[Résolu] QV06 - Forum d'Entraide Informatique (FEI)

[Résolu] QV06#61104

par patou12 - mer. 11 sept. 2013 17:31

- mer. 11 sept. 2013 17:31 #61104

Bonjour
Je cherche à supprimer QV06.
A la lecture de plusieurs forums, j'ai tenté de supprimer ce QV06 sur MOZILLA sans succès.
J'ai téléchargé Adwcleaner, lancer le scan, fait suppression puis redémarré l'ordinateur.
Mais en vain QV06 s'est incrusté.

Merci pour votre aide

QV06#61109

par Dori@n - mer. 11 sept. 2013 17:49

- mer. 11 sept. 2013 17:49 #61109

Salut,

Tu as le rapport Adwcleaner?

Télécharges Junkware Removal Tool (le téléchargement va débuter automatiquement)
Enregistres le sur le bureau.
Fermes toutes les applications en cours.
Lances le (Sous Windows Vista / 7 ou 8, faites clic droit = Exécuter en tant qu'administrateur)
Une fois le logiciel ouvert, appuyes sur la touche Entrée.
Patientes le temps que l'outil travaille : le bureau va disparaître quelques instants, c'est tout à fait normal.
À la fin de l'analyse, un rapport nommé JRT.txt va s'ouvrir. Héberges-le sur http://www.cjoint.com/ et postes le lien obtenu dans ta prochaine réponse.

[

QV06#61111

par patou12 - mer. 11 sept. 2013 17:54

- mer. 11 sept. 2013 17:54 #61111

désolée je me suis absentée je suis de retour.
je lis tes instructions et je le exécute

QV06#61112

par Dori@n - mer. 11 sept. 2013 17:56

- mer. 11 sept. 2013 17:56 #61112

Pas de soucis

[

QV06#61121

par patou12 - mer. 11 sept. 2013 18:32

- mer. 11 sept. 2013 18:32 #61121

http://cjoint.com/?3IlsB5JLdoY
désolée mais le lien ne s'est pas copié
ci-joint le fichier
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.9 (09.07.2013:1)
OS: Windows 7 Professional x64
Ran by pascale on 11/09/2013 at 18:20:30,10
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

Successfully stopped: [Service] datamngrcoordinator
Successfully deleted: [Service] datamngrcoordinator
Successfully stopped: [Service] ib updater
Successfully deleted: [Service] ib updater
Successfully stopped: [Service] torchcrashhandler
Successfully deleted: [Service] torchcrashhandler

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\escort.escortiepane
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\escort.escortiepane.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\esrv.babylonesrvc
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\esrv.babylonesrvc.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\dnsbho.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\escort.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\escortapp.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\escorteng.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\escortlbr.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\esrv.exe
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\extension.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\genericasktoolbar.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\scripthelper.exe
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\viprotocol.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{841D5A49-E48D-413C-9C28-EB3D9081D705}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\apn dtx
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\babylontoolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\ilivid
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\ilividmoviestoolbardla
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\im
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\iminstaller
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\torch
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\searchqutoolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\smartbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-10474059-2572747749-3203892998-1000\Software\IB Updater
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\ib updater
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\applications\ilividsetupv1.exe
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\b
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\babylon.dskbnd
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\babylon.dskbnd.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\bbylnapp.appcore
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\bbylnapp.appcore.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\bbylntlbr.bbylntlbrhlpr
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\bbylntlbr.bbylntlbrhlpr.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\dnsbho.bho
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\dnsbho.bho.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\escort.escrtbtn.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\extension.extensionhelperobject
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\extension.extensionhelperobject.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\genericasktoolbar.toolbarwnd
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\genericasktoolbar.toolbarwnd.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\ilivid
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\features\a28b4d68debaa244eb686953b7074fef
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\products\a28b4d68debaa244eb686953b7074fef
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\protocols\handler\viprotocol
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\s
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthelper.scripthelperapi
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\scripthelper.scripthelperapi.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\searchquiehelper.dnsguard
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\searchquiehelper.dnsguard.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\viprotocol.viprotocolole.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\torch.exe
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{336d0c35-8a85-403a-b9d2-65c292c39087}_is1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\babylontoolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\dealscout
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ilivid
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ilividmoviestoolbardlaff
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ilividmoviestoolbardlaie
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\windows searchqu toolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86d4b82a-abed-442a-be86-96357b70f4fe}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8d15e1b2-d2b7-4a17-b44b-d2dde5981406}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\babylon
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\babylontoolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\ib updater
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\searchqumediabartb
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\torch
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\conduitinstaller_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\conduitinstaller_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\datamngrui_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\datamngrui_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\ilividsetupv1_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\ilividsetupv1_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\searchqumediabar_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\searchqumediabar_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\setupdatamngr_searchqu_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\setupdatamngr_searchqu_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT2724431
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\TaskScheduler_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\TaskScheduler_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{F4F976B8-D5D4-45CD-A4BC-C48557843B91}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403A-B9D2-65C292C39087}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Successfully deleted: [Registry Key] "hkey_current_user\software\apn"
Successfully deleted: [Registry Key] "hkey_current_user\software\appdatalow\software\asktoolbar"
Successfully deleted: [Registry Key] "hkey_current_user\software\ask.com"
Successfully deleted: [Registry Key] "hkey_current_user\software\microsoft\internet explorer\low rights\elevationpolicy\{a5aa24ea-11b8-4113-95ae-9ed71deaf12a}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\appid\{9b0cb95c-933a-4b8c-b6d4-edcd19a43874}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\typelib\{2996f0e7-292b-4cae-893f-47b8b1c05b56}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\wow6432node\asktoolbar"

~~~ Files

Successfully deleted: [File] "C:\Users\pascale\AppData\Roaming\microsoft\windows\start menu\programs\ilivid.lnk"
Successfully deleted: [File] "C:\end"
Successfully disinfected: [Shortcut] C:\Users\pascale\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Successfully disinfected: [Shortcut] C:\Users\pascale\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk
Successfully disinfected: [Shortcut] C:\Users\pascale\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk
Successfully disinfected: [Shortcut] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Successfully disinfected: [Shortcut] C:\Users\pascale\AppData\Roaming\microsoft\windows\start menu\Programs\Internet Explorer.lnk
Successfully disinfected: [Shortcut] C:\Users\pascale\AppData\Roaming\microsoft\windows\start menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\babylon"
Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess"
Successfully deleted: [Folder] "C:\ProgramData\browser manager"
Successfully deleted: [Folder] "C:\ProgramData\datamngr"
Successfully deleted: [Folder] "C:\ProgramData\esafe"
Successfully deleted: [Folder] "C:\ProgramData\torchcrashhandler"
Successfully deleted: [Folder] "C:\ProgramData\wincert"
Successfully deleted: [Folder] "C:\Users\pascale\AppData\Roaming\babylon"
Successfully deleted: [Folder] "C:\Users\pascale\AppData\Roaming\drivercure"
Successfully deleted: [Folder] "C:\Users\pascale\AppData\Roaming\pdfforge"
Successfully deleted: [Folder] "C:\Users\pascale\appdata\local\babylon"
Successfully deleted: [Folder] "C:\Users\pascale\appdata\local\conduit"
Successfully deleted: [Folder] "C:\Users\pascale\appdata\local\cre"
Successfully deleted: [Folder] "C:\Users\pascale\appdata\local\ilivid"
Successfully deleted: [Folder] "C:\Users\pascale\appdata\local\ilivid player"
Successfully deleted: [Folder] "C:\Users\pascale\appdata\local\lollipop"
Successfully deleted: [Folder] "C:\Users\pascale\appdata\local\software"
Successfully deleted: [Folder] "C:\Users\pascale\appdata\local\torch"
Successfully deleted: [Folder] "C:\Users\pascale\appdata\locallow\babylontoolbar"
Successfully deleted: [Folder] "C:\Users\pascale\appdata\locallow\conduit"
Successfully deleted: [Folder] "C:\Users\pascale\appdata\locallow\datamngr"
Successfully deleted: [Folder] "C:\Users\pascale\appdata\locallow\ilividmoviestoolbardla"
Successfully deleted: [Folder] "C:\Users\pascale\appdata\locallow\pdfforge"
Successfully deleted: [Folder] "C:\Users\pascale\appdata\locallow\search settings"
Successfully deleted: [Folder] "C:\Users\pascale\appdata\locallow\searchquband"
Successfully deleted: [Folder] "C:\Users\pascale\appdata\locallow\searchqutoolbar"
Successfully deleted: [Folder] "C:\Users\pascale\appdata\locallow\searchresultstb"
Successfully deleted: [Folder] "C:\Program Files (x86)\babylontoolbar"
Successfully deleted: [Folder] "C:\Program Files (x86)\conduit"
Successfully deleted: [Folder] "C:\Program Files (x86)\dealscout"
Successfully deleted: [Folder] "C:\Program Files (x86)\ilivid"
Failed to delete: [Folder] "C:\Program Files (x86)\movies toolbar"
Successfully deleted: [Folder] "C:\Program Files (x86)\mypc backup"
Successfully deleted: [Folder] "C:\Program Files (x86)\pdfforge toolbar"
Successfully deleted: [Folder] "C:\Program Files (x86)\perion"
Successfully deleted: [Folder] "C:\Program Files (x86)\software"
Successfully deleted: [Folder] "C:\Program Files (x86)\wi3c8a~1"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ilivid"
Successfully deleted: [Folder] "C:\ProgramData\ask"
Successfully deleted: [Folder] "C:\Users\pascale\appdata\locallow\asktoolbar"
Successfully deleted: [Folder] "C:\Program Files (x86)\ask.com"
Successfully deleted: [Folder] "C:\windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}"

~~~ FireFox

Successfully deleted: [File] "C:\Program Files (x86)\Mozilla Firefox\searchplugins\ask.xml"
Successfully deleted: [File] "C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml"
Successfully deleted: [File] "C:\Program Files (x86)\Mozilla Firefox\searchplugins\search_results.xml"
Successfully deleted: [File] C:\Users\pascale\AppData\Roaming\mozilla\firefox\profiles\z1vpe3ku.default\invalidprefs.js
Successfully deleted: [File] C:\Users\pascale\AppData\Roaming\mozilla\firefox\profiles\z1vpe3ku.default\searchplugins\askcom.xml
Failed to delete: [Folder] "C:\Program Files (x86)\Mozilla Firefox\extensions\{1fd91a9c-410c-4090-bbcc-55d3450ef433}"
Successfully deleted: [Folder] C:\Users\pascale\AppData\Roaming\mozilla\firefox\profiles\z1vpe3ku.default\searchqutoolbar
Successfully deleted: [Folder] C:\Users\pascale\AppData\Roaming\mozilla\firefox\profiles\z1vpe3ku.default\extensions\ffxtlbr@babylon.com
Successfully deleted: [Folder] C:\Users\pascale\AppData\Roaming\mozilla\firefox\profiles\z1vpe3ku.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\{336d0c35-8a85-403a-b9d2-65c292c39087}
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions\\{336d0c35-8a85-403a-b9d2-65c292c39087}
Successfully deleted the following from C:\Users\pascale\AppData\Roaming\mozilla\firefox\profiles\z1vpe3ku.default\prefs.js

user_pref("CT2724431_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1378485538620,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}
user_pref("browser.newtab.url", "hxxp://www.qvo6.com/?utm_source=butm_medium=gf ... DF9GN1MXts
user_pref("browser.search.defaultenginename", "qvo6");
user_pref("browser.search.order.1", "qvo6");
user_pref("browser.search.selectedEngine", "qvo6");
Emptied folder: C:\Users\pascale\AppData\Roaming\mozilla\firefox\profiles\z1vpe3ku.default\minidumps [120 files]

~~~ Chrome

Successfully deleted: [Folder] C:\Users\pascale\appdata\local\Google\Chrome\User Data\Default\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Google\Chrome\Extensions\kiplfnciaokpcennlkldkdaeaaomamof

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 11/09/2013 at 18:25:59,30
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

QV06#61122

par patou12 - mer. 11 sept. 2013 18:33

- mer. 11 sept. 2013 18:33 #61122

Désolée je ne suis pas douée je vois que le lien existe

QV06#61125

par Dori@n - mer. 11 sept. 2013 18:37

- mer. 11 sept. 2013 18:37 #61125

Pas grave

Télécharge OTL sur ton bureau.
Fais un double clic sur l'icône pour le lancer. Vérifie que toutes les autres fenêtres sont fermées afin qu'il s'exécute sans interruption.
Quand la fenêtre apparaît, coche la case Tous les utilisateurs.
Sous Processus, Modules, Services, Pilotes, Registre: standard, Registre: approfondi coche Tous.
Coche également les cases Recherche Lop et Recherche Purity.
Dans la partie Personnalisation, colle ceci :

HKCU\Software
HKLM\Software
HKCU\Software\Microsoft\Command Processor /s
HKLM\Software\Microsoft\Command Processor /s
%Homedrive%\*
%Homedrive%\*.
%Userprofile%\*
%Userprofile%\*.
%Allusersprofile%\*
%Allusersprofile%\*.
%LocalAppData%\*
%LocalAppData%\*.
%Userprofile%\Local Settings\Application Data\*
%Userprofile%\Local Settings\Application Data\*.
%programFiles%\*
%programfiles%\Google\Desktop\Install /s
%programFiles%\*.
%Systemroot%\Installer\*.
%Systemroot%\Temp\*.exe /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\*.exe /lockedfiles
%systemroot%\system32\*.in*
%systemroot%\Tasks\*
%systemroot%\Tasks\*.
%systemroot%\system32\Tasks\*
%systemroot%\system32\Tasks\*.
%systemroot%\system32\drivers\*.sy* /lockedfiles
%systemroot%\system32\config\*.exe /s
%Systemroot%\ServiceProfiles\*.exe /s
%systemroot%\system32\*.sys
dir %Homedrive%\* /S /A:L /C
msconfig
activex
/md5start
explorer.exe
winlogon.exe
wininit.exe
volsnap.sys
atapi.sys
ndis.sys
cdrom.sys
i8042prt.sys
iastor.sys
tdx.sys
netbt.sys
afd.sys
/md5stop
netsvcs
safebootminimal
safebootnetwork
CREATERESTOREPOINT
Clique sur le bouton Analyse. L'analyse ne va pas durer longtemps.
Quand l'analyse est terminée, deux fenêtres du Bloc-notes vont s'ouvrir. OTL.Txt et Extras.Txt. Ces fichiers sont sauvegardés au même endroit que OTL.
Héberge-les, comme ceci.

[

QV06#61142

par patou12 - mer. 11 sept. 2013 19:09

- mer. 11 sept. 2013 19:09 #61142

http://cjoint.com/?3Ilti4FkyVe
voici le lien et encore merci pour votre aide

QV06#61144

par Dori@n - mer. 11 sept. 2013 19:14

- mer. 11 sept. 2013 19:14 #61144

il me faut aussi le rapport OTL.tkt

[

QV06#61147

par patou12 - mer. 11 sept. 2013 19:20

- mer. 11 sept. 2013 19:20 #61147

http://cjoint.com/?3Ilttvj1Oph
c'est OK

QV06#61160

par patou12 - mer. 11 sept. 2013 20:08

- mer. 11 sept. 2013 20:08 #61160

Je vais devoir m'absenter. C'est possible de poursuivre le nettoyage demain?

QV06#61166

par Dori@n - mer. 11 sept. 2013 20:17

- mer. 11 sept. 2013 20:17 #61166

Désinstalles Spybot, il ne sert à rien du tout.

Ce script va cibler certains éléments à supprimer :

• Lance OTL.
• Copie/colle dans la zone "Personnalisation" de OTL le script qui est indiqué ci-dessous :

:OTL
PRC - [2013/08/15 21:55:20 | 001,643,184 | ---- | M] (AVG Secure Search) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe
PRC - [2013/08/15 21:55:18 | 000,161,968 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\loggingserver.exe
MOD - [2013/08/13 19:26:32 | 000,476,672 | ---- | M] () -- C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll
SRV - [2013/08/15 21:55:20 | 001,643,184 | ---- | M] (AVG Secure Search) [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe -- (vToolbarUpdater15.5.0)
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=butm_me ... 1378486967 b[Pays - ]/b
IE - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKU\S-1-5-21-10474059-2572747749-3203892998-1000\..\URLSearchHook: {249d74a3-bd19-4657-b6ce-e62f480a20de} - No CLSID value found
IE - HKU\S-1-5-21-10474059-2572747749-3203892998-1000\..\URLSearchHook: {B922D405-6D13-4A2B-AE89-08A030DA4402} - No CLSID value found
IE - HKU\S-1-5-21-10474059-2572747749-3203892998-1000\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\msntoolbar@msn.com: C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2237.0\Firefox [2010/12/10 02:51:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2010/12/10 02:51:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\FireFoxExt\15.5.0.2 [2013/08/15 21:56:53 | 000,000,000 | ---D | M]
[2013/08/25 21:06:52 | 000,000,000 | ---D | M] (Movies Toolbar (Dist. by Bandoo Media, Inc.)) -- C:\Users\pascale\AppData\Roaming\mozilla\Firefox\Profiles\z1vpe3ku.default\extensions\{ec2bae47-25af-4ce9-9e78-10627a49c9ea}
[2012/01/28 08:48:03 | 000,052,277 | ---- | M] () (No name found) -- C:\Users\pascale\AppData\Roaming\mozilla\firefox\profiles\z1vpe3ku.default\extensions\dealscout@deal-scout.net.xpi
[2013/07/22 12:35:02 | 000,180,858 | ---- | M] () (No name found) -- C:\Users\pascale\AppData\Roaming\mozilla\firefox\profiles\z1vpe3ku.default\extensions\jid1-FCM5fDwCW5M3AQ@jetpack.xpi
[2013/08/15 21:57:04 | 000,003,715 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
CHR - homepage: http://www.qvo6.com/?utm_source=butm_me ... 1378486967 b[Pays - ]/b
O2 - BHO: (Spybot-SD IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Movies Toolbar (Dist. by Bandoo Media, Inc.)) - {ec2bae47-25af-4ce9-9e78-10627a49c9ea} - C:\PROGRA~2\MOVIES~1\Datamngr\SRTOOL~1\IE\searchresultsDx.dll File not found
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Movies Toolbar (Dist. by Bandoo Media, Inc.)) - {ec2bae47-25af-4ce9-9e78-10627a49c9ea} - C:\PROGRA~2\MOVIES~1\Datamngr\SRTOOL~1\IE\searchresultsDx.dll File not found
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKU\S-1-5-21-10474059-2572747749-3203892998-1000\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O4 - HKU\S-1-5-21-10474059-2572747749-3203892998-1000..\Run: [Software updater] C:\Users\pascale\AppData\Roaming\FreeSoftwareUpdater\updater.exe ()
O36 - AppCertDlls: x64 - (C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\apcrtldr.dll) - C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\apcrtldr.dll ()
O36 - AppCertDlls: x86 - (C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll) - C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll ()
MsConfig:64bit - StartUpReg: SpybotSD TeaTimer - hkey= - key= - C:\Program Files (x86)\Spybot - Search Destroy\TeaTimer.exe (Safer-Networking Ltd.)
[2013/09/06 19:05:11 | 000,000,000 | ---D | C] -- C:\Users\pascale\AppData\Roaming\FreeSoftwareUpdater
[2013/09/06 19:03:20 | 000,000,000 | ---D | C] -- C:\Users\pascale\AppData\Local\DProtect
[2013/09/03 17:42:36 | 000,000,000 | -H-D | C] -- C:\ProgramData\{A9E4DD67-A920-4E05-B9CE-5F5500DDD6CD}
[2013/08/25 21:06:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Movies Toolbar
[2013/09/11 18:15:48 | 000,000,352 | ---- | M] () -- C:\windows\tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job
[2013/09/11 18:15:47 | 000,000,352 | ---- | M] () -- C:\windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
[2012/03/03 11:07:24 | 000,000,088 | RHS- | C] () -- C:\ProgramData\BE2A8EB2B1.sys
[2013/09/06 19:05:11 | 000,000,000 | ---D | M] -- C:\Users\pascale\AppData\Roaming\FreeSoftwareUpdater
[2010/12/10 03:12:54 | 000,000,000 | -H-D | M] -- C:\hp
[2011/06/28 19:07:26 | 000,000,000 | -H-D | M] -- C:\SYSTEM.SAV
[2013/09/10 23:42:57 | 000,000,000 | ---D | M] -- C:\Users\pascale\AppData\Local\DProtect
[2012/01/08 09:49:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DADSU-CTL-V08R10
[2013/08/25 21:06:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Movies Toolbar
{79A765E1-C399-405B-85AF-466F52E918B0} = Ask Toolbar Updater
:REG
[HKEY_CURRENT_USER\Software\AVG Secure Search]=-
[HKEY_CURRENT_USER\Software\Boxore]=-
[HKEY_CURRENT_USER\Software\lollipop]=-
[HKEY_LOCAL_MACHINE\Software\AVG Secure Search]=-
[HKEY_LOCAL_MACHINE\Software\AVG Security Toolbar]=-
[HKEY_LOCAL_MACHINE\Software\Boxore]=-
[HKEY_LOCAL_MACHINE\Software\Conduit]=-
[HKEY_LOCAL_MACHINE\Software\qvo6Software]=-
:COMMANDS
[EMPTYTEMP]
[RESETHOSTS]• Clique sur « Correction » et laisse l'outil travailler. Il est possible que l'ordinateur redémarre.
• Copie/colle la totalité du rapport dans ta prochaine réponse.

[

QV06#61167

par Dori@n - mer. 11 sept. 2013 20:17

- mer. 11 sept. 2013 20:17 #61167

ok @ demain

[

QV06#61169

par patou12 - mer. 11 sept. 2013 20:22

- mer. 11 sept. 2013 20:22 #61169

Merci et bonne soirée à vous

QV06#61171

par Dori@n - mer. 11 sept. 2013 20:24

- mer. 11 sept. 2013 20:24 #61171

demain, tu regarderas au dessus, je t'ai donné un truc à faire avec OTL.

Bonne soirée également.

[

QV06#61361

par patou12 - jeu. 12 sept. 2013 19:42

- jeu. 12 sept. 2013 19:42 #61361

Bonsoir
Me voilà de retour
surprise ce matin lors de la connection sur InterneT QV06 avait disparu.
Suis-je enfin sauvée?

QV06#61397

par patou12 - jeu. 12 sept. 2013 21:01

- jeu. 12 sept. 2013 21:01 #61397

demain, tu regarderas au dessus, je t'ai donné un truc à faire avec OTL.

Bonsoir
j'ai le rapport sur le bureau.
je ne peux pas vous l'adresser il ne passe pas dans l'intégralité
Dois-je l'héberger
merci encore

QV06#61398

par patou12 - jeu. 12 sept. 2013 21:04

- jeu. 12 sept. 2013 21:04 #61398

http://cjoint.com/?3ImvdsTbAT4
dans le doute j'ai hébergé le rapport OTL

QV06#61399

par patou12 - jeu. 12 sept. 2013 21:09

- jeu. 12 sept. 2013 21:09 #61399

Je vous quitte pour ce soir.
et encore merci pour votre aide

Bonne soirée

QV06#63051

par Dori@n - ven. 20 sept. 2013 23:36

- ven. 20 sept. 2013 23:36 #63051

Bonsoir,

Vraiment sincèrement désolé du retard de ma réponse, peux tu me rendre les rapports, car le lien est obsolète merci à toi.

== http://www.forum-entraide-informatique. ... m-tutoriel

[

QV06#63068

par patou12 - sam. 21 sept. 2013 10:18

- sam. 21 sept. 2013 10:18 #63068

Bonjour

Ne vous excusez pas c'est déjà très sympa de consacrer du temps à nos "bobos" informatiques.
Voici le nouveau lien

http://cjoint.com/?3Ivkov9rZOY

A bientôt merci à vous

QV06#63076

par Dori@n - sam. 21 sept. 2013 12:23

- sam. 21 sept. 2013 12:23 #63076

Tu peux recommencer car le rapport à des erreurs:

Refais ce que je t'ai dit ici:

http://www.forum-entraide-informatique. ... qv06#61166

[

QV06#63092

par patou12 - sam. 21 sept. 2013 14:07

- sam. 21 sept. 2013 14:07 #63092

voici le rapport après nettoyage OTL
http://cjoint.com/?3Ivoex8xBwM
A plus tard

QV06#63093

par Dori@n - sam. 21 sept. 2013 14:10

- sam. 21 sept. 2013 14:10 #63093

Non, quand tu fais ce que je te demande, ne cliques pas ensuite sur Analyse, mais sur CORRECTION, relis bien ce que je dis

[

QV06#63114

par patou12 - sam. 21 sept. 2013 15:27

- sam. 21 sept. 2013 15:27 #63114

Désolée je refais la manip°
Effectivement j'ai un problème de lecture

QV06#63121

par patou12 - sam. 21 sept. 2013 15:44

- sam. 21 sept. 2013 15:44 #63121

http://cjoint.com/?3IvpRhPeo75
j'espère que c'est bon cette fois-ci:roll:

QV06#63124

par Dori@n - sam. 21 sept. 2013 15:50

- sam. 21 sept. 2013 15:50 #63124

non ^^

Désinstalles Spybot, il ne sert à rien du tout, désinstalles AVG Secure Search.

Ce script va cibler certains éléments à supprimer :

• Lance OTL.
• Copie/colle dans la zone "Personnalisation" de OTL le script qui est indiqué ci-dessous :

Pour cela cliques sur Sélectionner le contenu pour le copier, puis va le coller sous la zone Personnalisation.

:OTL
PRC - [2013/08/15 21:55:20 | 001,643,184 | ---- | M] (AVG Secure Search) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe
PRC - [2013/08/15 21:55:18 | 000,161,968 | ---- | M] () -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\loggingserver.exe
MOD - [2013/08/13 19:26:32 | 000,476,672 | ---- | M] () -- C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll
SRV - [2013/08/15 21:55:20 | 001,643,184 | ---- | M] (AVG Secure Search) [Auto | Running] -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe -- (vToolbarUpdater15.5.0)
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=butm_me ... 1378486967 b[Pays - ]/b
IE - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKU\S-1-5-21-10474059-2572747749-3203892998-1000\..\URLSearchHook: {249d74a3-bd19-4657-b6ce-e62f480a20de} - No CLSID value found
IE - HKU\S-1-5-21-10474059-2572747749-3203892998-1000\..\URLSearchHook: {B922D405-6D13-4A2B-AE89-08A030DA4402} - No CLSID value found
IE - HKU\S-1-5-21-10474059-2572747749-3203892998-1000\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\msntoolbar@msn.com: C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2237.0\Firefox [2010/12/10 02:51:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2010/12/10 02:51:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\FireFoxExt\15.5.0.2 [2013/08/15 21:56:53 | 000,000,000 | ---D | M]
[2013/08/25 21:06:52 | 000,000,000 | ---D | M] (Movies Toolbar (Dist. by Bandoo Media, Inc.)) -- C:\Users\pascale\AppData\Roaming\mozilla\Firefox\Profiles\z1vpe3ku.default\extensions\{ec2bae47-25af-4ce9-9e78-10627a49c9ea}
[2012/01/28 08:48:03 | 000,052,277 | ---- | M] () (No name found) -- C:\Users\pascale\AppData\Roaming\mozilla\firefox\profiles\z1vpe3ku.default\extensions\dealscout@deal-scout.net.xpi
[2013/07/22 12:35:02 | 000,180,858 | ---- | M] () (No name found) -- C:\Users\pascale\AppData\Roaming\mozilla\firefox\profiles\z1vpe3ku.default\extensions\jid1-FCM5fDwCW5M3AQ@jetpack.xpi
[2013/08/15 21:57:04 | 000,003,715 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
CHR - homepage: http://www.qvo6.com/?utm_source=butm_me ... 1378486967 b[Pays - ]/b
O2 - BHO: (Spybot-SD IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Movies Toolbar (Dist. by Bandoo Media, Inc.)) - {ec2bae47-25af-4ce9-9e78-10627a49c9ea} - C:\PROGRA~2\MOVIES~1\Datamngr\SRTOOL~1\IE\searchresultsDx.dll File not found
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Movies Toolbar (Dist. by Bandoo Media, Inc.)) - {ec2bae47-25af-4ce9-9e78-10627a49c9ea} - C:\PROGRA~2\MOVIES~1\Datamngr\SRTOOL~1\IE\searchresultsDx.dll File not found
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKU\S-1-5-21-10474059-2572747749-3203892998-1000\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O4 - HKU\S-1-5-21-10474059-2572747749-3203892998-1000..\Run: [Software updater] C:\Users\pascale\AppData\Roaming\FreeSoftwareUpdater\updater.exe ()
O36 - AppCertDlls: x64 - (C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\apcrtldr.dll) - C:\Program Files (x86)\Movies Toolbar\Datamngr\x64\apcrtldr.dll ()
O36 - AppCertDlls: x86 - (C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll) - C:\Program Files (x86)\Movies Toolbar\Datamngr\apcrtldr.dll ()
MsConfig:64bit - StartUpReg: SpybotSD TeaTimer - hkey= - key= - C:\Program Files (x86)\Spybot - Search Destroy\TeaTimer.exe (Safer-Networking Ltd.)
[2013/09/06 19:05:11 | 000,000,000 | ---D | C] -- C:\Users\pascale\AppData\Roaming\FreeSoftwareUpdater
[2013/09/06 19:03:20 | 000,000,000 | ---D | C] -- C:\Users\pascale\AppData\Local\DProtect
[2013/09/03 17:42:36 | 000,000,000 | -H-D | C] -- C:\ProgramData\{A9E4DD67-A920-4E05-B9CE-5F5500DDD6CD}
[2013/08/25 21:06:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Movies Toolbar
[2013/09/11 18:15:48 | 000,000,352 | ---- | M] () -- C:\windows\tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job
[2013/09/11 18:15:47 | 000,000,352 | ---- | M] () -- C:\windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
[2012/03/03 11:07:24 | 000,000,088 | RHS- | C] () -- C:\ProgramData\BE2A8EB2B1.sys
[2013/09/06 19:05:11 | 000,000,000 | ---D | M] -- C:\Users\pascale\AppData\Roaming\FreeSoftwareUpdater
[2010/12/10 03:12:54 | 000,000,000 | -H-D | M] -- C:\hp
[2011/06/28 19:07:26 | 000,000,000 | -H-D | M] -- C:\SYSTEM.SAV
[2013/09/10 23:42:57 | 000,000,000 | ---D | M] -- C:\Users\pascale\AppData\Local\DProtect
[2012/01/08 09:49:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DADSU-CTL-V08R10
[2013/08/25 21:06:18 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Movies Toolbar
{79A765E1-C399-405B-85AF-466F52E918B0} = Ask Toolbar Updater
:REG
[HKEY_CURRENT_USER\Software\AVG Secure Search]=-
[HKEY_CURRENT_USER\Software\Boxore]=-
[HKEY_CURRENT_USER\Software\lollipop]=-
[HKEY_LOCAL_MACHINE\Software\AVG Secure Search]=-
[HKEY_LOCAL_MACHINE\Software\AVG Security Toolbar]=-
[HKEY_LOCAL_MACHINE\Software\Boxore]=-
[HKEY_LOCAL_MACHINE\Software\Conduit]=-
[HKEY_LOCAL_MACHINE\Software\qvo6Software]=-
:COMMANDS
[EMPTYTEMP]
[RESETHOSTS]
• Clique sur « Correction » et laisse l'outil travailler. Il est possible que l'ordinateur redémarre.
• Copie/colle la totalité du rapport dans ta prochaine réponse.

[

QV06#63126

par patou12 - sam. 21 sept. 2013 16:01

- sam. 21 sept. 2013 16:01 #63126

Ne pas tenir compte du message précédent j'ai fait n'importe quoi, je fais 2 choses à la fois
voici le lien
http://cjoint.com/?3Ivp7DgODJZ
a PLUS

QV06#63127

par patou12 - sam. 21 sept. 2013 16:04

- sam. 21 sept. 2013 16:04 #63127

Je m'absente une petit demi-heure

QV06#63129

par Dori@n - sam. 21 sept. 2013 16:16

- sam. 21 sept. 2013 16:16 #63129

Ok, avant de continuer, dis moi si tu vois encore QV06.

[

QV06#63141

par patou12 - sam. 21 sept. 2013 17:15

- sam. 21 sept. 2013 17:15 #63141

eu 12 Sep 2013 - 19:42
Me voilà de retour
surprise ce matin lors de la connection sur InterneT QV06 avait disparu.

Non lors de mon message du 12 septembre dernier, j'ai signalé que je ne voyais plus QV06 lorsque je
lance MOZILLA. Et c'est encore le cas il n'apparaît plus

QV06#63143

par Dori@n - sam. 21 sept. 2013 17:17

- sam. 21 sept. 2013 17:17 #63143

ok, alors on termine:

== http://www.forum-entraide-informatique. ... nalisation

Tiens moi au courant au fur et à mesure

[

QV06#63164

par patou12 - sam. 21 sept. 2013 17:48

- sam. 21 sept. 2013 17:48 #63164

Voici le rapport MALWAREBYTES

Malwarebytes Anti-Malware 1.75.0.1300
http://www.malwarebytes.org

Version de la base de données: v2013.09.21.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16686
pascale :: PASCALE-HP [administrateur]

21/09/2013 17:37:00
mbam-log-2013-09-21 (17-37-00).txt

Type d'examen: Examen rapide
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 221145
Temps écoulé: 8 minute(s), 38 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 3
HKCR\Typelib\{35C1605E-438B-4D64-AAB1-8885F097A9B1} (PUP.Optional.BabylonToolBar.A) - Mis en quarantaine et supprimé avec succès.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542} (PUP.Optional.BabylonToolBar.A) - Mis en quarantaine et supprimé avec succès.
HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo (PUP.Optional.Elex.A) - Mis en quarantaine et supprimé avec succès.

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 1
C:\Users\pascale\Downloads\UltimateCodec.exe (PUP.Optional.Installcore) - Mis en quarantaine et supprimé avec succès.

(fin)

QV06#63166

par Dori@n - sam. 21 sept. 2013 17:49

- sam. 21 sept. 2013 17:49 #63166

ok continue

[

QV06#63178

par patou12 - sam. 21 sept. 2013 18:15

- sam. 21 sept. 2013 18:15 #63178

"Une fois installé, lancez-le : patientez pendant qu'il analyse votre ordinateur. S'il ne se lance pas, redémarrez votre ordinateur et essayez de le relancer, cela devrait fonctionner."

Je ne parviens pas à relancer Update Checker après avoir redémarré l'ordinateur!
Quid?