suppression de snap-do Résolu

Question

bonjour après multiple essai je n arrive toujours pas a me débarrasser de ce virus snap-do je vous mais le résumé de ADW si quelqu'un peut m aider merci d avance 



AdwCleaner# AdwCleaner v2.303 - Rapport créé le 26/06/2013 à 18:12:52
# Mis à jour le 08/06/2013 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : Moi - MOI-PC
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users\Moi\Downloads\adwcleaner.exe
# Option [Recherche]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Dossier Présent : C:\Program Files (x86)\Common Files\AVG Secure Search

***** [Registre] *****

Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com
Clé Présente : HKCU\Software\SmartBar
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Clé Présente : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Clé Présente : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Clé Présente : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Clé Présente : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Clé Présente : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Clé Présente : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions
dibdjnfmopecpmkdieinmbadjfpblof
Clé Présente : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Valeur Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]

***** [Navigateurs] *****

-\ Internet Explorer v10.0.9200.16611

[OK] Le registre ne contient aucune entrée illégitime.

-\ Google Chrome v27.0.1453.116

Fichier : C:\Users\Moi\AppData\Local\Google\Chrome\User Data\Default\Preferences

Présente [l.3220] : urls_to_restore_on_startup = [ "hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=FR&userid=7ce022c4-3b66-48e8-8bab-

7e23207bbf6f&searchtype=hp&installDate=18/02/2013" ]

*************************

AdwCleaner[R1].txt - [1657 octets] - [24/04/2013 20:05:43]
AdwCleaner[R2].txt - [1717 octets] - [24/04/2013 20:07:41]
AdwCleaner[R3].txt - [2988 octets] - [26/06/2013 18:09:50]
AdwCleaner[R4].txt - [2765 octets] - [26/06/2013 18:12:52]
AdwCleaner[S1].txt - [20148 octets] - [15/04/2013 19:54:55]
AdwCleaner[S2].txt - [1712 octets] - [24/04/2013 20:07:53]
AdwCleaner[S3].txt - [401 octets] - [26/06/2013 18:11:04]
AdwCleaner[S4].txt - [354 octets] - [26/06/2013 18:12:33]

########## EOF - C:\AdwCleaner[R4].txt - [3064 octets] ##########

H.A.W.X · Answer

Bonjour,

Je voudrais cependant que tu appliques ses deux règles :

TOUT LES OUTILS DOIVENT ETRE LANCES DEPUIS LE BUREAU !!! 
TOUT LES RAPPORTS SONT A METTRE SUR http://upload.sosvirus.net/

La désinfection ne devrait pas durer trop longtemps ;)

---------------

Fais ceci :
~ http://sosvirus.net/viewtopic.php?f=281&t=546

Puis :
~ https://www.sosvirus.net/#p4943

J'attends donc 2 rapports :
~ Adwcleaner.txt ( sur http://upload.sosvirus.net/ )
~ ZHPscan.txt ( sur http://upload.sosvirus.net/ )

mevla77 · Answer

bonsoir 

voici les rapports:

http://upload.sosvirus.net/images/2013/06/30/zhp.png

http://upload.sosvirus.net/images/2013/06/30/adw.png

merci d avance

H.A.W.X · Answer

Bonsoir,

Tu m'as fais des screen shoot, je te demande les rapports au format texte stp ;)
Et, de les mettre sur SOSUpload ;)

Les deux rapports se trouvent ici :
C:\Adwcleaner[S1].txt
Et l'autres recommences, et fais moi un copier collé ici stp comme demandé :

"Une fois le scan terminé, copie/colle le contenue de la fenêtre dans ta prochaine réponse."

mevla77 · Answer

bonsoir 

je retente :)



Rapport de ZHPDiag v2013.7.1.1 par Nicolas Coolman, Update du 01/07/2013
Run by Moi at 01/07/2013 20:23:16
WebSite: https://nicolascoolman.webs.com/
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
State : Version à jour.
WhiteList : Enable
High Elevated Privileges : OK
UAC : Activate by user

Boot mode: Normal (Normal boot)
Logged in as Administrator


---\ Web Browser
MSIE: Internet Explorer v10.0.9200.16618
GCIE: Google Chrome v27.0.1453.116 (Defaut)

---\ Processus lancés
[MD5.9389FF4D36E99352E440CCBEB17C884E] - (.AVG - PC Tuneup 2011.) -- C:\Program Files (x86)\AVG\AVG PC Tuneup\BoostSpeed.exe   [803144] [PID.2620]
[MD5.390679F7A217A5E73D756276C40AE887] - (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe   [2260480] [PID.2932]
[MD5.554A50B5310E702029D3A675459108FF] - (.Hewlett-Packard - hpsysdrv.) -- C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe   [62768] [PID.3408]
[MD5.852F12CA7C4FC7E3D77B606492435556] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe   [284696] [PID.3416]
[MD5.58C336B8D6744F7E7B895748F3C92CEA] - (.Research In Motion Limited - Launch Agent Service.) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe   [90448] [PID.3464]
[MD5.C637FC4638A96165256B28D38DE7B953] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\hp\HP Software Update\hpwuschd2.exe   [49208] [PID.3480]
[MD5.9DADF1A809ECEC86F04BDE35190D59FE] - (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe   [3147384] [PID.3548]
[MD5.8E2A7F1F62467A7DCB8AB2C0642F47CA] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe   [152392] [PID.3556]
[MD5.66275E52615AF9D2F18EB3442D00CFE3] - (.CyberLink - CyberLink MediaLibray Service.) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe   [210216] [PID.3176]
[MD5.F183E0513CC0B8CDB8D22D46E10C3835] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [7629824] [PID.1284]
[MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe   [65640] [PID.1812]
[MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe   [57008] [PID.1924]
[MD5.D0BE22C910E46550C6308D50DDA76B94] - (.AVG Technologies CZ, s.r.o. - AVG Firewall Service.) -- C:\Program Files (x86)\AVG\AVG2013\avgfws.exe   [1342024] [PID.1968]
[MD5.4AFC14AFA58878FAA1D249E7E90EA54B] - (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) -- C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe   [5814904] [PID.1996]
[MD5.6B72E1E329C4E98C6B6FDD2D265E3BA3] - (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) -- C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe   [196664] [PID.1252]
[MD5.141673E69CFDCF0B1531616343223EE4] - (.devolo AG - devolo Network Service.) -- C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe   [3128856] [PID.2736]
[MD5.2238B91AC1A12CC6CC4C4FED41258B2A] - (.Hewlett-Packard Company - LightScribe Service.) -- c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe   [73728] [PID.1068]
[MD5.65085456FD9A74D7F1A999520C299ECB] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe   [418376] [PID.2072]
[MD5.7493EA4DE41348F7D3EDBF9DB298F56A] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe   [13336] [PID.3256]
[MD5.794D4B48DFB6E999537C7C3947863463] - (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe   [1153368] [PID.3696]
~ Processes Running:  Scanned in 00mn 00s



---\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Moi\AppData\Local\Google\Chrome\User Data\Default\Preferences
G0 - GCSP: Preference [User Data\Default] https://search.safefinder.com/?q=  =>Hijacker.SmartBar
G2 - GCE: Preference [User Data\Default] [nikpibnbobmbdbheedjfogjlikpgpnhp] DVDVideoSoft v.1.2.3.3, (Désactivé)
G2 - GCE: Preference [User Data\Default] [ooaacmobbjgefehdfgmajemidjdkkdoo] Game Center v.1.1 (Activé)
~ Google Browser: 16 Legitimates Filtered in 00mn 10s



---\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s



---\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys:  Scanned in 00mn 00s



---\ Browser Helper Objects de navigateur (O2)
O2 - BHO: ToolbarOrange.InitToolbarBHO [64Bits] - {1d970ed5-3eda-438d-bffd-715931e2775b} . (...) -- mscoree.dll (.not file.)
O2 - BHO: DVDVideoSoft.WebPageAdjuster [64Bits] - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} . (.DVDVideoSoft Ltd. - DVDVideoSoft IE Extension.) -- C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
~ BHO: 6 Legitimates Filtered in 00mn 00s



---\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [SmartMenu] . (.Pas de propriétaire - SmartMenu.) -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe 
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe 
O4 - HKCU\..\Run: [SpybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe 
O4 - HKCU\..\Run: [orangeinside] . (...) -- C:\Users\Moi\AppData\Roaming\Orange\OrangeInside	wo\OrangeInside.exe 
O4 - HKLM\..\Wow6432Node\Run: [hpsysdrv] . (.Hewlett-Packard - hpsysdrv.) -- c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe 
O4 - HKLM\..\Wow6432Node\Run: [IAStorIcon] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe 
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe 
O4 - HKLM\..\Wow6432Node\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe (.not file.) 
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe 
O4 - HKLM\..\Wow6432Node\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe (.not file.)  =>Toolbar.AVGSearch
O4 - HKLM\..\Wow6432Node\Run: [RIMBBLaunchAgent.exe] . (.Research In Motion Limited - Launch Agent Service.) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe 
O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe 
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe 
O4 - HKLM\..\Wow6432Node\Run: [AVG_UI] . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe 
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-21-961287807-383622321-4240488152-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe 
O4 - HKUS\S-1-5-21-961287807-383622321-4240488152-1000\..\Run: [SpybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe 
O4 - HKUS\S-1-5-21-961287807-383622321-4240488152-1000\..\Run: [orangeinside] . (...) -- C:\Users\Moi\AppData\Roaming\Orange\OrangeInside	wo\OrangeInside.exe 
~ Application:  Scanned in 00mn 00s



---\ Autres liens utilisateurs (O4)
O4 - GS\TaskBar: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.)  -- C:\Windows\explorer.exe 
O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\QuickLaunch: AVG PC Tuneup 2011.lnk . (.AVG - PC Tuneup 2011.)  -- C:\Program Files (x86)\AVG\AVG PC Tuneup\BoostSpeed.exe 
O4 - GS\QuickLaunch: bwin Poker.lnk . (...)  -- C:\bwinPoker\StartBwin.fr.exe
O4 - GS\QuickLaunch: Google Chrome.lnk . (.Google Inc. - Google Chrome.)  -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\QuickLaunch: PokerStars.fr.lnk . (.PokerStars - PokerStars Update.)  -- C:\Program Files (x86)\PokerStars.FR\PokerStarsUpdate.exe 
O4 - GS\QuickLaunch: WildTangent Games App - hp.lnk . (.WildTangent - WildTangent Games App.)  -- C:\Program Files (x86)\WildTangent Games\App\GameConsole-wt.exe 
O4 - GS\QuickLaunch: Xilisoft Convertisseur Vidéo Ultimate 6.lnk . (...)  -- C:\Program Files (x86)\Xilisoft\Video Converter Ultimate 6\vcloader.exe
O4 - GS\QuickLaunch: µTorrent.lnk . (...)  -- C:\Program Files (x86)\uTorrent\uTorrent.exe (.not file.)  =>P2P.µTorrent
O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe 
O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.)  -- C:\Windows\system32\eudcedit.exe 
O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft  Windows Fax and Scan.)  -- C:\Windows\system32\WFS.exe 
O4 - GS\Desktop: AVG PC Tuneup 2011.lnk . (.AVG - PC Tuneup 2011.)  -- C:\Program Files (x86)\AVG\AVG PC Tuneup\BoostSpeed.exe 
O4 - GS\Desktop: CrystalDiskInfo.lnk . (.Crystal Dew World - CrystalDiskInfo.)  -- C:\Program Files (x86)\CrystalDiskInfo\DiskInfo.exe 
O4 - GS\Desktop: Disque dur (E) - Raccourci.lnk . (...)  -- E:\ 
O4 - GS\Desktop: Microsoft Word.lnk . (...)  -- C:\Windows\Installer\{911B040C-6000-11D3-8CFE-0050048383C9}\wordicon.exe
O4 - GS\Desktop: Movies2iPhone.lnk . (...)  -- C:\Program Files (x86)\Movies2iPhone\Movies2iPhone.exe
O4 - GS\Desktop: MVI_0982 - Raccourci.lnk . (...)  -- H:\DCIM\145___07\MVI_0982.MOV  (.not file.)
O4 - GS\Desktop: MVI_1204 - Raccourci.lnk . (...)  -- H:\DCIM\145___07\MVI_1204.MOV  (.not file.)
O4 - GS\Desktop: Ordinateur - Raccourci.lnk - Clé orpheline
O4 - GS\Desktop: Revo Uninstaller.lnk . (.VS Revo Group - Revo Uninstaller.)  -- C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe 
O4 - GS\Desktop: Spybot - Search & Destroy.lnk . (.Safer Networking Limited - Spybot - Search & Destroy.)  -- C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe 
O4 - GS\Desktop: Téléchargements - Raccourci.lnk . (...)  -- C:\Users\Moi\Downloads 
O4 - GS\Desktop: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.)  -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe 
~ Global Startup:  Scanned in 00mn 00s



---\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Free YouTube Download [64Bits] - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} . (...) -- C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\dvdvideosoft.ico
~ IE Extra Buttons:  Scanned in 00mn 00s



---\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{23C7863E-1504-438D-AC2E-6C11D8144851}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{23C7863E-1504-438D-AC2E-6C11D8144851}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{23C7863E-1504-438D-AC2E-6C11D8144851}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
~ Domain:  Scanned in 00mn 00s



---\ Protocole additionnel (O18)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll
~ Protocole Additionnel:  Scanned in 00mn 00s



---\ Malicius Software Information
~ http://nicolascoolman.webs.com/apps/blog/show/26990375-hijacker-smartbar   =>Hijacker.SmartBar
~ MSI: 2 link(s) detected in 00mn 00s



~ 55 Legitimates filtered by white list
End of the scan (164 lines in 00mn 16s)(0)




# AdwCleaner v2.200 - Rapport créé le 15/04/2013 à 19:54:55
# Mis à jour le 02/04/2013 par Xplode
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nom d'utilisateur : Moi - MOI-PC
# Mode de démarrage : Normal
# Exécuté depuis : C:\Users\Moi\Downloads\adwcleaner.exe
# Option [Suppression]


***** [Services] *****


***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Program Files (x86)\AVG Secure Search
Dossier Supprimé : C:\Program Files (x86)\Conduit
Dossier Supprimé : C:\Program Files (x86)\uTorrentBar_FR
Dossier Supprimé : C:\Program Files (x86)\Webplayer setup
Dossier Supprimé : C:\Program Files (x86)\Yontoo
Dossier Supprimé : C:\ProgramData\AVG Secure Search
Dossier Supprimé : C:\ProgramData\boost_interprocess
Dossier Supprimé : C:\ProgramData\Tarma Installer
Dossier Supprimé : C:\Users\Moi\AppData\Local\AVG Secure Search
Dossier Supprimé : C:\Users\Moi\AppData\Local\Conduit
Dossier Supprimé : C:\Users\Moi\AppData\Local\Ilivid Player
Dossier Supprimé : C:\Users\Moi\AppData\Local\lollipop
Dossier Supprimé : C:\Users\Moi\AppData\Local\Smartbar
Dossier Supprimé : C:\Users\Moi\AppData\Local\Temp\Smartbar
Dossier Supprimé : C:\Users\Moi\AppData\LocalLow\AVG Secure Search
Dossier Supprimé : C:\Users\Moi\AppData\LocalLow\Conduit
Dossier Supprimé : C:\Users\Moi\AppData\LocalLow\PriceGong
Dossier Supprimé : C:\Users\Moi\AppData\LocalLow\Searchqutoolbar
Dossier Supprimé : C:\Users\Moi\AppData\LocalLow\Smartbar
Dossier Supprimé : C:\Users\Moi\AppData\LocalLow\uTorrentBar_FR
Dossier Supprimé : C:\Users\Moi\AppData\Roaming\dvdvideosoftiehelpers
Fichier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBay.lnk
Supprimé au redémarrage : C:\Program Files (x86)\Common Files\AVG Secure Search
Supprimé au redémarrage : C:\Program Files (x86)\Searchqu Toolbar

***** [Registre] *****

Clé Supprimée : HKCU\Software\AppDataLow\Software\Conduit
Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong
Clé Supprimée : HKCU\Software\AppDataLow\Software\SmartBar
Clé Supprimée : HKCU\Software\AppDataLow\Software\uTorrentBar_FR
Clé Supprimée : HKCU\Software\AppDataLow\Toolbar
Clé Supprimée : HKCU\Software\AVG Secure Search
Clé Supprimée : HKCU\Software\DataMngr
Clé Supprimée : HKCU\Software\DataMngr_Toolbar
Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4F12-8568-69135F087DB0}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C9A6357B-25CC-4BCF-96C1-78736985D412}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C9A6357B-25CC-4BCF-96C1-78736985D412}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D6533F74-218B-41BE-9D91-5BD471FECFFD}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop
Clé Supprimée : HKCU\Software\SmartBar
Clé Supprimée : HKCU\Software\SmartbarBackup
Clé Supprimée : HKCU\Software\SmartbarLog
Clé Supprimée : HKCU\Software\Softonic
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Clé Supprimée : HKLM\Software\AVG Secure Search
Clé Supprimée : HKLM\Software\AVG Security Toolbar
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\BrowserConnection.dll
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\DNSBHO.dll
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Clé Supprimée : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Clé Supprimée : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Clé Supprimée : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Clé Supprimée : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Clé Supprimée : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Clé Supprimée : HKLM\SOFTWARE\Classes\BrowserConnection.Loader
Clé Supprimée : HKLM\SOFTWARE\Classes\BrowserConnection.Loader.1
Clé Supprimée : HKLM\SOFTWARE\Classes\DnsBHO.BHO
Clé Supprimée : HKLM\SOFTWARE\Classes\DnsBHO.BHO.1
Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.BandObjectAttribute
Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.BHO
Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.DockingPanel
Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBar
Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBarBandObject
Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarDisplayState
Clé Supprimée : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarMenuForm
Clé Supprimée : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
Clé Supprimée : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Clé Supprimée : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Clé Supprimée : HKLM\SOFTWARE\Classes\SearchBar.Client
Clé Supprimée : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
Clé Supprimée : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2851639
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{5B4144E1-B61D-495A-9A50-CD1A95D86D15}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{841D5A49-E48D-413C-9C28-EB3D9081D705}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Clé Supprimée : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Clé Supprimée : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Clé Supprimée : HKLM\Software\Conduit
Clé Supprimée : HKLM\Software\DataMngr
Clé Supprimée : HKLM\Software\Iminent
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D6533F74-218B-41BE-9D91-5BD471FECFFD}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Clé Supprimée : HKLM\Software\SearchquMediabarTb
Clé Supprimée : HKLM\Software\uTorrentBar_FR
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{9D717F81-9148-4F12-8568-69135F087DB0}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C9A6357B-25CC-4BCF-96C1-78736985D412}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D6533F74-218B-41BE-9D91-5BD471FECFFD}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions
iapdbllcanepiiimjjndipklodoedlc
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0AA0A556-0197-45EF-95E1-29F0B7503E50}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9E2994F9-CD9E-4E30-86A8-150C84A51B2D}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Searchqu Toolbar
Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentBar_FR Toolbar
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{9D717F81-9148-4F12-8568-69135F087DB0}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Clé Supprimée : HKLM\SOFTWARE\DataMngr
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Clé Supprimée : HKLM\SOFTWARE\Tarma Installer
Donnée Supprimée : [x64] HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll
Donnée Supprimée : [x64] HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll
Donnée Supprimée : HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~2\SEARCH~1\Datamngr\datamngr.dll
Donnée Supprimée : HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~2\SEARCH~1\Datamngr\IEBHO.dll
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}]
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Infrastructure Helper]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]
Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E}]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{C9A6357B-25CC-4BCF-96C1-78736985D412}]
Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [10]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]

***** [Navigateurs] *****

-\ Internet Explorer v10.0.9200.16537

Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=FR&userid=7ce022c4-3b66-48e8-8bab-7e23207bbf6f&searchtype=hp&installDate=18/02/2013 --> hxxp://www.google.com
Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Page] = hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=FR&userid=7ce022c4-3b66-48e8-8bab-7e23207bbf6f&searchtype=ds&q={searchTerms}&installDate=18/02/2013 --> hxxp://www.google.com
Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=FR&userid=7ce022c4-3b66-48e8-8bab-7e23207bbf6f&searchtype=ds&q={searchTerms}&installDate=18/02/2013 --> hxxp://www.google.com
Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=FR&userid=7ce022c4-3b66-48e8-8bab-7e23207bbf6f&searchtype=ds&q={searchTerms}&installDate=18/02/2013 --> hxxp://www.google.com
Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=FR&userid=7ce022c4-3b66-48e8-8bab-7e23207bbf6f&searchtype=ds&q={searchTerms}&installDate=18/02/2013 --> hxxp://www.google.com
Remplacé : [HKCU\Software\Microsoft\Internet Explorer\SearchUrl - Default] = hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=FR&userid=7ce022c4-3b66-48e8-8bab-7e23207bbf6f&searchtype=ds&q={searchTerms}&installDate=18/02/2013 --> hxxp://www.google.com

-\ Google Chrome v26.0.1410.64

Fichier : C:\Users\Moi\AppData\Local\Google\Chrome\User Data\Default\Preferences

Supprimée [l.46] : search_url = "hxxp://dts.search-results.com/sr?src=crb&appid=161&systemid=406&sr=0&q={searchT[...]
Supprimée [l.2613] : urls_to_restore_on_startup = [ "hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=FR[...]

*************************

AdwCleaner[S1].txt - [20071 octets] - [15/04/2013 19:54:55]

########## EOF - C:\AdwCleaner[S1].txt - [20132 octets] ##########


voila j'espère que ça ira 

merci

H.A.W.X · Answer

Bonsoir,

Ok, on élargie le scan pour éliminé les restes ;)

Ceci :
~ http://sosvirus.net/viewtopic.php?f=281&t=576

J'attends donc 1 rapport :
¤ ZHPDiag.txt ( sur http://upload.sosvirus.net/ )

mevla77 · Answer

Rapport de ZHPDiag v2013.7.1.1 par Nicolas Coolman, Update du 01/07/2013 Run by Moi at 02/07/2013 23:31:49 WebSite: https://nicolascoolman.webs.com/ State : Version à jour. WhiteList : Enable High Elevated Privileges : OK UAC : Deactivate by program ---\ Web Browser MSIE: Internet Explorer v10.0.9200.16618 GCIE: Google Chrome v27.0.1453.116 (Defaut) ---\ Windows Product Information ~ Langage: Français Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) Windows Server License Manager Script : OK ~ Windows(R) 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : 3Q6C9 Windows License : OK ~ Windows Remaining Initializations Number : 3 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\ System Protection AVG 2013 v13.0.2904 Malwarebytes Anti-Malware version 1.75.0.1300 Spybot - Search & Destroy v1.6.2 Windows Defender W7 ---\ System Optimizer CCleaner v3.28 =>Piriform Ltd ---\ Peer To Peer (P2P) µTorrent v3.0.0 =>P2P.µTorrent ---\ Software Update Adobe Flash Player 11 ActiveX Adobe Reader XI ---\ System Information ~ Processor: Intel64 Family 6 Model 37 Stepping 2, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 6071 MB (64% free) System Restore: Activé (Enable) System drive C: has 474 GB (51%) free of 919 GB ---\ Logged in mode ~ Computer Name: MOI-PC ~ User Name: Moi ~ All Users Names: Moi, HomeGroupUser$, ASPNET, Administrateur, ~ Unselected Option: None Logged in as Administrator ---\ Environnement Variables ~ System Unit : C:\ ~ %AppData% : C:\Users\Moi\AppData\Roaming\ ~ %Desktop% : C:\Users\Moi\Desktop\ ~ %Favorites% : C:\Users\Moi\Favorites\ ~ %LocalAppData% : C:\Users\Moi\AppData\Local\ ~ %StartMenu% : C:\Users\Moi\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\ DOS/Devices C:\ Hard drive, Flash drive, Thumb drive (Free 474 Go of 919 Go) D:\ Hard drive, Flash drive, Thumb drive (Free 2 Go of 13 Go) E:\ Hard drive, Flash drive, Thumb drive (Free 787 Go of 932 Go) F:\ CD-ROM drive (Free 0 Go of 0 Go) G:\ CD-ROM drive (Not Inserted) I:\ Floppy drive, Flash card reader, USB Key (Not Inserted) J:\ Floppy drive, Flash card reader, USB Key (Not Inserted) K:\ Floppy drive, Flash card reader, USB Key (Not Inserted) L:\ Floppy drive, Flash card reader, USB Key (Not Inserted) ---\ Security Center & Tools Informations [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified ~ Security Center: 32 Legitimates Filtered in 00mn 00s ---\ Recherche particulière de fichiers génériques [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.12716D987D475B051F35895659159705] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.17/05/2013 - 01:59:03.) -- C:\Windows\System32\wininet.dll [2241024] [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.20/11/2010 - 14:25:30.) -- C:\Windows\System32\Winlogon.exe [390656] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.1C7857B62DE5994A75B054A9FD4C3825] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/12/2011 - 04:59:24.) -- C:\Windows\system32\Drivers\AFD.sys [498688] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers etBT.sys [261632] [MD5.B98F8C6E31CD07B2E6F71F7F648E38C0] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.12/04/2013 - 15:45:08.) -- C:\Windows\system32\Drivers tfs.sys [1656680] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.20/11/2010 - 10:21:56.) -- C:\Windows\system32\Drivers dx.sys [119296] [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808] ~ Generic Processes: Scanned in 00mn 00s ---\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 2/7176 ~ Mes musiques (My Musics) : 4/827 ~ Mes Favoris (My Favorites) : 1/21 ~ Mes Documents (My Documents) : 1/18096 ~ Mon Bureau (My Desktop) : 1/733 ~ Menu demarrer (Programs) : 1/28 ~ Hidden Files: Scanned in 00mn 16s ---\ Processus lancés [MD5.390679F7A217A5E73D756276C40AE887] - (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2260480] [PID.2412] [MD5.554A50B5310E702029D3A675459108FF] - (.Hewlett-Packard - hpsysdrv.) -- C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe [62768] [PID.2492] [MD5.852F12CA7C4FC7E3D77B606492435556] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696] [PID.2772] [MD5.58C336B8D6744F7E7B895748F3C92CEA] - (.Research In Motion Limited - Launch Agent Service.) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [90448] [PID.2948] [MD5.C637FC4638A96165256B28D38DE7B953] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\hp\HP Software Update\hpwuschd2.exe [49208] [PID.2960] [MD5.9DADF1A809ECEC86F04BDE35190D59FE] - (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe [3147384] [PID.2976] [MD5.9389FF4D36E99352E440CCBEB17C884E] - (.AVG - PC Tuneup 2011.) -- C:\Program Files (x86)\AVG\AVG PC Tuneup\BoostSpeed.exe [803144] [PID.3220] [MD5.8E2A7F1F62467A7DCB8AB2C0642F47CA] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392] [PID.3376] [MD5.66275E52615AF9D2F18EB3442D00CFE3] - (.CyberLink - CyberLink MediaLibray Service.) -- c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe [210216] [PID.4528] [MD5.5521928AA79079565B7CB8FCE6806131] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [825808] [PID.6708] [MD5.F183E0513CC0B8CDB8D22D46E10C3835] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [7629824] [PID.4692] [MD5.ADDA5E1951B90D3D23C56D3CF0622ADC] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [65640] [PID.1752] [MD5.4FE5C6D40664AE07BE5105874357D2ED] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [57008] [PID.1800] [MD5.D0BE22C910E46550C6308D50DDA76B94] - (.AVG Technologies CZ, s.r.o. - AVG Firewall Service.) -- C:\Program Files (x86)\AVG\AVG2013\avgfws.exe [1342024] [PID.1840] [MD5.4AFC14AFA58878FAA1D249E7E90EA54B] - (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) -- C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [5814904] [PID.1904] [MD5.6B72E1E329C4E98C6B6FDD2D265E3BA3] - (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) -- C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [196664] [PID.2196] [MD5.141673E69CFDCF0B1531616343223EE4] - (.devolo AG - devolo Network Service.) -- C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3128856] [PID.2248] [MD5.2238B91AC1A12CC6CC4C4FED41258B2A] - (.Hewlett-Packard Company - LightScribe Service.) -- c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728] [PID.3548] [MD5.65085456FD9A74D7F1A999520C299ECB] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376] [PID.3588] [MD5.7493EA4DE41348F7D3EDBF9DB298F56A] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [13336] [PID.1152] [MD5.794D4B48DFB6E999537C7C3947863463] - (.Safer Networking Ltd. - Spybot-S&D Security Center integration.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368] [PID.3280] ~ Processes Running: Scanned in 00mn 00s ---\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\Moi\AppData\Local\Google\Chrome\User Data\Default\Preferences G0 - GCSP: Preference [User Data\Default] https://search.safefinder.com/?q= =>Hijacker.SmartBar G2 - GCE: Preference [User Data\Default] [nikpibnbobmbdbheedjfogjlikpgpnhp] DVDVideoSoft v.1.2.3.3, (Désactivé) G2 - GCE: Preference [User Data\Default] [ooaacmobbjgefehdfgmajemidjdkkdoo] Game Center v.1.1 (Activé) ~ Google Browser: 16 Legitimates Filtered in 00mn 10s ---\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\ Redirection du fichier Hosts (O1) ~ Le fichier hosts est sain (The hosts file is clean). ~ Hosts File: Scanned in 00mn 04s ~ Nombre de lignes (Lines number): 15300 ---\ Browser Helper Objects de navigateur (O2) O2 - BHO: ToolbarOrange.InitToolbarBHO [64Bits] - {1d970ed5-3eda-438d-bffd-715931e2775b} . (...) -- mscoree.dll (.not file.) O2 - BHO: DVDVideoSoft.WebPageAdjuster [64Bits] - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} . (.DVDVideoSoft Ltd. - DVDVideoSoft IE Extension.) -- C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll ~ BHO: 6 Legitimates Filtered in 00mn 00s ---\ Applications démarrées par registre & par dossier (O4) O4 - HKLM\..\Run: [SmartMenu] . (.Pas de propriétaire - SmartMenu.) -- C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKCU\..\Run: [SpybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [orangeinside] . (...) -- C:\Users\Moi\AppData\Roaming\Orange\OrangeInside wo\OrangeInside.exe O4 - HKLM\..\Wow6432Node\Run: [hpsysdrv] . (.Hewlett-Packard - hpsysdrv.) -- c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe O4 - HKLM\..\Wow6432Node\Run: [IAStorIcon] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKLM\..\Wow6432Node\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe (.not file.) O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe O4 - HKLM\..\Wow6432Node\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe (.not file.) =>Toolbar.AVGSearch O4 - HKLM\..\Wow6432Node\Run: [RIMBBLaunchAgent.exe] . (.Research In Motion Limited - Launch Agent Service.) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe O4 - HKLM\..\Wow6432Node\Run: [AVG_UI] . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2013\avgui.exe O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-21-961287807-383622321-4240488152-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKUS\S-1-5-21-961287807-383622321-4240488152-1000\..\Run: [SpybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-21-961287807-383622321-4240488152-1000\..\Run: [orangeinside] . (...) -- C:\Users\Moi\AppData\Roaming\Orange\OrangeInside wo\OrangeInside.exe ~ Application: Scanned in 00mn 00s ---\ Autres liens utilisateurs (O4) O4 - GS\TaskBar: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\TaskBar: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\explorer.exe O4 - GS\Programs: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\QuickLaunch: AVG PC Tuneup 2011.lnk . (.AVG - PC Tuneup 2011.) -- C:\Program Files (x86)\AVG\AVG PC Tuneup\BoostSpeed.exe O4 - GS\QuickLaunch: bwin Poker.lnk . (...) -- C:\bwinPoker\StartBwin.fr.exe O4 - GS\QuickLaunch: Google Chrome.lnk . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O4 - GS\QuickLaunch: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\QuickLaunch: PokerStars.fr.lnk . (.PokerStars - PokerStars Update.) -- C:\Program Files (x86)\PokerStars.FR\PokerStarsUpdate.exe O4 - GS\QuickLaunch: WildTangent Games App - hp.lnk . (.WildTangent - WildTangent Games App.) -- C:\Program Files (x86)\WildTangent Games\App\GameConsole-wt.exe O4 - GS\QuickLaunch: Xilisoft Convertisseur Vidéo Ultimate 6.lnk . (...) -- C:\Program Files (x86)\Xilisoft\Video Converter Ultimate 6\vcloader.exe O4 - GS\QuickLaunch: µTorrent.lnk . (...) -- C:\Program Files (x86)\uTorrent\uTorrent.exe (.not file.) =>P2P.µTorrent O4 - GS\Accessories: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O4 - GS\Accessories: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) -- C:\Windows\system32\eudcedit.exe O4 - GS\SendTo: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) -- C:\Windows\system32\WFS.exe O4 - GS\Desktop: AVG PC Tuneup 2011.lnk . (.AVG - PC Tuneup 2011.) -- C:\Program Files (x86)\AVG\AVG PC Tuneup\BoostSpeed.exe O4 - GS\Desktop: CrystalDiskInfo.lnk . (.Crystal Dew World - CrystalDiskInfo.) -- C:\Program Files (x86)\CrystalDiskInfo\DiskInfo.exe O4 - GS\Desktop: Disque dur (E) - Raccourci.lnk . (...) -- E:\ O4 - GS\Desktop: Microsoft Word.lnk . (...) -- C:\Windows\Installer\{911B040C-6000-11D3-8CFE-0050048383C9}\wordicon.exe O4 - GS\Desktop: Movies2iPhone.lnk . (...) -- C:\Program Files (x86)\Movies2iPhone\Movies2iPhone.exe O4 - GS\Desktop: MVI_0982 - Raccourci.lnk . (...) -- H:\DCIM\145___07\MVI_0982.MOV (.not file.) O4 - GS\Desktop: MVI_1204 - Raccourci.lnk . (...) -- H:\DCIM\145___07\MVI_1204.MOV (.not file.) O4 - GS\Desktop: Ordinateur - Raccourci.lnk - Clé orpheline O4 - GS\Desktop: Revo Uninstaller.lnk . (.VS Revo Group - Revo Uninstaller.) -- C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe O4 - GS\Desktop: Spybot - Search & Destroy.lnk . (.Safer Networking Limited - Spybot - Search & Destroy.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe O4 - GS\Desktop: Téléchargements - Raccourci.lnk . (...) -- C:\Users\Moi\Downloads O4 - GS\Desktop: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe ~ Global Startup: Scanned in 00mn 00s ---\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: Free YouTube Download [64Bits] - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} . (...) -- C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\dvdvideosoft.ico ~ IE Extra Buttons: Scanned in 00mn 00s ---\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{23C7863E-1504-438D-AC2E-6C11D8144851}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{23C7863E-1504-438D-AC2E-6C11D8144851}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{23C7863E-1504-438D-AC2E-6C11D8144851}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ~ Domain: Scanned in 00mn 00s ---\ Protocole additionnel (O18) O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll ~ Protocole Additionnel: Scanned in 00mn 00s ---\ Tâches planifiées en automatique (O39) [MD5.00000000000000000000000000000000] [APT] [{1923B072-0199-4147-82FE-59D62C5C526E}] (...) -- F:\Setup.exe (.not file.) [0] [MD5.82C6E53270E4FF309A01FB1C8E5F5A38] [APT] [{C3CB91A4-9A26-4028-8F08-B782A569B659}] (.Adobe Systems, Copyright 2005-2008.) -- C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\Setup.exe [3011888] [MD5.82C6E53270E4FF309A01FB1C8E5F5A38] [APT] [{D49899DC-E073-42C5-AB58-1E6C788184DC}] (.Adobe Systems, Copyright 2005-2008.) -- C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\Setup.exe [3011888] ~ Scheduled Task: 24 Legitimates Filtered in 00mn 03s ---\ Logiciels installés (O42) O42 - Logiciel: BarrierePoker.fr - (.LB POKER.) [HKLM][64Bits] -- fr.barrierepoker.air.D043989C8F5E91300BF71855036B28F854BB8613.1 O42 - Logiciel: BarrierePoker.fr - (.LB POKER.) [HKLM][64Bits] -- {7CB8DB40-A1D7-E6C0-703A-A3745E0CCDB2} O42 - Logiciel: PokerStars.fr - (.PokerStars.fr.) [HKLM][64Bits] -- PokerStars.fr O42 - Logiciel: WAV MP3 Converter 4.2 Build 1259 - (...) [HKLM][64Bits] -- WAV MP3 Converter 4.2 Build 1259 ~ Logic: 173 Legitimates Filtered in 00mn 00s ---\ HKCU & HKLM Software Keys [HKCU\Software\HooTech WAV MP3 Converter] [HKCU\Software\MGS] [HKCU\Software\Smartbar] =>Hijacker.SmartBar ~ Key Software: 228 Legitimates Filtered in 00mn 00s ---\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 10/03/2013 - 21:39:23 - [19,330] ----D C:\Program Files (x86)\BarrierePoker.fr O43 - CFD: 14/11/2011 - 22:31:57 - [11,765] ----D C:\Program Files (x86)\Hoo Technologies O43 - CFD: 04/03/2012 - 00:13:03 - [100,103] ----D C:\Program Files (x86)\PokerStars.FR O43 - CFD: 25/02/2013 - 21:32:28 - [0,001] ----D C:\Users\Moi\AppData\Roaming\fr.barrierepoker.air.D043989C8F5E91300BF71855036B28F854BB8613.1 O43 - CFD: 30/06/2013 - 12:36:58 - [5,866] ----D C:\Users\Moi\AppData\Roaming\OpenCandy =>Adware.OpenCandy O43 - CFD: 04/03/2012 - 00:13:04 - [2,413] ----D C:\Users\Moi\AppData\Local\PokerStars.FR ~ Program Folder: 226 Legitimates Filtered in 00mn 18s ---\ Derniers fichiers créés dans Windows Prefetcher (O45) O45 - LFCP:[MD5.7E154120AD8B0F3E06E64400A17D3A9B] - 01/07/2013 - 09:02:33 ---A- - C:\Windows\Prefetch\$$$862C.TMP-108CF398.pf O45 - LFCP:[MD5.DDCA474C913E2A12A0FA494D8FD05516] - 02/07/2013 - 09:02:20 ---A- - C:\Windows\Prefetch\$$$7A4E.TMP-B6739FF6.pf O45 - LFCP:[MD5.1B160A9351814CDB85E529DDD11AED41] - 02/07/2013 - 09:04:41 ---A- - C:\Windows\Prefetch\$$$B628.TMP-9E4E2823.pf O45 - LFCP:[MD5.7CE67A9F6BCB4B9F7152BCEE2B8D0265] - 02/07/2013 - 15:10:06 ---A- - C:\Windows\Prefetch\CDR.EXE-F16C50F0.pf O45 - LFCP:[MD5.04B80851F21E2CBB3CD8F701BEB3C021] - 30/06/2013 - 23:56:08 ---A- - C:\Windows\Prefetch\BOOSTSPEED.EXE-F077D815.pf ~ Prefetcher: 96 Legitimates Filtered in 00mn 00s ---\ MountPoints2 Shell Key (O51) O51 - MPSK:{6058ce89-5f9a-11e1-aed3-40618690ec65}\AutoRun\command. (...) -- G:\AUTORUN.exe (.not file.) O51 - MPSK:{a867f58c-c28f-11e0-8131-40618690ec65}\AutoRun\command. (...) -- G:\Vodaphone_uninstaller.exe (.not file.) O51 - MPSK:{f51e32c4-b222-11e0-a6d8-806e6f6e6963}\AutoRun\command. (.devolo AG - Autorun (CD Launcher Application).) -- F:\autorun.exe ~ Keys: Scanned in 00mn 00s ---\ ShareTools MSconfig StartupReg (O53) O53 - SMSR:HKLM\...\startupreg\PC-Doctor for Windows localizer [Key] . (.PC-Doctor, Inc. - Hardware Diagnostic Tools Localizer.) -- C:\Program Files\PC-Doctor for Windows\localizer.exe ~ SMSR Keys: 3 Legitimates Filtered in 00mn 00s ---\ Microsoft Windows Policies System (O55) O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ MWPS: 20 Legitimates Filtered in 00mn 00s ---\ Microsoft Windows Policies Explorer (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 ~ MWPE Keys: 3 Legitimates Filtered in 00mn 00s ---\ Liste des Drivers Système (O58) O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088] O58 - SDL:[MD5.49697C2C761ACB5C0DE99CC8FE93E95B] - 31/01/2012 - 17:41:08 ---A- . (.CACE Technologies - npf.sys (NT5/6 AMD64) Kernel Driver.) -- C:\Windows\SysWOW64\drivers pf_devolo.sys [34048] ~ Drivers: Scanned in 00mn 00s ---\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC: 02/07/2013 - 09:12:20 ---A- C:\Users\Moi\Downloads\Jack.The.Giant.Slayer.2013.FRENCH.BRRip.XviD.torrent [14625] O61 - LFC: 02/07/2013 - 09:51:02 ---A- C:\Users\Moi\Downloads\Jack.The.Giant.Slayer.2013.FRENCH.BRRip.XviD\Jack.The.Giant.Slayer.2013.FRENCH.BRRip.XviD.nfo [2588] O61 - LFC: 02/07/2013 - 15:03:31 ---A- C:\Users\Moi\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists [270535] O61 - LFC: 02/07/2013 - 15:10:04 ---A- C:\Users\Moi\AppData\Roaming\Micro Application\CDR\users.xml [526] O61 - LFC: 02/07/2013 - 15:17:30 ---A- C:\Users\Moi\AppData\Roaming\Micro Application\CDR\hist_3648_2.db [32768] O61 - LFC: 02/07/2013 - 22:32:15 ---A- C:\Users\Moi\AppData\Local\Google\Chrome\User Data\Local State [48425] O61 - LFC: 25/07/2002 - 16:07:36 ---A- C:\Users\Moi\Documents\Application\Le Petit Larousse Multimédia 2010\ikernel.ex_ [346602] O61 - LFC: 30/06/2013 - 11:34:58 ---A- C:\Users\Moi\Downloads\FreeYouTubetoMP3Converter (2).exe [25328416] ~ 4 Fichiers temporaires (Temporary files) ~ Files: 185 Legitimates Filtered in 06mn 32s ---\ Liste des outils de nettoyage (O63) O63 - Logiciel: ZHPDiag 2013 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 ~ ADS: Scanned in 00mn 00s ---\ Liste des services Legacy (O64) O64 - Services: CurCS - ??\??\???? - Pas de propriétaire (X6va005) .(...) - LEGACY_X6VA005 ~ Legacy: 95 Legitimates Filtered in 00mn 00s ---\ File Associations Shell Spawning (O67) O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Not Key.) ~ FASS Keys: 19 Legitimates Filtered in 00mn 00s ---\ Start Menu Internet (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ~ Keys: Scanned in 00mn 00s ---\ Search Browser Infection (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8 ~ Keys: Scanned in 00mn 00s ---\ Crack & Keygen Files (O82) C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Adobe Photoshop CS4 KeyGen .exe C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\KeyGen.rar C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\extensions\AdobePhotoshop11-de_DE\AdobePhotoshop11-de_DE.msi C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\extensions\AdobePhotoshop11-de_DE_x64\AdobePhotoshop11-de_DE_x64.msi C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\extensions\AdobePhotoshop11-en_GB\AdobePhotoshop11-en_GB.msi C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\extensions\AdobePhotoshop11-en_GB_x64\AdobePhotoshop11-en_GB_x64.msi C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\extensions\AdobePhotoshop11-es_ES\AdobePhotoshop11-es_ES.msi C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\extensions\AdobePhotoshop11-es_ES_x64\AdobePhotoshop11-es_ES_x64.msi C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\extensions\AdobePhotoshop11-fr_FR\AdobePhotoshop11-fr_FR.msi C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\extensions\AdobePhotoshop11-fr_FR_x64\AdobePhotoshop11-fr_FR_x64.msi C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\Setup.exe C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\WinBootstrapper.msi C:\Users\Moi\Downloads\Avg antivirus_Free-edition 2012_FR + keygen\Keygen.exe C:\Users\Moi\Downloads\Avg antivirus_Free-edition 2012_FR + keygen\~uTorrentPartFile_62B9CF.dat =>P2P.µTorrent C:\Users\Moi\Downloads\WinZip Pro Final v15.0 French\winzip150fr_keygen.exe C:\Users\Moi\Downloads\Xilisoft Video Converter 3.1.52.0124 + keygen\x-video-converter 3.1.52.0124.exe C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Adobe Photoshop CS4 KeyGen .exe C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\KeyGen.rar C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\extensions\AdobePhotoshop11-de_DE\AdobePhotoshop11-de_DE.msi C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\extensions\AdobePhotoshop11-de_DE_x64\AdobePhotoshop11-de_DE_x64.msi C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\extensions\AdobePhotoshop11-en_GB\AdobePhotoshop11-en_GB.msi C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\extensions\AdobePhotoshop11-en_GB_x64\AdobePhotoshop11-en_GB_x64.msi C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\extensions\AdobePhotoshop11-es_ES\AdobePhotoshop11-es_ES.msi C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\extensions\AdobePhotoshop11-es_ES_x64\AdobePhotoshop11-es_ES_x64.msi C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\extensions\AdobePhotoshop11-fr_FR\AdobePhotoshop11-fr_FR.msi C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\extensions\AdobePhotoshop11-fr_FR_x64\AdobePhotoshop11-fr_FR_x64.msi C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\Setup.exe C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\WinBootstrapper.msi C:\Users\Moi\Downloads\Avg antivirus_Free-edition 2012_FR + keygen\Keygen.exe C:\Users\Moi\Downloads\Avg antivirus_Free-edition 2012_FR + keygen\~uTorrentPartFile_62B9CF.dat =>P2P.µTorrent C:\Users\Moi\Downloads\WinZip Pro Final v15.0 French\winzip150fr_keygen.exe C:\Users\Moi\Downloads\Xilisoft Video Converter 3.1.52.0124 + keygen\x-video-converter 3.1.52.0124.exe ~ Files: Scanned in 01mn 23s ---\ Recherche particuliere à la racine de certains dossiers (O84) [MD5.3B644699DA022292DB81F526B5CE1A7D] [SPRF][22/08/2011] (...) -- C:\Users\Moi\AppData\Local\fusioncache.dat [91] [MD5.76120E7B9DD11D566CE009055AF7339B] [SPRF][09/06/2013] (...) -- C:\Users\Moi\AppData\Roaming\wklnhst.dat [6506] [MD5.3FEA9D2EDF23B0283C7A66C8DEA380BD] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player Module.) -- C:\Windows\Downloaded Program Files\dwusplay.dll [24576] [MD5.CDBE35EA59BC9223E4F800BD1DB82D27] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Setup Player.) -- C:\Windows\Downloaded Program Files\dwusplay.exe [196608] [MD5.0C78701C6F42345DFF2B2B6C3C3D01EF] [SPRF][25/07/2002] (.InstallShield Software Corporation - InstallShield Update Service Web Agent.) -- C:\Windows\Downloaded Program Files\isusweb.dll [172032] ~ Files: Scanned in 00mn 00s ---\ Firewall Active Exception List (FirewallRules) (O87) O87 - FAEL: "{197C91ED-7181-43D9-9F6F-33BF1E04273A}" | In - Private - P6 - TRUE | .(.devolo AG - devolo Network Service.) -- C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe O87 - FAEL: "{95BBF03F-6AF6-4C8C-8E7D-B166B8BAB9C2}" | In - Private - P17 - TRUE | .(.devolo AG - devolo Network Service.) -- C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe ~ Firewall: 226 Legitimates Filtered in 00mn 01s ---\ Scan Additionnel (O88) Database Version : v2.12631 - (01/07/2013) Clés trouvées (Keys found) : 9 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 2 Fichiers trouvés (Files found) : 1 [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A047FE02-C91C-41CB-898C-4ED21B86025A}] =>Toolbar.Orange [HKLM\Software\Wow6432Node\Google\Chrome\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib] =>Toolbar.Conduit [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D970ED5-3EDA-438D-BFFD-715931E2775B}] =>Toolbar.Sorcim [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1D970ED5-3EDA-438D-BFFD-715931E2775B}] =>Toolbar.Sorcim [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1D970ED5-3EDA-438D-BFFD-715931E2775B}] =>Toolbar.Sorcim [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\464AA55239C100F32AF2D438EDDC0F47] =>Adware.IMBooster [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5652BA3D5FB98AE31B337BF0AF939856] =>Adware.IMBooster [HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EB95E1AFCBABE3DB9ECCC669B99494] =>Adware.IMBooster [HKLM\Software\Wow6432Node\Google\Chrome\Extensions dibdjnfmopecpmkdieinmbadjfpblof] =>Toolbar.AVGSearch C:\Program Files (x86)\Common Files\AVG Secure Search =>Toolbar.AVGSearch C:\Users\Moi\AppData\Roaming\OpenCandy =>Adware.OpenCandy C:\Users\Moi\Downloads\VLC_Media_Player_Setup.exe =>Adware.iBryte ~ Additionnel Scan: 344462 Items scanned in 00mn 14s ---\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SR - | Auto 11/05/2013 65640 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe SR - | Auto 02/12/2009 202752 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe SR - | Auto 21/12/2012 57008 | (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - | Auto 10/12/2012 1342024 | (avgfws) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2013\avgfws.exe SR - | Auto 15/11/2012 5814904 | (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe SR - | Auto 22/10/2012 196664 | (avgwd) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe SR - | Auto 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SR - | Auto 28/02/2012 3128856 | (DevoloNetworkService) . (.devolo AG.) - C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe SR - | Auto 17/12/2007 163840 | (EPSON_EB_RPCV4_01) . (.SEIKO EPSON CORPORATION.) - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.exe SR - | Auto 11/01/2007 126464 | (EPSON_PM_RPCV4_01) . (.SEIKO EPSON CORPORATION.) - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.exe SR - | Auto 14/07/2009 27136 | C:\Windows\System32\ezsvc7.dll (ezSharedSvc) . (.EasyBits Sofware AS.) - C:\Windows\System32\svchost.exe SS - | Demand 12/10/2010 206072 | (GamesAppService) . (.WildTangent, Inc..) - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe SS - | Auto 16/02/2012 136176 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 16/02/2012 136176 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SR - | Auto 27/09/2012 86528 | (HP Support Assistant Service) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe SS - | Demand 10/08/2012 1001376 | (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe SR - | Auto 02/10/2009 13336 | (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe SR - | Demand 20/02/2013 641352 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - | Auto 20/08/2009 73728 | (LightScribeService) . (.Hewlett-Packard Company.) - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe SR - | Auto 04/04/2013 418376 | (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe SS - | Auto 04/04/2013 701512 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe SS - | Auto 18/09/2012 1082016 | (Orange update Core Service) . (.France Telecom SA.) - C:\Program Files (x86)\Orange\OrangeUpdate\Service\OUCore.exe SR - | Auto 26/01/2009 1153368 | (SBSDWSCService) . (.Safer Networking Ltd..) - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SS - | Demand 0 | (X6va005) . (...) - C:\Users\Moi\AppData\Local\Temp\00516D3.tmp ~ Services: Scanned in 00mn 01s ---\ Recherche Master Boot Record Infection (MBR)(O80) Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net Run by Moi at 02/07/2013 23:41:27 device: opened successfully user: error reading MBR Disk trace: error: Read Descripteur non valide kernel: error reading MBR ~ MBR: 9 Legitimates Filtered in 00mn 02s ---\ Recherche Master Boot Record Infection (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by Moi at 02/07/2013 23:41:29 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ MBR: Scanned in 00mn 04s ---\ Malicius Software Information ~ http://nicolascoolman.webs.com/apps/blog/show/26990375-hijacker-smartbar =>Hijacker.SmartBar ~ http://nicolascoolman.webs.com/apps/blog/show/26770694-adware-opencandy =>Adware.OpenCandy ~ http://nicolascoolman.webs.com/apps/blog/entries/show/29507721-toolbar-conduit =>Toolbar.Conduit ~ http://nicolascoolman.webs.com/apps/blog/show/26684723-adware-imbooster =>Adware.IMBooster ~ http://nicolascoolman.webs.com/apps/blog/show/26874182-adware-ibryte =>Adware.iBryte ~ MSI: 16 link(s) detected in 00mn 04s ~ 1516 Legitimates filtered by white list End of the scan (541 lines in 09mn 40s)(32)

mevla77 · Answer

bonsoir 

désolé je n arrive pas a vous coller le lien a chaque fois le message est effacer...


http://upload.sosvirus.net/log/SosUpload.dbab688978b18899460b154e71c1987e.txt

mevla77 · Answer

ça a marcher désolé de l attente :)

H.A.W.X · Answer

Bonsoir,

Désinstalle Spybot, préviens moi quand c'est fait ;)

mevla77 · Answer

S est fait

H.A.W.X · Answer

Bonsoir,

Pas étonnant que tu ai des soucis vu le nombre de choses que tu télécharge de manière illégale ... Tu as de la chance de n'avoir que des soucis de PUP, le jour ou tu auras l'infection ZA tu rigolera beaucoup moins.

Je t'aiderai jusqu'à la fin bien que je pourrai m'arrêter ici.

Deux étapes encore et on finalise :
~ http://sosvirus.net/viewtopic.php?f=281&t=614

Ensuite copie les lignes en gras ci dessous :

SysRestore

G0 - GCSP: Preference [User Data\Default] https://search.safefinder.com/?q=  
O2 - BHO: ToolbarOrange.InitToolbarBHO [64Bits] - {1d970ed5-3eda-438d-bffd-715931e2775b} . (...) -- mscoree.dll (.not file.)
O2 - BHO: DVDVideoSoft.WebPageAdjuster [64Bits] - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} . (.DVDVideoSoft Ltd. - DVDVideoSoft IE Extension.) -- C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O4 - HKCU\..\Run: [SpybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe 
O4 - HKLM\..\Wow6432Node\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe (.not file.) 
O4 - HKLM\..\Wow6432Node\Run: [vProt] C:\Program Files (x86)\AVG Secure Search\vprot.exe (.not file.)
O4 - HKUS\S-1-5-21-961287807-383622321-4240488152-1000\..\Run: [SpybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe 
O4 - GS\QuickLaunch: µTorrent.lnk . (...)  -- C:\Program Files (x86)\uTorrent\uTorrent.exe (.not file.) 
O4 - GS\Desktop: MVI_0982 - Raccourci.lnk . (...)  -- H:\DCIM\145___07\MVI_0982.MOV  (.not file.)
O4 - GS\Desktop: MVI_1204 - Raccourci.lnk . (...)  -- H:\DCIM\145___07\MVI_1204.MOV  (.not file.)
O4 - GS\Desktop: Ordinateur - Raccourci.lnk - Clé orpheline
O4 - GS\Desktop: Spybot - Search & Destroy.lnk . (.Safer Networking Limited - Spybot - Search & Destroy.)  -- C:\Program Files (x86)\Spybot - Search & Destroy\SpybotSD.exe 
[MD5.00000000000000000000000000000000] [APT] [{1923B072-0199-4147-82FE-59D62C5C526E}] (...) -- F:\Setup.exe (.not file.)  
[HKCU\Software\Smartbar] 
O43 - CFD: 30/06/2013 - 12:36:58 - [5,866] ----D C:\Users\Moi\AppData\Roaming\OpenCandy 
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A047FE02-C91C-41CB-898C-4ED21B86025A}]
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib] 
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D970ED5-3EDA-438D-BFFD-715931E2775B}] 
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1D970ED5-3EDA-438D-BFFD-715931E2775B}] 
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1D970ED5-3EDA-438D-BFFD-715931E2775B}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\464AA55239C100F32AF2D438EDDC0F47]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5652BA3D5FB98AE31B337BF0AF939856]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EB95E1AFCBABE3DB9ECCC669B99494] 
[HKLM\Software\Wow6432Node\Google\Chrome\Extensions
dibdjnfmopecpmkdieinmbadjfpblof]
C:\Program Files (x86)\Common Files\AVG Secure Search 
C:\Users\Moi\AppData\Roaming\OpenCandy
C:\Users\Moi\Downloads\VLC_Media_Player_Setup.exe
SS - | Demand  0 |  (X6va005) . (...) - C:\Users\Moi\AppData\Local\Temp\00516D3.tmp



FirewallRaz
EmptyFlash 
Emptytemp

Puis fais ceci :
~ http://sosvirus.net/viewtopic.php?f=281&t=579

J'attends donc 2 rapport :
¤ eset.txt
¤ ZHPFixReport.txt


Après ceci dit moi si tu as toujours ton soucis, si non, on peut finaliser.

mevla77 · Answer

bonjour 

eset:

C:\Users\Moi\Downloads\PlayerPlusX.exe menaces multiples nettoyé par suppression - mis en quarantaine
C:\Users\Moi\Downloads\VLC_Media_Player_Setup.exe une variante de Win32/Adware.iBryte.F Application nettoyé par suppression - mis en quarantaine
C:\Users\Moi\Downloads\Avg antivirus_Free-edition 2012_FR + keygen\Keygen.exe une variante probable de Win32/Inject.GASGHUF cheval de troie nettoyé par suppression - mis en quarantaine

http://upload.sosvirus.net/log/SosUpload.b5a3fc9f376f30d649c25c8a4b8ad649.txt

voila je redémarre pour confirmer

H.A.W.X · Answer

Bonjour,

Ok pour ESET. 

Pour ZHPFix !

Copie les lignes en gras  plus haut et fait directement la manipulation indiqué dans le lien. Si les lignes ne sont pas présente regarde l'image de la manipulation.

Si cela ne marche pas, on ferra autrement ;)

mevla77 · Answer

ça me lance maintenant une page google et une de snapdo

H.A.W.X · Answer

Boujour, 

Soit précis stp, c'est très très vague. 
Ou ? Tu as fait la manip ? Ou est le rapport ? Quel naviguateur ? ...

++ ;)

mevla77 · Answer

alors j ai bien réussi a faire comme tu m avais décrit j avais pas fait gaffe qu il faillais passer par zhp fix ,la manip effectuer j ai relancer une page net et google est apparu normalement mais après redémarrage voila revenu snap 
sinon je passe par chrome

H.A.W.X · Answer

Bonjour,

Fais ceci :
~ https://forums.commentcamarche.net/forum/affich-37585758-reinitialiser-son-navigateur#reinitialiser-google-chrome

mevla77 · Answer

je te remet zhp au cas ou tu ne l aurais pas eu

http://upload.sosvirus.net/log/SosUpload.b5a3fc9f376f30d649c25c8a4b8ad649.txt

mevla77 · Answer

re 

j ai d autre info:
j ai effectuer la réinitialisation de chrome après quoi ça fonctionnais normalement jusqu'à ce que je me reconnecte sur mon compte gmail pour mes favoris ect...

et la a la relance de chrome paf revoilà snapdo 

merci d avance de ta patience :)

H.A.W.X · Answer

Re bonjour,

Merci à Smart91 pour ce qui suit :

On va supprimer les données synchronisées de ton compte Google à tout moment depuis le tableau de bord Google Dashboard. 

- Clique sur le menu Google Chrome Chrome menu dans la barre d'outils du navigateur. 
- Sélectionne Connecté en tant que <ton adresse e-mail>. 
- Dans la section "Connexion", clique sur Google Dashboard. 
- Accéde à la section "Synchronisation de Google Chrome" du tableau de bord, puis cliquez sur Arrêter la synchronisation et supprimer les données de Google. 

La synchronisation est désactivée, et toutes les données synchronisées qui ont été enregistrées dans ton compte Google sont supprimées. Elles sont toutefois conservées sur ton ordinateur. 

Dis moi quand c'est fait ;)

mevla77 · Answer

bonjour

après effacement des données j ai toujours une page snapdo et google qui s ouvre doit je recommencer les actions précédentes maintenant ?

H.A.W.X · Answer

Refais moi ceci stp :
~ http://sosvirus.net/viewtopic.php?f=281&t=576

J'attends donc 1 rapport :
¤ ZHPDiag.txt ( sur http://upload.sosvirus.net/ )

mevla77 · Answer

http://upload.sosvirus.net/log/SosUpload.62b28135c39e8f8c011cedf547c271ce.txt

H.A.W.X · Answer

Bonsoir,

Ah ... ben oui pas étonnant, avec tout ce qui a d'illégale sur ce PC !
Tu vois que télécharger gratuitement ça a un prix ;)

Plusieurs choses à faire :

Première chose, UsbFix en Mode suppression !
~ http://www.sosvirus.net/viewtopic.php?f=281&t=6

Deuxièmement ceci :
~ http://sosvirus.net/viewtopic.php?f=281&t=604

Troisièmement :

Copie les lignes en gras ci dessous :

SysRestore

G0 - GCSP: Preference [User Data\Default] http://feed.snap.do022c4-3b66-48e8-8bab-7e23207bbf6f&searchtype=hp&installDate=18/02/2013" ] 
O4 - GS\QuickLaunch: bwin Poker.lnk . (...)  -- C:\bwinPoker\StartBwin.fr.exe
O4 - GS\QuickLaunch: PokerStars.fr.lnk . (.PokerStars - PokerStars Update.)  -- C:\Program Files (x86)\PokerStars.FR\PokerStarsUpdate.exe 
O4 - GS\Desktop: Ordinateur - Raccourci.lnk - Clé orpheline
[MD5.00000000000000000000000000000000] [APT] [{77921668-1D1E-460F-A37D-1697905EA9D2}] (...) -- C:\Program Files (x86)\Free Youtube Downloader\uninst.exe (.not file.)   [0]  
[MD5.82C6E53270E4FF309A01FB1C8E5F5A38] [APT] [{C3CB91A4-9A26-4028-8F08-B782A569B659}] (.Adobe Systems, Copyright 2005-2008.) -- C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\Setup.exe   [3011888]
[MD5.82C6E53270E4FF309A01FB1C8E5F5A38] [APT] [{D49899DC-E073-42C5-AB58-1E6C788184DC}] (.Adobe Systems, Copyright 2005-2008.) -- C:\Users\Moi\Documents\Application\Adobe Photoshop CS4 Extended_FR + Keygen by kaka102\Photoshop CS4 Extended\Setup.exe 
O61 - LFC: 05/07/2013 - 16:47:50 ---A- C:\Users\Moi\Downloads\SoftonicDownloader_pour_free-youtube-download.exe   [393088]
[HKCU\Software\Softonic]



FirewallRaz
PROXYFix 
EmptyFlash 
Emptytemp


Puis suis ceci :
~ http://sosvirus.net/viewtopic.php?f=281&t=579

Et enfin :
~ http://sosvirus.net/viewtopic.php?f=281&t=611

J'attends donc 4 rapport :
¤ UsbFix clean 1.txt
¤ RKreport[X]¤H¤.txt
¤ ZHPFixReport.txt
¤ SFT.txt

mevla77 · Answer

bonsoir 

je tes mi les rapports j'espère que ça t ira :)

http://upload.sosvirus.net/log/SosUpload.fd2e76ecc71537912dc546c2c1d1684b.txt

http://upload.sosvirus.net/log/SosUpload.38292d8892c290810fc06290711cf7ad.txt

http://upload.sosvirus.net/log/SosUpload.3a3b96e375b2aa7a60d94adb6160010d.txt

http://upload.sosvirus.net/log/SosUpload.ddb03cb96f85b98070f9de486e8a606d.txt

############################## | UsbFix V 7.129 | [Suppression]

Utilisateur: Moi (Administrateur) # MOI-PC
Mis à jour le 24/06/2013 par El Desaparecido
Lancé à 19:11:43 | 09/07/2013

Site Web: https://www.sosvirus.net/
Upload Malware: http://www.sosvirus.net/upload-malware-pour-analyse-t489.html
Contact: contact@sosvirus.net

PC: HP-Pavilion (WC963AA-ABF p6355fr) (x64-based PC)
CPU: Intel(R) Core(TM) i3 CPU         530  @ 2.93GHz (2933)
RAM -> [Total : 6071 | Free : 3869]
BIOS: 12/21/09 17:01:03 Ver: 5.07
BOOT: Normal boot

OS: Microsoft Windows 7 Édition Familiale Premium  (6.1.7601 64-Bit) # Service Pack 1
WB: Windows Internet Explorer 10.0.9200.16618

SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
AV: AVG Internet Security 2013 [Enabled | Updated]
FW: Windows FireWall Service [Enabled]

C:\ (%systemdrive%) -> Disque fixe # 919 Go (453 Go libre(s) - 49%) [HP] # NTFS
D:\ -> Disque fixe # 13 Go (2 Go libre(s) - 16%) [FACTORY_IMAGE] # NTFS
E:\ -> Disque fixe # 932 Go (787 Go libre(s) - 84%) [Disque dur] # NTFS
F:\ -> CD-ROM
G:\ -> CD-ROM

################## | El Desaparecido Section |

HKLM\SOFTWARE | Run : [hpsysdrv] - c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
HKLM\SOFTWARE | Run : [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
HKLM\SOFTWARE | Run : [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
HKLM\SOFTWARE | Run : [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
HKLM\SOFTWARE | Run : [RIMBBLaunchAgent.exe] - C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
HKLM\SOFTWARE | Run : [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
HKLM\SOFTWARE | Run : [] - 
HKLM\SOFTWARE | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKLM\SOFTWARE | Run : [AVG_UI] - "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
HKLM\SOFTWARE | Run : [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
HKLM\SOFTWARE\wow6432Node | Run : [hpsysdrv] - c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
HKLM\SOFTWARE\wow6432Node | Run : [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
HKLM\SOFTWARE\wow6432Node | Run : [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
HKLM\SOFTWARE\wow6432Node | Run : [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
HKLM\SOFTWARE\wow6432Node | Run : [RIMBBLaunchAgent.exe] - C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
HKLM\SOFTWARE\wow6432Node | Run : [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
HKLM\SOFTWARE\wow6432Node | Run : [] - 
HKLM\SOFTWARE\wow6432Node | Run : [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKLM\SOFTWARE\wow6432Node | Run : [AVG_UI] - "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY
HKLM\SOFTWARE\wow6432Node | Run : [iTunesHelper] - "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
HKLM\SOFTWARE | RunOnce : [] - 
HKLM\SOFTWARE\wow6432Node | RunOnce : [] - 
HKU\S-1-5-19\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\SOFTWARE | Run : [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-961287807-383622321-4240488152-1000\SOFTWARE | Run : [Sidebar] - C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
HKU\S-1-5-21-961287807-383622321-4240488152-1000\SOFTWARE | Run : [orangeinside] - C:\Users\Moi\AppData\Roaming\Orange\OrangeInside	wo\OrangeInside.exe
HKU\S-1-5-19\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe
HKU\S-1-5-20\SOFTWARE | RunOnce : [mctadmin] - C:\Windows\System32\mctadmin.exe

################## | Processus Stoppés |

Stoppé! C:\PROGRA~2\AVG\AVG2013\avgrsa.exe (456)
Stoppé! C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe (512)
Stoppé! C:\Program Files (x86)\AVG\AVG2013\avgfws.exe (1416)
Stoppé! C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe (1912)
Stoppé! C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe (2052)
Stoppé! C:\Program Files (x86)\AVG\AVG2013\avgui.exe (2968)
Stoppé! C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe (1740)
Stoppé! C:\Program Files (x86)\AVG\AVG2013\avgemca.exe (2884)
Stoppé! C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe (2992)
Stoppé! C:\Program Files (x86)\AVG\AVG2013\avgcfgex.exe (3892)
Stoppé! C:\Windows\System32\WUDFHost.exe (6888)
Stoppé! C:\Windows\System32undll32.exe (6692)
Stoppé! C:\Windows\system32\SearchIndexer.exe (120)
Stoppé! C:\Program Files\Windows Media Player\wmpnetwk.exe (2380)
Stoppé! C:\Windows\System32undll32.exe (5980)
Stoppé! C:\Windows\System32\spoolsv.exe (1560)
Stoppé! C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (2852)
Stoppé! C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe (1768)
Stoppé! C:\Windows\system32\DllHost.exe (3236)
Stoppé! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (2576)
Stoppé! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4640)
Stoppé! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5856)
Stoppé! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (3324)
Stoppé! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (5008)
Stoppé! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (3588)
Stoppé! C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (4964)
Stoppé! C:\Windows\SysWOW64\NOTEPAD.EXE (6752)
Stoppé! C:\Windows\system32	askeng.exe (4872)

################## | Éléments infectieux |

Non supprimé ! F:\autorun.exe
Non supprimé ! F:\autorun.inf

(!) Fichiers temporaires supprimés.

################## | Registre |


################## | Mountpoints2 |


################## | Listing |

[01/04/2013 - 14:25:30 | D ] 	C:\$AVG
[15/09/2011 - 16:23:11 | SHD ] 	C:\$Recycle.Bin
[24/04/2013 - 20:05:49 | N | 1657] 	C:\AdwCleaner[R1].txt
[24/04/2013 - 20:07:45 | N | 1717] 	C:\AdwCleaner[R2].txt
[26/06/2013 - 18:10:01 | N | 2988] 	C:\AdwCleaner[R3].txt
[26/06/2013 - 18:19:05 | N | 3129] 	C:\AdwCleaner[R4].txt
[30/06/2013 - 22:09:59 | N | 4110] 	C:\AdwCleaner[R5].txt
[15/04/2013 - 19:55:13 | N | 20148] 	C:\AdwCleaner[S1].txt
[24/04/2013 - 20:08:22 | N | 1712] 	C:\AdwCleaner[S2].txt
[26/06/2013 - 18:11:05 | N | 401] 	C:\AdwCleaner[S3].txt
[26/06/2013 - 18:12:33 | N | 354] 	C:\AdwCleaner[S4].txt
[09/07/2013 - 18:55:50 | RASHD ] 	C:\Autorun.inf
[22/02/2012 - 15:25:27 | D ] 	C:\BigFishGamesCache
[09/07/2013 - 19:04:37 | D ] 	C:\bwinPoker
[14/07/2009 - 07:08:56 | SHD ] 	C:\Documents and Settings
[25/10/2011 - 23:45:37 | D ] 	C:\extensions
[18/10/2011 - 23:53:59 | D ] 	C:\GAMIGO
[09/07/2013 - 13:55:11 | ASH | 4774490112] 	C:\hiberfil.sys
[31/08/2011 - 10:28:41 | D ] 	C:\hp
[22/10/2011 - 11:07:10 | N | 921624] 	C:\img2-001.raw
[07/01/2010 - 22:16:41 | D ] 	C:\Intel
[20/12/2011 - 19:37:40 | D ] 	C:\Microgaming
[02/12/2006 - 00:37:14 | N | 904704] 	C:\msdia80.dll
[09/02/2012 - 21:20:04 | RHD ] 	C:\MSOCache
[09/07/2013 - 13:55:11 | ASH | 6365986816] 	C:\pagefile.sys
[14/07/2009 - 05:20:08 | D ] 	C:\PerfLogs
[29/08/2011 - 19:57:11 | D ] 	C:\PFiles
[08/07/2013 - 23:27:48 | N | 512] 	C:\PhysicalDisk0_MBR.bin
[11/04/2013 - 14:02:50 | D ] 	C:\Program Files
[07/07/2013 - 00:58:46 | D ] 	C:\Program Files (x86)
[19/05/2013 - 19:06:42 | HD ] 	C:\ProgramData
[23/10/2011 - 13:59:00 | D ] 	C:\Programs
[24/11/2012 - 09:16:20 | D ] 	C:\swsetup
[09/07/2013 - 19:04:40 | SHD ] 	C:\System Volume Information
[14/09/2011 - 20:09:35 | D ] 	C:\System.sav
[09/07/2013 - 18:55:51 | N | 8119557] 	C:\Upload_UsbFix.zip
[09/07/2013 - 19:15:50 | D ] 	C:\UsbFix
[09/07/2013 - 18:55:51 | N | 19462] 	C:\UsbFix [Clean 1] MOI-PC.txt
[09/07/2013 - 19:15:59 | A | 8094] 	C:\UsbFix [Clean 2] MOI-PC.txt
[09/07/2013 - 18:49:47 | N | 8588] 	C:\UsbFix [Scan 1] MOI-PC.txt
[19/07/2011 - 17:56:06 | D ] 	C:\Users
[29/04/2013 - 16:29:59 | D ] 	C:\Windows
[09/07/2013 - 19:04:41 | D ] 	C:\ZHP
[19/07/2011 - 17:59:32 | SHD ] 	D:\$RECYCLE.BIN
[09/07/2013 - 18:55:50 | RASHD ] 	D:\Autorun.inf
[26/05/2010 - 23:26:30 | SHD ] 	D:\boot
[13/07/2009 - 19:39:00 | ASH | 383562] 	D:\bootmgr
[19/07/2011 - 17:59:28 | N | 0] 	D:\BT_HP.FLG
[08/01/2010 - 08:23:45 | N | 485] 	D:\CSP.DAT
[08/01/2010 - 08:45:51 | N | 15537] 	D:\DeployRp.log
[26/05/2010 - 23:26:30 | D ] 	D:\hp
[04/11/2012 - 22:58:34 | N | 8] 	D:\HP_WSD.dat
[19/07/2011 - 17:59:28 | N | 22] 	D:\language.ini
[26/05/2010 - 23:26:30 | SHD ] 	D:\preload
[19/07/2011 - 17:54:22 | SD ] 	D:\Recovery
[08/01/2010 - 08:45:51 | N | 0] 	D:\RPCONFIG.LOG
[03/04/2013 - 00:03:45 | SHD ] 	D:\System Volume Information
[19/07/2011 - 18:21:15 | SHD ] 	E:\$RECYCLE.BIN
[07/11/2008 - 08:55:26 | N | 733667328] 	E:\15 Ans Et Demi.avi
[25/11/2009 - 15:51:46 | N | 734400512] 	E:\2012.avi
[10/04/2010 - 03:21:31 | N | 734093312] 	E:\28 semaines plus tard.avi
[20/04/2008 - 08:35:34 | N | 732155904] 	E:\3h10.To.Yuma.avi
[07/02/2010 - 13:58:03 | N | 734967808] 	E:\5150.Rue.Des.Ormes.avi
[22/05/2009 - 09:28:44 | N | 733700096] 	E:\7 vies.avi
[24/02/2010 - 10:25:48 | N | 835555070] 	E:\A Good woman (La seductrice).avi
[09/12/2009 - 03:28:26 | N | 737409024] 	E:\American pie 7 le livre de l' amour.avi
[30/04/2010 - 19:22:18 | N | 1273854198] 	E:\Amiral.avi
[06/01/2010 - 15:50:18 | N | 729989120] 	E:\Angel heart .avi
[04/09/2009 - 23:17:26 | N | 734922752] 	E:\anges et demons cd1.avi
[04/09/2009 - 23:17:30 | N | 731133952] 	E:\anges et demons cd2.avi
[04/04/2009 - 04:11:20 | N | 736571392] 	E:\Angles d'attaque .avi
[11/11/2009 - 12:56:27 | N | 733923328] 	E:\Antichrist.avi
[25/01/2009 - 00:08:48 | N | 720570368] 	E:\Appaloosa .avi
[14/02/2010 - 09:40:38 | N | 734451712] 	E:\Asterix aux Jeux Olympiques.avi
[09/07/2013 - 18:55:50 | RASHD ] 	E:\Autorun.inf
[19/01/2011 - 22:03:05 | N | 2489331712] 	E:\Avatar Version longue Inédite.avi
[24/02/2010 - 11:20:22 | N | 719790080] 	E:\Calculs meutriers.avi
[09/12/2010 - 15:56:01 | N | 733939712] 	E:\Centurion.avi
[25/11/2009 - 16:25:07 | N | 734550016] 	E:\Clones .avi
[10/08/2008 - 18:42:18 | N | 733769728] 	E:\cloverfield .avi
[27/11/2011 - 21:07:19 | D ] 	E:\Dessins animés
[16/10/2009 - 12:06:52 | N | 737063384] 	E:\Gi.Joe The Rise Of Cobra .avi
[04/04/2009 - 03:59:44 | N | 733769728] 	E:\go fast .avi
[04/09/2009 - 21:05:01 | N | 733263872] 	E:\Gran.Torino.avi
[28/04/2006 - 09:02:28 | N | 734611456] 	E:\granma'sBoy.avi
[17/07/2008 - 01:24:30 | N | 734584832] 	E:\hancock.avi
[01/02/2008 - 17:29:36 | N | 733923328] 	E:\Harry Potter et l'ordre du Phoénix 5.avi
[08/12/2010 - 22:07:42 | N | 1509671926] 	E:\Harry Potter et Le Prince de sang-mele.avi
[11/11/2009 - 14:21:44 | N | 734476288] 	E:\haute tension.avi
[18/06/2011 - 23:32:58 | N | 736028672] 	E:\hell driver.avi
[01/05/2009 - 04:59:46 | N | 731844608] 	E:\Hellboy 2 Les Legions.D.Or. Maudites.avi
[24/02/2010 - 22:04:43 | N | 732792832] 	E:\Hoboken Hollow.avi
[12/06/2009 - 01:56:20 | N | 732350464] 	E:\Home.avi
[25/02/2010 - 15:24:16 | N | 746529610] 	E:\Hors de controle.avi
[28/12/2006 - 03:16:32 | N | 735989760] 	E:\Hors De Prix .avi
[26/03/2010 - 03:27:24 | N | 722573806] 	E:\Infected.avi
[25/10/2006 - 06:48:48 | N | 733923328] 	E:\Infernal affairs .avi
[16/02/2010 - 06:10:08 | N | 743075840] 	E:\Inglorious basterds.avi
[05/04/2009 - 01:48:42 | N | 732348416] 	E:\Intraçable .avi
[11/05/2008 - 10:25:38 | N | 734023680] 	E:\Invisible target.avi
[30/10/2010 - 14:38:26 | N | 734162944] 	E:\Iron Man 2.avi
[25/02/2010 - 18:08:50 | N | 734781116] 	E:\Iron Man.avi
[06/01/2010 - 00:20:45 | N | 729660344] 	E:\Jack l eventreur .avi
[02/12/2009 - 03:41:52 | N | 735752192] 	E:\Jennifers Body.avi
[21/11/2009 - 22:22:23 | N | 735809536] 	E:\Jeux De Pouvoir.avi
[04/04/2009 - 12:57:44 | N | 733779968] 	E:\John rambo.avi
[06/02/2011 - 14:40:06 | N | 733820928] 	E:\Jonah.avi
[28/03/2008 - 11:09:18 | N | 734064640] 	E:\Jumper.avi
[27/08/2009 - 17:58:22 | N | 731250688] 	E:\King Rising .avi
[09/11/2009 - 17:20:57 | N | 733734912] 	E:\L'Incroyable Hulk .avi
[30/10/2009 - 00:14:48 | N | 728442880] 	E:\l'oeil du mal .avi
[01/02/2008 - 15:35:12 | N | 735739904] 	E:\La Maison Du Bonheur .avi
[10/08/2009 - 15:24:26 | N | 733005824] 	E:\la malediction des zombies .avi
[28/08/2008 - 22:09:20 | N | 729666958] 	E:\la momie 3.avi
[17/08/2010 - 22:34:31 | N | 733751296] 	E:\La nuit au musée 2.avi
[06/06/2008 - 15:01:50 | N | 731893760] 	E:\La nuit nous appartient .avi
[21/04/2010 - 17:26:03 | N | 1466024884] 	E:\La route.avi
[06/10/2007 - 21:00:10 | N | 838279168] 	E:\la vengeance dans la peau.avi
[26/09/2006 - 23:14:54 | N | 733956096] 	E:\la-doublure.avi
[08/09/2007 - 00:50:20 | N | 726644736] 	E:\La.Cite.interdite.avi
[11/10/2008 - 06:56:44 | N | 733186048] 	E:\La.legende.du.scorpion.noir.avi
[24/02/2010 - 11:21:09 | N | 733984768] 	E:\La.Premiere.Etoile.avi
[21/06/2008 - 04:13:06 | N | 732542098] 	E:\las vegas 21 .avi
[17/10/2009 - 10:40:51 | N | 733624320] 	E:\Lascars .avi
[08/11/2011 - 16:03:11 | D ] 	E:\Le seigneur des anneaux
[07/10/2007 - 00:26:26 | N | 733906944] 	E:\le tour du monde en 80 jours.avi
[06/11/2009 - 06:28:42 | N | 730316800] 	E:\Max Payne.avi
[02/05/2008 - 20:57:38 | N | 734982144] 	E:\maxi papa .avi
[01/04/2013 - 12:17:11 | N | 528] 	E:\MediaID.bin
[15/08/2008 - 09:26:18 | N | 726761472] 	E:\Meet.Dave.avi
[18/01/2010 - 21:25:16 | N | 734898176] 	E:\Meilleures Ennemies.avi
[06/01/2010 - 00:23:33 | N | 652265472] 	E:\Memento.avi
[23/02/2008 - 12:41:10 | N | 729909248] 	E:\Memoire Effacee.avi
[03/09/2009 - 17:08:51 | N | 734160896] 	E:\Mensonges D'etat .avi
[08/04/2009 - 18:57:16 | N | 733689856] 	E:\Mesrine L'ennemi public numero 1.avi
[27/03/2009 - 04:37:38 | N | 733714432] 	E:\Mesrine.L'Instinct.De.Mort.avi
[01/12/2009 - 00:58:21 | N | 734351360] 	E:\Meurtre a la saint Valentin.avi
[17/10/2006 - 10:38:04 | N | 722931712] 	E:\Miami vice.avi
[18/11/2006 - 20:16:52 | N | 728788992] 	E:\Michel Muller Fallait Pas M Inviter .avi
[27/09/2008 - 09:02:40 | N | 731856896] 	E:\MR.73.avi
[29/11/2009 - 14:52:03 | N | 735640038] 	E:\Mutants.avi
[21/11/2009 - 23:24:30 | N | 729712640] 	E:\Mutants.Chronicles.avi
[08/05/2010 - 02:53:42 | N | 734019584] 	E:\My.Neighbors.Secret.avi
[14/12/2009 - 04:12:16 | N | 732680192] 	E:\Ne te retourne pas .avi
[26/03/2010 - 02:34:03 | N | 737119896] 	E:\Never cry werewolf.avi
[04/01/2011 - 02:00:59 | N | 1065834214] 	E:\Pas si simple.AVI
[16/05/2009 - 09:47:18 | N | 678169306] 	E:\Pathology.avi
[08/11/2011 - 15:47:18 | D ] 	E:\Petit ours brun
[15/06/2009 - 21:47:12 | N | 733169622] 	E:\Pistolero.avi
[25/11/2009 - 16:16:08 | N | 732553216] 	E:\Planet 51.avi
[05/01/2010 - 21:35:12 | N | 733685760] 	E:\Post grad .avi
[10/08/2009 - 22:13:35 | N | 733698048] 	E:\Predictions .avi
[26/01/2011 - 15:26:02 | N | 733958144] 	E:\Prète Moi Ta Main DvDRiP Fr.avi
[10/09/2009 - 18:53:10 | N | 739119104] 	E:\Push.avi
[02/02/2010 - 17:12:58 | N | 732862464] 	E:\Quantum Apocalypse.avi
[15/03/2009 - 10:20:32 | N | 737729742] 	E:\Quantum Of Solace.avi
[30/10/2007 - 19:57:48 | N | 733956096] 	E:\Quatre.Etoiles .avi
[03/04/2011 - 13:38:34 | N | 738435324] 	E:\Rampage .avi
[25/02/2011 - 09:54:06 | N | 734513152] 	E:\RED.avi
[08/08/2010 - 12:14:43 | N | 731805696] 	E:emenber1.avi
[21/01/2010 - 17:22:01 | N | 733550592] 	E:\Rescue dawn .avi
[16/10/2010 - 14:40:47 | N | 733862038] 	E:\SALT.avi
[08/10/2008 - 03:19:34 | N | 733687808] 	E:\Sans Plus Attendre.avi
[08/11/2011 - 16:02:03 | D ] 	E:\Saw
[21/05/2009 - 01:24:02 | N | 733550592] 	E:\Scarface .avi
[18/07/2002 - 16:10:10 | N | 726179840] 	E:\Se souvenir des belles choses.avi
[03/09/2009 - 17:25:01 | N | 730216448] 	E:\Secret.Defense.avi
[04/01/2010 - 23:32:45 | N | 733970432] 	E:\Severance.avi
[25/02/2010 - 15:09:24 | N | 733798400] 	E:\Sherlock Holmes.avi
[19/01/2010 - 22:59:55 | N | 733886464] 	E:\Shooter tireur d'élite .avi
[22/06/2008 - 03:03:28 | N | 729841664] 	E:\Shooting.Dogs.avi
[06/10/2007 - 20:25:38 | N | 736364544] 	E:\Spiderman 3.avi
[16/09/2007 - 21:39:20 | N | 732192768] 	E:\Spiderman.avi
[06/01/2010 - 18:33:19 | N | 727341056] 	E:\Spirits .avi
[08/11/2011 - 16:02:35 | D ] 	E:\Star wars
[06/01/2010 - 00:05:00 | N | 734294650] 	E:\Staten Island .avi
[10/03/2010 - 14:28:15 | N | 738076672] 	E:\Stiletto.avi
[14/05/2010 - 13:49:07 | N | 733655040] 	E:\Stolen.Life.avi
[14/05/2010 - 13:39:19 | N | 736057344] 	E:\Stripped naked.avi
[14/05/2010 - 14:19:58 | N | 1115611562] 	E:\Sueurs.avi
[28/11/2011 - 19:36:17 | SHD ] 	E:\System Volume Information
[04/01/2010 - 03:01:58 | N | 733724672] 	E:\Taken.avi
[09/04/2010 - 16:44:55 | N | 733603840] 	E:\Tellement proches.avi
[21/11/2009 - 21:46:16 | N | 733886464] 	E:\Terminator.Renaissance.avi
[02/01/2010 - 23:57:33 | N | 718018560] 	E:\The broken.avi
[14/02/2010 - 15:02:12 | N | 735887360] 	E:\The candidate.avi
[09/11/2009 - 21:50:04 | N | 730474606] 	E:\The Descent .avi
[06/03/2010 - 03:16:38 | N | 1377837056] 	E:\The Descent 2.avi
[09/09/2010 - 18:30:34 | N | 733947904] 	E:	out ce qui brille.avi
[14/10/2009 - 23:51:26 | N | 733001728] 	E:\Transformers  revanche CD1.avi
[14/10/2009 - 23:51:30 | N | 729110528] 	E:\Transformers  revanche CD2.avi
[12/09/2012 - 13:31:23 | D ] 	F:\CE
[12/09/2012 - 13:31:43 | R | 17175104] 	F:\autorun.exe
[12/09/2012 - 13:31:22 | R | 47] 	F:\autorun.inf
[12/09/2012 - 13:31:22 | D ] 	F:\manual
[12/09/2012 - 13:31:24 | D ] 	F:\software

################## | Vaccin |

C:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)
E:\Autorun.inf -> Vaccin créé par UsbFix (El Desaparecido)

################## | E.O.F | https://www.sosvirus.net/ |

désolé pour celui la je n est pas réussi a l héberger
merci d avance de ta patience :)

H.A.W.X · Answer

Bonsoir,

Ok pour tes rapports, tu as tout bien fait, bravo :)

Toujours snap do ?

mevla77 · Answer

oui malheureusement il est toujours la :/

H.A.W.X · Answer

Bonsoir,

Le mot à chercher est snap

Suis ceci stp :
~ http://sosvirus.net/viewtopic.php?f=281&t=655

mevla77 · Answer

http://upload.sosvirus.net/log/SosUpload.16fab3a30fca9bb5128bdf868258dd58.txt

H.A.W.X · Answer

Bonjour,

Copie les lignes en gras ci dessous :

[HKCU\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}]:URL="https://search.safefinder.com/?q=
[HKCU\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchUrl]:Default="https://search.safefinder.com/?q=


Puis suis ceci :
~ http://sosvirus.net/viewtopic.php?f=281&t=579

J'attends donc 1 rapport :
¤ ZHPFixReport.txt

mevla77 · Answer

bonjour

http://upload.sosvirus.net/log/SosUpload.8c66677ee087247c4cde99cdf2c57a50.txt

snap do toujours la...

mevla77 · Answer

re
j ai remarquer une chose après avoir fait zhpfix j ai relancer chrome et la je suis tomber direct sur google j ai donc refermer la page net et quand je l ai ré-ouvert snap do étais revenu 
si sa peut aider :)

H.A.W.X · Answer

Bonjour,

J'ai quelques soucis en ce moment d'ou le fait que tu n'es pas eu de réponse, c'est ma faute, c'est au niveau du script que ça foire, je corrige ça ...

mevla77 · Answer

bonjour

pas de soucie,merci d avance

H.A.W.X · Answer

Je post demain ;)

mevla77 · Answer

bonjour

tu n'a pas trouver de solution?

H.A.W.X · Answer

Bonjour,

Fait ces deux choses stp :

~ https://www.security-helpzone.com/2013/06/15/reinitialiser-google-chrome/?google_seo_thread=Google-Chrome-Comment-reinitialiser-le-navigateur

~ https://support.microsoft.com/en-us/windows?ui=en-US&rs=en-001&ad=US

mevla77 · Answer

bonjour 

s'est bon snapdo n est plus la il avais du se mettre dans mon compte google ,j ai perdu mes favoris mais je m en remettrais :)
un grand merci a toi pour le temps que tu ma accorder 
merci.

Suppression de snap-do

38 réponses

Discussions similaires

Newsletters