On va y aller molo , cela provient surement du Script de suppression vu qu'il est chargé ...
Reprend la procédure en mettant ceci maintenant:
G2 - GCE: Preference [User Data\Default] [bjeikeheijdjdfjbmknpefojickbkmom] Offerbox v.2.1.3714.137 (Activé)
O43 - CFD: 20/04/2009 - 00:31:38 - [2183952] ----D- C:\Program Files\Babylon
O81 - IFC: Internet Feature Controls [HKUS\.DEFAULT] [FEATURE_BROWSER_EMULATION] -- svchost.exe
O81 - IFC: Internet Feature Controls [HKUS\S-1-5-18] [FEATURE_BROWSER_EMULATION] -- svchost.exe
[HKLM\Software\Classes\AppID\SoftwareUpdate.exe]
C:\Program Files\Babylon
O64 - Services: CurCS - (.not file.) - 05897113 (05897113) .(...) - LEGACY_05897113
O69 - SBI: SearchScopes [HKCU] {413C2FB3-8392-4103-8850-09572B352DC1}
O3 - Toolbar: (no name) - {1E796980-9CC5-11D1-A83F-00C04FC99D61} . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F}
O51 - MPSK:{044563e8-b002-11dd-bed8-0002e3437929}\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- J:\autorun.exe (.not file.)
O51 - MPSK:{f73e5a64-c95a-11dd-bf70-0002e3437929}\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- K:\autorun.exe (.not file.)
R3 - URLSearchHook: PHPNukeFR Toolbar - {1c491116-c175-45e1-a570-6fb14fea8b7b} . (.Pas de propriétaire - Pas de description.) (No version) -- C:\Program Files\PHPNukeFR\tbPHPN.dll
R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) (6.3.2.0) -- C:\Program Files\Softonic_France\prxtbSof0.dll
R3 - URLSearchHook: Elf 1.13 Toolbar - {b80f591e-fe9a-46cf-a13e-180377240586} . (.Conduit Ltd. - Conduit Toolbar.) (6.3.2.0) -- C:\Program Files\Elf_1.13\prxtbElf0.dll
O2 - BHO: Softonic_France - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\prxtbSof0.dll
O2 - BHO: Elf 1.13 - {b80f591e-fe9a-46cf-a13e-180377240586} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Elf_1.13\prxtbElf0.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} . (.Yahoo! Inc. - Yahoo! Toolbar.) -- C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: PHPNukeFR Toolbar - {1c491116-c175-45e1-a570-6fb14fea8b7b} . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\PHPNukeFR\tbPHPN.dll
O3 - Toolbar: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Softonic_France\prxtbSof0.dll
O3 - Toolbar: Elf 1.13 Toolbar - {b80f591e-fe9a-46cf-a13e-180377240586} . (.Conduit Ltd. - Conduit Toolbar.) -- C:\Program Files\Elf_1.13\prxtbElf0.dll
O42 - Logiciel: Elf 1.13 Toolbar - (.Elf 1.13.) [HKLM] -- Elf_1.13 Toolbar
O42 - Logiciel: PHPNukeFR Toolbar - (.Pas de propriétaire.) [HKLM] -- PHPNukeFR Toolbar
O42 - Logiciel: Softonic_France Toolbar - (.Softonic_France.) [HKLM] -- Softonic_France Toolbar
Poste le rapport
[HKCU\Software\Elf_1.13]
[HKCU\Software\PHPNukeFR]
[HKCU\Software\Softonic_France]
[HKLM\Software\Elf_1.13]
[HKLM\Software\PHPNukeFR]
[HKLM\Software\Productivity_2.1]
[HKLM\Software\Softonic_France]
O43 - CFD: 21/04/2011 - 10:00:28 - [13139727] ----D- C:\Program Files\Elf_1.13
O43 - CFD: 28/04/2011 - 10:03:28 - [16176091] ----D- C:\Program Files\Softonic_France
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\NetworkCrawler\Objects\WorkgroupCrawler]
[HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine]
[HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook]
[HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook.1]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1c491116-c175-45e1-a570-6fb14fea8b7b}]
[HKCR\CLSID\{1c491116-c175-45e1-a570-6fb14fea8b7b}]
[HKLM\Software\Classes\CLSID\{1c491116-c175-45e1-a570-6fb14fea8b7b}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1c491116-c175-45e1-a570-6fb14fea8b7b}]
[HKCR\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}]
[HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}]
[HKCR\Interface\{4897bba6-48d9-468c-8efa-846275d7701b}]
[HKLM\Software\Classes\Interface\{4897bba6-48d9-468c-8efa-846275d7701b}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
[HKCR\CLSID\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
[HKLM\Software\Classes\CLSID\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4daac69c-cba7-45e2-9bc8-1044483d3352}]
[HKCR\CLSID\{72B3882F-453A-4633-AAC9-8C3DCED62AFF}]
[HKLM\Software\Classes\CLSID\{72B3882F-453A-4633-AAC9-8C3DCED62AFF}]
poste le rapport
[HKCU\Software\PHPNukeFR]
[HKLM\Software\PHPNukeFR]
[HKCU\Software\Softonic_France]
[HKLM\Software\Softonic_France]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Toolbar]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Softonic_France Toolbar]
C:\Program Files\Softonic_France
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\PHPNukeFR
C:\Documents and Settings\HP_Propriétaire\Local Settings\Application Data\Softonic_France
O58 - SDL:[MD5.BDA9B6E9A4C750140FF2B35A130A4B7D] - 27/11/2010 - 09:21:34 RSH-- . (...) -- C:\WINDOWS\system32\51D7A20B1D.sys [88]
O58 - SDL:[MD5.21DF6DCA0CDE41F2936D8A787B8D267B] - 27/11/2010 - 09:21:43 -SHA- . (...) -- C:\WINDOWS\system32\KGyGaAvL.sys [2828]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\PHPNukeFR Toolbar]
EmptyFlash
Emptytemp
poste le rapport
