Powered by Text-Enhance

[daniel14]

Bonjour,

J'ai moi aussi un pb avec Powered by Text-Enhance, qui crée des liens intempestifs vers des fenêtres publicitaires. De plus j'ai de grosses difficultées pour accéder à mes courriels sous Orange.

J'ai suivi la procédure d'analyse préconisée, avec OTL.exe.

Voilà les rapports obtenus. QQu'un peut-il m'aider en les analysant ?

Merci d'avance.

Old1.txt :

Lien CJoint.com BDlpgz9M2iN

Extras1.txt :

Lien CJoint.com BDlpjmJQtnp

[pear]

Bonjour,

 

Commencez par faire un point de restauration qui vous permettra de revenir à létat actuel en cas de problème

 

Spybot, totalement obsolète va être désinstallé.

Vous pourriez utiliser Mbam (Malewares Bytes)pour le remplacer.

Pour désactiver TeaTimer qui ne sert à rien et peut faire échouer une désinfection:!

Sous Vista, exécuter avec privilèges Administrateur

Afficher d'abord le Mode Avancé dans SpyBot

->Options Avancées :

- >menu Mode, Mode Avancé.

Une colonne de menus apparaît dans la partie gauche :

- >cliquer sur Outils,

- >cliquer sur Résident,

Dans Résident :

- >décocher Résident "TeaTimer" pour le désactiver.

Effacer le contenu du dossier Snapshots(le contenu de snapshots, pas le fichier snapshots) , sous XP :

C:\Documents and Settings\All Users\Application Data\Spybot - Search &Destroy\Snapshots

Et sous Vista :

C:\ProgramData\Spybot - Search & Destroy\Snapshots

Si vous ne trouvez pas Snapshots, poursuivez la procédure sans vous en préoccuper

 

 

Relancez Otl:

 

Sous Custom scan Files ou Personnalisation

Copiez Collez

:Otl

PRC - [2012/03/16 19:36:20 | 000,974,688 | ---- | M] (Spigot, Inc.) -- C:\Program Files\Fichiers communs\Spigot\Search Settings\SearchSettings.exe

PRC - [2012/03/16 19:28:34 | 000,782,744 | ---- | M] (Spigot, Inc.) -- C:\Program Files\Application Updater\ApplicationUpdater.exe

SRV - [2012/03/16 19:28:34 | 000,782,744 | ---- | M] (Spigot, Inc.) [Auto | Running] -- C:\Program Files\Application Updater\ApplicationUpdater.exe -- (Application Updater)

IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found

IE - HKU\.DEFAULT\..\SearchScopes\{287C177B-D325-4709-93CB-AA42C23FEEC2}: "URL" = {searchTerms} | Price Comparison Shopping @ Dealio - Page 1

IE - HKU\S-1-5-18\..\SearchScopes\{287C177B-D325-4709-93CB-AA42C23FEEC2}: "URL" = {searchTerms} | Price Comparison Shopping @ Dealio - Page 1

IE - HKU\S-1-5-21-1644491937-1604221776-725345543-1004\..\URLSearchHook: {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - SOFTWARE\Classes\CLSID\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}\InprocServer32 File not found

IE - HKU\S-1-5-21-1644491937-1604221776-725345543-1004\..\URLSearchHook: {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\5.2\pdfforgeToolbarIE.dll (Spigot, Inc.)

IE - HKU\S-1-5-21-1644491937-1604221776-725345543-1004\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=110819&tt=050412_30b&babsrc=SP_ss&mntrId=205eedb30000000000000022b0eb4829

FF - prefs.js..browser.search.selectedEngine: "Search the web (Babylon)"

FF - prefs.js..extensions.enabledItems: pdfforge@mybrowserbar.com:4.7

FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.9.1.14019

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21

FF - prefs.js..extensions.enabledItems: wtxpcom@mybrowserbar.com:4.3

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23

FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2

FF - prefs.js..extensions.enabledItems: freecompressor@spointer.com:4.0.1938.5

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24

FF - prefs.js..extensions.enabledItems: ffxtlbr@babylon.com:1.1.3

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26

FF - prefs.js..keyword.URL: "http://search.babylon.com/?affID=110819&tt=050412_30b&babsrc=KW_ss&mntrId=205eedb30000000000000022b0eb4829&q="

FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2852: K:\TELECHARGEMENTS\Real Alternative\browser\plugins\nppl3260.dll File not found

FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.46: K:\TELECHARGEMENTS\Real Alternative\browser\plugins\nppl3260.dll File not found

FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1662: K:\TELECHARGEMENTS\Real Alternative\browser\plugins\nprpjplug.dll File not found

FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.46: K:\TELECHARGEMENTS\Real Alternative\browser\plugins\nprpjplug.dll File not found

FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\freecompressor@spointer.com: C:\Program Files\FreeCompressor\spointer\extensions\freecompressor@spointer.com [2011/02/23 14:41:04 | 000,000,000 | ---D | M]

[2011/02/22 17:30:16 | 000,000,000 | ---D | M] (myBabylon English Community Toolbar) -- C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\8kh1dj4a.default\extensions\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}

[2011/02/22 17:30:16 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\8kh1dj4a.default\extensions\engine@conduit.com

[2011/05/21 10:01:38 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Daniel\Application Data\Mozilla\Firefox\Profiles\8kh1dj4a.default\extensions\ffxtlbr@babylon.com

[2012/04/08 13:43:36 | 000,000,000 | ---D | M] (Widgi Toolbar Platform) -- C:\PROGRAM FILES\FICHIERS COMMUNS\SPIGOT\WTXPCOM

[2012/04/08 13:43:36 | 000,000,000 | ---D | M] (pdfforge Toolbar) -- C:\PROGRAM FILES\PDFFORGE TOOLBAR\FF

O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll File not found

O2 - BHO: (Easy Gif Animator Toolbar Helper) - {3873A5A5-C3F8-4830-ABF5-9C83C8347B09} - C:\Program Files\Easy Gif Animator Extension\v3.2.0.0\EasyGifAnimator_Toolbar.dll File not found

O2 - BHO: (no name) - {42ad2408-abba-2408-1972-4706560e817b} - No CLSID value found.

O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.

O2 - BHO: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\5.2\pdfforgeToolbarIE.dll (Spigot, Inc.)

O2 - BHO: (Interest recogniser for Freecompressor (powered by Spointer)) - {d9fc24df-b4ab-493a-8f33-52f6fcc536c1} - C:\Program Files\FreeCompressor\spointer\extensions\freecompressor_air_ie.dll (Freecompressor)

O3 - HKLM\..\Toolbar: (no name) - {42ad2408-baaa-408d-b13e-4706560e817b} - No CLSID value found.

O3 - HKLM\..\Toolbar: (&Crawler Toolbar) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll File not found

O3 - HKLM\..\Toolbar: (Easy Gif Animator Toolbar) - {8AAE1BCA-A973-423F-9232-7007D8CED2C7} - C:\Program Files\Easy Gif Animator Extension\v3.2.0.0\EasyGifAnimator_Toolbar.dll File not found

O3 - HKLM\..\Toolbar: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\5.2\pdfforgeToolbarIE.dll (Spigot, Inc.)

O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.

O3 - HKU\S-1-5-21-1644491937-1604221776-725345543-1004\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.

O3 - HKU\S-1-5-21-1644491937-1604221776-725345543-1004\..\Toolbar\WebBrowser: (&Crawler Toolbar) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll File not found

O3 - HKU\S-1-5-21-1644491937-1604221776-725345543-1004\..\Toolbar\WebBrowser: (Easy Gif Animator Toolbar) - {8AAE1BCA-A973-423F-9232-7007D8CED2C7} - C:\Program Files\Easy Gif Animator Extension\v3.2.0.0\EasyGifAnimator_Toolbar.dll File not found

O4 - HKLM..\Run: [] File not found

O4 - HKLM..\Run: [EoEngine] File not found

O4 - HKLM..\Run: [eorezo] File not found

O4 - HKLM..\Run: [PressePapier] File not found

O4 - HKLM..\Run: [searchSettings] C:\Program Files\Fichiers communs\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)

O4 - HKLM..\Run: [softwareHelper] C:\Documents and Settings\Daniel\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe File not found

O4 - HKLM..\Run: [sS1HelperStartUp] C:\PROGRA~1\SEASID~1\SS1HEL~1.EXE /partner SS1 File not found

O4 - HKLM..\Run: [TkBellExe] "K:\TELECHARGEMENTS\Real Alternative\Update_OB\realsched.exe" -osboot File not found

O4 - HKLM..\Run: [userFaultCheck] %systemroot%\system32\dumprep 0 -u File not found

O4 - HKU\S-1-5-21-1644491937-1604221776-725345543-1004..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)

O4 - HKU\S-1-5-21-1644491937-1604221776-725345543-1004..\Run: [uniblue RegistryBooster 2009] K:\ProgramFilesNouveaux\Uniblue\RegistryBooster\RegistryBooster.exe /S File not found

O4 - Startup: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Video Performer.lnk = File not found

O4 - Startup: C:\Documents and Settings\Daniel\Menu Démarrer\Programmes\Démarrage\Widget Carrefour PROMOLIBRE.lnk = File not found

O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx File not found

O8 - Extra context menu item: Crawler Search - tbr:iemenu File not found

O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)

O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)

O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Reg Error: Key error.)

O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.)

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)

O18 - Protocol\Handler\tbr {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll File not found

O20 - Winlogon\Notify\AtiExtEvent: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found

O20 - Winlogon\Notify\WgaLogon: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found

NetSvcs: 6to4 - File not found

NetSvcs: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found

NetSvcs: Ias - File not found

NetSvcs: Iprip - File not found

NetSvcs: Irmon - File not found

NetSvcs: NWCWorkstation - File not found

NetSvcs: Nwsapagent - File not found

NetSvcs: WmdmPmSp - File not found

NetSvcs: Ip6FwHlp - File not found

 

MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Barre d'Outils Olitec.lnk - - File not found

MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Moniteur Fax-Voix.lnk - - File not found

MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Webshots.lnk - - File not found

MsConfig - StartUpFolder: C:^Documents and Settings^Daniel^Menu Démarrer^Programmes^Démarrage^Barre d'Outils Olitec.lnk - - File not found

MsConfig - StartUpFolder: C:^Documents and Settings^Daniel^Menu Démarrer^Programmes^Démarrage^Lancement de K9-F.lnk - - File not found

MsConfig - StartUpFolder: C:^Documents and Settings^Daniel^Menu Démarrer^Programmes^Démarrage^Moniteur Fax-Voix.lnk - - File not found

MsConfig - StartUpFolder: C:^Documents and Settings^Daniel^Menu Démarrer^Programmes^Démarrage^Webshots.lnk - - File not found

MsConfig - StartUpReg: Pando - hkey= - key= - File not found

MsConfig - StartUpReg: Spamihilator - hkey= - key= - File not found

SafeBootMin: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found

SafeBootNet: AppMgmt - %SystemRoot%\System32\appmgmts.dll File not found

ActiveX: {0291E591-EA41-4c82-8106-3DC6CE7F7664} - Reg Error: Value error.

ActiveX: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} - Reg Error: Value error.

ActiveX: {347B0667-C7ED-429B-BDE3-CC8D3BACAA31} - Reg Error: Value error.

ActiveX: {A17E30C4-A9BA-11D4-8673-60DB54C10000} - Reg Error: Value error.

ActiveX: {AA218328-0EA8-4D70-8972-E987A9190FF4} - Reg Error: Value error.

ActiveX: {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - Reg Error: Value error.

[2012/04/11 11:32:24 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy

[2012/04/11 11:32:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy

[2012/04/08 13:43:27 | 000,000,000 | ---D | C] -- C:\Program Files\Fichiers communs\Spigot

[2012/04/08 13:43:27 | 000,000,000 | ---D | C] -- C:\Program Files\pdfforge Toolbar

[2012/04/11 11:32:32 | 000,000,846 | ---- | M] () -- C:\Documents and Settings\Daniel\Bureau\Spybot - Search & Destroy.lnk

[2011/02/23 14:40:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Daniel\Application Data\OfferBox

[2008/10/07 21:37:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Daniel\Application Data\Uniblue

[2011/02/23 14:41:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Daniel\Application Data\freeCompressor

[2010/07/29 23:03:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Daniel\Application Data\pdfforge

[2005/12/25 23:58:36 | 000,000,000 | ---D | M] -- C:\Program Files\Spyware Doctor

[2010/07/28 23:38:14 | 000,000,000 | ---D | M] -- C:\Program Files\Ask.com

[2011/02/23 14:40:36 | 000,000,000 | ---D | M] -- C:\Program Files\OfferBox

[2011/02/23 14:40:52 | 000,000,000 | ---D | M] -- C:\Program Files\FreeCompressor

[2011/12/24 09:19:12 | 000,000,000 | ---D | M] -- C:\Program Files\Bonjour

[2012/04/08 13:43:28 | 000,000,000 | ---D | M] -- C:\Program Files\pdfforge Toolbar

[2012/04/11 11:32:26 | 000,000,000 | ---D | M] -- C:\Program Files\Spybot - Search & Destroy

 

 

:reg

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command]

""=""%1" %*"

 

:files

 

[purity]

[emptytemp]

[resethosts]

[Reboot]

-------->Cliquer Runfix ou Correction

 

OTL redémarrera le système automatiquement.

Postez le rapport.