connexion sur certains sites impossibles

[lamygale38]

Bonjour,
je viens vers vous car j ai un ordinateur sur lequel je ne peux pas acceder á certains sites du Net.
J arrive par exemple a aller sur google mais pas sur Malkal. L erreur se fait sur IE et Mozilla. Il marque que la page n a pas pu s ouvrir.
J ai fait un scan avec OTL
Voici le Rapport
OTL logfile created on: 19/08/2011 12:55:24 - Run 1
OTL by OldTimer - Version 3.2.22.2 Folder = C:\Users\linda\Desktop
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.16643)
Locale: 0000040C | Country: France | Language: FRA | Date Format: dd/MM/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 62.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 80.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 290.73 Gb Total Space | 202.73 Gb Free Space | 69.73% Space Free | Partition Type: NTFS
Drive D: | 7.36 Gb Total Space | 0.98 Gb Free Space | 13.36% Space Free | Partition Type: NTFS
Drive G: | 15.06 Gb Total Space | 14.13 Gb Free Space | 93.85% Space Free | Partition Type: NTFS

Computer Name: PC-DE-LINDA | User Name: linda | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\linda\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
PRC - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac (ArcSoft Inc.)
PRC - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
PRC - C:\Program Files\SuperCopier2\SuperCopier2.exe (SFX TEAM)
PRC - C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe (ABBYY)
PRC - C:\Program Files\Search Guard Plus\SearchGuardPlus.exe ()
PRC - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe (Nero AG)
PRC - C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe (Nero AG)
PRC - C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)


========== Modules (SafeList) ==========

MOD - C:\Users\linda\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (ACDaemon) -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (ABBYY.Licensing.FineReader.Sprint.9.0) -- C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe (ABBYY)
SRV - (ServiceLayer) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe (Nokia.)
SRV - (OPTENET_FILTER) -- C:\Program Files\Controle Parental\bin\optproxy.exe (Orange)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (WcesComm) -- C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation)
SRV - (RapiMgr) -- C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (FsUsbExDisk) -- C:\Windows\System32\FsUsbExDisk.Sys ()
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (ss_bmdm) -- C:\Windows\System32\drivers\ss_bmdm.sys (MCCI Corporation)
DRV - (ss_bbus) SAMSUNG USB Mobile Device (WDM) -- C:\Windows\System32\drivers\ss_bbus.sys (MCCI)
DRV - (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter) -- C:\Windows\System32\drivers\ss_bmdfl.sys (MCCI Corporation)
DRV - (avgio) -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (pccsmcfd) -- C:\Windows\System32\drivers\pccsmcfd.sys (Nokia)
DRV - (atikmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (sscdmdm) -- C:\Windows\System32\drivers\sscdmdm.sys (MCCI Corporation)
DRV - (sscdmdfl) -- C:\Windows\System32\drivers\sscdmdfl.sys (MCCI Corporation)
DRV - (sscdbus) SAMSUNG USB Composite Device driver (WDM) -- C:\Windows\System32\drivers\sscdbus.sys (MCCI Corporation)
DRV - (ss_mdm) -- C:\Windows\System32\drivers\ss_mdm.sys (MCCI Corporation)
DRV - (ss_mdfl) -- C:\Windows\System32\drivers\ss_mdfl.sys (MCCI Corporation)
DRV - (ss_bus) SAMSUNG Mobile USB Device 1.0 driver (WDM) -- C:\Windows\System32\drivers\ss_bus.sys (MCCI Corporation)
DRV - (RTL8169) -- C:\Windows\System32\drivers\Rtlh86.sys (Realtek Corporation )
DRV - (slabser) -- C:\Windows\System32\drivers\slabser.sys (MCCI Corporation)
DRV - (slabbus) CP210x USB Composite Device driver (WDM) -- C:\Windows\System32\drivers\slabbus.sys (MCCI Corporation)
DRV - (Afc) -- C:\Windows\System32\drivers\afc.sys (Arcsoft, Inc.)
DRV - (winusb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (Ps2) -- C:\Windows\System32\drivers\PS2.sys (Hewlett-Packard Company)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktop
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
IE - HKLM\..\URLSearchHook: {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSoft.dll (Conduit Ltd.)
IE - HKLM\..\URLSearchHook: {7009fcd4-05be-44f4-9583-93fe419ab7b0} - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {b9e20919-fa55-471f-989b-b107bf8de785} - C:\Program Files\MessengerPlusLive_France_TB\tbMess.dll (Conduit Ltd.)


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-3822153942-611838846-1325116893-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/
IE - HKU\S-1-5-21-3822153942-611838846-1325116893-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 2
IE - HKU\S-1-5-21-3822153942-611838846-1325116893-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========


FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\OfferBox\[email protected] [2011/02/27 11:12:49 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/06/23 09:49:15 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/07/13 21:22:21 | 000,000,000 | ---D | M]

[2010/01/24 21:46:59 | 000,000,000 | ---D | M] (No name found) -- C:\Users\linda\AppData\Roaming\mozilla\Extensions
[2010/01/24 21:46:59 | 000,000,000 | ---D | M] (No name found) -- C:\Users\linda\AppData\Roaming\mozilla\Extensions\[email protected]
[2011/07/13 21:23:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\linda\AppData\Roaming\mozilla\Firefox\Profiles\ccs17ra1.default\extensions
[2011/07/13 21:23:26 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\linda\AppData\Roaming\mozilla\Firefox\Profiles\ccs17ra1.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011/07/13 21:22:25 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions
[2011/07/13 21:22:25 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
[2010/10/28 10:34:39 | 000,000,000 | ---D | M] (Toolbar Iadah) -- C:\Program Files\mozilla firefox\extensions\[email protected]
[2011/06/23 09:49:14 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/07/13 21:21:48 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010/01/01 10:00:00 | 000,001,516 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-france.xml
[2010/01/01 10:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2010/01/01 10:00:00 | 000,001,822 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\cnrtl-tlfi-fr.xml
[2010/01/01 10:00:00 | 000,001,154 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-france.xml
[2010/01/01 10:00:00 | 000,001,426 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-fr.xml
[2010/01/01 10:00:00 | 000,000,956 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-france.xml

O1 HOSTS File: ([2011/08/19 12:15:19 | 000,000,736 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (Softonic_France Toolbar) - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSoft.dll (Conduit Ltd.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (no name) - {64F56FC1-1272-44CD-BA6E-39723696E350} - No CLSID value found.
O2 - BHO: (no name) - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - No CLSID value found.
O2 - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll (Google Inc.)
O2 - BHO: (MessengerPlusLive France TB Toolbar) - {b9e20919-fa55-471f-989b-b107bf8de785} - C:\Program Files\MessengerPlusLive_France_TB\tbMess.dll (Conduit Ltd.)
O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O2 - BHO: (Search Assistant) - {F0626A63-410B-45E2-99A1-3F2475B2D695} - C:\Program Files\SGPSA\BHO.dll (MTWB)
O2 - BHO: (OfferBox) - {FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C} - C:\Program Files\OfferBox\OfferBoxBHO.dll (Secure Digital Services Limited)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Softonic_France Toolbar) - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSoft.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (no name) - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O3 - HKLM\..\Toolbar: (MessengerPlusLive France TB Toolbar) - {b9e20919-fa55-471f-989b-b107bf8de785} - C:\Program Files\MessengerPlusLive_France_TB\tbMess.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKU\S-1-5-21-3822153942-611838846-1325116893-1000\..\Toolbar\WebBrowser: (no name) - {05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E} - No CLSID value found.
O3 - HKU\S-1-5-21-3822153942-611838846-1325116893-1000\..\Toolbar\WebBrowser: (Softonic_France Toolbar) - {4DAAC69C-CBA7-45E2-9BC8-1044483D3352} - C:\Program Files\Softonic_France\tbSoft.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-3822153942-611838846-1325116893-1000\..\Toolbar\WebBrowser: (MessengerPlusLive France TB Toolbar) - {B9E20919-FA55-471F-989B-B107BF8DE785} - C:\Program Files\MessengerPlusLive_France_TB\tbMess.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-3822153942-611838846-1325116893-1000\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [EEventManager] C:\Program Files\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-3822153942-611838846-1325116893-1000..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKU\S-1-5-21-3822153942-611838846-1325116893-1000..\Run: [EPSON SX125 Series] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATIGGE.EXE (SEIKO EPSON CORPORATION)
O4 - HKU\S-1-5-21-3822153942-611838846-1325116893-1000..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe (SFX TEAM)
O4 - HKLM..\RunOnce: [Launcher] C:\Windows\SMINST\Launcher.exe (soft thinks)
O4 - Startup: C:\Users\linda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MaxTV Powertools.lnk = File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-21-3822153942-611838846-1325116893-1000\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-21-3822153942-611838846-1325116893-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95 00 00 00 [binary data]
O7 - HKU\S-1-5-21-3822153942-611838846-1325116893-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogoff = 0
O7 - HKU\S-1-5-21-3822153942-611838846-1325116893-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0
O7 - HKU\S-1-5-21-3822153942-611838846-1325116893-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0
O7 - HKU\S-1-5-21-3822153942-611838846-1325116893-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Controle Parental\bin\lsp.dll ()
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_26)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.254
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\linda\AppData\Roaming\Microsoft\Windows Photo Gallery\Papier peint de la Galerie de photos Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\linda\AppData\Roaming\Microsoft\Windows Photo Gallery\Papier peint de la Galerie de photos Windows.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007/09/14 23:16:51 | 000,000,074 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{10e90545-f088-11df-8632-001bb9b653a9}\Shell\AutoRun\command - "" = Recyclebin/recycle32.exe
O33 - MountPoints2\{10e90545-f088-11df-8632-001bb9b653a9}\Shell\explore\command - "" = Recyclebin/recycle32.exe
O33 - MountPoints2\{10e90545-f088-11df-8632-001bb9b653a9}\Shell\open\command - "" = Recyclebin/recycle32.exe
O33 - MountPoints2\{13a18c26-aabc-11df-a0fd-001bb9b653a9}\Shell - "" = AutoRun
O33 - MountPoints2\{13a18c26-aabc-11df-a0fd-001bb9b653a9}\Shell\AutoRun\command - "" = "L:\WD SmartWare.exe" autoplay=true
O33 - MountPoints2\{83d56346-948f-11dd-bfe7-001bb9b653a9}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL J:\NoLimit.exe
O33 - MountPoints2\{a9943842-13e9-11e0-acbf-001bb9b653a9}\Shell\Auto\command - "" = F:\launcher.exe
O33 - MountPoints2\{a9943842-13e9-11e0-acbf-001bb9b653a9}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\launcher.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/08/19 12:53:18 | 000,581,120 | ---- | C] (OldTimer Tools) -- C:\Users\linda\Desktop\OTL.exe
[2011/08/16 13:11:43 | 000,000,000 | ---D | C] -- C:\Users\linda\AppData\Roaming\Systweak
[2011/08/16 13:11:42 | 000,017,280 | ---- | C] (Systweak Inc., (www.systweak.com)) -- C:\Windows\System32\roboot.exe
[2008/04/30 16:11:19 | 000,047,360 | ---- | C] (VSO Software) -- C:\Users\linda\AppData\Roaming\pcouffin.sys

========== Files - Modified Within 30 Days ==========

[2011/08/19 13:00:00 | 000,000,418 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{25489DD8-B2B0-4182-BE8B-2FA8907DD3A2}.job
[2011/08/19 12:34:00 | 000,001,056 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/08/19 12:21:38 | 000,693,350 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
[2011/08/19 12:21:38 | 000,612,848 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/08/19 12:21:38 | 000,118,244 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
[2011/08/19 12:21:38 | 000,104,570 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/08/19 12:17:07 | 000,003,472 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/08/19 12:17:07 | 000,003,472 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/08/19 12:17:03 | 000,474,976 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011/08/19 12:17:01 | 000,001,052 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/08/19 11:48:57 | 000,002,560 | ---- | M] () -- C:\Windows\_MSRSTRT.EXE
[2011/08/19 11:31:30 | 000,000,945 | ---- | M] () -- C:\Users\linda\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/08/19 11:05:24 | 000,292,942 | ---- | M] () -- C:\Users\linda\Documents\cc_20110819_1105.reg
[2011/08/17 18:02:26 | 000,243,200 | ---- | M] () -- C:\Users\linda\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/08/17 16:24:34 | 000,002,292 | ---- | M] () -- C:\Users\linda\AppData\Roaming\wklnhst.dat

========== Files Created - No Company Name ==========

[2011/08/19 11:48:56 | 000,002,560 | ---- | C] () -- C:\Windows\_MSRSTRT.EXE
[2011/08/19 11:31:30 | 000,000,945 | ---- | C] () -- C:\Users\linda\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/08/19 11:05:11 | 000,292,942 | ---- | C] () -- C:\Users\linda\Documents\cc_20110819_1105.reg
[2011/03/13 09:01:34 | 000,000,048 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2011/02/09 18:50:48 | 000,110,592 | ---- | C] () -- C:\Windows\System32\FsUsbExDevice.Dll
[2011/02/09 18:50:48 | 000,036,608 | ---- | C] () -- C:\Windows\System32\FsUsbExDisk.Sys
[2010/09/14 19:06:06 | 000,153,088 | ---- | C] () -- C:\Program Files\UNWISE.EXE
[2010/09/13 21:26:29 | 000,444,184 | ---- | C] () -- C:\Windows\Enjoy 5e Uninstaller.exe
[2009/12/27 22:26:15 | 000,000,032 | ---- | C] () -- C:\Windows\Menu.INI
[2009/05/05 09:50:50 | 000,000,000 | ---- | C] () -- C:\Windows\mtstack.INI
[2008/11/24 14:48:41 | 000,000,680 | ---- | C] () -- C:\Users\linda\AppData\Local\d3d9caps.dat
[2008/04/30 17:42:41 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2008/04/30 16:11:19 | 000,087,608 | ---- | C] () -- C:\Users\linda\AppData\Roaming\inst.exe
[2008/04/30 16:11:19 | 000,007,887 | ---- | C] () -- C:\Users\linda\AppData\Roaming\pcouffin.cat
[2008/04/30 16:11:19 | 000,001,144 | ---- | C] () -- C:\Users\linda\AppData\Roaming\pcouffin.inf
[2008/04/30 16:09:11 | 000,000,026 | ---- | C] () -- C:\Windows\System32\satsukidecodersettings.ini
[2008/04/30 15:58:23 | 000,002,516 | -HS- | C] () -- C:\Windows\System32\KGyGaAvL.sys
[2008/04/30 15:58:23 | 000,000,088 | RHS- | C] () -- C:\Windows\System32\F86C4C0474.sys
[2008/04/06 09:46:54 | 000,008,836 | ---- | C] () -- C:\Windows\System32\ezdigsgn.dat
[2008/04/06 09:22:57 | 000,012,288 | ---- | C] () -- C:\Windows\impborl.dll
[2008/04/06 09:20:02 | 000,001,630 | ---- | C] () -- C:\Windows\Ascd_tmp.ini
[2008/04/06 09:19:54 | 000,005,824 | ---- | C] () -- C:\Windows\System32\drivers\ASUSHWIO.SYS
[2008/04/05 22:01:13 | 000,002,292 | ---- | C] () -- C:\Users\linda\AppData\Roaming\wklnhst.dat
[2008/04/05 21:54:50 | 000,000,109 | ---- | C] () -- C:\Windows\Kit.ini
[2008/04/05 21:39:59 | 000,243,200 | ---- | C] () -- C:\Users\linda\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/04/05 20:55:19 | 000,114,688 | ---- | C] () -- C:\Windows\System32\WLANUTL.dll
[2008/04/05 20:54:58 | 000,228,648 | ---- | C] () -- C:\Windows\OptChecker.exe
[2007/10/25 18:26:10 | 000,005,632 | ---- | C] () -- C:\Windows\System32\drivers\StarOpen.sys
[2007/09/15 08:09:26 | 000,693,350 | ---- | C] () -- C:\Windows\System32\perfh00C.dat
[2007/09/15 08:09:26 | 000,340,236 | ---- | C] () -- C:\Windows\System32\perfi00C.dat
[2007/09/15 08:09:26 | 000,118,244 | ---- | C] () -- C:\Windows\System32\perfc00C.dat
[2007/09/15 08:09:26 | 000,037,390 | ---- | C] () -- C:\Windows\System32\perfd00C.dat
[2007/09/14 23:07:52 | 000,115,382 | ---- | C] () -- C:\Windows\hpqins13.dat
[2007/09/14 23:01:36 | 003,107,788 | ---- | C] () -- C:\Windows\System32\atiumdva.dat
[2007/09/14 23:01:36 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2007/09/14 23:01:35 | 000,154,206 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2007/09/14 23:01:35 | 000,081,920 | ---- | C] () -- C:\Windows\System32\ATIODE.exe
[2007/09/14 23:01:35 | 000,040,960 | ---- | C] () -- C:\Windows\System32\ATIODCLI.exe
[2007/09/14 22:55:04 | 000,061,440 | ---- | C] () -- C:\Windows\System32\OsdRemove.exe
[2007/09/14 22:52:30 | 000,327,680 | ---- | C] () -- C:\Windows\System32\pythoncom25.dll
[2007/09/14 22:52:30 | 000,102,400 | ---- | C] () -- C:\Windows\System32\pywintypes25.dll
[2007/06/03 14:31:28 | 000,010,752 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2006/11/02 14:47:37 | 000,474,976 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 12:33:01 | 000,612,848 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006/11/02 12:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006/11/02 12:33:01 | 000,104,570 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006/11/02 12:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006/11/02 12:25:26 | 000,557,568 | ---- | C] () -- C:\Windows\System32\hpotscl1.dll
[2006/11/02 12:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006/11/02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006/11/02 10:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006/11/02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/11/02 09:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2006/11/02 09:22:43 | 000,099,999 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2006/11/02 09:22:43 | 000,018,271 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin

========== LOP Check ==========

[2010/09/17 15:25:26 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\ArchiFacile
[2010/12/30 11:27:10 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\D-Jix
[2011/04/18 19:24:25 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\D-Jix Media LE
[2008/04/13 12:14:35 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\eMule
[2008/06/18 18:12:46 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\EoRezo
[2011/01/02 10:45:18 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\Epson
[2009/02/07 10:41:27 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\Icone
[2010/10/28 10:34:34 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\Icones
[2009/10/22 21:20:20 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\IndexEducation
[2010/09/17 15:26:16 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\IObit
[2008/06/04 10:21:48 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\ItsLabel
[2010/01/24 21:46:22 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\MaxTV Technologies
[2008/04/06 18:13:09 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\muvee Technologies
[2009/06/17 08:39:28 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\NBPROF
[2011/04/02 14:47:22 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\OfferBox
[2011/02/09 19:48:55 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\PC Suite
[2009/04/25 15:43:05 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\Pharaohs Secret
[2008/06/16 17:40:13 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\PlayFirst
[2011/02/09 18:50:34 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\Samsung
[2011/08/16 19:30:47 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\Systweak
[2008/04/06 10:17:35 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\Template
[2010/11/16 13:46:53 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\tuxmath
[2011/04/18 19:22:54 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\uTorrent
[2010/05/19 20:15:59 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\Vso
[2008/04/15 20:45:05 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\WinBatch
[2009/04/25 15:37:22 | 000,000,000 | ---D | M] -- C:\Users\linda\AppData\Roaming\Zylom
[2011/08/19 12:15:46 | 000,032,554 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2011/08/19 13:00:10 | 000,000,418 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{25489DD8-B2B0-4182-BE8B-2FA8907DD3A2}.job

========== Purity Check ==========



========== Custom Scans ==========


< userinit.exe >

< winlogon.exe >

< wininit.exe >

< /md5stop >
Invalid Switch: md5stop


< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2008/04/09 14:22:07 | 000,347,136 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\dxtmsft.dll
[2008/04/09 14:22:07 | 000,214,528 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\dxtrans.dll

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2006/11/02 12:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\COMPONENTS.SAV
[2006/11/02 12:34:05 | 000,020,480 | ---- | M] () -- C:\Windows\System32\config\DEFAULT.SAV
[2006/11/02 12:34:05 | 000,008,192 | ---- | M] () -- C:\Windows\System32\config\SECURITY.SAV
[2006/11/02 12:34:08 | 010,133,504 | ---- | M] () -- C:\Windows\System32\config\SOFTWARE.SAV
[2006/11/02 12:34:08 | 001,826,816 | ---- | M] () -- C:\Windows\System32\config\SYSTEM.SAV

========== Alternate Data Streams ==========

@Alternate Data Stream - 104 bytes -> C:\ProgramData\TEMP:7838B9E0

< End of report >

Si quelqu un peut m aider.
Cordialement et merci

[SkyTech]

Salut,

Tu as pas mal de programmes indésirables : http://forum.malekal.com/pup-logiciels- ... 33776.html

Tu as plusieurs barre d’outils (toolbars), en as-tu besoin ?
Plusieurs barre d’outils peuvent ralentir l’ordinateur ou occasionner des plantages du navigateur.
Je te conseille de faire du ménage pour désinstaller les barres d’outils dont tu ne te sers pas à partir d’ajout/suppression de programmes du panneau de configuration.
Pour plus d’informations, voir l’article Les Toolbars, c’est pas obligatoire!

Désinstalle tous ces programmes entre autre :

O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll (Google Inc.)
O2 - BHO: (MessengerPlusLive France TB Toolbar) - {b9e20919-fa55-471f-989b-b107bf8de785} - C:\Program Files\MessengerPlusLive_France_TB\tbMess.dll (Conduit Ltd.)
O2 - BHO: (SweetIM Toolbar Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O2 - BHO: (Search Assistant) - {F0626A63-410B-45E2-99A1-3F2475B2D695} - C:\Program Files\SGPSA\BHO.dll (MTWB)
O2 - BHO: (OfferBox) - {FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C} - C:\Program Files\OfferBox\OfferBoxBHO.dll (Secure Digital Services Limited)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Softonic_France Toolbar) - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSoft.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (no name) - {7009fcd4-05be-44f4-9583-93fe419ab7b0} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O3 - HKLM\..\Toolbar: (MessengerPlusLive France TB Toolbar) - {b9e20919-fa55-471f-989b-b107bf8de785} - C:\Program Files\MessengerPlusLive_France_TB\tbMess.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKU\S-1-5-21-3822153942-611838846-1325116893-1000\..\Toolbar\WebBrowser: (no name) - {05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E} - No CLSID value found.
O3 - HKU\S-1-5-21-3822153942-611838846-1325116893-1000\..\Toolbar\WebBrowser: (Softonic_France Toolbar) - {4DAAC69C-CBA7-45E2-9BC8-1044483D3352} - C:\Program Files\Softonic_France\tbSoft.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-3822153942-611838846-1325116893-1000\..\Toolbar\WebBrowser: (MessengerPlusLive France TB Toolbar) - {B9E20919-FA55-471F-989B-B107BF8DE785} - C:\Program Files\MessengerPlusLive_France_TB\tbMess.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-3822153942-611838846-1325116893-1000\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)

Puis :

/!\ Désactive temporairement ton antivirus /!\

Télécharge AD-Remover (de Cyrildu17 / C_XX) sur ton Bureau.

• /!\ Déconnecte-toi et ferme toutes applications en cours /!\
• Double-clique sur le raccourci Ad-Remover sur ton Bureau.
• Prends Nettoyer
  
  /!\ Laisse travailler l'outil /!\
• Poste le rapport qui apparaît à la fin.

(Le rapport est sauvegardé aussi sous C:\Ad-report(date).log)

(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

Note :"Process.exe", une composante de l'outil, est détectée par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

[lamygale38]

Bonjour
Merci de ton aide.
J ai essayer de supprimer les ToolsBars mais elles ne sont pas toutes dans suppréssion de programmes.
Voici le rapport.
======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 =======

Mis à jour par TeamXscript le 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
Site web: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [2]) -> Lancé à 07:54:31 le 22/08/2011, Mode normal

Microsoft® Windows Vista™ Édition Familiale Premium (X86)
linda@PC-DE-LINDA (HP-Pavilion GQ432AA-ABF a6217.fr)

============== ACTION(S) ==============



(!) -- Fichiers temporaires supprimés.


Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350}


============== SCAN ADDITIONNEL ==============

**** Mozilla Firefox Version [5.0 (fr)] ****

HKLM_MozillaPlugins\@zylom.com/ZylomGamesPlayer (x)
HKLM_MozillaPlugins\Adobe Reader (x)
Searchplugins\bing.xml ( hxxp://www.bing.com/search)
Components\browsercomps.dll (Mozilla Foundation)
Extensions\[email protected] (Toolbar Iadah)

-- C:\Users\linda\AppData\Roaming\Mozilla\FireFox\Profiles\ccs17ra1.default --
Searchplugins\iadah.xml (<SearchPlugin xmlns=hxxp://www.mozilla.org/2006/browser/search/<Sh ... escription<...)
Searchplugins\MyStart Search.xml (?)
Searchplugins\orange.xml (?)
Prefs.js - browser.download.dir, C:\\Mes_documents
Prefs.js - browser.search.selectedEngine, Google
Prefs.js - browser.startup.homepage, hxxp://www.orange.fr
Prefs.js - browser.startup.homepage_override.buildID, 20110615151330
Prefs.js - browser.startup.homepage_override.mstone, rv:5.0
Prefs.js - privacy.popups.showBrowserMessage, false

========================================

**** Internet Explorer Version [7.0.6000.16643] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=i ... ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKLM_URLSearchHooks|{7009fcd4-05be-44f4-9583-93fe419ab7b0} (x)
HKLM_URLSearchHooks|{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files\Softonic_France\tbSoft.dll)
HKLM_URLSearchHooks|{b9e20919-fa55-471f-989b-b107bf8de785} - "MessengerPlusLive France TB Toolbar" (C:\Program Files\MessengerPlusLive_France_TB\tbMess.dll)
HKCU_SearchScopes\{8B39FB6E-7958-4BDE-B5CA-172D29E85232} - "Kelkoo" (hxxp://fr.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromfor...)
HKCU_SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} - "SweetIM" (hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms})
HKLM_SearchScopes\{8B39FB6E-7958-4BDE-B5CA-172D29E85232} - "Kelkoo" (hxxp://fr.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromfor...)
HKLM_SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} - "SweetIM" (hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms})
HKCU_Toolbar\WebBrowser|{EEE6C35B-6118-11DC-9C72-001320C79847} (x)
HKCU_Toolbar\WebBrowser|{4DAAC69C-CBA7-45E2-9BC8-1044483D3352} (C:\Program Files\Softonic_France\tbSoft.dll)
HKCU_Toolbar\WebBrowser|{B9E20919-FA55-471F-989B-B107BF8DE785} (C:\Program Files\MessengerPlusLive_France_TB\tbMess.dll)
HKCU_Toolbar\WebBrowser|{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E} (x)
HKLM_Toolbar|{7009fcd4-05be-44f4-9583-93fe419ab7b0} (x)
HKLM_Toolbar|{9421DD08-935F-4701-A9CA-22DF90AC4EA6} (C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll)
HKLM_Toolbar|{4daac69c-cba7-45e2-9bc8-1044483d3352} (C:\Program Files\Softonic_France\tbSoft.dll)
HKLM_Toolbar|{b9e20919-fa55-471f-989b-b107bf8de785} (C:\Program Files\MessengerPlusLive_France_TB\tbMess.dll)
HKLM_ElevationPolicy\0fc6c508-b29a-40cb-a40c-a016cc4b18ed - C:\Program Files\interdescargas-FR\interdescargas-FRToolbarHelper.exe (x)
HKLM_ElevationPolicy\641dff92-d3d6-4ac5-ac22-1f2b18ca6e52 - C:\Program Files\MessengerPlusLive_France_TB\MessengerPlusLive_France_TBToolbarHelper.exe (?)
BHO\{02478D38-C3F9-4efb-9B51-7695ECA05670} (?)
BHO\{4daac69c-cba7-45e2-9bc8-1044483d3352} - "Softonic_France Toolbar" (C:\Program Files\Softonic_France\tbSoft.dll)
BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?)
BHO\{64F56FC1-1272-44CD-BA6E-39723696E350} (?)
BHO\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - "Search Helper" (C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll)
BHO\{7009fcd4-05be-44f4-9583-93fe419ab7b0} (?)
BHO\{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - "Easy Photo Print" (C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll)
BHO\{b9e20919-fa55-471f-989b-b107bf8de785} - "MessengerPlusLive France TB Toolbar" (C:\Program Files\MessengerPlusLive_France_TB\tbMess.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 106 Fichier(s)
C:\Program Files\Ad-Remover\Backup: 29 Fichier(s)

C:\Ad-Report-CLEAN[1].txt - 19/08/2011 13:34:45 (13473 Octet(s))
C:\Ad-Report-CLEAN[2].txt - 22/08/2011 07:54:38 (5285 Octet(s))

Fin à: 07:55:33, 22/08/2011

============== E.O.F ==============

Encore merci

[SkyTech]

Relance AD-Remover et prends Désinstaller.

Pour supprimer les toolbars restantes essayes : http://2011n2.forumgratuit.fr/t639-toolbar-shooter#3429

Poste le rapport.

---

Télécharge MalwareByte's Anti-Malware sur ton Bureau.

• Installe-le en double-cliquant sur le fichier mbam-setup.exe.
  Une fois l'installation et la mise à jour effectuées :
• Exécute maintenant MalwareByte's Anti-Malware. Si cela n'est pas déjà fait, sélectionne "Exécuter un examen complet".
• Afin de lancer la recherche, clic sur"Rechercher".
• Une fois le scan terminé, une fenêtre s'ouvre, clic sur OK. Deux possibilités s'offrent à toi :

~ Si le programme n'a rien trouvé, appuie sur OK. Un rapport va apparaître, ferme-le.
~~ Si des infections sont présentes, clic sur "Afficher les résultats" puis sur "Supprimer la sélection". Enregistre le rapport sur ton Bureau.
~~~~ Fais redémarrer ton ordinateur normalement et poste le rapport dans ta prochaine réponse.

REMARQUE : Si MalwareByte's Anti-Malware a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok.

[lamygale38]

Re
je n ai pas reussi a télécharger le fichier pour ToolBar. L ordinateur me dit que c est un virus
Voici le rapport de Mmb
Malwarebytes' Anti-Malware 1.51.1.1800
www.malwarebytes.org

Version de la base de données: 7035

Windows 6.0.6000
Internet Explorer 7.0.6000.16643

22/08/2011 12:59:43
mbam-log-2011-08-22 (12-59-34).txt

Type d'examen: Examen complet (C:\|D:\|)
Elément(s) analysé(s): 305175
Temps écoulé: 1 heure(s), 0 minute(s), 32 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
c:\program files\ad-remover\quarantine\C\program files\search guard plus\searchguardplus.exe.vir (PUP.Fbsearch) -> No action taken.

[SkyTech]

je n ai pas reussi a télécharger le fichier pour ToolBar. L ordinateur me dit que c est un virus

Chez moi AntiVir ne bippe pas : http://dl.dropbox.com/u/32869654/ToolbarShooter.exe

Supprime :

c:\program files\ad-remover

Poste un nouveau rapport OTL.