page d'accueil du navigateur

Bonjour,

Je surf avec mozilla.

Depuis quelques jours, ma page d'accueil a changé et affiche le site "http://lo.st/"

J'ai beau aller dans options, modifier l'adresse, mais rien n'y fait.

"http://lo.st/" revient continuellement.

Quelqu'un peut-il m'aider, svp ?

Merci

Télécharge AD-Remover (de Cyrildu17 / C_XX) sur ton Bureau.
http://pagesperso-orange.fr/NosTools/ad_remover.html

Déconnecte-toi du net et ferme toutes applications en cours.

1. Double-clique sur le programme d'installation ; laisse-le
s’ installer par défaut (C:\Program files).

2. Double-clique sur l'icône AD-Remover située sur ton Bureau.
(Pour Vista : clique droit > "Exécuter en tant qu'administrateur")

3. Au menu principal, choisis l'option L.
L’ outil débute sa recherche … Laisse-le travailler !

Le scan achevé, une fenêtre va s’ afficher.
4. Poste (copie-colle) le rapport qui apparaît à la fin.

(Tu trouveras aussi le rapport sous C:\Ad-report(date).log)
(CTRL+A pour tout sélectionner, CTRL+C pour copier et CTRL+V pour coller)

Note : "Process.exe", une composante de l'outil peut être
détecté par certains antivirus comme une infection ; donc, ne pas en tenir compte : il s'agit d'un faux positif.

Bjr, et merci.

Voici le rapport :


.
======= RAPPORT D'AD-REMOVER 1.1.4.5_O | UNIQUEMENT XP/VISTA/SEVEN =======
.
Mit à jour par C_XX le 24/06/2009 à 7:10 PM
Contact: AdRemover.contact@gmail.com
Site web: http://pagesperso-orange.fr/NosTools/ad_remover.html
.
Lancé à: 0:05:13, 13/08/2009 | Mode Normal | Option: CLEAN
Exécuté de: C:\Program Files\Ad-remover\
Système d'exploitation: Microsoft® Windows XP™ Service Pack 3 v5.1.2600
Nom du PC: 00B653021E8E45D | Utilisateur actuel: Steph
.
Administrateur: Administrateur
N'est pas administrateur: ASPNET
N'est pas administrateur: HelpAssistant *Desactive*
N'est pas administrateur: Invité *Desactive*
Administrateur: Steph
.
============== ÉLÉMENT(S) NEUTRALISÉ(S) ==============
.
.
HKCR\AppID\{362A53B2-2913-4F8A-82F5-7E0A23FDC6F9}
HKCR\AppID\EoRezoBHO.DLL
HKCR\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A}
HKCR\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064}
HKCR\CLSID\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
HKCR\EoRezoBHO.EoBho
HKCR\EoRezoBHO.EoBho.1
HKCR\MediaPlayer.GraphicsUtils
HKCR\MediaPlayer.GraphicsUtils.1
HKCR\MgMediaPlayer.GifAnimator
HKCR\MgMediaPlayer.GifAnimator.1
HKCR\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19}
HKCR\Typelib\{B6ACB3F1-6A83-432C-B854-3E1056F87F4E}
HKCU\Software\EoRezo
HKCU\Software\Microsoft\HID_Layer
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
HKCU\Software\SweetIM
HKLM\Software\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289}
HKLM\Software\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F}
HKLM\Software\EoRezo
HKLM\Software\Microsoft\ESENT\Process\SweetIM
HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C7B76B90-3455-4AE6-A752-EAC4D19689E5}
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\eoEngine_is1
HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdate_is1
HKLM\Software\SweetIM
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Eoengine
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Softwarehelper
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Sweetim
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EEE6C35B-6118-11DC-9C72-001320C79847}
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\07D5290CDBDAE4242926B8E6CA650501
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\08E33F7B61DEFF24BB9673ED7D467636
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\0E3D8A5B48622A445A7DF73FEFF32C3F
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\1AC67655DD68F8240B2860F2D511EBD8
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\34EDDB1BFB3A2D448845F3EFD0F15A43
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\4318DF19719275242801CBE292063A4C
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\45FC115D1FEAEF849A4E1610D6EC8BF0
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\46A5861A389ADB844AF89E31BC9DF0A1
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\49B0E1A6FF50BBE4289E4E23DE6EA0C7
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\4CCCAC049F34D0540AAC13011398BEDB
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\5C4389D0BFB302C479DE4178BD5D9EBA
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\5D19F074C042AD34BAB463D4175A062E
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\5D2B09BDEF4FE54418E6F3373CDBC7AC
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\61B65D3397A1FBF4CB1571B5E4F6B5B0
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\68E8A05C60DD9254591DBD16C94EDDBF
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\697E782CF574CC34CBB9566440BA12BC
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\6AE27A8613CF7EA4782F2886F67295E5
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\7CE172051F585E04187BCB97570BFA74
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\86A901BA5265452499DCBF719C378EE3
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\88ABD1CD5C40EC84789A7F6EF86DAC5E
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\980289C22F80A7C4BB9323DC61255E4E
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\9A4B7EF3789F871419D9302583B20C15
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\A6C53B0F76C44004A8F36716213017DB
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\B59F2D8189784CC46A4597F2842480B0
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\BD746FB95FB8E5B45BF66BE54D5FD91F
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\CCF399FCD6D2D3F46BF02A1378654FC9
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\D149C1355C98DE24E82CEFBD996FE06A
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\DB59FDB786388EA4D897F3EE715683AC
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\DB8DAD19CFBCC2049A4477183787E8C5
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\E337925F629CF4C4FB08F3D9674DD839
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\EC65F200D112357449C8B1BC3CFA03D0
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\F327D0C73C0973644A21E8CC852267A0
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Components\FA96423FE2B98E248A3B23548D1E22D9
.
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Toolbars
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\logs
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\update
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\adapter.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\autoupdate.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\logger.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\messages.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\sweetim.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\sweetimapp.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users\ayies@hotmail.fr
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users\celea06@hotmail.fr
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users\faetmel@live.fr
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users\lesteph.06@hotmail.fr
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users\main_user_config.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users\scarlotlolo@hotmail.com
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users\ayies@hotmail.fr\content_update_notification.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users\ayies@hotmail.fr\emoticons_shortcut.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users\ayies@hotmail.fr\user_config.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users\celea06@hotmail.fr\content_update_notification.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users\celea06@hotmail.fr\emoticons_shortcut.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users\celea06@hotmail.fr\lastuse_SpecialFX.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users\celea06@hotmail.fr\lastuse_Winks.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users\celea06@hotmail.fr\user_config.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users\faetmel@live.fr\emoticons_shortcut.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users\faetmel@live.fr\user_config.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users\lesteph.06@hotmail.fr\content_update_notification.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users\lesteph.06@hotmail.fr\emoticons_shortcut.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users\lesteph.06@hotmail.fr\user_config.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users\scarlotlolo@hotmail.com\emoticons_shortcut.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\conf\users\scarlotlolo@hotmail.com\user_config.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000100B0.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000100B3.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000100B8.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000100BE.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000100C5.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000100CA.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000100CB.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000100CF.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000100D3.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000100D8.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000100DA.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000100E8.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000100FA.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00010101.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00010108.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0001011A.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0001081A.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0001081E.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0001083F.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00010842.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00010847.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0001084B.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00010853.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00010856.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00010861.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00010868.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00010869.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0001088C.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0001088D.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0001088E.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00010890.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00010893.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00010894.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00010896.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0001089A.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0001089B.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0001089C.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0001089D.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000108A1.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000108A2.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000108A9.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000108AA.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000108AB.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000108AD.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000108AE.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000108B1.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000108B2.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000108B3.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000108B9.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000108BD.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000108BE.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000108C0.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000108C2.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000108C4.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000108CE.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000108E2.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000108F0.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000108F1.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000108F2.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00010900.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00010901.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00010903.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00010904.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0001092C.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0001094A.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00010954.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0002006C.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00020073.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00020075.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000200C0.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00020158.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00020239.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00030075.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00030096.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00030099.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0003009A.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000400A3.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000400A4.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000400E9.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00050004.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00050005.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0006007A.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0006007D.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000601A6.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\000601C4.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0008000D.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00080011.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00080012.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00080014.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00080016.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0008001A.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0008001B.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0008001E.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00080020.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\00080089.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\0008008B.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\010108A7.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Messenger\data\contentdb\cache_indx.dat
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Toolbars\Internet Explorer
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Toolbars\Internet Explorer\cache
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM\Toolbars\Internet Explorer\cache\f64a71f602d078aa84829e36b8992194.toolbar31.xml
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\SweetIM
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\cmhost.cyp
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\ConfMedia.cyp
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\db
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\eoDesktop
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\eoStats
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\host.cyp
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\install.exe
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\user.cyp
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\eoDesktop\config.xml
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\eoDesktop\eoDesktop.html
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\eoDesktop\userConfig.xml
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\eoStats\eoStats.txt
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\Download
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\help_config.cyp
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\Software
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\SoftwareUpdate.exe
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\unins000.dat
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\unins000.exe
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\user_config.cyp
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\user_profil.cyp
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.0.8
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.0.9
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.0
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.1
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.2
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.3
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.4
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.0.9\itstv.exe
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.0\itstv.exe
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.1\itstv.exe
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.2\itstv.exe
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.3\itstv.exe
C:\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate\Software\itsTV\3.0.1.4\itstv.exe
C:\DOCUME~1\Steph\APPLIC~1\EoRezo
C:\Program Files\EoRezo\ConfMedia.cyp
C:\Program Files\EoRezo\EoAdv
C:\Program Files\EoRezo\EoEngine.exe
C:\Program Files\EoRezo\eoEngine.url
C:\Program Files\EoRezo\EoMultiLanguage.dll
C:\Program Files\EoRezo\EoRezoComm.dll
C:\Program Files\EoRezo\EoRezoImg_17.dll
C:\Program Files\EoRezo\EoRezoImg_19.dll
C:\Program Files\EoRezo\EoRezoImg_20.dll
C:\Program Files\EoRezo\EoRezoImg_21.dll
C:\Program Files\EoRezo\EoRezoImg_22.dll
C:\Program Files\EoRezo\EoRezoImg_23.dll
C:\Program Files\EoRezo\EoRezoTools_16.dll
C:\Program Files\EoRezo\EoRezoTools_17.dll
C:\Program Files\EoRezo\EoRezoTools_18.dll
C:\Program Files\EoRezo\EoRezoTools_20.dll
C:\Program Files\EoRezo\EoRezoTools_21.dll
C:\Program Files\EoRezo\EoRezoTools_26.dll
C:\Program Files\EoRezo\EoRezoTools_27.dll
C:\Program Files\EoRezo\EoRezoTools_28.dll
C:\Program Files\EoRezo\EoRezoTools_29.dll
C:\Program Files\EoRezo\EoRezoTools_30.dll
C:\Program Files\EoRezo\FreeImage.dll
C:\Program Files\EoRezo\Host.cyp
C:\Program Files\EoRezo\lang
C:\Program Files\EoRezo\MngInstaller.dll
C:\Program Files\EoRezo\unins000.dat
C:\Program Files\EoRezo\unins000.exe
C:\Program Files\EoRezo\user.cyp
C:\Program Files\EoRezo\EoAdv\atl90.dll
C:\Program Files\EoRezo\EoAdv\EoAdv.dll
C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
C:\Program Files\EoRezo\EoAdv\mfc90.dll
C:\Program Files\EoRezo\EoAdv\Microsoft.VC90.ATL.manifest
C:\Program Files\EoRezo\EoAdv\Microsoft.VC90.CRT.manifest
C:\Program Files\EoRezo\EoAdv\Microsoft.VC90.MFC.manifest
C:\Program Files\EoRezo\EoAdv\msvcr90.dll
C:\Program Files\EoRezo\lang\ihm_eoclock.xml
C:\Program Files\EoRezo\lang\ihm_eoengine.xml
C:\Program Files\EoRezo\lang\ihm_eonet.xml
C:\Program Files\EoRezo\lang\ihm_eorezotools.xml
C:\Program Files\EoRezo\lang\ihm_eosudoku.xml
C:\Program Files\EoRezo\lang\ihm_eoweather.xml
C:\Program Files\EoRezo\lang\lang_en.xml
C:\Program Files\EoRezo\lang\lang_es.xml
C:\Program Files\EoRezo\lang\lang_fr.xml
C:\Program Files\EoRezo\lang\lang_it.xml
C:\Program Files\EoRezo
/!\ NON SUPPRIMÉ: C:\Program Files\SweetIM\Messenger
C:\Program Files\SweetIM\Messenger\default.xml
/!\ NON SUPPRIMÉ: C:\Program Files\SweetIM\Messenger\mgAdaptersProxy.dll
C:\Program Files\SweetIM\Messenger\mgAIMAuto.dll
C:\Program Files\SweetIM\Messenger\mgAIMMessengerAdapter.dll
C:\Program Files\SweetIM\Messenger\mgArchive.dll
C:\Program Files\SweetIM\Messenger\mgcommon.dll
C:\Program Files\SweetIM\Messenger\mgcommunication.dll
C:\Program Files\SweetIM\Messenger\mgconfig.dll
C:\Program Files\SweetIM\Messenger\mgFlashPlayer.dll
C:\Program Files\SweetIM\Messenger\mghooking.dll
C:\Program Files\SweetIM\Messenger\mgIEPlayer.dll
C:\Program Files\SweetIM\Messenger\mglogger.dll
C:\Program Files\SweetIM\Messenger\mgMediaPlayer.dll
C:\Program Files\SweetIM\Messenger\mgMsnAuto.dll
C:\Program Files\SweetIM\Messenger\mgMsnMessengerAdapter.dll
C:\Program Files\SweetIM\Messenger\mgsimcommon.dll
C:\Program Files\SweetIM\Messenger\mgSweetIM.dll
C:\Program Files\SweetIM\Messenger\mgUpdateSupport.dll
C:\Program Files\SweetIM\Messenger\mgxml_wrapper.dll
C:\Program Files\SweetIM\Messenger\mgYahooAuto.dll
C:\Program Files\SweetIM\Messenger\mgYahooMessengerAdapter.dll
C:\Program Files\SweetIM\Messenger\msvcp71.dll
/!\ NON SUPPRIMÉ: C:\Program Files\SweetIM\Messenger\msvcr71.dll
C:\Program Files\SweetIM\Messenger\resources
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\Program Files\SweetIM\Messenger\resources\images
C:\Program Files\SweetIM\Messenger\resources\images\AudibleButton.png
C:\Program Files\SweetIM\Messenger\resources\images\DisplayPicturesButton.png
C:\Program Files\SweetIM\Messenger\resources\images\EmoticonButton.png
C:\Program Files\SweetIM\Messenger\resources\images\NudgeButton.png
C:\Program Files\SweetIM\Messenger\resources\images\SoundFxButton.png
C:\Program Files\SweetIM\Messenger\resources\images\WinksButton.png
/!\ NON SUPPRIMÉ: C:\Program Files\SweetIM
C:\WINDOWS\Installer\{EC6BD2CC-2DCF-4AD8-A8DD-DF89D29EEF3F}\ARPPRODUCTICON.exe
C:\WINDOWS\Installer\{EC6BD2CC-2DCF-4AD8-A8DD-DF89D29EEF3F}
C:\DOCUME~1\Steph\LOCALS~1\Temp\is-KFEFC.tmp\EoRezo
C:\WINDOWS\Installer\182c4e.msi
C:\DOCUME~1\Steph\Cookies\steph@ads.eorezo[2].txt
C:\DOCUME~1\Steph\Cookies\steph@eorezo[2].txt
C:\DOCUME~1\Steph\Cookies\steph@soft.eorezo[1].txt
C:\DOCUME~1\Steph\Cookies\steph@www.sweetim[2].txt

(!) -- Fichiers temporaires supprimés.

.
============== Scan additionnel ==============
.

* Mozilla FireFox Version 3.0.13 *

Nom du profil: 581xvyk6.default (Steph)
.
(Prefs.js) user_pref("browser.search.defaultenginename", "Google");
(Prefs.js) user_pref("browser.search.selectedEngine", "Live Search");
(Prefs.js) user_pref("browser.search.defaulturl", "hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=");
(Prefs.js) user_pref("browser.startup.homepage", "hxxp://y.lo.st");
(Prefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.13");
(Invalidprefs.js) user_pref("browser.search.defaultenginename", "Google");
(Invalidprefs.js) user_pref("browser.search.selectedEngine", "Live Search");
(Invalidprefs.js) user_pref("browser.search.defaulturl", "hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=");
(Invalidprefs.js) user_pref("browser.startup.homepage", "hxxp://y.lo.st");
(Invalidprefs.js) user_pref("browser.startup.homepage_override.mstone", "rv:1.9.0.11");
.
(Invalidprefs.js) EFFACÉ: user_pref("browser.startup.homepage", "hxxp://y.lo.st");
(prefs.js) EFFACÉ: user_pref("browser.startup.homepage", "hxxp://y.lo.st");
.

* Internet Explorer Version 7.0.5730.11 *

[HKEY_CURRENT_USER\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://go.microsoft.com/fwlink/?linkid=54896
Start Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

[HKEY_LOCAL_MACHINE\..\Internet Explorer\Main]

Default_Page_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
Default_Search_URL: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Search bar: hxxp://search.msn.com/spbasic.htm
Search Page: hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
Start Page: hxxp://fr.msn.com/

[HKEY_LOCAL_MACHINE\..\Internet Explorer\ABOUTURLS]

Tabs: res://ieframe.dll/tabswelcome.htm

============== Suspect (Cracks, Serials ... ) ==============

.
C:\Documents and Settings\stef et celine\Bureau\EvID4226Patch.exe
.
===================================
.
3203 Octet(s) - C:\Ad-Report-Clean-16.05.2009.log
26993 Octet(s) - C:\Ad-Report-CLEAN.log
8391 Octet(s) - C:\Ad-Report-Scan-12.05.2009.log
.
26 Fichier(s) - C:\DOCUME~1\Steph\LOCALS~1\Temp
1 Fichier(s) - C:\WINDOWS\Temp
.
19 Fichier(s) - C:\Program Files\Ad-remover\BACKUP
93 Fichier(s) - C:\Program Files\Ad-remover\QUARANTINE
.
Fin à: 0:20:31 | 13/08/2009
.
============== E.O.F ==============
.

steph.06

Qu' est-ce que ça dit au niveau de la page d' accueil ?

-----
Télécharge, installe et mets à jour Malwarebytes Anti-malware ; puis, fais un scan complet et poste le rapport.

Si MalwareByte's a détecté des infections, clique sur Afficher les résultats, puis sur Supprimer la sélection.

-----
Ensuite, fais un scan HijackThis et poste le rapport.

Bonjour,

Voici le premier rapport de Malwarebytes :

Malwarebytes' Anti-Malware 1.40
Version de la base de données: 2615
Windows 5.1.2600 Service Pack 3

14/08/2009 01:00:06
mbam-log-2009-08-14 (00-59-52).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 187363
Temps écoulé: 1 hour(s), 42 minute(s), 6 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 1
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 13

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSMHelp (Hijack.Help) -> Bad: (1) Good: (0) -> No action taken.

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Documents and Settings\stef et celine\Bureau\EvID4226Patch.exe (Malware.Tool) -> No action taken.
C:\Program Files\Ad-remover\QUARANTINE\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdate.exe.vir (Adware.EoRezo) -> No action taken.
C:\Program Files\Ad-remover\QUARANTINE\DOCUME~1\Steph\APPLIC~1\EoRezo\SoftwareUpdateHP.exe.vir (Adware.EoRezo) -> No action taken.
C:\Program Files\Ad-remover\QUARANTINE\PROGRA~1\EoRezo\EoAdv.dll.vir (Adware.EoRezo) -> No action taken.
C:\Program Files\Ad-remover\QUARANTINE\PROGRA~1\EoRezo\EoEngine.exe.vir (Adware.EoRezo) -> No action taken.
C:\Program Files\Ad-remover\QUARANTINE\PROGRA~1\EoRezo\EoRezoBHO.dll.vir (Adware.EoRezo) -> No action taken.
C:\Program Files\EMULE\EvID4226Patch.exe (Malware.Tool) -> No action taken.
C:\System Volume Information\_restore{64A20BCB-2355-4024-87FA-03B566428A60}\RP277\A0073810.exe (Adware.EoRezo) -> No action taken.
C:\System Volume Information\_restore{64A20BCB-2355-4024-87FA-03B566428A60}\RP277\A0073811.exe (Adware.EoRezo) -> No action taken.
C:\System Volume Information\_restore{64A20BCB-2355-4024-87FA-03B566428A60}\RP277\A0073820.dll (Adware.EoRezo) -> No action taken.
C:\System Volume Information\_restore{64A20BCB-2355-4024-87FA-03B566428A60}\RP277\A0073821.dll (Adware.EoRezo) -> No action taken.
C:\System Volume Information\_restore{64A20BCB-2355-4024-87FA-03B566428A60}\RP277\A0073827.exe (Adware.EoRezo) -> No action taken.
C:\WINDOWS\meta4.exe (Trojan.Agent) -> No action taken.


Effectivement, il y en a 14.

Bon, je supprime et je lance le scan HijackThis.

Merci

Voici le second scan :



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:16:43, on 14/08/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\UberIcon\UberIcon Manager.exe
C:\Windows\System32\VisualTaskTips.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\LeapFrog\LeapFrog Connect Tag\bin\TagMonitor.exe
C:\WINDOWS\VM305_STI.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Java\jre6\bin\jucheck.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\styler\TB\StylerTB.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKLM\..\Run: [UberIcon] "C:\Program Files\UberIcon\UberIcon Manager.exe"
O4 - HKLM\..\Run: [VisualTaskTips] C:\Windows\System32\VisualTaskTips.exe
O4 - HKLM\..\Run: [Vistadrv] C:\WINDOWS\system32\Vistadrive\vsdrv.exe
O4 - HKLM\..\Run: [TransBar] C:\WINDOWS\system32\transbar.exe /s
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [TagMonitor] "C:\Program Files\LeapFrog\LeapFrog Connect Tag\bin\TagMonitor.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [BigDog305] C:\WINDOWS\VM305_STI.EXE VIMICRO USB PC Camera (ZC0305)
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide2] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,L,,4,N (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'Default user')
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - cmdmapping - (no file) (HKCU)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2E6B99FD-B476-421E-93A9-94B95362F06A}: NameServer = 192.168.1.19
O17 - HKLM\System\CCS\Services\Tcpip\..\{F7010B08-5DC8-4937-B2B2-07964CF2EC19}: NameServer = 192.168.1.1
O23 - Service: Planificateur Avira AntiVir Personal - Free Antivirus (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

--
End of file - 9177 bytes

J' ai l' impression que tu possèdes un Windows "modifié" ...

---
Télécharge ST_Fix de Batch_Man.

Double clique sur le fichier que tu viens de télécharger.
Poste le rapport.

En fait, c'est un ordi qu'un ami m'avait préparé.

Donc, ce n'est pas qu'une impression.

Bon, je vais telecharger le nouveau fichier et poster le rapport.

Merci encore.

Voici le rapport :

########################################################################
#
# ST_Fix v.2.05 par Batch_Man
# Mise à jour le 06/08/2009
# Début a 10:16 le 14/08/2009
# Système d'exploitation: Microsoft Windows XP
# Service Pack: Service Pack 3
# Mode de boot: Normal
# Lancé de C:\Documents and Settings\Steph\Bureau\ST_Fix.bat
#
################################ Suppression ###############################
#
#
################################## Terminé ################################

...

Tu as retrouvé ta page d' accueil ?

A vrai dire, pas tout à fait.

J'ai beau aller dans option et rentrer l'adresse de google, à chaque fois, j'ai l'adresse "http://www.google.fr/firefox?client=firefox-a&rls=org.mozilla:fr:official" qui revient.

Mais bon, c'est dejà beaucoup mieux et surtout vous m'avez permis de faire un BON nettoyage.

Mille fois merci.

Puis-je utiliser cette manipulation sur l'ordinateur d'un ami ?

Merci encore.

...

Tu fais cela ...



Appliquer et OK et ça ne marche pas !

Helas....oui!

Effectivement, je fais bien ça mais à chaque fois, ça me remet par defaut : http://www.google.fr/firefox?client=firefox-a&rls=org.mozilla:fr:official(...)