je pense qu'il y a beaucoup de boulot car le pc n'était même pas à jour
Une fois téléchargé, clique sur le fichier ZHPDiag2.exe pour installer l'outil et suis la routine. Lance ZHPDiag en cliquant sur l'icône ZHPDiag affichée sur le bureau
Dans l'interface, fais les trois opérations comme dans l'image ci-dessous :
Tu l'héberges sur Cjoint en cochant 21 jours dans la ligne Et pour quelle durée ?
,
.
http://www.microsoft.com/security/porta ... tid=195178
. http://cjoint.com/?0BiuzypKnzl (j'ai remis celui-ci en français manuellement dans les paramètres de planification)
Copie le contenu de l'encadré ci-dessous dans le presse-papier.Code : Tout sélectionner
C:\Users\Lilouck\AppData\Roaming\cacaoweb
M2 - MFEP: prefs.js [Lilouck - yt45mj45.default\cacaoweb@cacaoweb.org] [] cacaoweb v1.0.28 (.http://www.cacaoweb.org/.)
M2 - MFEP: prefs.js [Lilouck - yt45mj45.default\{3d4d238c-9c48-47cd-a95c-53259acf9e56}] [] Messenger Plus FR Community Toolbar v3.2.5.2 (.Conduit Ltd..)
O4 - HKCU\..\Run: [cacaoweb] . (...) -- C:\Users\Lilouck\AppData\Roaming\cacaoweb\cacaoweb.exe
O4 - HKUS\S-1-5-21-3069531941-2173158948-9573425-1000\..\Run: [cacaoweb] . (...) -- C:\Users\Lilouck\AppData\Roaming\cacaoweb\cacaoweb.exe
O43 - CFD: 10/10/2008 - 23:23:23 - [1,294] ----D C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
O43 - CFD: 08/02/2013 - 09:34:31 - [606,341] ----D C:\Users\Lilouck\AppData\Roaming\cacaoweb
O43 - CFD: 20/03/2011 - 22:12:40 - [1,773] ----D C:\Users\Lilouck\AppData\Local\Conduit
O61 - LFC:Last File Created 08/02/2013 - 09:06:22 ---A- C:\Users\Lilouck\AppData\Local\Temp\cacaoneweb202f.exe [450560]
O61 - LFC:Last File Created 08/02/2013 - 09:06:46 ---A- C:\Users\Lilouck\AppData\Roaming\cacaoweb\cacaoweb.exe [450560]
O61 - LFC:Last File Created 08/02/2013 - 09:08:31 ---A- C:\Users\Lilouck\AppData\Local\Temp\scoped_dir_4272_27294\cacaoweb.crx [15528]
O61 - LFC:Last File Created 08/02/2013 - 09:08:31 ---A- C:\Users\Lilouck\AppData\Local\Temp\scoped_dir_5500_27121\cacaoweb.crx [15528]
O61 - LFC:Last File Created 08/02/2013 - 09:08:31 ---A- C:\Users\Lilouck\AppData\Roaming\cacaoweb\cacaoweb.crx [15528]
O61 - LFC:Last File Created 08/02/2013 - 19:01:56 ---A- C:\Users\Lilouck\AppData\Local\Temp\scoped_dir_5500_27121\CRX_INSTALL\cacaoweb.js [11839]
O61 - LFC:Last File Created 08/02/2013 - 19:02:46 ---A- C:\Users\Lilouck\AppData\Local\Temp\scoped_dir_4272_27294\CRX_INSTALL\cacaoweb.js [11839]
O61 - LFC:Last File Created 08/02/2013 - 19:55:24 ---A- C:\Users\Lilouck\AppData\Roaming\cacaoweb\npdfile.dat [55]
O61 - LFC:Last File Created 08/02/2013 - 20:02:14 ---A- C:\Users\Lilouck\AppData\Roaming\cacaoweb\storage.db [876]
O69 - SBI: prefs.js [Lilouck - yt45mj45.default] user_pref("CT2905330.backendstorage.http://www_blabbers_com/app/conduit.bbrs_affid", "46525F4E6577");
O69 - SBI: prefs.js [Lilouck - yt45mj45.default] user_pref("CT2905330.backendstorage.http://www_blabbers_com/app/conduit.bbrs_bguid", "46525F4E65772D41434343433731352D393638432D44[...]
O69 - SBI: prefs.js [Lilouck - yt45mj45.default] user_pref("CT2905330.backendstorage.http://www_blabbers_com/app/conduit.bbrs_lba", "3231383437353834");
O69 - SBI: prefs.js [Lilouck - yt45mj45.default] user_pref("CT2905330.backendstorage.http://www_blabbers_com/app/conduit.bbrs_lba1", "323031312D372D3137");
[MD5.FD4E68497AE7177A9F64480140C3397C] [SPRF][08/02/2013] (...) -- C:\Users\Lilouck\AppData\Local\Temp\cacaoneweb202f.exe [450560]
[MD5.FD4E68497AE7177A9F64480140C3397C] [SPRF][08/02/2013] (...) -- C:\Users\Lilouck\Desktop\cacaoweb.exe [450560]
O87 - FAEL: "TCP Query User{7AC784D1-EBD3-4E09-B634-CC70D29C67B0}C:\users\lilouck\appdata\roaming\cacaoweb\cacaoweb.exe" | In - Public - P6 - TRUE | .(...) -- C:\users\lilouck\appdata\roaming\cacaoweb\cacaoweb.exe
O87 - FAEL: "UDP Query User{9E1B8367-C3DD-4232-805E-DF98A86A588E}C:\users\lilouck\appdata\roaming\cacaoweb\cacaoweb.exe" | In - Public - P17 - TRUE | .(...) -- C:\users\lilouck\appdata\roaming\cacaoweb\cacaoweb.exe
[HKCU\Software\AppDataLow\Software\Conduit]
[HKCU\Software\AppDataLow\Software\Messenger_Plus_FR]
[HKCU\Software\AppDataLow\Software\PriceGong]
[HKCU\Software\AppDataLow\Software\ShoppingReport2]
[HKCU\Software\AppDataLow\Toolbar]
[HKCU\Software\ShoppingReport2]
[HKCU\Software\YahooPartnerToolbar]
[HKCU\Software\cacaoweb]
[HKCU\Software\clickpotatolitesa]
[HKLM\Software\Trymedia Systems]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3d4d238c-9c48-47cd-a95c-53259acf9e56}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3d4d238c-9c48-47cd-a95c-53259acf9e56}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3D4D238C-9C48-47CD-A95C-53259ACF9E56}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3D4D238C-9C48-47CD-A95C-53259ACF9E56}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB38E21A-0133-419d-92AD-ECDFD5244D6D}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DB38E21A-0133-419d-92AD-ECDFD5244D6D}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EB620C54-E229-4942-87CE-E717109FC8C6}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EB620C54-E229-4942-87CE-E717109FC8C6}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ClickpotatoliteSA]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Messenger_Plus_FR Toolbar]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\QuestBrowse]
[HKCU\Software\cacaoweb]
[HKCU\Software\AppDataLow\Software\Messenger_Plus_FR]
[HKCU\Software\AppDataLow\Software\PriceGong]
[HKCU\Software\AppDataLow\Toolbar]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\Arpcache\ClickPotatoLiteSA]
[HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\Arpcache\ShoppingReport2]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]:cacaoweb => Infection PUP (PUP.CacaoWeb)*
C:\Users\Lilouck\AppData\Roaming\cacaoweb
C:\Users\Lilouck\AppData\Local\Conduit
C:\Users\Lilouck\AppData\LocalLow\Conduit
C:\Users\Lilouck\AppData\LocalLow\PriceGong
C:\Users\Lilouck\AppData\LocalLow\ShoppingReport2
C:\Users\Lilouck\AppData\Roaming\Mozilla\Firefox\Profiles\yt45mj45.default\Conduit
C:\Users\Lilouck\AppData\Roaming\Mozilla\Firefox\Profiles\yt45mj45.default\ConduitEngine
C:\Users\Lilouck\AppData\Roaming\Mozilla\Firefox\Profiles\yt45mj45.default\Extensions\cacaoweb@cacaoweb.org
C:\Users\Lilouck\AppData\Roaming\Mozilla\Firefox\Profiles\yt45mj45.default\Extensions\engine@conduit.com
C:\Users\Lilouck\Downloads\cacaoweb.exe
C:\Users\Lilouck\AppData\Local\Temp\cacaoneweb202f.exe
EmptyTemp
Poste le contenu du rapport ZHPFixReport.txt, à partir du raccourci créé sur le bureau.
Ouvre cette page
jre-7u13-windows-i586.exe Ouvre cette page
Oui, installer McAfee Security Scan Plus (facultatif) (0.98MO)
Télécharger dès maintenant