Bloquer les pub indésirables !

Voila : http://cjoint.com/12jv/BArsv5LtqCr.htm

:)

* Lance ZHPFix via le raccourci sur ton Bureau



* Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)
Copie et colle les lignes suivantes en gras dans Zhpfix :

----------------------------------------------------------


[MD5.8D6C1E70004EFC97710697AA9450130A] - (...) -- C:\Users\Romain\AppData\Local\MAJTuto\MAJTuto.exe [3015168] [PID.] => Infection BT (Spyware.AgenceExclusive)
G1 - GCS: Preference [User Data\Default] http://www.searchqu.com => Infection BT (Adware.Bandoo)
O20 - AppInit_DLLs: . (...) - C:\Program Files\SEARCH~1\SEARCH~1\x64\datamngr.dll (.not file.) => Infection BT (Adware.Bandoo)
O23 - Service: MAJTuto (MAJTuto) . (...) - C:\Users\Romain\AppData\Local\MAJTuto\MAJTuto.exe => Infection BT (Spyware.AgenceExclusive)
[MD5.00000000000000000000000000000000] [APT] [RunAsStdUser Task] (...) -- C:\Program Files (x86)\BrightBreeze\bin\2.0.12.0\BrightBreezeSA.exe (.not file.) => Infection BT (Adware.Hotbar)
O42 - Logiciel: Moovida - (.Secure Digital Services.) [HKLM] -- {6084C211-01A1-464E-97A0-09772E122B50} => Infection BT (Adware.SPointer)
O42 - Logiciel: PCTuto Avast 2.0 - (.PCTuto.) [HKLM] -- PCTuto Avast_is1 => Infection BT (Spyware.AgenceExclusive)
O42 - Logiciel: PCTuto Maj 1.0 - (.PC-Tuto.) [HKLM] -- PCTuto Maj_is1 => Infection BT (Spyware.AgenceExclusive)
O42 - Logiciel: UpdatePCTuto 2.0 - (.PCtuto.) [HKLM] -- UpdatePCTuto_is1 => Infection BT (Spyware.AgenceExclusive)
O42 - Logiciel: Windows iLivid Toolbar - (.Bandoo Media, Inc.) [HKLM] -- Searchqu 406 MediaBar => Infection BT (Adware.Bandoo)
O42 - Logiciel: iLivid - (.Bandoo Media Inc..) [HKLM] -- iLivid => Infection PUP (Adware.Bandoo)
O42 - Logiciel: iLivid - (.Bandoo Media Inc..) [HKLM] -- {8D15E1B2-D2B7-4A17-B44B-D2DDE5981406} => Infection PUP (Adware.Bandoo)
[HKCU\Software\Moovida] => Infection BT (Adware.SPointer)
[HKLM\Software\Moovida] => Infection BT (Adware.SPointer)
[HKLM\Software\ilivid] => Infection PUP (Adware.Bandoo)
O43 - CFD: 23/11/2011 - 14:01:26 - [0] ----D- C:\ProgramData\BabylonUpdater => Infection BT (Toolbar.Babylon)
O43 - CFD: 24/04/2011 - 21:26:14 - [0,559] ----D- C:\Users\Romain\AppData\Roaming\moovida-1 => Infection BT (Adware.SPointer)
O43 - CFD: 03/10/2011 - 22:47:30 - [0,014] ----D- C:\Users\Romain\AppData\Local\Ilivid Player => Infection BT (Adware.Bandoo)
O43 - CFD: 05/01/2012 - 18:36:02 - [2,876] ----D- C:\Users\Romain\AppData\Local\MAJTuto => Infection BT (Spyware.AgenceExclusive)
O43 - CFD: 24/04/2011 - 21:24:26 - [50,419] ----D- C:\Program Files (x86)\Fluendo => Infection BT (Adware.SPointer)
O43 - CFD: 03/10/2011 - 22:47:20 - [39,643] ----D- C:\Program Files (x86)\iLivid => Infection PUP (Adware.Bandoo)
O87 - FAEL: "{750FE499-10C1-4F88-90F7-351ED46F0BE5}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\ToolBar\dtUser.exe (.not file.) => Infection BT (Adware.Bandoo)
O87 - FAEL: "{1EBB8CBC-E90A-4D50-813F-5BF3A77012F0}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\ToolBar\dtUser.exe (.not file.) => Infection BT (Adware.Bandoo)
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6084C211-01A1-464E-97A0-09772E122B50}] =>Adware.SPointer => Infection BT (Adware.SPointer)
[HKLM\Software\WOW6432Node\Classes\Interface\{E2ED56B6-35FC-4484-9530-EC87FB458E78}] =>PUP.Eorezo => Infection PUP (PUP.Eorezo)
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}] =>Hijacker.Agent => Infection BT (Hijack.Browser)
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}] =>Hijacker.Agent => Infection BT (Hijack.Browser)
C:\ProgramData\BabylonUpdater =>Toolbar.Babylon => Infection LOP (Possible)
SR - | Auto 3015168 | (MAJTuto) . (...) - C:\Users\Romain\AppData\Local\MAJTuto\MAJTuto.exe => Infection BT (Spyware.AgenceExclusive)
O87 - FAEL: "TCP Query User{FA936C12-12E6-4A2A-AB2F-015247EC30FF}C:\gpotato.eu\street gears\streetgear.exe" |In - Private - P6 - TRUE | .(...) -- C:\gpotato.eu\street gears\streetgear.exe (.not file.) => Fichier absent
O87 - FAEL: "UDP Query User{4D95FB86-D42B-493F-B5A8-AD8020828CF0}C:\gpotato.eu\street gears\streetgear.exe" |In - Private - P17 - TRUE | .(...) -- C:\gpotato.eu\street gears\streetgear.exe (.not file.) => Fichier absent
O87 - FAEL: "{D5C1A0CF-4289-4E73-9F17-972512E242BD}" |In - Private - P6 - TRUE | .(...) -- C:\Users\Romain\Downloads\SweetImSetup.exe (.not file.) => Fichier absent
O87 - FAEL: "{630427C5-2EF5-4994-BC8B-E165C3465736}" |In - Private - P17 - TRUE | .(...) -- C:\Users\Romain\Downloads\SweetImSetup.exe (.not file.) => Fichier absent
O87 - FAEL: "{66CC0C3E-BCDF-4975-B56B-190446DBBBD4}" |In - Private - P6 - TRUE | .(...) -- C:\Users\Romain\AppData\Local\Temp\SweetIMReinstall\SweetImSetup.exe (.not file.) => Fichier absent
O87 - FAEL: "{81294DA5-9373-4BCB-B90E-5CC49148399C}" |In - Private - P17 - TRUE | .(...) -- C:\Users\Romain\AppData\Local\Temp\SweetIMReinstall\SweetImSetup.exe (.not file.) => Fichier absent
O87 - FAEL: "{254CD07F-E36A-40C8-8A5F-08B73156E874}" |In - None - P17 - TRUE | .(...) -- C:\Users\Romain\Downloads\PcPerformer_SetupT.exe (.not file.) => Fichier absent
O87 - FAEL: "{7F4E9993-A867-4DF8-A1DA-49509CF47DBB}" |Out - None - P17 - TRUE | .(...) -- C:\Users\Romain\Downloads\PcPerformer_SetupT.exe (.not file.) => Fichier absent
Emptyemp





----------------------------------------------------------

- Clique sur le bouton « GO » pour lancer le nettoyage,
- Copie/colle la totalité du rapport dans ta prochaine réponse
Tuto :

http://www.premiumorange.com/zeb-help-process/zhpfix.html

Voici le rapport :

_______________________________________________________________


Rapport de ZHPFix 1.12.3378 par Nicolas Coolman, Update du 10/01/2011
Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-17-01-2012-22-03-11.txt
Run by Romain at 17/01/2012 22:03:11
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html
Web site : http://nicolascoolman.skyrock.com/

========== Logiciel(s) ==========
ABSENT Software Key: {6084C211-01A1-464E-97A0-09772E122B50}
ABSENT Software Key: PCTuto Avast_is1
ABSENT Software Key: PCTuto Maj_is1
ABSENT Software Key: UpdatePCTuto_is1
ABSENT Software Key: Searchqu 406 MediaBar
ABSENT Software Key: iLivid
ABSENT Software Key: {8D15E1B2-D2B7-4A17-B44B-D2DDE5981406}

========== Processus mémoire ==========
SUPPRIME Memory Process: C:\Users\Romain\AppData\Local\MAJTuto\MAJTuto.exe

========== Clé(s) du Registre ==========
SUPPRIME Key: Service: MAJTuto
SUPPRIME Key: HKCU\Software\Moovida
ABSENT Key: HKLM\Software\Moovida
ABSENT Key: HKLM\Software\ilivid
SUPPRIME Key: HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6084C211-01A1-464E-97A0-09772E122B50}
SUPPRIME Key: HKLM\Software\WOW6432Node\Classes\Interface\{E2ED56B6-35FC-4484-9530-EC87FB458E78}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
ABSENT Key: Service: MAJTuto

========== Valeur(s) du Registre ==========
SUPPRIME {750FE499-10C1-4F88-90F7-351ED46F0BE5}
SUPPRIME {1EBB8CBC-E90A-4D50-813F-5BF3A77012F0}
SUPPRIME TCP Query User{FA936C12-12E6-4A2A-AB2F-015247EC30FF}C:/gpotato.eu/street gears/streetgear.exe
SUPPRIME UDP Query User{4D95FB86-D42B-493F-B5A8-AD8020828CF0}C:/gpotato.eu/street gears/streetgear.exe
SUPPRIME {D5C1A0CF-4289-4E73-9F17-972512E242BD}
SUPPRIME {630427C5-2EF5-4994-BC8B-E165C3465736}
SUPPRIME {66CC0C3E-BCDF-4975-B56B-190446DBBBD4}
SUPPRIME {81294DA5-9373-4BCB-B90E-5CC49148399C}
SUPPRIME {254CD07F-E36A-40C8-8A5F-08B73156E874}
SUPPRIME {7F4E9993-A867-4DF8-A1DA-49509CF47DBB}

========== Elément(s) de donnée du Registre ==========
SUPPRIME AppInit: \Program Files\SEARCH~1\SEARCH~1\x64\datamngr.dll

========== Préférences navigateur ==========
PRESENT Chrome File: C:\Users\Romain\AppData\Local\Google\Chrome\User Data\Default\Preferences
SUPPRIME Chrome Site: http://www.searchqu.com

========== Dossier(s) ==========
SUPPRIME Folder: C:\ProgramData\BabylonUpdater
SUPPRIME Folder: C:\Users\Romain\AppData\Roaming\moovida-1
SUPPRIME Folder: C:\Users\Romain\AppData\Local\Ilivid Player
SUPPRIME Folder: C:\Users\Romain\AppData\Local\MAJTuto
SUPPRIME Folder: C:\Program Files (x86)\Fluendo
SUPPRIME Folder: C:\Program Files (x86)\iLivid

========== Fichier(s) ==========
SUPPRIME File*: c:\users\romain\appdata\local\majtuto\majtuto.exe
ABSENT File: \program files\search~1\search~1\x64\datamngr.dll
ABSENT File: c:\users\romain\appdata\local\majtuto\majtuto.exe
ABSENT Folder/File: c:\programdata\babylonupdater

========== Tache planifiée ==========
SUPPRIME Task: RunAsStdUser Task

========== Autre ==========
NON TRAITE Emptyemp


========== Récapitulatif ==========
1 : Processus mémoire
9 : Clé(s) du Registre
10 : Valeur(s) du Registre
1 : Elément(s) de donnée du Registre
6 : Dossier(s)
4 : Fichier(s)
7 : Logiciel(s)
2 : Préférences navigateur
1 : Tache planifiée
1 : Autre


End of clean in 00mn 51s

========== Chemin de fichier rapport ==========
C:\ZHP\ZHPFix[R1].txt - 17/01/2012 22:03:11 [3525]


_______________________________________________________________


Merci pour cette aide !!