• Copies le contenu du cadre ci dessous dans un fichier.txt
(Clique-droit sur ton bureau et tu choisis "Nouveau > Document Texte")
- Code: Tout sélectionner
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\RegClean Pro_UPDATES.job => Infection Rogue (Rogue.RegistryPowerCleaner)
O39 - APT:Automatic Planified Task - C:\WINDOWS\Tasks\RegClean Pro_DEFAULT.job => Infection Rogue (Rogue.RegistryPowerCleaner)
O43 - CFD: 05/09/2012 - 19:33:26 - [1,091] ----D C:\Documents and Settings\evelyne\Application Data\Iminent => Infection PUP (Adware.IMBooster)
O53 - SMSR:HKLM\...\startupreg\Saxo [Key] . (.Carpe Diem - Saxo.) -- C:\Program Files\Saxo\Saxo.exe => Infection Diverse
[HKLM\Software\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}] => Infection BT (Adware.IMBooster)
[HKLM\Software\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}] => Infection BT (Adware.IMBooster)
[HKLM\Software\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}] => Infection BT (Adware.IMBooster)
[HKLM\Software\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}] => Infection BT (Adware.IMBooster)
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}] => Infection BT (Adware.MyWebSearch)
[HKLM\Software\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}] => Infection PUP (PUP.RewardsArcade)
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4a99-B4B6-146BF802613B}] => Infection BT (Toolbar.Babylon)
[HKLM\Software\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}] => Infection BT (Adware.IMBooster)
[HKLM\Software\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}] => Infection PUP (PUP.RewardsArcade)
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}] => Infection PUP (Adware.IMBooster)
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}] => Infection PUP (Adware.IMBooster)
[HKLM\Software\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}] => Infection PUP (PUP.RewardsArcade)
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{c7b76b90-3455-4ae6-a752-eac4d19689e5}]
[HKLM\Software\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}] => Infection BT (Adware.IMBooster)
[HKLM\Software\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}] => Infection PUP (PUP.RewardsArcade)
[HKLM\Software\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}] => Infection PUP (PUP.RewardsArcade)
C:\Documents and Settings\evelyne\Application Data\Iminent => Infection PUP (Adware.IMBooster)
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Media Connect.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Connect 2\WMCCFG.exe
O4 - Global Startup: C:\Documents And Settings\All Users\Menu Démarrer\Programmes\Windows Media Connect.lnk . (.Microsoft Corporation.) -- C:\Program Files\Windows Media Connect 2\WMCCFG.exe
O53 - SMSR:HKLM\...\startupreg\IMJPMIG8.1 [Key] . (.Microsoft Corporation - Microsoft IME.) -- C:\WINDOWS\IME\imjp8_1\IMJPMIG.exe
O53 - SMSR:HKLM\...\startupreg\NeroFilterCheck [Key] . (...) -- C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe (.not file.) => Ahead%Nero Burning Rom
R3 - URLSearchHook: (no name) - . (...) (No version) -- (.not file.)
O2 - BHO: (no name) - {14CEEAFF-96DD-4101-AE37-D5ECDC23C3F6} Clé orpheline
O2 - BHO: Security Helper {B3312915-9368-4FE4-8D4E-B60E5B36D0FF} - {B3312915-9368-4FE4-8D4E-B60E5B36D0FF} Clé orpheline
O2 - BHO: (no name) - {D5D33A26-F043-4808-B335-6B10630E04F8} Clé orpheline
O4 - HKLM\..\Run: [KernelFaultCheck] Clé orpheline
O4 - HKCU\..\Run: [SpybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe => Safer Net Working%Spybot S&D
O4 - HKUS\S-1-5-21-1570106061-833509052-641237796-1006\..\Run: [SpybotSD TeaTimer] . (.Safer-Networking Ltd. - System settings protector.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe => Safer Net Working%Spybot S&D
O42 - Logiciel: Spybot - Search & Destroy - (.Safer Networking Limited.) [HKLM] -- {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1 => Safer Networking Limited Spybot - S&D
[HKLM\Software\Boonty] => Boonty Game
O43 - CFD: 03/07/2008 - 20:41:14 - [2,234] ----D C:\Program Files\Boonty => Boonty Game
O43 - CFD: 03/07/2008 - 20:41:18 - [0] ----D C:\Program Files\BoontyGames => Boonty Game
O43 - CFD: 13/08/2010 - 00:01:04 - [62,408] ----D C:\Program Files\Spybot - Search & Destroy => Spybot - Search & Destroy
O43 - CFD: 03/07/2008 - 20:43:02 - [0,066] ----D C:\Program Files\Fichiers communs\BOONTY Shared => Boonty%Boonty Games
O47 - AAKE:Key Export SP - "C:\Documents and Settings\evelyne\Bureau\BlueSoleil.exe" [Enabled] .(...) -- C:\Documents and Settings\evelyne\Bureau\BlueSoleil.exe (.not file.)
O47 - AAKE:Key Export SP - "C:\Documents and Settings\MANUEL\Mes documents\BlueSoleil.exe" [Enabled] .(...) -- C:\Documents and Settings\MANUEL\Mes documents\BlueSoleil.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\KiesTrayAgent [Key] . (...) -- C:\Documents and Settings\evelyne\Bureau\Kies\KiesTrayAgent.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\news-1tpe [Key] . (...) -- C:\Documents and Settings\evelyne\Bureau\favories\news-1tpe.exe (.not file.)
O61 - LFC:Last File Created 14/09/2012 - 15:45:30 ---A- C:\Documents And Settings\All Users\Application Data\Spybot - Search & Destroy\ProcCache.sbc [80101] => Spybot Search & Destroy
O64 - Services: CurCS - 03/07/2008 - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe (Boonty Games) .(.BOONTY - System Level Service Utility.) - LEGACY_BOONTY_GAMES
SS - | Demand 03/07/2008 69120 | C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe (Boonty Games) . (.BOONTY.) - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe => Boonty%Boonty Games
O43 - CFD: 01/01/2010 - 12:27:52 - [0] ----D C:\Documents and Settings\evelyne\Application Data\magentictb => Toolbar.IncrediMail
O69 - SBI: SearchScopes [HKCU] {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} [DefaultScope] - (Search the web (Babylon)) - http://search.babylon.com => Toolbar.Babylon
[HKLM\Software\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}] => Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}] => Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}] => Toolbar.Ask
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{eee6c35b-6118-11dc-9c72-001320c79847}] => Toolbar.SweetIM
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}] => Toolbar.SweetIM
[HKCU\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser]:{7009fcd4-05be-44f4-9583-93fe419ab7b0} => Toolbar.Conduit
EmptyTemp
EmptyFlash
FirewallRaz
ProxyFix
•
DÉCONNECTES TOI D'INTERNET ET FERMES TOUTES TES APPLICATIONS/!\ Utilisateur de Windows Vista et Windows Seven : Clique droit sur le logo de ZHPFix, « Exécuter en tant qu'Administrateur » /!\• Lances ZHPFix qui est sur ton Bureau.
• Copies & Colles le texte qui est dans ton Document Texte sur ton Bureau.
• Cliques sur le bouton
H.
• Dans l'encadré principal tu verras donc les lignes que tu as copié précédemment apparaître.
• Cliques sur le bouton
GO.
• Patientes le temps de la Suppression.
• ZHPFix va copier le rapport d'analyse sur le Bureau sous le nom ZHPFixReport.txt
• Héberges le rapport ZHPFixReport.txt sur
CJoint.com• Postes le lien donné.