C'est la merde Seven. Passe la première étape avec cmd et fais TOUT le reste.
Enfin "c'est la merde" : pas un mauvais OS je voulais dire, mais c'est nouveau, il a donc beaucoup d'incompatibilités, et en l'occurrence pour désinfecter c'est pas tip top. Sans compter que je ne connais absolument pas l'architecture du système.
Aussi, si les programmes en question sont présents dans l'ajout suppression de programme, désinstalle-les.
re evilelf, dsl j'ai eu des problème avec internet , voila je suis re
j'ai fait tout ce que tu m'a conseiller de faire ,
Voila mon nouveau rapport :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:02:23, on 16/12/2009
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Axel\Downloads\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Automated Content Enhancer - {1D74E9DD-8987-448b-B2CB-67FFF2B8A932} - C:\Program Files (x86)\Automated Content Enhancer\4.1.0.5260\ACEIEAddOn.dll (file missing)
O2 - BHO: Customized Platform Advancer - {42C7C39F-3128-4a17-BDB7-91C46032B5B9} - C:\Program Files (x86)\Customized Platform Advancer\4.1.0.1850\CPAIEAddOn.dll (file missing)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Content Management Wizard - {B72681C0-A222-4b21-A0E2-53A5A5CA3D41} - C:\Program Files (x86)\Content Management Wizard\1.1.0.1990\CMWIE.dll (file missing)
O2 - BHO: Textual Content Provider - {CAC89FF9-34A9-4431-8CFE-292A47F843BC} - C:\Program Files (x86)\Textual Content Provider\1.1.0.1810\TCPIE.dll (file missing)
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O2 - BHO: Web Search Operator - {EB4A577D-BCAD-4b1c-8AF2-9A74B8DD3431} - C:\Program Files (x86)\Web Search Operator\4.1.0.1990\wso.dll (file missing)
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Gameztar Toolbar - {D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2} - C:\Program Files (x86)\Gameztar Toolbar\2.1.3.6670\mvb0.dll (file missing)
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Internet Today Task] "C:\Program Files (x86)\Internet Today\1.1.0.1260\InternetToday.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Steam] "c:\program files (x86)\steam\steam.exe" -silent
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: E&xporter vers Microsoft Excel -
res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O13 - Gopher Prefix:
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: QuestService Service - Unknown owner - C:\ProgramData\QuestService\questservice129.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 7662 bytes
Ps : Pour le moment , aucune pub ne s'est afficher , ca a l'air de marcher
Merci énormément en tout cas , et il faudrait plus de gens comme toi sur ce forum ![]()
par contre , je n'ai pas supprimer
C:\ProgramData\QuestService\
Car je ne l'ai pas trouver ,
mais apparemment le problème ne venait pas de la
B'soir,
On a été deux pendant une période qui pratiquent ce genre de dépannage, maintenant il y a plus personnes
Sauf quand l'un de nous passe de temps en temps. Quoiqu'il en soit, il existe des forums spécialisés en sécurité, plus adaptés à la désinfection.
Bref, il reste encore des traces dans le registre. MBAM va les enlever.
Fais un scan avec Malwarebyte's antimalware, supprime la sélection infectée et poste le rapport. Tuto :
http://www.malekal.com/tutorial_MalwareBytes_AntiMalware.php
examen en cours ;
comment je peut etre autant infecté alors que je vien tout juste d'avoir cette ordinateur , et qu'il est proteger
T'es pas énormément infecté rassure-toi
En revanche, j'avoue n'avoir encore jamais vu ces infections, et je ne me suis pas encore renseigné pour savoir comment elle se propage.
Quoiqu'il en soit, si tu veux éviter toutes infections, je te conseille VIVEMENT, d'utiliser un compte utilisateur dont les droits sont restreints. En utilisant un compte admin, tu laisses libre accès à toutes modifications, et donc à toutes installations, dont les installations de malwares ... Il te suffit alors de switcher sur le compte admin si tu souhaites opérer une modif sur ton système etc.
En tout cas (navré pour le double poste encore une fois
), c'est sujet à des toolbars. Un bon nombre de toolbars sont infectieuses, et correspondent à des adwares. Mais rassure toi, ce n'est pas le genre d'infection le plus compromettant, et ça reste très basique pour les virer comme tu as pu le voir ![]()
oué mais pour ce faire , il faudra que je réinstalle tout les programmes , que je ramène tout mes film et toutes mes musiques .... ca risque d'être bien compliquer
voila le rapport :
Malwarebytes' Anti-Malware 1.42
Version de la base de données: 3376
Windows 6.1.7600
Internet Explorer 8.0.7600.16385
16/12/2009 22:38:53
mbam-log-2009-12-16 (22-38-53).txt
Type de recherche: Examen complet (C:\|)
Eléments examinés: 188592
Temps écoulé: 19 minute(s), 10 second(s)
Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 51
Valeur(s) du Registre infectée(s): 7
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 7
Fichier(s) infecté(s): 37
Processus mémoire infecté(s):
(Aucun élément nuisible détecté)
Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)
Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\explorerbar.cmw (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\explorerbar.cmw.1 (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\explorerbar.funexplorer (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\explorerbar.funexplorer.1 (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\explorerbar.funredirector (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\explorerbar.funredirector.1 (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\explorerbar.tcp (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\explorerbar.tcp.1 (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{480098c6-f6ad-4c61-9b
5c-2bae228a34d1} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{6160f76a-1992-4b17-a3
2d-0c706d159105} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{42c7c39f-3128-4a17-bdb7-9
1c46032b5b9} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{1d74e9dd-8987-448b-b2cb-6
7fff2b8a932} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{b72681c0-a222-4b21-a0e2-5
3a5a5ca3d41} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{cac89ff9-34a9-4431-8cfe-2
92a47f843bc} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{eb4a577d-bcad-4b1c-8af2-9
a74b8dd3431} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{3de88beb-f271-484a-ba71-0
1d30f439f0c} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{50ad41d2-b1f0-47cc-9ea7-3
95355eaeebd} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{8ceb185e-81a5-46d3-bc20-c
555d605afbd} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a72522ba-9ff3-4c83-abc6-9
b476728a396} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{c5762628-ae15-4ca6-96c4-b
00dd17f3419} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{d062e03e-65ca-49e4-9b15-3
1938ba98922} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{d45817b8-3ead-4d1d-8fca-e
c63a8e35de2} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{883dfc00-8a21-411d-956c
-73a4e4b7d16f} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{ac5ab953-ed25-4f9c-87f0
-b086b0178ffa} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Explorer\Bars
\{cac89ff9-34a9-4431-8cfe-292a47f843bc} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Explorer\Bars
\{b72681c0-a222-4b21-a0e2-53a5a5ca3d411} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Ext\Stats\{42c7c39f-3128-4a17-bdb7-91c46
032b5b9} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Ext\Stats\{1d74e9dd-8987-448b-b2cb-67fff
2b8a932} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Ext\Stats\{b72681c0-a222-4b21-a0e2-53a5a
5ca3d41} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Ext\Stats\{cac89ff9-34a9-4431-8cfe-292a4
7f843bc} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Ext\Stats\{eb4a577d-bcad-4b1c-8af2-9a74b
8dd3431} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Ext\Stats\{d45817b8-3ead-4d1d-8fca-ec63a
8e35de2} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\{d45817b8-3ead-4d1d-8f
ca-ec63a8e35de2} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Ext\Settings\{42c7c39f-3128-4a17-bdb7-91
c46032b5b9} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Ext\Settings\{1d74e9dd-8987-448b-b2cb-67
fff2b8a932} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Ext\Settings\{b72681c0-a222-4b21-a0e2-53
a5a5ca3d41} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Ext\Settings\{cac89ff9-34a9-4431-8cfe-29
2a47f843bc} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Ext\Settings\{eb4a577d-bcad-4b1c-8af2-9a
74b8dd3431} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre
ntVersion\Ext\Settings\{d45817b8-3ead-4d1d-8fca-ec
63a8e35de2} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Explorer\Browser Helper Objects\{42c7c39f-3128-4a17-bdb7-91c46032b5b9} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Explorer\Browser Helper Objects\{1d74e9dd-8987-448b-b2cb-67fff2b8a932} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Explorer\Browser Helper Objects\{b72681c0-a222-4b21-a0e2-53a5a5ca3d41} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Explorer\Browser Helper Objects\{cac89ff9-34a9-4431-8cfe-292a47f843bc} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Explorer\Browser Helper Objects\{eb4a577d-bcad-4b1c-8af2-9a74b8dd3431} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Uninstall\questservice (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\{D45817B8-3EAD-4d1d-8FCA-EC63A8E
35DE2} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\AppDataLow\SOFTWARE\In
ternet Today (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\QuestService (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic
es\QuestService Service (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Funband Serach (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Funband Serach (Adware.DoubleD) -> Quarantined and deleted successfully.
Valeur(s) du Registre infectée(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet
Explorer\Toolbar\WebBrowser\{d45817b8-3ead-4d1d-8f
ca-ec63a8e35de2} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet
Explorer\Toolbar\{d45817b8-3ead-4d1d-8fca-ec63a8e3
5de2} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extens
ions\{40f1eb95-4de4-4f36-a826-054ee36bb905} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extens
ions\{8141440e-08f0-4339-9959-5c31c6a69f23} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extens
ions\{e63605fc-d583-4c81-867f-9457bdb3ea1b} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\Extens
ions\{e889f097-b0be-471b-89ad-b86b6f04b506} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Run\internet today task (Adware.Agent) -> Quarantined and deleted successfully.
Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr
entVersion\Policies\Explorer\NoActiveDesktopChange
s (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Dossier(s) infecté(s):
C:\ProgramData\QuestService (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files (x86)\QuestService (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\Local Settings\Application Data\Customized Platform Advancer (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\Local Settings\Application Data\Customized Platform Advancer\4.1.0.1850 (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\Local Settings\Application Data\Internet Today (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\Local Settings\Application Data\Web Search Operator (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\Local Settings\Application Data\Web Search Operator\4.1.0.1990 (Adware.DoubleD) -> Quarantined and deleted successfully.
Fichier(s) infecté(s):
C:\$Recycle.Bin\S-1-5-21-3564127654-2291450286-220
9773552-1004\$RQGDVEX.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files (x86)\QuestService\uninstall.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\ProgramData\{FE09428E-9E54-4117-AC27-50C2DA4B2E
C3}\OFFLINE\48C8FBD2\B94081D6\ProductInfo.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\ProgramData\{FE09428E-9E54-4117-AC27-50C2DA4B2E
C3}\OFFLINE\53CCABA1\B94081D6\mvbdl.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\ProgramData\{FE09428E-9E54-4117-AC27-50C2DA4B2E
C3}\OFFLINE\75918810\B94081D6\mvbapp.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\ProgramData\{FE09428E-9E54-4117-AC27-50C2DA4B2E
C3}\OFFLINE\mFileBagIDE.dll\bag\aiaSetup.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\ProgramData\{FE09428E-9E54-4117-AC27-50C2DA4B2E
C3}\OFFLINE\mFileBagIDE.dll\bag\CMWSetup.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\ProgramData\{FE09428E-9E54-4117-AC27-50C2DA4B2E
C3}\OFFLINE\mFileBagIDE.dll\bag\ITSetup.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\ProgramData\{FE09428E-9E54-4117-AC27-50C2DA4B2E
C3}\OFFLINE\mFileBagIDE.dll\bag\ProductInfo.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\ProgramData\{FE09428E-9E54-4117-AC27-50C2DA4B2E
C3}\OFFLINE\mFileBagIDE.dll\bag\psksetup.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\ProgramData\{FE09428E-9E54-4117-AC27-50C2DA4B2E
C3}\OFFLINE\mFileBagIDE.dll\bag\sessetup.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\ProgramData\{FE09428E-9E54-4117-AC27-50C2DA4B2E
C3}\OFFLINE\mFileBagIDE.dll\bag\TPSetup.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\AppData\Local\Microsoft\Windows\Temp
orary Internet Files\Content.IE5\3P8N9Q00\acesetup[1].exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\AppData\Local\Microsoft\Windows\Temp
orary Internet Files\Content.IE5\3P8N9Q00\productinfo[1].dll (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\AppData\Local\Microsoft\Windows\Temp
orary Internet Files\Content.IE5\3P8N9Q00\tcpsetup[1].exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\AppData\Local\Microsoft\Windows\Temp
orary Internet Files\Low\Gameztar Toolbar\2.1.3.6670\bin\mvbup.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\AppData\Local\Microsoft\Windows\Temp
orary Internet
Files\Low\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\m
vbup.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\AppData\Local\Microsoft\Windows\Temp
orary Internet
Files\Low\{D45817B8-3EAD-4d1d-8FCA-EC63A8E35DE2}\p
roductinfo.dll (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\ProgramData\QuestService\questservice129.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files (x86)\QuestService\questservice.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\Local Settings\Application Data\Customized Platform Advancer\4.1.0.1850\config.md (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\Local Settings\Application Data\Customized Platform Advancer\4.1.0.1850\HJHP_20091212-010831.452.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\Local Settings\Application Data\Customized Platform Advancer\4.1.0.1850\HJHP_20091212-211310.919.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\Local Settings\Application Data\Customized Platform Advancer\4.1.0.1850\HJHP_20091212-214218.078.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\Local Settings\Application Data\Customized Platform Advancer\4.1.0.1850\HJHP_20091212-214632.236.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\Local Settings\Application Data\Customized Platform Advancer\4.1.0.1850\HJHP_20091212-214745.717.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\Local Settings\Application Data\Customized Platform Advancer\4.1.0.1850\HJHP_20091212-225847.933.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\Local Settings\Application Data\Customized Platform Advancer\4.1.0.1850\HJHP_20091213-050326.409.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\Local Settings\Application Data\Customized Platform Advancer\4.1.0.1850\HJHP_20091213-175152.880.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\Local Settings\Application Data\Customized Platform Advancer\4.1.0.1850\HJHP_20091213-182325.931.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\Local Settings\Application Data\Customized Platform Advancer\4.1.0.1850\HJHP_20091213-183631.981.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\Local Settings\Application Data\Customized Platform Advancer\4.1.0.1850\HJHP_20091213-183632.606.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\Local Settings\Application Data\Customized Platform Advancer\4.1.0.1850\HJHP_20091213-184921.255.log (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\Local Settings\Application Data\Web Search Operator\4.1.0.1990\config.md (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\Local Settings\Application Data\Web Search Operator\4.1.0.1990\rstatus.md (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Users\Axel\Favorites\MyQuickFinder.url (Adware.DoubleD) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Mozilla Firefox\searchPlugins\questservice129.xml (Adware.DoubleD) -> Quarantined and deleted successfully.
HuHu ! Tu veux toujours pas passé sous un compte limité ?
A priori c'est clean
Plus de souci ?
bah oué c'est ce qu'il faudrait que je face , mais j'ai trop de trucs sur cette session ^^
oui tout est clean , plus aucun soucis , un grand grand grand merci a toi
amicalement