Ouverture de pub intensive

as-tu activer le bloqueur de fenêtres publicitaires d’Internet Explorer ?

ouvrir Internet Explorer , cliquez sur le bouton Outils, puis sur bloqueur de fenêtres publicitaires.

activer le bloqueur de fenêtres publicitaires .

si tu as toujours des problèmes et que tu penses à une infection , il faut que tu ailles faire un tour dans la section sécurité

du forum , seuls des helpers en sécurité sont à même d'interpréter un rapport hijack this

Merci de t'a réponse, et je pense plus a une infection... que faire?  

tu as fais la manip. donc ,

tu as lu mon message jusqu'à la fin donc .

Bonjour

Relance Hijackthis (clique droit -> lancer en tant qu'adminstrateur sous Vista ET sEVEN), , coche ces lignes (si toujours présentes) :

R3 - URLSearchHook: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuze.dll
R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSoft.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: Softonic_France - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSoft.dll
O2 - BHO: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuze.dll
O3 - Toolbar: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuze.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSoft.dll

Ferme toutes les applications en cours (particulièrement ton navigateur Internet).

Puis

Ensuite fais ceci

Si tu le possède déjà, passe l'étape de l'installation et va directement à la mise à jour >>

Télécharge MalwareByte's Anti-Malware sur ton Bureau.

Installe-le en double-cliquant sur le fichier Download_mbam-setup.exe.
Une fois l'installation et la mise à jour effectuées :

Exécute maintenant MalwareByte's Anti-Malware. Si cela n'est pas déjà fait, sélectionne "Exécuter un examen rapide".

Afin de lancer la recherche, clic sur"Rechercher".

Une fois le scan terminé, une fenêtre s'ouvre, clic sur OK. Deux possibilités s'offrent à toi :

Si le programme n'a rien trouvé, appuie sur OK. Un rapport va apparaître, ferme-le.

Si des infections sont présentes, clic sur "Afficher les résultats"
puis sur "Supprimer la sélection".

Enregistre le rapport sur ton Bureau.

Fais redémarrer ton ordinateur normalement et poste le rapport dans ta prochaine réponse.

REMARQUE : Si MalwareByte's Anti-Malware a besoin de redémarrer pour terminer la suppression, accepte en cliquant sur Ok.

Bonjour ;

Voici le rendu du scan ; j'ai supprimer la selection..





OU :

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Version de la base de données: 5523

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

15/01/2011 11:35:40
mbam-log-2011-01-15 (11-35-40).txt

Type d'examen: Examen rapide
Elément(s) analysé(s): 148878
Temps écoulé: 8 minute(s), 30 seconde(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 1
Clé(s) du Registre infectée(s): 8
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 5

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
C:\Program Files\PCTuto\pctutoBHO.dll (Trojan.Eorezo) -> No action taken.

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\pctutobho.pctbho (Trojan.Eorezo) -> No action taken.
HKEY_CLASSES_ROOT\TypeLib\{0bf73e27-2734-4f7b-925a-4bbb1457f5fa} (Trojan.Eorezo) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{e2ed56b6-35fc-4484-9530-ec87fb458e78} (Trojan.Eorezo) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{293a63f7-c3b6-423a-9845-901ac0a7ee6e} (Trojan.Eorezo) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{293a63f7-c3b6-423a-9845-901ac0a7ee6e} (Trojan.Eorezo) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{293a63f7-c3b6-423a-9845-901ac0a7ee6e} (Trojan.Eorezo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{293a63f7-c3b6-423a-9845-901ac0a7ee6e} (Trojan.Eorezo) -> No action taken.
HKEY_CLASSES_ROOT\pctutobho.pctbho.1 (Trojan.Eorezo) -> No action taken.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Program Files\PCTuto\pctutoBHO.dll (Trojan.Eorezo) -> No action taken.
C:\$Recycle.Bin\S-1-5-21-1345179053-813542716-3814585853-1000\$RGJLCZB.exe (Trojan.KeyLogger) -> No action taken.
C:\$Recycle.Bin\S-1-5-21-1345179053-813542716-3814585853-1000\$RR7RLVW.exe (Trojan.KeyLogger) -> No action taken.
C:\$Recycle.Bin\S-1-5-21-1345179053-813542716-3814585853-1000\$RIXPFLV\rkfree.exe (Keylogger.Logixoft) -> No action taken.
C:\Users\Théo\downloads\rkfree_setup.exe (Keylogger.Logixoft) -> No action taken.



Que faire? Merci de votre aide!

Ps : La pub s'ouvre apres chaque démarage.. et aprés le redemarage et la suppression des fichiers, la pub s'affiche encore  

Hello

On a posté en même temps Tu as supprimé la sélection avec MBAM ?

Oui .. J'ai supprimer la séléction .

Tu as toujours des pubs ?

Télécharge OTL sur ton Bureau.

Double-clique sur OTL.exe pour le lancer.Sous Windows Vista/7, faire un clic droit sur OTL.exe puis choisir "Exécuter en tant qu'Administrateur" pour lancer l'outil.

Prends le soin de fermer toutes les autres fenêtres Windows afin de ne pas interrompre le scan.

L'écran principal de OTL s'affiche:

Dans la section Rapport en haut de cette fenêtre, coche Rapport minimal.

Coche également les cases à côté de Recherche Lop et Recherche purity.

Copies et colles le contenu de cette citation dans la partie inférieure d'OTL, Sous "Personnalisation"

netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
ctfmon.exe
explorer.exe
userinit.exe
wininit.exe
winlogon.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
CREATERESTOREPOINT

Enfin, clique sur le bouton Analyse; Ne change aucun paramètre si je ne te l'ai pas dit. Le scan ne prendra pas beaucoup de temps.

Une fois l'analyse terminée, deux fenêtres vont s'ouvrir dans le Bloc-notes : OTL.txt et Extras.txt. Ils se trouvent au même endroit que OTL (donc par défaut sur le Bureau)

NE POSTE PAS LES RAPPORTS SUR LE FORUM MAIS

Rends toi ensuite sur ce site : http://www.cijoint.fr/
Clique sur "parcourir" et va jusqu'au rapport que tu as sauvegardé .
Clique ensuite sur "cliquer ici pour déposer le fichier" et patiente ...
Une fois l'upload finit , un lien apparait > copie/colle le dans ta prochaine réponse stp ....

AIDE en IMAGE

Re ;

http://www.cijoint.fr/cjlink.php?file=cj201101/cijUStR5...
et
http://www.cijoint.fr/cjlink.php?file=cj201101/cija6isC...



Merci

Relance OTL.exe.

Sous l'onglet Personnalisation en bas de la fenêtre, copie-colle le contenu du cadre ci dessous depuis rien comme sur l'image:

Puis clique sur le bouton Correction en haut de la fenêtre.

Laisse le programme travailler sans te servir du PC!!!!!

Copie et colle le rapport dans ta réponse stp

Voila ;


All processes killed
Error: Unable to interpret <Rien > in the current context!
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{4daac69c-cba7-45e2-9bc8-1044483d3352} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4daac69c-cba7-45e2-9bc8-1044483d3352}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{ba14329e-9550-4989-b3f2-9732e92d17cc} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ba14329e-9550-4989-b3f2-9732e92d17cc}\ not found.
C:\Users\Théo\AppData\Roaming\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} folder moved successfully.
C:\Users\Théo\AppData\Roaming\mozilla\Extensions folder moved successfully.
C:\Users\Théo\AppData\Roaming\mozilla\Firefox\Profiles\jaesty70.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\META-INF folder moved successfully.
C:\Users\Théo\AppData\Roaming\mozilla\Firefox\Profiles\jaesty70.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries folder moved successfully.
C:\Users\Théo\AppData\Roaming\mozilla\Firefox\Profiles\jaesty70.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\lib folder moved successfully.
C:\Users\Théo\AppData\Roaming\mozilla\Firefox\Profiles\jaesty70.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults\preferences folder moved successfully.
C:\Users\Théo\AppData\Roaming\mozilla\Firefox\Profiles\jaesty70.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults\custombuttons folder moved successfully.
C:\Users\Théo\AppData\Roaming\mozilla\Firefox\Profiles\jaesty70.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults\contenthandling folder moved successfully.
C:\Users\Théo\AppData\Roaming\mozilla\Firefox\Profiles\jaesty70.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults\components folder moved successfully.
C:\Users\Théo\AppData\Roaming\mozilla\Firefox\Profiles\jaesty70.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\defaults folder moved successfully.
C:\Users\Théo\AppData\Roaming\mozilla\Firefox\Profiles\jaesty70.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components folder moved successfully.
C:\Users\Théo\AppData\Roaming\mozilla\Firefox\Profiles\jaesty70.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\chrome folder moved successfully.
C:\Users\Théo\AppData\Roaming\mozilla\Firefox\Profiles\jaesty70.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} folder moved successfully.
C:\Users\Théo\AppData\Roaming\mozilla\Firefox\Profiles\jaesty70.default\extensions\engine@conduit.com\searchplugin folder moved successfully.
C:\Users\Théo\AppData\Roaming\mozilla\Firefox\Profiles\jaesty70.default\extensions\engine@conduit.com\META-INF folder moved successfully.
C:\Users\Théo\AppData\Roaming\mozilla\Firefox\Profiles\jaesty70.default\extensions\engine@conduit.com\lib folder moved successfully.
C:\Users\Théo\AppData\Roaming\mozilla\Firefox\Profiles\jaesty70.default\extensions\engine@conduit.com\DualPackage folder moved successfully.
C:\Users\Théo\AppData\Roaming\mozilla\Firefox\Profiles\jaesty70.default\extensions\engine@conduit.com\defaults folder moved successfully.
C:\Users\Théo\AppData\Roaming\mozilla\Firefox\Profiles\jaesty70.default\extensions\engine@conduit.com\components folder moved successfully.
C:\Users\Théo\AppData\Roaming\mozilla\Firefox\Profiles\jaesty70.default\extensions\engine@conduit.com\chrome folder moved successfully.
C:\Users\Théo\AppData\Roaming\mozilla\Firefox\Profiles\jaesty70.default\extensions\engine@conduit.com folder moved successfully.
C:\Users\Théo\AppData\Roaming\mozilla\Firefox\Profiles\jaesty70.default\extensions folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\locale\zh-TW\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\locale\zh-TW folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\locale\zh-CN\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\locale\zh-CN folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\locale\sv-SE\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\locale\sv-SE folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\locale\ko-KR\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\locale\ko-KR folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\locale\ja-JP\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\locale\ja-JP folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\locale\it-IT\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\locale\it-IT folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\locale\fr-FR\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\locale\fr-FR folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\locale\es-ES\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\locale\es-ES folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\locale\en-US\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\locale\en-US folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\locale\de-DE\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\locale\de-DE folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\locale folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\content\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome\content folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\chrome folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\locale\zh-TW\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\locale\zh-TW folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\locale\zh-CN\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\locale\zh-CN folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\locale\sv-SE\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\locale\sv-SE folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\locale\ko-KR\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\locale\ko-KR folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\locale\ja-JP\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\locale\ja-JP folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\locale\it-IT\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\locale\it-IT folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\locale\fr-FR\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\locale\fr-FR folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\locale\es-ES\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\locale\es-ES folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\locale\en-US\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\locale\en-US folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\locale\de-DE\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\locale\de-DE folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\locale folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\content\ffjcext folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome\content folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\chrome folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\chrome\icons\default folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\chrome\icons folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\chrome folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} folder moved successfully.
C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} folder moved successfully.
C:\Program Files\mozilla firefox\extensions folder moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\BEWINTERNET-FR-DMGP-V2SessionManager deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\rkfree deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\EA Core deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{46b7399d-dec5-11df-a195-00219bf5806d}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{46b7399d-dec5-11df-a195-00219bf5806d}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{46b7399d-dec5-11df-a195-00219bf5806d}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{46b7399d-dec5-11df-a195-00219bf5806d}\ not found.
File E:\AutoRunCardDetector.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{46b739fe-dec5-11df-a195-00219bf5806d}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{46b739fe-dec5-11df-a195-00219bf5806d}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{46b739fe-dec5-11df-a195-00219bf5806d}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{46b739fe-dec5-11df-a195-00219bf5806d}\ not found.
File E:\AutoRunCardDetector.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{46b73a0c-dec5-11df-a195-00219bf5806d}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{46b73a0c-dec5-11df-a195-00219bf5806d}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{46b73a0c-dec5-11df-a195-00219bf5806d}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{46b73a0c-dec5-11df-a195-00219bf5806d}\ not found.
File E:\AutoRunCardDetector.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{53f71d57-89d4-11df-9a37-00219bf5806d}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{53f71d57-89d4-11df-9a37-00219bf5806d}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{53f71d57-89d4-11df-9a37-00219bf5806d}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{53f71d57-89d4-11df-9a37-00219bf5806d}\ not found.
File "F:\WD SmartWare.exe" autoplay=true not found.
C:\Windows\leavepop.tmp deleted successfully.
========== FILES ==========
< ipconfig /flushdns /c >
No captured output from command...
C:\Users\Théo\Desktop\cmd.bat deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 41620 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public

User: Théo
->Temp folder emptied: 437228241 bytes
->Temporary Internet Files folder emptied: 505016925 bytes
->Java cache emptied: 15543021 bytes
->FireFox cache emptied: 108255086 bytes
->Flash cache emptied: 88533 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1114232 bytes
RecycleBin emptied: 6457348003 bytes

Total Files Cleaned = 7 176,00 mb


[EMPTYFLASH]

User: All Users

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Public

User: Théo
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb



OTL by OldTimer - Version 3.2.20.2 log created on 01152011_144205

Files\Folders moved on Reboot...
File\Folder C:\Users\Théo\AppData\Local\Temp\~DFD264FA8F2B48738F.TMP not found!
File\Folder C:\Users\Théo\AppData\Local\Temp\~DFF269CCB67BD9B8B5.TMP not found!
File\Folder C:\Users\Théo\AppData\Local\Temp\~DFF393C13E7B0563CE.TMP not found!
File\Folder C:\Users\Théo\AppData\Local\Temp\~DFF8F1C3E1A130BD94.TMP not found!
File\Folder C:\Users\Théo\AppData\Local\Temp\~DFF9FEF014D5FD80F7.TMP not found!
File\Folder C:\Users\Théo\AppData\Local\Temp\~DFFB292D7203813191.TMP not found!
C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\W8GXT7UW\ads[9].htm moved successfully.
C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\P5GPCWJU\ads[5].htm moved successfully.
C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\H1Z65Z5P\ai[10].htm moved successfully.
C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\H1Z65Z5P\apercu[1].htm moved successfully.
C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\GQEVHBGX\11[2].htm moved successfully.
C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\GQEVHBGX\cdntests_cedexis[1].htm moved successfully.
C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\GQEVHBGX\history_manager[1].htm moved successfully.
C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\GQEVHBGX\repondre-301498-1[1].htm moved successfully.
C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\6FNFHLGZ\facebook_com[2].htm moved successfully.
C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\6FNFHLGZ\morestories[1].htm moved successfully.
C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\3GC6JP2X\profile[1].htm moved successfully.
C:\Users\Théo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully.
File move failed. C:\Windows\temp\_avast5_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Refais un scan rapide avec Malwarebytes en n'oubliant pas de le mettre a jour

Ensuite fais ceci:

Clique ICI pour lancer une ligne de scannner ESET.

Impératif: pour ce scan utiliser Internet Explorer
Coche Yes,I accept the Terms of Use
Clique sur Start
Autorisez le contrôle ActiveX
Clique sur Start
Coche les options suivantes: Remove found threats et Scan archives
Clique sur Start
Attend la fin du scan
Utilise le Bloc-notes pour ouvrir le rapport situé dans C:\Program Files\ESET\ESET online Scanner\log.txt
Copie et colle ce rapport dans ta prochaine réponse.
AIDE


Et dis moi comment se comporte le PC maintenant

Il n'y a plus aucun malware/virus sur mon pc détécté .. Mais la pub s'affiche toujours  

Hello

Quel genre de pubs ? Avec quel navigateur ?

Refais moi un rapport OTL comme le premier que tu as fait !

Je regarderai plus tard je m'absente pour une partie de l'après midi

A suivre