suprimé page de pubRésolu/Fermé

Question

bonjour a tous 

j'ai telécharger Malwarebyte's Anti-Malware

aprés l'analise compléte , que se que je dois faire ?

je suis pas forte en informatique mais je me debroulle !!

une reponse simple si vous voulez . je vous remerci d'avance ...cordialement

crapoulou · Answer

Salut,
Clique sur supprimer la sélection (c'est-à-dire tout), redémarre s'il te le demande et poste le rapport généré en fin d'analyse.

crapoulou · Answer

Vide la quarantaine de MBAM. Une vérification s'impose : Suppression avec AD-R : Télécharge AD-R (de C_XX ) sur ton bureau : = = = =>>> En cliquant ici <<<= = = = /!\ Déconnecte-toi et ferme toutes applications en cours, désactive ton antivirus le temps de la manipulation/!\ * Exécute AD-R. * Au menu principal clique sur le bouton "Nettoyer". * Poste le rapport qui apparaît à la fin. (Le rapport est sauvegardé aussi sous Ad-Report-CLEAN[1].txt)

raibak517 · Answer

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Version de la base de données: 4105
Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18904
16/05/2010 13:26:27
mbam-log-2010-05-16 (13-26-27).txt
Type d'examen: Examen complet (C:\|D:\|)
Elément(s) analysé(s): 257233
Temps écoulé: 2 heure(s), 4 minute(s), 25 seconde(s)
Processus mémoire infecté(s): 3
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 1
Valeur(s) du Registre infectée(s): 4
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 9
Processus mémoire infecté(s):
C:\Users\menser\AppData\Roaming\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe (Rogue.Eorezo) -> Unloaded process successfully.
C:\Program Files\SpiderMessenger\SpiderMessenger.exe (Spyware.AgenceExclusive) -> Unloaded process successfully.
C:\Users\menser\AppData\Roaming\Soft2PC\Software\SoftwareHP.exe (Rogue.Eorezo) -> Unloaded process successfully.
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo (Rogue.Eorezo) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\win-xp-7 (Trojan.FakeAlert.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\softwarehelper (Rogue.Eorezo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\spidermessenger (Spyware.AgenceExclusive) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\helper (Rogue.Eorezo) -> Quarantined and deleted successfully.
Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)
Dossier(s) infecté(s):
(Aucun élément nuisible détecté)
Fichier(s) infecté(s):
C:\Users\menser\Local Settings\Application Data\ujembxd_navps.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Users\menser\Local Settings\Application Data\ujembxd_nav.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Users\menser\Local Settings\Application Data\ujembxd.dat (Adware.Navipromo.H) -> Quarantined and deleted successfully.
C:\Program Files\Common Files\windows\win-xp-7.exe (Trojan.FakeAlert.H) -> Delete on reboot.
C:\Users\menser\AppData\Roaming\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe (Rogue.Eorezo) -> Quarantined and deleted successfully.
C:\Program Files\SpiderMessenger\SpiderMessenger.exe (Spyware.AgenceExclusive) -> Quarantined and deleted successfully.
C:\Users\menser\AppData\Roaming\Soft2PC\Software\SoftwareHP.exe (Rogue.Eorezo) -> Quarantined and deleted successfully.
C:\Users\menser\AppData\Roaming\EoRezo\SoftwareUpdate\SoftwareUpdate.exe (Rogue.Eorezo) -> Quarantined and deleted successfully.
C:\Users\menser\AppData\Roaming\Soft2PC\Software\software.exe (Rogue.Eorezo) -> Quarantined and deleted successfully.

crapoulou · Answer

Passe à Ad-R.

raibak517 · Answer

voila le raport de ad-R , QUE JE DOIT FAIRE Aprés ? esque je suis plus infécté ?


======= RAPPORT D'AD-REMOVER 2.0.0.0,D | UNIQUEMENT XP/VISTA/7 =======
.
Mis à jour par C_XX le 07/05/10 à 16:50
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 14:21:35 le 16/05/2010 | Mode normal | Option: CLEAN
Exécuté de: C:\Ad-Remover\ADR.exe
SE: Microsoft® Windows Vista(TM) HomeBasic Service Pack 2 - X86
Nom du PC: PC-DE-MENSER (Hewlett-Packard Compaq Presario CQ71 Notebook PC)
Utilisateur actuel: menser
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
Service: *Application Updater*
.
C:\Program Files\Application Updater
C:\Program Files\Dealio Toolbar
C:\Program Files\Fast Browser Search
C:\Program Files\SGPSA
C:\Program Files\Soft2PC
C:\Users\menser\AppData\Local\beythk.bat
C:\Users\menser\AppData\Local\Soft2PC
C:\Users\menser\AppData\Local\Temp\AGI
C:\Users\menser\AppData\Local\Temp\AskSearch
C:\Users\menser\AppData\LocalLow\AGI
C:\Users\menser\AppData\LocalLow\Dealio
C:\Users\menser\AppData\LocalLow\Kiwee Toolbar
C:\Users\menser\AppData\Roaming\EoRezo
C:\Users\menser\AppData\Roaming\Macromedia\Flash Player\#Security\FlashPlayerTrust\UnifiedToolbar.cfg
C:\Users\menser\AppData\Roaming\Soft2PC
C:\Windows\system32\Macromed\Flash\FlashPlayerTrust\UnifiedToolbar.cfg

(!) -- Fichiers temporaires supprimés.
.
HKCU\Software\AGI
HKCU\Software\AppDataLow\Software\Dealio
HKCU\Software\EoRezo
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1BB22D38-A411-4B13-A746-C2A4F4EC7344}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3475D2C4-BBD1-4255-A70D-4125A4D30956}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4260e0cc-0f75-462e-88a3-1e05c248bf4c}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F0626A63-410B-45E2-99A1-3F2475B2D695}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1BB22D38-A411-4B13-A746-C2A4F4EC7344}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3475D2C4-BBD1-4255-A70D-4125A4D30956}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4260e0cc-0f75-462e-88a3-1e05c248bf4c}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F0626A63-410B-45E2-99A1-3F2475B2D695}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
HKCU\Software\soft2PC
HKLM\Software\AGI
HKLM\Software\Application Updater
HKLM\Software\Classes\AG.MediaPlayerCOM
HKLM\Software\Classes\AppID\{AB67D16D-3824-4683-B81A-D66DBA61B1AF}
HKLM\Software\Classes\AppID\Soft2PCBHO.DLL
HKLM\Software\Classes\CLSID\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
HKLM\Software\Classes\CLSID\{1BB22D38-A411-4B13-A746-C2A4F4EC7344}
HKLM\Software\Classes\CLSID\{3475D2C4-BBD1-4255-A70D-4125A4D30956}
HKLM\Software\Classes\CLSID\{4260e0cc-0f75-462e-88a3-1e05c248bf4c}
HKLM\Software\Classes\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}
HKLM\Software\Classes\CLSID\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
HKLM\Software\Classes\CLSID\{E03BAFDC-EB9D-4C35-A7A2-AB6C62FF0A68}
HKLM\Software\Classes\CLSID\{E6375F37-E4D1-4F51-B651-4658C27AC5BF}
HKLM\Software\Classes\CLSID\{F0626A63-410B-45E2-99A1-3F2475B2D695}
HKLM\Software\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
HKLM\Software\Classes\ComObject.DeskbarEnabler
HKLM\Software\Classes\ComObject.DeskbarEnabler.1
HKLM\Software\Classes\Installer\Products\96DC878CBD58B624183A7E1157AABE19
HKLM\Software\Classes\Interface\{3E16A203-C0AA-4D44-ACC5-38A70A8C76DA}
HKLM\Software\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
HKLM\Software\Classes\Interface\{CC883F50-95BB-4A25-9DBF-B801506F1BC4}
HKLM\Software\Classes\SoftwareBHO.SOFT2PCBHO
HKLM\Software\Classes\SoftwareBHO.SOFT2PCBHO.1
HKLM\Software\Classes\TypeLib\{B52F3553-49FA-4599-81A4-F98951E0B53B}
HKLM\Software\Classes\TypeLib\{C7403C30-3644-43D8-A82F-4BD84B9682D9}
HKLM\Software\Dealio
HKLM\Software\Live-Player
HKLM\Software\Microsoft\Code Store Database\Distribution Units\CabBuilder
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{12785BF8-802A-4c86-B83F-61E8ACFAECFE}
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BA16A86D-1551-4ae3-BEC4-7F90A07251DA}
HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F6A1B4DD-C991-411f-942F-F3006663B28C}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3475D2C4-BBD1-4255-A70D-4125A4D30956}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F0626A63-410B-45E2-99A1-3F2475B2D695}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\96DC878CBD58B624183A7E1157AABE19
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C878CD69-85DB-426B-81A3-E71175AAEB91}
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\beythk
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Soft2PC_is1
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Software_is1
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
HKLM\Software\soft2PC
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{1BB22D38-A411-4B13-A746-C2A4F4EC7344}
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440}
HKLM\Software\Microsoft\Internet Explorer\Toolbar|{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C}
HKLM\Software\Microsoft\Internet Explorer\Toolbar|{1BB22D38-A411-4B13-A746-C2A4F4EC7344}
HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Eoengine
HKLM\Software\Microsoft\Windows\CurrentVersion\Run|FBSSA
HKLM\Software\Microsoft\Windows\CurrentVersion\Run|soft2PC
HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Application Updater\ApplicationUpdater.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\chrome.manifest
HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\chrome\locale\EN-US\widgitoolbarplugin.properties
HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\components\dealioToolbarFF.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDLLs|C:\Program Files\Dealio Toolbar\FF\install.rdf
.
(Orpheline) HKLM,Run - UpdatePSTShortCut - C:\Program Files\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter" (Fichier manquant)
(Orpheline) HKLM,Run - UpdateP2GoShortCut - C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0" (Fichier manquant)
(Orpheline) HKLM,Run - UCam_Menu - C:\Program Files\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0" (Fichier manquant)
(Orpheline) BHO: (MHTBPos00 Class) -{0C37B053-FD68-456a-82E1-D788EE342E6F} - C:\Program Files\Family Toolbar	bcore3.dll (Fichier manquant)
(Orpheline) BHO: (Spybot-S&D IE Protection) -{53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Fichier manquant)
(Orpheline) BHO: (Google Toolbar Helper) -{AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Fichier manquant)
(Orpheline) BHO: (Google Toolbar Notifier BHO) -{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll (Fichier manquant)
(Orpheline) BHO: (CMySite Class) -{D62EC836-BF1E-4CAC-81BE-FB9179835D8E} - C:\Program Files\Family Toolbar\mhxpcomi.dll (Fichier manquant)
(Orpheline) HKLM,Uninstall - AVS Update Manager_is1 - C:\Program Files\AVS4YOU\AVSUpdateManager\unins000.exe (Fichier manquant)
(Orpheline) HKLM,Uninstall - CDex - C:\Program Files\CDex\uninstall.exe (Fichier manquant)
(Orpheline) HKLM,Uninstall - Family Toolbar - C:\Program Files\Family Toolbar\ToolUninstall.exe (Fichier manquant)
(Orpheline) HKLM,Uninstall - PhotoFiltre - C:\Program Files\PhotoFiltre\Uninst.exe (Fichier manquant)
(Orpheline) HKLM,Uninstall - ProphecyMaster_is1 - C:\Program Files\Luxand\ProphecyMaster\unins000.exe (Fichier manquant)
(Orpheline) HKLM,Uninstall - Zattoo - C:\Program Files\Zattoo\uninst.exe (Fichier manquant)
(Orpheline) HKLM,Uninstall - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_E85CDE7661A53A6A.exe (Fichier manquant)
(Orpheline) HKLM,Uninstall - {3C9D008D-3716-4C3F-90CD-38ED57568FAB}_is1 - C:\Program Files\Apowersoft\Video Download Capture\unins000.exe (Fichier manquant)
.
============== SCAN ADDITIONNEL ==============
.
* Mozilla FireFox Version 3.5.9 (fr) *
.
C:\Users\menser\..\jwoezlo6.default\prefs.js - browser.startup.homepage_override.mstone: rv:1.9.1.9
C:\Users\menser\..\jwoezlo6.default\prefs.js - keyword.URL: hxxp://search.myheritage.com/?orig=ds&q=
.
EFFACÉ: C:\Users\menser\..\jwoezlo6.default\prefs.js - user_pref("family_toolbar.Var1", "build%3D1.320%26todaySortedDate%3D201005130%26lastRefreshTime%3D18%3A22");
EFFACÉ: C:\Users\menser\..\jwoezlo6.default\prefs.js - user_pref("family_toolbar.Var10", "0");
EFFACÉ: C:\Users\menser\..\jwoezlo6.default\prefs.js - user_pref("family_toolbar.Var2", "EN");
EFFACÉ: C:\Users\menser\..\jwoezlo6.default\prefs.js - user_pref("family_toolbar.Var3", "0");
EFFACÉ: C:\Users\menser\..\jwoezlo6.default\prefs.js - user_pref("family_toolbar.Var4", "Yes");
EFFACÉ: C:\Users\menser\..\jwoezlo6.default\prefs.js - user_pref("family_toolbar.Var5", "1");
EFFACÉ: C:\Users\menser\..\jwoezlo6.default\prefs.js - user_pref("family_toolbar.Var6", "Yes");
EFFACÉ: C:\Users\menser\..\jwoezlo6.default\prefs.js - user_pref("family_toolbar.Var7", "0");
EFFACÉ: C:\Users\menser\..\jwoezlo6.default\prefs.js - user_pref("family_toolbar.Var8", "0");
EFFACÉ: C:\Users\menser\..\jwoezlo6.default\prefs.js - user_pref("family_toolbar.Var9", "0");
EFFACÉ: C:\Users\menser\..\jwoezlo6.default\prefs.js - user_pref("family_toolbar.cache.tbs_include_xml_008658", "50/14/13/4/110");
EFFACÉ: C:\Users\menser\..\jwoezlo6.default\prefs.js - user_pref("family_toolbar.firstlaunch", "0");
EFFACÉ: C:\Users\menser\..\jwoezlo6.default\prefs.js - user_pref("family_toolbar.guid", "%7BBF01905D-99CE-29BD-B8BD-BEF0A9A78976%7D");
EFFACÉ: C:\Users\menser\..\jwoezlo6.default\prefs.js - user_pref("family_toolbar.popupblockedcnt", "13");
.
* Internet Explorer Version 8.0.6001.18904 *
.
[HKCU\Software\Microsoft\Internet Explorer\Main]
.
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Use Custom Search URL: 1
Use Search Asst: no
.
[HKLM\Software\Microsoft\Internet Explorer\Main]
.
AutoHide: yes
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\Windows\system32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/
.
[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS]
.
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm
.
========================================
.
C:\Ad-Remover\Quarantine: 171 Fichier(s)
C:\Ad-Remover\Backup: 15 Fichier(s)
.
C:\Ad-Report-CLEAN[1].txt - 12475 Octet(s)
.
Fin à: 14:25:59, 16/05/2010
.
============== E.O.F - CLEAN[1] ==============

crapoulou · Answer

ça c'est du nettoyage.
Au niveau des pubs, cela devrait aller bien mieux.
Oublie ces sites / Toolbars ou Logiciels téléchargés :

Fast Browser Search
SGPSA (Search Guard Plus)
Soft2PC
AskSearch
AskToolbar
Ask
AGI
Dealio
Dealio Toolbar
Kiwee Toolbar
EoRezo

Comment va le PC ?

crapoulou · Answer

A ton service.
Une dernière chose.
Relance AD-R et clique sur Désinstallation => tu n'en a plus besoin.

Suprimé page de pub

7 réponses

Discussions similaires

Newsletters