ma boite mail en voie des mails (bizarres) toute seule!

[Nalex_03]

Salut tout le monde!
Alors j'ai un souci, de plus en plus envahissant lol. J'ai ma boite mail (hotmail) qui envoie des mails toute seule! Que je sois connectée ou non, mes contacts reçoivent des mails, genre mails publicitaires ms en anglais et ou ça a pas l'air d'avoir bcp de sens! Le pb c que ça devient très fréquents (plusieurs fois par jour).
J'ai antivir , j'ai lancé plusieurs fois des scans et il n'a rien trouvé. Et j'ai aussi fait un scan avec emsisoft anti malware qui n'a rien trouvé non plus. On m'a conseillé de fermer mon compte hotmail pr en ouvrir un autre, ms si je pouvais échapper à cette solution, j'ai cette adresse depuis des années et je reçois tout dessus!
Donc si qqn a des idées, des conseils, un avis... je suis preneuse!^^
Merci

[bernard53]

bonjour
on peux déjà voir si un intrus caché n'est pas en cause.


Installe Malewarebytes' Antimalware,

http://malwarebytes.org/products/malwarebytes_free

Prends bien la version FREE
*** Met-le à jour puis choisi, Exécuter un examen rapide

*** Si une infection est trouvée, coche la case a coté et valides avec l’Onglet Supprimer la sélection

Poste le rapport final.


Puis Télécharges << ZHPDiag>> (de Nicolas Coolman)

dezzipes le fichier sur ton bureau...
Fais un clic-droit sur l'icône ZHPDiag .exe et choisis "exécuter en tant qu'administrateur".


L'installation va créer raccourcis (ZHPDiag et ZHPFix et MBRchek) sur ton bureau




A la fin de l'installation ZHPDiag va se lancer....

Cliques sur l'icône "Options" (image du tournevis) et coches toutes les options.
Cliques sur "Lancer le diagnostique" (image de la loupe) et patiente...

A la fin du scan cliques sur l'icône "sauvegarder le fichier sous" (image de la disquette bleu) et enregistre le rapport sur ton bureau.

Mets le rapport ici car il prend bien de la place.

http://www.cijoint.fr/index.php

[Nalex_03]

Merki!
Voilà le rapport de Malwarebytes anti malware. Par contre j'ai un souci pr poster l'autre rapport, qd j'essaye de le mettre sur le site, ça me dit soit que je n'ai pas choisi de fichier, soit que le fichier avec l'extension ne peut être déposé. Si vou voulez je vous l'envoie par mail.

Code: Tout sélectionner

Malwarebytes' Anti-Malware 1.51.0.1200
http://www.malwarebytes.org

Version de la base de données: 6876

Windows 6.0.6002 Service Pack 2
Internet Explorer 9.0.8112.16421

17/06/2011 14:42:29
mbam-log-2011-06-17 (14-42-29).txt

Type d'examen: Examen rapide
Elément(s) analysé(s): 177116
Temps écoulé: 13 minute(s), 19 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 54
Valeur(s) du Registre infectée(s): 10
Elément(s) de données du Registre infecté(s): 4
Dossier(s) infecté(s): 3
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{84DA4FDF-A1CF-4195-8688-3E961F505983} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{D44FD6F0-9746-484E-B5C4-C66688393872} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{0EB3F101-224A-4B2B-9E5B-DF720857529C} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{D518921A-4A03-425E-9873-B9A71756821E} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{CF54BE1C-9359-4395-8533-1657CF209CFE} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{E79DFBC0-5697-4FBD-94E5-5B2A9C7C1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{72EE7F04-15BD-4845-A005-D6711144D86A} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07B18EAB-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07B18EAB-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF6-072E-44CF-8957-5838F569A31D} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{25560540-9571-4D7B-9389-0F166788785A} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4D7B-9389-0F166788785A} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{9FF05104-B030-46FC-94B8-81276E4E27DF} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9FF05104-B030-46FC-94B8-81276E4E27DF} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45dd-9B68-D6A12C30E5D7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} (Adware.Softomate) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48dd-9B6D-7A13A3E42127} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40fd-8DAE-FF14757F60C7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98D9753D-D73B-42D5-8C85-4469CDA897AB} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ShoppingReport2.HbAx (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ShoppingReport2.HbAx.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ShoppingReport2.HbInfoBand (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ShoppingReport2.HbInfoBand.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ShoppingReport2.IEButton (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ShoppingReport2.IEButton.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ShoppingReport2.IEButtonA (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ShoppingReport2.IEButtonA.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ShoppingReport2.RprtCtrl (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ShoppingReport2.RprtCtrl.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\ShoppingReport2 (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\FocusInteractive (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\ShoppingReport2 (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShoppingReport2 (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\QUESTSCAN (Adware.QuestScan) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\QUESTSCAN (Adware.QuestScan) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{EB620C54-E229-4942-87CE-E717109FC8C6} (Adware.ShoppingReport2) -> Value: {EB620C54-E229-4942-87CE-E717109FC8C6} -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{EB620C54-E229-4942-87CE-E717109FC8C6} (Adware.ShoppingReport2) -> Value: {EB620C54-E229-4942-87CE-E717109FC8C6} -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{DB38E21A-0133-419d-92AD-ECDFD5244D6D} (Adware.ShoppingReport2) -> Value: {DB38E21A-0133-419d-92AD-ECDFD5244D6D} -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{DB38E21A-0133-419d-92AD-ECDFD5244D6D} (Adware.ShoppingReport2) -> Value: {DB38E21A-0133-419d-92AD-ECDFD5244D6D} -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Value: {07B18EA9-A523-4961-B6BB-170DE4475CCA} -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Value: {07B18EA9-A523-4961-B6BB-170DE4475CCA} -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\FunWebProducts (Adware.MyWebSearch) -> Value: FunWebProducts -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\My Web Search Bar Search Scope Monitor (Adware.MyWebSearch) -> Value: My Web Search Bar Search Scope Monitor -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QuestScan\DisplayName (Adware.QuestScan) -> Value: DisplayName -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\QuestScan\DllPath (Adware.QuestScan) -> Value: DllPath -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page_bak (Hijack.StartPage) -> Bad: (http://www.cherche.us) Good: (http://www.google.com) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\Default_Search_URL (Hijack.SearchPage) -> Bad: (http://www.cherche.us/keyword/%s) Good: (http://www.google.com) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchURL\(default) (Hijack.SearchPage) -> Bad: (http://www.cherche.us/keyword/%s) Good: (http://www.google.com/) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchURL\SearchAssistant (Hijack.SearchPage) -> Bad: (http://www.cherche.us) Good: (http://www.google.com/) -> Quarantined and deleted successfully.

Dossier(s) infecté(s):
c:\program files\shoppingreport2 (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
c:\program files\shoppingreport2\Bin (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
c:\program files\shoppingreport2\Bin\2.7.34 (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
c:\Users\Alex\AppData\Local\Temp\sai7824.exe (Adware.QuestScan) -> Quarantined and deleted successfully.

[Nalex_03]

ça y est en fait c bon j'ai réussi lol donc voilà le lien pr le rapport de ZHP : http://www.cijoint.fr/cjlink.php?file=c ... VQNABW.txt

[bernard53]

ok fait ceci s.t.p
Télécharger AD-Remover (créé par C_XX) :

http://www.teamxscript.org/adremoverTelechargement.html

Cliquez sur "DOWNLOAD " et enregistrez-le "sur votre bureau"

Une fois téléchargé sur votre bureau, double-cliquez sur son icone pour lancer l'installation.

Sous vista et Windows7 : clic droit sur son icone et sélectionnez "Exécuter en tant qu'administrateur".
L'installation se fera automatiquement.

A l'écran principal, cliquez sur Nettoyer pour exécuter le nettoyage.

Une fois l'ordinateur redémarré, il ne vous reste plus qu'à copier/coller le rapport sur le forum comme le précédent.
Le rapport se trouve à cet endroit : C:\Ad-Report-CLEAN[1].txt
Ensuite:
* Copie le tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C)

R1 - HKUS\S-1-5-21-672542660-100148210-598949742-1003\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = cherche.us
R1 - HKUS\S-1-5-21-672542660-100148210-598949742-1003\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://google.cherche.usso-8859-1&q={searchterms}&sourceid=ie7&rls=com.microsoft:en-us&ie=utf8&oe=utf8
R3 - URLSearchHook: SearchHelper Class - {91C18ED5-5E1C-4AE5-A148-A861DE8C8E16} . (...) (No version) -- (.not file.)
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} . (.Ask.com - Ask.com Toolbar.) (5.5.2.106) -- C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} Clé orpheline
O2 - BHO: BrowserHelper Class - {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} Clé orpheline
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} . (.Ask.com - Ask.com Toolbar.) -- C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: XBTBPos00 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} Clé orpheline
O4 - HKLM\..\Run: [FBSSA] C:\Program Files\SGPSA\ie3sh.exe (.not file.)
O8 - Extra context menu item: Translate this web page with Babylon - (.not file.) - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll
O8 - Extra context menu item: Translate with Babylon - (.not file.) - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll
O9 - Extra button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} -- C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (.not file.)
O15 - Trusted Zone: [HKCU\...\Domains] *.chat-land.org
O15 - Trusted Zone: [HKCU\...\Domains\www] *.chat-land.org
[MD5.12AB8BAC533B466676698191344686D9] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files\Ask.com\UpdateTask.exe
[MD5.00000000000000000000000000000000] [APT] [{11A5DC3E-C6D9-428F-B2FF-0766A6332F71}] (...) -- C:\Users\Alex\Downloads\eMule\Incoming\(PC Game) Bubble Bobble World 1.2. + KeyGen\(PC Game) Bubble Bobble World 1.2. + KeyGen\bbworld.exe (.not file.)
O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM] -- {86D4B82A-ABED-442A-BE86-96357B70F4FE}
[HKCU\Software\AppDataLow\AskToolbarInfo]
[HKCU\Software\AppDataLow\Software\Fun Web Products
[HKCU\Software\AppDataLow\Software\FunWebProducts]
[HKCU\Software\AppDataLow\Software\MyWebSearch]
[HKCU\Software\AppDataLow\Software\ShoppingReport2]
[HKCU\Software\PopCap]
[HKLM\Software\PopCap]
O43 - CFD: 10/05/2011 - 23:43:38 - [0] ----D- C:\Program Files\Babylon
O43 - CFD: 22/05/2011 - 00:25:46 - [2681514] ----D- C:\Program Files\PopCap Games
O43 - CFD: 14/05/2011 - 12:06:06 - [85104] ----D- C:\Program Files\QuestScan
O43 - CFD: 22/05/2011 - 00:25:46 - [14] ----D- C:\ProgramData\PopCap Games
O43 - CFD: 14/05/2011 - 12:14:40 - [0] ----D- C:\ProgramData\QuestScan
O43 - CFD: 30/05/2011 - 14:20:18 - [7967881] --H-D- C:\ProgramData\{DE8EABB5-1C85-4410-A68D-79BD8A4518F4}
O43 - CFD: 30/05/2011 - 14:44:46 - [0] ----D- C:\Users\Alex\Appdata\Local\{0246FA30-1257-4A23-B9DA-AD662527962B} =>
O43 - CFD: 12/06/2011 - 11:27:28 - [0] ----D- C:\Users\Alex\Appdata\Local\{0C8D1339-A298-41D3-92F2-FCC310A1022C} =>
O43 - CFD: 08/06/2011 - 15:28:32 - [0] ----D- C:\Users\Alex\Appdata\Local\{0EDFDB90-1C4D-4714-B52D-F585523931C2} =>
O43 - CFD: 11/06/2011 - 10:09:50 - [0] ----D- C:\Users\Alex\Appdata\Local\{11FB980F-EDF2-462D-95C0-FCB8FE9D9350} =>
O43 - CFD: 31/05/2011 - 12:09:40 - [0] ----D- C:\Users\Alex\Appdata\Local\{156D4F3C-F7DF-41E0-B372-70C8BC35BE7D} =>
O43 - CFD: 10/06/2011 - 10:33:42 - [0] ----D- C:\Users\Alex\Appdata\Local\{16AC3D99-5389-4AF2-A6E8-8D1FA76453EF} =>
O43 - CFD: 09/06/2011 - 19:39:48 - [0] ----D- C:\Users\Alex\Appdata\Local\{188A6ACB-07FC-4BB0-9103-C800E66FD0B9} =>
O43 - CFD: 31/05/2011 - 17:27:24 - [0] ----D- C:\Users\Alex\Appdata\Local\{22F49BA2-4E9E-41BE-A107-8323B40E5A3C} =>
O43 - CFD: 03/06/2011 - 11:22:32 - [0] ----D- C:\Users\Alex\Appdata\Local\{25A3AFE1-9447-456E-9B0B-553C56475B2A} =>
O43 - CFD: 11/06/2011 - 10:20:16 - [0] ----D- C:\Users\Alex\Appdata\Local\{283A72F2-E67C-41CC-AE43-C9247BB6020A} =>
O43 - CFD: 09/06/2011 - 07:39:10 - [0] ----D- C:\Users\Alex\Appdata\Local\{2B2800A5-2A5B-4442-BA10-9087DECC7F17} =>
O43 - CFD: 02/06/2011 - 23:21:42 - [0] ----D- C:\Users\Alex\Appdata\Local\{2B64356F-E5AB-40CC-8568-D3B73C238A79} =>
O43 - CFD: 08/06/2011 - 01:26:36 - [0] ----D- C:\Users\Alex\Appdata\Local\{2D5FC91B-050B-4D2C-9DA1-F2A7F06A8ACF} =>
O43 - CFD: 31/05/2011 - 12:09:20 - [0] ----D- C:\Users\Alex\Appdata\Local\{32103524-4DD6-47BB-BC18-11E21BEDABA3} =>
O43 - CFD: 16/06/2011 - 02:53:02 - [0] ----D- C:\Users\Alex\Appdata\Local\{329AEAC8-12EB-4A42-903C-F8EDECC6FAEB} =>
O43 - CFD: 07/06/2011 - 12:05:22 - [0] ----D- C:\Users\Alex\Appdata\Local\{376E9968-E4D5-4ADB-BC18-4C14AFBDAA64} =>
O43 - CFD: 11/06/2011 - 11:25:44 - [0] ----D- C:\Users\Alex\Appdata\Local\{48C43A42-B26E-4527-8B4C-593632E296E5} =>
O43 - CFD: 10/06/2011 - 22:49:14 - [0] ----D- C:\Users\Alex\Appdata\Local\{4AB2BB88-EE63-4803-9A82-F146E9DE59D1} =>
O43 - CFD: 06/06/2011 - 22:38:18 - [0] ----D- C:\Users\Alex\Appdata\Local\{4E74947C-67BB-4849-BAC0-6A46A433BCF0} =>
O43 - CFD: 29/05/2011 - 15:09:40 - [0] ----D- C:\Users\Alex\Appdata\Local\{53B42175-E7BE-4205-9E00-95380875E52C} =>
O43 - CFD: 16/06/2011 - 15:13:52 - [0] ----D- C:\Users\Alex\Appdata\Local\{59634F08-1FDF-450E-A1C1-FC7C9270742B} =>
O43 - CFD: 01/06/2011 - 10:20:24 - [0] ----D- C:\Users\Alex\Appdata\Local\{5D95ADCD-CBC7-4CB7-9A20-82BE65B2B9A8} =>
O43 - CFD: 30/05/2011 - 10:05:22 - [0] ----D- C:\Users\Alex\Appdata\Local\{5DA2F5EF-6432-4F14-9FD9-E1ADEE6107DF} =>
O43 - CFD: 17/06/2011 - 14:50:02 - [0] ----D- C:\Users\Alex\Appdata\Local\{652895CF-0432-4E50-994A-79552623123F} =>
O43 - CFD: 11/06/2011 - 23:26:40 - [0] ----D- C:\Users\Alex\Appdata\Local\{671DB167-3023-4AE7-8231-CD4C4033C278} =>
O43 - CFD: 05/06/2011 - 09:22:28 - [0] ----D- C:\Users\Alex\Appdata\Local\{716F8CAB-52F7-49ED-9195-2B02AE918260} =>
O43 - CFD: 16/06/2011 - 03:12:52 - [0] ----D- C:\Users\Alex\Appdata\Local\{76C4EA70-9BF4-4DC6-901D-8881BDFC59EB} =>
O43 - CFD: 04/06/2011 - 10:47:34 - [0] ----D- C:\Users\Alex\Appdata\Local\{791D9369-5F19-4715-A641-1601C54BC86D} =>
O43 - CFD: 17/06/2011 - 10:39:16 - [0] ----D- C:\Users\Alex\Appdata\Local\{7BF2006C-FD3C-42E3-85AE-E11513E1E9B0} =>
O43 - CFD: 17/06/2011 - 12:42:06 - [0] ----D- C:\Users\Alex\Appdata\Local\{7CCA8CB2-3152-44C0-92D4-0278017A21B4} =>
O43 - CFD: 08/06/2011 - 10:48:56 - [0] ----D- C:\Users\Alex\Appdata\Local\{85B7926B-AAFD-41F9-8664-2DEB755D1D44} =>
O43 - CFD: 13/06/2011 - 22:32:06 - [0] ----D- C:\Users\Alex\Appdata\Local\{93498CE0-888C-4B6A-82E8-5BF85BA49E32} =>
O43 - CFD: 01/06/2011 - 14:12:50 - [0] ----D- C:\Users\Alex\Appdata\Local\{95D30F4B-2DC3-4A43-AF23-9CF2DFA21A1B} =>
O43 - CFD: 12/06/2011 - 23:28:18 - [0] ----D- C:\Users\Alex\Appdata\Local\{9F045DAA-3EC8-4D20-9EB6-33BCDB684612} =>
O43 - CFD: 04/06/2011 - 14:21:52 - [0] ----D- C:\Users\Alex\Appdata\Local\{B030E6C4-C464-4F1E-B942-45A8C53228E9} =>
O43 - CFD: 03/06/2011 - 23:35:26 - [0] ----D- C:\Users\Alex\Appdata\Local\{B4CC06CD-7548-497D-9EA4-25E598B3B1F8} =>
O43 - CFD: 30/05/2011 - 09:58:54 - [0] ----D- C:\Users\Alex\Appdata\Local\{B763BA9B-A242-4AAC-B8F4-E4537AE63CA1} =>
O43 - CFD: 15/06/2011 - 15:14:02 - [0] ----D- C:\Users\Alex\Appdata\Local\{CCFA5CC7-E4F0-4E44-8875-E008FBE7CB34} =>
O43 - CFD: 02/06/2011 - 02:13:40 - [0] ----D- C:\Users\Alex\Appdata\Local\{D2CC42A8-7E49-4554-A466-E2E39625908D} =>
O43 - CFD: 29/05/2011 - 10:59:16 - [0] ----D- C:\Users\Alex\Appdata\Local\{E013A2DA-0BD0-4F2F-B81E-005CAA301DC5} =>
O43 - CFD: 13/06/2011 - 14:29:28 - [0] ----D- C:\Users\Alex\Appdata\Local\{E5531E61-548C-46D6-85E0-654C2196993D} =>
O43 - CFD: 14/06/2011 - 13:33:40 - [0] ----D- C:\Users\Alex\Appdata\Local\{E8E4D271-15B3-4256-9057-A1495E0147DB} =>
O43 - CFD: 14/06/2011 - 20:17:04 - [0] ----D- C:\Users\Alex\Appdata\Local\{E920A61A-138A-4DBE-8191-C2740286F139} =>
O43 - CFD: 02/06/2011 - 11:20:50 - [0] ----D- C:\Users\Alex\Appdata\Local\{E979BABA-042E-464D-AD15-12F565A3DC1A} =>
O43 - CFD: 05/06/2011 - 00:11:56 - [0] ----D- C:\Users\Alex\Appdata\Local\{EFD2A0C2-665D-4E82-B1D8-1E58AFE69B2A} =>
O43 - CFD: 13/06/2011 - 10:42:06 - [0] ----D- C:\Users\Alex\Appdata\Local\{F046CC44-A791-49EC-A9BE-38F5343C858C}
O43 - CFD: 30/05/2011 - 11:46:34 - [0] ----D- C:\Users\Alex\Appdata\Local\{FD6B940A-A520-4371-9316-8290A1A01805}
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Search the web (Babylon)) - http://search.babylon.com
O69 - SBI: SearchScopes [HKCU] {AE68614F-2766-45DA-A29B-6AFE5B89FF12} - (Fast Browser Search) - http://www.fastbrowsersearch.com
[HKLM\Software\Classes\AppID\GenericAskToolbar.DLL]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\mywebsearch bar uninstall]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Search Guard Plus Updater]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Search Guard Plus]
[HKLM\Software\Classes\bho.pshelper]
[HKLM\Software\Classes\bho.pshelper.1]
[HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd]
[HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1]
[HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook]
[HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook.1]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}]
[HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}]
[HKLM\Software\Classes\AppID\{055069F3-F78B-4BD1-A277-FE66648D3300}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}]
[HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4a99-B4B6-146BF802613B}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4a99-B4B6-146BF802613B}]
[HKLM\Software\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}]
[HKLM\Software\Classes\TypeLib\{3088c799-9630-4719-a471-4544d7cabc2d}]
[HKLM\Software\Classes\Interface\{3e53e2cb-86db-4a4a-8bd9-ffeb7a64df82}]
[HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}]
[HKLM\Software\Classes\Interface\{4897bba6-48d9-468c-8efa-846275d7701b}]
[HKLM\Software\Classes\Interface\{63d0ed2d-b45b-4458-8b3b-60c69bbbd83c}]
[HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}]
[HKLM\Software\Classes\Interface\{7473d293-b7bb-4f24-ae82-7e2ce94bb6a9}]
[HKLM\Software\Classes\TypeLib\{77AA25E8-6083-4949-A831-9CB11861DC10}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}]
[HKLM\Software\Classes\CLSID\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{91C18ED5-5E1C-4AE5-A148-A861DE8C8E16}]
[HKLM\Software\Classes\CLSID\{91C18ED5-5E1C-4AE5-A148-A861DE8C8E16}]
[HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}]
[HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}]
[HKLM\Software\Classes\Interface\{9ebb289a-2d7b-465b-825f-1530b813e95a}]
[HKLM\Software\Classes\Interface\{a1f1ecd3-4806-44c6-a869-f0dadf11c57c}]
[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}]
[HKLM\Software\Classes\Interface\{a626cdbd-3d13-4f78-b819-440a28d7e8fc}]
[HKLM\Software\Classes\TypeLib\{AA2E16F2-387A-415F-BA95-B89BAF3AF109}]
[HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}]
[HKLM\Software\Classes\Interface\{cd5c92ae-97b0-4bc3-ba65-ba0308d543bf}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[HKLM\Software\Classes\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25f}]
[HKLM\Software\Classes\Interface\{e79dfbc9-5697-4fbd-94e5-5b2a9c7c1612}]
[HKLM\Software\Classes\Interface\{e79dfbcb-5697-4fbd-94e5-5b2a9c7c1612}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F0626A63-410B-45E2-99A1-3F2475B2D695}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F0626A63-410B-45E2-99A1-3F2475B2D695}]
[HKLM\Software\Classes\CLSID\{F0626A63-410B-45E2-99A1-3F2475B2D695}]
[HKLM\Software\Classes\Interface\{f87d7fb5-9dc5-4c8c-b998-d8dfe02e2978}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
[HKLM\Software\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
[HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF]
[HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF]
[HKCU\Software\Ask.com]
[HKCU\Software\Ask.com]
[HKCU\Software\AppDataLow\Software\AskToolbar]
[HKCU\Software\AppDataLow\AskToolbarInfo]
[HKCU\Software\AppDataLow\Software\Fun Web Products]
[HKCU\Software\AppDataLow\Software\FunWebProducts]
[HKCU\Software\PopCap]
[HKLM\Software\PopCap]
[HKLM\Software\QuestScan]
[HKCU\Software\AppDataLow\Software\AskToolbar]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\QuestScan]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\TBSB07183.TBSB07183Toolbar]
[HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]:{00000000-6E41-4FD3-8538-502F5495E5FC}
[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{D4027C7F-154A-4066-A1AD-4243D8127440}
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{D4027C7F-154A-4066-A1AD-4243D8127440}
[HKLM\Software\Microsoft\Windows\CurrentVersion\Run]:FBSSA
C:\Program Files\Ask.com
C:\Program Files\Babylon
C:\Program Files\PopCap Games
C:\Program Files\QuestScan
C:\ProgramData\PopCap Games
C:\ProgramData\QuestScan
C:\Users\Alex\Appdata\LocalLow\BabylonToolbar
C:\Users\Alex\Appdata\LocalLow\FunWebProducts
C:\Users\Alex\Appdata\LocalLow\MyWebSearch
C:\Users\Alex\Appdata\LocalLow\ShoppingReport2
C:\Users\Alex\Appdata\Local\Temp\AskSearch
C:\Windows\system32\Tasks\Scheduled Update for Ask Toolbar
FirewallRaz
EmptyFlash
Emptytemp

Puis Lance ZHPFix depuis le raccourci du bureau.

Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)
- Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes
- Clique sur le bouton « GO » pour lancer le nettoyage,
- Copie/colle la totalité du rapport dans ta prochaine réponse

-> laisse travailler l'outil et ne touche à rien ...

Une fois terminée, un nouveau rapport s'affiche : copie/colle le contenu de ce dernier dans ta prochaine réponse ...

(ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ZHPFixReport.txt)

Important : s'il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le de suite !

après dis moi comment va ton pc s.t.p

[Nalex_03]

voici le rapport de AD-R :
======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [2]) -> Lancé à 16:50:19 le 18/06/2011, Mode normal

Microsoft® Windows Vista™ Édition Familiale Basique Service Pack 2 (X86)
Alex@PC-DE-ALEX (LENOVO 42334AG)

============== ACTION(S) ==============



(!) -- Fichiers temporaires supprimés.


Erreur suppression clé: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar


============== SCAN ADDITIONNEL ==============

**** Mozilla Firefox Version [4.0.1 (fr)] ****

Searchplugins\bing.xml ( hxxp://www.bing.com/search)
Components\browsercomps.dll (Mozilla Foundation)

-- C:\Users\Alex\AppData\Roaming\Mozilla\FireFox\Profiles\l7r3gtn8.default --
Prefs.js - browser.startup.homepage, hxxp://www.google.fr/
Prefs.js - browser.startup.homepage_override.buildID, 20110413222027
Prefs.js - browser.startup.homepage_override.mstone, rv:2.0.1

========================================

**** Internet Explorer Version [9.0.8112.16421] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_Toolbar\WebBrowser|{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} (x)
HKCU_ElevationPolicy\{DD8AF36C-2490-4BC8-8552-C112FE654545} - C:\Program Files\eMule\emule.exe (http://www.emule-project.net)
HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x)
HKLM_ElevationPolicy\{B2321D2F-1154-4d97-AD3E-2FE0BAE2897B} - C:\Program Files\SFR\Kit\9launch.exe (SFR)
HKLM_Extensions\{85d1f590-48f4-11d9-9669-0800200c9a66} - "?" (?)
HKLM_Extensions\{CCA281CA-C863-46ef-9331-5C8D4460577F} - "@btrez.dll,-4015" (C:\Program Files\Lenovo\Bluetooth Software\bt_cold_icon.ico)
HKLM_Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - "?" (?)
HKLM_Extensions\{F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - "Translate this web page with Babylon" (C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll,202)
BHO\{0F6E720A-1A6B-40E1-A294-1D4D19F156C8} - "Objet d'aide à la navigation SFR" (C:\Program Files\SFR\Kit\SFRNavErrorHelper.dll)
BHO\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - "Search Helper" (C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll)
BHO\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} - "Babylon IE plugin" () (x)

========================================

C:\Program Files\Ad-Remover\Quarantine: 99 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 16 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 18/06/2011 16:38:10 (10582 Octet(s))
C:\Ad-Report-CLEAN[2].txt - 18/06/2011 16:50:28 (3299 Octet(s))

Fin à: 16:51:46, 18/06/2011

============== E.O.F ==============

[Pac428]

Salut

J'ai déplacé le sujet dans la section sécurité et fait les poussières ...

Bonne continuation et ++

[Nalex_03]

Hello alors voici le rapport de zhpfix, par contre je c pas si ça a bien marché pq il c lancé, m'a affiché le rapport et n'a plus rien fait du tout. Je l'ai laissé une journée entière (de 11h à 23h30) et il restait toujours sur la même page.
Ma boite mail continue tjs d'envoyer de mails.

Code: Tout sélectionner

Rapport de ZHPFix 1.12.3316 par Nicolas Coolman, Update du 16/06/2011
Fichier d'export Registre :
Run by Alex at 19/06/2011 11:34:31
Windows Vista Home Basic Edition, 32-bit Service Pack 2 (Build 6002)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Logiciel(s) ==========
ABSENT Software Key: {86D4B82A-ABED-442A-BE86-96357B70F4FE}

========== Clé(s) du Registre ==========
ABSENT Key: CLSID BHO: {53707962-6F74-2D53-2644-206D7942484F}
ABSENT Key: CLSID BHO: {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
ABSENT Key: CLSID BHO: {D4027C7F-154A-4066-A1AD-4243D8127440}
ABSENT Key: CLSID BHO: {FCBCCB87-9224-4B8D-B117-F56D924BEB18}
SUPPRIME Key: Menu Contextuel: Translate this web page with Babylon
SUPPRIME Key: Menu Contextuel: Translate with Babylon
ABSENT Key: CLSID Extra Buttons: {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478}
ABSENT Trusted Zone: chat-land.org
ABSENT Key: HKCU\Software\AppDataLow\AskToolbarInfo
ABSENT Key: HKCU\Software\AppDataLow\Software\FunWebProducts
ABSENT Key: HKCU\Software\AppDataLow\Software\MyWebSearch
ABSENT Key: HKCU\Software\AppDataLow\Software\ShoppingReport2
ABSENT Key: HKCU\Software\PopCap
ABSENT Key: HKLM\Software\PopCap
ABSENT SearchScopes :{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
ABSENT SearchScopes :{AE68614F-2766-45DA-A29B-6AFE5B89FF12}
ABSENT Key: HKLM\Software\Classes\AppID\GenericAskToolbar.DLL
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\mywebsearch bar uninstall
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Search Guard Plus Updater
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Search Guard Plus
ABSENT Key: HKLM\Software\Classes\bho.pshelper
ABSENT Key: HKLM\Software\Classes\bho.pshelper.1
ABSENT Key: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd
ABSENT Key: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1
ABSENT Key: HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook
ABSENT Key: HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook.1
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
ABSENT Key: HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
ABSENT Key: HKLM\Software\Classes\AppID\{055069F3-F78B-4BD1-A277-FE66648D3300}
ABSENT Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}
ABSENT Key: HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4a99-B4B6-146BF802613B}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4a99-B4B6-146BF802613B}
ABSENT Key: HKLM\Software\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}
ABSENT Key: HKLM\Software\Classes\TypeLib\{3088c799-9630-4719-a471-4544d7cabc2d}
ABSENT Key: HKLM\Software\Classes\Interface\{3e53e2cb-86db-4a4a-8bd9-ffeb7a64df82}
ABSENT Key: HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
ABSENT Key: HKLM\Software\Classes\Interface\{4897bba6-48d9-468c-8efa-846275d7701b}
ABSENT Key: HKLM\Software\Classes\Interface\{63d0ed2d-b45b-4458-8b3b-60c69bbbd83c}
ABSENT Key: HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
ABSENT Key: HKLM\Software\Classes\Interface\{7473d293-b7bb-4f24-ae82-7e2ce94bb6a9}
ABSENT Key: HKLM\Software\Classes\TypeLib\{77AA25E8-6083-4949-A831-9CB11861DC10}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
ABSENT Key: HKLM\Software\Classes\CLSID\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{91C18ED5-5E1C-4AE5-A148-A861DE8C8E16}
ABSENT Key: HKLM\Software\Classes\CLSID\{91C18ED5-5E1C-4AE5-A148-A861DE8C8E16}
ABSENT Key: HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
ABSENT Key: HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
ABSENT Key: HKLM\Software\Classes\Interface\{9ebb289a-2d7b-465b-825f-1530b813e95a}
ABSENT Key: HKLM\Software\Classes\Interface\{a1f1ecd3-4806-44c6-a869-f0dadf11c57c}
ABSENT Key: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
ABSENT Key: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
ABSENT Key: HKLM\Software\Classes\Interface\{a626cdbd-3d13-4f78-b819-440a28d7e8fc}
ABSENT Key: HKLM\Software\Classes\TypeLib\{AA2E16F2-387A-415F-BA95-B89BAF3AF109}
ABSENT Key: HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
ABSENT Key: HKLM\Software\Classes\Interface\{cd5c92ae-97b0-4bc3-ba65-ba0308d543bf}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
ABSENT Key: HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
ABSENT Key: HKLM\Software\Classes\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25f}
ABSENT Key: HKLM\Software\Classes\Interface\{e79dfbc9-5697-4fbd-94e5-5b2a9c7c1612}
ABSENT Key: HKLM\Software\Classes\Interface\{e79dfbcb-5697-4fbd-94e5-5b2a9c7c1612}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F0626A63-410B-45E2-99A1-3F2475B2D695}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F0626A63-410B-45E2-99A1-3F2475B2D695}
ABSENT Key: HKLM\Software\Classes\CLSID\{F0626A63-410B-45E2-99A1-3F2475B2D695}
ABSENT Key: HKLM\Software\Classes\Interface\{f87d7fb5-9dc5-4c8c-b998-d8dfe02e2978}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
ABSENT Key: HKLM\Software\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
ABSENT Key: HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
ABSENT Key: HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
ABSENT Key: HKCU\Software\Ask.com
ABSENT Key: HKCU\Software\AppDataLow\Software\AskToolbar
ABSENT Key: HKCU\Software\AppDataLow\Software\Fun Web Products
ABSENT Key: HKLM\Software\QuestScan
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\QuestScan
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\TBSB07183.TBSB07183Toolbar

========== Valeur(s) du Registre ==========
ABSENT URLSearchHook: {91C18ED5-5E1C-4AE5-A148-A861DE8C8E16}
ABSENT URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC}
ABSENT RunValue: FBSSA
ABSENT [HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]:{00000000-6E41-4FD3-8538-502F5495E5FC}
ABSENT [HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{D4027C7F-154A-4066-A1AD-4243D8127440}
ABSENT [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{D4027C7F-154A-4066-A1AD-4243D8127440}
ABSENT [HKLM\Software\Microsoft\Windows\CurrentVersion\Run]:FBSSA
ABSENT Valeur Standard Profile: FirewallRaz :
ABSENT Valeur Domain Profile: FirewallRaz :
ERREUR FirewallRaz (Public) : TCP Query User{EC56B36D-5012-4449-A4FF-5ABBB3038EC2}C:\users\alex\appdata\local\microsoft\windows\temporary internet files\content.ie5\x8svmls7\pengupop[1].exe
ERREUR FirewallRaz (Public) : UDP Query User{F0673FDC-796E-4889-80DA-8E9EC1CD2650}C:\users\alex\appdata\local\microsoft\windows\temporary internet files\content.ie5\x8svmls7\pengupop[1].exe
ERREUR FirewallRaz (None) : {B25C10F8-2115-4D63-ACB7-33A9EFA661C5}

========== Elément(s) de donnée du Registre ==========
SUPPRIME Trusted Zone: chat-land.org

========== Dossier(s) ==========
ABSENT C:\Program Files\Babylon
ABSENT C:\Program Files\PopCap Games
ABSENT C:\Program Files\QuestScan
ABSENT C:\ProgramData\PopCap Games
ABSENT C:\ProgramData\QuestScan
ABSENT C:\ProgramData\{DE8EABB5-1C85-4410-A68D-79BD8A4518F4}
ABSENT C:\Users\Alex\Appdata\Local\{0246FA30-1257-4A23-B9DA-AD662527962B}
ABSENT C:\Users\Alex\Appdata\Local\{0C8D1339-A298-41D3-92F2-FCC310A1022C}
ABSENT C:\Users\Alex\Appdata\Local\{0EDFDB90-1C4D-4714-B52D-F585523931C2}
ABSENT C:\Users\Alex\Appdata\Local\{11FB980F-EDF2-462D-95C0-FCB8FE9D9350}
ABSENT C:\Users\Alex\Appdata\Local\{156D4F3C-F7DF-41E0-B372-70C8BC35BE7D}
ABSENT C:\Users\Alex\Appdata\Local\{16AC3D99-5389-4AF2-A6E8-8D1FA76453EF}
ABSENT C:\Users\Alex\Appdata\Local\{188A6ACB-07FC-4BB0-9103-C800E66FD0B9}
ABSENT C:\Users\Alex\Appdata\Local\{22F49BA2-4E9E-41BE-A107-8323B40E5A3C}
ABSENT C:\Users\Alex\Appdata\Local\{25A3AFE1-9447-456E-9B0B-553C56475B2A}
ABSENT C:\Users\Alex\Appdata\Local\{283A72F2-E67C-41CC-AE43-C9247BB6020A}
ABSENT C:\Users\Alex\Appdata\Local\{2B2800A5-2A5B-4442-BA10-9087DECC7F17}
ABSENT C:\Users\Alex\Appdata\Local\{2B64356F-E5AB-40CC-8568-D3B73C238A79}
ABSENT C:\Users\Alex\Appdata\Local\{2D5FC91B-050B-4D2C-9DA1-F2A7F06A8ACF}
ABSENT C:\Users\Alex\Appdata\Local\{32103524-4DD6-47BB-BC18-11E21BEDABA3}
ABSENT C:\Users\Alex\Appdata\Local\{329AEAC8-12EB-4A42-903C-F8EDECC6FAEB}
ABSENT C:\Users\Alex\Appdata\Local\{376E9968-E4D5-4ADB-BC18-4C14AFBDAA64}
ABSENT C:\Users\Alex\Appdata\Local\{48C43A42-B26E-4527-8B4C-593632E296E5}
ABSENT C:\Users\Alex\Appdata\Local\{4AB2BB88-EE63-4803-9A82-F146E9DE59D1}
ABSENT C:\Users\Alex\Appdata\Local\{4E74947C-67BB-4849-BAC0-6A46A433BCF0}
ABSENT C:\Users\Alex\Appdata\Local\{53B42175-E7BE-4205-9E00-95380875E52C}
ABSENT C:\Users\Alex\Appdata\Local\{59634F08-1FDF-450E-A1C1-FC7C9270742B}
ABSENT C:\Users\Alex\Appdata\Local\{5D95ADCD-CBC7-4CB7-9A20-82BE65B2B9A8}
ABSENT C:\Users\Alex\Appdata\Local\{5DA2F5EF-6432-4F14-9FD9-E1ADEE6107DF}
ABSENT C:\Users\Alex\Appdata\Local\{652895CF-0432-4E50-994A-79552623123F}
ABSENT C:\Users\Alex\Appdata\Local\{671DB167-3023-4AE7-8231-CD4C4033C278}
ABSENT C:\Users\Alex\Appdata\Local\{716F8CAB-52F7-49ED-9195-2B02AE918260}
ABSENT C:\Users\Alex\Appdata\Local\{76C4EA70-9BF4-4DC6-901D-8881BDFC59EB}
ABSENT C:\Users\Alex\Appdata\Local\{791D9369-5F19-4715-A641-1601C54BC86D}
ABSENT C:\Users\Alex\Appdata\Local\{7BF2006C-FD3C-42E3-85AE-E11513E1E9B0}
ABSENT C:\Users\Alex\Appdata\Local\{7CCA8CB2-3152-44C0-92D4-0278017A21B4}
ABSENT C:\Users\Alex\Appdata\Local\{85B7926B-AAFD-41F9-8664-2DEB755D1D44}
ABSENT C:\Users\Alex\Appdata\Local\{93498CE0-888C-4B6A-82E8-5BF85BA49E32}
ABSENT C:\Users\Alex\Appdata\Local\{95D30F4B-2DC3-4A43-AF23-9CF2DFA21A1B}
ABSENT C:\Users\Alex\Appdata\Local\{9F045DAA-3EC8-4D20-9EB6-33BCDB684612}
ABSENT C:\Users\Alex\Appdata\Local\{B030E6C4-C464-4F1E-B942-45A8C53228E9}
ABSENT C:\Users\Alex\Appdata\Local\{B4CC06CD-7548-497D-9EA4-25E598B3B1F8}
ABSENT C:\Users\Alex\Appdata\Local\{B763BA9B-A242-4AAC-B8F4-E4537AE63CA1}
ABSENT C:\Users\Alex\Appdata\Local\{CCFA5CC7-E4F0-4E44-8875-E008FBE7CB34}
ABSENT C:\Users\Alex\Appdata\Local\{D2CC42A8-7E49-4554-A466-E2E39625908D}
ABSENT C:\Users\Alex\Appdata\Local\{E013A2DA-0BD0-4F2F-B81E-005CAA301DC5}
ABSENT C:\Users\Alex\Appdata\Local\{E5531E61-548C-46D6-85E0-654C2196993D}
ABSENT C:\Users\Alex\Appdata\Local\{E8E4D271-15B3-4256-9057-A1495E0147DB}
ABSENT C:\Users\Alex\Appdata\Local\{E920A61A-138A-4DBE-8191-C2740286F139}
ABSENT C:\Users\Alex\Appdata\Local\{E979BABA-042E-464D-AD15-12F565A3DC1A}
ABSENT C:\Users\Alex\Appdata\Local\{EFD2A0C2-665D-4E82-B1D8-1E58AFE69B2A}
ABSENT C:\Users\Alex\Appdata\Local\{F046CC44-A791-49EC-A9BE-38F5343C858C}
ABSENT C:\Users\Alex\Appdata\Local\{FD6B940A-A520-4371-9316-8290A1A01805}
SUPPRIME Flash Cookies: 3
SUPPRIME Temporaires Windows: : 3

========== Fichier(s) ==========
ABSENT File: c:\program files\ask.com
ABSENT File: c:\program files\sgpsa\ie3sh.exe
ABSENT File: c:\program files\babylon\babylon-pro\utils\babyloniepi.dll
ABSENT Folder/File: c:\program files\ask.com\updatetask.exe
ABSENT Folder/File: c:\program files\ask.com
ABSENT Folder/File: c:\program files\babylon
ABSENT Folder/File: c:\program files\popcap games
ABSENT Folder/File: c:\program files\questscan
ABSENT Folder/File: c:\programdata\popcap games
ABSENT Folder/File: c:\programdata\questscan
SUPPRIME File: C:\Users\Alex\Appdata\LocalLow\BabylonToolbar
ABSENT Folder/File: c:\users\alex\appdata\locallow\funwebproducts
ABSENT Folder/File: c:\users\alex\appdata\locallow\mywebsearch
ABSENT Folder/File: c:\users\alex\appdata\locallow\shoppingreport2
ABSENT Folder/File: c:\users\alex\appdata\local\temp\asksearch
ABSENT Folder/File: c:\windows\system32\tasks\scheduled update for ask toolbar
SUPPRIME Flash Cookies: 2
SUPPRIME Temporaires Windows: : 30

========== Tache planifiée ==========
ABSENT Task: Scheduled Update for Ask Toolbar
ABSENT Task: {11A5DC3E-C6D9-428F-B2FF-0766A6332F71}

========== Autre ==========
NON TRAITE [HKCU\Software\AppDataLow\Software\Fun Web Products


========== Récapitulatif ==========
84 : Clé(s) du Registre
12 : Valeur(s) du Registre
1 : Elément(s) de donnée du Registre
55 : Dossier(s)
18 : Fichier(s)
1 : Logiciel(s)
2 : Tache planifiée
1 : Autre


========== Chemin du fichier rapport ==========
C:\Program Files\ZHPDiag\ZHPFixReport.txt


End of the scan

édit Pac : rapport mis entre balises [code] comme demandé sur ce sous-forum
merci d'y penser pour les prochaines fois ...

[bernard53]

Mets moi un nouveau rapport Zhpdiag s.t.p

Tu as essayer aussi de modifier ton mot de passe et voir si tu avais toujours ses soucis?

[mlkgiosn]

Salut tout le monde!
Alors j'ai un souci, de plus en plus envahissant lol. J'ai ma boite mail (hotmail) qui envoie des mails toute seule! Que je sois connectée ou non, mes contacts reçoivent des mails, genre mails publicitaires ms en anglais et ou ça a pas l'air d'avoir bcp de sens! Le pb c que ça devient très fréquents (plusieurs fois par jour).
J'ai antivir , j'ai lancé plusieurs fois des scans et il n'a rien trouvé. Et j'ai aussi fait un scan avec emsisoft anti malware qui n'a rien trouvé non plus. On m'a conseillé de fermer mon compte hotmail pr en ouvrir un autre, ms si je pouvais échapper à cette solution, j'ai cette adresse depuis des années et je reçois tout dessus!
Donc si qqn a des idées, des conseils, un avis... je suis preneuse!^^
Merci

Personne n'est susceptible d'avoir trouvé ton mot de passe ?

[Nalex_03]

nan, j'ai déjà essayé en le changeant.

[Nalex_03]

http://www.cijoint.fr/cjlink.php?file=c ... Jf0A9Z.txt
Et voilà

[bernard53]

ok fait ceci dans cet ordre s.t.p


Dans un premier temps tu va avoir un souci d'espace qu'il te faut régler urgent je pense.

System drive C: has 3 GB (1%) free of 222 GB

* Copie le tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C)

R1 - HKUS\S-1-5-21-672542660-100148210-598949742-1003\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = cherche.us
R1 - HKUS\S-1-5-21-672542660-100148210-598949742-1003\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://google.cherche.usso-8859-1&q={searchterms}&sourceid=ie7&rls=com.microsoft:en-us&ie=utf8&oe=utf8
R3 - URLSearchHook: SearchHelper Class - {91C18ED5-5E1C-4AE5-A148-A861DE8C8E16} . (...) (No version) -- (.not file.)
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} . (.Ask.com - Ask.com Toolbar.) (5.5.2.106) -- C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} Clé orpheline
O2 - BHO: BrowserHelper Class - {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} Clé orpheline
O2 - BHO: Babylon IE plugin - {9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} Clé orpheline
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} . (.Ask.com - Ask.com Toolbar.) -- C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: XBTBPos00 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} Clé orpheline
O3 - Toolbar: Nero Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} . (.Ask.com - Ask.com Toolbar.) -- C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [FBSSA] C:\Program Files\SGPSA\ie3sh.exe (.not file.)
O4 - HKLM\..\Run: [NWEReboot] Clé orpheline
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe (.not file.)
O8 - Extra context menu item: Translate this web page with Babylon - (.not file.) - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll
O8 - Extra context menu item: Translate with Babylon - (.not file.) - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll
O9 - Extra button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} -- C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (.not file.)
O15 - Trusted Zone: [HKCU\...\Domains] *.chat-land.org
O15 - Trusted Zone: [HKCU\...\Domains\www] *.chat-land.org
[MD5.12AB8BAC533B466676698191344686D9] [APT] [Scheduled Update for Ask Toolbar] (...) -- C:\Program Files\Ask.com\UpdateTask.exe
[MD5.00000000000000000000000000000000] [APT] [{11A5DC3E-C6D9-428F-B2FF-0766A6332F71}] (...) -- C:\Users\Alex\Downloads\eMule\Incoming\(PC Game) Bubble Bobble World 1.2. + KeyGen\(PC Game) Bubble Bobble World 1.2. + KeyGen\bbworld.exe (.not file.)
O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM] -- {86D4B82A-ABED-442A-BE86-96357B70F4FE}
O42 - Logiciel: Java 6 Update 20 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216020FF}
O42 - Logiciel: Java 6 Update 7 - (.Sun Microsystems, Inc..) [HKLM] -- {3248F0A8-6813-11D6-A77B-00B0D0160070}
[HKCU\Software\AppDataLow\AskToolbarInfo]
[HKCU\Software\AppDataLow\Software\AskToolbar]
[HKCU\Software\AppDataLow\Software\Fun Web Products]
[HKCU\Software\AppDataLow\Software\FunWebProducts]
[HKCU\Software\AppDataLow\Software\MyWebSearch]
[HKCU\Software\AppDataLow\Software\ShoppingReport2]
[HKCU\Software\Ask.com]
[HKCU\Software\PopCap]
[HKLM\Software\PopCap]
O43 - CFD: 23/05/2010 - 16:14:12 - [1562998] ----D- C:\Program Files\Ask.com
O43 - CFD: 10/05/2011 - 23:48:16 - [0] ----D- C:\Program Files\Assistant d'installation
O43 - CFD: 10/05/2011 - 23:43:38 - [0] ----D- C:\Program Files\Babylon
O43 - CFD: 22/05/2011 - 00:25:46 - [2681514] ----D- C:\Program Files\PopCap Games
O43 - CFD: 14/05/2011 - 12:06:06 - [85104] ----D- C:\Program Files\QuestScan
O43 - CFD: 22/05/2011 - 00:25:46 - [14] ----D- C:\ProgramData\PopCap Games
O43 - CFD: 14/05/2011 - 12:14:40 - [0] ----D- C:\ProgramData\QuestScan
O43 - CFD: 30/05/2011 - 14:20:18 - [7967881] --H-D- C:\ProgramData\{DE8EABB5-1C85-4410-A68D-79BD8A4518F4}
O43 - CFD: 30/05/2011 - 14:44:46 - [0] ----D- C:\Users\Alex\Appdata\Local\{0246FA30-1257-4A23-B9DA-AD662527962B}
O43 - CFD: 12/06/2011 - 11:27:28 - [0] ----D- C:\Users\Alex\Appdata\Local\{0C8D1339-A298-41D3-92F2-FCC310A1022C}
O43 - CFD: 08/06/2011 - 15:28:32 - [0] ----D- C:\Users\Alex\Appdata\Local\{0EDFDB90-1C4D-4714-B52D-F585523931C2}
O43 - CFD: 11/06/2011 - 10:09:50 - [0] ----D- C:\Users\Alex\Appdata\Local\{11FB980F-EDF2-462D-95C0-FCB8FE9D9350}
O43 - CFD: 31/05/2011 - 12:09:40 - [0] ----D- C:\Users\Alex\Appdata\Local\{156D4F3C-F7DF-41E0-B372-70C8BC35BE7D}
O43 - CFD: 10/06/2011 - 10:33:42 - [0] ----D- C:\Users\Alex\Appdata\Local\{16AC3D99-5389-4AF2-A6E8-8D1FA76453EF}
O43 - CFD: 09/06/2011 - 19:39:48 - [0] ----D- C:\Users\Alex\Appdata\Local\{188A6ACB-07FC-4BB0-9103-C800E66FD0B9}
O43 - CFD: 31/05/2011 - 17:27:24 - [0] ----D- C:\Users\Alex\Appdata\Local\{22F49BA2-4E9E-41BE-A107-8323B40E5A3C}
O43 - CFD: 03/06/2011 - 11:22:32 - [0] ----D- C:\Users\Alex\Appdata\Local\{25A3AFE1-9447-456E-9B0B-553C56475B2A}
O43 - CFD: 11/06/2011 - 10:20:16 - [0] ----D- C:\Users\Alex\Appdata\Local\{283A72F2-E67C-41CC-AE43-C9247BB6020A}
O43 - CFD: 09/06/2011 - 07:39:10 - [0] ----D- C:\Users\Alex\Appdata\Local\{2B2800A5-2A5B-4442-BA10-9087DECC7F17}
O43 - CFD: 02/06/2011 - 23:21:42 - [0] ----D- C:\Users\Alex\Appdata\Local\{2B64356F-E5AB-40CC-8568-D3B73C238A79}
O43 - CFD: 08/06/2011 - 01:26:36 - [0] ----D- C:\Users\Alex\Appdata\Local\{2D5FC91B-050B-4D2C-9DA1-F2A7F06A8ACF}
O43 - CFD: 31/05/2011 - 12:09:20 - [0] ----D- C:\Users\Alex\Appdata\Local\{32103524-4DD6-47BB-BC18-11E21BEDABA3}
O43 - CFD: 16/06/2011 - 02:53:02 - [0] ----D- C:\Users\Alex\Appdata\Local\{329AEAC8-12EB-4A42-903C-F8EDECC6FAEB}
O43 - CFD: 07/06/2011 - 12:05:22 - [0] ----D- C:\Users\Alex\Appdata\Local\{376E9968-E4D5-4ADB-BC18-4C14AFBDAA64}
O43 - CFD: 11/06/2011 - 11:25:44 - [0] ----D- C:\Users\Alex\Appdata\Local\{48C43A42-B26E-4527-8B4C-593632E296E5}
O43 - CFD: 10/06/2011 - 22:49:14 - [0] ----D- C:\Users\Alex\Appdata\Local\{4AB2BB88-EE63-4803-9A82-F146E9DE59D1}
O43 - CFD: 06/06/2011 - 22:38:18 - [0] ----D- C:\Users\Alex\Appdata\Local\{4E74947C-67BB-4849-BAC0-6A46A433BCF0}
O43 - CFD: 29/05/2011 - 15:09:40 - [0] ----D- C:\Users\Alex\Appdata\Local\{53B42175-E7BE-4205-9E00-95380875E52C}
O43 - CFD: 16/06/2011 - 15:13:52 - [0] ----D- C:\Users\Alex\Appdata\Local\{59634F08-1FDF-450E-A1C1-FC7C9270742B}
O43 - CFD: 01/06/2011 - 10:20:24 - [0] ----D- C:\Users\Alex\Appdata\Local\{5D95ADCD-CBC7-4CB7-9A20-82BE65B2B9A8}
O43 - CFD: 30/05/2011 - 10:05:22 - [0] ----D- C:\Users\Alex\Appdata\Local\{5DA2F5EF-6432-4F14-9FD9-E1ADEE6107DF}
O43 - CFD: 17/06/2011 - 14:50:02 - [0] ----D- C:\Users\Alex\Appdata\Local\{652895CF-0432-4E50-994A-79552623123F}
O43 - CFD: 11/06/2011 - 23:26:40 - [0] ----D- C:\Users\Alex\Appdata\Local\{671DB167-3023-4AE7-8231-CD4C4033C278}
O43 - CFD: 05/06/2011 - 09:22:28 - [0] ----D- C:\Users\Alex\Appdata\Local\{716F8CAB-52F7-49ED-9195-2B02AE918260}
O43 - CFD: 16/06/2011 - 03:12:52 - [0] ----D- C:\Users\Alex\Appdata\Local\{76C4EA70-9BF4-4DC6-901D-8881BDFC59EB}
O43 - CFD: 04/06/2011 - 10:47:34 - [0] ----D- C:\Users\Alex\Appdata\Local\{791D9369-5F19-4715-A641-1601C54BC86D}
O43 - CFD: 17/06/2011 - 10:39:16 - [0] ----D- C:\Users\Alex\Appdata\Local\{7BF2006C-FD3C-42E3-85AE-E11513E1E9B0}
O43 - CFD: 17/06/2011 - 12:42:06 - [0] ----D- C:\Users\Alex\Appdata\Local\{7CCA8CB2-3152-44C0-92D4-0278017A21B4}
O43 - CFD: 08/06/2011 - 10:48:56 - [0] ----D- C:\Users\Alex\Appdata\Local\{85B7926B-AAFD-41F9-8664-2DEB755D1D44}
O43 - CFD: 13/06/2011 - 22:32:06 - [0] ----D- C:\Users\Alex\Appdata\Local\{93498CE0-888C-4B6A-82E8-5BF85BA49E32}
O43 - CFD: 01/06/2011 - 14:12:50 - [0] ----D- C:\Users\Alex\Appdata\Local\{95D30F4B-2DC3-4A43-AF23-9CF2DFA21A1B}
O43 - CFD: 12/06/2011 - 23:28:18 - [0] ----D- C:\Users\Alex\Appdata\Local\{9F045DAA-3EC8-4D20-9EB6-33BCDB684612}
O43 - CFD: 04/06/2011 - 14:21:52 - [0] ----D- C:\Users\Alex\Appdata\Local\{B030E6C4-C464-4F1E-B942-45A8C53228E9}
O43 - CFD: 03/06/2011 - 23:35:26 - [0] ----D- C:\Users\Alex\Appdata\Local\{B4CC06CD-7548-497D-9EA4-25E598B3B1F8}
O43 - CFD: 30/05/2011 - 09:58:54 - [0] ----D- C:\Users\Alex\Appdata\Local\{B763BA9B-A242-4AAC-B8F4-E4537AE63CA1}
O43 - CFD: 15/06/2011 - 15:14:02 - [0] ----D- C:\Users\Alex\Appdata\Local\{CCFA5CC7-E4F0-4E44-8875-E008FBE7CB34}
O43 - CFD: 02/06/2011 - 02:13:40 - [0] ----D- C:\Users\Alex\Appdata\Local\{D2CC42A8-7E49-4554-A466-E2E39625908D}
O43 - CFD: 29/05/2011 - 10:59:16 - [0] ----D- C:\Users\Alex\Appdata\Local\{E013A2DA-0BD0-4F2F-B81E-005CAA301DC5}
O43 - CFD: 13/06/2011 - 14:29:28 - [0] ----D- C:\Users\Alex\Appdata\Local\{E5531E61-548C-46D6-85E0-654C2196993D}
O43 - CFD: 14/06/2011 - 13:33:40 - [0] ----D- C:\Users\Alex\Appdata\Local\{E8E4D271-15B3-4256-9057-A1495E0147DB}
O43 - CFD: 14/06/2011 - 20:17:04 - [0] ----D- C:\Users\Alex\Appdata\Local\{E920A61A-138A-4DBE-8191-C2740286F139}
O43 - CFD: 02/06/2011 - 11:20:50 - [0] ----D- C:\Users\Alex\Appdata\Local\{E979BABA-042E-464D-AD15-12F565A3DC1A}
O43 - CFD: 05/06/2011 - 00:11:56 - [0] ----D- C:\Users\Alex\Appdata\Local\{EFD2A0C2-665D-4E82-B1D8-1E58AFE69B2A}
O43 - CFD: 13/06/2011 - 10:42:06 - [0] ----D- C:\Users\Alex\Appdata\Local\{F046CC44-A791-49EC-A9BE-38F5343C858C}
O43 - CFD: 30/05/2011 - 11:46:34 - [0] ----D- C:\Users\Alex\Appdata\Local\{FD6B940A-A520-4371-9316-8290A1A01805}
O51 - MPSK:{67a1af23-5671-11de-a8be-002269f2f673}\AutoRun\command - Clé orpheline
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} - (Search the web (Babylon)) - http://search.babylon.com
O69 - SBI: SearchScopes [HKCU] {AE68614F-2766-45DA-A29B-6AFE5B89FF12} - (Fast Browser Search) - http://www.fastbrowsersearch.com
[MD5.237CBED0B6184B6FC58A98FBC5D7638A] [SPRF] (.MediaGet LLC - MediaGet2 Setup.) -- C:\Users\Alex\AppData\Local\Temp\mediaget_installer.exe [9473024]
[MD5.F2D5E147B31077536DD0854EB686E9C0] [SPRF] (.Microsoft Corporation - AntiMalware Definition Update.) -- C:\Users\Alex\AppData\Local\Temp\mpam-8444b5ee.exe [3842448]
[MD5.77A0EE15C7F8B01CE7B0C6EF96DBDE7E] [SPRF] (.Pas de propriétaire - Setup.) -- C:\Users\Alex\AppData\Local\Temp\setup.exe [430592]
[MD5.17F327C7673713E1554648497D709929] [SPRF] (...) -- C:\Users\Alex\AppData\Local\Temp\_unps.exe [282624]
[HKLM\Software\Classes\AppID\GenericAskToolbar.DLL]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\mywebsearch bar uninstall]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Search Guard Plus Updater]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Search Guard Plus]
[HKLM\Software\Classes\bho.pshelper]
[HKLM\Software\Classes\bho.pshelper.1]
[HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd]
[HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1]
[HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook]
[HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook.1]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}]
[HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}]
[HKLM\Software\Classes\AppID\{055069F3-F78B-4BD1-A277-FE66648D3300}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}]
[HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4a99-B4B6-146BF802613B}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4a99-B4B6-146BF802613B}]
[HKLM\Software\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}]
[HKLM\Software\Classes\TypeLib\{3088c799-9630-4719-a471-4544d7cabc2d}]
[HKLM\Software\Classes\Interface\{3e53e2cb-86db-4a4a-8bd9-ffeb7a64df82}]
[HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}]
[HKLM\Software\Classes\Interface\{4897bba6-48d9-468c-8efa-846275d7701b}]
[HKLM\Software\Classes\Interface\{63d0ed2d-b45b-4458-8b3b-60c69bbbd83c}]
[HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}]
[HKLM\Software\Classes\Interface\{7473d293-b7bb-4f24-ae82-7e2ce94bb6a9}]
[HKLM\Software\Classes\TypeLib\{77AA25E8-6083-4949-A831-9CB11861DC10}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}]
[HKLM\Software\Classes\CLSID\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{91C18ED5-5E1C-4AE5-A148-A861DE8C8E16}]
[HKLM\Software\Classes\CLSID\{91C18ED5-5E1C-4AE5-A148-A861DE8C8E16}]
[HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}]
[HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}]
[HKLM\Software\Classes\Interface\{9ebb289a-2d7b-465b-825f-1530b813e95a}]
[HKLM\Software\Classes\Interface\{a1f1ecd3-4806-44c6-a869-f0dadf11c57c}]
[HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}]
[HKLM\Software\Classes\Interface\{a626cdbd-3d13-4f78-b819-440a28d7e8fc}]
[HKLM\Software\Classes\TypeLib\{AA2E16F2-387A-415F-BA95-B89BAF3AF109}]
[HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E
[HKLM\Software\Classes\Interface\{cd5c92ae-97b0-4bc3-ba65-ba0308d543bf}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[HKLM\Software\Classes\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25f}]
[HKLM\Software\Classes\Interface\{e79dfbc9-5697-4fbd-94e5-5b2a9c7c1612}]
[HKLM\Software\Classes\Interface\{e79dfbcb-5697-4fbd-94e5-5b2a9c7c1612}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F0626A63-410B-45E2-99A1-3F2475B2D695}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F0626A63-410B-45E2-99A1-3F2475B2D695}]
[HKLM\Software\Classes\CLSID\{F0626A63-410B-45E2-99A1-3F2475B2D695}]
[HKLM\Software\Classes\Interface\{f87d7fb5-9dc5-4c8c-b998-d8dfe02e2978}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
[HKLM\Software\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
[HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF]
[HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF]
[HKCU\Software\Ask.com]
[HKCU\Software\Ask.com]
[HKCU\Software\AppDataLow\Software\AskToolbar]
[HKCU\Software\AppDataLow\AskToolbarInfo]
[HKCU\Software\AppDataLow\Software\Fun Web Products]
[HKCU\Software\AppDataLow\Software\FunWebProducts]
[HKCU\Software\PopCap]
[HKLM\Software\PopCap]
[HKLM\Software\QuestScan]
[HKCU\Software\AppDataLow\Software\AskToolbar]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\QuestScan]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\TBSB07183.TBSB07183Toolbar]
[HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]:{00000000-6E41-4FD3-8538-502F5495E5FC}
[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{D4027C7F-154A-4066-A1AD-4243D8127440}
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{D4027C7F-154A-4066-A1AD-4243D8127440}
[HKLM\Software\Microsoft\Windows\CurrentVersion\Run]:FBSSA
C:\Program Files\Ask.com
C:\Program Files\Babylon
C:\Program Files\PopCap Games
C:\Program Files\QuestScan
C:\ProgramData\PopCap Games
C:\ProgramData\QuestScan
C:\Users\Alex\Appdata\LocalLow\BabylonToolbar
C:\Users\Alex\Appdata\LocalLow\FunWebProducts
C:\Users\Alex\Appdata\LocalLow\MyWebSearch
C:\Users\Alex\Appdata\LocalLow\ShoppingReport2
C:\Users\Alex\Appdata\Local\Temp\AskSearch
C:\Windows\system32\Tasks\Scheduled Update for Ask Toolbar
FirewallRaz
EmptyFlash
Emptytemp

Puis Lance ZHPFix depuis le raccourci du bureau.

Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)
- Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes
- Clique sur le bouton « GO » pour lancer le nettoyage,
- Copie/colle la totalité du rapport dans ta prochaine réponse

-> laisse travailler l'outil et ne touche à rien ...

Une fois terminée, un nouveau rapport s'affiche : copie/colle le contenu de ce dernier dans ta prochaine réponse ...

(ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ZHPFixReport.txt)

Important : s'il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le de suite !


Puis mets Malwaresbytes à jour et fait juste un scan rapide

[Nalex_03]

alors, voilà le rapport de ZHPfix

Code: Tout sélectionner

 Rapport de ZHPFix 1.12.3316 par Nicolas Coolman, Update du 16/06/2011
Fichier d'export Registre :
Run by Alex at 23/06/2011 11:22:49
Windows Vista Home Basic Edition, 32-bit Service Pack 2 (Build 6002)
Web site : http://www.premiumorange.com/zeb-help-process/zhpfix.html

========== Logiciel(s) ==========
ABSENT Software Key: {86D4B82A-ABED-442A-BE86-96357B70F4FE}

========== Clé(s) du Registre ==========
SUPPRIME Partiel Software Key: {26A24AE4-039D-4CA4-87B4-2F83216020FF}
SUPPRIME Partiel Software Key: {3248F0A8-6813-11D6-A77B-00B0D0160070}
ABSENT Key: CLSID BHO: {53707962-6F74-2D53-2644-206D7942484F}
ABSENT Key: CLSID BHO: {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
ABSENT Key: CLSID BHO: {9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}
ABSENT Key: CLSID BHO: {D4027C7F-154A-4066-A1AD-4243D8127440}
ABSENT Key: CLSID BHO: {FCBCCB87-9224-4B8D-B117-F56D924BEB18}
SUPPRIME Key: Menu Contextuel: Translate this web page with Babylon
SUPPRIME Key: Menu Contextuel: Translate with Babylon
ABSENT Key: CLSID Extra Buttons: {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478}
ABSENT Trusted Zone: chat-land.org
ABSENT Key: HKCU\Software\AppDataLow\AskToolbarInfo
ABSENT Key: HKCU\Software\AppDataLow\Software\AskToolbar
ABSENT Key: HKCU\Software\AppDataLow\Software\Fun Web Products
ABSENT Key: HKCU\Software\AppDataLow\Software\FunWebProducts
ABSENT Key: HKCU\Software\AppDataLow\Software\MyWebSearch
ABSENT Key: HKCU\Software\AppDataLow\Software\ShoppingReport2
ABSENT Key: HKCU\Software\Ask.com
ABSENT Key: HKCU\Software\PopCap
ABSENT Key: HKLM\Software\PopCap
ERREUR CLSID MPSK: {67a1af23-5671-11de-a8be-002269f2f673}
ABSENT SearchScopes :{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
ABSENT SearchScopes :{AE68614F-2766-45DA-A29B-6AFE5B89FF12}
ABSENT Key: HKLM\Software\Classes\AppID\GenericAskToolbar.DLL
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\mywebsearch bar uninstall
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Search Guard Plus Updater
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Search Guard Plus
ABSENT Key: HKLM\Software\Classes\bho.pshelper
ABSENT Key: HKLM\Software\Classes\bho.pshelper.1
ABSENT Key: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd
ABSENT Key: HKLM\Software\Classes\GenericAskToolbar.ToolbarWnd.1
ABSENT Key: HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook
ABSENT Key: HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook.1
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
ABSENT Key: HKLM\Software\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
ABSENT Key: HKLM\Software\Classes\AppID\{055069F3-F78B-4BD1-A277-FE66648D3300}
ABSENT Key: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}
ABSENT Key: HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4a99-B4B6-146BF802613B}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4a99-B4B6-146BF802613B}
ABSENT Key: HKLM\Software\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}
ABSENT Key: HKLM\Software\Classes\TypeLib\{3088c799-9630-4719-a471-4544d7cabc2d}
ABSENT Key: HKLM\Software\Classes\Interface\{3e53e2cb-86db-4a4a-8bd9-ffeb7a64df82}
ABSENT Key: HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
ABSENT Key: HKLM\Software\Classes\Interface\{4897bba6-48d9-468c-8efa-846275d7701b}
ABSENT Key: HKLM\Software\Classes\Interface\{63d0ed2d-b45b-4458-8b3b-60c69bbbd83c}
ABSENT Key: HKLM\Software\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
ABSENT Key: HKLM\Software\Classes\Interface\{7473d293-b7bb-4f24-ae82-7e2ce94bb6a9}
ABSENT Key: HKLM\Software\Classes\TypeLib\{77AA25E8-6083-4949-A831-9CB11861DC10}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
ABSENT Key: HKLM\Software\Classes\CLSID\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{91C18ED5-5E1C-4AE5-A148-A861DE8C8E16}
ABSENT Key: HKLM\Software\Classes\CLSID\{91C18ED5-5E1C-4AE5-A148-A861DE8C8E16}
ABSENT Key: HKLM\Software\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
ABSENT Key: HKLM\Software\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
ABSENT Key: HKLM\Software\Classes\Interface\{9ebb289a-2d7b-465b-825f-1530b813e95a}
ABSENT Key: HKLM\Software\Classes\Interface\{a1f1ecd3-4806-44c6-a869-f0dadf11c57c}
ABSENT Key: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
ABSENT Key: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
ABSENT Key: HKLM\Software\Classes\Interface\{a626cdbd-3d13-4f78-b819-440a28d7e8fc}
ABSENT Key: HKLM\Software\Classes\TypeLib\{AA2E16F2-387A-415F-BA95-B89BAF3AF109}
ABSENT Key: HKLM\Software\Classes\Interface\{cd5c92ae-97b0-4bc3-ba65-ba0308d543bf}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
ABSENT Key: HKLM\Software\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
ABSENT Key: HKLM\Software\Classes\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25f}
ABSENT Key: HKLM\Software\Classes\Interface\{e79dfbc9-5697-4fbd-94e5-5b2a9c7c1612}
ABSENT Key: HKLM\Software\Classes\Interface\{e79dfbcb-5697-4fbd-94e5-5b2a9c7c1612}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F0626A63-410B-45E2-99A1-3F2475B2D695}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F0626A63-410B-45E2-99A1-3F2475B2D695}
ABSENT Key: HKLM\Software\Classes\CLSID\{F0626A63-410B-45E2-99A1-3F2475B2D695}
ABSENT Key: HKLM\Software\Classes\Interface\{f87d7fb5-9dc5-4c8c-b998-d8dfe02e2978}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
ABSENT Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
ABSENT Key: HKLM\Software\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
ABSENT Key: HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
ABSENT Key: HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
ABSENT Key: HKLM\Software\QuestScan
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\QuestScan
ABSENT Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\TBSB07183.TBSB07183Toolbar

========== Valeur(s) du Registre ==========
ABSENT URLSearchHook: {91C18ED5-5E1C-4AE5-A148-A861DE8C8E16}
ABSENT URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC}
ABSENT Toolbar: {D4027C7F-154A-4066-A1AD-4243D8127440}
ABSENT RunValue: FBSSA
ABSENT RunValue: NWEReboot
ABSENT RunValue: avast5
ABSENT [HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]:{00000000-6E41-4FD3-8538-502F5495E5FC}
ABSENT [HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{D4027C7F-154A-4066-A1AD-4243D8127440}
ABSENT [HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{D4027C7F-154A-4066-A1AD-4243D8127440}
ABSENT [HKLM\Software\Microsoft\Windows\CurrentVersion\Run]:FBSSA
ABSENT Valeur Standard Profile: FirewallRaz :
ABSENT Valeur Domain Profile: FirewallRaz :
ERREUR FirewallRaz (Public) : TCP Query User{EC56B36D-5012-4449-A4FF-5ABBB3038EC2}C:\users\alex\appdata\local\microsoft\windows\temporary internet files\content.ie5\x8svmls7\pengupop[1].exe
ERREUR FirewallRaz (Public) : UDP Query User{F0673FDC-796E-4889-80DA-8E9EC1CD2650}C:\users\alex\appdata\local\microsoft\windows\temporary internet files\content.ie5\x8svmls7\pengupop[1].exe
ERREUR FirewallRaz (None) : {B25C10F8-2115-4D63-ACB7-33A9EFA661C5}

========== Elément(s) de donnée du Registre ==========
SUPPRIME Trusted Zone: chat-land.org

========== Dossier(s) ==========
ABSENT C:\Program Files\Ask.com
ABSENT C:\Program Files\Assistant d'installation
ABSENT C:\Program Files\Babylon
ABSENT C:\Program Files\PopCap Games
ABSENT C:\Program Files\QuestScan
ABSENT C:\ProgramData\PopCap Games
ABSENT C:\ProgramData\QuestScan
ABSENT C:\ProgramData\{DE8EABB5-1C85-4410-A68D-79BD8A4518F4}
ABSENT C:\Users\Alex\Appdata\Local\{0246FA30-1257-4A23-B9DA-AD662527962B}
ABSENT C:\Users\Alex\Appdata\Local\{0C8D1339-A298-41D3-92F2-FCC310A1022C}
ABSENT C:\Users\Alex\Appdata\Local\{0EDFDB90-1C4D-4714-B52D-F585523931C2}
ABSENT C:\Users\Alex\Appdata\Local\{11FB980F-EDF2-462D-95C0-FCB8FE9D9350}
ABSENT C:\Users\Alex\Appdata\Local\{156D4F3C-F7DF-41E0-B372-70C8BC35BE7D}
ABSENT C:\Users\Alex\Appdata\Local\{16AC3D99-5389-4AF2-A6E8-8D1FA76453EF}
ABSENT C:\Users\Alex\Appdata\Local\{188A6ACB-07FC-4BB0-9103-C800E66FD0B9}
ABSENT C:\Users\Alex\Appdata\Local\{22F49BA2-4E9E-41BE-A107-8323B40E5A3C}
ABSENT C:\Users\Alex\Appdata\Local\{25A3AFE1-9447-456E-9B0B-553C56475B2A}
ABSENT C:\Users\Alex\Appdata\Local\{283A72F2-E67C-41CC-AE43-C9247BB6020A}
ABSENT C:\Users\Alex\Appdata\Local\{2B2800A5-2A5B-4442-BA10-9087DECC7F17}
ABSENT C:\Users\Alex\Appdata\Local\{2B64356F-E5AB-40CC-8568-D3B73C238A79}
ABSENT C:\Users\Alex\Appdata\Local\{2D5FC91B-050B-4D2C-9DA1-F2A7F06A8ACF}
ABSENT C:\Users\Alex\Appdata\Local\{32103524-4DD6-47BB-BC18-11E21BEDABA3}
ABSENT C:\Users\Alex\Appdata\Local\{329AEAC8-12EB-4A42-903C-F8EDECC6FAEB}
ABSENT C:\Users\Alex\Appdata\Local\{376E9968-E4D5-4ADB-BC18-4C14AFBDAA64}
ABSENT C:\Users\Alex\Appdata\Local\{48C43A42-B26E-4527-8B4C-593632E296E5}
ABSENT C:\Users\Alex\Appdata\Local\{4AB2BB88-EE63-4803-9A82-F146E9DE59D1}
ABSENT C:\Users\Alex\Appdata\Local\{4E74947C-67BB-4849-BAC0-6A46A433BCF0}
ABSENT C:\Users\Alex\Appdata\Local\{53B42175-E7BE-4205-9E00-95380875E52C}
ABSENT C:\Users\Alex\Appdata\Local\{59634F08-1FDF-450E-A1C1-FC7C9270742B}
ABSENT C:\Users\Alex\Appdata\Local\{5D95ADCD-CBC7-4CB7-9A20-82BE65B2B9A8}
ABSENT C:\Users\Alex\Appdata\Local\{5DA2F5EF-6432-4F14-9FD9-E1ADEE6107DF}
ABSENT C:\Users\Alex\Appdata\Local\{652895CF-0432-4E50-994A-79552623123F}
ABSENT C:\Users\Alex\Appdata\Local\{671DB167-3023-4AE7-8231-CD4C4033C278}
ABSENT C:\Users\Alex\Appdata\Local\{716F8CAB-52F7-49ED-9195-2B02AE918260}
ABSENT C:\Users\Alex\Appdata\Local\{76C4EA70-9BF4-4DC6-901D-8881BDFC59EB}
ABSENT C:\Users\Alex\Appdata\Local\{791D9369-5F19-4715-A641-1601C54BC86D}
ABSENT C:\Users\Alex\Appdata\Local\{7BF2006C-FD3C-42E3-85AE-E11513E1E9B0}
ABSENT C:\Users\Alex\Appdata\Local\{7CCA8CB2-3152-44C0-92D4-0278017A21B4}
ABSENT C:\Users\Alex\Appdata\Local\{85B7926B-AAFD-41F9-8664-2DEB755D1D44}
ABSENT C:\Users\Alex\Appdata\Local\{93498CE0-888C-4B6A-82E8-5BF85BA49E32}
ABSENT C:\Users\Alex\Appdata\Local\{95D30F4B-2DC3-4A43-AF23-9CF2DFA21A1B}
ABSENT C:\Users\Alex\Appdata\Local\{9F045DAA-3EC8-4D20-9EB6-33BCDB684612}
ABSENT C:\Users\Alex\Appdata\Local\{B030E6C4-C464-4F1E-B942-45A8C53228E9}
ABSENT C:\Users\Alex\Appdata\Local\{B4CC06CD-7548-497D-9EA4-25E598B3B1F8}
ABSENT C:\Users\Alex\Appdata\Local\{B763BA9B-A242-4AAC-B8F4-E4537AE63CA1}
ABSENT C:\Users\Alex\Appdata\Local\{CCFA5CC7-E4F0-4E44-8875-E008FBE7CB34}
ABSENT C:\Users\Alex\Appdata\Local\{D2CC42A8-7E49-4554-A466-E2E39625908D}
ABSENT C:\Users\Alex\Appdata\Local\{E013A2DA-0BD0-4F2F-B81E-005CAA301DC5}
ABSENT C:\Users\Alex\Appdata\Local\{E5531E61-548C-46D6-85E0-654C2196993D}
ABSENT C:\Users\Alex\Appdata\Local\{E8E4D271-15B3-4256-9057-A1495E0147DB}
ABSENT C:\Users\Alex\Appdata\Local\{E920A61A-138A-4DBE-8191-C2740286F139}
ABSENT C:\Users\Alex\Appdata\Local\{E979BABA-042E-464D-AD15-12F565A3DC1A}
ABSENT C:\Users\Alex\Appdata\Local\{EFD2A0C2-665D-4E82-B1D8-1E58AFE69B2A}
ABSENT C:\Users\Alex\Appdata\Local\{F046CC44-A791-49EC-A9BE-38F5343C858C}
ABSENT C:\Users\Alex\Appdata\Local\{FD6B940A-A520-4371-9316-8290A1A01805}
SUPPRIME Flash Cookies: 6
SUPPRIME Temporaires Windows: : 4

========== Fichier(s) ==========
ABSENT File: c:\program files\ask.com
ABSENT File: c:\program files\sgpsa\ie3sh.exe
ABSENT File: c:\progra~1\alwils~1\avast5\avastui.exe
ABSENT File: c:\program files\babylon\babylon-pro\utils\babyloniepi.dll
ABSENT Folder/File: c:\program files\ask.com\updatetask.exe
ABSENT Folder/File: c:\users\alex\appdata\local\temp\mediaget_installer.exe
ABSENT Folder/File: c:\users\alex\appdata\local\temp\mpam-8444b5ee.exe
ABSENT Folder/File: c:\users\alex\appdata\local\temp\setup.exe
ABSENT Folder/File: c:\users\alex\appdata\local\temp\_unps.exe
ABSENT Folder/File: c:\program files\ask.com
ABSENT Folder/File: c:\program files\babylon
ABSENT Folder/File: c:\program files\popcap games
ABSENT Folder/File: c:\program files\questscan
ABSENT Folder/File: c:\programdata\popcap games
ABSENT Folder/File: c:\programdata\questscan
SUPPRIME File: C:\Users\Alex\Appdata\LocalLow\BabylonToolbar
ABSENT Folder/File: c:\users\alex\appdata\locallow\funwebproducts
ABSENT Folder/File: c:\users\alex\appdata\locallow\mywebsearch
ABSENT Folder/File: c:\users\alex\appdata\locallow\shoppingreport2
ABSENT Folder/File: c:\users\alex\appdata\local\temp\asksearch
ABSENT Folder/File: c:\windows\system32\tasks\scheduled update for ask toolbar
SUPPRIME Flash Cookies: 5
SUPPRIME Temporaires Windows: : 29

========== Tache planifiée ==========
ABSENT Task: Scheduled Update for Ask Toolbar
ABSENT Task: {11A5DC3E-C6D9-428F-B2FF-0766A6332F71}

========== Autre ==========
NON TRAITE [HKLM\Software\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E


========== Récapitulatif ==========
87 : Clé(s) du Registre
15 : Valeur(s) du Registre
1 : Elément(s) de donnée du Registre
57 : Dossier(s)
23 : Fichier(s)
1 : Logiciel(s)
2 : Tache planifiée
1 : Autre


========== Chemin du fichier rapport ==========
C:\Program Files\ZHPDiag\ZHPFixReport.txt


End of the scan

Et ensuite j'ai lancé Malwarebyte's qui n'a rien trouvé, ms ça continue tjs d'envoyer d mails.

[bernard53]

Dis moi tu as essayer de filtrer les indésirable par l'anti spam de Windows live.

http://www.generation-nt.com/antispam-h ... 277-0.html