exe
                    Teatimer.exe

                    :Services
                    Bonjour Service

                    :OTL
                    IE - HKCU\..\URLSearchHook: {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyB2.dll (Conduit Ltd.)
                    IE - HKCU\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\prxtbVuz0.dll (Conduit Ltd.)
                    IE - HKCU\..\URLSearchHook: {ef79f67a-6ad7-4715-a0f8-932fca442023} - C:\Program Files\BittorrentBar_FR\tbBitt.dll (Conduit Ltd.)
                    [2011/01/06 17:35:26 | 000,000,000 | ---D | M] (Vuze Remote Toolbar) -- C:\Documents and Settings\Alexandra\Application Data\Mozilla\Firefox\Profiles\le6uty75.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}
                    [2011/01/06 13:33:47 | 000,000,000 | ---D | M] (BittorrentBar_FR Community Toolbar) -- C:\Documents and Settings\Alexandra\Application Data\Mozilla\Firefox\Profiles\le6uty75.default\extensions\{ef79f67a-6ad7-4715-a0f8-932fca442023}
                    O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
                    O2 - BHO: (myBabylon English Toolbar) - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyB2.dll (Conduit Ltd.)
                    O2 - BHO: (Vuze Remote Toolbar) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\prxtbVuz0.dll (Conduit Ltd.)
                    O2 - BHO: (BittorrentBar_FR Toolbar) - {ef79f67a-6ad7-4715-a0f8-932fca442023} - C:\Program Files\BittorrentBar_FR\tbBitt.dll (Conduit Ltd.)
                    O3 - HKLM\..\Toolbar: (myBabylon English Toolbar) - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyB2.dll (Conduit Ltd.)
                    O3 - HKLM\..\Toolbar: (Vuze Remote Toolbar) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\prxtbVuz0.dll (Conduit Ltd.)
                    O3 - HKLM\..\Toolbar: (BittorrentBar_FR Toolbar) - {ef79f67a-6ad7-4715-a0f8-932fca442023} - C:\Program Files\BittorrentBar_FR\tbBitt.dll (Conduit Ltd.)
                    O3 - HKCU\..\Toolbar\WebBrowser: (myBabylon English Toolbar) - {B2E293EE-FD7E-4C71-A714-5F4750D8D7B7} - C:\Program Files\myBabylon_English\tbmyB2.dll (Conduit Ltd.)
                    O3 - HKCU\..\Toolbar\WebBrowser: (Vuze Remote Toolbar) - {BA14329E-9550-4989-B3F2-9732E92D17CC} - C:\Program Files\Vuze_Remote\prxtbVuz0.dll (Conduit Ltd.)
                    O3 - HKCU\..\Toolbar\WebBrowser: (BittorrentBar_FR Toolbar) - {EF79F67A-6AD7-4715-A0F8-932FCA442023} - C:\Program Files\BittorrentBar_FR\tbBitt.dll (Conduit Ltd.)
                    O4 - HKLM\..\Run: [[webwiz]] File not found
                    O4 - HKLM\..\Run: [Freecorder FLV Service] File not found
                    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
                    O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
                    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
                    O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
                    O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)

                    :Reg
                    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
                    "RTHDCPL"=-
                    "TkBellExe"=-
                    "SunJavaUpdateSched"=-
                    "QuickTime Task"=-

                    :Files
                    C:\Program Files\*.dat
                    C:\Program Files\*.exe
                    C:\WINDOWS\System32\phar_*.dat
                    C:\WINDOWS\System32\pc_*.dat
                    C:\WINDOWS\System32\shortcut_ex.dat
                    C:\WINDOWS\System32\rezumatenoi.dat
                    C:\WINDOWS\System32\wsbl.dat
                    C:\WINDOWS\System32\ph_*.dat
                    C:\WINDOWS\System32\pcwords2.dat
                    C:\WINDOWS\System32\pcwords.dat
                    @Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:3ED99525
                    @Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2

                    :commands
                    [emptytemp]
                    [start explorer]
                    [reboot]


                    ▶ Clique sur "Correction" pour lancer la suppression.

                    ▶ Poste le rapport qui logiquement s'ouvrira tout seul en fin de travail appres le redemarrage.

                    G3?-?@¢??@?......Concepteur de List_Kill'em...Pre_Scan....MBR_Repair....
                    1. Désolée!
                      http://www.cijoint.fr/cjlink.php?file=cj201104/cijltIbsXs.txt
                      1. Bonjour,

                        J'ai relancé pendant la nuit:

                        -http://www.cijoint.fr/cjlink.php?file=cj201104/cijIfThsG0.txt

                        -http://www.cijoint.fr/cjlink.php?file=cj201104/cij3VQQxJW.txt

                        Autre problème, je me suis aperçue avec CCleaner, que malgré la désinstallation de la toolbar babylon ainsi que de babylon, elle figure toujours à la liste des programmes, et quand j'essaie de la désinstaller, j'ai ce message: "could not open INSTALL.log file".
                        1. Bonjour,

                          Alors j'ai désinstallé spyware doctor et ai refait une analyse complète pendant la nuit, avec bitdefender. Cette fois, aucune menace n'a été trouvée.
                          1. C'est fait. Tu penses que mon problème pourrait être causé par autre chose u'un virus?
                            1. je vois que tu as spyware doctor qui tourne si tu le trouves tu peux le virer il sert à rien
                              1. Après mise à jour et scan complet:

                                Malwarebytes' Anti-Malware 1.50.1.1100
                                www.malwarebytes.org

                                Version de la base de données: 6418

                                Windows 5.1.2600 Service Pack 3
                                Internet Explorer 7.0.5730.13

                                22/04/2011 22:48:11
                                mbam-log-2011-04-22 (22-47-50).txt

                                Type d'examen: Examen complet (C:\|D:\|)
                                Elément(s) analysé(s): 270358
                                Temps écoulé: 8 heure(s), 32 minute(s), 28 seconde(s)

                                Processus mémoire infecté(s): 0
                                Module(s) mémoire infecté(s): 0
                                Clé(s) du Registre infectée(s): 0
                                Valeur(s) du Registre infectée(s): 0
                                Elément(s) de données du Registre infecté(s): 0
                                Dossier(s) infecté(s): 0
                                Fichier(s) infecté(s): 2

                                Processus mémoire infecté(s):
                                (Aucun élément nuisible détecté)

                                Module(s) mémoire infecté(s):
                                (Aucun élément nuisible détecté)

                                Clé(s) du Registre infectée(s):
                                (Aucun élément nuisible détecté)

                                Valeur(s) du Registre infectée(s):
                                (Aucun élément nuisible détecté)

                                Elément(s) de données du Registre infecté(s):
                                (Aucun élément nuisible détecté)

                                Dossier(s) infecté(s):
                                (Aucun élément nuisible détecté)

                                Fichier(s) infecté(s):
                                c:\documents and settings\alexandra\mes documents\downloads\offerbox-setup.exe (PUP.OfferBox) -> No action taken.
                                c:\system volume information\_restore{a98a3bad-a175-4b0c-8961-c8189c0edd33}\RP563\A0528227.exe (Trojan.Agent.Gen) -> No action taken.
                                • 1
                                • 2
                                • 3