Internet s'ouvre de manière intempestive - ??Fermé

Question

Bonjour,

Qqun pourrait'il m'aider  svp? Je ne comprends pas pourquoi Internet Explorer s'ouvre depuis peu de manière intempestive, comme cela tout seul, sur une page de publicité.

Si vous avez déjà rencontré ce genre de soucis, pourriez-vous me dire comment vous y avez remédié?
Je vous en remercie d'avance.

PS. : s'il vous plait pas une explication pour les pros mais plutôt pour les ... NULS .... ! Merci :))

gen-hackman · Answer

bonjour ce doit etre du vundo ou Navipromo on va verifier :

Salut, 


commences par ceci pour voir ce qu'il en est,avoir un diagnostic précis et donc repérer les infections possibles et les neutraliser: 


Télécharges et installes le logiciel de diagnostic : 

ici Hijackthis 
ou ici Hijackthis
ou ici Hijackthis


1- Cliques sur le setup pour lancer l'installe : laisses toi guider et ne modifies pas les paramètres d'installation . 
A la fin de l'installe , le prg ce lance automatiquement : fermes le en cliquant sur la croix rouge . 
Au final, tu dois avoir un raccourci sur ton bureau et aussi un cheminement comme : 
"C:\ program files\Trend Micro\HijackThis\HijackThis.exe " . 

tuto pour utilisation :(merci balltrap34) 
Regardes ici, c'est parfaitement expliqué en images , 

( Ne fixes encore AUCUNE ligne de ton plein gré, cela pourrait empêcher ton PC de fonctionner correctement ) 

2- !! Déconnectes toi et fermes toute tes applications en cours !! 

Cliques sur le raccourci du bureau pour lancer le prg : 

S'il ne se lance pas clique ici

fais un scan HijackThis en cliquant sur : "Do a system scan and save a logfile" 

--->copies-colles le rapport généré pour analyse

PASSIO_ZIK55 · Answer

Bonjour,
MERCI BEAUCOUP POUR L'ATTENTION QUE TU AS BIEN VOULU M'ACCORDER, j'ai fait comme décrit dans ton message et voici le rapport :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:28:19, on 22/04/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18226)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32	askeng.exe
C:\Windows\system32	askeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
D:\HP Software Update\hpwuSchd2.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
C:\Program Files\EoRezo\EoEngine.exe
C:\Windows\System32undll32.exe
C:\Windows\System32undll32.exe
C:\Program Files\dvd43\DVD43_Tray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Babylon\Babylon-Pro\Babylon.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Packard Bell Data Secure\PBDataSecure.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\Users\JCNAD\Program Files\DNA\btdna.exe
C:\Program Files\Software Informer\softinfo.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
D:\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
C:\Windows\system32\WgaTray.exe
D:\Digital Imaging\bin\hpqSTE08.exe
D:\Digital Imaging\bin\hpqbam08.exe
D:\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Internet Explorer\IEUser.exe
D:\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10b.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?lang=fr-BE&cc=be&toHttps=1&redig=0E9AB1F24EBE41A98AED7E328AACAE1D
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/home
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.trooner.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Best Security Tips Toolbar - {da30eff8-ccc6-4162-a20d-67402a26a215} - C:\Program Files\Best_Security_Tips	bBest.dll
R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
R3 - URLSearchHook: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English	bmyB0.dll
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Smart-Shopper - {4A7C84E2-E95C-43C6-8DD3-03ABCD0EB60E} - C:\Program Files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: GamesBar - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - C:\Program Files\GamesBar\oberontb.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O2 - BHO: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English	bmyB0.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Mega Manager IE Click Monitor - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - (no file)
O2 - BHO: EoBHO - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Best Security Tips Toolbar - {da30eff8-ccc6-4162-a20d-67402a26a215} - C:\Program Files\Best_Security_Tips	bBest.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - D:\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: GamesBar - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - C:\Program Files\GamesBar\oberontb.dll
O3 - Toolbar: Best Security Tips Toolbar - {da30eff8-ccc6-4162-a20d-67402a26a215} - C:\Program Files\Best_Security_Tips	bBest.dll
O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O3 - Toolbar: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English	bmyB0.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [recinfo815] c:\RecInfo\RecInfo.exe
O4 - HKLM\..\Run: [recinfo] RecInfo.exe
O4 - HKLM\..\Run: [HP Software Update] D:\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [hpqSRMon] D:\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\EoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32
vsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [dvd43] C:\Program Files\dvd43\dvd43_tray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Babylon Client] C:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Packard Bell Data Secure] C:\Program Files\Packard Bell Data Secure\PBDataSecure.exe
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Users\JCNAD\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [Software Informer] "C:\Program Files\Software Informer\softinfo.exe" -autorun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O8 - Extra context menu item: Download Link Using Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
O9 - Extra 'Tools' menuitem: GamesBar - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: SmartShopper - Compare product prices - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEBF} - C:\Program Files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll
O9 - Extra button: SmartShopper - Compare travel rates - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - C:\Program Files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - D:\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix: 
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com/QuickTime/qtactivex/qtplugin.cab
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game05.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5D9D6C2A-E784-4FBA-9643-2C9639BFD4B1}: NameServer = 195.238.2.21,195.238.2.22
O20 - AppInit_DLLs: CLKERN.DLL
O23 - Service: Service de licence ABBYY FineReader 9.0 (ABBYY.Licensing.FineReader.Professional.9.0) - ABBYY (BIT Software) - C:\Program Files\ABBYY FineReader 9.0\NetworkLicenseServer.exe
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Active File Monitor V7 (AdobeActiveFileMonitor7.0) - Adobe Systems Incorporated - C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe
O23 - Service: Wyyo Service - Unknown owner - C:\ProgramData\Wyyo\wyyo131.exe

PASSIO_ZIK55 · Answer

Bonjour,
MERCI BEAUCOUP POUR L'ATTENTION QUE TU AS BIEN VOULU M'ACCORDER, j'ai fait comme décrit dans ton message et voici le rapport :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:28:19, on 22/04/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18226)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32	askeng.exe
C:\Windows\system32	askeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
D:\HP Software Update\hpwuSchd2.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
C:\Program Files\EoRezo\EoEngine.exe
C:\Windows\System32undll32.exe
C:\Windows\System32undll32.exe
C:\Program Files\dvd43\DVD43_Tray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Babylon\Babylon-Pro\Babylon.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Packard Bell Data Secure\PBDataSecure.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\Users\JCNAD\Program Files\DNA\btdna.exe
C:\Program Files\Software Informer\softinfo.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
D:\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
C:\Windows\system32\WgaTray.exe
D:\Digital Imaging\bin\hpqSTE08.exe
D:\Digital Imaging\bin\hpqbam08.exe
D:\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Internet Explorer\IEUser.exe
D:\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10b.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?lang=fr-BE&cc=be&toHttps=1&redig=0E9AB1F24EBE41A98AED7E328AACAE1D
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/home
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.trooner.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Best Security Tips Toolbar - {da30eff8-ccc6-4162-a20d-67402a26a215} - C:\Program Files\Best_Security_Tips	bBest.dll
R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
R3 - URLSearchHook: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English	bmyB0.dll
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Smart-Shopper - {4A7C84E2-E95C-43C6-8DD3-03ABCD0EB60E} - C:\Program Files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: GamesBar - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - C:\Program Files\GamesBar\oberontb.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O2 - BHO: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English	bmyB0.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Mega Manager IE Click Monitor - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - (no file)
O2 - BHO: EoBHO - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Best Security Tips Toolbar - {da30eff8-ccc6-4162-a20d-67402a26a215} - C:\Program Files\Best_Security_Tips	bBest.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - D:\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: GamesBar - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - C:\Program Files\GamesBar\oberontb.dll
O3 - Toolbar: Best Security Tips Toolbar - {da30eff8-ccc6-4162-a20d-67402a26a215} - C:\Program Files\Best_Security_Tips	bBest.dll
O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O3 - Toolbar: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English	bmyB0.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [recinfo815] c:\RecInfo\RecInfo.exe
O4 - HKLM\..\Run: [recinfo] RecInfo.exe
O4 - HKLM\..\Run: [HP Software Update] D:\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [hpqSRMon] D:\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\EoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32
vsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [dvd43] C:\Program Files\dvd43\dvd43_tray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Babylon Client] C:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Packard Bell Data Secure] C:\Program Files\Packard Bell Data Secure\PBDataSecure.exe
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Users\JCNAD\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [Software Informer] "C:\Program Files\Software Informer\softinfo.exe" -autorun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O8 - Extra context menu item: Download Link Using Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Translate with &Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Télécharger la vidéo avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O9 - Extra button: (no name) - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
O9 - Extra 'Tools' menuitem: GamesBar - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: SmartShopper - Compare product prices - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEBF} - C:\Program Files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll
O9 - Extra button: SmartShopper - Compare travel rates - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - C:\Program Files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9 - Extra button: (no name) - {925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - D:\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix: 
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com/QuickTime/qtactivex/qtplugin.cab
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game05.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5D9D6C2A-E784-4FBA-9643-2C9639BFD4B1}: NameServer = 195.238.2.21,195.238.2.22
O20 - AppInit_DLLs: CLKERN.DLL
O23 - Service: Service de licence ABBYY FineReader 9.0 (ABBYY.Licensing.FineReader.Professional.9.0) - ABBYY (BIT Software) - C:\Program Files\ABBYY FineReader 9.0\NetworkLicenseServer.exe
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe Active File Monitor V7 (AdobeActiveFileMonitor7.0) - Adobe Systems Incorporated - C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe
O23 - Service: Wyyo Service - Unknown owner - C:\ProgramData\Wyyo\wyyo131.exe

gen-hackman · Answer

et ben c'est pas beau ca ? j'avais tort sur toute la ligne (lol)

Désactive le contrôle des comptes utilisateurs (tu le réactiveras après ta désinfection): 

- Vas dans "Démarrer" puis Panneau de configuration. 
- Double Clique sur l'icône Comptes d'utilisateurs et sur Activer ou désactiver le contrôle des comptes d'utilisateurs. 
- Clique sur Continuer. 
- Décoche la case Utiliser le contrôle des comptes d'utilisateurs pour vous aider à protéger votre ordinateur. 
- Valide par OK et redémarre. 

Tuto 

ensuite :

Télécharge TOOLBAR S&D ( de Eric_71/Team IDN ) sur ton bureau : 


!! Déconnecte toi,desactive tes protections résidentes, et ferme toutes tes applications en cours le temps de la manip. !! 

* Double-clique sur ToolBar SD.exe pour lancer l'outil et laisse toi guider ...
 
--> Tapes  ( option " recherche " ) puis tape sur [Entrée].  

Un rapport sera généré à la fin du processus : poste son contenu dans ta prochaine réponse 

( le rapport est en outre sauvegardé ici -> C:\TB.txt ) 

Tutoriel 

ensuite :


*****************************************************
*************** Option A  (Recherche) ***************
*****************************************************


Télécharges AD-Remover( de Cyrildu17 / C_XX ) sur ton bureau :


/!\ Déconnectes toi et fermes toutes applications en cours

? Double clique sur le programme d'installation , et installe le dans son emplacement par défaut. ( C:\Program files )
? clique droit sur l'icône Ad-remover située sur ton bureau
? choisis executer en tant qu administrateur
? Au menu principal choisi l'option "scan"
? Postes le rapport qui apparait à la fin .

( le rapport est sauvegardé aussi sous C:\Ad-report(date).log )

(CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

Note :

"Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall)

Aides en images (Installation) 
Aides en images (Recherche)

PASSIO_ZIK · Answer

Bonjour, toutes mes excuses pour répondre aussi tardivement, mais mon mari vient d'être hospitalisé et opéré, donc ... je ne m'occupe plus trop de mon PC maintenant.
Voici le premier rapport demandé :


   -----------\  ToolBar S&D 1.2.8   XP/Vista

   Microsoft® Windows Vista™ Édition Familiale Premium  ( v6.0.6001 ) Service Pack 1
   X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Quad CPU    Q6600  @ 2.40GHz )
   BIOS : Default System BIOS
   USER : JCNAD ( Administrator )
   BOOT : Normal boot
   C:\ (Local Disk) - NTFS - Total:216 Go (Free:103 Go)
   D:\ (Local Disk) - NTFS - Total:107 Go (Free:87 Go)
   F:\ (CD or DVD)
   G:\ (USB)
   H:\ (USB)
   I:\ (USB)
   J:\ (USB)
   K:\ (USB)
   L:\ (Local Disk) - FAT32 - Total:298 Go (Free:117 Go)

   "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
   Option : [1] ( ven. 24/04/2009|11:56 )

   [ UAC => 0 ]

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\Program Files\AskTBar
   C:\Program Files\AskTBar\bar
   C:\Program Files\AskTBar\PopSwatr
   C:\Program Files\AskTBar\SrchAstt
   C:\Program Files\AskTBar\bar\1.bin
   C:\Program Files\AskTBar\bar\Cache
   C:\Program Files\AskTBar\bar\History
   C:\Program Files\AskTBar\bar\Settings
   C:\Program Files\AskTBar\bar\1.bin\A5POPSWT.DLL
   C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
   C:\Program Files\AskTBar\bar\Cache\0059FEE1
   C:\Program Files\AskTBar\bar\Cache\006E1DF1.bin
   C:\Program Files\AskTBar\bar\Cache\006E1F0A.bin
   C:\Program Files\AskTBar\bar\Cache\006E210D.bin
   C:\Program Files\AskTBar\bar\Cache\files.ini
   C:\Program Files\AskTBar\bar\History\search2
   C:\Program Files\AskTBar\bar\Settings\prevcfg2.htm
   C:\Program Files\AskTBar\PopSwatr\History
   C:\Program Files\AskTBar\PopSwatr\History
otallow
   C:\Program Files\AskTBar\SrchAstt\1.bin
   C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
   C:\Program Files\BrowsingAdvisor
   C:\Program Files\BrowsingAdvisor\pcre3.dll
   C:\Program Files\BrowsingAdvisor\uninstall.exe
   C:\ProgramData\GamesBar
   C:\ProgramData\GamesBar\08-01-22-10-25-40
   C:\ProgramData\GamesBar\08-01-22-10-25-40.xm_
   C:\ProgramData\GamesBar\08-01-25-11-40-33
   C:\ProgramData\GamesBar\08-01-25-11-40-33.xm_
   C:\ProgramData\GamesBar\08-01-26-11-49-40
   C:\ProgramData\GamesBar\08-01-26-11-49-40.xm_
   C:\ProgramData\GamesBar\08-01-26-11-49-42
   C:\ProgramData\GamesBar\08-01-26-11-49-42.xm_
   C:\ProgramData\GamesBar\08-02-01-20-36-22
   C:\ProgramData\GamesBar\08-02-01-20-36-22.xm_
   C:\ProgramData\GamesBar\08-02-02-23-55-56
   C:\ProgramData\GamesBar\08-02-02-23-55-56.xm_
   C:\ProgramData\GamesBar\08-02-04-13-22-20
   C:\ProgramData\GamesBar\08-02-04-13-22-20.xm_
   C:\ProgramData\GamesBar\about.gif
   C:\ProgramData\GamesBar\action.gif
   C:\ProgramData\GamesBar\allTimefavorite.gif
   C:\ProgramData\GamesBar\amazing_adventures_the_lost_tomb16x16.gif
   C:\ProgramData\GamesBar\arcade.gif
   C:\ProgramData\GamesBar\BigKahunaReefHQ_cell16x16.gif
   C:\ProgramData\GamesBar\blockbuster.gif
   C:\ProgramData\GamesBar\bricks_of_egypt_cell16x16.gif
   C:\ProgramData\GamesBar\buy.gif
   C:\ProgramData\GamesBar\cards.gif
   C:\ProgramData\GamesBar\chocolatier216x16.gif
   C:\ProgramData\GamesBar\cradle_of_persia16x16.gif
   C:\ProgramData\GamesBar\deals.gif
   C:\ProgramData\GamesBar\download.gif
   C:\ProgramData\GamesBar\dream_day_first_home16x16.gif
   C:\ProgramData\GamesBar\ER_Rush_cell16x16.gif
   C:\ProgramData\GamesBar\familyFun.gif
   C:\ProgramData\GamesBar\feedback.gif
   C:\ProgramData\GamesBar\help.gif
   C:\ProgramData\GamesBar\highlight.gif
   C:\ProgramData\GamesBar\jewel_quest_216x16.gif
   C:\ProgramData\GamesBar\jewel_quest_2_cell16x16.gif
   C:\ProgramData\GamesBar\Luckyletters_cell16x16.gif
   C:\ProgramData\GamesBar\luxor3_new16x16.gif
   C:\ProgramData\GamesBar\magic_match_cell16x16.gif
   C:\ProgramData\GamesBar\mobile.gif
   C:\ProgramData\GamesBar\multiplayer.gif
   C:\ProgramData\GamesBar\mygames.gif
   C:\ProgramData\GamesBar
ewGames.gif
   C:\ProgramData\GamesBar\oberonconfig.xm_
   C:\ProgramData\GamesBar\obSearchHistory.dat
   C:\ProgramData\GamesBar\partner.gif
   C:\ProgramData\GamesBar\peril_at_end_house16x16.gif
   C:\ProgramData\GamesBar\popup_off.gif
   C:\ProgramData\GamesBar\popup_on.gif
   C:\ProgramData\GamesBar\puzzle.gif
   C:\ProgramData\GamesBar\scepter_of_ra16x16.gif
   C:\ProgramData\GamesBar\search.gif
   C:\ProgramData\GamesBar\search_goog.gif
   C:\ProgramData\GamesBar\sendafriend.gif
   C:\ProgramData\GamesBar\SuperAdIsland_cell16x16.gif
   C:\ProgramData\GamesBar	rial.gif
   C:\ProgramData\GamesBar\uninstall.gif
   C:\ProgramData\GamesBar\update.gif
   C:\ProgramData\GamesBar\webgame.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\about.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\action.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\allTimefavorite.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\amazing_adventures_the_lost_tomb16x16.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\arcade.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\BigKahunaReefHQ_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\blockbuster.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\bricks_of_egypt_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\buy.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\cards.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\chocolatier216x16.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\cradle_of_persia16x16.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\deals.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\download.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\dream_day_first_home16x16.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\ER_Rush_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\familyFun.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\feedback.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\help.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\highlight.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\jewel_quest_216x16.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\jewel_quest_2_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\Luckyletters_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\luxor3_new16x16.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\magic_match_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\mobile.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\multiplayer.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\mygames.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40
ewGames.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\partner.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\peril_at_end_house16x16.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\popup_off.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\popup_on.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\puzzle.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\scepter_of_ra16x16.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\search.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\search_goog.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\sendafriend.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\SuperAdIsland_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40	rial.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\uninstall.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\update.gif
   C:\ProgramData\GamesBar\08-01-22-10-25-40\webgame.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\about.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\action.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\allTimefavorite.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\arcade.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\BigKahunaReefHQ_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\blockbuster.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\bricks_of_egypt_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\buy.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\cards.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\chocolatier216x16.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\cradle_of_persia16x16.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\deals.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\download.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\dream_day_first_home16x16.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\ER_Rush_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\familyFun.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\feedback.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\help.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\highlight.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\jewel_quest_2_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\Luckyletters_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\magic_match_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\mobile.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\multiplayer.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\mygames.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33
ewGames.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\partner.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\peril_at_end_house16x16.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\popup_off.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\popup_on.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\puzzle.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\scepter_of_ra16x16.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\search.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\search_goog.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\sendafriend.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\SuperAdIsland_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33	rial.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\uninstall.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\update.gif
   C:\ProgramData\GamesBar\08-01-25-11-40-33\webgame.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\7_wonders_216x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\about.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\action.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\allTimefavorite.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\arcade.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\BigKahunaReefHQ_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\blockbuster.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\bricks_of_egypt_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\buy.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\cards.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\chocolatier216x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\cradle_of_persia16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\deals.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\download.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\dream_chronicles16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\dream_day_first_home16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\ER_Rush_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\familyFun.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\farm_frenzy16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\feedback.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\help.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\highlight.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\jewel_quest_2_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\Luckyletters_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\magic_match_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\mobile.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\multiplayer.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\mygames.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40
ewGames.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\partner.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\peril_at_end_house16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\popup_off.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\popup_on.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\puzzle.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\scepter_of_ra16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\search.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\search_goog.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\sendafriend.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\SuperAdIsland_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\supple16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40	rial.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\uninstall.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\update.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-40\webgame.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\about.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\action.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\allTimefavorite.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\arcade.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\BigKahunaReefHQ_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\blockbuster.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\bricks_of_egypt_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\buy.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\cards.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\chocolatier216x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\cradle_of_persia16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\deals.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\download.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\dream_day_first_home16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\ER_Rush_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\familyFun.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\feedback.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\help.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\highlight.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\jewel_quest_2_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\Luckyletters_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\magic_match_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\mobile.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\multiplayer.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\mygames.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42
ewGames.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\partner.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\peril_at_end_house16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\popup_off.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\popup_on.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\puzzle.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\scepter_of_ra16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\search.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\search_goog.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\sendafriend.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\SuperAdIsland_cell16x16.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42	rial.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\uninstall.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\update.gif
   C:\ProgramData\GamesBar\08-01-26-11-49-42\webgame.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\about.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\action.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\allTimefavorite.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\arcade.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\blockbuster.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\buy.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\cards.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\chocolatier216x16.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\cradle_of_persia16x16.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\download.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\dream_day_first_home16x16.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\familyFun.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\family_restaurant16x16.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\farm_frenzy16x16.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\feedback.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\garden_defense16x16.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\help.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\highlight.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\mobile.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\multiplayer.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\mygames.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22
ewGames.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\partner.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\peril_at_end_house16x16.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\popup_off.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\popup_on.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\puzzle.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\scepter_of_ra16x16.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\search.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\search_goog.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\sendafriend.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22	rial.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\Turbo_Subs16x16.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\uninstall.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\update.gif
   C:\ProgramData\GamesBar\08-02-01-20-36-22\webgame.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\2Fast_2Furious_cell16x16.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\about.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\action.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\allTimefavorite.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\arcade.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\Astropop_cell16x16.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\blockbuster.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\buy.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\cards.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\chocolatier216x16.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\cradle_of_persia16x16.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\deals.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\download.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\dream_day_first_home16x16.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\familyFun.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\family_restaurant16x16.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\farm_frenzy16x16.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\feedback.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\garden_defense16x16.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\help.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\highlight.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\Insaniquarium_cell16x16.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\jewelquest_cell16x16.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\Luckyletters_cell16x16.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\mobile.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\multiplayer.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\mygames.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56
ewGames.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\partner.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\peril_at_end_house16x16.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\popup_off.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\popup_on.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\puzzle.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\Puzzled_Sheep_cell16x16.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\scepter_of_ra16x16.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\search.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\search_goog.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\sendafriend.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56	rial.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\Turbo_Subs16x16.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\uninstall.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\update.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\webgame.gif
   C:\ProgramData\GamesBar\08-02-02-23-55-56\Zuma_cell16x16.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\2Fast_2Furious_cell16x16.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\about.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\action.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\allTimefavorite.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\arcade.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\Astropop_cell16x16.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\blockbuster.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\buy.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\cards.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\chocolatier216x16.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\cradle_of_persia16x16.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\deals.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\download.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\dream_day_first_home16x16.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\familyFun.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\family_restaurant16x16.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\farm_frenzy16x16.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\feedback.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\garden_defense16x16.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\help.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\highlight.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\Insaniquarium_cell16x16.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\jewelquest_cell16x16.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\Luckyletters_cell16x16.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\mobile.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\multiplayer.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\mygames.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20
ewGames.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\partner.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\peril_at_end_house16x16.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\popup_off.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\popup_on.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\puzzle.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\Puzzled_Sheep_cell16x16.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\scepter_of_ra16x16.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\search.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\search_goog.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\sendafriend.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20	rial.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\Turbo_Subs16x16.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\uninstall.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\update.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\webgame.gif
   C:\ProgramData\GamesBar\08-02-04-13-22-20\Zuma_cell16x16.gif
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\GamesBar
   C:\Program Files\GamesBar
   C:\Program Files\GamesBar\Localization-English.ini
   C:\Program Files\GamesBar\oberontb.dll
   C:\Program Files\GamesBar\OBGet.exe
   C:\Program Files\GamesBar\uninst.exe
   C:\Users\JCNAD\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\PlayMP3z
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\PlayMP3z
   C:\Program Files\PlayMP3z
   C:\Program Files\PlayMP3z\uninstall.exe
   C:\PROGRA~2\MICROS~1\Windows\STARTM~1\Programs\SmartShopper
   C:\Program Files\Smart-Shopper
   C:\Program Files\Smart-Shopper\Bin
   C:\Program Files\Smart-Shopper\Uninst.exe
   C:\Program Files\Smart-Shopper\Bin\2.5.1
   C:\Program Files\Smart-Shopper\Bin\2.5.1\Smrt-Shpr.dll

   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\Windows\system32\blank.htm"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="http://search.babylon.com/home"
   "Search Bar"="https://www.bing.com/?lang=fr-BE&cc=be&toHttps=1&redig=0E9AB1F24EBE41A98AED7E328AACAE1D"
   "Url"="http://www.microsoft.com/athome/community/rss.xml"
   "Url"="http://rss.msn.com/en-us/?feedoutput=rss&ocid=iehrs&unsub=true"
   "Url"="http://www.microsoft.com/atwork/community/rss.xml"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="http://www.trooner.com/"
   "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\Users\JCNAD\AppData\Local\Microsoft\Windows Live Mail\Contacts\didinemar57@hotmail.comeal\Nom manquant - lecrack_9@hotmail_com.Contact
   C:\Users\JCNAD\AppData\Local\Microsoft\Windows Live Mail\Contacts\didinemar57@hotmail.com\shadow\Nom manquant - lecrack_9@hotmail_com.Contact
   C:\Users\JCNAD\AppData\Local\Zylom Games\Mah Jong Quest Deluxe\images\kwazi3\level5-1cracktop.jpge
   C:\Users\JCNAD\AppData\Local\Zylom Games\Mah Jong Quest Deluxe\images\kwazi5\5_lvl_5a_postcrack1.jpge
   C:\Users\JCNAD\AppData\Local\Zylom Games\Mah Jong Quest Deluxe\images\kwazi5\5_lvl_5a_postcrack2.jpge
   C:\Users\JCNAD\AppData\Roaming\Microsoft\Windows\Recent\ Microsoft Windows Key Gen. 2003 or XP Pro or Office-XP keygen.lnk
   C:\Users\JCNAD\AppData\Roaming\Microsoft\Windows\Recent\Crack.lnk
   C:\Users\JCNAD\AppData\Roaming\Microsoft\Windows\Recent\Nero_8_Ultra_Edition_8.3.6.0___Keygen-by-patricio.part2.lnk
   C:\Users\JCNAD\AppData\Roaming\Software Informer\cache\icons\Cracklock_is1.ico
   C:\Users\JCNAD\Desktop\FOURRE-TOUT\Cracklock Manager.lnk
   C:\Users\JCNAD\Desktop\FOURRE-TOUT\Picture_Resize_Genius_2.9.2\Picture Resize Genius_2.9.2\Picture Resize Genius 2.9.2\Crack
   C:\Users\JCNAD\Desktop\FOURRE-TOUT\Picture_Resize_Genius_2.9.2\Picture Resize Genius_2.9.2\Picture Resize Genius 2.9.2\Crack\PRG.exe
   C:\PROGRA~2\Fugazo\World Mosaics\cached\sounds\Tilecrack.wav
   C:\PROGRA~2\Microsoft\Windows\Start Menu\Programs\MicroBest Cracklock
   C:\PROGRA~2\Microsoft\Windows\Start Menu\Programs\MicroBest Cracklock\Cracklock Manager.lnk
   C:\PROGRA~2\Microsoft\Windows\Start Menu\Programs\MicroBest Cracklock\Documentation.lnk
   C:\PROGRA~2\Microsoft\Windows\Start Menu\Programs\MicroBest Cracklock\Uninstall Cracklock.lnk


   [ UAC => 1 ]


   1 - "C:\ToolBar SD\TB_1.txt" - ven. 24/04/2009|11:57 - Option : [1]

   -----------\  Fin du rapport a 11:57:23,15

PASSIO_ZIK · Answer

2° par contre, je n'arrive pas à télécharger le second lien " AD-Remover(deCyrildu17/C_XX", car à chaque fois j'ai un message me mon pc me disant que : INTERNET EXPLORER A CESSE DE FONCTIONNE ! et je dois forcer la fermeture en cliquant sur la croix rouge !

Dois-je réacctiver les comptes utilisateurs ??? pour télécharger ce lien vers un programme ??

Merci beaucoup.

gen-hackman · Answer

Salut regarde deja si ton antivirus n'est pas activé sinon desactive le le temps de la manip 

pour l'uac tu le remettras a la fin de la desinfection pas avant

PASSIO_ZIK · Answer

Re bonjour,

Merci pour la réponse. J'ai donc (re) désactivé le compte utilisateur, j'ai désactivé l'anti-virus, et téléchargé le programme AD-REMOVER ; pas de problèmes jusqu'à là, j'ai effectivement bien le raccourci sur le bureau.
Je clique droit dessus, clique sur"exécuter en tant qu'Administrateur" + dans le menu je choisi l'option A + enter pour "scan" et ........................... rien, il ne se passe rien ! et pourtout, me disant que cela pouvait peut être prendre un peu de temps, j'ai laissé le pc branché 1/2 H ! Mais, rien de rien, aucun rapport généré ! ??? :((

Pourquoi ? quelle mauvaise manoeuvre aurai-je commis ??

En attendant ta réponse, je vais bien vite reconnecté mon anti-virus !

gen-hackman · Answer

ok desole salut tu as bien fait

desisnstalle le , coupe les protections , reinstalle-le , et relance le

PASSIO_ZIK55 · Answer

Bonjour,

J'ai fais comme tu as recommandé : désinstaller ce programme + couper les connexions utilisateurs + couper l'anti-virus.

Ensuite, j'ai tenté de re-télécharger le programme; et c'est là que çà dérape ! j'ai beau cliquer sur le lien que tu m'avais laissé, mais je n'arrive plus à obtenir la page de téléchargement.
En réalité, j'ai une nouvelle fenêtre internet qui s'ouvre, mais elle est totalement blanche, et le pc rame, rame, rame et rien ne s'affiche !

Merci de peut être me renvoyer le lien ??

gen-hackman · Answer

AD-Remover ( de Cyrildu17 / C_XX )

Internet s'ouvre de manière intempestive - ??

11 réponses

Discussions similaires

Newsletters