Protected search

Bonjour,
1/
Désinstalle stp spybot, il ne sert à rien.

2/
* Télécharge OTM (OldTimer) sur ton Bureau

ICI >> OTM (OldTimer)
* Double clic "OTMoveIt3.exe"
* Utilisateurs Windows Vista / 7 Clic droit sur "OTMoveIt3.exe" choisis "exécuter en tant qu'administrateur" afin de le lancer.

- Copie (Ctrl+C) le texte suivant en gras ci-dessous :

:files
C:\Users\catherine\AppData\Roaming\Widestream
C:\Users\catherine\AppData\Local\widestream6 Air

:Reg
[-HKCU\Software\WideStream]
[-HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1a6dc111-b030-4c3e-be65-299284128b91}]
[-HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4}]

:commands
[emptytemp]


- Colle (Ctrl+V) le texte précédemment copié dans le cadre: Paste Instructions for Items to be Moved.
- Clique maintenant sur le bouton MoveIt!
Si un fichier ou dossier ne peut pas être supprimé immédiatement, le logiciel te demandera de redémarrer.
Accepte en cliquant sur YES.
- Poste le rapport situé dans ce dossier : C:\_OTMoveIt\MovedFiles\
Le nom du rapport correspond au moment de sa création : date_heure.log

3/
Copie tout le texte présent en gras ci-dessous ( tu le selectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C )


O43 - CFD: 16/11/2011 - 23:17:50 - [0,001] ----D- C:\Users\catherine\AppData\Roaming\widestream => Infection BT (Adware.SPointer)
O43 - CFD: 26/11/2011 - 14:12:56 - [0,200] ----D- C:\Users\catherine\AppData\Local\widestream6 Air => Infection BT (Adware.SPointer)
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[MD5.00000000000000000000000000000000] [APT] [OfferBoxUpdate] (...) -- C:\Program Files (x86)\OfferBox\OfferBox.exe (.not file.)
O43 - CFD: 26/11/2011 - 09:22:06 - [0] ----D- C:\Users\catherine\AppData\Local\{07733404-7FF6-4E93-9E68-7927AC177C83}
O43 - CFD: 27/11/2011 - 12:15:14 - [0] ----D- C:\Users\catherine\AppData\Local\{1360E589-B390-4375-9797-D90E16F98ACD}
O43 - CFD: 24/11/2011 - 18:39:40 - [0] ----D- C:\Users\catherine\AppData\Local\{1918BF5C-6E87-4372-AC84-FE0734D43FC3}
O43 - CFD: 25/11/2011 - 19:55:34 - [0] ----D- C:\Users\catherine\AppData\Local\{21B1316E-871E-4EDF-A3A6-8DF73BA783CD}
O43 - CFD: 25/11/2011 - 19:55:34 - [0] ----D- C:\Users\catherine\AppData\Local\{321A441C-2881-4973-8933-56AC47A10D65}
O43 - CFD: 25/11/2011 - 07:45:38 - [0] ----D- C:\Users\catherine\AppData\Local\{58FB44E7-4CDA-469D-A194-8922DC184ABF}
O43 - CFD: 28/11/2011 - 19:25:30 - [0] ----D- C:\Users\catherine\AppData\Local\{6C51D51E-1EE4-4E94-9B6F-AF342396B743}
O43 - CFD: 28/11/2011 - 00:16:10 - [0] ----D- C:\Users\catherine\AppData\Local\{775CCBBD-61CC-4A4F-8BF8-3F4517DA0DDF}
O43 - CFD: 25/11/2011 - 07:45:40 - [0] ----D- C:\Users\catherine\AppData\Local\{7A108A23-1E5A-4A32-B2D6-99851CD1B8CC}
O43 - CFD: 28/11/2011 - 00:16:00 - [0] ----D- C:\Users\catherine\AppData\Local\{7E188445-B813-4AF5-BD80-069FF8728153}
O43 - CFD: 24/11/2011 - 18:39:46 - [0] ----D- C:\Users\catherine\AppData\Local\{AED18E56-A5FA-4C34-A457-686A29E7F81E}
O43 - CFD: 26/11/2011 - 09:22:08 - [0] ----D- C:\Users\catherine\AppData\Local\{E120DDBE-8CCC-4ACB-8697-7F7194BA5499}
O43 - CFD: 27/11/2011 - 12:15:02 - [0] ----D- C:\Users\catherine\AppData\Local\{E92BE636-EE64-405A-A315-8C52AD623D22}

FirewallRAZ
EmptyTemp
EmptyFlash

Puis Lance ZHPFix depuis le raccourci du bureau .

* Une fois l'outil ZHPFix ouvert , clique sur le bouton [ H ] ( "coller les lignes Helper" ) .

* Dans l'encadré principal tu verras donc les lignes que tu as copié précédemment apparaitrent .

Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.

Clique sur le bouton GO

Copie/Colle le rapport à l'écran dans ton prochain message.

@+

Bonjour,

Ton PC est encore infecté, poste stp les rapports demandés pour le nettoyer...

=======================

Quelques informations sur les adwares : https://www.malekal.com/supprimer-publicites-adware/

A la fin de la désinfection on va installer des modules complémentaires Adblock plus et WOT pour sécuriser ton PC

@+

Re,

au niveau des rapports est ce bien ceci que tu voulais ?

de quoi viennent les ardwares ou trucs du genre, avec quoi je peux proteger mon pc ? de préférence gratuit.

En tous cas ma page d 'accueil n'est plus protected search donc je suppose que sa à fonctionné et je te remercie vraiment beaucoup de ton aide

le rapport de mbam

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Version de la base de données: 8292

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

03/12/2011 02:12:21
mbam-log-2011-12-03 (02-12-21).txt

Type d'examen: Examen complet (C:\|E:\|)
Elément(s) analysé(s): 226253
Temps écoulé: 42 minute(s), 32 seconde(s)

Processus mémoire infecté(s): 5
Module(s) mémoire infecté(s): 2
Clé(s) du Registre infectée(s): 10
Valeur(s) du Registre infectée(s): 9
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 3
Fichier(s) infecté(s): 109

Processus mémoire infecté(s):
c:\program files\questscan\questscan.exe (Adware.Agent.ZGen) -> 152 -> Unloaded process successfully.
c:\program files\questscan\questscan.exe (Adware.Agent.ZGen) -> 3328 -> Unloaded process successfully.
c:\WINDOWS\system32\config\systemprofile\local settings\application data\windows internet name service\wins.exe (Trojan.Sefnit) -> 3420 -> Unloaded process successfully.
c:\WINDOWS\system32\config\systemprofile\local settings\application data\windows internet name service\wins.exe (Trojan.Sefnit) -> 3336 -> Unloaded process successfully.
c:\program files\brightbreeze\bin\2.0.5.0\brightbreezesa.exe (Adware.HotBar.BB) -> 3892 -> Unloaded process successfully.

Module(s) mémoire infecté(s):
c:\program files\questscan\questscan.dll (Adware.Agent.ZGen) -> Delete on reboot.
c:\program files\brightbreeze\bin\2.0.5.0\brightbreezesahook.dll (Adware.HotBar.BB) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\QuestScan Service (Adware.Agent.ZGen) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Windows Internet Name Service (Trojan.Sefnit) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\brightbreezesa (Adware.HotBar.BB) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\BrightBreeze (Adware.HotBar.BB) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BrightBreezeSA (Adware.HotBar.BB) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\QUESTSCAN (Adware.QuestScan) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\QUESTSCAN (Adware.QuestScan) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_QUESTSCAN_SERVICE (Adware.QuestScan) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Chat-Landmessenger (Trojan.Hijacker) -> Value: Chat-Landmessenger -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{EB620C54-E229-4942-87CE-E717109FC8C6} (Adware.ShoppingReport2) -> Value: {EB620C54-E229-4942-87CE-E717109FC8C6} -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{EB620C54-E229-4942-87CE-E717109FC8C6} (Adware.ShoppingReport2) -> Value: {EB620C54-E229-4942-87CE-E717109FC8C6} -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{DB38E21A-0133-419d-92AD-ECDFD5244D6D} (Adware.ShoppingReport2) -> Value: {DB38E21A-0133-419d-92AD-ECDFD5244D6D} -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{DB38E21A-0133-419d-92AD-ECDFD5244D6D} (Adware.ShoppingReport2) -> Value: {DB38E21A-0133-419d-92AD-ECDFD5244D6D} -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BrightBreezeSA (Adware.HotBar.BB) -> Value: BrightBreezeSA -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QuestScan\DisplayName (Adware.QuestScan) -> Value: DisplayName -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\QuestScan\DllPath (Adware.QuestScan) -> Value: DllPath -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Windows Internet Name Service\ImagePath (Trojan.P2P) -> Value: ImagePath -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Internet Explorer\control panel\HomePage (PUM.Hijack.HomePageControl) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
c:\program files\brightbreeze\bin (Adware.HotBar.BB) -> Delete on reboot.
c:\program files\brightbreeze\bin\2.0.5.0 (Adware.HotBar.BB) -> Delete on reboot.
c:\documents and settings\all users\application data\brightbreezesa (Adware.HotBar.BB) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
c:\program files\questscan\questscan.exe (Adware.Agent.ZGen) -> Quarantined and deleted successfully.
c:\program files\questscan\questscan.dll (Adware.Agent.ZGen) -> Delete on reboot.
c:\WINDOWS\system32\config\systemprofile\local settings\application data\windows internet name service\wins.exe (Trojan.Sefnit) -> Delete on reboot.
c:\documents and settings\Userinit\chat-land\chat-landmessenger.exe (Trojan.Hijacker) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\questscan\questscan191.exe (Adware.Agent.ZGen) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\questscan\questscan193.exe (Adware.Agent.ZGen) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\f3imstub.dll.vir (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\m3ieovr.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\m3srchmn.exe.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\f3cjpeg.dll.vir (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\f3dtactl.dll.vir (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\f3histsw.dll.vir (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\f3hkstub.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\f3htmlmu.dll.vir (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\f3httpct.dll.vir (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\f3popswt.dll.vir (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\f3pssavr.scr.vir (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\f3reghk.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\f3reprox.dll.vir (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\f3restub.dll.vir (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\f3schmon.exe.vir (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\f3scrctr.dll.vir (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\f3wphook.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\m3auxstb.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\m3dlghk.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\m3highin.exe.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\m3html.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\m3idle.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\m3impipe.exe.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\m3medint.exe.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\m3msg.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\m3outlcn.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\m3plugin.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\m3skin.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\m3skplay.exe.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\m3slsrch.exe.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\mwsbar.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\mwsmlbtn.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\mwsoemon.exe.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\mwsoeplg.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\mwsoestb.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\mwssrcas.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\mwssvc.exe.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\mwsuabtn.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\mywebsearch\bar\1.bin\npmywebs.dll.vir (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\program files\shoppingreport2\Bin\2.7.37\shoppingreport.dll.vir (Adware.SmartShopper) -> Quarantined and deleted successfully.
c:\program files\ad-remover\quarantine\C\WINDOWS\system32\f3pssavr.scr.vir (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\program files\WinRAR\Patch.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP143\A0017791.dll (Adware.Agent.ZGen) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP143\A0017792.exe (Adware.Agent.ZGen) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP143\A0017793.exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP143\A0017795.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP143\A0017796.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP143\A0017797.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP144\A0018039.exe (Trojan.Hijacker) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP149\A0022130.exe (Adware.Agent.ZGen) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP152\A0022163.dll (Adware.Agent.ZGen) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP152\A0022164.exe (Adware.Agent.ZGen) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP152\A0022165.dll (Adware.Agent.ZGen) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP152\A0022166.exe (Adware.Agent.ZGen) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030373.scr (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030387.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030388.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030389.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030390.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030391.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030392.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030393.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030394.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030396.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030397.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030398.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030399.EXE (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030400.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030401.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030402.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030403.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030404.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030405.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030406.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030407.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030408.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030409.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030410.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030411.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030413.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030414.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030415.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030416.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030418.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030419.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030420.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030421.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030422.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030423.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030424.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030425.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030426.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030434.dll (Adware.SmartShopper) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030395.SCR (PUP.FunWebProducts) -> Quarantined and deleted successfully.
c:\system volume information\_restore{a1980575-00f1-4c9c-a335-a696ad1a9f3c}\RP194\A0030412.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\WINDOWS\ie8\iexplore.exe (Trojan.FakeMS) -> Quarantined and deleted successfully.
c:\program files\brightbreeze\bin\2.0.5.0\brightbreezesa.exe (Adware.HotBar.BB) -> Quarantined and deleted successfully.
c:\program files\brightbreeze\bin\2.0.5.0\brightbreezesahook.dll (Adware.HotBar.BB) -> Delete on reboot.
c:\program files\brightbreeze\bin\2.0.5.0\brightbreezeuninstaller.exe (Adware.HotBar.BB) -> Quarantined and deleted successfully.
c:\program files\brightbreeze\bin\2.0.5.0\copyright.txt (Adware.HotBar.BB) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\brightbreezesa\brightbreezesa.dat (Adware.HotBar.BB) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\brightbreezesa\brightbreezesaau.dat (Adware.HotBar.BB) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\brightbreezesa\brightbreezesa_kyf.dat (Adware.HotBar.BB) -> Quarantined and deleted successfully.

Re,

Oh, ton PC est très infecté surtout par des adwares!!!

1/
Lance ADWCleaner comme je t'ai demandé >>> ICI <<< en 1/ puis poste le rapport stp

2/
* Télécharge de AD-Remover sur ton Bureau.
http://www.teamxscript.org/adremoverTelechargement.html

/!\ Ferme toutes applications en cours /!\

- Double sur l'icône Ad-remover située sur ton Bureau.
-Pour vista/Seven : clique avec le bouton droit de la souris et choisis « exécuter en tant qu'administrateur »
- Sur la page, clique sur le bouton « Nettoyer »
- Confirme lancement du scan
- Laisse travailler l'outil.
- Poste le rapport qui apparaît à la fin.

(Le rapport est sauvegardé aussi sous C:\Ad-report(Scan/clean).Txt)

(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour c

3/
/!\ ATTENTION : cette analyse peut durer quelques heures /!\

* Télécharge MBAM et installe le selon l'emplacement par défaut
https://www.malwarebytes.com/mwb-download/
* Lance Malwarebytes' Anti-Malware
* Fais la mise à jour
* Clique dans l'onglet "Recherche"
* Coche l'option "Exécuter un examen complet" puis sur le bouton "Rechercher"
* Choisis de scanner tous tes disques durs, puis clique sur 'Lancer l'examen"

A la fin de l'analyse, si MBAM n'a rien trouvé :

* Clique sur OK, le rapport s'ouvre spontanément

Si des menaces ont été détectées :

* Clique sur OK puis "Afficher les résultats"
*Vérifie que toutes les lignes sont cochées
* Choisis l'option "Supprimer la sélection"
* Si MBAM demande le redémarrage de Windows : Clique sur "Oui"
* Le rapport s'ouvre automatiquement après la suppression, il se trouve aussi dans l'onglet "Rapports/Logs"

* Copie/colle le rapport dans le prochain message

Remarque :
- S'il y'a un problème de mise à jour de mbam, tu peux la faire manuellement en téléchargeant ce fichier puis en l'exécutant.

@+

Salut,

1/
Télécharge AdwCleaner (merci à Xplode)
Ou ADWCleaner ici
Lance AdwCleaner
Clique sur le bouton [ Suppression ]
Patiente...
Poste le rapport qui apparait en fin de recherche.
Il se trouve également à C:\AdwCleaner[SX] (où X est un chiffre)

2/
Nous allons effectuer un diagnostic de ton PC:
*Télécharge ZHPDiag sur ton bureau :

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html
ou :
http://www.premiumorange.com/zeb-help-process/zhpdiag.html

* Laisse toi guider lors de l'installation,coche "Ajouter une icône sur le bureau" et décoche la case "Exécuter ZHPDiag"

/!\Utilisateur de Vista et Seven : Clique droit sur le logo de ZHPdiag, « exécuter en tant qu'Administrateur »

* Clique sur l'icône représentant une loupe (« Lancer le diagnostic »)
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
* Héberge le rapport ZHPDiag.txt sur un des sites ci dessous, puis copie/colle le lien fourni dans ta prochaine réponse sur le forum : http://www.cijoint.fr/
Si indisponible, tu peux essayer avec l'un de ces liens:
http://dl.free.fr
http://ww38.toofiles.com/fr/documents-upload.html
https://www.terafiles.net/
https://www.casimages.com/
http://pjjoint.malekal.com/

* Tuto zhpdiag :
http://www.premiumorange.com/zeb-help-process/zhpdiag.html

Hébergement de rapport sur cijoint.fr/

Rend toi sur ce site : http://www.cijoint.fr/
Clique sur Choisissez un fichier
Clique sur "Cliquez ici pour déposer le fichier".
Un lien de cette forme : http://www.cijoint.fr/cjlink.php?file=cj44123/cijSKAP5fU.txt
est ajouté dans la page. Copie ce lien dans ta réponse.
============================================
Aide : >>> hébergement ICI <<<

@+