Infection QV06 & problemes de lancement de windows vista

[aivilo]

Bonjour,

Mon ordinateur a ete infecte par QV06 et j'ai suivi les recommandations des topics precedents.
Apparemment il a disparu, mais j'ai des problemes lors du lancement de windows vista, a chaque fois apparait un ecran blanc ce qui m'oblige a lancer le mode sans echec.

Voici le rapport malwarebyte:

Malwarebytes Anti-Malware (Essai) 1.75.0.1300
http://www.malwarebytes.org

Version de la base de données: v2013.10.13.02

Windows Vista Service Pack 2 x86 NTFS (Mode sans échec/Réseau)
Internet Explorer 9.0.8112.16421
Fred :: FRED-PC [administrateur]

Protection: Désactivé

13/10/2013 1:16:18 PM
MBAM-log-2013-10-13 (13-23-12).txt

Type d'examen: Examen rapide
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 196595
Temps écoulé: 6 minute(s), 35 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 47
HKLM\SYSTEM\CurrentControlSet\Services\BitGuard (PUP.Optional.PerformerSoft.A) -> Aucune action effectuée.
HKCR\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE} (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\escort.escortIEPane.1 (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\escort.escortIEPane (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\delta.deltaHlpr.1 (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\delta.deltaHlpr (PUP.Optional.Delta) -> Aucune action effectuée.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKCR\CLSID\{0CFBE80D-5608-4309-A0F5-3B1414833432} (PUP.Optional.Smartbar.A) -> Aucune action effectuée.
HKCR\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Smartbar.A) -> Aucune action effectuée.
HKCR\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921} (PUP.Optional.Smartbar.A) -> Aucune action effectuée.
HKCR\delta.deltadskBnd.1 (PUP.Optional.Smartbar.A) -> Aucune action effectuée.
HKCR\delta.deltadskBnd (PUP.Optional.Smartbar.A) -> Aucune action effectuée.
HKCR\Bechiro.smartbardskBnd.1 (PUP.Optional.Smartbar.A) -> Aucune action effectuée.
HKCR\Bechiro.smartbardskBnd (PUP.Optional.Smartbar.A) -> Aucune action effectuée.
HKCR\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8} (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D} (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\esrv.deltaESrvc.1 (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\esrv.deltaESrvc (PUP.Optional.Delta) -> Aucune action effectuée.
HKCR\CLSID\{FD36FEBE-DBA1-4597-9DD1-B13794B92F68} (PUP.Optional.Smartbar.A) -> Aucune action effectuée.
HKCR\CLSID\{1581739A-4E37-4453-B6DE-5E50C457329C} (PUP.Optional.Smartbar.A) -> Aucune action effectuée.
HKCR\Bechiro.smartbarHlpr.1 (PUP.Optional.Smartbar.A) -> Aucune action effectuée.
HKCR\Bechiro.smartbarHlpr (PUP.Optional.Smartbar.A) -> Aucune action effectuée.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD36FEBE-DBA1-4597-9DD1-B13794B92F68} (PUP.Optional.Smartbar.A) -> Aucune action effectuée.
HKCR\Typelib\{4599D05A-D545-4069-BB42-5895B4EAE05B} (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKCR\Interface\{1231839B-064E-4788-B865-465A1B5266FD} (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85} (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DealPly (PUP.Optional.DealPly.A) -> Aucune action effectuée.
HKCU\SOFTWARE\DEALPLY (PUP.Optional.DealPly.A) -> Aucune action effectuée.
HKCU\SOFTWARE\DELTA\DELTA (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKCU\Software\DataMngr (PUP.Optional.DataMngr.A) -> Aucune action effectuée.
HKCU\Software\BabSolution\Updater (PUP.Optional.Babylon.A) -> Aucune action effectuée.
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings (PUP.Optional.BProtector.A) -> Aucune action effectuée.
HKLM\SOFTWARE\DEALPLY (PUP.Optional.DealPly.A) -> Aucune action effectuée.
HKLM\SOFTWARE\Delta\delta\Instl (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\smartbar (Adware.SmartBar) -> Aucune action effectuée.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
HKCR\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26} (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKCR\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800} (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKCR\delta.deltaappCore.1 (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKCR\delta.deltaappCore (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKCR\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B} (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKCR\d (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\delta (PUP.Optional.Delta.A) -> Aucune action effectuée.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693} (PUP.Optional.BitGuard.A) -> Aucune action effectuée.

Valeur(s) du Registre détectée(s): 11
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Smartbar.A) -> Données: Delta Toolbar -> Aucune action effectuée.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{0CFBE80D-5608-4309-A0F5-3B1414833432} (PUP.Optional.Smartbar.A) -> Données: SmartBar Toolbar -> Aucune action effectuée.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{0CFBE80D-5608-4309-A0F5-3B1414833432} (PUP.Optional.Smartbar.A) -> Données: -> Aucune action effectuée.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{82E1477C-B154-48D3-9891-33D83C26BCD3} (PUP.Optional.Delta.A) -> Données: -> Aucune action effectuée.
HKCU\SOFTWARE\DealPly|Partner (PUP.Optional.DealPly.A) -> Données: vbee -> Aucune action effectuée.
HKCU\SOFTWARE\Delta\Delta|tlbrSrchUrl (PUP.Optional.Delta.A) -> Données: -> Aucune action effectuée.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|bProtector Start Page (PUP.BProtector) -> Données: http://www2.delta-search.com/?babsrc=HP ... 8&tsp=5005 -> Aucune action effectuée.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes|bProtectorDefaultScope (PUP.BProtector) -> Données: {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} -> Aucune action effectuée.
HKCU\Software\Delta\delta|lastB (PUP.Optional.Delta.A) -> Données: http://www2.delta-search.com/?babsrc=HP ... 8&tsp=5005 -> Aucune action effectuée.
HKLM\SOFTWARE\DealPly|ChromeCrxPath (PUP.Optional.DealPly.A) -> Données: C:\Program Files\DealPly\DealPly.crx -> Aucune action effectuée.
HKLM\SYSTEM\CurrentControlSet\Services\BitGuard|ImagePath (PUP.Optional.BitGuard.A) -> Données: C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe -> Aucune action effectuée.

Elément(s) de données du Registre détecté(s): 2
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|AppInit_DLLs (PUP.Optional.Protector) -> Mauvais: (c:\progra~2\bitguard\261694~1.246\{c16c1~1\bitguard.dll) Bon: () -> Aucune action effectuée.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.StartPage) -> Mauvais: (http://www2.delta-search.com/?babsrc=HP ... 8&tsp=5005) Bon: (http://www.google.com) -> Aucune action effectuée.

Dossier(s) détecté(s): 13
C:\Program Files\DealPly (PUP.Optional.DealPly.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Roaming\Delta (PUP.Optional.Delta.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly (PUP.OPtional.Dealply.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Roaming\BabSolution (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Roaming\BabSolution\CR (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Roaming\BabSolution\Shared (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
C:\Program Files\Delta\delta\1.8.24.6 (PUP.Optional.Delta.A) -> Aucune action effectuée.
C:\Program Files\Delta\delta\1.8.24.6\bh (PUP.Optional.Delta.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1694.246 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8} (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings (PUP.Optional.BitGuard.A) -> Aucune action effectuée.

Fichier(s) détecté(s): 54
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.dll (PUP.Optional.Protector) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe (PUP.Optional.PerformerSoft.A) -> Aucune action effectuée.
C:\Program Files\Delta\delta\1.8.24.6\bh\delta.dll (PUP.Optional.Delta) -> Aucune action effectuée.
C:\Program Files\Bechiro S.L\smartbar\1.8.8.12\smartbarTlbr.dll (PUP.Optional.Smartbar.A) -> Aucune action effectuée.
C:\Program Files\Delta\delta\1.8.24.6\deltaTlbr.dll (PUP.Optional.Smartbar.A) -> Aucune action effectuée.
C:\Program Files\Delta\delta\1.8.24.6\deltasrv.exe (PUP.Optional.Delta) -> Aucune action effectuée.
C:\Program Files\Bechiro S.L\smartbar\1.8.8.12\bh\smartbar.dll (PUP.Optional.Smartbar.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Roaming\BabSolution\Shared\BabMaint.exe (PUP.Optional.Babylon.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Local\Temp\bus4597\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Local\Temp\bus6769\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Local\Temp\bus8D12\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Local\Temp\bus911B\CrxUpdater_d.exe (PUP.Optional.CRX.A) -> Aucune action effectuée.
C:\Users\Fred\Downloads\installer_ccleaner_French.exe (PUP.Optional.VIT) -> Aucune action effectuée.
C:\Users\Fred\Downloads\internet-download-manager-windows-downloader.exe (PUP.Optional.Malavida) -> Aucune action effectuée.
C:\Program Files\DealPly\DealPly.crx (PUP.Optional.DealPly.A) -> Aucune action effectuée.
C:\Program Files\DealPly\DealPly.xpi (PUP.Optional.DealPly.A) -> Aucune action effectuée.
C:\Program Files\DealPly\DealPlyIE64.dll (PUP.Optional.DealPly.A) -> Aucune action effectuée.
C:\Program Files\DealPly\DealPlyUpdate.exe (PUP.Optional.DealPly.A) -> Aucune action effectuée.
C:\Program Files\DealPly\DealPlyUpdateRun.exe (PUP.Optional.DealPly.A) -> Aucune action effectuée.
C:\Program Files\DealPly\DealPlyUpdateVer.exe (PUP.Optional.DealPly.A) -> Aucune action effectuée.
C:\Program Files\DealPly\icon.ico (PUP.Optional.DealPly.A) -> Aucune action effectuée.
C:\Program Files\DealPly\uninst.exe (PUP.Optional.DealPly.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Roaming\Delta\sqlite3.dll (PUP.Optional.Delta.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly\Uninstall DealPly.lnk (PUP.OPtional.Dealply.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly\DealPly Help.url (PUP.OPtional.Dealply.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly\DealPly.url (PUP.OPtional.Dealply.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Roaming\BabSolution\CR\Delta.crx (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Roaming\BabSolution\Shared\BUSolution.dll (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Roaming\BabSolution\Shared\chu.js (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Roaming\BabSolution\Shared\Delta.ico (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Roaming\BabSolution\Shared\GUninstaller.exe (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Roaming\BabSolution\Shared\SetupParams.ini (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
C:\Users\Fred\AppData\Roaming\BabSolution\Shared\sqlite3.dll (PUP.Optional.BabSolution.A) -> Aucune action effectuée.
C:\Program Files\Delta\delta\1.8.24.6\deltaApp.dll (PUP.Optional.Delta.A) -> Aucune action effectuée.
C:\Program Files\Delta\delta\1.8.24.6\deltaEng.dll (PUP.Optional.Delta.A) -> Aucune action effectuée.
C:\Program Files\Delta\delta\1.8.24.6\GUninstaller.exe (PUP.Optional.Delta.A) -> Aucune action effectuée.
C:\Program Files\Delta\delta\1.8.24.6\uninstall.exe (PUP.Optional.Delta.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\BitGuard.settings (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\bl (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\dm (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\uninstall.exe (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\00 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\01 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\02 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\03 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\10 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\11 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\12 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\13 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\20 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\21 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\22 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.
C:\ProgramData\BitGuard\2.6.1694.246\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\traking_settings\23 (PUP.Optional.BitGuard.A) -> Aucune action effectuée.

(fin)

Voici le rapport Adwcleaner:

# AdwCleaner v3.007 - Report created 13/10/2013 at 14:10:04
# Updated 09/10/2013 by Xplode
# Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Username : Fred - FRED-PC
# Running from : C:\Users\Fred\Downloads\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\BitGuard
Folder Deleted : C:\ProgramData\VisualBee
Folder Deleted : C:\Program Files\Delta
Folder Deleted : C:\Program Files\Vittalia
Folder Deleted : C:\Users\Fred\AppData\Local\visualbeeexe
Folder Deleted : C:\Users\Fred\AppData\LocalLow\VideoDownloadConverter_4z
Folder Deleted : C:\Users\Fred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Folder Deleted : C:\Users\Fred\Contacts\Documents\PC Speed Maximizer
Folder Deleted : C:\Users\Fred\AppData\Roaming\Mozilla\Firefox\Profiles\9b0dmhk0.default\Extensions\{42e0ced7-806f-4983-af54-92bdeefee519}
Folder Deleted : C:\Users\Fred\AppData\Roaming\Mozilla\Firefox\Profiles\9b0dmhk0.default\Extensions\[email protected]
File Deleted : C:\Users\Fred\AppData\Roaming\Mozilla\Firefox\Profiles\9b0dmhk0.default\bprotector_extensions.sqlite
File Deleted : C:\Users\Fred\AppData\Roaming\Mozilla\Firefox\Profiles\9b0dmhk0.default\bprotector_prefs.js
File Deleted : C:\Users\Fred\AppData\Roaming\Mozilla\Firefox\Profiles\9b0dmhk0.default\searchplugins\Babylon.xml
File Deleted : C:\Users\Fred\AppData\Roaming\Mozilla\Firefox\Profiles\9b0dmhk0.default\searchplugins\bingp.xml
File Deleted : C:\Users\Fred\AppData\Roaming\Mozilla\Firefox\Profiles\9b0dmhk0.default\searchplugins\my-web-search.xml
File Deleted : C:\Users\Fred\AppData\Roaming\Mozilla\Firefox\Profiles\9b0dmhk0.default\searchplugins\smartbar.xml
File Deleted : C:\Users\Fred\AppData\Roaming\Mozilla\Firefox\Profiles\9b0dmhk0.default\searchplugins\visualbee.xml
File Deleted : C:\Users\Fred\AppData\Roaming\Mozilla\Firefox\Profiles\9b0dmhk0.default\user.js
File Deleted : C:\Windows\System32\Tasks\DealPlyUpdate
File Deleted : C:\Windows\System32\Tasks\EPUpdater

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\flcjcajklmlbpmgckpcmnampagbhhmcp
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DealPlyUpdate
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{18995039-82F6-4839-8115-B83FEA79BC66}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{18995039-82F6-4839-8115-B83FEA79BC66}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\EPUpdater
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5001F48F-E42A-4362-A9D7-F09E34F0E10E}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5001F48F-E42A-4362-A9D7-F09E34F0E10E}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Deleted : HKLM\SOFTWARE\Classes\b
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKCU\Software\5be8adee73cbf12
Key Deleted : HKLM\SOFTWARE\5be8adee73cbf12
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A6C63B7F-2171-47FA-AB34-E64C4737169D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A6C63B7F-2171-47FA-AB34-E64C4737169D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
Key Deleted : HKCU\Software\BabSolution
Key Deleted : HKCU\Software\Delta
Key Deleted : HKCU\Software\Headlight
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\visualbee
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\Delta
Key Deleted : HKLM\Software\visualbee
Key Deleted : HKLM\Software\Vittalia
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Vittalia
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DealPly
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta Chrome Toolbar
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\smartbar
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Vittalia
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16514

Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]

-\\ Mozilla Firefox v23.0.1 (en-US)

[ File : C:\Users\Fred\AppData\Roaming\Mozilla\Firefox\Profiles\9b0dmhk0.default\prefs.js ]

Line Deleted : user_pref("browser.newtab.url", "hxxp://www2.delta-search.com/?babsrc=NT_ss&mntrId=08D7001B772EE562&affID=124798&tsp=5005");
Line Deleted : user_pref("browser.search.order.1", "Search the web (CT)");
Line Deleted : user_pref("extensions.delta.admin", false);
Line Deleted : user_pref("extensions.delta.aflt", "babsst");
Line Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Line Deleted : user_pref("extensions.delta.autoRvrt", "false");
Line Deleted : user_pref("extensions.delta.dfltLng", "en");
Line Deleted : user_pref("extensions.delta.excTlbr", false);
Line Deleted : user_pref("extensions.delta.ffxUnstlRst", true);
Line Deleted : user_pref("extensions.delta.id", "08d7c0cc000000000000001b772ee562");
Line Deleted : user_pref("extensions.delta.instlDay", "15962");
Line Deleted : user_pref("extensions.delta.instlRef", "sst");
Line Deleted : user_pref("extensions.delta.newTab", false);
Line Deleted : user_pref("extensions.delta.prdct", "delta");
Line Deleted : user_pref("extensions.delta.prtnrId", "delta");
Line Deleted : user_pref("extensions.delta.rvrt", "false");
Line Deleted : user_pref("extensions.delta.smplGrp", "none");
Line Deleted : user_pref("extensions.delta.tlbrId", "base");
Line Deleted : user_pref("extensions.delta.tlbrSrchUrl", "");
Line Deleted : user_pref("extensions.delta.vrsn", "1.8.24.6");
Line Deleted : user_pref("extensions.delta.vrsnTs", "1.8.24.612:06:18");
Line Deleted : user_pref("extensions.delta.vrsni", "1.8.24.6");
Line Deleted : user_pref("extensions.delta_i.babExt", "");
Line Deleted : user_pref("extensions.delta_i.babTrack", "affID=124798&tsp=5005");
Line Deleted : user_pref("extensions.delta_i.srcExt", "ss");
Line Deleted : user_pref("extensions.enabledAddons", "%7B42e0ced7-806f-4983-af54-92bdeefee519%7D:2.0,ffxtlbr%40smartbar.com:1.6.0,%7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:23.0.1");
Line Deleted : user_pref("extensions.mywebsearch.prevDefaultEngine", "Bing ");
Line Deleted : user_pref("extensions.mywebsearch.prevKwdEnabled", true);
Line Deleted : user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://www.bing.com/search?FORM=UP22DF&PC=UP22&dt=052013&q=");
Line Deleted : user_pref("extensions.mywebsearch.prevSelectedEngine", "VisualBee Search");
Line Deleted : user_pref("extensions.smartbar.admin", false);
Line Deleted : user_pref("extensions.smartbar.aflt", "orgnl");
Line Deleted : user_pref("extensions.smartbar.appId", "{C5E5951A-4ADD-4402-8A8E-EF97DCB9D8EC}");
Line Deleted : user_pref("extensions.smartbar.autoRvrt", "false");
Line Deleted : user_pref("extensions.smartbar.cntry", "MG");
Line Deleted : user_pref("extensions.smartbar.dfltLng", "");
Line Deleted : user_pref("extensions.smartbar.dfltSrch", true);
Line Deleted : user_pref("extensions.smartbar.dnsErr", true);
Line Deleted : user_pref("extensions.smartbar.dspFFXOld", "Bing ");
Line Deleted : user_pref("extensions.smartbar.excTlbr", false);
Line Deleted : user_pref("extensions.smartbar.hdrMd5", "1B5FD37EDB8EB7160DC157A7248E940C");
Line Deleted : user_pref("extensions.smartbar.hmpg", true);
Line Deleted : user_pref("extensions.smartbar.hmpgUrl", "hxxp://search.creativetoolbars.com/?src=hp&id=smartbar&g=");
Line Deleted : user_pref("extensions.smartbar.hpFFXOld", "hxxp://ca.msn.com/?pc=UP97&ocid=UP97DHP");
Line Deleted : user_pref("extensions.smartbar.hpOld0", "hxxp://visualbee.delta-search.com/?affID=121377&babsrc=HP_ss&mntrId=08D7001B772EE562");
Line Deleted : user_pref("extensions.smartbar.id", "08d7c0cc000000000000001b772ee562");
Line Deleted : user_pref("extensions.smartbar.instlDay", "15930");
Line Deleted : user_pref("extensions.smartbar.instlRef", "");
Line Deleted : user_pref("extensions.smartbar.kw_url", "hxxp://search.creativetoolbars.com/results?src=tb&id=smartbar&g=&q=");
Line Deleted : user_pref("extensions.smartbar.lastVrsnTs", "1.8.8.1218:01:14");
Line Deleted : user_pref("extensions.smartbar.newTab", true);
Line Deleted : user_pref("extensions.smartbar.newTabUrl", "hxxp://search.creativetoolbars.com/?src=nt&id=smartbar&g=");
Line Deleted : user_pref("extensions.smartbar.prdct", "smartbar");
Line Deleted : user_pref("extensions.smartbar.prtnrId", "bechiro");
Line Deleted : user_pref("extensions.smartbar.rvrt", "false");
Line Deleted : user_pref("extensions.smartbar.sg", "mm");
Line Deleted : user_pref("extensions.smartbar.smplGrp", "mm");
Line Deleted : user_pref("extensions.smartbar.srchPrvdr", "Search the web (CT)");
Line Deleted : user_pref("extensions.smartbar.tlbrId", "smartbar");
Line Deleted : user_pref("extensions.smartbar.tlbrSrchUrl", "hxxp://search.creativetoolbars.com/results?src=tb&id=smartbar&g=&q=");
Line Deleted : user_pref("extensions.smartbar.vrsn", "1.8.8.12");
Line Deleted : user_pref("extensions.smartbar.vrsnTs", "1.8.8.1218:01:14");
Line Deleted : user_pref("extensions.smartbar.vrsni", "1.8.8.12");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.homepage", "hxxp://home.mywebsearch.com/index.jhtml?ptb=088237A9-D087-4494-8BF8-D59500C5143D&n=77fce1f2&p2=^HJ^xdm073^YY^mg&si=pconverter");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.hp.enabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.hp.lastGuardTime", 1572885214);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.hp.numGuards", 1);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.initialized", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.contextKey", "");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.installDate", "2013061618");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerId", "^HJ^xdm073^YY^mg");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.partnerSubId", "pconverter");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.success", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.installation.toolbarId", "088237A9-D087-4494-8BF8-D59500C5143D");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.lastActivePing", "1371646633003");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.options.defaultSearch", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.options.homePageEnabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.options.keywordEnabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.options.tabEnabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.searchHistory", "amtv||amtv.com||amtv.weebly.com");
Line Deleted : user_pref("extensions.toolbar.mindspark._4zMembers_.weather.location", "10001");
Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled", true);
Line Deleted : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "[email protected]");
Line Deleted : user_pref("extensions.toolbar.mindspark.lastInstalled", "[email protected]");

-\\ Google Chrome v30.0.1599.69

[ File : C:\Users\Fred\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : urls_to_restore_on_startup
Deleted : homepage

*************************

AdwCleaner[R0].txt - [15310 octets] - [13/10/2013 14:08:39]
AdwCleaner[S0].txt - [15621 octets] - [13/10/2013 14:10:04]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [15682 octets] ##########

Merci beaucoup d'avance pour votre aide.

[Malekal_morte]

Salut,

Tu as bien tout supprimé sur Malwarebytes ?

Menu Démarrer, dans la barre de recherche tape regedit et entrée.
Déroule l'arborescence suivante : HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
A droite, tu as AppInit_DLLs, il est vide ?

[Malekal_morte]

fais ça aussi en mode sans échec :

- Télécharge http://sourceforge.net/projects/hjt/ ton bureau.
- Pour lancer HijackThis :
* Sur Vista/Seven faire un clic droit puis executer en tant qu'administrater pour le lancer
* Sur XP un simple double-clic suffit
- Génère un rapport en suivant ces indications :
- Exécute le et clique sur Do a scan and save log file.
- Le rapport s'ouvre sur le Bloc-Note
- Enregistre le sur ton bureau
- Envoie le sur http://pjjoint.malekal.com
- Donne le lien pjjoint ici.