Search Completion Malware

LucasRey Messages postés 2 Statut Membre -  
LucasRey Messages postés 2 Statut Membre -
Bonjour,

J'ai voulu telecharger V share et depuis lorsque j'ouvre Google chrome ou IE, la page d' acceuil est Startsear.ch et je n'arrive pas a l'enlever .

Je ne suis vraiment pas doue en informatique, j'aurai donc vraiment besoin de votre aide ! Depuis que ce Malware es la, mon Laptop est vraiment ralenti, je ne peux plus jouer a mes etc ...

Merci d'avance a tous !!

2 réponses

  1. Utilisateur anonyme
     
    Bonjour

    1)
    Télécharge AdwCleaner ( d'Xplode ) sur ton bureau.
    Lance le, clique sur [Suppression] puis patiente le temps du scan.
    Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.

    Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt


    2)
    Télécharge Malwaresbytes anti malware ici
    http://www.malwarebytes.org/mbam.php

    Bouton »Download free version »

    * Installe le (choisis bien "français" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

    (NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : https://www.malekal.com/tutorial-aboutbuster/

    * Potasse le tuto pour te familiariser avec le prg :

    https://forum.pcastuces.com/sujet.asp?f=31&s=3

    (cela dis, il est très simple d'utilisation).

    relance Malwaresbytes en suivant scrupuleusement ces consignes :

    ! Déconnecte toi et ferme toutes applications en cours !

    * Lance Malwarebyte's. Sous Vista et Seven (clic droit de la souris « exécuter en tant que administrateur »)

    *Procèdes à une mise à jour

    *Fais un examen dit "Complet"

    --> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
    --> à la fin tu cliques sur "Afficher les résultats" " .
    --> Vérifie que tous les objets infectés soient validés, puis clique sur " supprimer la sélection " .

    Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

    Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwaresbytes, le dernier en date)

    @+
    0
  2. LucasRey Messages postés 2 Statut Membre
     
    Merci beaucoup pour ton aide, voici deja le rapport de AdwCleaner.

    Je me lance dans la suite des instructions. Merci encore

    # AdwCleaner v1.402 - Logfile created 12/13/2011 at 16:50:05
    # Updated 12/11/11 at 19:00p.m by Xplode
    # Operating system : Windows 7 Home Premium (64 bits)
    # User : Lulu - LULU-HP (Administrator)
    # Running from : C:\Users\Lulu\Downloads\adwcleaner.exe
    # Option [Delete]

    ***** [Services] *****

    ***** [Files / Folders] *****

    Folder Deleted : C:\ProgramData\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
    Folder Deleted : C:\ProgramData\clickpotatolitesa
    Folder Deleted : C:\Users\Lulu\AppData\Roaming\clickpotatolite
    Folder Deleted : C:\Users\Lulu\AppData\Local\Conduit
    Folder Deleted : C:\Users\Lulu\AppData\LocalLow\ShoppingReport2

    ***** [Registry] *****

    [*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2504091
    [*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2765711
    Key Deleted : HKCU\Software\clickpotatolitesa
    Key Deleted : HKCU\Software\Conduit
    Key Deleted : HKCU\Software\AppDataLow\Software\ShoppingReport2
    Key Deleted : HKCU\Software\AppDataLow\Software\Toolbar
    Key Deleted : HKLM\SOFTWARE\ClickPotatoLite
    Key Deleted : HKLM\SOFTWARE\Classes\ClickPotatoLiteAx.Info
    Key Deleted : HKLM\SOFTWARE\Classes\ClickPotatoLiteAx.Info.1
    Key Deleted : HKLM\SOFTWARE\Classes\ClickPotatoLiteAX.UserProfiles
    Key Deleted : HKLM\SOFTWARE\Classes\ClickPotatoLiteAX.UserProfiles.1
    Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
    Key Deleted : HKLM\SOFTWARE\Classes\MenuButtonIE.ButtonIE.1
    Key Deleted : HKLM\SOFTWARE\Classes\MenuButtonIE.ButtonIE
    Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.Reporter
    Key Deleted : HKLM\SOFTWARE\Classes\ShopperReports.Reporter.1
    Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbAx
    Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbAx.1
    Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbInfoBand
    Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbInfoBand.1
    Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButton
    Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButton.1
    Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButtonA
    Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButtonA.1
    Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.RprtCtrl
    Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.RprtCtrl.1
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\MenuButtonIE.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0D82ACD6-A652-4496-A298-2BDE705F4227}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{8258B35C-05B8-4c0e-9525-9BCCC70F8F2D}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{7025E484-D4B0-441a-9F0B-69063BD679CE}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{A89256AD-EC17-4a83-BEF5-4B8BC4F39306}
    Key Deleted : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4
    Key Deleted : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0EB3F101-224A-4B2B-9E5B-DF720857529C}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A1F1ECD3-4806-44C6-A869-F0DADF11C57C}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D44FD6F0-9746-484E-B5C4-C66688393872}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{100EB1FD-D03E-47fd-81F3-EE91287F9465}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{69725738-CD68-4f36-8D02-8C43722EE5DA}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE}
    Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [ClickPotatoLite@ClickPotatoLite.com]

    ***** [Registry (x64)] *****

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{21BA420E-161C-413A-B21E-4E42AE1F4226}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{453DB0C5-F41C-4D97-8DD6-CC72ECD5F699}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4AFC07D0-59BB-46B8-B097-1A46E88EEF71}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6511CE4C-4722-40D0-AD3D-4AFA2F50978A}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9BEC9B38-BF39-4899-806E-A1C5DFEB60A2}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AEBF09E2-0C15-43C8-99BF-928C645D98A0}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B86D82BF-D39F-439A-A07C-43EDDC6F6EA6}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DA6305B9-0869-4235-8C1D-533A65E639E5}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E25DA6D6-C365-46CF-ABAF-DC5893135D7A}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E6961C59-CFCE-4CCD-B794-BC78DB98413A}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{71E02280-5212-45C3-B174-4D5A35DA254F}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{65A16874-2ED0-460E-A547-5FE2EC3A13A7}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0EB3F101-224A-4B2B-9E5B-DF720857529C}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A1F1ECD3-4806-44C6-A869-F0DADF11C57C}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{17BF1E05-C0E8-413C-BD1F-A481EEA3B8E9}

    ***** [Internet Browsers] *****

    -\\ Internet Explorer v8.0.7600.16385

    Registry is OK.

    -\\ Google Chrome v15.0.874.121

    File : C:\Users\Lulu\AppData\Local\Google\Chrome\User Data\Default\Preferences

    File is OK.

    *************************

    AdwCleaner[R1].txt - [8512 octets] - [13/12/2011 16:47:31]
    AdwCleaner[S1].txt - [279 octets] - [13/12/2011 16:49:50]
    AdwCleaner[S2].txt - [6111 octets] - [13/12/2011 16:50:05]

    *************************

    Temporary folder : : 17 folder(s)et 167 file(s) deleted

    ########## EOF - C:\AdwCleaner[S2].txt - [6328 octets] ##########
    0