Antimalware doctor

Bonjour,

excusez moi, je suis assez nul avec mon pc, j'ai attrapé l'antimalware doctor et j'ai cherché partout des réponses et apparemment je ne peux pas m'en debarasser toute seule. Pourriez vous m'aider s'il vous plaît. Merci d'avance.

10 réponses

  1. tu marques aujourd hui antimalware doctor se propose encore et tu me mets que l ordi marche comme avant .
    c est pas coherent.

    refais un scan complet apres mise a jour et colle le rapport .merci
    2
    1. Bonjour

      Télécharge Malwaresbytes anti malware ici
      http://www.malwarebytes.org/mbam.php

      Bouton »Download free version »

      * Installe le (choisis bien "français" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

      (NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : https://www.malekal.com/tutorial-aboutbuster/

      * Potasse le tuto pour te familiariser avec le prg :

      https://forum.pcastuces.com/sujet.asp?f=31&s=3

      (cela dis, il est très simple d'utilisation).

      relance Malwaresbytes en suivant scrupuleusement ces consignes :

      ! Déconnecte toi et ferme toutes applications en cours !

      * Lance Malwarebyte's. Sous Vista et Seven (clic droit de la souris « exécuter en tant que administrateur »)

      Fais un examen dit "Complet"

      --> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
      --> à la fin tu cliques sur "Afficher les résultats" " .
      --> Vérifie que tous les objets infectés soient validés, puis clique sur " supprimer la sélection " .

      Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

      Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwaresbytes, le dernier en date)

      @+
      0
      1. merci, ça va être peut être une question pas très intelligente mais... je le poste où et je fais comment? désolée... en tous cas merci
        0
      2. tu le postes dans repondre au sujet et pas dans ajoute commentaires comme on est en train de faire .

        tu fais un copier coller de tout le rapport que tu obtiens APRES SUPPRESSION.
        d abord ouvre le rapport puis fait cela
        Ctrl et A en meme temps pour tout selectionner
        Ctrl et C .............................. pour tout copier
        ensuite viens sur COMMENTCAMARCHE clique sur repondre au sujet et fait cela
        Ctrl et V ............................... pour tout coller

        et valide
        0
      3. merci, je pensais qu'il fallait envoyer un rapport quelque part à mon serveur ou un truc dans le genre et non ici... comme quoi, c'était vraiment une question bête. ^^ encore merci.
        0
    2. Malwarebytes' Anti-Malware 1.44
      Version de la base de données: 3904
      Windows 6.0.6002 Service Pack 2
      Internet Explorer 7.0.6002.18005

      21/02/2011 11:21:10
      mbam-log-2011-02-21 (11-21-10).txt

      Type de recherche: Examen complet (C:\|D:\|E:\|)
      Eléments examinés: 302567
      Temps écoulé: 1 hour(s), 20 minute(s), 40 second(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 0
      Clé(s) du Registre infectée(s): 2
      Valeur(s) du Registre infectée(s): 1
      Elément(s) de données du Registre infecté(s): 0
      Dossier(s) infecté(s): 0
      Fichier(s) infecté(s): 0

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Clé(s) du Registre infectée(s):
      HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully.
      HKEY_CURRENT_USER\Software\Antimalware Doctor Inc (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully.

      Valeur(s) du Registre infectée(s):
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\gqigohu (Trojan.Agent.U) -> Quarantined and deleted successfully.

      Elément(s) de données du Registre infecté(s):
      (Aucun élément nuisible détecté)

      Dossier(s) infecté(s):
      (Aucun élément nuisible détecté)

      Fichier(s) infecté(s):
      (Aucun élément nuisible détecté)
      0
      1. Modérateur
        Malwarebyte est pas à jour.
        0
      2. ça y est c'est fait... faut plus que j'attende encore 1 heure, le temps de refaire le scan.^^
        0
      3. ah ouais !! j'avais pu vu...
        0
    3. comment se comporte ton pc?
      0
      1. oui bien vu malekal
        fait une mise a jour lance un scan complet et colle le rapport.
        0
        1. bah il se porte bien, juste antimalware doctor se propose encore. Mais il ne fait rien bugger par rapport à avant où limite il bloquait internet...
          0
          1. refais la mise a jour et lance le scan et colle le rapport merci.
            0
            1. mon ordi marche comme avant, est ce que je t'envoie le scan quand même au cas où?
              0
              1. c'était avant la mis a jour, et le scan...

                Malwarebytes' Anti-Malware 1.50.1.1100
                www.malwarebytes.org

                Version de la base de données: 5829

                Windows 6.0.6002 Service Pack 2
                Internet Explorer 7.0.6002.18005

                21/02/2011 15:27:28
                mbam-log-2011-02-21 (15-27-28).txt

                Type d'examen: Examen complet (C:\|D:\|E:\|)
                Elément(s) analysé(s): 319044
                Temps écoulé: 1 heure(s), 15 minute(s), 9 seconde(s)

                Processus mémoire infecté(s): 1
                Module(s) mémoire infecté(s): 1
                Clé(s) du Registre infectée(s): 92
                Valeur(s) du Registre infectée(s): 7
                Elément(s) de données du Registre infecté(s): 0
                Dossier(s) infecté(s): 26
                Fichier(s) infecté(s): 53

                Processus mémoire infecté(s):
                c:\Users\Emma Lee\AppData\Roaming\14c51f4fb3ec922b43318705ca775d58\hmod70twindl.exe (Trojan.FakeAlert) -> 3196 -> Unloaded process successfully.

                Module(s) mémoire infecté(s):
                c:\Users\Emma Lee\AppData\Local\ngusvc.dll (Trojan.Hiloti.Gen) -> Delete on reboot.

                Clé(s) du Registre infectée(s):
                HKEY_CLASSES_ROOT\AppID\{0D82ACD6-A652-4496-A298-2BDE705F4227} (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\AppID\{7025E484-D4B0-441a-9F0B-69063BD679CE} (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\AppID\{8258B35C-05B8-4c0e-9525-9BCCC70F8F2D} (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\AppID\{A89256AD-EC17-4a83-BEF5-4B8BC4F39306} (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\CLSID\{09325003-167C-483d-A4BA-8B3122ABB432} (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\TypeLib\{F1A1892C-2A6C-4817-98B4-FF81443CBA20} (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\Interface\{E25DA6D6-C365-46CF-ABAF-DC5893135D7A} (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.HbGuru.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.HbGuru (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\CLSID\{1602F07D-8BF3-4c08-BDD6-DDDB1C48AEDC} (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\TypeLib\{C55CA95C-324B-451C-B2D2-6E895AA75FEC} (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ClickPotatoLiteAX.info.1 (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ClickPotatoLiteAX.info (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1602F07D-8BF3-4C08-BDD6-DDDB1C48AEDC} (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\CLSID\{4D1EC4CA-4B92-4324-B8F8-C9A6ED06A8AE} (Adware.Hotbar) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\TypeLib\{6F098504-CDB1-420F-A2E6-DDC0B835FEDF} (Adware.Hotbar) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\Interface\{30B15818-E110-4527-9C05-46ACE5A3460D} (Adware.Hotbar) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\HBLiteAX.Info.1 (Adware.Hotbar) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\HBLiteAX.Info (Adware.Hotbar) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4D1EC4CA-4B92-4324-B8F8-C9A6ED06A8AE} (Adware.Hotbar) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\CLSID\{4E674574-3F0B-491d-8AE3-F90B43A34FD6} (Adware.Hotbar) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\HBLiteAX.UserProfiles.1 (Adware.Hotbar) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\HBLiteAX.UserProfiles (Adware.Hotbar) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4E674574-3F0B-491D-8AE3-F90B43A34FD6} (Adware.Hotbar) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\CLSID\{6DD76B7B-6423-4df0-9A07-84A6CAD973A0} (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.Dwnldr.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.Dwnldr (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\CLSID\{7A3D6D17-9DD5-4C60-8076-D1784DABAF8C} (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\TypeLib\{814BAA91-DC22-4350-87D6-0C86E93F7F08} (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\Interface\{419EDA30-6DFF-432C-B534-E15D899ABEE4} (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\MenuButtonIE.ButtonIE.1 (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\MenuButtonIE.ButtonIE (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\CLSID\{7F6CFB6A-9227-4bb8-B941-F2B067E76F51} (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.TriggerImmidiateOrRandomTS.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.TriggerImmidiateOrRandomTS (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\CLSID\{AB0EE208-DF60-4fa7-A617-C4269760033E} (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.Reporter.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.Reporter (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\CLSID\{AC6D819E-AA8F-4418-A3BB-D165C1B18BB5} (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ClickPotatoLiteAX.UserProfiles.1 (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ClickPotatoLiteAX.UserProfiles (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{AC6D819E-AA8F-4418-A3BB-D165C1B18BB5} (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\CLSID\{E12AEAB6-7D12-4c07-8E36-5892EFB4DAFB} (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.TriggerImmidiate.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.TriggerImmidiate (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\CLSID\{E2F2C137-A782-4fb5-81AF-086156F5EB0A} (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.AsyncReporter.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.AsyncReporter (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\CLSID\{F1D06C9F-51F0-4476-BEDE-5DDF91BE304E} (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.ReportData.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.ReportData (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\CLSID\{F3A32DF2-7413-4fb1-B575-1AC920A17B76} (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.TriggerOnceInDay.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.TriggerOnceInDay (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\Typelib\{ACC62306-9A63-4864-BD2F-C8825D2D7EA6} (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\Interface\{21BA420E-161C-413A-B21E-4E42AE1F4226} (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE} (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE} (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE} (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{69725738-CD68-4f36-8D02-8C43722EE5DA} (Adware.Hotbar) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{89F88394-3828-4d03-A0CF-8203604C3DA6} (Adware.Hotbar) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D4233F04-1789-483c-A137-731E8F113DD5} (Adware.Hotbar) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ClickPotatoLiteSA (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HBLiteSA (Adware.Hotbar) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QuestBrowse (Adware.QuestBrowse) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.CntntDic (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.CntntDic.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.CntntDisp (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.CntntDisp.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.KOPFF (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.KOPFF.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.MozillaNvgtnTrpr (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.MozillaNvgtnTrpr.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.MozillaPSExecuter (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.MozillaPSExecuter.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.Scopes (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.Scopes.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.Stock (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\ShopperReports.Stock.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\AppID\BRNstIE.DLL (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\AppID\CmndFF.DLL (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\AppID\MenuButtonIE.DLL (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\AppID\mozillaps.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CLASSES_ROOT\AppID\Pltfrm.DLL (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CURRENT_USER\SOFTWARE\ShopperReports3 (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_CURRENT_USER\Software\clickpotatolitesa (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_CURRENT_USER\Software\hblitesa (Adware.HotBar) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\ClickPotatoLite (Adware.ClickPotato) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\HBLite (Adware.HotBar) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\QuestBrowse (Adware.QuestBrowse) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\ShopperReports3 (Adware.ShopperReports) -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShopperReportsSA (Adware.ShopperReports) -> Quarantined and deleted successfully.

                Valeur(s) du Registre infectée(s):
                HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Gqigohu (Trojan.Hiloti.Gen) -> Value: Gqigohu -> Delete on reboot.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ClickPotatoLiteSA (Adware.ClickPotato) -> Value: ClickPotatoLiteSA -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform\ShopperReports 3.0.517.0 (Adware.HotBar) -> Value: ShopperReports 3.0.517.0 -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform\SRS_IT_E8790472B676555B37A092 (Malware.Trace) -> Value: SRS_IT_E8790472B676555B37A092 -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions\ShopperReports@ShopperReports.com (ShopperReports) -> Value: ShopperReports@ShopperReports.com -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions\ClickPotatoLite@ClickPotatoLite.com (Adware.ClickPotato) -> Value: ClickPotatoLite@ClickPotatoLite.com -> Quarantined and deleted successfully.
                HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions\HBLite@HBLite.com (Adware.HotBar) -> Value: HBLite@HBLite.com -> Quarantined and deleted successfully.

                Elément(s) de données du Registre infecté(s):
                (Aucun élément nuisible détecté)

                Dossier(s) infecté(s):
                c:\programdata\clickpotatolitesa (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\Users\Emma Lee\AppData\Roaming\clickpotatolite (Adware.ClickPotato) -> Delete on reboot.
                c:\Users\Emma Lee\AppData\Roaming\HBLite (Adware.Hotbar) -> Delete on reboot.
                c:\programdata\HBLiteSA (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\program files\clickpotatolite (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\program files\clickpotatolite\bin (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\program files\clickpotatolite\bin\10.0.637.0 (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\program files\clickpotatolite\bin\10.0.637.0\firefox (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\program files\clickpotatolite\bin\10.0.637.0\firefox\extensions (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\program files\clickpotatolite\bin\10.0.637.0\firefox\extensions\plugins (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\program files\HBLite (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\program files\HBLite\bin (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\program files\HBLite\bin\11.0.336.0 (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\program files\HBLite\bin\11.0.336.0\firefox (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\program files\HBLite\bin\11.0.336.0\firefox\extensions (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\program files\HBLite\bin\11.0.336.0\firefox\extensions\plugins (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\Users\Emma Lee\AppData\Roaming\microsoft\Windows\start menu\Programs\antimalware doctor (Rogue.AntiMalwareDoctor) -> Quarantined and deleted successfully.
                c:\programdata\microsoft\Windows\start menu\Programs\clickpotato (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\programdata\microsoft\Windows\start menu\Programs\Hotbar (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\programdata\microsoft\Windows\start menu\Programs\shopperreports (Adware.ShopperReports) -> Quarantined and deleted successfully.
                c:\program files\mozilla firefox\extensions\{d9adb0a8-7bfb-498d-9880-ee78a81ccfa0} (Adware.QuestBrowse) -> Quarantined and deleted successfully.
                c:\program files\mozilla firefox\extensions\{d9adb0a8-7bfb-498d-9880-ee78a81ccfa0}\chrome (Adware.QuestBrowse) -> Quarantined and deleted successfully.
                c:\program files\mozilla firefox\extensions\{d9adb0a8-7bfb-498d-9880-ee78a81ccfa0}\defaults (Adware.QuestBrowse) -> Quarantined and deleted successfully.
                c:\program files\mozilla firefox\extensions\{d9adb0a8-7bfb-498d-9880-ee78a81ccfa0}\defaults\preferences (Adware.QuestBrowse) -> Quarantined and deleted successfully.
                c:\program files\questbrwsearch (Adware.QuestBrowse) -> Quarantined and deleted successfully.
                c:\programdata\questbrwsearch (Adware.QuestBrowse) -> Quarantined and deleted successfully.

                Fichier(s) infecté(s):
                c:\Users\Emma Lee\AppData\Local\ngusvc.dll (Trojan.Hiloti.Gen) -> Delete on reboot.
                c:\Users\Emma Lee\AppData\Roaming\14c51f4fb3ec922b43318705ca775d58\hmod70twindl.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
                c:\program files\clickpotatolite\bin\10.0.637.0\clickpotatolitesa.exe (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\program files\clickpotatolite\bin\10.0.637.0\clickpotatolitesaax.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\program files\HBLite\bin\11.0.336.0\hblitesaax.dll (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\program files\clickpotatolite\bin\10.0.637.0\clickpotatolitesabho.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\program files\clickpotatolite\bin\10.0.637.0\clickpotatoliteuninstaller.exe (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\program files\clickpotatolite\bin\10.0.637.0\firefox\extensions\plugins\npclntax_clickpotatolitesa.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\program files\mozilla firefox\plugins\npclntax_clickpotatolitesa.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\program files\mozilla firefox\plugins\npclntax_hblitesa.dll (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\program files\HBLite\bin\11.0.336.0\hbliteuninstaller.exe (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\program files\HBLite\bin\11.0.336.0\firefox\extensions\plugins\npclntax_hblitesa.dll (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\program files\questbrwsearch\questbrwsearch.exe (Adware.QuestBrowse) -> Quarantined and deleted successfully.
                c:\program files\questbrwsearch\uninstall.exe (Adware.QuestBrowse) -> Quarantined and deleted successfully.
                c:\programdata\questbrwsearch\questbrowse125.exe (Adware.QuestBrowse) -> Quarantined and deleted successfully.
                c:\Users\Emma Lee\AppData\Local\Temp\mawroscnxe.exe (Trojan.Hiloti.Gen) -> Quarantined and deleted successfully.
                c:\Users\Emma Lee\AppData\Local\Temp\Ikv.exe (Trojan.Agent) -> Quarantined and deleted successfully.
                c:\Users\Emma Lee\AppData\Local\Temp\Ikw.exe (Trojan.Agent) -> Quarantined and deleted successfully.
                c:\Users\Emma Lee\AppData\Local\Temp\err.log17586788 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
                c:\Users\Emma Lee\AppData\Roaming\14c51f4fb3ec922b43318705ca775d58\err.log360518 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
                c:\Users\Emma Lee\AppData\Roaming\Adobe\adobeupdate.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
                c:\Users\Emma Lee\downloads\VLCSetup.exe (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\Users\Emma Lee\downloads\xvidsetup.exe (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\Users\Emma Lee\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\AdbUpd.lnk (Malware.Trace) -> Quarantined and deleted successfully.
                c:\Users\Emma Lee\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\antimalware doctor.lnk (Rogue.AntiMalwareDoctor) -> Quarantined and deleted successfully.
                c:\programdata\clickpotatolitesa\clickpotatolitesa.dat (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\programdata\clickpotatolitesa\clickpotatolitesaabout.mht (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\programdata\clickpotatolitesa\clickpotatolitesaau.dat (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\programdata\clickpotatolitesa\clickpotatolitesaeula.mht (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\programdata\clickpotatolitesa\clickpotatolitesa_kyf.dat (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\programdata\HBLiteSA\HBLiteSA.dat (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\programdata\HBLiteSA\hblitesaabout.mht (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\programdata\HBLiteSA\hblitesaau.dat (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\programdata\HBLiteSA\hblitesaeula.mht (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\programdata\HBLiteSA\hblitesa_hpk.dat (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\programdata\HBLiteSA\hblitesa_kyf.dat (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\program files\clickpotatolite\bin\10.0.637.0\firefox\extensions\install.rdf (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\program files\HBLite\bin\11.0.336.0\firefox\extensions\install.rdf (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\Users\Emma Lee\AppData\Roaming\microsoft\Windows\start menu\Programs\antimalware doctor\antimalware doctor.lnk (Rogue.AntiMalwareDoctor) -> Quarantined and deleted successfully.
                c:\Users\Emma Lee\AppData\Roaming\microsoft\Windows\start menu\Programs\antimalware doctor\uninstall.lnk (Rogue.AntiMalwareDoctor) -> Quarantined and deleted successfully.
                c:\programdata\microsoft\Windows\start menu\Programs\clickpotato\About Us.lnk (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\programdata\microsoft\Windows\start menu\Programs\clickpotato\clickpotato customer support.lnk (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\programdata\microsoft\Windows\start menu\Programs\clickpotato\clickpotato uninstall instructions.lnk (Adware.ClickPotato) -> Quarantined and deleted successfully.
                c:\programdata\microsoft\Windows\start menu\Programs\Hotbar\about hotbar.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\programdata\microsoft\Windows\start menu\Programs\Hotbar\hotbar customer support center.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\programdata\microsoft\Windows\start menu\Programs\Hotbar\hotbar uninstall instructions.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.
                c:\programdata\microsoft\Windows\start menu\Programs\shopperreports\About Us.lnk (Adware.ShopperReports) -> Quarantined and deleted successfully.
                c:\programdata\microsoft\Windows\start menu\Programs\shopperreports\customer support.lnk (Adware.ShopperReports) -> Quarantined and deleted successfully.
                c:\programdata\microsoft\Windows\start menu\Programs\shopperreports\shopperreports uninstall instructions.lnk (Adware.ShopperReports) -> Quarantined and deleted successfully.
                c:\program files\mozilla firefox\extensions\{d9adb0a8-7bfb-498d-9880-ee78a81ccfa0}\chrome.manifest (Adware.QuestBrowse) -> Quarantined and deleted successfully.
                c:\program files\mozilla firefox\extensions\{d9adb0a8-7bfb-498d-9880-ee78a81ccfa0}\install.rdf (Adware.QuestBrowse) -> Quarantined and deleted successfully.
                c:\program files\mozilla firefox\extensions\{d9adb0a8-7bfb-498d-9880-ee78a81ccfa0}\chrome\questbrowse.jar (Adware.QuestBrowse) -> Quarantined and deleted successfully.
                c:\program files\mozilla firefox\extensions\{d9adb0a8-7bfb-498d-9880-ee78a81ccfa0}\defaults\preferences\prefs.js (Adware.QuestBrowse) -> Quarantined and deleted successfully.

                voilà, merci.
                0
                1. Bonsoir totobetourne

                  Je te laisse finir ;-)

                  @+
                  0
                2. non vas y moi j interviens juste pour aider de temps en temps et comme j ai du changer mon ordi car l autre est mort j ai plus les canned pour repondre et j ai tout a refaire ou meme a copier mais cela me saoul un peu.

                  je t en prie , moi je continue a m interesser mais je suis de moin en moin actif et comme j ai appris sur le tas et je n ai pas appris en formation j ai des lacunes , je prefere que quelqu un reponde efficacement car je suis un peu a la traine.
                  0
              2. Bonsoir

                @ + totobetourne

                @ kagehisa33

                Pour vérification, fait ceci stp

                Ouvre ce lien et télécharge ZHPDiag de Nicolas Coolman :

                https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

                Ou

                https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

                Serveur N°2

                Ou

                http://www.premiumorange.com/zeb-help-process/zhpdiag.html
                en bas de la page ZHP avec un numéro de version.

                Une fois le téléchargement achevé, dé zippe le fichier obtenu et place ZHPDiag.exe sur ton Bureau.

                Double-clique sur l'icône pour lancer le programme. Sous Vista ou Seven clic droit « exécuter en tant que administrateur »

                Clique sur la loupe pour lancer l'analyse.

                Laisse l'outil travailler, il peut être assez long.

                Ferme ZHPDiag en fin d'analyse.

                Pour transmettre le rapport clique sur ce lien :

                http://www.cijoint.fr/index.php
                Clique sur Parcourir et cherche le répertoire où est installé ZHPDiag (en général C:\Program Files\ZHPDiag).

                Sélectionne le fichier ZHPDiag.txt.

                Clique sur "Cliquez ici pour déposer le fichier".

                Un lien de cette forme :

                http://www.cijoint.fr/cjlink.php?file=cj200905/cijSKAP5fU.txt

                est ajouté dans la page.

                Copie ce lien dans ta réponse.

                Merci

                A+
                0