Beaucoup de fichiers manquants dans HijackThis

nebulon · le 8 mars 2013

bonjour a tous !

voila , malgrès ma prudence sur le net et le faite que je ne télécharge plus par p2p

je suis "presque" sur d'être infecté ,donc pouvez vous m'aider svp ?

j'ai passé un coup de malwarebyte ,de spybot , et hijackthis dont il manque beaucoup d'entrées importantes ....

voila merci d'avance !! aussi bcp de toolbar etc...

ps: et aussi j'ai bcp de mail retournés /non transmis (30/jour) ,que je n'ai pas envoyés et je ne connais pas les déstinataires du style ::

Nous sommes desoles de vous informer que votre message n a pas pu etre remis a un ou plusieurs de ses destinataires. Ceci est un message automatique genere par le serveur mwinf5d55.orange.fr. Merci de ne pas y repondre. This is the mail system at host mwinf5d55.orange.fr. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. The mail system <gi s ela.s ternchen@hotmail.de>: host hotmail.de[65.54.188.94] said: 550 SC-001 (BAY0-MC2-F45) Unfortunately, messages from 193.252.22.210 weren't sent. Please contact your Internet service provider since part of their network is on our block list. You can also refer your provider to http://mail.live.com...ing.a s px#error s.

bernard53 · le 8 mars 2013

Bonjour

Ceci s.t.p pour voir plus.

Télécharges << ZHPDiag>> (de Nicolas Coolman)

dezzipes le fichier sur ton bureau...

Fais un clic-droit sur l'icône ZHPDiag .exe et choisis "exécuter en tant qu'administrateur".

L'installation va créer raccourcis (ZHPDiag et ZHPFix et MBRchek) sur ton bureau

ET :

Si le bouton UAC apparaît dans le panel supérieur cela signifie que votre UAC est activée. L'activation de l'UAC gène l'analyse deZHPDiag sur certains modules (O18,O23,O42,...).

Aussi pour permettre un scan complet de l'outil, vous devez au préalable cliquer sur ce bouton.

Ce qui aura pour conséquence de relancer ZHPDiag avec une désactivation temporaire de l'UAC.

A la fin de l'installation ZHPDiag va se lancer....

Cliques sur "Lancer le diagnostic " (image de la loupe) et patiente...

A la fin du scan le rapport est sauvegardé directement sur ton bureau.

ZHPDiag.txt

Mets le rapport ici car il prend bien de la place.

Accueil de Cjoint.com

ou.

Envoyez et partagez vos fichiers

nebulon · le 8 mars 2013

bonsoir et merci de m'aider ,

voici le lien zhp : CJoint.com, 2012

merci

bernard53 · le 9 mars 2013

Effectivement il y a pas mal de monde :-?

* Copie le tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C)

[HKCU\Software\AppDataLow\Software\Smartbar] => Infection PUP (Hijacker.SmartBar)*

[HKCU\Software\DataMngr] => Infection PUP (PUP.BearShare)*

[HKCU\Software\InstallCore] => Infection PUP (Adware.InstallCore)

[HKCU\Software\e48d8cbd35eb40] => Infection PUP (Toolbar.Babylon)

[HKLM\Software\Wow6432Node\Babylon] => Infection PUP (Toolbar.Babylon)*

[HKLM\Software\Wow6432Node\DataMngr] => Infection PUP (PUP.BearShare)*

[HKLM\Software\Wow6432Node\FileSubmit] => Infection BT (Adware.FileSubmit)

O43 - CFD: 23/01/2013 - 20:04:46 - [0] ----D C:\ProgramData\BrowserProtect => Infection PUP (Toolbar.Babylon)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.isPerformedSmartBarTransition", "true"); => Infection PUP (Hijacker.SmartBar)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.smartbar.CTID", "CT2851639"); => Infection PUP (Hijacker.SmartBar)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.smartbar.Uninstall", "1"); => Infection PUP (Hijacker.SmartBar)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.smartbar.homepage", true); => Infection PUP (Hijacker.SmartBar)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.smartbar.isHidden", true); => Infection PUP (Hijacker.SmartBar)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("Smartbar.ConduitHomepagesList", ""); => Infection PUP (Hijacker.SmartBar)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("extensions.BabylonToolbar_i.newTab", true); => Infection PUP (Toolbar.Babylon)*

[HKLM\Software\Classes\Interface\{0bbf19a5-be50-4e06-a340-6777a505e490}] => Infection PUP (Adware.RecordNRip)

[HKLM\Software\Wow6432Node\Classes\Interface\{0bbf19a5-be50-4e06-a340-6777a505e490}] => Infection PUP (Adware.RecordNRip)

[HKLM\Software\Classes\Interface\{2bef239c-752e-4001-8048-f256e0d8cd93}] => Infection PUP (Adware.RecordNRip)

[HKLM\Software\Wow6432Node\Classes\Interface\{2bef239c-752e-4001-8048-f256e0d8cd93}] => Infection PUP (Adware.RecordNRip)

[HKLM\Software\Classes\Interface\{3f607e46-0d3c-4442-b1de-de7fa4768f5c}] => Infection PUP (Adware.RecordNRip)

[HKLM\Software\Wow6432Node\Classes\Interface\{3f607e46-0d3c-4442-b1de-de7fa4768f5c}] => Infection PUP (Adware.RecordNRip)

[HKLM\Software\Classes\Interface\{49c00a51-6e59-41fe-b3fa-2d2157fad67b}] => Infection PUP (Adware.RecordNRip)

[HKLM\Software\Wow6432Node\Classes\Interface\{49c00a51-6e59-41fe-b3fa-2d2157fad67b}] => Infection PUP (Adware.RecordNRip)

[HKLM\Software\Classes\Interface\{6dff5dba-ae3a-46db-b301-ecffc6db2982}] => Infection PUP (Adware.RecordNRip)

[HKLM\Software\Wow6432Node\Classes\Interface\{6dff5dba-ae3a-46db-b301-ecffc6db2982}] => Infection PUP (Adware.RecordNRip)

[HKLM\Software\Classes\TypeLib\{93e3d79c-0786-48ff-9329-93bc9f6dc2b3}] => Infection PUP (Adware.RecordNRip)

[HKLM\Software\Classes\Interface\{de34cd67-f1c8-4001-9a23-b8a68f63f377}] => Infection PUP (Adware.RecordNRip)

[HKLM\Software\Wow6432Node\Classes\Interface\{de34cd67-f1c8-4001-9a23-b8a68f63f377}] => Infection PUP (Adware.RecordNRip)

[HKLM\Software\Classes\Interface\{fe0273d1-99df-4ac0-87d5-1371c6271785}] => Infection PUP (Adware.RecordNRip)

[HKLM\Software\Wow6432Node\Classes\Interface\{fe0273d1-99df-4ac0-87d5-1371c6271785}] => Infection PUP (Adware.RecordNRip)

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}] => Infection BT (PUP.ClaroSearch)

[HKLM\Software\Classes\Interface\{F7BEBBB1-7E6B-4561-9444-6F4866D60C7C}] => Infection PUP (PUP.iMesh)

[HKCU\Software\DataMngr] => Infection PUP (PUP.BearShare)*

[HKLM\Software\Wow6432Node\DataMngr] => Infection PUP (PUP.BearShare)*

[HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASAPI32] => Infection PUP (Toolbar.Babylon)*

[HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASMANCS] => Infection PUP (Toolbar.Babylon)*

[HKLM\Software\Classes\Prod.cap] => Infection PUP (Toolbar.Babylon)

[HKLM\Software\Wow6432Node\Microsoft\Tracing\offerbox_RASAPI32] => Infection PUP (PUP.OfferBox)*

[HKLM\Software\Wow6432Node\Microsoft\Tracing\offerbox_RASMANCS] => Infection PUP (PUP.OfferBox)*

[HKLM\Software\Wow6432Node\Microsoft\Tracing\OfferBoxHTTPProxy_RASAPI32] => Infection PUP (PUP.OfferBox)*

[HKLM\Software\Wow6432Node\Microsoft\Tracing\OfferBoxHTTPProxy_RASMANCS] => Infection PUP (PUP.OfferBox)*

[HKCU\Software\InstallCore] => Infection PUP (Adware.InstallCore)

C:\Users\nebulon\AppData\Roaming\Mozilla\Firefox\Profiles\odfzk0so.default\Smartbar => Infection PUP (Hijacker.SmartBar)*

[HKCU\Software\e48d8cbd35eb40\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:dllName="BrowserProtect.dll" => Infection PUP (Toolbar.Babylon)*

[HKCU\Software\e48d8cbd35eb40\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:exeName="BrowserProtect.exe" => Infection PUP (Toolbar.Babylon)*

[HKCU\Software\e48d8cbd35eb40\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:folderName="BrowserProtect" => Infection PUP (Toolbar.Babylon)*

[HKCU\Software\e48d8cbd35eb40\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" => Infection PUP (Toolbar.Babylon)

[HKCU\Software\e48d8cbd35eb40\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:serviceName="BrowserProtect" => Infection PUP (Toolbar.Babylon)*

[HKCU\Software\e48d8cbd35eb40\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:version="2.6.1095.52"

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.openUninstallPage", "FALSE"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.search.searchAppId", "129351529700743801"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.search.searchCount", "0"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.searchInNewTabEnabledInHidden", "true"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2851639\"}"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1353172037661"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.serviceLayer_services_appsMetadata_lastUpdate", "1353414638856"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1353172037761"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.serviceLayer_services_login_10.10.27.6_lastUpdate", "1357658944242"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.serviceLayer_services_login_10.13.40.15_lastUpdate", "1357733583650"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1353172037985"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.serviceLayer_services_searchAPI_lastUpdate", "1353414638928"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.serviceLayer_services_serviceMap_lastUpdate", "1357745343988"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.serviceLayer_services_toolbarContextMenu_lastUpdate", "1353172037719"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.serviceLayer_services_toolbarSettings_lastUpdate", "1357743215401"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.serviceLayer_services_translation_lastUpdate", "1357745344103"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.settingsINI", true); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.shouldFirstTimeDialog", "false"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.startPage", "userChanged"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.toolbarBornServerTime", "17-11-2012"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.toolbarCurrentServerTime", "9-1-2013"); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639.upgradeFromClearSBVersion", true); => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("CT2851639_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1357744926288,\"isWithState\"[...] => Toolbar.Agent

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("Smartbar.ConduitSearchUrlList", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2851639&SearchSource=2&q="'>http://search.conduit.com/ResultsExt.aspx?ctid=CT2851639&SearchSource=2&q="'>http://search.conduit.com/ResultsExt.aspx?ctid=CT2851639&SearchSource=2&q="); => Toolbar.Conduit*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("extensions.delta.admin", false); => Toolbar.DeltaSearch)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("extensions.delta.aflt", "babsst"); => Toolbar.DeltaSearch)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}"); => Toolbar.DeltaSearch)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("extensions.delta.autoRvrt", "false"); => Toolbar.DeltaSearch)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("extensions.delta.dfltLng", "en"); => Toolbar.DeltaSearch)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("extensions.delta.excTlbr", false); => Toolbar.DeltaSearch)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("extensions.delta.id", "e2ce9971000000000000001fbc091c67"); => Toolbar.DeltaSearch)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("extensions.delta.instlDay", "15728"); => Toolbar.DeltaSearch)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("extensions.delta.instlRef", "sst"); => Toolbar.DeltaSearch)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("extensions.delta.prdct", "delta"); => Toolbar.DeltaSearch)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("extensions.delta.prtnrId", "delta"); => Toolbar.DeltaSearch)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("extensions.delta.rvrt", "false"); => Toolbar.DeltaSearch)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("extensions.delta.tlbrId", "base"); => Toolbar.DeltaSearch)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("extensions.delta.tlbrSrchUrl", ""); => Toolbar.DeltaSearch)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("extensions.delta.vrsn", "1.8.8.8"); => Toolbar.DeltaSearch)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("extensions.delta.vrsni", "1.8.8.8"); => Toolbar.DeltaSearch)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("extensions.delta_i.excTlbr", false); => Toolbar.DeltaSearch)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("extensions.delta_i.newTab", false); => Toolbar.DeltaSearch)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("extensions.delta_i.smplGrp", "none"); => Toolbar.DeltaSearch)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("extensions.delta_i.vrsnTs", "1.8.8.820:04:40"); => Toolbar.DeltaSearch)*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("smartbar.conduitSearchAddressUrlList", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2851639&SearchSource=2&q="); => Toolbar.Conduit*

O69 - SBI: prefs.js [nebulon - odfzk0so.default] user_pref("smartbar.originalSearchAddressUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2851639&SearchSource=2&q="); => Toolbar.Conduit*

O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - {searchTerms} - Bing => Toolbar.Bing

O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Delta Search) - {searchTerms} - Babylon Yahoo! France Résultats de recherche => Toolbar.DeltaSearch*

O69 - SBI: SearchScopes [HKCU] {2B2A23AE-5919-4FE7-B696-790D7DB77921} - (Ask Search) - {searchTerms} - Ask.com Search => Toolbar.Ask

[HKLM\Software\Classes\AppID\Launcher.EXE] => Toolbar.BearShare

[HKLM\Software\Classes\AppID\NCTAudioCDGrabber2.DLL] => Toolbar.BearShare

[HKLM\Software\Classes\AppID\NCTAudioCompress3.DLL] => Toolbar.BearShare

[HKLM\Software\Classes\AppID\NCTAudioFile3.DLL] => Toolbar.BearShare

[HKLM\Software\Classes\AppID\NCTAudioFileWMA3.DLL] => Toolbar.BearShare

[HKLM\Software\Classes\AppID\NCTAudioFormatSettings3.DLL] => Toolbar.BearShare

[HKLM\Software\Wow6432Node\Google\Chrome\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib] => Toolbar.uTorrentBar

[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}] => Toolbar.Bing

[HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}] => Toolbar.Bing

[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}] => Toolbar.Bing

[HKLM\Software\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] => Toolbar.DeltaSearch

[HKLM\Software\Wow6432Node\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}] => Toolbar.DeltaSearch

C:\ProgramData\InstallMate => Toolbar.Tarma

C:\Users\nebulon\AppData\Local\Conduit => Toolbar.Conduit

C:\Users\nebulon\AppData\LocalLow\Conduit => Toolbar.Conduit

FirewallRaz

EmptyFlash

Emptytemp

Puis Lance ZHPFix depuis le raccourci du bureau.

-> laisse travailler l'outil et ne touche à rien ...

Une fois terminée, un nouveau rapport s'affiche : copie/colle le contenu de ce dernier dans ta prochaine réponse ...

(ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ZHPFixReport.txt)

Important : s'il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le de suite !

Ensuite:

Télécharge AdwCleaner ( d'Xplode ) sur ton bureau.

http://general-changelog-team.fr/telechargements/logiciels/viewdownload/75-outils-de-xplode/28-adwcleaner

- Lances le en mode normal , puis cliques sur [suppression]

- Lorsque le message indiquant qu'AdwCleaner a détecté une variante spécifique d'adware s'affiche , cliquez sur [OK]

- L'ordinateur va redémarrer tout seul. Redémarre-le en mode normal.

- AdwCleaner s'ouvrira normalement, avec comme seul choix possible [suppression]

- Cliquez dessus, puis patientes pendant la suppression.

- Une fois la suppression effectuée, AdwCleaner vous invitera à redémarrer l'ordinateur

- Au redémarrage, un rapport s'ouvrira. Postes le sur le forum.

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[s1].txt

Ensuite

Installe Malewarebytes' Antimalware,

Malwarebytes : Malwarebytes Anti-Malware removes malware including viruses, spyware, worms and trojans, plus it protects your computer

Prends bien la version FREE

*** Met-le à jour puis choisi, Fait juste un scan rapide

*** Si une infection est trouvée, coche la case a coté et valides avec l’Onglet Supprimer la sélection

Poste le rapport final.

Modifié le 9 mars 2013 par bernard53

nebulon · le 9 mars 2013

effectivement y avait du monde !!

log ZHPFIX :;)

Rapport de ZHPFix 1.4.01 par Nicolas Coolman, Update du 02/03/2013

Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-09-03-2013-10-34-58.txt

Run by nebulon at 09/03/2013 10:36:31

High Elevated Privileges : OK

Windows Vista Home Premium Edition, 64-bit (Build 6000)

Corbeille vidée

========== Clé(s) du Registre ==========

ABSENT Key: HKCU\Software\AppDataLow\Software\Smartbar

ABSENT Key: HKCU\Software\DataMngr

ABSENT Key: HKCU\Software\InstallCore

ABSENT Key: HKCU\Software\e48d8cbd35eb40

ABSENT Key: HKLM\Software\Wow6432Node\Babylon

ABSENT Key: HKLM\Software\Wow6432Node\DataMngr

ABSENT Key: HKLM\Software\Wow6432Node\FileSubmit

ABSENT Key: HKLM\Software\Classes\Interface\{0bbf19a5-be50-4e06-a340-6777a505e490}

ABSENT Key: HKLM\Software\Wow6432Node\Classes\Interface\{0bbf19a5-be50-4e06-a340-6777a505e490}

ABSENT Key: HKLM\Software\Classes\Interface\{2bef239c-752e-4001-8048-f256e0d8cd93}

ABSENT Key: HKLM\Software\Wow6432Node\Classes\Interface\{2bef239c-752e-4001-8048-f256e0d8cd93}

ABSENT Key: HKLM\Software\Classes\Interface\{3f607e46-0d3c-4442-b1de-de7fa4768f5c}

ABSENT Key: HKLM\Software\Wow6432Node\Classes\Interface\{3f607e46-0d3c-4442-b1de-de7fa4768f5c}

ABSENT Key: HKLM\Software\Classes\Interface\{49c00a51-6e59-41fe-b3fa-2d2157fad67b}

ABSENT Key: HKLM\Software\Wow6432Node\Classes\Interface\{49c00a51-6e59-41fe-b3fa-2d2157fad67b}

ABSENT Key: HKLM\Software\Classes\Interface\{6dff5dba-ae3a-46db-b301-ecffc6db2982}

ABSENT Key: HKLM\Software\Wow6432Node\Classes\Interface\{6dff5dba-ae3a-46db-b301-ecffc6db2982}

ABSENT Key: HKLM\Software\Classes\TypeLib\{93e3d79c-0786-48ff-9329-93bc9f6dc2b3}

ABSENT Key: HKLM\Software\Classes\Interface\{de34cd67-f1c8-4001-9a23-b8a68f63f377}

ABSENT Key: HKLM\Software\Wow6432Node\Classes\Interface\{de34cd67-f1c8-4001-9a23-b8a68f63f377}

ABSENT Key: HKLM\Software\Classes\Interface\{fe0273d1-99df-4ac0-87d5-1371c6271785}

ABSENT Key: HKLM\Software\Wow6432Node\Classes\Interface\{fe0273d1-99df-4ac0-87d5-1371c6271785}

ABSENT Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}

ABSENT Key: HKLM\Software\Classes\Interface\{F7BEBBB1-7E6B-4561-9444-6F4866D60C7C}

ABSENT Key: HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASAPI32

ABSENT Key: HKLM\Software\Wow6432Node\Microsoft\Tracing\MyBabylontb_RASMANCS

ABSENT Key: HKLM\Software\Classes\Prod.cap

ABSENT Key: HKLM\Software\Wow6432Node\Microsoft\Tracing\offerbox_RASAPI32

ABSENT Key: HKLM\Software\Wow6432Node\Microsoft\Tracing\offerbox_RASMANCS

ABSENT Key: HKLM\Software\Wow6432Node\Microsoft\Tracing\OfferBoxHTTPProxy_RASAPI32

ABSENT Key: HKLM\Software\Wow6432Node\Microsoft\Tracing\OfferBoxHTTPProxy_RASMANCS

ABSENT SearchScopes :{0633EE93-D776-472f-A0FF-E1416B8B2E3A}

ABSENT SearchScopes :{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}

ABSENT SearchScopes :{2B2A23AE-5919-4FE7-B696-790D7DB77921}

ABSENT Key: HKLM\Software\Classes\AppID\Launcher.EXE

ABSENT Key: HKLM\Software\Classes\AppID\NCTAudioCDGrabber2.DLL

ABSENT Key: HKLM\Software\Classes\AppID\NCTAudioCompress3.DLL

ABSENT Key: HKLM\Software\Classes\AppID\NCTAudioFile3.DLL

ABSENT Key: HKLM\Software\Classes\AppID\NCTAudioFileWMA3.DLL

ABSENT Key: HKLM\Software\Classes\AppID\NCTAudioFormatSettings3.DLL

ABSENT Key: HKLM\Software\Wow6432Node\Google\Chrome\Extensions\paoponfhfdfnjgddpnpjkambkcgdaaib

ABSENT Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}

ABSENT Key: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}

ABSENT Key: HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}

ABSENT Key: HKLM\Software\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}

ABSENT Key: HKLM\Software\Wow6432Node\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}

========== Valeur(s) du Registre ==========

ABSENT [HKCU\Software\e48d8cbd35eb40\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:dllname="BrowserProtect.dll"

ABSENT [HKCU\Software\e48d8cbd35eb40\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:exename="BrowserProtect.exe"

ABSENT [HKCU\Software\e48d8cbd35eb40\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:foldername="BrowserProtect"

ABSENT [HKCU\Software\e48d8cbd35eb40\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:guid="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"

ABSENT [HKCU\Software\e48d8cbd35eb40\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:servicename="BrowserProtect"

ABSENT [HKCU\Software\e48d8cbd35eb40\history\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}2.6.1095.52]:version="2.6.1095.52"

ABSENT Valeur Domain Profile: FirewallRaz :

========== Préférences navigateur ==========

ABSENT Mozilla Pref: user_pref("CT2851639.isPerformedSmartBarTransition", "true");

ABSENT Mozilla Pref: user_pref("CT2851639.smartbar.CTID", "CT2851639");

ABSENT Mozilla Pref: user_pref("CT2851639.smartbar.Uninstall", "1");

ABSENT Mozilla Pref: user_pref("CT2851639.smartbar.homepage", true);

ABSENT Mozilla Pref: user_pref("CT2851639.smartbar.isHidden", true);

ABSENT Mozilla Pref: user_pref("Smartbar.ConduitHomepagesList", "");

ABSENT Mozilla Pref: user_pref("extensions.BabylonToolbar_i.newTab", true);

ABSENT Mozilla Pref: user_pref("CT2851639.openUninstallPage", "FALSE");

ABSENT Mozilla Pref: user_pref("CT2851639.search.searchAppId", "129351529700743801");

ABSENT Mozilla Pref: user_pref("CT2851639.search.searchCount", "0");

ABSENT Mozilla Pref: user_pref("CT2851639.searchInNewTabEnabledInHidden", "true");

ABSENT Mozilla Pref: user_pref("CT2851639.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

ABSENT Mozilla Pref: user_pref("CT2851639.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

ABSENT Mozilla Pref: user_pref("CT2851639.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");

ABSENT Mozilla Pref: user_pref("CT2851639.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2851639\"}");

ABSENT Mozilla Pref: user_pref("CT2851639.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");

ABSENT Mozilla Pref: user_pref("CT2851639.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");

ABSENT Mozilla Pref: user_pref("CT2851639.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1353172037661");

ABSENT Mozilla Pref: user_pref("CT2851639.serviceLayer_services_appsMetadata_lastUpdate", "1353414638856");

ABSENT Mozilla Pref: user_pref("CT2851639.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1353172037761");

ABSENT Mozilla Pref: user_pref("CT2851639.serviceLayer_services_login_10.10.27.6_lastUpdate", "1357658944242");

ABSENT Mozilla Pref: user_pref("CT2851639.serviceLayer_services_login_10.13.40.15_lastUpdate", "1357733583650");

ABSENT Mozilla Pref: user_pref("CT2851639.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1353172037985");

ABSENT Mozilla Pref: user_pref("CT2851639.serviceLayer_services_searchAPI_lastUpdate", "1353414638928");

ABSENT Mozilla Pref: user_pref("CT2851639.serviceLayer_services_serviceMap_lastUpdate", "1357745343988");

ABSENT Mozilla Pref: user_pref("CT2851639.serviceLayer_services_toolbarContextMenu_lastUpdate", "1353172037719");

ABSENT Mozilla Pref: user_pref("CT2851639.serviceLayer_services_toolbarSettings_lastUpdate", "1357743215401");

ABSENT Mozilla Pref: user_pref("CT2851639.serviceLayer_services_translation_lastUpdate", "1357745344103");

ABSENT Mozilla Pref: user_pref("CT2851639.settingsINI", true);

ABSENT Mozilla Pref: user_pref("CT2851639.shouldFirstTimeDialog", "false");

ABSENT Mozilla Pref: user_pref("CT2851639.startPage", "userChanged");

ABSENT Mozilla Pref: user_pref("CT2851639.toolbarBornServerTime", "17-11-2012");

ABSENT Mozilla Pref: user_pref("CT2851639.toolbarCurrentServerTime", "9-1-2013");

ABSENT Mozilla Pref: user_pref("CT2851639.upgradeFromClearSBVersion", true);

ABSENT Mozilla Pref: user_pref("CT2851639_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1357744926288,\"isWithState\"[...]

ABSENT Mozilla Pref: user_pref("Smartbar.ConduitSearchUrlList", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2851639&SearchSource=2&q="'>http://search.conduit.com/ResultsExt.aspx?ctid=CT2851639&SearchSource=2&q="'>http://search.conduit.com/ResultsExt.aspx?ctid=CT2851639&SearchSource=2&q=");

SUPPRIME Mozilla Pref: user_pref("extensions.delta.admin", false);

SUPPRIME Mozilla Pref: user_pref("extensions.delta.aflt", "babsst");

SUPPRIME Mozilla Pref: user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");

SUPPRIME Mozilla Pref: user_pref("extensions.delta.autoRvrt", "false");

SUPPRIME Mozilla Pref: user_pref("extensions.delta.dfltLng", "en");

SUPPRIME Mozilla Pref: user_pref("extensions.delta.excTlbr", false);

SUPPRIME Mozilla Pref: user_pref("extensions.delta.id", "e2ce9971000000000000001fbc091c67");

SUPPRIME Mozilla Pref: user_pref("extensions.delta.instlDay", "15728");

SUPPRIME Mozilla Pref: user_pref("extensions.delta.instlRef", "sst");

SUPPRIME Mozilla Pref: user_pref("extensions.delta.prdct", "delta");

SUPPRIME Mozilla Pref: user_pref("extensions.delta.prtnrId", "delta");

SUPPRIME Mozilla Pref: user_pref("extensions.delta.rvrt", "false");

SUPPRIME Mozilla Pref: user_pref("extensions.delta.tlbrId", "base");

SUPPRIME Mozilla Pref: user_pref("extensions.delta.tlbrSrchUrl", "");

SUPPRIME Mozilla Pref: user_pref("extensions.delta.vrsn", "1.8.8.8");

SUPPRIME Mozilla Pref: user_pref("extensions.delta.vrsni", "1.8.8.8");

SUPPRIME Mozilla Pref: user_pref("extensions.delta_i.excTlbr", false);

SUPPRIME Mozilla Pref: user_pref("extensions.delta_i.newTab", false);

SUPPRIME Mozilla Pref: user_pref("extensions.delta_i.smplGrp", "none");

SUPPRIME Mozilla Pref: user_pref("extensions.delta_i.vrsnTs", "1.8.8.820:04:40");

ABSENT Mozilla Pref: user_pref("smartbar.conduitSearchAddressUrlList", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2851639&SearchSource=2&q=");

ABSENT Mozilla Pref: user_pref("smartbar.originalSearchAddressUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2851639&SearchSource=2&q=");

========== Dossier(s) ==========

ABSENT C:\ProgramData\BrowserProtect

SUPPRIME Flash Cookies

SUPPRIME Temporaires Windows

========== Fichier(s) ==========

ABSENT Folder/File: c:\users\nebulon\appdata\roaming\mozilla\firefox\profiles\odfzk0so.default\smartbar

ABSENT Folder/File: c:\programdata\installmate

ABSENT Folder/File: c:\users\nebulon\appdata\local\conduit

ABSENT Folder/File: c:\users\nebulon\appdata\locallow\conduit

SUPPRIME Flash Cookies

SUPPRIME Temporaires Windows

========== Récapitulatif ==========

46 : Clé(s) du Registre

7 : Valeur(s) du Registre

3 : Dossier(s)

6 : Fichier(s)

58 : Préférences navigateur

End of clean in 00mn 01s

========== Chemin de fichier rapport ==========

C:\ZHP\ZHPFix[R1].txt - 08/03/2013 11:14:13 [1308]

C:\ZHP\ZHPFix[R2].txt - 08/03/2013 11:15:40 [1457]

C:\ZHP\ZHPFix[R3].txt - 09/03/2013 10:34:58 [11180]

C:\ZHP\ZHPFix[R4].txt - 09/03/2013 10:36:31 [11065]

log adwarcleaner :;)

# AdwCleaner v2.114 - Rapport créé le 09/03/2013 à 10:41:13

# Mis à jour le 05/03/2013 par Xplode

# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)

# Nom d'utilisateur : nebulon - NEBULON-PC

# Mode de démarrage : Normal

# Exécuté depuis : D:\nebulon d\Downloads\adwcleaner.exe

# Option [suppression]

***** [services] *****

***** [Fichiers / Dossiers] *****

Dossier Supprimé : C:\ProgramData\Premium

Fichier Supprimé : C:\Users\nebulon\AppData\Roaming\Mozilla\Firefox\Profiles\odfzk0so.default\searchplugins\delta.xml

***** [Registre] *****

Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}

Clé Supprimée : HKLM\Software\Conduit

Clé Supprimée : HKLM\Software\dlQUE

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASAPI32

Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS

Valeur Supprimée : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [10]

Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]

***** [Navigateurs] *****

-\\ Internet Explorer v9.0.8112.16421

[OK] Le registre ne contient aucune entrée illégitime.

-\\ Mozilla Firefox v19.0.2 (fr)

Fichier : C:\Users\nebulon\AppData\Roaming\Mozilla\Firefox\Profiles\odfzk0so.default\prefs.js

C:\Users\nebulon\AppData\Roaming\Mozilla\Firefox\Profiles\odfzk0so.default\user.js ... Supprimé !

Supprimée : user_pref("CT2851639.1000234.TWC_TMP_city", "RUE");

Supprimée : user_pref("CT2851639.1000234.TWC_TMP_country", "FR");

Supprimée : user_pref("CT2851639.CBOpenMAMSettings", "0");

Supprimée : user_pref("CT2851639.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

Supprimée : user_pref("CT2851639.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]

Supprimée : user_pref("CT2851639.FirstTime", "true");

Supprimée : user_pref("CT2851639.FirstTimeFF3", "true");

Supprimée : user_pref("CT2851639.LoginRevertSettingsEnabled", false);

Supprimée : user_pref("CT2851639.RevertSettingsEnabled", true);

Supprimée : user_pref("CT2851639.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT285[...]

Supprimée : user_pref("CT2851639.UserID", "UN45966748200645624");

Supprimée : user_pref("CT2851639.addressBarTakeOverEnabledInHidden", "true");

Supprimée : user_pref("CT2851639.autoDisableScopes", -1);

Supprimée : user_pref("CT2851639.browser.search.defaultthis.engineName", true);

Supprimée : user_pref("CT2851639.cbcountry_001", "FR");

Supprimée : user_pref("CT2851639.cbfirsttime", "Sat Nov 17 2012 18:07:18 GMT+0100");

Supprimée : user_pref("CT2851639.embeddedsData", "[{\"appId\":\"129351529700743801\",\"apiPermissions\":{\"cross[...]

Supprimée : user_pref("CT2851639.enableAlerts", "always");

Supprimée : user_pref("CT2851639.enableSearchFromAddressBar", "true");

Supprimée : user_pref("CT2851639.firstTimeDialogOpened", "true");

Supprimée : user_pref("CT2851639.fixPageNotFoundError", "true");

Supprimée : user_pref("CT2851639.fixPageNotFoundErrorInHidden", "true");

Supprimée : user_pref("CT2851639.fixUrls", true);

Supprimée : user_pref("CT2851639.installId", "fft4EFD.tmp.exe");

Supprimée : user_pref("CT2851639.installType", "XPE");

Supprimée : user_pref("CT2851639.isCheckedStartAsHidden", true);

Supprimée : user_pref("CT2851639.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

Supprimée : user_pref("CT2851639.isFirstTimeToolbarLoading", "false");

Supprimée : user_pref("CT2851639.isNewTabEnabled", true);

Supprimée : user_pref("CT2851639.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

Supprimée : user_pref("CT2851639.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

Supprimée : user_pref("CT2851639.keyword", true);

Supprimée : user_pref("CT2851639.migrateAppsAndComponents", true);

Supprimée : user_pref("CT2851639.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.youtube.com%[...]

Supprimée : user_pref("CT2851639.openThankYouPage", "true");

Supprimée : user_pref("CT2851639.scriptSource", "hxxp://127.0.0.1:10000/gui/");

Supprimée : user_pref("CT2851639.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]

Supprimée : user_pref("CT2851639.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]

Supprimée : user_pref("CT2851639.smartbar.toolbarName", "uTorrentBar_FR ");

Supprimée : user_pref("CT2851639.url_history0001", "hxxp://www.cpasbien.me/films/:::clickhandler:::1353172119640[...]

Supprimée : user_pref("Smartbar.ConduitSearchEngineList", "uTorrentBar_FR Customized Web Search");

Supprimée : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://fr.search.yahoo.com/search?fr=ytff-comodo[...]

Supprimée : user_pref("Smartbar.keywordURLSelectedCTID", "CT2851639");

Supprimée : user_pref("browser.search.selectedEngine", "uTorrentBar_FR Customized Web Search");

Supprimée : user_pref("extensions.delta.admin", false);

Supprimée : user_pref("extensions.delta.aflt", "babsst");

Supprimée : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");

Supprimée : user_pref("extensions.delta.autoRvrt", "false");

Supprimée : user_pref("extensions.delta.dfltLng", "en");

Supprimée : user_pref("extensions.delta.excTlbr", false);

Supprimée : user_pref("extensions.delta.id", "e2ce9971000000000000001fbc091c67");

Supprimée : user_pref("extensions.delta.instlDay", "15728");

Supprimée : user_pref("extensions.delta.instlRef", "sst");

Supprimée : user_pref("extensions.delta.prdct", "delta");

Supprimée : user_pref("extensions.delta.prtnrId", "delta");

Supprimée : user_pref("extensions.delta.rvrt", "false");

Supprimée : user_pref("extensions.delta.tlbrId", "base");

Supprimée : user_pref("extensions.delta.tlbrSrchUrl", "");

Supprimée : user_pref("extensions.delta.vrsn", "1.8.8.8");

Supprimée : user_pref("extensions.delta.vrsni", "1.8.8.8");

Supprimée : user_pref("extensions.delta_i.excTlbr", false);

Supprimée : user_pref("extensions.delta_i.newTab", false);

Supprimée : user_pref("extensions.delta_i.smplGrp", "none");

Supprimée : user_pref("extensions.delta_i.vrsnTs", "1.8.8.820:04:40");

*************************

AdwCleaner[s2].txt - [6584 octets] - [09/03/2013 10:41:13]

########## EOF - C:\AdwCleaner[s2].txt - [6644 octets] ##########

log malware byte :;)

Malwarebytes Anti-Malware 1.70.0.1100

www.malwarebytes.org

Version de la base de données: v2013.03.09.07

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 9.0.8112.16421

nebulon :: NEBULON-PC [administrateur]

09/03/2013 10:49:06

mbam-log-2013-03-09 (10-49-06).txt

Type d'examen: Examen rapide

Options d'examen désactivées:

Elément(s) analysé(s): 203616

Temps écoulé: 3 minute(s), 45 seconde(s)

Processus mémoire détecté(s): 0