Virus System Repair

Résolu
Bonjour,

Voilà plusieurs jours que mon PC a été infecté par le virus System repair,
toutes les icones et dossiers ont été cachées et mon écran était tout noir,
j'ai réussi à récupérer tous les dossiers grâce à Rogue Killer et j'ai essayé
de supprimer le virus avec ce logiciel, sans succès :

Mon PC est très lent, l'icone system repair est toujours sur mon bureau et Rogue Killer me détecte un Root.MBR lors du scan.

Quand j'essaye le fix MBR une erreur s'affiche : "[Impossible de réparer le MBR] DeviceIoControl failed with error : [0x1] Fonction incorrecte."

De plus, TDSSKiller ne se lance pas alors que je l'ai téléchargé.

J'aimerais avoir votre aide car la lenteur du PC est insupportable et que je n'ai
trouvé aucune réponse nulle aprt sur internet.

Merci d'avance, Steaky.

12 réponses

  1. Modérateur
    Ca doit être bon :)

    Installe Malwarebyte's Anti-Malware : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
    Fais des scans réguliers avec, il est efficace.

    Sécurise ton PC !

    Important - ton infection est venue par un exploit sur site web :

    Un exploit sur site WEB permet l'infection de ton ordinateur de manière automatiquement à la visite d'un site WEB qui a été hacké, il tire partie du fait que tu as des logiciels (Java, Adobe Reader etc) qui sont pas à jour et possèdent des vulnérabilités qui permettent l'execution de code (malicieux dans notre cas) à ton insu.
    Le fait de ne pas avoir des logiciels à jour et qui ont potentiellement des vulnérabilités permettent donc d'infecter ton système.
    Exemple avec : Exploit Java

    Il faut donc impérativement maintenir tes logiciels à jour afin de ne pas voir ces portes d'entrée sur ton système.
    Tant que ces logiciels ne seront pas à jour, ton PC est vulnérable et les infections peuvent s'installer facilement.

    IMPORTANT : mettre à jour tes programmes notamment Java/Adobe Reader et Flash :
    /faq/13362-mettre-a-jour-son-pc-contre-les-failles-de-securite
    https://forum.malekal.com/viewtopic.php?t=15960&start=

    Désactive Java de tes navigateurs WEB : https://www.commentcamarche.net/faq/35621-desactiver-java-sur-ses-navigateurs-web

    Passe le mot à tes amis !

    ~~

    Filtrer les PUPs/Adwares les plus fréquents avec HOSTS Anti-PUPs/Adwares : http://www.malekal.com/2012/01/10/hosts-anti-pupsadware/

    ~~

    Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html

    1. voilà le rapport, je redémarre maintenant :

      ========== OTL ==========
      Prefs.js: chr-greentree_ff&type=867034&ilc=12 removed from browser.search.param.yahoo-fr
      Prefs.js: Ask.com removed from browser.search.selectedEngine
      Prefs.js: http://search.babylon.com/?babsrc=HP_ss&mntrId=224ce0c2000000000000c417fec4e12b&tlver=1.4.19.19&affID=17160 <b>[Pays US - 65.60.5.200]</b> removed from browser.startup.homepage
      Prefs.js: ffxtlbr@babylon.com:1.1.3 removed from extensions.enabledAddons
      Prefs.js: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.3 removed from extensions.enabledAddons
      Prefs.js: dealio@mybrowserbar.com:4.6 removed from extensions.enabledAddons
      Prefs.js: wtxpcom@mybrowserbar.com:4.6 removed from extensions.enabledAddons
      Prefs.js: {F0E1168A-B4B5-484C-B77E-0D28E6B64096}:1.0 removed from extensions.enabledAddons
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\{1CB94A15-4515-4A88-A296-36DDCA34AF50}\META-INF folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\{1CB94A15-4515-4A88-A296-36DDCA34AF50}\components folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\{1CB94A15-4515-4A88-A296-36DDCA34AF50}\chrome\content\id_toolbar1 folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\{1CB94A15-4515-4A88-A296-36DDCA34AF50}\chrome\content folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\{1CB94A15-4515-4A88-A296-36DDCA34AF50}\chrome folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\{1CB94A15-4515-4A88-A296-36DDCA34AF50} folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516}\defaults\preferences folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516}\defaults folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516}\chrome\content folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516}\chrome folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516} folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}\local\modules folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}\local folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}\defaults\preferences folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}\defaults folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}\components folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}\chrome folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn\tmp\text-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn\tmp\props folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn\tmp\prop-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn\tmp folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn\text-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn\props folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn\prop-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\defaults\preferences\.svn folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\defaults\preferences folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\defaults\.svn\tmp\text-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\defaults\.svn\tmp\props folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\defaults\.svn\tmp\prop-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\defaults\.svn\tmp folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\defaults\.svn\text-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\defaults\.svn\props folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\defaults\.svn\prop-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\defaults\.svn folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\defaults folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn\tmp\text-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn\tmp\props folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn\tmp\prop-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn\tmp folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn\text-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn\props folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn\prop-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio\.svn folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\mnRadio folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn\tmp\text-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn\tmp\props folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn\tmp\prop-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn\tmp folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn\text-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn\props folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn\prop-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs\.svn folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\flgs folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn\tmp\text-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn\tmp\props folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn\tmp\prop-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn\tmp folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn\text-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn\props folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn\prop-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs\.svn folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\imgs folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\.svn\tmp\text-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\.svn\tmp\props folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\.svn\tmp\prop-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\.svn\tmp folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\.svn\text-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\.svn\props folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\.svn\prop-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content\.svn folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\content folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\components folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\.svn\tmp\text-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\.svn\tmp\props folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\.svn\tmp\prop-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\.svn\tmp folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\.svn\text-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\.svn\props folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\.svn\prop-base folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com\.svn folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@delta.com\META-INF folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@delta.com\content\imgs\flgs folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@delta.com\content\imgs folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@delta.com\content folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@delta.com\components folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@delta.com folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\plugin@yontoo.com\skin folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\plugin@yontoo.com\META-INF folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\plugin@yontoo.com\locale\en-US folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\plugin@yontoo.com\locale folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\plugin@yontoo.com\defaults\preferences folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\plugin@yontoo.com\defaults folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\plugin@yontoo.com\content folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\plugin@yontoo.com folder moved successfully.
      C:\Users\Vincent\AppData\Roaming\mozilla\firefox\profiles\kai4u6xi.default\searchplugins\delta.xml moved successfully.
      Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}\ not found.
      File C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\mestrim\ deleted successfully.
      C:\Windows\SysWOW64\config\systemprofile\AppData\Local\mestrim.dll moved successfully.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\yinghay\ deleted successfully.
      C:\Windows\SysWOW64\config\systemprofile\AppData\Local\yinghay.dll moved successfully.
      C:\Users\Vincent\AppData\Roaming\skype.ini moved successfully.
      C:\Users\Vincent\Application Data\Microsoft\Internet Explorer\Quick Launch\System Repair.lnk moved successfully.
      C:\Users\Vincent\Desktop\System Repair.lnk moved successfully.
      C:\ProgramData\-egidPXEnjJFr moved successfully.
      C:\ProgramData\-egidPXEnjJF moved successfully.
      C:\ProgramData\egidPXEnjJF moved successfully.
      C:\Users\Vincent\AppData\Roaming\CRDeltaTB folder moved successfully.
      C:\Users\Vincent\AppData\Local\Temp\dynuyn3qwicortgqvm06s4.exe moved successfully.
      C:\Users\Vincent\AppData\Roaming\NCH Software\Components\oggenc\oggenc.exe moved successfully.
      C:\Users\Vincent\AppData\Roaming\Upgusa\koez.exe moved successfully.

      OTL by OldTimer - Version 3.2.69.0 log created on 03182013_184124
      1. Modérateur
        Reste pas mal de merdouilles :/

        Désinstalle Yahoo Toolbar.
        Désinstalle Spybot, dépassé et inefficace.

        Relance OTL.
        o sous Persfonnalisation (Custom Scan), copie_colle le contenu du cadre ci dessous (bien prendre :OTL en début).
        Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:

        :OTL
        FF - prefs.js..browser.search.param.yahoo-fr: chr-greentree_ff&type=867034&ilc=12
        FF - prefs.js..browser.search.selectedEngine: Ask.com
        FF - prefs.js..browser.startup.homepage: http://search.babylon.com/?babsrc=HP_ss&mntrId=224ce0c2000000000000c417fec4e12b&tlver=1.4.19.19&affID=17160 <b>[Pays US - 65.60.5.200]</b>
        FF - prefs.js..extensions.enabledAddons: ffxtlbr@babylon.com:1.1.3
        FF - prefs.js..extensions.enabledAddons: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.3
        FF - prefs.js..extensions.enabledAddons: dealio@mybrowserbar.com:4.6
        FF - prefs.js..extensions.enabledAddons: wtxpcom@mybrowserbar.com:4.6
        FF - prefs.js..extensions.enabledAddons: {F0E1168A-B4B5-484C-B77E-0D28E6B64096}:1.0
        [2012/01/21 04:41:46 | 000,000,000 | ---D | M] (RechercherWeb Toolbar) -- C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\{1CB94A15-4515-4A88-A296-36DDCA34AF50}
        [2011/12/20 15:59:23 | 000,000,000 | ---D | M] (Complitly - Speed up your search with your personal search suggestions tool) -- C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\{33e0daa6-3af3-d8b5-6752-10e949c61516}
        [2011/07/20 16:52:07 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
        [2011/05/29 14:32:06 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@babylon.com
        [2013/01/22 21:01:38 | 000,000,000 | ---D | M] (Delta Toolbar) -- C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\ffxtlbr@delta.com
        [2012/06/02 22:59:19 | 000,000,000 | ---D | M] (Yontoo) -- C:\Users\Vincent\AppData\Roaming\mozilla\Firefox\Profiles\kai4u6xi.default\extensions\plugin@yontoo.com
        [2013/01/22 21:02:08 | 000,001,294 | ---- | M] () -- C:\Users\Vincent\AppData\Roaming\mozilla\firefox\profiles\kai4u6xi.default\searchplugins\delta.xml
        O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
        O20 - Winlogon\Notify\mestrim: DllName - (C:\Windows\system32\config\systemprofile\AppData\Local\mestrim.dll) - C:\Windows\SysWOW64\config\systemprofile\AppData\Local\mestrim.dll ()
        O20 - Winlogon\Notify\yinghay: DllName - (C:\Windows\system32\config\systemprofile\AppData\Local\yinghay.dll) - C:\Windows\SysWOW64\config\systemprofile\AppData\Local\yinghay.dll ()
        [2013/03/17 01:24:17 | 000,000,004 | ---- | M] () -- C:\Users\Vincent\AppData\Roaming\skype.ini
        [2013/03/11 22:27:30 | 000,001,516 | ---- | M] () -- C:\Users\Vincent\Application Data\Microsoft\Internet Explorer\Quick Launch\System Repair.lnk
        [2013/03/11 22:27:30 | 000,001,492 | ---- | M] () -- C:\Users\Vincent\Desktop\System Repair.lnk
        [2013/03/11 22:27:12 | 000,000,176 | ---- | M] () -- C:\ProgramData\-egidPXEnjJFr
        [2013/03/11 22:27:12 | 000,000,176 | ---- | M] () -- C:\ProgramData\-egidPXEnjJF
        [2013/03/11 22:27:04 | 000,000,168 | ---- | M] () -- C:\ProgramData\egidPXEnjJF
        [2013/01/22 21:01:55 | 000,000,000 | ---D | M] -- C:\Users\Vincent\AppData\Roaming\CRDeltaTB
        [2013/03/17 01:13:29 | 000,063,488 | ---- | M] () -- C:\Users\Vincent\AppData\Local\Temp\dynuyn3qwicortgqvm06s4.exe
        [2007/08/29 14:36:06 | 000,155,136 | ---- | M] () -- C:\Users\Vincent\AppData\Roaming\NCH Software\Components\oggenc\oggenc.exe
        [2012/05/22 11:28:07 | 000,324,608 | ---- | M] (§¬§à§â§á§à§â§Ñ§è§Ú§ñ §®§Ñ§Û§Ü§â§à§ã§à§æ§ä) -- C:\Users\Vincent\AppData\Roaming\Upgusa\koez.exe
        :files
        C:\Windows\tasks\At*.job


        * redemarre le pc sous windows et poste le rapport ici
        1. Adw Cleaner m'a fait deux rapports étrangement, les voici :

          Le 1er :

          # AdwCleaner v2.114 - Rapport créé le 17/03/2013 à 15:45:05
          # Mis à jour le 05/03/2013 par Xplode
          # Système d'exploitation : Windows 7 Home Premium (64 bits)
          # Nom d'utilisateur : Vincent - VINCENT-PC
          # Mode de démarrage : Normal
          # Exécuté depuis : C:\Users\Vincent\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7V562DQ5\adwcleaner.exe
          # Option [Suppression]

          ***** [Services] *****

          Voilà le 2ème :

          # AdwCleaner v2.114 - Rapport créé le 17/03/2013 à 15:46:51
          # Mis à jour le 05/03/2013 par Xplode
          # Système d'exploitation : Windows 7 Home Premium (64 bits)
          # Nom d'utilisateur : Vincent - VINCENT-PC
          # Mode de démarrage : Normal
          # Exécuté depuis : C:\Users\Vincent\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7V562DQ5\adwcleaner.exe
          # Option [Suppression]

          ***** [Services] *****

          ***** [Fichiers / Dossiers] *****

          Dossier Supprimé : C:\Program Files (x86)\Ask.com
          Dossier Supprimé : C:\Program Files (x86)\Complitly
          Dossier Supprimé : C:\Program Files (x86)\Conduit
          Dossier Supprimé : C:\Program Files (x86)\ConduitEngine
          Dossier Supprimé : C:\Program Files (x86)\Delta
          Dossier Supprimé : C:\Program Files (x86)\FREEzeFrog
          Dossier Supprimé : C:\Program Files (x86)\Productivity_2.2
          Dossier Supprimé : C:\Program Files (x86)\RechercherWeb Toolbar
          Dossier Supprimé : C:\Program Files (x86)\Search Settings
          Dossier Supprimé : C:\Program Files (x86)\Softonic_France
          Dossier Supprimé : C:\Program Files (x86)\SweetIM
          Dossier Supprimé : C:\ProgramData\Ask
          Dossier Supprimé : C:\ProgramData\Babylon
          Dossier Supprimé : C:\ProgramData\BrowserProtect
          Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Finder
          Dossier Supprimé : C:\ProgramData\SweetIM
          Dossier Supprimé : C:\ProgramData\Tarma Installer
          Dossier Supprimé : C:\Users\Vincent\AppData\Local\Conduit
          Dossier Supprimé : C:\Users\Vincent\AppData\Local\OpenCandy
          Dossier Supprimé : C:\Users\Vincent\AppData\LocalLow\BabylonToolbar
          Dossier Supprimé : C:\Users\Vincent\AppData\LocalLow\Conduit
          Dossier Supprimé : C:\Users\Vincent\AppData\LocalLow\ConduitEngine
          Dossier Supprimé : C:\Users\Vincent\AppData\LocalLow\PriceGong
          Dossier Supprimé : C:\Users\Vincent\AppData\LocalLow\Productivity_2.2
          Dossier Supprimé : C:\Users\Vincent\AppData\LocalLow\ShoppingReport2
          Dossier Supprimé : C:\Users\Vincent\AppData\LocalLow\Softonic_France
          Dossier Supprimé : C:\Users\Vincent\AppData\LocalLow\Toolbar4
          Dossier Supprimé : C:\Users\Vincent\AppData\Roaming\Babylon
          Dossier Supprimé : C:\Users\Vincent\AppData\Roaming\Complitly
          Dossier Supprimé : C:\Users\Vincent\AppData\Roaming\Delta
          Dossier Supprimé : C:\Users\Vincent\AppData\Roaming\Media Finder
          Dossier Supprimé : C:\Users\Vincent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect
          Dossier Supprimé : C:\Users\Vincent\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com
          Dossier Supprimé : C:\Users\Vincent\AppData\Roaming\OfferBox
          Dossier Supprimé : C:\Windows\Installer\{0965F857-DAAD-4F93-8054-0E2EC3C8C5B0}
          Dossier Supprimé : C:\Windows\Installer\{5B58EF61-85F2-4977-97A5-84C19F926579}
          Dossier Supprimé : C:\Windows\Installer\{FB697452-8CA4-46B4-98B1-165C922A2EF3}
          Fichier Supprimé : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
          Fichier Supprimé : C:\user.js
          Fichier Supprimé : C:\Users\Vincent\Documents\sweetpcfix.url

          ***** [Registre] *****

          Clé Supprimée : HKCU\Software\AppDataLow\Software\Conduit
          Clé Supprimée : HKCU\Software\AppDataLow\Software\conduitEngine
          Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong
          Clé Supprimée : HKCU\Software\AppDataLow\Software\Productivity_2.2
          Clé Supprimée : HKCU\Software\AppDataLow\Software\ShoppingReport2
          Clé Supprimée : HKCU\Software\AppDataLow\Software\SmartBar
          Clé Supprimée : HKCU\Software\AppDataLow\Software\Softonic_France
          Clé Supprimée : HKCU\Software\AppDataLow\Toolbar
          Clé Supprimée : HKCU\Software\Complitly
          Clé Supprimée : HKCU\Software\Conduit
          Clé Supprimée : HKCU\Software\Delta
          Clé Supprimée : HKCU\Software\InstallCore
          Clé Supprimée : HKCU\Software\MediaFinder
          Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Download with &Media Finder
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4DAAC69C-CBA7-45E2-9BC8-1044483D3352}
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E84CC2C1-B722-48FC-A39C-EDB8B525C777}
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4DAAC69C-CBA7-45E2-9BC8-1044483D3352}
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E84CC2C1-B722-48FC-A39C-EDB8B525C777}
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
          Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
          Clé Supprimée : HKCU\Software\Offerbox
          Clé Supprimée : HKCU\Software\Softonic
          Clé Supprimée : HKCU\Software\594da8ae13cbf43
          Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
          Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
          Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}
          Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
          Clé Supprimée : HKLM\Software\Babylon
          Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
          Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
          Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
          Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
          Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{AD25754E-D76C-42B3-A335-2F81478B722F}
          Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
          Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
          Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
          Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
          Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
          Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\Complitly.DLL
          Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escort.DLL
          Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
          Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
          Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
          Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
          Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
          Clé Supprimée : HKLM\SOFTWARE\Classes\Conduit.Engine
          Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltaappCore
          Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
          Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltadskBnd
          Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
          Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltaHlpr
          Clé Supprimée : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
          Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPane
          Clé Supprimée : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
          Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
          Clé Supprimée : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
          Clé Supprimée : HKLM\Software\Classes\Installer\Features\16FE85B52F587794795A481CF9295697
          Clé Supprimée : HKLM\Software\Classes\Installer\Features\254796BF4AC84B64891B61C529A2E23F
          Clé Supprimée : HKLM\Software\Classes\Installer\Features\758F5690DAAD39F40845E0E23C8C5C0B
          Clé Supprimée : HKLM\Software\Classes\Installer\Products\16FE85B52F587794795A481CF9295697
          Clé Supprimée : HKLM\Software\Classes\Installer\Products\254796BF4AC84B64891B61C529A2E23F
          Clé Supprimée : HKLM\Software\Classes\Installer\Products\758F5690DAAD39F40845E0E23C8C5C0B
          Clé Supprimée : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
          Clé Supprimée : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1
          Clé Supprimée : HKLM\SOFTWARE\Classes\MF
          Clé Supprimée : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
          Clé Supprimée : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1
          Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
          Clé Supprimée : HKLM\SOFTWARE\Classes\sim-packages
          Clé Supprimée : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO
          Clé Supprimée : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO.1
          Clé Supprimée : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
          Clé Supprimée : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
          Clé Supprimée : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
          Clé Supprimée : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
          Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2542115
          Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2903601
          Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
          Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
          Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
          Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
          Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
          Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
          Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
          Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
          Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{AD25754E-D76C-42B3-A335-2F81478B722F}
          Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
          Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC}
          Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}
          Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
          Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
          Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
          Clé Supprimée : HKLM\Software\Conduit
          Clé Supprimée : HKLM\Software\conduitEngine
          Clé Supprimée : HKLM\Software\DataMngr
          Clé Supprimée : HKLM\Software\Delta
          Clé Supprimée : HKLM\Software\FREEzeFrog
          Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BabylonToolbarsrv_RASAPI32
          Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BabylonToolbarsrv_RASMANCS
          Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32
          Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS
          Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
          Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
          Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32
          Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS
          Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASAPI32
          Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
          Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
          Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
          Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4284231D-32D2-453D-B268-3D8C42851871}
          Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{876D4EA3-E839-49F9-9BDD-5878D503F128}
          Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
          Clé Supprimée : HKLM\Software\Offerbox
          Clé Supprimée : HKLM\Software\Productivity_2.2
          Clé Supprimée : HKLM\Software\SimplyGen
          Clé Supprimée : HKLM\Software\Softonic_France
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\594da8ae13cbf43
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4284231D-32D2-453D-B268-3D8C42851871}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4DAAC69C-CBA7-45E2-9BC8-1044483D3352}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{76C45B18-A29E-43EA-AAF8-AF55C2E1AE17}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7CD74AFF-3433-4E34-92E2-D98DFDB30754}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{876D4EA3-E839-49F9-9BDD-5878D503F128}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{96EF404C-24C7-43D0-9096-4CCC8BB7CCAC}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{97720195-206A-42AE-8E65-260B9BA5589F}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{986F7A5A-9676-47E1-8642-F41F8C3FCF82}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B18788A4-92BD-440E-A4D1-380C36531119}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E84CC2C1-B722-48FC-A39C-EDB8B525C777}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dednnpigldgdbpgcdpfppmlcnnbjciel
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dlfienamagdnkekbbbocojppncdambda
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\lpmkgpnbiojfaoklbkpfneikocaobfai
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{15199B0E-74DC-45CE-BB78-FE4DD0A4D6E7}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{196C1FDE-1D7B-451A-BF34-A8A76BA8E7A3}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2BDD859D-7D3C-4661-AA6C-4C09F6C1EB41}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{938803CE-0748-4E3A-B5F4-28050CBFA10F}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4DAAC69C-CBA7-45E2-9BC8-1044483D3352}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E84CC2C1-B722-48FC-A39C-EDB8B525C777}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{0965F857-DAAD-4F93-8054-0E2EC3C8C5B0}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4FFBB818-B13C-11E0-931D-B2664824019B}_is1
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5B58EF61-85F2-4977-97A5-84C19F926579}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FB697452-8CA4-46B4-98B1-165C922A2EF3}
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Delta
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Productivity_2.2 Toolbar
          Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Softonic_France Toolbar
          Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
          Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
          Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
          Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64}
          Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
          Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288}
          Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
          Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
          Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
          Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
          Clé Supprimée : HKLM\SOFTWARE\Tarma Installer
          Clé Supprimée : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
          Clé Supprimée : HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{4B8C28A7-A9BC-45F8-990D-21499EED643C}
          Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
          Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{4DAAC69C-CBA7-45E2-9BC8-1044483D3352}]
          Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
          Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E84CC2C1-B722-48FC-A39C-EDB8B525C777}]
          Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{4DAAC69C-CBA7-45E2-9BC8-1044483D3352}]
          Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{E84CC2C1-B722-48FC-A39C-EDB8B525C777}]
          Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{4DAAC69C-CBA7-45E2-9BC8-1044483D3352}]
          Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{E84CC2C1-B722-48FC-A39C-EDB8B525C777}]
          Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SweetIM]
          Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Sweetpacks Communicator]
          Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
          Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]
          Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{30F9B915-B755-4826-820B-08FBA6BD249D}]
          Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{4DAAC69C-CBA7-45E2-9BC8-1044483D3352}]
          Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]
          Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{E84CC2C1-B722-48FC-A39C-EDB8B525C777}]
          Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{EEE6C35B-6118-11DC-9C72-001320C79847}]

          ***** [Navigateurs] *****

          -\\ Internet Explorer v9.0.8112.16464

          Remplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=224ce0c2000000000000c417fec4e12b&tlver=1.4.19.19&affID=17160 --> hxxp://www.google.com

          *************************

          AdwCleaner[S1].txt - [420 octets] - [17/03/2013 15:45:05]
          AdwCleaner[S2].txt - [24443 octets] - [17/03/2013 15:46:51]

          ########## EOF - C:\AdwCleaner[S2].txt - [24504 octets] ##########

          J'attends le scan OTL qui est assez long...
          1. Modérateur
            Good!

            Télécharge http://general-changelog-team.fr/telechargements/logiciels/viewdownload/75-outils-de-xplode/28-adwcleaner AdwCleaner ( d'Xplode ) sur ton bureau.
            Lance le, clique sur [Suppression] puis patiente le temps du scan (Pas besoin de faire de Recherche avant).
            Une fois le scan fini, un rapport s'ouvrira. Poste le contenu du rapport dans ta prochaine réponse par un copier/coller.
            Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

            Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

            puis :

            Fais un scan OTL

            Tu peux suivre les indications de cette page pour t'aider : https://www.malekal.com/tutorial-otl/

            * Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau.
            (Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)

            * Lance OTL
            * Sous Peronnalisation, copie-colle ce qu'il y a dans le cadre ci-dessous :
            netsvcs
            msconfig
            safebootminimal
            safebootnetwork
            activex
            drivers32
            %ALLUSERSPROFILE%\Application Data\*.
            %ALLUSERSPROFILE%\Application Data\*.exe /s
            %APPDATA%\*.
            %APPDATA%\*.exe /s
            %temp%\*.exe /s
            %SYSTEMDRIVE%\*.exe
            %systemroot%\*. /mp /s
            %systemroot%\system32\*.dll /lockedfiles
            %systemroot%\Tasks\*.job /lockedfiles
            %systemroot%\system32\drivers\*.sys /lockedfiles
            %systemroot%\System32\config\*.sav
            /md5start
            explorer.exe
            winlogon.exe
            wininit.exe
            /md5stop
            HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems /s
            CREATERESTOREPOINT
            nslookup www.google.fr /c
            SAVEMBR:0
            hklm\software\clients\startmenuinternet|command /rs
            hklm\software\clients\startmenuinternet|command /64 /rs


            * Clique sur le bouton Analyse.
            * Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer les rapports.
            Donnes le liens pjjoint ici ensuite pour pouvoir être consultés.

            1. Modérateur
              Est-ce que TDSSKiller se lance maintenant ?
              Si oui donne le rapport.
              1. Modérateur
                Salut,

                Créer un point de restauration : https://www.malekal.com/restauration-systeme-windows/

                Télécharge et installe Malwarebyte MBAR : https://www.malekal.com/malwarebytes-anti-rootkit-mbar-beta/
                Mets le à jour, fais un scan rapide, supprime tout et poste le rapport ici.
                Enregistre le rapport sur http://pjjoint.malekal.com
                Donne le lien pjjoint ici.

                Like the angel you are, you laugh creating a lightness in my chest,
                Your eyes they penetrate me,
                (Your answer's always 'maybe')
                That's when I got up and left