Sam654

Merci beaucoup !!

Est-ce un problème de type spyware ? Je n'ai pas d'antispyware j'ai peur qu'en installant un mon pc ralentisse .. Rapport de ZHPFix 2013.7.20.5 par Nicolas Coolman, Update du 20/07/2013 Fichier d'export Registre : Run by Samuel at 02/08/2013 13:36:47 High Elevated Privileges : OK Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) Corbeille vidée ========== Clé(s) du Registre ========== SUPPRIME Key: HKCU\Software\YahooPartnerToolbar SUPPRIME Key: HKLM\Software\Wow6432Node\Conduit SUPPRIME Key: HKLM\Software\Wow6432Node\Google\Chrome\Extensions\elhjaoldnkkbifioodjndkijecdeinld SUPPRIME Key: HKLM\Software\Classes\Toolbar.CT2849852 ABSENT Key: HKLM\Software\Wow6432Node\Classes\Toolbar.CT2849852 SUPPRIME Key: HKLM\Software\Wow6432Node\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1} ABSENT Key: HKCU\Software\YahooPartnerToolbar ABSENT Key: HKLM\Software\Wow6432Node\Conduit ========== Valeur(s) du Registre ========== SUPPRIME TCP Query User{101EF9AF-AAC7-483D-AB33-4B5D259BCBE6}C:\program files (x86)\linuxlive usb creator\lili usb creator.exe SUPPRIME UDP Query User{E669ED78-ECC6-4A48-85F0-857E2DCB9EAD}C:\program files (x86)\linuxlive usb creator\lili usb creator.exe SUPPRIME TCP Query User{AED2E787-2735-4FCB-A846-FF8100BEA3F1}C:\users\samuel\desktop\redsnow\redsn0w_win_0.9.10b1\redsn0w.exe SUPPRIME UDP Query User{522E5E2A-665C-4AEE-BBFD-F5F4406892CE}C:\users\samuel\desktop\redsnow\redsn0w_win_0.9.10b1\redsn0w.exe SUPPRIME TCP Query User{CAD78987-A19D-472A-9DEE-FA8F54A382AC}C:\users\samuel\desktop\redsnow\redsn0w_win_0.9.10b2\redsn0w.exe SUPPRIME UDP Query User{6D46A311-A61B-47F0-A6D2-8D557A9073DA}C:\users\samuel\desktop\redsnow\redsn0w_win_0.9.10b2\redsn0w.exe SUPPRIME TCP Query User{AD79CE25-B9BB-42CB-ACE0-DAEA64AC755F}C:\users\samuel\desktop\redsnow\redsn0w_win_0.9.10b3\redsn0w.exe SUPPRIME UDP Query User{B7E17B82-4D10-42C8-9F04-252B911CC74D}C:\users\samuel\desktop\redsnow\redsn0w_win_0.9.10b3\redsn0w.exe SUPPRIME URLSearchHook: {ef79f67a-6ad7-4715-a0f8-932fca442023} ABSENT Valeur Standard Profile: FirewallRaz : ABSENT Valeur Domain Profile: FirewallRaz : SUPPRIME FirewallRaz (Domain) : NetPres-In-TCP-NoScope SUPPRIME FirewallRaz (Domain) : NetPres-Out-TCP-NoScope SUPPRIME FirewallRaz (None) : NetPres-WSD-In-UDP SUPPRIME FirewallRaz (None) : NetPres-WSD-Out-UDP SUPPRIME FirewallRaz (Public) : NetPres-In-TCP SUPPRIME FirewallRaz (Public) : NetPres-Out-TCP SUPPRIME FirewallRaz (None) : {FD7359ED-0657-4100-B102-B7F5B1B4B77B} SUPPRIME FirewallRaz (Private) : TCP Query User{E3399C30-29E2-4C8C-8456-7A0C960B4C1E}C:\program files (x86)\lolreplay\lolreplay.exe SUPPRIME FirewallRaz (Private) : UDP Query User{BF1D2AB2-0D56-4E46-93C2-FF6907E971C9}C:\program files (x86)\lolreplay\lolreplay.exe ========== Dossier(s) ========== Aucun dossiers CLSID Local utilisateur vide ========== Fichier(s) ========== SUPPRIME File: c:\bdr-cf01 SUPPRIME File: c:\bdr-ld01 SUPPRIME File: c:\bdr-ld01.mbr SUPPRIME File: c:\bdr-bz01 SUPPRIME File: c:\bdr-im01.gz SUPPRIME File: C:\ProgramData\1333580378.bdinstall.bin SUPPRIME File*: c:\programdata\1333580378.bdinstall.bin SUPPRIME File: C:\ProgramData\1375192593.bdinstall.bin SUPPRIME File*: c:\programdata\1375192593.bdinstall.bin ABSENT Folder/File: c:\program files (x86)\conduit ABSENT Folder/File: c:\users\samuel\appdata\local\conduit SUPPRIME Flash Cookies SUPPRIME Temporaires Windows ========== Restauration Système ========== Point de restauration du système créé avec succès ========== Récapitulatif ========== 8 : Clé(s) du Registre 20 : Valeur(s) du Registre 1 : Dossier(s) 13 : Fichier(s) 1 : Restauration Système End of clean in 00mn 41s ========== Chemin de fichier rapport ========== C:\ZHP\ZHPFix[R1].txt - 02/08/2013 13:36:49 [3668]

© CJoint.com, 2012 Merci

Bonjour, J'ai vécu sans antivirus pendant quelques temps sans trop toucher mon pc, j'ai acheté bitdefender internet security 2013 donc je suis protégé, mais le problème c'est que même quand je navigue sur les forums zebulon par exemple j'ai des fenêtres qui s'ouvrent sans mon consentement ! aidez moi s'il vous plait j'ai deja fais un scan complet sans résultats ! Voici le rapport hijackthis : Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 11:47:47, on 02/08/2013 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v10.0 (10.00.9200.16635) FIREFOX: 22.0 (fr) Boot mode: Normal Running processes: C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe C:\Program Files (x86)\Launch Manager\LManager.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\Launch Manager\LMworker.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe C:\Program Files (x86)\Internet Download Manager\IDMan.exe C:\Users\Samuel\Downloads\Programs\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.fr - Actualités, magazines people & féminin, Outlook et Hotmail R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.fr - Actualités, magazines people & féminin, Outlook et Hotmail R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.fr - Actualités, magazines people & féminin, Outlook et Hotmail R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {ef79f67a-6ad7-4715-a0f8-932fca442023} - (no file) F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O4 - HKLM\..\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe O4 - HKLM\..\Run: [backupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" -h -k O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [iDMan] C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\RunOnce: [{90120000-0011-0000-0000-0000000FF1CE}] C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H (User 'Système') O4 - HKUS\S-1-5-18\..\RunOnce: [{90120000-0018-040C-0000-0000000FF1CE}] C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H (User 'Système') O4 - HKUS\S-1-5-18\..\RunOnce: [{90120000-0019-040C-0000-0000000FF1CE}] C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H (User 'Système') O4 - HKUS\S-1-5-18\..\RunOnce: [{90120000-001B-040C-0000-0000000FF1CE}] C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H (User 'Système') O4 - HKUS\S-1-5-18\..\RunOnce: [{90120000-0015-040C-0000-0000000FF1CE}] C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H (User 'Système') O4 - HKUS\.DEFAULT\..\RunOnce: [{90120000-0011-0000-0000-0000000FF1CE}] C:\Windows\system32\cmd.exe /C del "C:\ProgramData\Microsoft Help\Rgstrtn.lck" /Q /A:H (User 'Default user') O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Télécharger avec IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm O8 - Extra context menu item: Télécharger tous les liens avec IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://www.darty.com/dartybox/scanner/wwwroot/ols/fscax.cab O23 - Service: Adobe Active File Monitor V8 (AdobeActiveFileMonitor8.0) - Adobe Systems Incorporated - c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (AudioSrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\Packard Bell Games\Packard Bell Game Console\GameConsoleService.exe O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\netprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\Windows\SysWow64\perfhost.exe O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Intel® Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe O23 - Service: Updater Service - Acer Group - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe O23 - Service: Bitdefender Desktop Update Service (UPDATESRV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: Bitdefender Virus Shield (VSSERV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe -- End of file - 24738 bytes

Merci pour tout Rapport Zhp Fix : Rapport de ZHPFix 1.12.3372 par Nicolas Coolman, Update du 22/11/2011 Fichier d'export Registre : Run by Naomie at 09/05/2012 22:20:04 Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) Web site : ZHPFix Fix de rapport ========== Processus mémoire ========== SUPPRIME Memory Process: C:\Users\Naomie\Downloads\setup.exe ========== Valeur(s) du Registre ========== ABSENT Valeur Standard Profile: FirewallRaz : ABSENT Valeur Domain Profile: FirewallRaz : SUPPRIME FirewallRaz (Domain) : NetPres-In-TCP-NoScope SUPPRIME FirewallRaz (Domain) : NetPres-Out-TCP-NoScope SUPPRIME FirewallRaz (None) : NetPres-WSD-In-UDP SUPPRIME FirewallRaz (None) : NetPres-WSD-Out-UDP SUPPRIME FirewallRaz (Public) : NetPres-In-TCP SUPPRIME FirewallRaz (Public) : NetPres-Out-TCP SUPPRIME FirewallRaz (Public) : {25FD5E49-CA2B-44A5-BAD7-8EACEE5D191B} SUPPRIME FirewallRaz (Public) : {E2126C46-1934-4871-99AD-8C0A7E49FB22} SUPPRIME FirewallRaz (Private) : TCP Query User{ECB2BC08-06ED-4900-AFC9-5DD4A30A20AD}C:\users\naomie\downloads\tinyumbrella-4.21.05.exe SUPPRIME FirewallRaz (Private) : UDP Query User{6E1BBFC2-178B-4B1B-B458-B3C4C4C3FCCF}C:\users\naomie\downloads\tinyumbrella-4.21.05.exe SUPPRIME FirewallRaz (Private) : TCP Query User{BFDD3C85-5AA2-4CB7-96C5-11CEDFE6A8AE}C:\users\naomie\desktop\sam\tinyumbrella-4.21.05.exe SUPPRIME FirewallRaz (Private) : UDP Query User{419D4FB3-D28B-454A-ACAA-C02FC620E461}C:\users\naomie\desktop\sam\tinyumbrella-4.21.05.exe SUPPRIME FirewallRaz (None) : {C1BD5DDE-51A7-4569-8625-D9466594CDB0} SUPPRIME FirewallRaz (Private) : TCP Query User{0B8FA2AB-B25A-4630-BE47-6FCA9FD86CEF}C:\users\naomie\desktop\sam\tinyumbrella-4.21.07.exe SUPPRIME FirewallRaz (Private) : UDP Query User{EBCFDDCD-20EA-4226-93AC-199A30B4CFD9}C:\users\naomie\desktop\sam\tinyumbrella-4.21.07.exe SUPPRIME FirewallRaz (Private) : TCP Query User{C2641418-6716-4357-BB83-9794E53D5268}C:\program files (x86)\videolan\vlc\vlc.exe SUPPRIME FirewallRaz (Private) : UDP Query User{3F59F5DC-C629-468B-95CD-065EA9705E59}C:\program files (x86)\videolan\vlc\vlc.exe SUPPRIME FirewallRaz (Private) : {F75ED2DD-90FA-4078-A709-53DD347BF77A} SUPPRIME FirewallRaz (Private) : {E95A4B22-FECD-437F-8D8A-B695AC92921E} ========== Dossier(s) ========== SUPPRIME Folder: C:\Program Files (x86)\Fluendo SUPPRIME Folder: C:\Users\Naomie\AppData\Roaming\moovida-1 SUPPRIME Folder: C:\Users\Naomie\AppData\Local\moovida Air SUPPRIME Folder: c:\users\naomie\appdata\roaming\adobe\plugs SUPPRIME Folder: c:\users\naomie\appdata\roaming\adobe\shed SUPPRIME Temporaires Windows: : 106 SUPPRIME Flash Cookies: 25 ========== Fichier(s) ========== SUPPRIME File*: c:\users\naomie\downloads\setup.exe ABSENT Folder/File: c:\users\naomie\appdata\local\moovida air SUPPRIME Temporaires Windows: : 186 SUPPRIME Flash Cookies: 15 ========== Tache planifiée ========== SUPPRIME Task: {84FE5D2B-ABF6-45D7-B544-2216D8FA4970} ========== Récapitulatif ========== 1 : Processus mémoire 21 : Valeur(s) du Registre 7 : Dossier(s) 4 : Fichier(s) 1 : Tache planifiée End of clean in 00mn 15s ========== Chemin de fichier rapport ========== C:\ZHP\ZHPFix[R1].txt - 09/05/2012 22:20:04 [3216] Rapport UsbFix pour deux clés usb : ############################## | UsbFix V 7.087 | [Recherche] Utilisateur: Naomie (Administrateur) # NAOMIE281 Mis à jour le 05/04/2012 par El Desaparecido Lancé à 22:48:40 | 09/05/2012 Site Web: http://eldesaparecido.com Fichier suspect ? : http://eldesaparecido.com/upload.html Contact: [email protected] PC: TOSHIBA (Satellite C650) (x64-based PC) # Notebook CPU: Pentium® Dual-Core CPU T4500 @ 2.30GHz (2300) RAM -> [ Total : 3964 | Free : 2369 ] BIOS: InsydeH2O Version 1.20 BOOT: Normal boot OS: Microsoft Windows 7 Édition Familiale Premium (6.1.7601 64-Bit) # Service Pack 1 WB: Windows Internet Explorer 8.0.7601.17514 SC: Security Center Service [ Enabled ] WU: Windows Update Service [ Enabled ] AV: Bitdefender Antivirus [ Enabled | Updated ] FW: Windows FireWall Service [ Enabled ] C:\ (%systemdrive%) -> Disque fixe # 233 Go (128 Go libre(s) - 55%) [WINDOWS] # NTFS D:\ -> Disque fixe # 233 Go (225 Go libre(s) - 97%) [Data] # NTFS E:\ -> CD-ROM F:\ -> Disque amovible # 2 Go (2 Go libre(s) - 100%) [uSB DISK] # FAT32 G:\ -> Disque amovible # 4 Go (2 Go libre(s) - 49%) [MYLINUXLIVE] # FAT32 ################## | Processus Actif | C:\Windows\system32\csrss.exe (528) C:\Windows\system32\wininit.exe (592) C:\Windows\system32\csrss.exe (604) C:\Windows\system32\services.exe (640) C:\Windows\system32\lsass.exe (664) C:\Windows\system32\lsm.exe (672) C:\Windows\system32\svchost.exe (780) C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe (836) C:\Windows\system32\winlogon.exe (880) C:\Windows\system32\svchost.exe (1180) C:\Windows\System32\svchost.exe (1288) C:\Windows\System32\svchost.exe (1392) C:\Windows\system32\svchost.exe (1436) C:\Windows\system32\svchost.exe (1552) C:\Windows\system32\svchost.exe (1712) C:\Windows\System32\spoolsv.exe (1984) C:\Windows\system32\svchost.exe (2016) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1412) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (2064) C:\Program Files\Bonjour\mDNSResponder.exe (2088) C:\Windows\system32\svchost.exe (2128) c:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe (2188) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (2524) C:\Windows\system32\svchost.exe (2588) C:\Windows\system32\TODDSrv.exe (2612) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (2672) C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe (2768) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (2872) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (2968) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (3004) C:\Windows\system32\wbem\wmiprvse.exe (2560) C:\Windows\system32\taskhost.exe (3180) C:\Windows\system32\Dwm.exe (3264) C:\Windows\Explorer.EXE (3396) C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe (3404) C:\Windows\System32\hkcmd.exe (3880) C:\Windows\System32\igfxpers.exe (3896) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (3924) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (4052) C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (4068) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (4088) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (1924) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe (3412) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe (3624) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (3636) C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe (3616) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (4188) C:\Windows\system32\SearchIndexer.exe (4328) C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe (4376) C:\Windows\system32\svchost.exe (4664) C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe (4976) C:\Program Files (x86)\Toshiba\TOSHIBA Web Camera Application\TWebCamera.exe (4984) C:\Windows\system32\igfxext.exe (5076) C:\Windows\system32\igfxsrvc.exe (4124) C:\Program Files (x86)\iTunes\iTunesHelper.exe (2084) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (4940) C:\Program Files\iPod\bin\iPodService.exe (3816) C:\Program Files\Windows Media Player\wmpnetwk.exe (5160) C:\Windows\System32\svchost.exe (5288) C:\Windows\system32\taskeng.exe (5452) C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe (5488) C:\Windows\system32\DllHost.exe (6076) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe (5904) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (5756) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (3152) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe (4428) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe (4696) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe (3564) C:\Windows\system32\wbem\wmiprvse.exe (3376) C:\Windows\System32\svchost.exe (848) C:\UsbFix\Go.exe (4112) C:\Program Files\Bitdefender\Bitdefender 2012\odscanui.exe (3764) C:\Windows\system32\WUDFHost.exe (4484) ################## | Éléments infectieux | ################## | Registre | ################## | Mountpoints2 | HKCU\.\.\.\.\Explorer\MountPoints2\{e5f247a5-a597-11e0-86c1-00266c5d433a} Shell\AutoRun\Command = "G:\WD SmartWare.exe" autoplay=true ################## | Vaccin | (!) Cet ordinateur n'est pas vacciné! ################## | E.O.F | Rapport UsbFix pour mon disque dur : ############################## | UsbFix V 7.087 | [Recherche] Utilisateur: Naomie (Administrateur) # NAOMIE281 Mis à jour le 05/04/2012 par El Desaparecido Lancé à 22:53:32 | 09/05/2012 Site Web: http://eldesaparecido.com Fichier suspect ? : http://eldesaparecido.com/upload.html Contact: [email protected] PC: TOSHIBA (Satellite C650) (x64-based PC) # Notebook CPU: Pentium® Dual-Core CPU T4500 @ 2.30GHz (2300) RAM -> [ Total : 3964 | Free : 2363 ] BIOS: InsydeH2O Version 1.20 BOOT: Normal boot OS: Microsoft Windows 7 Édition Familiale Premium (6.1.7601 64-Bit) # Service Pack 1 WB: Windows Internet Explorer 8.0.7601.17514 SC: Security Center Service [ Enabled ] WU: Windows Update Service [ Enabled ] AV: Bitdefender Antivirus [ Enabled | Updated ] FW: Windows FireWall Service [ Enabled ] C:\ (%systemdrive%) -> Disque fixe # 233 Go (128 Go libre(s) - 55%) [WINDOWS] # NTFS D:\ -> Disque fixe # 233 Go (225 Go libre(s) - 97%) [Data] # NTFS E:\ -> CD-ROM F:\ -> CD-ROM H:\ -> Disque fixe # 297 Go (196 Go libre(s) - 66%) [My Passport] # NTFS ################## | Processus Actif | C:\Windows\system32\csrss.exe (528) C:\Windows\system32\wininit.exe (592) C:\Windows\system32\csrss.exe (604) C:\Windows\system32\services.exe (640) C:\Windows\system32\lsass.exe (664) C:\Windows\system32\lsm.exe (672) C:\Windows\system32\svchost.exe (780) C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe (836) C:\Windows\system32\winlogon.exe (880) C:\Windows\system32\svchost.exe (1180) C:\Windows\System32\svchost.exe (1288) C:\Windows\System32\svchost.exe (1392) C:\Windows\system32\svchost.exe (1436) C:\Windows\system32\svchost.exe (1552) C:\Windows\system32\svchost.exe (1712) C:\Windows\System32\spoolsv.exe (1984) C:\Windows\system32\svchost.exe (2016) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (1412) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (2064) C:\Program Files\Bonjour\mDNSResponder.exe (2088) C:\Windows\system32\svchost.exe (2128) c:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe (2188) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (2524) C:\Windows\system32\svchost.exe (2588) C:\Windows\system32\TODDSrv.exe (2612) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (2672) C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe (2768) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (2872) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (2968) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (3004) C:\Windows\system32\wbem\wmiprvse.exe (2560) C:\Windows\system32\taskhost.exe (3180) C:\Windows\system32\Dwm.exe (3264) C:\Windows\Explorer.EXE (3396) C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe (3404) C:\Windows\System32\hkcmd.exe (3880) C:\Windows\System32\igfxpers.exe (3896) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (3924) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (4052) C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (4068) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (4088) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (1924) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe (3412) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe (3624) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (3636) C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe (3616) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (4188) C:\Windows\system32\SearchIndexer.exe (4328) C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe (4376) C:\Windows\system32\svchost.exe (4664) C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe (4976) C:\Program Files (x86)\Toshiba\TOSHIBA Web Camera Application\TWebCamera.exe (4984) C:\Windows\system32\igfxext.exe (5076) C:\Windows\system32\igfxsrvc.exe (4124) C:\Program Files (x86)\iTunes\iTunesHelper.exe (2084) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (4940) C:\Program Files\iPod\bin\iPodService.exe (3816) C:\Program Files\Windows Media Player\wmpnetwk.exe (5160) C:\Windows\System32\svchost.exe (5288) C:\Windows\system32\taskeng.exe (5452) C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe (5488) C:\Windows\system32\DllHost.exe (6076) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe (5904) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (5756) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (3152) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe (4428) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe (4696) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe (3564) C:\Windows\system32\wbem\wmiprvse.exe (3376) C:\Windows\System32\svchost.exe (1508) C:\UsbFix\Go.exe (848) C:\Program Files\Bitdefender\Bitdefender 2012\odscanui.exe (3272) ################## | Éléments infectieux | ################## | Registre | ################## | Mountpoints2 | HKCU\.\.\.\.\Explorer\MountPoints2\{e5f247a5-a597-11e0-86c1-00266c5d433a} Shell\AutoRun\Command = "F:\WD SmartWare.exe" autoplay=true ################## | Vaccin | (!) Cet ordinateur n'est pas vacciné! ################## | E.O.F | Voilà

En relisant un peu tes réponses je me suis aperçu que avant l'analyse de MBAM je n'avais pas branché de support amovible est ce problématique ?

Ah mais complètement, multiexplorer a disparu et les téléchargements sont beaucoup plus rapides ! En tout cas merci beaucoup t'es un vrai chef ! Voici le rapport de ZhpDiag : Download ZHPDiag.txt from Sendspace.com - send big files the easy way

Malwarebytes Anti-Malware 1.61.0.1400 www.malwarebytes.org Version de la base de données: v2012.05.04.03 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 8.0.7601.17514 Naomie :: NAOMIE281 [administrateur] 04/05/2012 17:54:53 mbam-log-2012-05-04 (17-54-53).txt Type d'examen: Examen complet Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM Options d'examen désactivées: P2P Elément(s) analysé(s): 365051 Temps écoulé: 1 heure(s), 19 minute(s), 37 seconde(s) Processus mémoire détecté(s): 0 (Aucun élément nuisible détecté) Module(s) mémoire détecté(s): 0 (Aucun élément nuisible détecté) Clé(s) du Registre détectée(s): 1 HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor (Rogue.AntimalwareDoctor) -> Mis en quarantaine et supprimé avec succès. Valeur(s) du Registre détectée(s): 0 (Aucun élément nuisible détecté) Elément(s) de données du Registre détecté(s): 0 (Aucun élément nuisible détecté) Dossier(s) détecté(s): 0 (Aucun élément nuisible détecté) Fichier(s) détecté(s): 7 C:\Users\Naomie\AppData\Roaming\trzC042.tmp (Affiliate.Downloader.AI) -> Mis en quarantaine et supprimé avec succès. C:\Users\Naomie\Downloads\Setup_V17FR.exe (Adware.Toolbar) -> Mis en quarantaine et supprimé avec succès. C:\Users\Naomie\Downloads\SoftonicDownloader_pour_windows-live-messenger-msn-messenger(2).exe (PUP.OfferBundler.ST) -> Mis en quarantaine et supprimé avec succès. C:\Users\Naomie\Downloads\SoftonicDownloader_pour_windows-live-messenger-msn-messenger(3).exe (PUP.OfferBundler.ST) -> Mis en quarantaine et supprimé avec succès. C:\Users\Naomie\Downloads\SoftonicDownloader_pour_windows-live-messenger-msn-messenger.exe (PUP.OfferBundler.ST) -> Mis en quarantaine et supprimé avec succès. C:\Users\Naomie\AppData\Roaming\Adobe\shed\thr1.chm (Malware.Trace) -> Mis en quarantaine et supprimé avec succès. C:\Program Files (x86)\rbjcl.vbs (Trojan.StartPage) -> Mis en quarantaine et supprimé avec succès. (fin)

Merci pour ta réponse et désolé de cette absence j'ai eu une semaine fatiguante Bon voici le premier rapport : ======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par TeamXscript le 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com Site web: webmail http://webmail.ovh.net C:\Program Files (x86)\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 17:08:55 le 04/05/2012, Mode normal Microsoft Windows 7 Édition Familiale Premium Service Pack 1 (X64) Naomie@NAOMIE281 (TOSHIBA Satellite C650) ============== ACTION(S) ============== Dossier supprimé: C:\Program Files (x86)\Mozilla FireFox\extensions\{34EFA911-B536-4C08-BECE-CD5E55C875B0} Fichier supprimé: C:\Program Files (x86)\Mozilla FireFox\searchplugins\iMeshWebSearch.xml Fichier supprimé: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navigateur OfferBox.lnk Fichier supprimé: C:\Users\Naomie\AppData\Roaming\Mozilla\FireFox\Profiles\q9gisksq.default\searchplugins\askcom.xml Dossier supprimé: C:\Users\Naomie\AppData\Roaming\Mozilla\FireFox\Profiles\q9gisksq.default\conduit Dossier supprimé: C:\Users\Naomie\AppData\Roaming\Mozilla\FireFox\Profiles\q9gisksq.default\ConduitEngine Fichier supprimé: C:\Users\Naomie\AppData\Roaming\Mozilla\FireFox\Profiles\q9gisksq.default\searchplugins\conduit.xml Dossier supprimé: C:\Users\Naomie\AppData\Roaming\Mozilla\FireFox\Profiles\q9gisksq.default\extensions\{28D35620-51D9-11DE-9D13-2DB156D89593} Dossier supprimé: C:\Users\Naomie\AppData\Roaming\Mozilla\FireFox\Profiles\q9gisksq.default\iMeshMediabarTb Fichier supprimé: C:\Users\Naomie\AppData\Roaming\Mozilla\FireFox\Profiles\q9gisksq.default\searchplugins\iMeshWebSearch.xml Dossier supprimé: C:\Users\Naomie\Documents\Imesh Dossier supprimé: C:\Users\Naomie\Music\Imesh Dossier supprimé: C:\Program Files (x86)\Ask.com Dossier supprimé: C:\Users\Naomie\AppData\Local\Conduit Dossier supprimé: C:\Users\Naomie\AppData\LocalLow\Conduit Dossier supprimé: C:\Program Files (x86)\Conduit Dossier supprimé: C:\Users\Naomie\AppData\LocalLow\ConduitEngine Dossier supprimé: C:\Users\Naomie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CrazyLoader Dossier supprimé: C:\Program Files (x86)\CrazyLoader Dossier supprimé: C:\Users\Naomie\AppData\LocalLow\PriceGong Dossier supprimé: C:\ProgramData\ResultBar Dossier supprimé: C:\Program Files (x86)\ResultBar Dossier supprimé: C:\Users\Naomie\AppData\Roaming\OfferBox Dossier supprimé: C:\Program Files (x86)\OfferBox Dossier supprimé: C:\Users\Naomie\AppData\Local\iMesh Dossier supprimé: C:\Program Files (x86)\iMesh Applications Dossier supprimé: C:\Users\Naomie\AppData\LocalLow\iMeshMediabarTb (!) -- Fichiers temporaires supprimés. -- Fichier ouvert: C:\Users\Naomie\AppData\Roaming\Mozilla\FireFox\Profiles\q9gisksq.default\Prefs.js -- Ligne supprimée: user_pref("CT2207610.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT220... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/605881/601743/FR", "\"0\"")... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/FR", "\"0\"")... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2207610", ... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.2.5... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2207610",... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63441682370827... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2207610&octid=... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2207610/CT2207610... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Midnight/equalizer... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Midnight/minimize.... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Midnight/play.gif"... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Midnight/stop.gif"... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Midnight/vol.gif",... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE",... Ligne supprimée: user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=fr-fr", "\"... Ligne supprimée: user_pref("CommunityToolbar.EngineOwner", "CT2207610"); Ligne supprimée: user_pref("CommunityToolbar.EngineOwnerGuid", "{6d6b212b-2245-4898-8b16-9a11b81ff9e1}"); Ligne supprimée: user_pref("CommunityToolbar.EngineOwnerToolbarId", "softonic_france_ff"); Ligne supprimée: user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true); Ligne supprimée: user_pref("CommunityToolbar.OriginalEngineOwner", ""); Ligne supprimée: user_pref("CommunityToolbar.OriginalEngineOwnerGuid", ""); Ligne supprimée: user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", ""); Ligne supprimée: user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.avg.com/route/?d=4d066552&... Ligne supprimée: user_pref("CommunityToolbar.ToolbarsList", "CT2207610"); Ligne supprimée: user_pref("CommunityToolbar.ToolbarsList2", "CT2207610"); Ligne supprimée: user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sun Sep 25 2011 12:32:52 GMT+02... Ligne supprimée: user_pref("CommunityToolbar.alert.alertInfoInterval", 1440); Ligne supprimée: user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sat Mar 10 2012 19:57:30 GMT+0100"); Ligne supprimée: user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com"); Ligne supprimée: user_pref("CommunityToolbar.alert.locale", "en"); Ligne supprimée: user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); Ligne supprimée: user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sat Mar 10 2012 19:57:30 GMT+0100"); Ligne supprimée: user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611"); Ligne supprimée: user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); Ligne supprimée: user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com"); Ligne supprimée: user_pref("CommunityToolbar.alert.showTrayIcon", false); Ligne supprimée: user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); Ligne supprimée: user_pref("CommunityToolbar.alert.userId", "2aa207f7-0fc0-43ed-b235-f78d15eee73a"); Ligne supprimée: user_pref("CommunityToolbar.globalUserId", "790535a7-5671-4102-8158-6e819c9824b9"); Ligne supprimée: user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); Ligne supprimée: user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); Ligne supprimée: user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2207610"); Ligne supprimée: user_pref("browser.search.defaultengine", "Ask.com"); Ligne supprimée: user_pref("browser.search.order.1", "Ask.com"); Ligne supprimée: user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2207610&q="); -- Fichier Fermé -- Clé supprimée: HKLM\Software\Classes\CLSID\{7A3D6D17-9DD5-4C60-8076-D1784DABAF8C} Clé supprimée: HKLM\Software\Classes\AppID\{D2083641-E57F-4eab-BB85-0582424F4A29} Clé supprimée: HKLM\Software\Classes\CLSID\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C} Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C} Clé supprimée: HKLM\Software\Classes\Conduit.Engine Clé supprimée: HKLM\Software\Classes\MenuButtonIE.ButtonIE Clé supprimée: HKLM\Software\Classes\MenuButtonIE.ButtonIE.1 Clé supprimée: HKLM\Software\Classes\OfferBox.OfferBoxServer Clé supprimée: HKLM\Software\Classes\OfferBox.OfferBoxServer.1 Clé supprimée: HKLM\Software\Classes\ShopperReports.Reporter Clé supprimée: HKLM\Software\Classes\ShopperReports.Reporter.1 Clé supprimée: HKLM\Software\Classes\Toolbar.CT2207610 Clé supprimée: HKLM\Software\Classes\AppID\MenuButtonIE.DLL Clé supprimée: HKLM\Software\Conduit Clé supprimée: HKLM\Software\OfferBox Clé supprimée: HKLM\Software\ResultBar Clé supprimée: HKCU\Software\OfferBox Clé supprimée: HKCU\Software\Spointer Clé supprimée: HKCU\Software\AppDataLow\Software\Conduit Clé supprimée: HKCU\Software\AppDataLow\Software\PriceGong Clé supprimée: HKLM\Software\Martin Prikryl\OpenCandy Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} Clé supprimée: HKLM\Software\Classes\AppID\{0D82ACD6-A652-4496-A298-2BDE705F4227} Clé supprimée: HKLM\Software\Classes\AppID\{7025E484-D4B0-441a-9F0B-69063BD679CE} Clé supprimée: HKLM\Software\Classes\AppID\{8258B35C-05B8-4c0e-9525-9BCCC70F8F2D} Clé supprimée: HKLM\Software\Classes\AppID\{A89256AD-EC17-4a83-BEF5-4B8BC4F39306} Clé supprimée: HKLM\Software\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Extensions\{B58926D6-CFB0-45d2-9C28-4B5A0F0368AE} Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform|SRS_IT_E879057EBD765B5536AF95 Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform|SRS_IT_E8790777B0765B5136A198 Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform|SRS_IT_E8790772BC76545031A094 Valeur supprimée: HKLM\Software\Mozilla\Firefox\Extensions|[email protected] Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} Valeur supprimée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{30F9B915-B755-4826-820B-08FBA6BD249D} ============== SCAN ADDITIONNEL ============== **** Mozilla Firefox Version [3.6.28 (fr)] **** HKLM_MozillaPlugins\Adobe Reader (x) HKCU_MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin (x) Searchplugins\avg_igeared.xml (hxxp://search.avg.com/route/?d=4e1c3524&v=7.007.026.001&i=26&tp=chrome&q={searchTerms}&lng=fr&iy=&ychte=fr/) Searchplugins\babylon.xml (hxxp://search.babylon.com/) Searchplugins\McSiteAdvisor.xml ( hxxp://fr.search.yahoo.com/search) -- C:\Users\Naomie\AppData\Roaming\Mozilla\FireFox\Profiles\q9gisksq.default -- Searchplugins\sweetim.xml (?) Prefs.js - browser.search.defaultenginename, AVG Secure Search Prefs.js - browser.search.defaulturl, hxxp://s1.bubbledock.com/store/fr_fr Prefs.js - browser.search.selectedEngine, Prefs.js - browser.startup.homepage, hxxp://pentoweb.net/gs1.php Prefs.js - browser.startup.homepage_override.mstone, rv:1.9.2.28 ======================================== **** Internet Explorer Version [8.0.7601.17514] **** HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896 HKCU_Main|Start Page - hxxp://fr.msn.com/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Start Page - hxxp://fr.msn.com/ HKCU_URLSearchHooks|{A3BC75A2-1F87-4686-AA43-5347D756017C} (x) HKCU_URLSearchHooks|{6d6b212b-2245-4898-8b16-9a11b81ff9e1} (x) HKCU_URLSearchHooks|{EEE6C35D-6118-11DC-9C72-001320C79847} - "SweetIM ToolbarURLSearchHook Class" (C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelper.dll) (x) HKCU_SearchScopes\{43807601-1584-4858-90C4-D16BBFDAA92E} - "AVG Secure Search" (hxxp://search.avg.com/route/?d=$instd$&v=$ver$&i=$dchid$&tp=chrome&q={searchTerm...) HKCU_SearchScopes\{4F9BDAD6-651E-44E7-A3EB-D595F16710F2} - "?" (?) HKCU_SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} - "AVG Secure Search" (hxxp://isearch.avg.com/search?cid={BA3E8E89-4E40-4AED-B62D-DF86F1EA0C2F}&mid=d28...) HKCU_SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - "AVG Secure Search" (hxxp://search.avg.com/route/?d=0&v=7.7.26.1&i=&tp=chrome&q={searchTerms}&lng={la...) HKCU_SearchScopes\{EDCFCAFE-12DF-415F-8E44-B0CB11270FBA} - "eBay" (hxxp://rover.ebay.com/rover/1/709-44555-9400-8/4?satitle={searchTerms}) HKCU_SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} - "SweetIM Search" (hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}) HKLM_SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} - "SweetIM Search" (hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}) HKCU_Toolbar\WebBrowser|{EEE6C35B-6118-11DC-9C72-001320C79847} (C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll) (x) HKCU_Toolbar\WebBrowser|{CCC7A320-B3CA-4199-B1A6-9F516DD69829} (x) HKCU_Toolbar\WebBrowser|{6D6B212B-2245-4898-8B16-9A11B81FF9E1} (x) HKCU_Toolbar\WebBrowser|{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} (x) HKLM_Toolbar|{EEE6C35B-6118-11DC-9C72-001320C79847} (C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll) (x) HKLM_Toolbar|{CCC7A320-B3CA-4199-B1A6-9F516DD69829} (x) HKCU_ElevationPolicy\{1024F1BE-76DC-40d5-AB98-664A4185E5FA} - C:\Users\Naomie\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe (Skype Limited) HKCU_ElevationPolicy\{E0A900DF-9611-4446-86BD-4B1D47E7DB2A} - C:\Users\Naomie\AppData\Local\Google\Chrome\Application\14.0.835.202\chrome_launcher.exe (x) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\SysWOW64\wpcer.exe (x) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\SysWOW64\winfxdocobj.exe (x) HKLM_ElevationPolicy\{1024F1BE-76DC-40d5-AB98-664A4185E5FA} - C:\Users\Naomie\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe (Skype Limited) HKLM_ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} - C:\Program Files (x86)\Iminent\Iminent.Messengers.exe (x) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files (x86)\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{B43A0C1E-B63F-4691-B68F-CD807A45DA01} - C:\Windows\system32\TSWbPrxy.exe (x) HKLM_ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} - C:\Program Files (x86)\Iminent\Iminent.exe (x) HKLM_ElevationPolicy\{EE0DF950-5C7F-4261-8CFA-AE01D71FD9BD} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\SetupUtility.exe (<TOSHIBA>) HKLM_ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe (x) HKLM_ElevationPolicy\{F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\MTSProc.exe (<TOSHIBA>) BHO\{F3C88694-EFFA-4d78-B409-54B7B2535B14} - "TOSHIBA Media Controller Plug-in" (C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll) ======================================== C:\Program Files (x86)\Ad-Remover\Quarantine: 996 Fichier(s) C:\Program Files (x86)\Ad-Remover\Backup: 15 Fichier(s) C:\Ad-Report-CLEAN[1].txt - 04/05/2012 17:08:58 (17671 Octet(s)) Fin à: 17:10:26, 04/05/2012 ============== E.O.F ============== et voici le second : # AdwCleaner v1.604 - Rapport créé le 04/05/2012 à 17:20:19 # Mis à jour le 23/04/2012 par Xplode # Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits) # Nom d'utilisateur : Naomie - NAOMIE281 # Exécuté depuis : C:\Users\Naomie\Desktop\adwcleaner.exe # Option [suppression] ***** [services] ***** ***** [Fichiers / Dossiers] ***** Dossier Supprimé : C:\Users\Naomie\AppData\Local\Babylon Dossier Supprimé : C:\Users\Naomie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda Dossier Supprimé : C:\Users\Naomie\AppData\Local\widestream6 Air Dossier Supprimé : C:\Users\Naomie\AppData\Local\Temp\Iminent Dossier Supprimé : C:\Users\Naomie\AppData\LocalLow\BabylonToolbar Dossier Supprimé : C:\Users\Naomie\AppData\LocalLow\SweetIM Dossier Supprimé : C:\Users\Naomie\AppData\Roaming\Babylon Dossier Supprimé : C:\Users\Naomie\AppData\Roaming\GetRightToGo Dossier Supprimé : C:\Users\Naomie\AppData\Roaming\Nosibay Dossier Supprimé : C:\Users\Naomie\AppData\Roaming\widestream Dossier Supprimé : C:\Users\Naomie\AppData\Roaming\Mozilla\Firefox\Profiles\q9gisksq.default\ConduitCommon Dossier Supprimé : C:\Users\Naomie\Documents\widestream Dossier Supprimé : C:\ProgramData\Babylon Dossier Supprimé : C:\Program Files (x86)\Nosibay Fichier Supprimé : C:\Users\Naomie\AppData\Roaming\Mozilla\Firefox\Profiles\q9gisksq.default\searchplugins\SweetIm.xml Fichier Supprimé : C:\Program Files (x86)\Mozilla Firefox\.autoreg Fichier Supprimé : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml Supprimé au redémarrage : C:\Program Files (x86)\[email protected] ***** [Registre] ***** Clé Supprimée : HKCU\Software\Iminent Clé Supprimée : HKCU\Software\Nosibay Clé Supprimée : HKCU\Software\Softonic Clé Supprimée : HKCU\Software\SweetIm Clé Supprimée : HKLM\SOFTWARE\Babylon Clé Supprimée : HKLM\SOFTWARE\Iminent Clé Supprimée : HKLM\SOFTWARE\SweetIM Clé Supprimée : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar Clé Supprimée : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1 Clé Supprimée : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook Clé Supprimée : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1 Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.sweetie Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1 Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\escort.DLL Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [optical] [x64] Clé Supprimée : HKLM\SOFTWARE\Software ***** [Registre - GUID] ***** Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947} Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{11C27351-716B-4052-9361-E3B0A3F8221C} Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB} Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761} Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B} Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1} Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1} Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847} Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847} Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08} Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847} Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0} Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B} Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC} Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A} Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847} Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847} Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0} Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B} Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC} Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A} Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847} Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847} Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{EEE6C35B-6118-11DC-9C72-001320C79847}] Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{EEE6C35B-6118-11DC-9C72-001320C79847}] Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{EEE6C35D-6118-11DC-9C72-001320C79847}] [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{17BF1E05-C0E8-413C-BD1F-A481EEA3B8E9} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{21BA420E-161C-413A-B21E-4E42AE1F4226} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{419EDA30-6DFF-432C-B534-E15D899ABEE4} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{453DB0C5-F41C-4D97-8DD6-CC72ECD5F699} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4AFC07D0-59BB-46B8-B097-1A46E88EEF71} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{6511CE4C-4722-40D0-AD3D-4AFA2F50978A} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{65A16874-2ED0-460E-A547-5FE2EC3A13A7} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{71E02280-5212-45C3-B174-4D5A35DA254F} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{83B2FE06-BA20-4F7D-96C6-6FC3A4E877D3} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9BEC9B38-BF39-4899-806E-A1C5DFEB60A2} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{AEBF09E2-0C15-43C8-99BF-928C645D98A0} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B32966A2-F7C2-4362-A6CF-399EC8B44110} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{B86D82BF-D39F-439A-A07C-43EDDC6F6EA6} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DA6305B9-0869-4235-8C1D-533A65E639E5} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E25DA6D6-C365-46CF-ABAF-DC5893135D7A} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E6961C59-CFCE-4CCD-B794-BC78DB98413A} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{F8B4EC8A-2407-4BE0-AEE2-0F430D65A90D} [x64] Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7} ***** [Navigateurs] ***** -\\ Internet Explorer v8.0.7601.17514 Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://pentoweb.net/gs1.php --> hxxp://www.google.fr -\\ Mozilla Firefox v3.6.28 (fr) Nom du profil : default Fichier : C:\Users\Naomie\AppData\Roaming\Mozilla\Firefox\Profiles\q9gisksq.default\prefs.js C:\Users\Naomie\AppData\Roaming\Mozilla\Firefox\Profiles\q9gisksq.default\user.js ... Supprimé ! Supprimée : user_pref("CT2207610..clientLogIsEnabled", false); Supprimée : user_pref("CT2207610..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Supprimée : user_pref("CT2207610..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Supprimée : user_pref("CT2207610.ALLOW_SHOWING_HIDDEN_TOOLBAR", false); Supprimée : user_pref("CT2207610.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Supprimée : user_pref("CT2207610.AppTrackingLastCheckTime", "Thu Apr 05 2012 11:21:21 GMT+0200"); Supprimée : user_pref("CT2207610.CTID", "CT2207610"); Supprimée : user_pref("CT2207610.CurrentServerDate", "5-4-2012"); Supprimée : user_pref("CT2207610.DialogsAlignMode", "LTR"); Supprimée : user_pref("CT2207610.DialogsGetterLastCheckTime", "Thu Apr 05 2012 11:21:13 GMT+0200"); Supprimée : user_pref("CT2207610.DownloadReferralCookieData", ""); Supprimée : user_pref("CT2207610.EMailNotifierPollDate", "Thu May 26 2011 16:55:38 GMT+0200"); Supprimée : user_pref("CT2207610.FeedLastCount128311388426518939", 852); Supprimée : user_pref("CT2207610.FeedPollDate128394492938887742", "Thu Apr 05 2012 11:21:12 GMT+0200"); Supprimée : user_pref("CT2207610.FeedPollDate128394492938887743", "Thu Apr 05 2012 11:21:12 GMT+0200"); Supprimée : user_pref("CT2207610.FeedPollDate128394492938887744", "Thu Apr 05 2012 11:21:12 GMT+0200"); Supprimée : user_pref("CT2207610.FeedPollDate128394492938887745", "Thu Apr 05 2012 11:21:12 GMT+0200"); Supprimée : user_pref("CT2207610.FeedPollDate128394492938887746", "Thu Apr 05 2012 11:21:12 GMT+0200"); Supprimée : user_pref("CT2207610.FeedPollDate128895551971012713", "Thu Apr 05 2012 11:21:12 GMT+0200"); Supprimée : user_pref("CT2207610.FeedPollDate128895558692887516", "Thu Apr 05 2012 11:21:12 GMT+0200"); Supprimée : user_pref("CT2207610.FeedPollDate128895584852282168", "Thu Apr 05 2012 11:21:11 GMT+0200"); Supprimée : user_pref("CT2207610.FeedPollDate128895585463844718", "Thu Apr 05 2012 11:21:11 GMT+0200"); Supprimée : user_pref("CT2207610.FeedPollDate128895586050718938", "Thu Apr 05 2012 11:21:11 GMT+0200"); Supprimée : user_pref("CT2207610.FeedPollDate128895586662906988", "Thu Apr 05 2012 11:21:11 GMT+0200"); Supprimée : user_pref("CT2207610.FeedPollDate128895587289781577", "Thu Apr 05 2012 11:21:12 GMT+0200"); Supprimée : user_pref("CT2207610.FeedPollDate128895587651188495", "Thu Apr 05 2012 11:21:12 GMT+0200"); Supprimée : user_pref("CT2207610.FeedPollDate128895589579625845", "Thu Apr 05 2012 11:21:11 GMT+0200"); Supprimée : user_pref("CT2207610.FeedPollDate128895595124468818", "Thu Apr 05 2012 11:21:11 GMT+0200"); Supprimée : user_pref("CT2207610.FeedPollDate128895601651188171", "Thu Apr 05 2012 11:21:11 GMT+0200"); Supprimée : user_pref("CT2207610.FeedPollDate128895603915719576", "Thu Apr 05 2012 11:21:11 GMT+0200"); Supprimée : user_pref("CT2207610.FeedPollDate128895604280719353", "Thu Apr 05 2012 11:21:12 GMT+0200"); Supprimée : user_pref("CT2207610.FeedPollDate128896122485625501", "Thu Apr 05 2012 11:21:12 GMT+0200"); Supprimée : user_pref("CT2207610.FeedPollDate128896142157031912", "Thu Apr 05 2012 11:21:11 GMT+0200"); Supprimée : user_pref("CT2207610.FeedPollDate128896151235625126", "Thu Apr 05 2012 11:21:11 GMT+0200"); Supprimée : user_pref("CT2207610.FeedTTL128895584852282168", 15); Supprimée : user_pref("CT2207610.FeedTTL128895585463844718", 2); Supprimée : user_pref("CT2207610.FeedTTL128895586050718938", 2); Supprimée : user_pref("CT2207610.FeedTTL128895589579625845", 2); Supprimée : user_pref("CT2207610.FeedTTL128895601651188171", 5); Supprimée : user_pref("CT2207610.FeedTTL128895603915719576", 5); Supprimée : user_pref("CT2207610.FeedTTL128895604280719353", 5); Supprimée : user_pref("CT2207610.FeedTTL128896122485625501", 5); Supprimée : user_pref("CT2207610.FeedTTL128896142157031912", 2); Supprimée : user_pref("CT2207610.FirstServerDate", "11-5-2011"); Supprimée : user_pref("CT2207610.FirstTime", true); Supprimée : user_pref("CT2207610.FirstTimeFF3", true); Supprimée : user_pref("CT2207610.FixPageNotFoundErrors", true); Supprimée : user_pref("CT2207610.GroupingServerCheckInterval", 1440); Supprimée : user_pref("CT2207610.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Supprimée : user_pref("CT2207610.HasUserGlobalKeys", true); Supprimée : user_pref("CT2207610.HomePageProtectorEnabled", false); Supprimée : user_pref("CT2207610.HomepageBeforeUnload", "hxxp://pentoweb.net/gs1.php"); Supprimée : user_pref("CT2207610.Initialize", true); Supprimée : user_pref("CT2207610.InitializeCommonPrefs", true); Supprimée : user_pref("CT2207610.InstallationAndCookieDataSentCount", 3); Supprimée : user_pref("CT2207610.InstallationId", "Softonic_CT2207610_FFSetupSoftonic260.exe"); Supprimée : user_pref("CT2207610.InstallationType", "ConduitIntegration"); Supprimée : user_pref("CT2207610.InstalledDate", "Wed May 11 2011 06:57:45 GMT+0200"); Supprimée : user_pref("CT2207610.InvalidateCache", false); Supprimée : user_pref("CT2207610.IsGrouping", false); Supprimée : user_pref("CT2207610.IsMulticommunity", false); Supprimée : user_pref("CT2207610.IsOpenThankYouPage", true); Supprimée : user_pref("CT2207610.IsOpenUninstallPage", true); Supprimée : user_pref("CT2207610.LanguagePackLastCheckTime", "Thu Apr 05 2012 11:21:11 GMT+0200"); Supprimée : user_pref("CT2207610.LanguagePackReloadIntervalMM", 1440); Supprimée : user_pref("CT2207610.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Supprimée : user_pref("CT2207610.LastLogin_3.2.3.3", "Thu May 26 2011 16:55:06 GMT+0200"); Supprimée : user_pref("CT2207610.LastLogin_3.3.3.2", "Thu Oct 06 2011 21:52:33 GMT+0200"); Supprimée : user_pref("CT2207610.LastLogin_3.8.1.0", "Thu Apr 05 2012 11:21:11 GMT+0200"); Supprimée : user_pref("CT2207610.LatestVersion", "3.10.0.1"); Supprimée : user_pref("CT2207610.Locale", "fr-fr"); Supprimée : user_pref("CT2207610.MCDetectTooltipHeight", "83"); Supprimée : user_pref("CT2207610.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Supprimée : user_pref("CT2207610.MCDetectTooltipWidth", "295"); Supprimée : user_pref("CT2207610.MyStuffEnabledAtInstallation", true); Supprimée : user_pref("CT2207610.RadioIsPodcast", false); Supprimée : user_pref("CT2207610.RadioLastCheckTime", "Thu Apr 05 2012 11:21:11 GMT+0200"); Supprimée : user_pref("CT2207610.RadioLastUpdateIPServer", "3"); Supprimée : user_pref("CT2207610.RadioLastUpdateServer", "128939448740670000"); Supprimée : user_pref("CT2207610.RadioMediaID", "11907073"); Supprimée : user_pref("CT2207610.RadioMediaType", "Media Player"); Supprimée : user_pref("CT2207610.RadioMenuSelectedID", "EBRadioMenu_CT2207610_RECENT11907073"); Supprimée : user_pref("CT2207610.RadioShrinkedFromSetup", false); Supprimée : user_pref("CT2207610.RadioStationName", "Rire%20et%20Chansons"); Supprimée : user_pref("CT2207610.RadioStationURL", "hxxp://www.smartadserver.com/call/cliccommand/1123361/[times[...] Supprimée : user_pref("CT2207610.SavedHomepage", "hxxp://www.google.fr/"); Supprimée : user_pref("CT2207610.SearchEngineBeforeUnload", "AVG Secure Search"); Supprimée : user_pref("CT2207610.SearchFromAddressBarIsInit", true); Supprimée : user_pref("CT2207610.SearchInNewTabEnabled", true); Supprimée : user_pref("CT2207610.SearchInNewTabIntervalMM", 1440); Supprimée : user_pref("CT2207610.SearchInNewTabLastCheckTime", "Thu Apr 05 2012 11:21:12 GMT+0200"); Supprimée : user_pref("CT2207610.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Supprimée : user_pref("CT2207610.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...] Supprimée : user_pref("CT2207610.SearchInNewTabUserEnabled", false); Supprimée : user_pref("CT2207610.SearchProtectorEnabled", false); Supprimée : user_pref("CT2207610.SearchProtectorToolbarDisabled", false); Supprimée : user_pref("CT2207610.ServiceMapLastCheckTime", "Thu Apr 05 2012 11:21:10 GMT+0200"); Supprimée : user_pref("CT2207610.SettingsLastCheckTime", "Thu Apr 05 2012 11:21:09 GMT+0200"); Supprimée : user_pref("CT2207610.SettingsLastUpdate", "1333365377"); Supprimée : user_pref("CT2207610.ThirdPartyComponentsInterval", 504); Supprimée : user_pref("CT2207610.ThirdPartyComponentsLastCheck", "Thu Apr 05 2012 11:21:09 GMT+0200"); Supprimée : user_pref("CT2207610.ThirdPartyComponentsLastUpdate", "1255344667"); Supprimée : user_pref("CT2207610.ToolbarShrinkedFromSetup", false); Supprimée : user_pref("CT2207610.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2207610"); Supprimée : user_pref("CT2207610.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...] Supprimée : user_pref("CT2207610.Uninstall", true); Supprimée : user_pref("CT2207610.UserID", "UN25977382670250669"); Supprimée : user_pref("CT2207610.ValidationData_Search", 2); Supprimée : user_pref("CT2207610.ValidationData_Toolbar", 2); Supprimée : user_pref("CT2207610.WeatherNetwork", ""); Supprimée : user_pref("CT2207610.WeatherPollDate", "Thu Apr 05 2012 11:21:12 GMT+0200"); Supprimée : user_pref("CT2207610.WeatherUnit", "C"); Supprimée : user_pref("CT2207610.alertChannelId", "605881"); Supprimée : user_pref("CT2207610.backendstorage.for_aoi", "31333035383035363133"); Supprimée : user_pref("CT2207610.backendstorage.for_ccid", "6E756C6C"); Supprimée : user_pref("CT2207610.backendstorage.for_cdtr", "31333035383035363133"); Supprimée : user_pref("CT2207610.backendstorage.for_cdtr5", "31333035383139313333"); Supprimée : user_pref("CT2207610.backendstorage.for_cdtr6", "31333135353735373830"); Supprimée : user_pref("CT2207610.backendstorage.for_cid", "4652"); Supprimée : user_pref("CT2207610.backendstorage.for_ip", "38322E3232352E3230392E323038"); Supprimée : user_pref("CT2207610.backendstorage.for_lcut", "31333137383530343736"); Supprimée : user_pref("CT2207610.backendstorage.for_pid", "31303130"); Supprimée : user_pref("CT2207610.backendstorage.for_rid", "4138"); Supprimée : user_pref("CT2207610.backendstorage.for_zoneid", "39363135"); Supprimée : user_pref("CT2207610.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...] Supprimée : user_pref("CT2207610.globalFirstTimeInfoLastCheckTime", "Thu Apr 05 2012 11:21:12 GMT+0200"); Supprimée : user_pref("CT2207610.homepageProtectorEnableByLogin", true); Supprimée : user_pref("CT2207610.initDone", true); Supprimée : user_pref("CT2207610.isAppTrackingManagerOn", true); Supprimée : user_pref("CT2207610.isFirstRadioInstallation", false); Supprimée : user_pref("CT2207610.myStuffEnabled", true); Supprimée : user_pref("CT2207610.myStuffPublihserMinWidth", 400); Supprimée : user_pref("CT2207610.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Supprimée : user_pref("CT2207610.myStuffServiceIntervalMM", 1440); Supprimée : user_pref("CT2207610.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Supprimée : user_pref("CT2207610.oldAppsList", "128325851945531999,128502302875756661,111,129350936245944148,129[...] Supprimée : user_pref("CT2207610.revertSettingsEnabled", true); Supprimée : user_pref("CT2207610.searchProtectorDialogDelayInSec", 10); Supprimée : user_pref("CT2207610.searchProtectorEnableByLogin", true); Supprimée : user_pref("CT2207610.testingCtid", ""); Supprimée : user_pref("CT2207610.toolbarAppMetaDataLastCheckTime", "Thu Apr 05 2012 11:21:11 GMT+0200"); Supprimée : user_pref("CT2207610.toolbarContextMenuLastCheckTime", "Thu Apr 05 2012 11:21:11 GMT+0200"); Supprimée : user_pref("CT2207610.usagesFlag", 2); Supprimée : user_pref("browser.search.defaultthis.engineName", "Softonic France FF Customized Web Search"); Supprimée : user_pref("browser.startup.homepage", "hxxp://pentoweb.net/gs1.php"); Supprimée : user_pref("extensions.BabylonToolbar.admin", false); Supprimée : user_pref("extensions.BabylonToolbar.aflt", "babsst"); Supprimée : user_pref("extensions.BabylonToolbar.babExt", ""); Supprimée : user_pref("extensions.BabylonToolbar.babTrack", "affID=108988"); Supprimée : user_pref("extensions.BabylonToolbar.bbDpng", 5); Supprimée : user_pref("extensions.BabylonToolbar.dfltLng", "en"); Supprimée : user_pref("extensions.BabylonToolbar.dfltSrch", true); Supprimée : user_pref("extensions.BabylonToolbar.hmpg", true); Supprimée : user_pref("extensions.BabylonToolbar.id", "208eb63400000000000000266c5d433a"); Supprimée : user_pref("extensions.BabylonToolbar.instlDay", "15409"); Supprimée : user_pref("extensions.BabylonToolbar.instlRef", "sst"); Supprimée : user_pref("extensions.BabylonToolbar.keyWordUrl", "hxxp://search.babylon.com/?AF=108988&babsrc=adbar[...] Supprimée : user_pref("extensions.BabylonToolbar.lastDP", 5); Supprimée : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1720:34:10"); Supprimée : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "3.6"); Supprimée : user_pref("extensions.BabylonToolbar.newTab", true); Supprimée : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_bb"); Supprimée : user_pref("extensions.BabylonToolbar.noFFXTlbr", false); Supprimée : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar"); Supprimée : user_pref("extensions.BabylonToolbar.propectorlck", 72177549); Supprimée : user_pref("extensions.BabylonToolbar.prtkDS", 0); Supprimée : user_pref("extensions.BabylonToolbar.prtkHmpg", 0); Supprimée : user_pref("extensions.BabylonToolbar.prtnrId", "babylon"); Supprimée : user_pref("extensions.BabylonToolbar.ptch_0717", true); Supprimée : user_pref("extensions.BabylonToolbar.smplGrp", "none"); Supprimée : user_pref("extensions.BabylonToolbar.srcExt", "ss"); Supprimée : user_pref("extensions.BabylonToolbar.tlbrId", "base"); Supprimée : user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17"); Supprimée : user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1720:34:10"); Supprimée : user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17"); Supprimée : user_pref("extensions.BabylonToolbar_i.aflt", "babsst"); Supprimée : user_pref("extensions.BabylonToolbar_i.babExt", ""); Supprimée : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=108988"); Supprimée : user_pref("extensions.BabylonToolbar_i.hardId", "208eb63400000000000000266c5d433a"); Supprimée : user_pref("extensions.BabylonToolbar_i.id", "208eb63400000000000000266c5d433a"); Supprimée : user_pref("extensions.BabylonToolbar_i.instlDay", "15409"); Supprimée : user_pref("extensions.BabylonToolbar_i.instlRef", "sst"); Supprimée : user_pref("extensions.BabylonToolbar_i.newTab", false); Supprimée : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar"); Supprimée : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon"); Supprimée : user_pref("extensions.BabylonToolbar_i.smplGrp", "none"); Supprimée : user_pref("extensions.BabylonToolbar_i.srcExt", "ss"); Supprimée : user_pref("extensions.BabylonToolbar_i.tlbrId", "base"); Supprimée : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17"); Supprimée : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1720:34:10"); Supprimée : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17"); -\\ Google Chrome v [impossible d'obtenir la version] Fichier : C:\Users\Naomie\AppData\Local\Google\Chrome\User Data\Default\Preferences Supprimée : "icon_url": "hxxp://www.babylon.com/favicon.ico", Supprimée : "keyword": "babylon.com", Supprimée : "name": "Search the web (Babylon)", Supprimée : "search_url": "hxxp://search.babylon.com/?q={searchTerms}&AF=108988&babsrc=SP_ss&mntrId=208eb6[...] Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", Supprimée : "homepage": "hxxp://pentoweb.net/gs1.php", ************************* AdwCleaner[s1].txt - [34568 octets] - [04/05/2012 17:20:19] ########## EOF - C:\AdwCleaner[s1].txt - [34697 octets] ##########

Voici le scan hijackthis Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 20:04:36, on 23/04/2012 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v8.00 (8.00.7601.17514) Boot mode: Normal Running processes: C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe C:\Program Files (x86)\Internet Explorer\IELowutil.exe C:\Program Files (x86)\Common Files\microsoft shared\virtualization handler\cvh.exe C:\Program Files (x86)\Common Files\microsoft shared\virtualization handler\OfficeVirt.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Home Page R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file) R3 - URLSearchHook: (no name) - {6d6b212b-2245-4898-8b16-9a11b81ff9e1} - (no file) R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (file missing) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O2 - BHO: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll O2 - BHO: OfferBox - {FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C} - C:\Program Files (x86)\OfferBox\OfferBoxBHO.dll O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (file missing) O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file) O4 - HKLM\..\Run: [NBAgent] "c:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe" /WinStart O4 - HKLM\..\Run: [TWebCamera] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [optical] C:\Program Files (x86)\rbjcl.vbs O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Naomie\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver O4 - HKUS\S-1-5-18\..\Run: [TOSHIBA Online Product Information] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (User 'Système') O4 - HKUS\.DEFAULT\..\Run: [TOSHIBA Online Product Information] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (User 'Default user') O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files (x86)\Toshiba\TRDCReminder\TRDCReminder.exe (User 'Default user') O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MIF5BA~1\OFFICE11\REFIEBAR.DLL O9 - Extra button: ClickPotato - {B58926D6-CFB0-45d2-9C28-4B5A0F0368AE} - C:\Program Files (x86)\ClickPotatoLite\bin\10.0.668.0\ClickPotatoLiteSABHO.dll (file missing) O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (AudioSrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Boonty Games - BOONTY - C:\Program Files (x86)\Common Files\BOONTY Shared\Service\Boonty.exe O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: ConfigFree WiMAX Service (cfWiMAXService) - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Service Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - c:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\netprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\Windows\SysWow64\perfhost.exe O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Notebook Performance Tuning Service (TEMPRO) (TemproMonitoringService) - Toshiba Europe GmbH - C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: TMachInfo - TOSHIBA Corporation - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - Unknown owner - C:\Windows\system32\TODDSrv.exe (file missing) O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe O23 - Service: TOSHIBA HDD SSD Alert Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: BitDefender Update Server v2 (Update Server) - BitDefender - C:\Program Files\Common Files\Bitdefender\Bitdefender Arrakis Server\bin\arrakis3.exe O23 - Service: BitDefender Desktop Update Service (UPDATESRV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: BitDefender Virus Shield (VSSERV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe -- End of file - 25237 bytes

Bonjour à tous, Voici mon problème je suis sous Windows 7 et à chaque ouverture de firefox, la page d'accueil a pour adresse HugeDomains.com - Shop for over 300,000 Premium Domains Pouvez vous m'aider ? Je précise que j'ai déjà mainte fois essayer de la changer mais elle revient comme ceci ..