[Résolu] Incredimail: analyse rapport ZHPDiag

ax3 · le 12 septembre 2012

Bonjour,

Mon ordinateur étant infesté par incredimail, mystart, et babylon (au moins ça...), j'ai fais quelques tentatives d'éradiquation qui ont débouché sur la désinstallation de firefox, en vain, puisque iexplorer est aussi concerné. Puis je suis tombé sur ce forum:

IMPOSSIBLE SUPPRIMER MY START BY INCREDIBAR [Résolu] | CommentCaMarche

J'ai suivi la premiere étape ( installation ZHPdiag et analyse)

Si j'ai bien compris, le rapport doit etre interprété via ZHP helper qui n'est attribué qu'à certaines personnes.

Voici mon rapport:

Lien CJoint.com 3ImpfiPFPSN

Pourriez vous m'aider pour la suite?

Merci

Modifié le 13 septembre 2012 par ax3

nardino · le 12 septembre 2012

Bonjour

La première chose à faire ne serait-elle pas de supprimer Incredimail ?

Puis ensuite tu passes ces deux outils :

AdwCleaner de Xplode sur ton bureau

Lance l'outil en cliquant sur adwcleaner.exe.

Sous Vista et Windows 7 par un clic droit sur l'icône et Exécuter en tant qu'administrateur dans le menu contextuel

Clique sur le bouton Suppression comme sur l'image ci-dessous.

Poste le rapport qui s'ouvre en fin de nettoyage après avoir redémarré l'ordinateur.

Il sera enregistré sous C:\AdwCleaner[s1].txt

L'interface est modifiée mais les fonctions restent les mêmes.

Malwarebytes Anti-Malware

Clique sur Télécharger maintenant et installe-le une fois sur ton ordinateur.

Double-clique sur le fichier mbam-setup-1.60.0.1800.exe

(Sous Vista et 7 autorise les modifications)

A la fin de l'installation, veille à ce que les options suivantes soient cochées

-Mettre à jour Malwarebytes' Anti-Malware

-Exécuter Malwarebytes' Anti-Malware

Clique sur Terminer

Une fenêtre Mise à jour de Malwarebytes' Anti-Malware va s'ouvrir avec une barre de progression.

Puis une autre annonçant le succès de la mise à jour de la base de données. Clique sur OK.

Le programme s'ouvre sur l'onglet Recherche.

Coche , clique sur le bouton

A la fin du scan, sélectionne tout et clique sur Supprimer la sélection

Poste le rapport qui s'ouvre après cette suppression.

Redémarre le pc si cela est demandé

Tu peux retrouver le rapport dans l'onglet Rapports/Logs avec la date et l'heure d'exécution.

Pour supprimer les programmes potentiellement dangereux, PUP, règle comme indiqué sur l'image ci-dessous, avant de faire le scan.

@+

Modifié le 12 septembre 2012 par nardino

ax3 · le 12 septembre 2012

Bonjour,

Je l ai tenté dans panneau de configuration ; ajout suppression programmes.

Incredimail et autres n'y apparaissent pas.

Mystart ou Incredimail ou babylon continuent d'apparaitre dans ma barre url lors de recherches...

ok merci je vais suivre tes indications

ax3 · le 12 septembre 2012

Voici le rapport Adwcleaner:

# AdwCleaner v2.001 - Rapport créé le 12/09/2012 à 15:29:23

# Mis à jour le 09/09/2012 par Xplode

# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)

# Nom d'utilisateur : Axel - AXEL-PC

# Mode de démarrage : Normal

# Exécuté depuis : C:\Users\Axel\Downloads\adwcleaner.exe

# Option [suppression]

***** [services] *****

Arrêté & Supprimé : Web Assistant Updater

***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\Program Files\Web Assistant

Dossier Supprimé : C:\Users\Axel\AppData\Local\TempDir

Dossier Supprimé : C:\Users\Axel\AppData\LocalLow\Toolbar4

Dossier Supprimé : C:\Users\Axel\AppData\Roaming\OpenCandy

Fichier Supprimé : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xml

Fichier Supprimé : C:\user.js

Fichier Supprimé : C:\Users\Public\Desktop\eBay.lnk

***** [Registre] *****

Clé Supprimée : HKCU\Software\IGearSettings

Clé Supprimée : HKCU\Software\IM

Clé Supprimée : HKCU\Software\ImInstaller

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403a-B9D2-65C292C39087}

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403a-B9D2-65C292C39087}

Clé Supprimée : HKCU\Software\Softonic

Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}

Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\Extension.DLL

Clé Supprimée : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject

Clé Supprimée : HKLM\SOFTWARE\Classes\Extension.ExtensionHelperObject.1

Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}

Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\NEW_CORRECT_incredibar_install_RASAPI32

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\NEW_CORRECT_incredibar_install_RASMANCS

Clé Supprimée : HKLM\Software\Web Assistant

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{336D0C35-8A85-403a-B9D2-65C292C39087}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}

Clé Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403a-B9D2-65C292C39087}

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}

Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{336D0C35-8A85-403a-B9D2-65C292C39087}_is1

Clé Supprimée : HKLM\SOFTWARE\Web Assistant

Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]

Valeur Supprimée : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]

Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

***** [Navigateurs] *****

-\\ Internet Explorer v9.0.8112.16421

Restauré : [HKCU\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Restauré : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Restauré : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Restauré : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Restauré : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]

Remplacé : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.bigseekpro.com/bsprpc/{0F1A6612-A811-43FE-A707-A5309DAC719B} --> hxxp://www.google.com

Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Page] = hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=FR&userid=f1b27b84-c0f3-4e3f-ae40-ab3f5d2441c1&affid=111585&searchtype=ds&babsrc=lnkry&q={searchTerms} --> hxxp://www.google.com

Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=FR&userid=f1b27b84-c0f3-4e3f-ae40-ab3f5d2441c1&affid=111585&searchtype=ds&babsrc=lnkry&q={searchTerms} --> hxxp://www.google.com

Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=FR&userid=f1b27b84-c0f3-4e3f-ae40-ab3f5d2441c1&affid=111585&searchtype=ds&babsrc=lnkry&q={searchTerms} --> hxxp://www.google.com

Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=FR&userid=f1b27b84-c0f3-4e3f-ae40-ab3f5d2441c1&affid=111585&searchtype=ds&babsrc=lnkry&q={searchTerms} --> hxxp://www.google.com

-\\ Google Chrome v [impossible d'obtenir la version]

Fichier : C:\Users\Axel\AppData\Local\Google\Chrome\User Data\Default\Preferences

Supprimée [l.1] : search_url ={"backup":{"_version":1,"homepage":true,"homepage_is_newtabpage":false,"session":{"restore_on_startup":4,"urls_to_restore_on_startup":["hxxp://isearch.avg.com/?cid={DB3423CB-80FC-4DFA-A91C-B5604CEA2F6D}&mid=d0c5ca72eebc47d0b63a252442584bde-989dbf58b3000e5b0b4ce0e9e22df1091b6031a9&lang=fr&ds=gm011&pr=sa&d=2012-06-17 19:55:36&v=11.1.0.7&sap=hp"]}},"browser":{"check_default_browser":false,"window_placement":{"bottom":718,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":728,"work_area_left":0,"work_area_right":1366,"work_area_top":0}},"countryid_at_install":18002,"default_apps_install_state":1,"default_search_provider":{"id":"5","name":"MyStart Search","prepopulate_id":"0","hxxp://mystart.incredibar.com/mb165/?loc=IB_DS&search={searchTerms}&a=6PQA4EjzV7&i=26","suggest_url":""},"distribution":{"create_all_shortcuts":true,"do_not_launch_chrome":true,"import_bookmarks":false,"import_history":false,"import_home_page":false,"import_search_engine":false,"make_chrome_default_for_user":false,"ping_delay":-60,"show_welcome_page":true,"skip_first_run_ui":false},"dns_prefetching":{"host_referral_list":[2,["hxxp://50.7.243.122/",["hxxp://ad.xtendmedia.com/",1.885429665170958,"hxxp://ad.yieldmanager.com/",1.243597697358958,"hxxp://content.yieldmanager.edgesuite.net/",0.8008957919970260,"hxxp://cookex.amp.yahoo.com/",0.4799798080910261]],["hxxp://ad-emea.doubleclick.net/",["hxxp://www.youtube.com/",3.1714050174240]],["hxxp://ads.pubmatic.com/",["hxxp://image2.pubmatic.com/",0.07900858480569199]],["hxxp://bpx.a9.com/",["hxxp://ad.bannerconnect.net/",2.2086570657060,"hxxp://ad.yieldmanager.com/",2.5295730496120,"hxxp://cdn.adnxs.com/",2.2086570657060,"hxxp://cdn.contentspread.net/",2.5295730496120,"hxxp://ib.adnxs.com/",2.8504890335180,"hxxp://n19.ad.ad-srv.net/",3.492321001330,"hxxp://showads.pubmatic.com/",2.8504890335180,"hxxp://sync.mathtag.com/",2.5295730496120,"hxxp://track.pubmatic.com/",3.813236985235999,"hxxp://view.atdmt.com/",2.5295730496120]],["hxxp://content.yieldmanager.edgesuite.net/",["hxxp://www.abusedfire.com/",3.492321001330,"hxxps://xumoclick.com/",2.2086570657060]],["hxxp://en.wikipedia.org/",["hxxp://bits.wikimedia.org/",2.295093860475177,"hxxp://en.wikipedia.org/",2.072265205218079,"hxxp://geoiplookup.wikimedia.org/",0.6349800717622122,"hxxp://meta.wikimedia.org/",0.6349800717622122,"hxxp://upload.wikimedia.org/",2.625234253422571]],["hxxp://fr.wikipedia.org/",["hxxp://bits.wikimedia.org/",6.059648872577998,"hxxp://fr.wikipedia.org/",3.1714050174240,"hxxp://geoiplookup.wikimedia.org/",2.2086570657060,"hxxp://meta.wikimedia.org/",2.2086570657060,"hxxp://upload.wikimedia.org/",5.738732888671998]],["hxxp://googleads.g.doubleclick.net/",["hxxp://google.com/",1.101882020410987,"hxxp://googleads.g.doubleclick.net/",1.562589006906441,"hxxp://pagead2.googlesyndication.com/",1.381464025589894,"hxxps://googleads.g.doubleclick.net/",1.101882020410987]],["hxxp://n19.ad.ad-srv.net/",["hxxp://banners.contentfeed.net/",0.9620910178215336,"hxxp://banniere.reussissonsensemble.fr/",1.241673023000441,"hxxp://www.advertising.spreadomat.net/",0.9620910178215336,"hxxp://www.madwin.com/",0.9620910178215336,"hxxp://zh4strum.spreadshirt.fr/",1.101882020410987]],["hxxp://s.ytimg.com/",["hxxp://ad-emea.doubleclick.net/",4.775984936953999,"hxxp://googleads.g.doubleclick.net/",3.492321001330,"hxxp://o-o.preferred.par08s05.v22.lscache5.c.youtube.com/",2.2086570657060,"hxxp://o-o.preferred.par08s05.v6.lscache3.c.youtube.com/",2.2086570657060,"hxxp://pagead2.googlesyndication.com/",3.1714050174240,"hxxp://s.youtube.com/",2.8504890335180,"hxxp://s.ytimg.com/",3.492321001330,"hxxp://s0.2mdn.net/",6.380564856483998,"hxxp://s2.youtube.com/",3.1714050174240,"hxxp://www.youtube.com/",3.1714050174240]],["hxxp://stagevu.com/",["hxxp://50.7.243.122/",3.1714050174240,"hxxp://edge.quantserve.com/",2.2086570657060,"hxxp://pixel.quantserve.com/",2.5295730496120,"hxxp://stagevu.com/",10.8733886311680,"hxxp://www.google-analytics.com/",2.8504890335180]],["hxxp://view.atdmt.com/",["hxxp://ec.atdmt.com/",2.2086570657060,"hxxp://ib.adnxs.com/",2.2086570657060]],["hxxp://www.divx.com/",["hxxp://edge.quantserve.com/",2.145776599045350,"hxxp://elstatico.divx.com/",2.145776599045350,"hxxp://fonts.divx.com/",2.145776599045350,"hxxp://www.divx.com/",2.457556104889546,"hxxp://www.googleadservices.com/",2.145776599045350]],["hxxp://www.google.com/",["hxxp://www.google.fr/",2.5295730496120]],["hxxp://www.google.fr/",["hxxp://id.google.fr/",0.3167866733400772,"hxxp://news.google.fr/",2.2086570657060,"hxxp://ssl.gstatic.com/",1.566751863326076,"hxxp://www.google.fr/",6.754282231661345]],["hxxp://www.imdb.com/",["hxxp://aan.amazon.com/",2.2086570657060,"hxxp://ad.doubleclick.net/",3.1714050174240,"hxxp://b.scorecardresearch.com/",2.5295730496120,"hxxp://bpx.a9.com/",5.096900920859999,"hxxp://i.media-imdb.com/",13.4407165024160,"hxxp://ia.media-imdb.com/",2.5295730496120,"hxxp://s.media-imdb.com/",2.5295730496120,"hxxp://s0.2mdn.net/",2.2086570657060,"hxxp://www.google-analytics.com/",2.2086570657060,"hxxp://www.imdb.com/",6.059648872577998]],["hxxp://www.surveymonkey.com/",["hxxp://secure.surveymonkey.com/",3.264340799999999,"hxxp://www.google-analytics.com/",2.60370040,"hxxp://www.surveymonkey.com/",2.27338020]],["hxxp://www.youtube.com/",["hxxp://clients1.google.com/",6.059648872577998,"hxxp://csi.gstatic.com/",2.5295730496120,"hxxp://i1.ytimg.com/",4.775984936953999,"hxxp://i2.ytimg.com/",1.686299602720890,"hxxp://i3.ytimg.com/",2.405475711527025,"hxxp://i4.ytimg.com/",2.466368672254991,"hxxp://o-o.preferred.par08s05.v23.lscache2.c.youtube.com/",2.2086570657060,"hxxp://p2.fh26fysnogprq.tiwsbyefr3vmvjjz.if.v4.ipv6-exp.l.google.com/",2.5295730496120,"hxxp://s.ytimg.com/",1.868978484904788,"hxxp://s0.2mdn.net/",3.492321001330]]],"startup_list":[1,"hxxp://go.divx.com/","hxxp://secure.surveymonkey.com/","hxxp://www.google-analytics.com/","hxxp://www.surveymonkey.com/"]},"download":{"directory_upgrade":true,"extensions_to_open":""},"extensions":{"autoupdate":{"next_check":"12971890877698858"},"chrome_url_overrides":{"bookmarks":["chrome-extension://eemcgdkfndhakfknompkggombfjjjeno/main.html"]},"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","webstorePrivate"]},"app_launcher_index":-2,"page_index":0},"blpcfgokakmgnkcojhhkbfbldkacnbeo":{"app_launcher_index":0,"from_bookmark":true,"from_webstore":false,"install_time":"12970623583941792","location":2,"manifest":{"app":{"launch":{"container":"tab","web_url":"hxxp://www.youtube.com/"},"web_content":{"enabled":true,"origin":"hxxp://www.youtube.com"}},"description":"The world's most popular online video community.","icons":{"128":"128.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB","name":"YouTube","update_url":"hxxp://clients2.google.com/service/update2/crx","version":"4.2"},"page_index":0,"path":"blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2_0","state":1},"coobgpohoikkiipiblmjeljniedjpjpf":{"app_launcher_index":2,"from_bookmark":true,"from_webstore":false,"install_time":"12970623589833266","location":2,"manifest":{"app":{"launch":{"web_url":"hxxp://www.google.com/?source=search_app"},"urls":["*://www.google.com/?source=search_app","*://www.google.com/search","*://www.google.com/webhp","*://www.google.com/imgres"]},"current_locale":"fr","default_locale":"en","description":"La recherche sur le Web à vitesse grand V","icons":{"128":"128.png","16":"16.png","32":"32.png","48":"48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIiso3Loy5VJHL40shGhUl6it5ZG55XB9q/2EX6aa88jAxwPutbCgy5d9bm1YmBzLfSgpX4xcpgTU08ydWbd7b50fbkLsqWl1mRhxoqnN01kuNfv9Hbz9dWWYd+O4ZfD3L2XZs0wQqo0y6k64n+qeLkUMd1MIhf6MR8Xz1SOA8pwIDAQAB","name":"Recherche Google","update_url":"hxxp://clients2.google.com/service/update2/crx","version":"0.0.0.14"},"page_index":0,"path":"coobgpohoikkiipiblmjeljniedjpjpf\\0.0.0.14_0","state":1},"pjkljhegncpnkpknbcohdijeoejaedia":{"active_permissions":{"api":["notifications"]},"app_launcher_index":1,"from_bookmark":true,"from_webstore":false,"install_time":"12970623589431240","location":2,"manifest":{"app":{"launch":{"container":"tab","web_url":"hxxps://mail.google.com/mail/ca"},"urls":["*://mail.google.com/mail/ca"]},"current_locale":"fr","default_locale":"en","description":"Profitez d'une messagerie rapide, avec moins de spam et dotée d'une fonction de recherche.","icons":{"128":"128.png","24":"24.png","48":"48.png"},"key":"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCuGglK43iAz3J9BEYK/Mz6ZhloIMMDqQSAaf3vJt4eHbTbSDsu4WdQ9dQDRcKlg8nwQdePBt0C3PSUBtiSNSS37Z3qEGfS7LCju3h6pI1Yr9MQtxw+jUa7kXXIS09VV73pEFUT/F7c6Qe8L5ZxgAcBvXBh1Fie63qb02I9XQ/CQIDAQAB","name":"Gmail","options_page":"hxxps://mail.google.com/mail/ca/#settings","permissions":["notifications"],"update_url":"hxxp://clients2.google.com/service/update2/crx","version":"6.1.3"},"page_index":0,"path":"pjkljhegncpnkpknbcohdijeoejaedia\\6.1.3_0","state":1}}},"homepage":"hxxp://isearch.avg.com/?cid={DB3423CB-80FC-4DFA-A91C-B5604CEA2F6D}&mid=d0c5ca72eebc47d0b63a252442584bde-989dbf58b3000e5b0b4ce0e9e22df1091b6031a9&lang=fr&ds=gm011&pr=sa&d=2012-06-17 19:55:36&v=11.1.0.7&sap=hp","homepage_is_newtabpage":false,"hxxp_throttling":{"enabled":true},"instant":{"enabled_time":"12971890498033858"},"ntp":{"app_page_names":["Applications"],"pref_version":3,"promo_build":0,"promo_closed":false,"promo_end":1323071940.0,"promo_group":70,"promo_group_max":0,"promo_group_timeslice":0,"promo_line":"<a href=\"hxxp://www.google.fr/chromebook/index.html#utm_campaign=fr&utm_source=fr-ntp-holidays-fr-bkws&utm_medium=ntp-holidays\">Découvrez les Chromebooks</a> – l'ordinateur par Google Chrome","promo_resource_cache_update":"1327416903.802661","promo_start":1321862280.0,"promo_views":0,"promo_views_max":0,"shown_sections":64},"plugins":{"enabled_internal_pdf3":true,"enabled_nacl":true,"last_internal_directory":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\16.0.912.75","plugins_list":[{"enabled":true,"name":"Remoting Viewer","path":"internal-remoting-viewer","version":""},{"enabled":true,"name":"Remoting Viewer"},{"enabled":true,"name":"Native Client","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\16.0.912.75\\ppGoogleNaClPluginChrome.dll","version":""},{"enabled":true,"name":"Native Client"},{"enabled":true,"name":"Chrome PDF Viewer","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\16.0.912.75\\pdf.dll","version":""},{"enabled":true,"name":"Chrome PDF Viewer"},{"enabled":true,"name":"Shockwave Flash","path":"C:\\Program Files (x86)\\Google\\Chrome\\Application\\16.0.912.75\\gcswf32.dll","version":"11,1,102,55"},{"enabled":true,"name":"Shockwave Flash","path":"C:\\windows\\SysWOW64\\Macromed\\Flash\\NPSWF32.dll","version":"10,3,183,5"},{"enabled":true,"name":"Flash"},{"enabled":true,"name":"Adobe Acrobat","path":"C:\\Program Files (x86)\\Adobe\\Reader 9.0\\Reader\\Browser\\nppdf32.dll","version":"9.1.0.2009022700"},{"enabled":false,"name":"Adobe Acrobat"},{"enabled":true,"name":"Microsoft Office 2010","path":"C:\\PROGRA~2\\MICROS~4\\Office14\\NPSPWRAP.DLL","version":"14.0.4761.1000"},{"enabled":true,"name":"Microsoft Office"},{"enabled":true,"name":"DivX VOD Helper Plug-in","path":"C:\\Program Files (x86)\\DivX\\DivX OVS Helper\\npovshelper.dll","version":"1.1.0.6"},{"enabled":true,"name":"DivX VOD Helper Plug-in"},{"enabled":true,"name":"DivX Plus Web Player","path":"C:\\Program Files (x86)\\DivX\\DivX Plus Web Player\\npdivx32.dll","version":"2, 2, 0, 52"},{"enabled":true,"name":"DivX Plus Web Player"},{"enabled":true,"name":"Google Update","path":"C:\\Program Files (x86)\\Google\\Update\\1.3.21.79\\npGoogleUpdate3.dll","version":"1.3.21.79"},{"enabled":true,"name":"Google Update"},{"enabled":true,"name":"Silverlight Plug-In","path":"C:\\Program Files (x86)\\Microsoft Silverlight\\4.0.60831.0\\npctrl.dll","version":"4.0.60831.0"},{"enabled":true,"name":"Silverlight"},{"enabled":true,"name":"Windows Live? Photo Gallery","path":"C:\\Program Files (x86)\\Windows Live\\Photo Gallery\\NPWLPG.dll","version":"15.4.3508.1109_ship.wlx.w4m4 (ship)"},{"enabled":true,"name":"Windows Live? Photo Gallery"},{"enabled":true,"name":"Default Plug-in","path":"default_plugin","version":"1"},{"enabled":true,"name":"Default Plug-in"}]},"profile":{"content_settings":{"pref_version":1},"exited_cleanly":true},"session":{"restore_on_startup":4,"urls_to_restore_on_startup":["hxxp://isearch.avg.com/?cid={DB3423CB-80FC-4DFA-A91C-B5604CEA2F6D}&mid=d0c5ca72eebc47d0b63a252442584bde-989dbf58b3000e5b0b4ce0e9e22df1091b6031a9&lang=fr&ds=gm011&pr=sa&d=2012-06-17 19:55:36&v=11.1.0.7&sap=hp"]},"spdy":{"servers":["googleads.g.doubleclick.net:443"]},"translate_accepted_count":{"en":0},"translate_denied_count":{"en":2}}

*************************

AdwCleaner[s2].txt - [19789 octets] - [12/09/2012 15:29:23]

########## EOF - C:\AdwCleaner[s2].txt - [19850 octets] ##########

ax3 · le 12 septembre 2012

Malwarebytes Anti-Malware 1.65.0.1400

www.malwarebytes.org

Version de la base de données: v2012.09.12.05

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 9.0.8112.16421

Axel :: AXEL-PC [administrateur]

12/09/2012 15:42:50

mbam-log-2012-09-12 (15-42-50).txt

Type d'examen: Examen rapide

Options d'examen désactivées: P2P

Elément(s) analysé(s): 196013

Temps écoulé: 3 minute(s), 38 seconde(s)

Processus mémoire détecté(s): 0