je déteste internet explorerFermé

Question

j'ai un probléme c que lorsque je clique sur soit sur google chrome ou mozilla il s'ouvre une page internet explorer 
c'est a dire quand je clique sur le programme soit mozilla firefox soit google chrome. au lieu d'ouvrir une page google chrome ou bien mozilla firefox . une page internet explorer est ouverte 
en plus j'ai essayer avec Opera; lorsque je lance l'installation de opera , au début c'est bon mais a la fin elle l'installation s'interrompu et s'ouvre automatquement cette page internet explorer 
https://hp.mywebsearch.com/mywebsearch/index.html 
et quand j'essayer de faire une restauration de systéme elle ne se lance pas en plus quand je double clique sur disque local c: ne s'ouvre pas sauf quand je fais bouton droite puis ouvrir 
et quand je clique sur une page internet enregistré sur mon pc sous google chrome ce message apparait:impossible de trouver file:///C:/Documents%20and%20Settings/Administrateur.STANDARD/Local%20Settings/Application%20Data/Google/Chrome/Application/chrome.exe%22%20%20--%20%22http://g.msn.com/5meen_xa/11.Vérifier que le chemin d'accès ou l'adresse Internet sont corrects. aidez moi que dois je faire???? 
merci d'avance

Configuration: Windows XP / Internet Explorer 6.0

aloes · Answer

Bonjour, 

Ca ne t'interpelle pas ? 
Regardes ta version Internet Explorer ! 
Nous sommes à la version 8, et bientôt à la 9. 

Mets ton PC à jour en te rendant sur Windows Update via Internet Explorer et mets tout à jour.

Fais de même avec tous les autres programmes sur ton PC en te servant de cet outil :https://www.commentcamarche.net/telecharger/utilitaires/9771-filehippo-app-manager/ Tu as un tutoriel sur la page. 

Ensuite ça devrait jouer. 

aloes

grenault · Answer

Laisse tomber IE, tu ne peux qu'y gagner !

Guy

jeanbi · Answer

bonjour, 
il y a quand meme des alternatives à IE
firefox
opera
google chrome 
par exemple 
a+

aloes · Answer

Bonsoir grenault.

Tu veux qu'elle laisse tomer comment si son PC a des failles et qu'il ne fonctionne plus correctement ?

aloes

grenault · Answer

Chrome serait même le plus rapide !

Il y a aussi Safari et SeaMonkey alors pourquoi garder une merde qui ne respecte pas les standards du W3C ?

Guy

aloes · Answer

Si tu lis bien le message, elle a aussi des problèmes en ouvrant d'autres navigateurs. Normal quand on ne met pas son PC à jour, ça fait partie de l'entretien de base.

aloes

grenault · Answer

Regardes si tu n'as pas un virus...

Autrement va voir sur mon site, j'ai dû écrire un truc sur comment regénérer un pc... Je ne peux pas te donner l'adresse ici pour ne pas être taxé de vouloir faire de la pub.

Guy

aloes · Answer

Tu n'as qu'apporter ta solution ici, tu te places un peu précipitamment avec ton site avant même qu'elle a eu le temps de suivre la première proposition sur CCM !
Si aucune solution n'était proposée pendant 2 jours, je veux bien, mais de là à  brouiller les discussions sur CCM d'entré, il y a deux.

aloes

rositaa · Answer

merci aloes et grenault pour vos réponses mais franchement j'ai pas compris qu'est ce que je dois faire???,

aloes · Answer

Mettre ton PC à jour !

aloes

rositaa · Answer

je ne sais pas comment le mettre a jour mon pc"-"

aloes · Answer

Tu te rends sur le site Windows Update via Internet Explorer et tu télécharges toutes les mises à jour prioritaires. Il va te les indiquer et tu les installes.

Ensuite tu fait de même pour tous les autres programme sur ton PC en te servant de l'outil que je t'ai indiqué plus haut.

aloes

grenault · Answer

Rassures-toi je ne brouillerai aucune discussion. J'ai essayé d'aider c'est tout.

Guy

rositaa · Answer

c 'est bon aloes les mis a jours sont en cours:))))

grenault · Answer

Après, je te conseille de passer un antivirus à jour...

grenault · Answer

Je reçois des merdes de spam en anglais, pas vous ?

aloes · Answer

Ca va être assez long comme tu as de grosses mises à jour à faire.
Attention pour Flash, tu dois le mettre à jour 2 fois :
1 x via Internet Explorer et 1 x via Firefox ou Chrome, c'est égal.
Une fois que tu aura tout à jour, ça va être plus facile de suivre pour faire les mises à jour à fur et à mesure.

Quand tu aura terminé, on va un peu nettoyer ton PC, je pense qu'il en a besoin.

aloes

grenault · Answer

Je dirais, après les mises à jour :

- antivirus
- CCleaner

On y verra effectivement un peu plus clair...

Bon courage, la nuit est à toi !-)

Guy

rositaa · Answer

j'ai terminé d'installer tous les mis a jours apres j'ai installé Update Checker
et quand ila as bien istallé quand je clique sur ce programme il ne se lance pas!!!!!

aloes · Answer

Tu as redémarré le PC ?

rositaa · Answer

oui

aloes · Answer

Téléchagres FindyKill sur ton bureau : 
http://www.teamxscript.org/findykillTelechargement.html 

- Double-clique (ou clic droit Exécuter en tant qu'administrateur pour Vista/7) 
sur le programme FindyKill qui se trouve sur ton Bureau. 
- Choisis l'option 1 (Recherche). 
- Laisse travailler l'outil. 
- A la fin un rapport apparaît FyK.txt,  poste-le ici. 
- le rapport FyK.txt se trouve a la racine du disque. (C:\FyK.txt) 

aloes

rositaa · Answer

############################## | FindyKill V5.052 |

# User : Administrateur (Administrateurs) # STANDARD
# Update on 23/10/2010 by El Desaparecido
# Start at: 23:11:29 | 27-11-2010
# Website : http://www.teamxscript.org/
# Contact : eldesaparecido@teamxscript.org

# Processeur Intel Pentium III Xeon
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Enabled
# AV : AntiVir Desktop 9.0.1.32 [ Enabled | (!) Outdated ]
# AV : Kaspersky Internet Security 8.0.0.523 [ (!) Disabled | (!) Outdated ]
# FW : Kaspersky Internet Security[ (!) Disabled ]8.0.0.523

# C:\ # Disque fixe local # 97.65 Go (59.2 Go free) # NTFS
# D:\ # Disque fixe local # 200.43 Go (178.35 Go free) # NTFS
# E:\ # Disque CD-ROM
# F:\ # Disque CD-ROM

################## | Eléments infectieux |

C:\autorun.inf  
D:\autorun.inf  

################## | Registre |


################## | Etat |

# Affichage des fichiers cachés : OK
 
# Mode sans echec : OK

# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 ) 
# EapHost -> Start = 3 ( Good = 2 | Bad = 4 ) 
# Ip6Fw -> Start = 3 ( Good = 2 | Bad = 4 ) 
# (!) SharedAccess -> Start = 4 ( Good = 2 | Bad = 4 )  
# (!) wuauserv -> Start = 4 ( Good = 2 | Bad = 4 )  
# wscsvc -> Start = 2 ( Good = 2 | Bad = 4 ) 

################## | ! Fin du rapport # FindyKill V5.052 ! |

aloes · Answer

Passes à l'option 2 pour désinfecter :
tapes sur ton clavier 2 et Enter.
Attendre qu'il termine et m'envoyer le rapport.

aloes

rositaa · Answer

############################## | FindyKill V5.052 |

# User : Administrateur (Administrateurs) # STANDARD
# Update on 23/10/2010 by El Desaparecido
# Start at: 23:52:51 | 27-11-2010
# Website : http://www.teamxscript.org/
# Contact : eldesaparecido@teamxscript.org

# Processeur Intel Pentium III Xeon
# Microsoft Windows XP Professionnel (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 8.0.6001.18702
# Windows Firewall Status : Enabled
# AV : AntiVir Desktop 9.0.1.32 [ Enabled | (!) Outdated ]
# AV : Kaspersky Internet Security 8.0.0.523 [ (!) Disabled | (!) Outdated ]
# FW : Kaspersky Internet Security[ (!) Disabled ]8.0.0.523

# C:\ # Disque fixe local # 97.65 Go (59.19 Go free) # NTFS
# D:\ # Disque fixe local # 200.43 Go (178.35 Go free) # NTFS
# E:\ # Disque CD-ROM
# F:\ # Disque CD-ROM

################## | Eléments infectieux |

aloes · Answer

Tu as 2 antivirus sur ton PC, Antivir et Kaspersky, il faut en éliminer 1 en désinstallant correctement tous les fichiers :

Désinstaller Kaspersky, voir ici : https://www.micro-astuce.com/securite/kasper.php

Désinstaller AntiVir, voir ici : http://row.avira.com/fr/support/support_telechargements.html

aloes

kirosene · Answer

moi aussi je deteste IE

rositaa · Answer

normalement j'ai désinstallé kaspersky j 'ai bien suivi les étapes de leur supression

aloes · Answer

Fais un scan avec Malwarebyte's

https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/
Fermes tous les navigateurs et ouvres Malwarebyte's en double-cliquant sur l'icône :

1)	Clique sur Mise à jour / Rechercher mises à jour (attendre qu'il termine la mise à jour) 
2)	clique sur Recherche / Exécuter un examen complet (l'analyse démarre)
3)	A la fin de l'analyse, un message s'affiche : l'examen s'est terminé normalement..... Clique sur Afficher les résultats pour afficher les éventuels objets trouvés
4)	Si des objets ont été trouvés, sélectionne tout (possible que ça soit déjà coché) et clique sur Supprimer la sélection. Ceci détruira les nuisibles trouvés et Malwarebyte's va mettre une copie dans la quarantaine.
5)	Copie-colle le rapport de l'analyse ici (que tu trouves dans le bloc-notes que Malwarebyte's a ouvert).

Si Malwarebyte's te demande de redémarrer, fais-le à la fin. S'il n'a rien trouvé, il te le dira.

aépes

rositaa · Answer

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 5204

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

28-11-2010 16:10:36
mbam-log-2010-11-28 (16-10-36).txt

Type d'examen: Examen complet (C:\|D:\|)
Elément(s) analysé(s): 328035
Temps écoulé: 1 heure(s), 55 minute(s), 58 seconde(s)

Processus mémoire infecté(s): 1
Module(s) mémoire infecté(s): 4
Clé(s) du Registre infectée(s): 171
Valeur(s) du Registre infectée(s): 20
Elément(s) de données du Registre infecté(s): 3
Dossier(s) infecté(s): 37
Fichier(s) infecté(s): 242

Processus mémoire infecté(s):
C:\WINDOWS1\Temp\_ex-08.exe (Trojan.Dropper) -> Unloaded process successfully.

Module(s) mémoire infecté(s):
C:\Program Files\MyWebSearch\bar\6.bin\MWSOEPLG.DLL (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar\6.bin\MWSBAR.DLL (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar\6.bin\F3HTMLMU.DLL (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar\6.bin\MWSSRCAS.DLL (Adware.MyWebSearch) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\TypeLib\{f42228fb-e84e-479e-b922-fbbd096e792c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{6e74766c-4d93-4cc0-96d1-47b8e07ff9ca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{de38c398-b328-4f4c-a3ad-1b5e4ed93477} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{07b18ea0-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{07b18eaa-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{07b18eac-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{8e9cf769-3d3b-40eb-9e2d-76e7a205e4d2} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{f87d7fb5-9dc5-4c8c-b998-d8dfe02e2978} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{53ced2d0-5e9a-4761-9005-648404e6f7e5} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.datacontrol (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{c8cecde3-1ae1-4c4a-ad82-6d5b00212144} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{17de5e5e-bfe3-4e83-8e1f-8755795359ec} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{1f52a5fa-a705-4415-b975-88503b291728} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{a626cdbd-3d13-4f78-b819-440a28d7e8fc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.datacontrol.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.historykillerscheduler (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{8ca01f0e-987c-49c3-b852-2f1ac4a7094c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{1093995a-ba37-41d2-836e-091067c4ad17} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{120927bf-1700-43bc-810f-fab92549b390} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{247a115f-06c2-4fb3-967d-2d62d3cf4f0a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3e53e2cb-86db-4a4a-8bd9-ffeb7a64df82} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{90449521-d834-4703-bb4e-d3aa44042ff8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{991aac62-b100-47ce-8b75-253965244f69} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{bbabdc90-f3d5-4801-863a-ee6ae529862d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{d6ff3684-ad3b-48eb-bbb4-b9e6c5a355c1} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{eb9e5c1c-b1f9-4c2b-be8a-27d6446fdaf8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{0f8ecf4f-3646-4c3a-8881-8e138ffcaf70} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{b813095c-81c0-4e40-aa14-67520372b987} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{c9d7be3e-141a-4c85-8cd6-32461f3df2c7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{cff4ce82-3aa2-451f-9b77-7165605fb835} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.historykillerscheduler.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.historyswattercontrolbar (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.historyswattercontrolbar.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.htmlmenu (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{e47caee0-deea-464a-9326-3f2801535a4d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3e1656ed-f60e-4597-b6aa-b6a58e171495} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.htmlmenu.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.htmlmenu.2 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.iecookiesmanager (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.iecookiesmanager.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.killerobjmanager (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.killerobjmanager.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.popswatterbarbutton (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{8e6f1830-9607-4440-8530-13be7c4b1d14} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{63d0ed2b-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{63d0ed2d-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{8e6f1832-9607-4440-8530-13be7c4b1d14} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a9571378-68a1-443d-b082-284f960c6d17} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.popswatterbarbutton.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.popswattersettingscontrol (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\funwebproducts.popswattersettingscontrol.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.chatsessionplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{e79dfbc0-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{72ee7f04-15bd-4845-a005-d6711144d86a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e79dfbc9-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e79dfbcb-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.chatsessionplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.htmlpanel (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{3e720450-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3e720451-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3e720453-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{3e720452-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3e720452-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.htmlpanel.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.outlookaddin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{adb01e81-3c79-4272-a0f1-7b2be7a782dc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.outlookaddin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.pseudotransparentplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{7473d290-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{7473d291-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{7473d293-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{7473d295-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{7473d297-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7473d292-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7473d296-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.pseudotransparentplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchtoolbar.settingsplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchtoolbar.settingsplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchtoolbar.toolbarplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearchtoolbar.toolbarplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\screensavercontrol.screensaverinstaller (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{29d67d3c-509a-4544-903f-c8c1b8236554} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{2e3537fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{938aa51a-996c-4884-98ce-80dd16a5c9da} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\screensavercontrol.screensaverinstaller.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{cf54be1c-9359-4395-8533-1657cf209cfe} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25e} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25f} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{00a6faf6-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00a6faf6-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{1e0de227-5ce4-4ea3-ab0c-8b03e1aa76bc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{84da4fdf-a1cf-4195-8688-3e961f505983} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{d9fffb27-d62a-4d64-8cec-1ff006528805} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{0d26bc71-a633-4e71-ad31-eadc3a1b6a3a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{d518921a-4a03-425e-9873-b9a71756821e} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59c7fc09-1c83-4648-b3e6-003d2bbc7481} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68af847f-6e91-45dd-9b68-d6a12c30e5d7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170b96c-28d4-4626-8358-27e6caeef907} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d1a71fa0-ff48-48dd-9b6d-7a13a3e42127} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ddb1968e-ead6-40fd-8dae-ff14757f60c7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f138d901-86f0-4383-99b6-9cdd406036da} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{819ffe20-35c7-4925-8cda-4e0e2db94302} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{819ffe21-35c7-4925-8cda-4e0e2db94302} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{819ffe22-35c7-4925-8cda-4e0e2db94302} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{799391d3-eb86-4bac-9bd3-cbfea58a0e15} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{d858dafc-9573-4811-b323-7011a3aa7e61} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.multiplebutton (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.multiplebutton.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.urlalertbutton (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mywebsearch.urlalertbutton.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\FocusInteractive (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AutorunRemover.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\autoruns.exe (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Avira.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\chrome.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dwwin.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\firefox.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\hijackthis.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mvyA.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\opera.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\procexp.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rav.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\regedit.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Rmvtrjan.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rstrui.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\safari.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Startup CP.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\trjscan.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MyWebSearchService (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\mywebsearch email plugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\mywebsearch email plugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sniffer (Trojan.Dropper) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\my web search bar search scope monitor (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{00a6faf6-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Search\(default) (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\basewindows (Worm.AutoRun) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\bk (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\idln2 (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\Sources\f3popularscreensavers (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\drwtsn32.exe\debugger (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\LaunchU3.exe\debugger (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe\debugger (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\taskman (Worm.Palevo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\funwebproducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\forceclassiccontrolpanel (Hijack.ControlPanelStyle) -> Delete on reboot.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\adobe reader 9.0 (Worm.AutoRun) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\registrymonitor1 (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\registrymonitor2 (Malware.Trace) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
C:\Documents and Settings\All Users\Application Data\Zwunzi (Adware.Zwunzi) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\ScreenSaver (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\ScreenSaver\Images (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\Shared (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\Shared\Cache (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\Mozilla Firefox\extensions\{F270F1AF-34D6-41CB-A9F5-8200EF7DB41F} (Adware.Zwunzi) -> Quarantined and deleted successfully.
C:\Program Files\Mozilla Firefox\extensions\{F270F1AF-34D6-41CB-A9F5-8200EF7DB41F}\chrome (Adware.Zwunzi) -> Quarantined and deleted successfully.
C:\Program Files\Mozilla Firefox\extensions\{F270F1AF-34D6-41CB-A9F5-8200EF7DB41F}\defaults (Adware.Zwunzi) -> Quarantined and deleted successfully.
C:\Program Files\Mozilla Firefox\extensions\{F270F1AF-34D6-41CB-A9F5-8200EF7DB41F}\defaults\preferences (Adware.Zwunzi) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar\1.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\chrome (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\chrome (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\3.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\3.bin\chrome (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\4.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\4.bin\chrome (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\5.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\5.bin\chrome (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar\6.bin\chrome (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Avatar (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Game (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\History (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Overlay (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Settings (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\setups (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\Zwunzi (Adware.Zwunzi) -> Quarantined and deleted successfully.
C:\RECYCLER\S-1-5-21-0243936033-3052116371-381863308-1811 (Trojan.Agent) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Program Files\MyWebSearch\bar\6.bin\MWSOESTB.DLL (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar\6.bin\MWSOEMON.EXE (Adware.MyWebSearch) -> Delete on reboot.
C:\WINDOWS1\Temp\_ex-08.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\MWSOEPLG.DLL (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar\6.bin\MWSBAR.DLL (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MyWebSearch\bar\6.bin\M3SRCHMN.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\F3DTACTL.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\F3HISTSW.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\F3HTMLMU.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\F3POPSWT.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\M3MSG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\M3HTML.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\M3OUTLCN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\M3SKIN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\F3SCRCTR.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\MWSSRCAS.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\F3CJPEG.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\F3HTTPCT.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\F3REPROX.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Local Settings\Application Data\Mozilla\Firefox\Profiles\xydu7ji0.default\Cache(3)\9AB68289d01 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Mes documents\Downloads\Compressed\4 Easy steps for activate your Windows XP\4 Easy steps for activate your Windows XP\02_Change_WinXP_Key\Change WinXP Key.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Mes documents\Downloads\Compressed\4 Easy steps for activate your Windows XP\4 Easy steps for activate your Windows XP\03_winxp_genuine_advantage_fix\WinXP Genuine Advantage Fix.exe (Hacktool.WGAFix) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur\Mes documents\Téléchargements\MyWebFaceSetup2.3.67.1.SA.HP.GRfox000.exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur.STANDARD\Local Settings\Application Data\0814378.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur.STANDARD\Local Settings\Temp\75.exe (PUP.MailPassView) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur.STANDARD\Local Settings\Temp\7779696.exe (Spyware.Wemon) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur.STANDARD\Local Settings\Temp\78.exe (PUP.PSW.Passview) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur.STANDARD\Local Settings\Temp\8964422.exe (Spyware.Wemon) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur.STANDARD\Local Settings\Temp\2250272.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur.STANDARD\Local Settings\Temp\1827.exe (Trojan.Palevo) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrateur.STANDARD\Local Settings\Temp\svcnost.exe (Spyware.Wemon) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\F3HKSTUB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\F3IMSTUB.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\F3PSSAVR.SCR (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\F3REGHK.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\F3RESTUB.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\F3SCHMON.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\F3WPHOOK.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\M3AUXSTB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\M3DLGHK.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\M3HIGHIN.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\M3IDLE.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\M3IMPIPE.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\M3MEDINT.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\M3PLUGIN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\M3SKPLAY.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\M3SLSRCH.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\MWSMLBTN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\MWSSVC.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\MWSUABTN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\NPMYWEBS.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\Windows Live\Messenger\riched20.dll (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP36\A0005079.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP38\A0006320.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP61\A0013241.dll (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP61\A0013242.dll (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014915.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014933.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014951.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014913.Dll (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014914.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014916.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014917.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014918.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014919.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014920.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014921.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014922.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014923.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014924.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014925.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014926.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014927.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014928.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014929.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014930.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014931.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014932.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014934.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014935.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014936.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014937.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014938.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014939.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014940.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014941.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014942.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014943.SCR (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014944.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014945.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014946.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014947.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014948.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014949.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014950.DLL (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014953.Dll (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014954.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014955.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014962.scr (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014963.Dll (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014964.dll (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014965.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP64\A0014966.EXE (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP65\A0015776.dll (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP65\A0015777.dll (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP68\A0020179.dll (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{3C7DC42B-CC75-43E3-B0E5-4EE9C493C67E}\RP68\A0020180.dll (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\WINDOWS1\system32\f3PSSavr.scr (PUP.FunWebProducts) -> Quarantined and deleted successfully.
C:\WINDOWS1\$NtServicePackUninstall$\userinit.exe (Spyware.Wemon) -> Quarantined and deleted successfully.
D:\mes documents\Downloads\MyWebFaceSetup2.3.67.1.GRman000.exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
D:\Downloads\Compressed\4 Easy steps for activate your Windows XP\4 Easy steps for activate your Windows XP\02_Change_WinXP_Key\Change WinXP Key.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully.
D:\Downloads\Compressed\4 Easy steps for activate your Windows XP\4 Easy steps for activate your Windows XP\03_winxp_genuine_advantage_fix\WinXP Genuine Advantage Fix.exe (Hacktool.WGAFix) -> Quarantined and deleted successfully.
C:\Documents and Settings\All Users\Application Data\Zwunzi\zwunzi145.exe (Adware.Zwunzi) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\Shared\Cache\CursorManiaBtn-new.html (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\Shared\Cache\CursorManiaBtn.html (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\Shared\Cache\MyFunCardsIMBtn.html (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\Shared\Cache\WebfettiBtn.html (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\Mozilla Firefox\extensions\{F270F1AF-34D6-41CB-A9F5-8200EF7DB41F}\chrome.manifest (Adware.Zwunzi) -> Quarantined and deleted successfully.
C:\Program Files\Mozilla Firefox\extensions\{F270F1AF-34D6-41CB-A9F5-8200EF7DB41F}\install.rdf (Adware.Zwunzi) -> Quarantined and deleted successfully.
C:\Program Files\Mozilla Firefox\extensions\{F270F1AF-34D6-41CB-A9F5-8200EF7DB41F}\chrome\zwunzi.jar (Adware.Zwunzi) -> Quarantined and deleted successfully.
C:\Program Files\Mozilla Firefox\extensions\{F270F1AF-34D6-41CB-A9F5-8200EF7DB41F}\defaults\preferences\prefs.js (Adware.Zwunzi) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\1.bin\chrome\M3FFXTBR.JAR (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\2.bin\chrome\M3FFXTBR.JAR (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\3.bin\chrome\M3FFXTBR.JAR (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\4.bin\chrome\M3FFXTBR.JAR (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\5.bin\chrome\M3FFXTBR.JAR (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\CHROME.MANIFEST (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\F3BKGERR.JPG (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\F3SPACER.WMV (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\F3WALLPP.DAT (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\FWPBUDDY.PNG (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\INSTALL.RDF (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\6.bin\chrome\M3FFXTBR.JAR (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\00093D3C (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\000989F4 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\00099B59 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\001F38CC (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\001F3F92 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\001F46A7.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\001F4F71.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\001F57AE.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\001F5A00.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\001F5BA6.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\001F5F4F.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\0031CFC5 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\0031D330.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\0031D514.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\0031E149.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\0031E58F.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\0031EA90.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\0031ED30.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\008B1C8C.bmp (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\0090D12E.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\0090D380.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\0090D4C8.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\0090D5D1.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\00B9AF47.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\00B9B1A8.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\00B9B4F4.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\00B9BA63.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\012BBB23.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\01793F80 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\01796B72 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\01797CD7 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\017987E3 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\01CA414B (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\029CFB85 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Cache\files.ini (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\History\search3 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\CM.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\MFC.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\PSS.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\WB.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\8_step1.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\autoup.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\autoup.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\bkez.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\bkgr.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\bkgs.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\bklf.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\bkrg.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\bkwebfet.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\bkzc.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\bkzl.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\bkzn.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\bkzq.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\bkzr.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\bkzu.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\bkzv.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\bkzw.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\bkzwinky.jpg (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\blubtn2d.png (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\blubtn2r.png (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\blubtn3d.png (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\blubtn3r.png (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\center.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\index.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\mid_dots.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\protect.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\rebut4.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\rebut4b.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\rebut4c.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\shield.png (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\shocked.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\stop.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\systray.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\systrayp.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\tp_grad.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Message\COMMON\warn.gif (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyW

grenault · Answer

Eh bien ! Il y avait du boulot !!! C'est ça quand on ne protège pas son micro par les mises à jour Windows et un antivirus à jour !

Tout fonctionne maintenant ?

aloes · Answer

MyWebSearch t'a bien infecté, je rarement vu une telle ampleur.

Télécharges Ad-Remover de  (de C_XX & El Desaparecido) sur ton bureau : 
http://www.teamxscript.org/adremoverTelechargement.html

Fermes toutes les applications en cours, désactives tes logiciels de protection :
 
- Double-cliques sur l'icône AD-Remover. 
- Au menu principal, cliques sur "Nettoyer" et confirmer par « oui ». 
- Laisses l'outil travailler. 
- Un rapport apparait à la fin (sauvegardé sous C:\Ad-report-CLEAN.txt). 

Fais-moi un copier-coller du rapport ici.

aloes

rositaa · Answer

======= RAPPORT D'AD-REMOVER 2.0.0.2,B | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 11/11/10 à 11:40
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Lancé à 19:40:20 le 28/11/2010, Mode normal

Microsoft Windows XP Professionnel Service Pack 3 (X86) 
Administrateur@STANDARD ( ) 
 
============== ACTION(S) ==============


Fichier supprimé: C:\Program Files\Mozilla FireFox\searchplugins\SearchTheWeb.xml
Fichier supprimé: C:\Program Files\Mozilla FireFox\searchplugins\SearchquWebSearch.xml
Dossier supprimé: C:\Program Files\Windows Searchqu Toolbar
Fichier supprimé: C:\Documents and Settings\Administrateur.STANDARD\Application Data\Mozilla\FireFox\Profiles\z51icetr.default\prefs.js.ask.bak
Fichier supprimé: C:\Documents and Settings\Administrateur.STANDARD\Application Data\Mozilla\FireFox\Profiles\z51icetr.default\searchplugins\ask.uk.xml
Dossier supprimé: C:\Documents and Settings\Administrateur.STANDARD\Application Data\Mozilla\FireFox\Profiles\z51icetr.default\extensions\{7FF99715-3016-4381-84CE-E4E4C9673020}
Dossier supprimé: C:\Documents and Settings\Administrateur.STANDARD\Application Data\Mozilla\FireFox\Profiles\z51icetr.default\searchqutb
Fichier supprimé: C:\Documents and Settings\Administrateur.STANDARD\Application Data\Mozilla\FireFox\Profiles\z51icetr.default\searchplugins\SearchquWebSearch.xml
Dossier supprimé: C:\Documents and Settings\Administrateur.STANDARD\Application Data\Mozilla\FireFox\Profiles\z51icetr.default\conduit
Fichier supprimé: C:\Documents and Settings\Administrateur.STANDARD\Application Data\Mozilla\FireFox\Profiles\z51icetr.default\searchplugins\conduit.xml
Fichier supprimé: C:\Documents and Settings\Administrateur.STANDARD\Application Data\Mozilla\FireFox\Profiles\z51icetr.default\searchplugins\mywebsearch.xml
Dossier supprimé: C:\Documents and Settings\Administrateur.STANDARD\Menu Démarrer\Programmes\Ask Search Assistant
Dossier supprimé: C:\Program Files\Ask Search Assistant
Dossier supprimé: C:\Program Files\Ask.com
Dossier supprimé: C:\Documents and Settings\Administrateur.STANDARD\Application Data\Bandoo
Dossier supprimé: C:\Documents and Settings\All Users.WINDOWS1\Application Data\Bandoo
Dossier supprimé: C:\Documents and Settings\All Users.WINDOWS1\Menu Démarrer\Programmes\Bandoo
Dossier supprimé: C:\Program Files\Bandoo
Dossier supprimé: C:\Documents and Settings\Administrateur.STANDARD\Local Settings\Application Data\Conduit
Dossier supprimé: C:\Program Files\Conduit
Dossier supprimé: C:\Documents and Settings\Administrateur.STANDARD\Application Data\PriceGong
Dossier supprimé: C:\Documents and Settings\Administrateur.STANDARD\Application Data\SearchquTB
Dossier supprimé: C:\Documents and Settings\Administrateur.STANDARD\Application Data\OfferBox
Dossier supprimé: C:\Program Files\OfferBox

(!) -- Fichiers temporaires supprimés.


-- Fichier ouvert: C:\Documents and Settings\Administrateur.STANDARD\Application Data\Mozilla\FireFox\Profiles\z51icetr.default\Prefs.js --
Ligne supprimée:  
Ligne supprimée:  
Ligne supprimée: user_pref("CT1460988.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER... 
Ligne supprimée: user_pref("CT1460988.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT146... 
Ligne supprimée: user_pref("CT1460988.ct1670222.SearchEngine", "Recherche||hxxp://search.conduit.com/Results.aspx?q=U... 
Ligne supprimée: user_pref("CT2542115.SearchEngine", "Recherche||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_... 
Ligne supprimée: user_pref("CT2542115.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT254... 
Ligne supprimée: user_pref("CT2722653.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER... 
Ligne supprimée: user_pref("CT2722653.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT272... 
Ligne supprimée: user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2722653&Sea... 
Ligne supprimée: user_pref("browser.search.selectedEngine", "Ask"); 
Ligne supprimée: user_pref("extensions.mywebsearch.openSearchURL", "hxxp://search.mywebsearch.com/mywebsearch/opensea... 
Ligne supprimée: user_pref("extensions.mywebsearch.prevKwdEnabled", true); 
Ligne supprimée: user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://www.bing.com/search?FORM=IEFM1&q="); 
-- Fichier Fermé --
 

Clé supprimée: HKLM\Software\Classes\CLSID\{074E4EFE-81BB-4EA4-866E-082CB0E01070}
Clé supprimée: HKLM\Software\Classes\AppID\{EDE2C296-2458-4E3B-A846-4B512C0703B5}
Clé supprimée: HKLM\Software\Classes\CLSID\{0CE5B352-9D9C-41E1-9551-FCCD92820217}
Clé supprimée: HKLM\Software\Classes\CLSID\{167B2B5F-2757-434A-BBDA-2FDB2003F14F}
Clé supprimée: HKLM\Software\Classes\CLSID\{27F69C85-64E1-43CE-98B5-3C9F22FB408E}
Clé supprimée: HKLM\Software\Classes\AppID\{1301A8A5-3DFB-4731-A162-B357D00C9644}
Clé supprimée: HKLM\Software\Classes\CLSID\{2E9A60EA-5554-49C3-BC9D-D0404DBACC62}
Clé supprimée: HKLM\Software\Classes\CLSID\{3E63C9BC-DD51-4E83-ABA6-B350EAD28531}
Clé supprimée: HKLM\Software\Classes\CLSID\{44CFFEF4-E7E1-44BD-B1F5-29F828ADA1B8}
Clé supprimée: HKLM\Software\Classes\CLSID\{7FF99715-3016-4381-84CE-E4E4C9673020}
Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7FF99715-3016-4381-84CE-E4E4C9673020}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7FF99715-3016-4381-84CE-E4E4C9673020}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7FF99715-3016-4381-84CE-E4E4C9673020}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7FF99715-3016-4381-84CE-E4E4C9673020}
Clé supprimée: HKLM\Software\Classes\CLSID\{872F3C0B-4462-424c-BB9F-74C6899B9F92}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{872F3C0B-4462-424c-BB9F-74C6899B9F92}
Clé supprimée: HKLM\Software\Classes\AppID\{9C123289-82E1-4da7-A3C2-B8D28AAD114B}
Clé supprimée: HKLM\Software\Classes\CLSID\{B543EF05-9758-464E-9F37-4C28525B4A4C}
Clé supprimée: HKLM\Software\Classes\CLSID\{BB76A90B-2B4C-4378-8506-9A2B6E16943C}
Clé supprimée: HKLM\Software\Classes\CLSID\{C3AB94A4-BFD0-4BBA-A331-DE504F07D2DB}
Clé supprimée: HKLM\Software\Classes\CLSID\{CE1CB632-6817-47b3-8587-D05AF75D6D5A}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CE1CB632-6817-47b3-8587-D05AF75D6D5A}
Clé supprimée: HKLM\Software\Classes\AppID\{3AD7A5B6-610D-4A82-979E-0AED20920690}
Clé supprimée: HKLM\Software\Classes\CLSID\{EB5CEE80-030A-4ED8-8E20-454E9C68380F}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EB5CEE80-030A-4ED8-8E20-454E9C68380F}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EB5CEE80-030A-4ED8-8E20-454E9C68380F}
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EB5CEE80-030A-4ED8-8E20-454E9C68380F}
Clé supprimée: HKLM\Software\Classes\CLSID\{EF2B6317-C367-401B-83B8-80302D6588A7}
Clé supprimée: HKLM\Software\Classes\CLSID\{F5379B4B-24D8-432A-9A96-BE75EE5117DB}
Clé supprimée: HKLM\Software\Classes\CLSID\{F7FB2BC4-6C27-4EAC-B5E2-037B71FDE101}
Clé supprimée: HKLM\Software\Classes\CLSID\{FD53FE35-4368-4B71-89D6-F29F3DB29DF1}
Clé supprimée: HKLM\Software\Classes\Interface\{33DDFC61-F531-4982-8C32-4212B7835D44}
Clé supprimée: HKLM\Software\Classes\Interface\{477F210A-2A86-4666-9C4B-1189634D2C84}
Clé supprimée: HKLM\Software\Classes\Interface\{6087829B-114F-42A1-A72B-B4AEDCEA4E5B}
Clé supprimée: HKLM\Software\Classes\Interface\{A9005ED5-4A1D-4606-A4DF-1A25E7D7B417}
Clé supprimée: HKLM\Software\Classes\Interface\{FF871E51-2655-4D06-AED5-745962A96B32}
Clé supprimée: HKLM\Software\Classes\TypeLib\{3AD7A5B6-610D-4A82-979E-0AED20920690}
Clé supprimée: HKLM\Software\Classes\TypeLib\{4410C118-B23C-406C-9F52-9CDABD90A5EA}
Clé supprimée: HKLM\Software\Classes\TypeLib\{62E5C9E1-A0E8-4F8C-8EAF-0F9250CC5786}
Clé supprimée: HKLM\Software\Classes\TypeLib\{8F5F1CB6-EA9E-40AF-A5CA-C7FD63CC1971}
Clé supprimée: HKLM\Software\Classes\TypeLib\{9C123289-82E1-4DA7-A3C2-B8D28AAD114B}
Clé supprimée: HKLM\Software\Classes\BandooCoordinator.BandooCoordinator
Clé supprimée: HKLM\Software\Classes\BandooCoordinator.BandooCoordinator.1
Clé supprimée: HKLM\Software\Classes\BandooCoordinator.CoordinatorUI
Clé supprimée: HKLM\Software\Classes\BandooCoordinator.CoordinatorUI.1
Clé supprimée: HKLM\Software\Classes\BandooCoordinator.HTTPAsyncResult
Clé supprimée: HKLM\Software\Classes\BandooCoordinator.HTTPAsyncResult.1
Clé supprimée: HKLM\Software\Classes\BandooCoordinator.PlugInNotifier
Clé supprimée: HKLM\Software\Classes\BandooCoordinator.PlugInNotifier.1
Clé supprimée: HKLM\Software\Classes\BandooCore.BandooCore
Clé supprimée: HKLM\Software\Classes\BandooCore.BandooCore.1
Clé supprimée: HKLM\Software\Classes\BandooCore.ResourcesMngr
Clé supprimée: HKLM\Software\Classes\BandooCore.ResourcesMngr.1
Clé supprimée: HKLM\Software\Classes\BandooCore.SettingsMngr
Clé supprimée: HKLM\Software\Classes\BandooCore.SettingsMngr.1
Clé supprimée: HKLM\Software\Classes\BandooCore.StatisticMngr
Clé supprimée: HKLM\Software\Classes\BandooCore.StatisticMngr.1
Clé supprimée: HKLM\Software\Classes\BandooIEPlugin.BandooIEPlugin
Clé supprimée: HKLM\Software\Classes\BandooIEPlugin.BandooIEPlugin.1
Clé supprimée: HKLM\Software\Classes\BFlashAnimator.BFlashAnimatorCtrl
Clé supprimée: HKLM\Software\Classes\BFlashAnimator.BFlashAnimatorCtrl.1
Clé supprimée: HKLM\Software\Classes\BGIFAnimator.BGIFAnimatorCtrl
Clé supprimée: HKLM\Software\Classes\BGIFAnimator.BGIFAnimatorCtrl.1
Clé supprimée: HKLM\Software\Classes\Toolbar.CT1460988
Clé supprimée: HKLM\Software\Classes\Toolbar.CT2542115
Clé supprimée: HKLM\Software\Classes\Toolbar.CT2722653
Clé supprimée: HKLM\Software\Classes\AppID\BandooCoordinator.EXE
Clé supprimée: HKLM\Software\Classes\AppID\BandooCore.EXE
Clé supprimée: HKLM\Software\bandoo
Clé supprimée: HKLM\Software\Conduit
Clé supprimée: HKLM\Software\DataMngr
Clé supprimée: HKCU\Software\SearchquMediabarTb
Clé supprimée: HKCU\Software\AskSearchAsst
Clé supprimée: HKCU\Software\Conduit
Clé supprimée: HKCU\Software\DataMngr
Clé supprimée: HKCU\Software\FunWebProducts
Clé supprimée: HKCU\Software\PriceGong
Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Ask Search Assistant
Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}
Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}
Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{424624F4-C5DD-4e1d-BDD0-1E9C9B7799CC}
Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7f000001-db8e-f89c-2fec-49bf726f8c12}
Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9C8A3CA5-889E-4554-BEEC-EC0876E4E96A}
Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F9189560-573A-4fde-B055-AE7B0F4CF080}
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Bandoo
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ask.com Search Assistant
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWeb
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Searchqu MediaBar
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\AskSearchAsst.exe
Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\MenuExt\&Search
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyWebSearch bar Uninstall
Clé supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SearchTheWeb
Clé supprimée: HKLM\Software\MozillaPlugins\@mywebsearch.com/Plugin

Valeur supprimée: HKLM\Software\Mozilla\Firefox\Extensions|m3ffxtbr@mywebsearch.com
Valeur supprimée: HKLM\Software\Microsoft\Windows\CurrentVersion\Run|DataMngr


============== SCAN ADDITIONNEL ==============

** Mozilla Firefox Version [3.6.12 (ar)] **

-- C:\Documents and Settings\Administrateur.STANDARD\Application Data\Mozilla\FireFox\Profiles\z51icetr.default\Prefs.js --
browser.download.lastDir, C:\Documents and Settings\Administrateur.STANDARD\Bureau
browser.search.defaultenginename, SearchTheWeb
browser.startup.homepage, hxxp://www.plusnetwork.com
browser.startup.homepage_override.mstone, rv:1.9.2.12
keyword.URL, hxxp://www.bing.com/search?FORM=IEFM1&q=

========================================

** Internet Explorer Version [8.0.6001.18702] **

[HKCU\Software\Microsoft\Internet Explorer\Main] 
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\WINDOWS1\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Use Search Asst: no

[HKLM\Software\Microsoft\Internet Explorer\Main] 
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\WINDOWS1\system32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] 
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files\Ad-Remover\Quarantine: 1230 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 13 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 28/11/2010 (14079 Octet(s)) 

Fin à: 19:44:07, 28/11/2010 
 
============== E.O.F ==============

aloes · Answer

Télécharge http://www.teamxscript.org/usbfixTelechargement.html  sur ton bureau 

Branches tous tes périphériques au PC (clé USB, disque dur externe, etc) sans les ouvrir. 

Double-clic sur l'icône Usbfix située sur ton Bureau. 

Sur la page, clique sur le bouton : 

- choisi l' option Suppression 
- Le bureau va disparaître.. c'est normal, il va réaparaitre à la fin de la suppression 
- Le nettoyage va prendre quelques minutes, appuye sur OK sur la fenêtre d'informations 

- UsbFix scannera ton pc , laisse travailler l'outil. 

- Ensuite post le rapport UsbFix.txt qui apparaitra avec le bureau.

aloes

rositaa · Answer

ca c'est le rapport
############################## | UsbFix 7.035 | [Suppression]

Utilisateur: Administrateur (Administrateur) # STANDARD [ ]
Mis à jour le 22/11/10 par El Desaparecido / C_XX
Lancé à 12:32:28 | 29/11/2010
Site Web: http://www.teamxscript.org
Contact: eldesaparecido@teamxscript.org

CPU: Intel(R) Core(TM)2 Duo CPU T6500 @ 2.10GHz
CPU 2: Intel(R) Core(TM)2 Duo CPU T6500 @ 2.10GHz
Microsoft Windows XP Professionnel (5.1.2600 32-Bit) # Service Pack 3
Internet Explorer 8.0.6001.18702

Antivirus: AntiVir Desktop 9.0.1.32 [(!) Disabled | (!) Outdated]
RAM -> 3067 Mo 
C:\ (%systemdrive%) -> Disque fixe # 98 Go (59 Go libre(s) - 61%) [] # NTFS
D:\ -> Disque fixe # 200 Go (178 Go libre(s) - 89%) [] # NTFS
E:\ -> CD-ROM
F:\ -> CD-ROM

################## | Éléments infectieux |


Supprimé! C:\Documents and Settings\Administrateur.STANDARD\xalij.exe
Supprimé! D:\PhotoFiltre Studio X.lnk
Supprimé! C:\Documents and Settings\Administrateur.STANDARD\Menu Démarrer\Programmes\Démarrage\Server Host.lnk
Non supprimé ! C:\WINDOWS1\system32\baseWINDOWS.db
Supprimé! C:\DOCUME~1\ADMINI~1.STA\LOCALS~1\Temp\Merlin.vbs
Supprimé! C:\DOCUME~1\ADMINI~1.STA\LOCALS~1\Temp\VWL37.tmp
Supprimé! C:\Recycler\S-1-5-21-1645522239-492894223-839522115-500
Supprimé! C:\Recycler\S-1-5-21-1960408961-413027322-1801674531-500
Supprimé! C:\Recycler\S-1-5-21-5868512240-0443559581-722521729-7163
Supprimé! C:\Recycler\S-1-5-21-6898188798-3530940310-673462890-0910
Supprimé! C:\Recycler\S-1-5-21-7091375609-4875992297-162220964-7811
Supprimé! C:\Recycler\S-1-5-21-8680829122-3340756608-058120060-7957
Supprimé! C:\Recycler\S-1-5-21-9827224899-1792975605-049758453-3948
Supprimé! D:\Recycler\S-1-5-21-1645522239-492894223-839522115-500
Supprimé! C:\autorun.inf
Supprimé! C:\Thumbss.db
Supprimé! D:\autorun.inf
Supprimé! D:\Thumbss.db

################## | Registre |

Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AutorunRemover.exe
Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\autoruns.exe
Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Avira.exe
Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\chrome.exe
Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\drwtsn32.exe
Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dwwin.exe
Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\firefox.exe
Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\HijackThis.exe
Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\LaunchU3.exe
Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSConfig.exe
Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mvyA.exe
Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Opera.exe
Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\procexp.exe
Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Optionsav.exe
Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Optionsegedit.exe
Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Rmvtrjan.exe
Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Optionsstrui.exe
Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Safari.exe
Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Startup CP.exe
Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options	askmgr.exe
Supprimé! HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Trjscan.exe
Supprimé! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|xalij
Supprimé! HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore|DisableSR
Supprimé! HKLM\Software\Microsoft\Windows\CurrentVersion\Run|Adobe Reader 9.0
Supprimé! HKCU\Software\Microsoft\Windows\CurrentVersion\Run|baseWINDOWS

################## | Mountpoints2 |

Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{14484ae4-9d54-11df-94d5-0022fa5bf65c}
Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{42af75e2-60d5-11df-941a-0022fa5bf65c}
Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{61f26a3e-4ea6-11df-93e4-0022fa5bf65c}
Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{c1138ee8-726f-11df-944c-0022fa5bf65c}
Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{c938eb02-4968-11df-93d2-0022fa5bf65c}
Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{fe0d6078-5693-11df-93fd-0022fa5bf65c}
Supprimé! HKCU\.\.\.\.\Explorer\MountPoints2\{fe889ffb-f890-11df-95b7-0022fa5bf65c}

################## | Listing |

[25/02/2010 - 09:08:44 | D ] 	C:\63d232c6ce220809ec417c10
[28/11/2010 - 19:44:08 | N | 14320] 	C:\Ad-Report-CLEAN[1].txt
[21/02/2010 - 18:58:32 | N | 0] 	C:\AUTOEXEC.BAT
[29/11/2010 - 12:37:56 | RASH | 108] 	C:\autorun.inf
[13/04/2010 - 17:23:49 | N | 325] 	C:\boot.ini
[28/09/2001 - 14:00:00 | N | 4952] 	C:\Bootfont.bin
[28/11/2010 - 12:42:46 | D ] 	C:\Config.Msi
[21/02/2010 - 18:58:32 | N | 0] 	C:\CONFIG.SYS
[22/02/2010 - 00:01:29 | D ] 	C:\DEVICE
[21/07/2010 - 18:26:10 | D ] 	C:\Documents and Settings
[28/11/2010 - 00:06:21 | D ] 	C:\FyK
[21/02/2010 - 19:33:06 | D ] 	C:\Intel
[21/02/2010 - 18:58:32 | N | 0] 	C:\IO.SYS
[21/02/2010 - 19:01:33 | N | 7] 	C:\ISACER.id
[21/02/2010 - 18:58:32 | N | 0] 	C:\MSDOS.SYS
[03/08/2004 - 22:38:34 | N | 47564] 	C:\NTDETECT.COM
[27/11/2010 - 19:19:36 | N | 252240] 	C:
tldr
[29/11/2010 - 12:05:15 | ASH | 2145386496] 	C:\pagefile.sys
[28/11/2010 - 19:43:06 | D ] 	C:\Program Files
[29/11/2010 - 12:37:45 | SHD ] 	C:\RECYCLER
[21/02/2010 - 23:59:49 | N | 167] 	C:\Setup.log
[23/04/2010 - 08:25:56 | N | 208] 	C:\startvrlservice_log.txt
[26/11/2010 - 08:00:56 | SHD ] 	C:\System Volume Information
[27/11/2010 - 14:22:51 | D ] 	C:	emp
[29/11/2010 - 12:37:56 | RASH | 22030] 	C:\Thumbss.db
[29/11/2010 - 12:37:49 | D ] 	C:\UsbFix
[29/11/2010 - 12:37:53 | A | 4325] 	C:\UsbFix.txt
[22/11/2010 - 16:01:00 | N | 655] 	C:\vraylog.txt
[15/05/2010 - 15:04:59 | N | 798] 	C:\VRLServer.txt
[23/04/2010 - 08:25:56 | N | 654] 	C:\VRSpawner.log
[13/04/2010 - 19:22:25 | D ] 	C:\WINDOWS
[28/11/2010 - 12:07:24 | D ] 	C:\WINDOWS1
[25/03/2010 - 17:34:06 | N | 389088] 	D:\1 PLAN DE FLUIDE.bak
[27/11/2010 - 22:35:34 | D ] 	D:\3d699be3f48852b8aa042941f0d4
[13/04/2010 - 17:33:40 | D ] 	D:\4_Easy_steps_for_activate_your_Windows_XP
[16/03/2010 - 14:54:50 | N | 959714] 	D:\4_Easy_steps_for_activate_your_Windows_XP.rar
[04/11/2010 - 04:48:17 | D ] 	D:\4éme 1
[01/08/2010 - 09:24:27 | D ] 	D:\8247cc0888e8d752440ec7
[30/07/2010 - 01:21:15 | D ] 	D:\abir
[13/04/2010 - 18:10:35 | D ] 	D:\Adobe
[08/03/2010 - 12:36:11 | N | 29612] 	D:\Apprendre le turc - Alphabet.htm
[13/04/2010 - 17:34:03 | D ] 	D:\Apprendre le turc - Alphabet_files
[15/07/2010 - 18:28:44 | N | 14359] 	D:\Arabic in Adobe photoshop and Flash ??????? ????.htm
[30/07/2010 - 01:21:54 | D ] 	D:\Arabic in Adobe photoshop and Flash ??????? ????_files
[30/07/2010 - 01:23:22 | D ] 	D:\art-lantis 4.5
[13/04/2010 - 17:36:35 | D ] 	D:\autocad 2008
[29/11/2010 - 12:37:56 | RASH | 108] 	D:\autorun.inf
[05/10/2010 - 11:25:08 | D ] 	D:\bizerte gazwa
[18/07/2010 - 12:07:21 | N | 22403] 	D:\Code de la route intéractif du MAROC.htm
[30/07/2010 - 01:25:23 | D ] 	D:\Code de la route intéractif du MAROC_files
[30/07/2010 - 01:19:20 | D ] 	D:\declara
[11/05/2010 - 10:48:28 | D ] 	D:\Downloads
[13/04/2010 - 17:37:11 | D ] 	D:\emotion
[27/11/2010 - 22:30:56 | D ] 	D:\f6cb29834116d89350d96d61ad1753
[05/10/2010 - 11:52:08 | D ] 	D:\islem
[19/06/2010 - 15:56:04 | N | 19968] 	D:\ismail tunis.doc
[24/03/2010 - 13:59:23 | N | 144974] 	D:\jamal6.html
[13/04/2010 - 17:37:47 | D ] 	D:\jamal6_fichiers
[22/05/2010 - 19:47:14 | N | 56832] 	D:\l'énergie.doc
[05/04/2010 - 21:45:00 | N | 85713] 	D:\logiciels de CAO DAO architecture et construction.htm
[13/04/2010 - 17:37:49 | D ] 	D:\logiciels de CAO DAO architecture et construction_files
[05/10/2010 - 11:19:43 | D ] 	D:\ma musique
[02/11/2010 - 19:04:48 | D ] 	D:\mes documents
[17/10/2010 - 21:27:31 | D ] 	D:\mes fichirs recus
[05/10/2010 - 11:23:43 | D ] 	D:\mes images
[29/03/2010 - 12:11:46 | N | 20335952] 	D:\ms.pln
[09/05/2010 - 13:25:43 | D ] 	D:\msdownld.tmp
[03/05/2010 - 21:33:35 | RHD ] 	D:\MSOCache
[05/10/2010 - 11:20:03 | D ] 	D:\musique
[30/07/2010 - 01:20:04 | D ] 	D:\OFFICE 2007
[27/11/2010 - 16:00:41 | D ] 	D:\pa
[05/10/2010 - 11:48:49 | D ] 	D:\Photo sem
[17/10/2010 - 13:26:16 | D ] 	D:\pic bizerteeeeeeeeeee
[06/03/2010 - 09:18:08 | N | 4570016] 	D:\PLAN ELECTRICITE 1ER ETAGE.dwg
[05/10/2010 - 11:51:25 | D ] 	D:\pour les belles femmes
[29/03/2010 - 00:42:33 | N | 27100264] 	D:\PowerPointViewerFR.exe
[04/04/2010 - 14:22:04 | N | 21226992] 	D:\RealPlayerSPGold_fr.exe
[29/11/2010 - 12:37:45 | SHD ] 	D:\RECYCLER
[19/03/2010 - 22:33:40 | N | 642560] 	D:\SansTitre.MSWMM
[13/04/2010 - 18:03:27 | D ] 	D:\SetupSkp7xtoAtl3
[29/07/2010 - 02:27:59 | N | 126630] 	D:\showthread.php.htm
[30/07/2010 - 01:26:12 | D ] 	D:\showthread.php_fichiers
[30/07/2010 - 01:20:40 | D ] 	D:\siaka
[13/04/2010 - 18:03:29 | D ] 	D:\sketchup
[29/03/2010 - 00:43:17 | N | 2473541] 	D:\SoftonicToolbar.exe
[13/04/2010 - 17:52:30 | SHD ] 	D:\System Volume Information
[09/09/2010 - 15:32:24 | ASH | 246272] 	D:\Thumbs.db
[29/11/2010 - 12:37:56 | RASH | 22030] 	D:\Thumbss.db
[30/07/2010 - 01:25:42 | D ] 	D:\video
[28/07/2010 - 19:29:02 | N | 10398898] 	D:\videoplaybgtgtack
[05/10/2010 - 11:50:46 | D ] 	D:\voyage d'etude bizerte
[21/02/2010 - 18:59:53 | N | 693] 	D:\Échantillons d'images.lnk
[13/07/2010 - 20:58:11 | D ] 	D:\???

################## | Vaccin |

C:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)
D:\Autorun.inf -> Dossier créé par UsbFix (El Desaparecido & C_XX)

################## | Upload |

Veuillez envoyer le fichier: C:\UsbFix_Upload_Me_STANDARD.zip
http://www.teamxscript.org/Upload.php
Merci de votre contribution.

################## | E.O.F |

rositaa · Answer

mais un page internet apparraitre  je ne sais pas quoi faire??? Vous avez utilisé un de ces outils, ou on vous a demandé d'utiliser un de ces outils.
Pendant son nettoyage, l'outil a récolté certains fichiers infectieux.
Nous vous demandons de nous les faire parvenir pour des futures
mises à jour, ainsi que pour un meilleur traitement des infections.
Nous vous remercions pour votre contribution.

--------------------------------------------------------------------------------


 

Choisir le dossier de destination
Sélectionnez l'outil que vous venez d'utiliser 

 AD-Remover FindyKill UsbFix Submit your sample

rositaa · Answer

et merci infiniment aloes vraiment c'est trés genti de m'aider:)))))

aloes · Answer

Pour le message,  n'envoie rien.

Ton système était plein de failles du fait que tu n'as jamais rien mis à jour, c'est pour ça que tu as une telle montage d'infections, encore heureux que le PC fonctionne.

Refais un scan avec Malwarebyte's pour voir ce qui reste :
Fais une mise à jour avant de lancer le scan.

aloes

rositaa · Answer

j'ai télécharger les mis a jous avec malwabytes mais quand je clique pour faire le scan un message apparait " une erreur s'est produite. veuiller transmettre ce code d'erreur à notre équipe de support.
MBAM_ERROR_LOAD_DATABASE5(0, 5)

aloes · Answer

Attendons un éventuel correctif de Malwarebyte's.
En attendant fais le scan avec la version précédente, regardes si ça fonctionne sans faire la mise à jour.

aloes

rositaa · Answer

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 5214

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

29-11-2010 23:55:50
mbam-log-2010-11-29 (23-55-50).txt

Type d'examen: Examen complet (C:\|D:\|)
Elément(s) analysé(s): 320629
Temps écoulé: 1 heure(s), 54 minute(s), 48 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 18
Valeur(s) du Registre infectée(s): 5
Elément(s) de données du Registre infecté(s): 3
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AutorunRemover.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\autoruns.exe (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Avira.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\chrome.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dwwin.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\firefox.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\hijackthis.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msconfig.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mvyA.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\opera.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\procexp.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Optionsav.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Optionsegedit.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Rmvtrjan.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Optionsstrui.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\safari.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Startup CP.exe (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options	rjscan.exe (Security.Hijack) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\basewindows (Worm.AutoRun) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\drwtsn32.exe\debugger (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\LaunchU3.exe\debugger (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options	askmgr.exe\debugger (Security.Hijack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\adobe reader 9.0 (Worm.AutoRun) -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\WINDOWS1\system32\baseWINDOWS.db (Worm.AutoRun) -> Delete on reboot.

aloes · Answer

Ca va déjà beaucoup mieux que le premier !
On va purifier les points de la restauration système.

Désactives la Restauration système en cochant la case 
"Désactiver la Restauration système sur tous les lecteurs", éteint ton PC et redémarres. Puis refais un nouveau point de restauration.

aloes

rositaa · Answer

pour désactiver la restauration en cliquant sur démarrer puis poste de travail puis propriétés je n'ai pas trouvé le mot restauration de systéme je ne sais pas pourquoi?????

aloes · Answer

Essayes ça :
Panneau de configuration / Système / puis l'onglet Restauration du système, puis coches la case "Désactiver la restauration sur tous les lecteurs". 

aloes

rositaa · Answer

j'essayé plusieur fois mais l'onglet restauration de systéme n'existe pas

rositaa · Answer

je vois cette fenetre
http://imageshack.com/f/0scopieecran35p

aloes · Answer

Fais ceci pour voir si la restauration système est toujours opérationnelle : 

Démarrer/Exécuter, saisir %SystemRoot%\system32\restore\rstrui.exe
Cela devrait ouvrir la fenêtre de la Restauration du système.
Si c'est le cas, ferme la fenêtre puis va chercher le fichier suivant : 

C:\WINDOWS\system32\Restore\rstrui.exe

Fais un clic droit dessus puis Envoyer vers  ton Bureau : cela créera un raccourci sur ton Bureau. 

Ouvre l'Explorateur et glisse le raccourci dans : 
C:\Documents et settings\All users\Menu démarrer\Accessoires\Outils système
Puis tu renommes le fichier Restauration système.

aloes

rositaa · Answer

une fenetre apparait " la restauraion du système a été mise  hors tension par la stratégie de groupe. Pour mettre la restauration du système sous tension contactez votre administrateur de domaine

rositaa · Answer

aaah j'ai trouvé dans le forum une solution pour afficher l'onglet restauration de systéme voila cette solution "
Démarrer> exécuter tapez regedit --> exécuter 

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT --> SystemRestore => dans la fenetre de droite supprimer les 2 valeurs: 

"DisableConfig" = "0" 

"DisableSR" = "0"

aloes · Answer

Il y a plusieurs façons, je t'en avais proposé une pour vérifier ta restauration système, je ne sais pas pourquoi tu vas chercher autre chose quand on te propose quelque chose !

Bon, tu en es où, tu as purgé ta restauration système ?

aloes

rositaa · Answer

non aloes j'ai pas cherché autre chose je t'ai dis que lorsque tu m'as dis" Fais ceci pour voir si la restauration système est toujours opérationnelle :"  j'ai fait tout ce que tu m'as dit alors un message d'erreur "apparait " la restauraion du système a été mise hors tension par la stratégie de groupe. Pour mettre la restauration du système sous tension contactez votre administrateur de domaine" c pour ca que j'ai cherché  juste qu'est ce que signifie ce message pas plus bref j'ai cocher la case désactiver la restauration de système sur tous les lecteurs

aloes · Answer

OK tu t'es bien débrouillé, bravo !
Mais tu as réactivé la restauration maintenant en créant un nouveau point ?

aloes

rositaa · Answer

j'ai réactiver la restauration du système en décochant la case de désactiver la restauration de système sur tous les lecteurs puis j'ai rédémarré mon pc apres quand je viens de cliquer sur le programme restauration du système pour créer un point,,  un page tout blanc est ouvert ?????

aloes · Answer

Avant, tu avais la restauration système et maintenant tu ne l'as plus ?

aloes · Answer

Refais un scan avec Ad-Remouver (de C_XX & El Desaparecido)
Télécharges-le sur ton bureau : 
http://www.teamxscript.org/adremoverTelechargement.html 

Fermes toutes les applications en cours, désactives tes logiciels de protection : 

- Double-cliques sur l'icône AD-Remover. 
- Au menu principal, cliques sur "Nettoyer" et confirmer par « oui ». 
- Laisses l'outil travailler. 
- Un rapport apparait à la fin (sauvegardé sous C:\Ad-report-CLEAN.txt). 

Fais-moi un copier-coller du rapport ici. 

aloes

rositaa · Answer

je suis désolé aloes pour le retard mais j'étais occupé  un peu pour mes examens

rositaa · Answer

======= RAPPORT D'AD-REMOVER 2.0.0.2,C | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 08/12/10 à 10:40
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [2]) -> Lancé à 19:43:11 le 17/12/2010, Mode normal

Microsoft Windows XP Professionnel Service Pack 3 (X86) 
Administrateur@STANDARD ( ) 
 
============== ACTION(S) ==============


Fichier supprimé: C:\Program Files\Mozilla FireFox\searchplugins\SearchTheWeb.xml
Dossier supprimé: C:\Documents and Settings\Administrateur.STANDARD\Application Data\Mozilla\FireFox\Profiles\z51icetr.default\extensions\firefox@bandoo.com
Dossier supprimé: C:\Documents and Settings\Administrateur.STANDARD\Application Data\Mozilla\FireFox\Profiles\z51icetr.default\conduit
Dossier supprimé: C:\Documents and Settings\Administrateur.STANDARD\Application Data\Bandoo

(!) -- Fichiers temporaires supprimés.


-- Fichier ouvert: C:\Documents and Settings\Administrateur.STANDARD\Application Data\Mozilla\FireFox\Profiles\z51icetr.default\Prefs.js --
Ligne supprimée:  
Ligne supprimée:  
Ligne supprimée: user_pref("CT1460988.ct1670222.SearchEngine", "Recherche||hxxp://search.conduit.com/Results.aspx?q=U... 
Ligne supprimée: user_pref("CT2542115.SearchEngine", "Recherche||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_... 
Ligne supprimée: user_pref("CT2722653.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER... 
-- Fichier Fermé --
 

Clé supprimée: HKCU\Software\Conduit
Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}
Clé supprimée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}


============== SCAN ADDITIONNEL ==============

** Mozilla Firefox Version [3.6.12 (ar)] **

-- C:\Documents and Settings\Administrateur.STANDARD\Application Data\Mozilla\FireFox\Profiles\z51icetr.default\Prefs.js --
browser.download.lastDir, C:\Documents and Settings\Administrateur.STANDARD\Bureau
browser.search.defaultenginename, SearchTheWeb
browser.search.selectedEngine, SearchTheWeb
browser.startup.homepage, hxxp://search.iminent.com/?appId=ee63db7a-f01b-44cc-9a20-0dcbfa976be5&lcid=7169&ref=homepage
browser.startup.homepage_override.mstone, rv:1.9.2.12
keyword.URL, hxxp://www.bing.com/search?FORM=IEFM1&q=

========================================

** Internet Explorer Version [8.0.6001.18702] **

[HKCU\Software\Microsoft\Internet Explorer\Main] 
Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Do404Search: 0x01000000
Enable Browser Extensions: yes
Local Page: C:\WINDOWS1\system32\blank.htm
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Show_ToolBar: yes
Start Page: hxxp://fr.msn.com/
Use Search Asst: no

[HKLM\Software\Microsoft\Internet Explorer\Main] 
Default_Page_URL: hxxp://go.microsoft.com/fwlink/?LinkId=54896
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Delete_Temp_Files_On_Exit: yes
Local Page: C:\WINDOWS1\system32\blank.htm
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKLM\Software\Microsoft\Internet Explorer\ABOUTURLS] 
Tabs: res://ieframe.dll/tabswelcome.htm
Blank: res://mshtml.dll/blank.htm

========================================

C:\Program Files\Ad-Remover\Quarantine: 1244 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 28 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 28/11/2010 (14320 Octet(s)) 
C:\Ad-Report-CLEAN[2].txt - 17/12/2010 (3585 Octet(s)) 

Fin à: 19:48:54, 17/12/2010 
 
============== E.O.F ==============

aloes · Answer

Tu as toujours Internet Explorer qui s'ouvre quand tu utilises Chrome ou Mozilla ?

aloes

rositaa · Answer

non lorsque j'ouvre mozilla firefox elle s'ouvre et google chrome  aussi

aloes · Answer

Qu'est-ce qui reste comme problème ?
La restauration système ?

aloes

rositaa · Answer

oui

aloes · Answer

Quand tu fais ceci, la fenêtre Restauration système s'ouvre normalement ?

Démarrer/Exécuter, saisir 
%SystemRoot%\system32\restore\rstrui.exe 
Cela devrait ouvrir la fenêtre de la Restauration du système.

Dis-moi si c'est le cas.

aloes

Je déteste internet explorer

62 réponses

Discussions similaires

Newsletters