<https://forum.zebulon.fr/topic/118877-redirig%C3%A9-vers-des-mauvaises-pages/>
<http://schema.org/text>
"Bonjour à tous , \nSi je viens vous demander de l'aide , c'est que apparement vous êtes les seuls a pouvoir trouver la solution car sur les autres sites je n'ai pas eu de solutions. \nVoiçi mon problème , quand je clic sur un site donné par google , je suis redirigé vers d'autre site soit de casino , soit de rencontre et surtout sur Maxifiles. \nJ'ai essayé plein de choses ( spybot, adware, avg , spywareblaster etc...) mais rien à faire .Il y a juste avast qui à trouvé trouver un virus Win32:CTX que j'ai mis en quarantaine. \n  \nVoiçi mes rapports fixwareout et hisjackthis \n  \nFixwareout Last edited 2/11/2007 \nPost this report in the forums please  \n... \n»»»»»Prerun check \nHKLM\\SOFTWARE\\~\\Winlogon\\ \"System\"=\"kdlct.exe\" \n  \n»»»»» System restarted \n  \n»»»»» Postrun check  \nHKLM\\SOFTWARE\\~\\Winlogon\\ \"system\"=\"\"  \n.... \n.... \n»»»»» Misc files.  \n.... \n»»»»» Checking for older varients. \n.... \n  \nSearch five digit cs, dm, kd, jb, other, files. \nThe following files NEED TO BE SUBMITTED to one of the following URL'S for further inspection.  \n  \n  \n  \nClick browse, find the file then click submit. \nhttp://www.virustotal.com/flash/index_en.html \nOr http://virusscan.jotti.org/ \n  \n»»»»» Other \nC:\\WINDOWS\\Temp\\kdlct.ren 63860 05/08/2004  \n  \n  \n  \n»»»»» Current runs  \n[HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run] \n\"Apoint\"=\"C:\\\\Program Files\\\\Apoint2K\\\\Apoint.exe\" \n\"AGRSMMSG\"=\"AGRSMMSG.exe\" \n\"ATIModeChange\"=\"Ati2mdxx.exe\" \n\"ATIPTA\"=\"C:\\\\Program Files\\\\ATI Technologies\\\\ATI Control Panel\\\\atiptaxx.exe\" \n\"eabconfg.cpl\"=\"C:\\\\Program Files\\\\HPQ\\\\Quick Launch Buttons\\\\EabServr.exe /Start\" \n\"avast!\"=\"C:\\\\PROGRA~1\\\\ALWILS~1\\\\Avast4\\\\ashDisp.exe\" \n\"UpdateManager\"=\"\\\"C:\\\\Program Files\\\\Fichiers communs\\\\Sonic\\\\Update Manager\\\\sgtray.exe\\\" /r\" \n\"QuickTime Task\"=\"\\\"C:\\\\Program Files\\\\QuickTime\\\\qttask.exe\\\" -atboottime\" \n\"NeroFilterCheck\"=\"C:\\\\WINDOWS\\\\system32\\\\NeroCheck.exe\" \n\"Cpqset\"=\"C:\\\\Program Files\\\\HPQ\\\\Default Settings\\\\cpqset.exe\" \n\"!AVG Anti-Spyware\"=\"\\\"C:\\\\Program Files\\\\Grisoft\\\\AVG Anti-Spyware 7.5\\\\avgas.exe\\\" /minimized\" \n[HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run] \n\"CTFMON.EXE\"=\"C:\\\\WINDOWS\\\\system32\\\\ctfmon.exe\" \n\"swg\"=\"C:\\\\Program Files\\\\Google\\\\GoogleToolbarNotifier\\\\1.2.1128.5462\\\\GoogleToolbarNotifier.exe\" \n.... \nHosts file was reset, If you use a custom hosts file please replace it \n»»»»» End report »»»»» \n  \n  \nLogfile of HijackThis v1.99.1 \nScan saved at 18:57:11, on 24/03/2007 \nPlatform: Windows XP SP2 (WinNT 5.01.2600) \nMSIE: Internet Explorer v7.00 (7.00.6000.16414) \n  \nRunning processes: \nC:\\WINDOWS\\System32\\smss.exe \nC:\\WINDOWS\\system32\\winlogon.exe \nC:\\WINDOWS\\system32\\services.exe \nC:\\WINDOWS\\system32\\lsass.exe \nC:\\WINDOWS\\system32\\Ati2evxx.exe \nC:\\WINDOWS\\system32\\svchost.exe \nC:\\WINDOWS\\System32\\svchost.exe \nC:\\WINDOWS\\system32\\spoolsv.exe \nC:\\Program Files\\Alwil Software\\Avast4\\aswUpdSv.exe \nC:\\Program Files\\Alwil Software\\Avast4\\ashServ.exe \nC:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\guard.exe \nC:\\WINDOWS\\system32\\drivers\\CDAC11BA.EXE \nC:\\WINDOWS\\system32\\imapi.exe \nC:\\Program Files\\Fichiers communs\\Microsoft Shared\\VS7Debug\\mdm.exe \nC:\\Program Files\\Analog Devices\\SoundMAX\\SMAgent.exe \nC:\\Program Files\\Alwil Software\\Avast4\\ashMaiSv.exe \nC:\\Program Files\\Alwil Software\\Avast4\\ashWebSv.exe \nC:\\WINDOWS\\system32\\Ati2evxx.exe \nC:\\WINDOWS\\Explorer.EXE \nC:\\Program Files\\Apoint2K\\Apoint.exe \nC:\\Program Files\\Apoint2K\\Apntex.exe \nC:\\WINDOWS\\AGRSMMSG.exe \nC:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe \nC:\\Program Files\\HPQ\\Quick Launch Buttons\\EabServr.exe \nC:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe \nC:\\Program Files\\QuickTime\\qttask.exe \nC:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe \nC:\\WINDOWS\\system32\\ctfmon.exe \nC:\\Program Files\\Google\\GoogleToolbarNotifier\\1.2.1128.5462\\GoogleToolbarNotifier.exe \nC:\\Program Files\\Internet Explorer\\iexplore.exe \nC:\\Program Files\\Internet Explorer\\iexplore.exe \nC:\\HiJackThis\\HijackThis.exe \n  \nR0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = http://www.google.fr/ \nR1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 \nR1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 \nR1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 \nR0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 \nR0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Local Page =  \nR0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Local Page =  \nR0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Toolbar,LinksFolderName = Liens \nO2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\\Program Files\\Adobe\\Acrobat 7.0\\ActiveX\\AcroIEHelper.dll \nO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\\PROGRA~1\\SPYBOT~1\\SDHelper.dll \nO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\\Program Files\\Java\\jre1.5.0_06\\bin\\ssv.dll \nO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\\program files\\google\\googletoolbar4.dll \nO3 - Toolbar: &amp;Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\\program files\\google\\googletoolbar4.dll \nO4 - HKLM\\..\\Run: [Apoint] C:\\Program Files\\Apoint2K\\Apoint.exe \nO4 - HKLM\\..\\Run: [AGRSMMSG] AGRSMMSG.exe \nO4 - HKLM\\..\\Run: [ATIModeChange] Ati2mdxx.exe \nO4 - HKLM\\..\\Run: [ATIPTA] C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe \nO4 - HKLM\\..\\Run: [eabconfg.cpl] C:\\Program Files\\HPQ\\Quick Launch Buttons\\EabServr.exe /Start \nO4 - HKLM\\..\\Run: [avast!] C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe \nO4 - HKLM\\..\\Run: [updateManager] \"C:\\Program Files\\Fichiers communs\\Sonic\\Update Manager\\sgtray.exe\" /r \nO4 - HKLM\\..\\Run: [QuickTime Task] \"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime \nO4 - HKLM\\..\\Run: [NeroFilterCheck] C:\\WINDOWS\\system32\\NeroCheck.exe \nO4 - HKLM\\..\\Run: [Cpqset] C:\\Program Files\\HPQ\\Default Settings\\cpqset.exe \nO4 - HKLM\\..\\Run: [!AVG Anti-Spyware] \"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized \nO4 - HKCU\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\ctfmon.exe \nO4 - HKCU\\..\\Run: [swg] C:\\Program Files\\Google\\GoogleToolbarNotifier\\1.2.1128.5462\\GoogleToolbarNotifier.exe \nO4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\\Program Files\\Adobe\\Acrobat 7.0\\Reader\\reader_sl.exe \nO8 - Extra context menu item: &amp;Add animation to IncrediMail Style Box - C:\\PROGRA~1\\INCRED~1\\bin\\resources\\WebMenuImg.htm \nO11 - Options group: [iNTERNATIONAL] International* \nO14 - IERESET.INF: START_PAGE_URL=http://www.hp.com \nO16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab \nO16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.safety.live.com/resource/d...lscbase8460.cab \nO16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cab \nO16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab \nO16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.photoways.com/clients/ImageUploader3.cab \nO18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\\PROGRA~1\\MSNMES~1\\MSGRAP~1.DLL \nO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\\PROGRA~1\\MSNMES~1\\MSGRAP~1.DLL \nO20 - Winlogon Notify: WgaLogon - C:\\WINDOWS\\SYSTEM32\\WgaLogon.dll \nO21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\\WINDOWS\\system32\\WPDShServiceObj.dll \nO23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\\Program Files\\Alwil Software\\Avast4\\aswUpdSv.exe \nO23 - Service: Ati HotKey Poller - Unknown owner - C:\\WINDOWS\\system32\\Ati2evxx.exe \nO23 - Service: avast! Antivirus - Unknown owner - C:\\Program Files\\Alwil Software\\Avast4\\ashServ.exe \nO23 - Service: avast! Mail Scanner - Unknown owner - C:\\Program Files\\Alwil Software\\Avast4\\ashMaiSv.exe\" /service (file missing) \nO23 - Service: avast! Web Scanner - Unknown owner - C:\\Program Files\\Alwil Software\\Avast4\\ashWebSv.exe\" /service (file missing) \nO23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\guard.exe \nO23 - Service: C-DillaCdaC11BA - Macrovision - C:\\WINDOWS\\system32\\drivers\\CDAC11BA.EXE \nO23 - Service: Google Updater Service (gusvc) - Google - C:\\Program Files\\Google\\Common\\Google Updater\\GoogleUpdaterService.exe \nO23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\\Program Files\\HPQ\\SHARED\\HPQWMI.exe \nO23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\\Program Files\\iPod\\bin\\iPodService.exe \nO23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\\Program Files\\Analog Devices\\SoundMAX\\SMAgent.exe \n  \nMerçi de m'aider , je ne sais plus quoi faire.ça fait deux jours que je suis la dessus. \n  \nEncore merci \n"
<https://forum.zebulon.fr/topic/118877-redirig%C3%A9-vers-des-mauvaises-pages/>