Fênetres popups incessantes • page 2

[bernard53]

J'ai déjà fais deux rapports et rien.
Mais apparemment, le " site " qui m'ouvrait les pubs à été désinstallé suite au deuxième rapport.

OK alors as tu passée MalwaresBytes?

[Lady M.]

Non, pas encore, je choisis " Télécharger maintenant ( Download now ) " et ça me met ça : http://www.picdo.net/fichiers/2011/5/4/ ... ans-ti.bmp

Je choisis quoi ?

[bernard53]

Saurais du te mettre cela donc prends ici.
http://www.01net.com/telecharger/window ... 44096.html

[Lady M.]

J'ai lancé l'examen complet.
Combien de temps cela prend-t-il ?

[bernard53]

Selon ce qui tu as sur ton pc le scan dure entre 1h et 3heures je vais dire.

[Lady M.]

Mouai ... Si je suspend l'examen, je pourrais le reprendre ultérieurement ?

[bernard53]

Mouai ... Si je suspend l'examen, je pourrais le reprendre ultérieurement ?

il faut tout reprendre

[Lady M.]

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Version de la base de données: 6507

Windows 6.0.6001 Service Pack 1
Internet Explorer 7.0.6001.18000

05/05/2011 13:45:53
mbam-log-2011-05-05 (13-45-53).txt

Type d'examen: Examen complet (C:\|)
Elément(s) analysé(s): 333542
Temps écoulé: 2 heure(s), 23 minute(s), 9 seconde(s)

Processus mémoire infecté(s): 2
Module(s) mémoire infecté(s): 1
Clé(s) du Registre infectée(s): 42
Valeur(s) du Registre infectée(s): 6
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 20
Fichier(s) infecté(s): 69

Processus mémoire infecté(s):
c:\program files\search guard plus\searchguardplus.exe (PUP.Fbsearch) -> 2284 -> Unloaded process successfully.
c:\program files\clickpotatolite\bin\10.0.668.0\clickpotatolitesa.exe (Adware.ClickPotato) -> 4200 -> Unloaded process successfully.

Module(s) mémoire infecté(s):
c:\program files\clickpotatolite\bin\10.0.668.0\clickpotatolitesahook.dll (Adware.ClickPotato) -> Delete on reboot.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\AppID\{8258B35C-05B8-4c0e-9525-9BCCC70F8F2D} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{1602F07D-8BF3-4c08-BDD6-DDDB1C48AEDC} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{C55CA95C-324B-451C-B2D2-6E895AA75FEC} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{30B15818-E110-4527-9C05-46ACE5A3460D} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ClickPotatoLiteAX.info.1 (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ClickPotatoLiteAX.info (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1602F07D-8BF3-4C08-BDD6-DDDB1C48AEDC} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{7A3D6D17-9DD5-4C60-8076-D1784DABAF8C} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{814BAA91-DC22-4350-87D6-0C86E93F7F08} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{419EDA30-6DFF-432C-B534-E15D899ABEE4} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MenuButtonIE.ButtonIE.1 (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\MenuButtonIE.ButtonIE (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{AC6D819E-AA8F-4418-A3BB-D165C1B18BB5} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ClickPotatoLiteAX.UserProfiles.1 (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ClickPotatoLiteAX.UserProfiles (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{AC6D819E-AA8F-4418-A3BB-D165C1B18BB5} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{CC7BD6F1-565C-47ce-A5BB-9C935E77B59D} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{02AED140-2B62-4B49-8B3B-179020CC39B9} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{17BF1E05-C0E8-413C-BD1F-A481EEA3B8E9} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ShopperReports.CntntDic.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ShopperReports.CntntDic (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{CFC16189-8A92-4a29-A940-60248385F426} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ShopperReports.CntntDisp.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ShopperReports.CntntDisp (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{DEE758B4-C3FB-4a5b-9939-848B9C77A2FB} (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ShopperReports.Stock.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ShopperReports.Stock (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} (Adware.Softomate) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{69725738-CD68-4f36-8D02-8C43722EE5DA} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{89F88394-3828-4d03-A0CF-8203604C3DA6} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D4233F04-1789-483c-A137-731E8F113DD5} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ClickPotatoLiteSA (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShopperReportsSA (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\BRNstIE.DLL (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\MenuButtonIE.DLL (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\ShopperReports3 (Adware.ShopperReports) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\clickpotatolitesa (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\ClickPotatoLite (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\ShopperReports3 (Adware.ShopperReports) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ClickPotatoLiteSA (Adware.ClickPotato) -> Value: ClickPotatoLiteSA -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Dvugokupuj (Trojan.Agent.U) -> Value: Dvugokupuj -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform\ShopperReports 3.0.517.0 (Adware.HotBar) -> Value: ShopperReports 3.0.517.0 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform\SRS_IT_E8790772B0765A5535AF95 (Malware.Trace) -> Value: SRS_IT_E8790772B0765A5535AF95 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions\ShopperReports@ShopperReports.com (ShopperReports) -> Value: ShopperReports@ShopperReports.com -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions\ClickPotatoLite@ClickPotatoLite.com (Adware.ClickPotato) -> Value: ClickPotatoLite@ClickPotatoLite.com -> Quarantined and deleted successfully.

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
c:\programdata\2aca5cc3-0f83-453d-a079-1076fe1a8b65 (Adware.Seekmo) -> Quarantined and deleted successfully.
c:\programdata\clickpotatolitesa (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Roaming\clickpotatolite (Adware.ClickPotato) -> Delete on reboot.
c:\Users\margaux\AppData\Roaming\shopperreports3 (Adware.ShopperReports) -> Delete on reboot.
c:\program files\clickpotatolite (Adware.ClickPotato) -> Delete on reboot.
c:\program files\clickpotatolite\bin (Adware.ClickPotato) -> Delete on reboot.
c:\program files\clickpotatolite\bin\10.0.668.0 (Adware.ClickPotato) -> Delete on reboot.
c:\program files\clickpotatolite\bin\10.0.668.0\firefox (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.668.0\firefox\extensions (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.668.0\firefox\extensions\plugins (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\shopperreports3 (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\shopperreports3\bin (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\shopperreports3\bin\3.0.517.0 (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\shopperreports3\bin\3.0.517.0\firefox (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\shopperreports3\bin\3.0.517.0\firefox\firefoxtoolbar (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\shopperreports3\bin\3.0.517.0\firefox\firefoxtoolbar\extensions (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\shopperreports3\bin\3.0.517.0\firefox\firefoxtoolbar\extensions\chrome (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\shopperreports3\bin\3.0.517.0\firefox\firefoxtoolbar\extensions\components (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\programdata\microsoft\Windows\start menu\Programs\clickpotato (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\programdata\microsoft\Windows\start menu\Programs\shopperreports (Adware.ShopperReports) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
c:\program files\search guard plus\searchguardplus.exe (PUP.Fbsearch) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.668.0\clickpotatolitesa.exe (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.668.0\clickpotatolitesaax.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.668.0\clickpotatolitesabho.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\shopperreports3\bin\3.0.517.0\cntntcntr.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\shopperreports3\bin\3.0.517.0\BRNstIE.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.668.0\clickpotatoliteuninstaller.exe (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.668.0\launchhelp.dll (Adware.Seekmo) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.668.0\firefox\extensions\plugins\npclntax_clickpotatolitesa.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\fast browser search\IE\searchguardplus.exe (PUP.Fbsearch) -> Quarantined and deleted successfully.
c:\program files\fast browser search\IE\update.exe (PUP.Fbsearch) -> Quarantined and deleted successfully.
c:\program files\mozilla firefox\plugins\npclntax_clickpotatolitesa.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\shopperreports3\bin\3.0.517.0\CmndFF.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\shopperreports3\bin\3.0.517.0\mozillaps.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\shopperreports3\bin\3.0.517.0\shopperreportsuninstaller.exe (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\shopperreports3\bin\3.0.517.0\firefox\firefoxtoolbar\extensions\components\BRNstFF.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\ZHPDiag\quarantine\searchguardplus.exe.vir (PUP.Fbsearch) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\onmcserxwa.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\setup3311226856.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\sewmronxac.exe (Trojan.Hiloti.Gen) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\rswnmexoac.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\sai1191.exe (Adware.ScanQuery) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\3AA2.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\3C76.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\8DFF.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\8E00.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\setup1752972136.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\setup1908881604.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\setup212114664.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\setup2604493764.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\setup3007430596.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\setup3028204520.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\setup3192400616.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\setup3408988868.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\setup3669186536.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\setup4051057640.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\setup427196136.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\setup483196932.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\setup527410948.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\setup83912936.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\setup923372996.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\Low\{d7293762-9884-48e2-b836-e0195b9d91d0}\searchguardplus.exe (PUP.Fbsearch) -> Quarantined and deleted successfully.
c:\Users\margaux\AppData\Local\Temp\Low\{d7293762-9884-48e2-b836-e0195b9d91d0}\update.exe (PUP.Fbsearch) -> Quarantined and deleted successfully.
c:\Users\margaux\downloads\photo-10075.jpg-www.facebook.com.scr (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Users\margaux\downloads\photofiltre-fr.exe (Trojan.SMSScam) -> Quarantined and deleted successfully.
c:\Users\margaux\downloads\vlcsetup(1).exe (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\Users\margaux\downloads\vlcsetup(2).exe (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\Users\margaux\downloads\VLCSetup.exe (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\Users\margaux\downloads\vlc_setup1.1.5-win32.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
c:\captura.bmp (Malware.Traces) -> Quarantined and deleted successfully.
c:\programdata\clickpotatolitesa\clickpotatolitesa.dat (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\programdata\clickpotatolitesa\clickpotatolitesaabout.mht (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\programdata\clickpotatolitesa\clickpotatolitesaau.dat (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\programdata\clickpotatolitesa\clickpotatolitesaeula.mht (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\programdata\clickpotatolitesa\clickpotatolitesa_kyf.dat (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.668.0\clickpotatolitesahook.dll (Adware.ClickPotato) -> Delete on reboot.
c:\program files\clickpotatolite\bin\10.0.668.0\firefox\extensions\install.rdf (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\shopperreports3\bin\3.0.517.0\launchhelp.dll (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\shopperreports3\bin\3.0.517.0\link.ico (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\shopperreports3\bin\3.0.517.0\firefox\firefoxtoolbar\extensions\chrome.manifest (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\shopperreports3\bin\3.0.517.0\firefox\firefoxtoolbar\extensions\install.rdf (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\shopperreports3\bin\3.0.517.0\firefox\firefoxtoolbar\extensions\chrome\firefoxtoolbar.jar (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\program files\shopperreports3\bin\3.0.517.0\firefox\firefoxtoolbar\extensions\components\BRNstFF.xpt (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\programdata\microsoft\Windows\start menu\Programs\clickpotato\About Us.lnk (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\programdata\microsoft\Windows\start menu\Programs\clickpotato\clickpotato customer support.lnk (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\programdata\microsoft\Windows\start menu\Programs\clickpotato\clickpotato uninstall instructions.lnk (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\programdata\microsoft\Windows\start menu\Programs\shopperreports\About Us.lnk (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\programdata\microsoft\Windows\start menu\Programs\shopperreports\customer support.lnk (Adware.ShopperReports) -> Quarantined and deleted successfully.
c:\programdata\microsoft\Windows\start menu\Programs\shopperreports\shopperreports uninstall instructions.lnk (Adware.ShopperReports) -> Quarantined and deleted successfully.

Voici, le rapport de Malwarebytes' Anti-Malware

[bernard53]

He bien il y avait du monde

Comment va ton pc cette fois?

[Lady M.]

Je n'en sais rien, apparemment mieux je vais refaire l'examen de ZHPdiag pour contrôler je te donne le rapport après.
Mais je n'ai plus de pubs =)

[bernard53]

Je n'en sais rien, apparemment mieux je vais refaire l'examen de ZHPdiag pour contrôler je te donne le rapport après.
Mais je n'ai plus de pubs =)

Ok ca marche mets moi le nouveau rapport Zhpdiag

[Lady M.]

Désolé, du retard, j'ai des journées chargées XD

Voici, le lien : http://www.cijoint.fr/cjlink.php?file=c ... WKNwjq.txt

[bernard53]

Pas de soucis, chacun a ses préoccupations

Ok fait ceci dans cet ordre s.t.p


Télécharger AD-Remover (créé par C_XX) :

http://www.teamxscript.org/adremoverTelechargement.html

Cliquez sur "DOWNLOAD " et enregistrez-le "sur votre bureau"

Une fois téléchargé sur votre bureau, double-cliquez sur son icone pour lancer l'installation.

Sous vista et Windows7 : clic droit sur son icone et sélectionnez "Exécuter en tant qu'administrateur".
L'installation se fera automatiquement.

A l'écran principal, cliquez sur Nettoyer pour exécuter le nettoyage.

Une fois l'ordinateur redémarré, il ne vous reste plus qu'à copier/coller le rapport sur le forum comme le précédent.
Le rapport se trouve à cet endroit : C:\Ad-Report-CLEAN[1].txt


Ensuite::

* Copie le tout le texte présent dans l'encadré ci-dessous (tu le sélectionnes avec ta souris / Clique droit dessus et choisis "copier" ou fait Ctrl+C)

[MD5.718DA73CA338A0509B996ED6343F21CC] - (.Pas de propriétaire - IE3SH Application.) -- C:\Program Files\SGPSA\ie3sh.exe [65344]
[MD5.57E0DE41F8598905B0B841C3031C6C99] - (.AG Interactive - Kiwee Toolbar.) -- C:\Program Files\Kiwee Toolbar\3.2\kwtbaim.exe [56544]
R3 - URLSearchHook: agihelper.AGUtils - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) (4.0.31106.0 (Main.031106-0000)) -- mscoree.dll
O2 - BHO: Interest recogniser for Widestream6 (powered by Spointer) - {1a6dc111-b030-4c3e-be65-299284128b91} . (.Widestream6 - Interest Recognizer for Widestream6.) -- C:\Program Files\Widestream6\spointer\extensions\widestream6_air_ie.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} . (.Babylon BHO - Pas de description.) -- C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll
O2 - BHO: BrowserHelper Class - {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} . (.Make The Web Better, LLC - Pas de description.) -- C:\Program Files\SGPSA\SearchAssistant.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} . (.Ask - Ask Toolbar.) -- C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Search Assistant - {F0626A63-410B-45E2-99A1-3F2475B2D695} . (.MTWB - Pas de description.) -- C:\Program Files\SGPSA\BHO.dll
O2 - BHO: XBTBPos00 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} . (.Pas de propriétaire - IE Toolbar Engine.) -- C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} . (.Yahoo! Inc. - Yahoo! Toolbar.) -- C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Fast Browser Search - {D7293762-9884-48E2-B836-E0195B9D91D0} . (.Pas de propriétaire - IE Toolbar Engine.) -- C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll
O3 - Toolbar: LimeWire Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} . (.Ask - Ask Toolbar.) -- C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} . (.Babylon Ltd. - Pas de description.) -- C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll
O4 - HKLM\..\Run: [FBSSA] . (.Pas de propriétaire - IE3SH Application.) -- C:\Program Files\SGPSA\ie3sh.exe
O4 - HKLM\..\Run: [KiweeHook] . (.AG Interactive - Kiwee Toolbar.) -- C:\Program Files\Kiwee Toolbar\3.2\kwtbaim.exe
O4 - HKLM\..\Run: [BabylonToolbar] . (.Babylon Ltd. - Pas de description.) -- C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe
O4 - Global Startup: C:\Users\margaux\Desktop\Readon TV Movie Radio Player.lnk . (...) -- C:\Users\margaux\AppData\Roaming\Microsoft\Installer\{BCDA7B81-D35B-4D72-8266-6BAB9383CF2B}\_ECE6EF11E52D5A7C6A4B25.exe
O4 - Global Startup: C:\Users\margaux\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\eMachines Games.lnk . (.WildTangent, Inc..) -- C:\Program Files\eMachines Games\eMachines Game Console\GameConsole-wt.exe
[MD5.6B773BA457B813850A76493B3425AB35] [APT] [Scheduled Update for Ask Toolbar] (.Pas de propriétaire.) -- C:\Program Files\Ask.com\UpdateTask.exe
[MD5.00000000000000000000000000000000] [APT] [SearchGuardPlus] (.Pas de propriétaire.) -- C:\Program Files\Search Guard Plus\SearchGuardPlus.exe (.not file.)
O42 - Logiciel: Kiwee Chatbar - (.AG Interactive.) [HKLM] -- {1793bdb7-d5c1-33be-97e2-7c3e60b6ab43}
O42 - Logiciel: Kiwee Toolbar for Firefox - (.AG Interactive.) [HKLM] -- {10deb052-db5d-32a6-9ff2-200e810d1a7b}
O42 - Logiciel: Kiwee Toolbar for Internet Explorer - (.AG Interactive.) [HKLM] -- {8aade841-03c5-486a-b048-bb112cc0cac5}
[HKCU\Software\AppDataLow\AskToolbarInfo]
[HKCU\Software\AppDataLow\Software\AskToolbar]
[HKCU\Software\AppDataLow\Software\PriceGong]
[HKCU\Software\Ask.com]
[HKCU\Software\AskToolbar]
[HKCU\Software\BabylonToolbar]
[HKCU\Software\FBSearch]
[HKCU\Software\OfferBox]
[HKCU\Software\WideStream]
[HKLM\Software\AskToolbar]
[HKLM\Software\OfferBox]
[HKLM\Software\widestream]
O43 - CFD: 03/04/2011 - 19:05:16 - [1999511] ----D- C:\Program Files\Ask.com
O43 - CFD: 08/04/2011 - 18:23:26 - [2172270] ----D- C:\Program Files\BabylonToolbar
O43 - CFD: 22/12/2009 - 16:20:32 - [5322210] ----D- C:\Program Files\Fast Browser Search
O43 - CFD: 21/01/2010 - 13:45:40 - [8221621] ----D- C:\Program Files\Kiwee Toolbar
O43 - CFD: 04/05/2011 - 20:00:20 - [95576] ----D- C:\Program Files\OfferBox
O43 - CFD: 05/05/2011 - 13:45:40 - [188184] ----D- C:\Program Files\Search Guard Plus
O43 - CFD: 22/12/2009 - 16:19:16 - [592704] ----D- C:\Program Files\SGPSA
O43 - CFD: 21/01/2010 - 13:45:30 - [2324771] ----D- C:\Program Files\UnifiedToolbar
O43 - CFD: 17/04/2011 - 15:31:04 - [3943710] ----D- C:\Program Files\Widestream6
O43 - CFD: 21/01/2010 - 13:45:40 - [187450] ----D- C:\ProgramData\Kiwee Toolbar
O43 - CFD: 01/05/2011 - 10:50:54 - [268118] ----D- C:\Users\margaux\AppData\Roaming\OfferBox
O43 - CFD: 17/04/2011 - 15:32:14 - [604] ----D- C:\Users\margaux\AppData\Roaming\widestream
O43 - CFD: 07/07/2010 - 13:40:34 - [6108494] ----D- C:\Users\margaux\Appdata\Local\AskToolbar
O43 - CFD: 05/05/2011 - 12:52:38 - [370727] ----D- C:\Users\margaux\Appdata\Local\widestream6 Air
O69 - SBI: SearchScopes [HKCU] {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - (Search the Web) - http://search.imgag.com
O69 - SBI: SearchScopes [HKCU] {19F2B849-4ADE-4d4b-85F9-C31C643DBDE9} - (Fast Browser Search) - http://www.fastbrowsersearch.com
O69 - SBI: SearchScopes [HKCU] {1F096B29-E9DA-4D64-8D63-936BE7762CC5} - (Search the web (Babylon)) - http://search.babylon.com
FirewallRaz
EmptyFlash
Emptytemp

Puis Lance ZHPFix depuis le raccourci du bureau.

Clique sur l'icone représentant la lettre H (« coller les lignes Helper »)
- Les lignes se collent automatiquement dans ZHPFix, sinon colle les lignes
- Clique sur le bouton « GO » pour lancer le nettoyage,
- Copie/colle la totalité du rapport dans ta prochaine réponse

-> laisse travailler l'outil et ne touche à rien ...

Une fois terminée, un nouveau rapport s'affiche : copie/colle le contenu de ce dernier dans ta prochaine réponse ...

(ce rapport est en outre sauvegardé dans ce dossier > C:\Program files\ZHPDiag\ZHPFixReport.txt)

Important : s'il t'est demandé de redémarrer le PC pour finir le nettoyage, fais le de suite !