site malveillant bloqué Résolu

Question

Bonjour, 

Je m'excuse mais à chaque fois l'agent avast m'informe qu'un site internet malveillant a été bloqué. J'ai tout fait mais sans succés et cela dure. Votre si vraiment quelqu'un pourrai m'aider je lui en serai très reconnaissant.

Je vous remercie

Pape

karabatich · Answer

Si il te dérange en affichant les alertes de blocage tu peux aller dans les Paramètres d'AVAST et puis dans la rubrique "MODE SILENCIEUX" tu coche le chois mode silencieux pour Avast et le problème et réglé

yoann090 · Answer

Bonjour, est ce que vous savez ce qu'avast a indiqué bloquer ?

yoann090 · Answer

Okok alors,  

1) Télécharge AdwCleaner ( d'Xplode ) sur ton bureau :  

Lance le, clique sur [Suppression] puis patiente le temps du scan.  
Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.  

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt  

Les toolbars, c'est pas obligatoire ( par Malekal ) :https://forum.malekal.com/viewtopic.php?t=6173&start=  
https://forum.malekal.com/viewtopic.php?t=33776&start= 


---------------------------------------------------------------------- 
2)&#9654 En cas de problème, n'hésite pas à consulter le tutoriel Malwarebytes Anti-Malware. 

Il se peut que le scan soit long, mais il faut le laisser se terminer.

&#9654 Télécharge Malwarebytes' Anti-Malware sur ton bureau. 

&#9654 Lance l'installation, (Clic droit "exécuter en tant qu'administrateur" si tu es sous Windows Vista ou 7). 

&#9654 Une fois l'installation terminée, le programme se lance et se met à jour. Dans l'onglet Mise à jour, clique sur le bouton "Recherche de mise à jour" au cas où cela n'aurait pas été le cas. 

&#9654 Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche. 
&#9654 Sélectionne Exécuter un examen complet. 
&#9654 Sélectionne Tous les disques. 
&#9654 Clique sur Rechercher. 

&#9654 Si des menaces ont été détectées, clique sur Afficher les résultats. 
&#9654 Sélectionne toutes les menaces et clique sur Supprimer la sélection, l'ordinateur peut demander le redémarrage, si tel est le cas accepte. 

&#9654 Une fois redémarré, ouvre Malwarebytes et rends-toi dans l'onglet Rapport. 
&#9654 Ouvre le dernier en date, et copie-colle le sur le forum.

papis70 · Answer

======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 =======

Updated by TeamXscript on 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
website: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Launched at 15:19:47 on 06/07/2012, Normal boot

Microsoft Windows 7 Home Premium  Service Pack 1 (X86) 
marone@MARONE-PC (Hewlett-Packard Compaq 615) 
 
============== ACTION(S) ==============


File deleted: C:\Windows\system32\Tasks\Scheduled Update for Ask Toolbar
Folder deleted: C:\ProgramData\GamesBar
Folder deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GamesBar
Folder deleted: C:\Program Files\GamesBar

(!) -- Temporary files deleted.


Key deleted: HKLM\Software\Classes\CLSID\{0020F9D9-007D-4F4B-9B38-77E3B7C937CF}
Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0020F9D9-007D-4F4B-9B38-77E3B7C937CF}
Key deleted: HKLM\Software\Classes\CLSID\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
Key deleted: HKLM\Software\Classes\CLSID\{85790A84-D74D-49B3-B3F5-0B1FF7B11F9C}
Key deleted: HKLM\Software\Classes\CLSID\{CB0D163C-E9F4-4236-9496-0597E24B23A5}
Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CB0D163C-E9F4-4236-9496-0597E24B23A5}
Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CB0D163C-E9F4-4236-9496-0597E24B23A5}
Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CB0D163C-E9F4-4236-9496-0597E24B23A5}
Key deleted: HKLM\Software\Classes\TypeLib\{AD76633E-E50D-4844-9E7F-4DFBC7C18467}
Key deleted: HKLM\Software\Classes\Oberontb.Band
Key deleted: HKLM\Software\Classes\Oberontb.Band.1
Key deleted: HKLM\Software\Classes\oberontb.BrowserApi
Key deleted: HKLM\Software\Classes\oberontb.BrowserApi.1
Key deleted: HKLM\Software\Classes\oberontb.GamesBarBHO
Key deleted: HKLM\Software\Classes\oberontb.GamesBarBHO.1
Key deleted: HKLM\Software\GamesBar
Key deleted: HKLM\Software\ResultBar
Key deleted: HKCU\Software\GamesBar
Key deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}
Key deleted: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A6CCCEBD-D148-44E4-9196-9C479F95CCE7}
Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Gamesbar
Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A93C934-025B-4C3A-B38E-9654A7003239}
Key deleted: HKLM\Software\Microsoft\Internet Explorer\Extensions\{1a93c934-025b-4c3a-b38e-9654a7003239}
Key deleting error: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar

Value deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Run|OfferBox
Value deleted: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{6F282B65-56BF-4BD1-A8B2-A4449A05863D}


============== ADDITIONNAL SCAN ==============

**** Internet Explorer Version [8.0.7601.17514] ****

HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
HKCU_Main|Start Page - hxxp://fr.msn.com/
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM_Main|Start Page - hxxp://fr.msn.com/
HKCU_URLSearchHooks|{b80f591e-fe9a-46cf-a13e-180377240586} - "Elf 1.13 Toolbar" (C:\Program Files\Elf_1.13\prxtbElf_.dll)
HKCU_URLSearchHooks|{81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - "YTNavAssistPlugin Class" (C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll)
HKLM_URLSearchHooks|{b80f591e-fe9a-46cf-a13e-180377240586} - "Elf 1.13 Toolbar" (C:\Program Files\Elf_1.13\prxtbElf_.dll)
HKCU_Toolbar\WebBrowser|{B80F591E-FE9A-46CF-A13E-180377240586} (C:\Program Files\Elf_1.13\prxtbElf_.dll)
HKCU_Toolbar\WebBrowser|{7FCC73D8-0CD9-4553-81F6-E827F6AE4432} (x)
HKLM_Toolbar|{b80f591e-fe9a-46cf-a13e-180377240586} (C:\Program Files\Elf_1.13\prxtbElf_.dll)
HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)
HKCU_ElevationPolicy\{358C680F-F55D-43CB-8FE3-958BA437E0B5} - C:\Program Files\Foxit Software\Foxit Reader\Foxit Reader.exe (Foxit Software)
HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\System32\wpcer.exe (x)
HKLM_ElevationPolicy\{0A1D29C4-C7F2-4A65-8FBF-6CFA1681B64F} - C:\Users\marone\AppData\Local\Conduit\CT2857573\Elf_1.13AutoUpdateHelper.exe (x)
HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\System32\winfxdocobj.exe (x)
HKLM_ElevationPolicy\{437BCFE3-EFA7-4236-BA91-818D0085652B} - C:\Program Files\Elf_1.13\Elf_1.13ToolbarHelper.exe (?)
HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x)
HKLM_ElevationPolicy\{803E07A7-F4C1-4b55-81C0-21D9F6D75F49} - C:\Program Files\Common Files\Oberon Media\Parts\1.0.0.16\OberonParts.exe (?)
HKLM_ElevationPolicy\{A6E2003F-95C5-4591-BA9A-0093080FDB5C} - C:\Program Files\Common Files\Oberon Media\OberonBroker\1.0.0.78\OberonBroker.exe (?)
HKLM_ElevationPolicy\{E0A900DF-9611-4446-86BD-4B1D47E7DB2A} - C:\Program Files\Google\Chrome\Application\14.0.835.202\chrome_launcher.exe (x)
BHO\{72853161-30C5-4D22-B7F9-0BBC1D38A37E} (?)
BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)
BHO\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - "Skype Browser Helper" (C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll)
BHO\{b80f591e-fe9a-46cf-a13e-180377240586} - "Elf 1.13 Toolbar" (C:\Program Files\Elf_1.13\prxtbElf_.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 91 File(s)
C:\Program Files\Ad-Remover\Backup: 15 File(s)

C:\Ad-Report-CLEAN[1].txt - 06/07/2012 15:20:11 (6349 Byte(s)) 
C:\Ad-Report-SCAN[1].txt - 06/07/2012 15:15:25 (6792 Byte(s)) 

End at: 15:22:00, 06/07/2012 
 
============== E.O.F ==============

papis70 · Answer

======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 =======

Updated by TeamXscript on 12/04/11
Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
website: http://www.teamxscript.org

C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Launched at 15:11:03 on 06/07/2012, Normal boot

Microsoft Windows 7 Home Premium  Service Pack 1 (X86) 
marone@MARONE-PC (Hewlett-Packard Compaq 615) 
 
============== SEARCH ==============


File found: C:\Windows\system32\Tasks\Scheduled Update for Ask Toolbar
Folder found: C:\ProgramData\GamesBar
Folder found: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GamesBar
Folder found: C:\Program Files\GamesBar

Key found: HKLM\Software\Classes\CLSID\{0020F9D9-007D-4F4B-9B38-77E3B7C937CF}
Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0020F9D9-007D-4F4B-9B38-77E3B7C937CF}
Key found: HKLM\Software\Classes\CLSID\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
Key found: HKLM\Software\Classes\CLSID\{85790A84-D74D-49B3-B3F5-0B1FF7B11F9C}
Key found: HKLM\Software\Classes\CLSID\{CB0D163C-E9F4-4236-9496-0597E24B23A5}
Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CB0D163C-E9F4-4236-9496-0597E24B23A5}
Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CB0D163C-E9F4-4236-9496-0597E24B23A5}
Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CB0D163C-E9F4-4236-9496-0597E24B23A5}
Key found: HKLM\Software\Classes\TypeLib\{AD76633E-E50D-4844-9E7F-4DFBC7C18467}
Key found: HKLM\Software\Classes\Oberontb.Band
Key found: HKLM\Software\Classes\Oberontb.Band.1
Key found: HKLM\Software\Classes\oberontb.BrowserApi
Key found: HKLM\Software\Classes\oberontb.BrowserApi.1
Key found: HKLM\Software\Classes\oberontb.GamesBarBHO
Key found: HKLM\Software\Classes\oberontb.GamesBarBHO.1
Key found: HKLM\Software\GamesBar
Key found: HKLM\Software\ResultBar
Key found: HKCU\Software\GamesBar
Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}
Key found: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A6CCCEBD-D148-44E4-9196-9C479F95CCE7}
Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Gamesbar
Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A93C934-025B-4C3A-B38E-9654A7003239}
Key found: HKLM\Software\Microsoft\Internet Explorer\Extensions\{1a93c934-025b-4c3a-b38e-9654a7003239}
Key found: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar

Value found: HKCU\Software\Microsoft\Windows\CurrentVersion\Run|OfferBox
Value found: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{6F282B65-56BF-4BD1-A8B2-A4449A05863D}


============== ADDITIONNAL SCAN ==============

**** Internet Explorer Version [8.0.7601.17514] ****

HKCU_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKCU_Main|Start Page - hxxp://fr.mg40.mail.yahoo.com/neo/launch?.rand=8om2ahrlmish6
HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157
HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://go.microsoft.com/fwlink/?LinkId=69157
HKCU_URLSearchHooks|{b80f591e-fe9a-46cf-a13e-180377240586} - "Elf 1.13 Toolbar" (C:\Program Files\Elf_1.13\prxtbElf_.dll)
HKCU_URLSearchHooks|{81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - "YTNavAssistPlugin Class" (C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll)
HKLM_URLSearchHooks|{b80f591e-fe9a-46cf-a13e-180377240586} - "Elf 1.13 Toolbar" (C:\Program Files\Elf_1.13\prxtbElf_.dll)
HKCU_SearchScopes\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7} - "ALOT Recherche" (hxxp://search.alot.com/web?q={searchTerms}&pr=prov&client_id=A92FD5F001CC15FF002...)
HKCU_Toolbar\WebBrowser|{B80F591E-FE9A-46CF-A13E-180377240586} (C:\Program Files\Elf_1.13\prxtbElf_.dll)
HKCU_Toolbar\WebBrowser|{7FCC73D8-0CD9-4553-81F6-E827F6AE4432} (x)
HKLM_Toolbar|{b80f591e-fe9a-46cf-a13e-180377240586} (C:\Program Files\Elf_1.13\prxtbElf_.dll)
HKLM_Toolbar|{6F282B65-56BF-4BD1-A8B2-A4449A05863D} (C:\Program Files\GamesBar\2.0.1.109\oberontb.dll)
HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)
HKCU_ElevationPolicy\{358C680F-F55D-43CB-8FE3-958BA437E0B5} - C:\Program Files\Foxit Software\Foxit Reader\Foxit Reader.exe (Foxit Software)
HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\System32\wpcer.exe (x)
HKLM_ElevationPolicy\{0A1D29C4-C7F2-4A65-8FBF-6CFA1681B64F} - C:\Users\marone\AppData\Local\Conduit\CT2857573\Elf_1.13AutoUpdateHelper.exe (x)
HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\System32\winfxdocobj.exe (x)
HKLM_ElevationPolicy\{437BCFE3-EFA7-4236-BA91-818D0085652B} - C:\Program Files\Elf_1.13\Elf_1.13ToolbarHelper.exe (?)
HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x)
HKLM_ElevationPolicy\{803E07A7-F4C1-4b55-81C0-21D9F6D75F49} - C:\Program Files\Common Files\Oberon Media\Parts\1.0.0.16\OberonParts.exe (?)
HKLM_ElevationPolicy\{A6CCCEBD-D148-44E4-9196-9C479F95CCE7} - C:\Program Files\ConduitEngine\ConduitEngineHelper.exe (x)
HKLM_ElevationPolicy\{A6E2003F-95C5-4591-BA9A-0093080FDB5C} - C:\Program Files\Common Files\Oberon Media\OberonBroker\1.0.0.78\OberonBroker.exe (?)
HKLM_ElevationPolicy\{E0A900DF-9611-4446-86BD-4B1D47E7DB2A} - C:\Program Files\Google\Chrome\Application\14.0.835.202\chrome_launcher.exe (x)
HKLM_Extensions\{1A93C934-025B-4c3a-B38E-9654A7003239} - "?" (?)
BHO\{72853161-30C5-4D22-B7F9-0BBC1D38A37E} (?)
BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)
BHO\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - "Skype Browser Helper" (C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll)
BHO\{b80f591e-fe9a-46cf-a13e-180377240586} - "Elf 1.13 Toolbar" (C:\Program Files\Elf_1.13\prxtbElf_.dll)
BHO\{CB0D163C-E9F4-4236-9496-0597E24B23A5} - "GamesBarBHO Class" (C:\Program Files\GamesBar\2.0.1.109\oberontb.dll)

========================================

C:\Program Files\Ad-Remover\Quarantine: 0 File(s)
C:\Program Files\Ad-Remover\Backup: 1 File(s)

C:\Ad-Report-SCAN[1].txt - 06/07/2012 15:15:25 (6654 Byte(s)) 

End at: 15:17:01, 06/07/2012 
 
============== E.O.F ==============

papis70 · Answer

# AdwCleaner v1.701 - Logfile created 07/06/2012 at 14:46:46
# Updated 02/07/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (32 bits)
# User : marone - MARONE-PC
# Running from : C:\Users\marone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XPZK39TH\2-adwcleaner[1].exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Folder Deleted : C:\Users\marone\AppData\Local\Babylon
Folder Deleted : C:\Users\marone\AppData\Local\Conduit
Folder Deleted : C:\Users\marone\AppData\Local\freetvradio Air
Folder Deleted : C:\Users\marone\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda
Folder Deleted : C:\Users\marone\AppData\LocalLow\AskToolbar
Folder Deleted : C:\Users\marone\AppData\LocalLow\BabylonToolbar
Folder Deleted : C:\Users\marone\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\marone\AppData\LocalLow\ConduitEngine
Folder Deleted : C:\Users\marone\AppData\LocalLow\facemoods.com
Folder Deleted : C:\Users\marone\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\marone\AppData\LocalLow\ShoppingReport2
Folder Deleted : C:\Users\marone\AppData\LocalLow\Toolbar4
Folder Deleted : C:\Users\marone\AppData\Roaming\Babylon
Folder Deleted : C:\Users\marone\AppData\Roaming\Complitly
Folder Deleted : C:\Users\marone\AppData\Roaming\freeTVRadio
Folder Deleted : C:\Users\marone\AppData\Roaming\OfferBox
Folder Deleted : C:\Users\marone\Documents\widestream
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\ResultBar
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\Program Files\Ask.com
Folder Deleted : C:\Program Files\Complitly
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Program Files\ConduitEngine
Folder Deleted : C:\Program Files\freeTVRadio
Folder Deleted : C:\Program Files\OfferBox
Folder Deleted : C:\Program Files\ResultBar
Folder Deleted : C:\Program Files\ShoppingReport2
Folder Deleted : C:\Program Files\Yontoo Layers Runtime
Folder Deleted : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\fcmdSrch.xml
File Deleted : C:\Windows\Tasks\OfferBoxUpdate.job

***** [Registry] *****

[*] Key Deleted : HKLM\SOFTWARE\Classes\TBSB02609.IEToolbar
[*] Key Deleted : HKLM\SOFTWARE\Classes\TBSB02609.IEToolbar.1
[*] Key Deleted : HKLM\SOFTWARE\Classes\TBSB02609.TBSB02609
[*] Key Deleted : HKLM\SOFTWARE\Classes\TBSB02609.TBSB02609.3
[*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2633954
[*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2857573
[*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.TBSB02609
[*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.TBSB02609.1
Key Deleted : HKCU\Software\AppDataLow\AskToolbarInfo
Key Deleted : HKCU\Software\AppDataLow\Software\AskToolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\conduitEngine
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\ShoppingReport2
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\Ask.com
Key Deleted : HKCU\Software\Complitly
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\freeTVRadio
Key Deleted : HKCU\Software\Offerbox
Key Deleted : HKCU\Software\ShoppingReport2
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\Spointer
Key Deleted : HKLM\SOFTWARE\Babylon
Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
Key Deleted : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler
Key Deleted : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1
Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
Key Deleted : HKLM\SOFTWARE\Classes\Installer\Features\5B4758C25396ECF468E04F8E063287FF
Key Deleted : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\SOFTWARE\Classes\Installer\Products\5B4758C25396ECF468E04F8E063287FF
Key Deleted : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbAx
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbAx.1
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbInfoBand
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbInfoBand.1
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButton
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButton.1
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButtonA
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButtonA.1
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.RprtCtrl
Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.RprtCtrl.1
Key Deleted : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO
Key Deleted : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO.1
Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils
Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbRequest
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbTask
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper
Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager.1
Key Deleted : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook
Key Deleted : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1
Key Deleted : HKLM\SOFTWARE\Conduit
Key Deleted : HKLM\SOFTWARE\conduitEngine
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dlfienamagdnkekbbbocojppncdambda
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions
iapdbllcanepiiimjjndipklodoedlc
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\5B4758C25396ECF468E04F8E063287FF
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2C8574B5-6935-4FCE-860E-F4E8602378FF}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShoppingReport2
Key Deleted : HKLM\SOFTWARE\Offerbox
Key Deleted : HKLM\SOFTWARE\ShoppingReport2
Key Deleted : HKLM\SOFTWARE\Tarma Installer

***** [Registre - GUID] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C0924543-15FD-4F3D-889C-0B4562A9CB45}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D433A9D0-8267-40CB-8AD5-24F22FA5373F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0EB3F101-224A-4B2B-9E5B-DF720857529C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A1F1ECD3-4806-44C6-A869-F0DADF11C57C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D44FD6F0-9746-484E-B5C4-C66688393872}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EC4085F2-8DB3-45A6-AD0B-CA289F3C5D7E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416D-A838-AB665251703A}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C0924543-15FD-4F3D-889C-0B4562A9CB45}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2BEFBCCE-46A6-4950-BCB5-7062EAC6C9C9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{416AE1CB-7257-484A-B912-AEBC7FDAD4CE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C0924543-15FD-4F3D-889C-0B4562A9CB45}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{416AE1CB-7257-484A-B912-AEBC7FDAD4CE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4AF195E5-1978-4F8D-A316-5BCCE06D7F89}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{57BCA5FA-5DBB-45A2-B558-1755C3F6253B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64182481-4F71-486B-A045-B233BD0DA8FC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C0924543-15FD-4F3D-889C-0B4562A9CB45}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB38E21A-0133-419D-92AD-ECDFD5244D6D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EB620C54-E229-4942-87CE-E717109FC8C6}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{30F9B915-B755-4826-820B-08FBA6BD249D}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}]

***** [Internet Browsers] *****

-\ Internet Explorer v8.0.7601.17514

Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://start.facemoods.com/?a=grupo&s={searchTerms}&f=4 --> hxxp://www.google.com

-\ Google Chrome v20.0.1132.47

File : C:\Users\marone\AppData\Local\Google\Chrome\User Data\Default\Preferences

Deleted :       "homepage": "hxxp://start.facemoods.com/?a=grupo",
Deleted :          "urls_to_restore_on_startup": [ "hxxp://start.facemoods.com/?a=grupo" ]
Deleted :       "icon_url": "hxxp://facemoods.com/favicon.ico",
Deleted :       "keyword": "facemoods.com",
Deleted :       "name": "facemoods",
Deleted :       "search_url": "hxxp://start.facemoods.com/?a=grupo&s={searchTerms}&f=4",
Deleted :    "homepage": "hxxp://start.facemoods.com/?a=grupo",
Deleted :       "urls_to_restore_on_startup": [ "hxxp://start.facemoods.com/?a=grupo" ]

*************************

AdwCleaner[S1].txt - [20679 octets] - [06/07/2012 14:46:46]

########## EOF - C:\AdwCleaner[S1].txt - [20808 octets] ##########

papis70 · Answer

Bonjour,
Je te remercie beaucoup Yoann090, grace à tes instructions que j'ai suivi à la lettre, j'ai pu regler le probleme. Je te remercie encore une fois de plus pour ta disponibilité.

Bye
Pape

yoann090 · Answer

Content que ça ait pu résoudre le problème, tu as fait le scan avec MBAM ?

papis70 · Answer

Malwarebytes Anti-Malware (Essai) 1.61.0.1400
www.malwarebytes.org

Version de la base de données: v2012.07.06.14

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 8.0.7601.17514
marone :: MARONE-PC [administrateur]

Protection: Activé

07/07/2012 03:21:07
mbam-log-2012-07-07 (03-21-07).txt

Type d'examen: Examen complet
Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
Options d'examen désactivées: P2P
Elément(s) analysé(s): 285727
Temps écoulé: 58 minute(s), 5 seconde(s)

Processus mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Module(s) mémoire détecté(s): 0
(Aucun élément nuisible détecté)

Clé(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Valeur(s) du Registre détectée(s): 0
(Aucun élément nuisible détecté)

Elément(s) de données du Registre détecté(s): 0
(Aucun élément nuisible détecté)

Dossier(s) détecté(s): 0
(Aucun élément nuisible détecté)

Fichier(s) détecté(s): 0
(Aucun élément nuisible détecté)

(fin)

yoann090 · Answer

Okok, vous pouvez relancer AdwCleaner et cliquer sur desinstaller. Maintenant, sauf si vous voulez qu'on fasse un diagnostique plus complet, le sujet est clos :)

s16guigui · Answer

bonjour j ai aussi ce soucis j ai télécharger les 2 logiciels, effacer les soucis et impossible de sans débarrasser....

s16guigui · Answer

re, 

j ai téléchargé malwarebytes

mais la j ai lu sur un forum que souvent ce sont les barres d outils et du coup j ai réinitialiser firefox en démarrage sans barre d outils et apparemment plus de soucis...

papis70 · Answer

Ne compliquer pas le probleme. Moi j'ai pu regler mon probleme grace aux instruction de yoann090. Je t'envoie ci-joint le caneva qu'il m'a donné pour regler mon probleme.


1) Télécharge AdwCleaner ( d'Xplode ) sur ton bureau : 

Lance le, clique sur [Suppression] puis patiente le temps du scan. 
Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse. 

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt 

Les toolbars, c'est pas obligatoire ( par Malekal ) :https://forum.malekal.com/viewtopic.php?t=6173&start= 
https://forum.malekal.com/viewtopic.php?t=33776&start= 


---------------------------------------------------------------------- 
2)? En cas de problème, n'hésite pas à consulter le tutoriel Malwarebytes Anti-Malware. 

Il se peut que le scan soit long, mais il faut le laisser se terminer. 

? Télécharge Malwarebytes' Anti-Malware sur ton bureau. 

? Lance l'installation, (Clic droit "exécuter en tant qu'administrateur" si tu es sous Windows Vista ou 7). 

? Une fois l'installation terminée, le programme se lance et se met à jour. Dans l'onglet Mise à jour, clique sur le bouton "Recherche de mise à jour" au cas où cela n'aurait pas été le cas. 

? Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche. 
? Sélectionne Exécuter un examen complet. 
? Sélectionne Tous les disques. 
? Clique sur Rechercher. 

? Si des menaces ont été détectées, clique sur Afficher les résultats. 
? Sélectionne toutes les menaces et clique sur Supprimer la sélection, l'ordinateur peut demander le redémarrage, si tel est le cas accepte. 

? Une fois redémarré, ouvre Malwarebytes et rends-toi dans l'onglet Rapport. 
? Ouvre le dernier en date, et copie-colle le sur le forum.

filiwi · Answer

Bonjour,

Je rencontre aujourd'hui le même problème que Papis70. Avast ouvre une pop-up, dès lors que j'ouvre mon navigateur Chrome qui m'indique que 

"l'Agent web a bloqué une page Web ou une fichier malveillant.
Objet: http://downloadnicesuperguru.in/
Infection: URL:Mal
Processus: C:\Program Files (x86)\..."

J'ai essayé de suivre à la lettre le process indiqué par yoann090 en téléchargeant adwcleaner et Malwarebytes anti-malwares et en réalisant les scans nécessaires.

En vain... Pourriez-vous m'aider à résoudre ce problème?
Merci d'avance.

Voici le rapport de Adwcleaner:
# AdwCleaner v3.310 - Rapport créé le 21/09/2014 à 12:22:33
# Mis à jour le 12/09/2014 par Xplode
# Système d'exploitation : Windows 8  (64 bits)
# Nom d'utilisateur : Sabine - PCMAISON
# Exécuté depuis : C:\Users\Sabine\Downloads\adwcleaner_3.310.exe
# Option : Nettoyer

***** [ Services ] *****


***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\Program Files (x86)\Adblocker
Dossier Supprimé : C:\Users\Administrateur\AppData\Local\Chromatic Browser
Dossier Supprimé : C:\Users\Administrateur\AppData\Local	orch
Dossier Supprimé : C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser
Dossier Supprimé : C:\Users\HomeGroupUser$\AppData\Local	orch
Dossier Supprimé : C:\Users\Invité\AppData\Local\Chromatic Browser
Dossier Supprimé : C:\Users\Invité\AppData\Local	orch
Dossier Supprimé : C:\Users\Sabine\AppData\Local\Chromatic Browser
Dossier Supprimé : C:\Users\Sabine\AppData\Local	orch
Dossier Supprimé : C:\Users\Administrateur\AppData\Local\Google\Chrome\User Data\Default\Extensions
pinfkdpalnkhphpkcgadlpbogaeedpe
Dossier Supprimé : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions
pinfkdpalnkhphpkcgadlpbogaeedpe
Dossier Supprimé : C:\Users\Invité\AppData\Local\Google\Chrome\User Data\Default\Extensions
pinfkdpalnkhphpkcgadlpbogaeedpe
Dossier Supprimé : C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions
pinfkdpalnkhphpkcgadlpbogaeedpe
[!] Dossier Supprimé : C:\Users\Administrateur\AppData\Local\Google\Chrome\User Data\Default\Extensions
pinfkdpalnkhphpkcgadlpbogaeedpe
[!] Dossier Supprimé : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions
pinfkdpalnkhphpkcgadlpbogaeedpe
[!] Dossier Supprimé : C:\Users\Invité\AppData\Local\Google\Chrome\User Data\Default\Extensions
pinfkdpalnkhphpkcgadlpbogaeedpe
[!] Dossier Supprimé : C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions
pinfkdpalnkhphpkcgadlpbogaeedpe
[!] Dossier Supprimé : C:\Users\Administrateur\AppData\Local\Google\Chrome\User Data\Default\Extensions
pinfkdpalnkhphpkcgadlpbogaeedpe
[!] Dossier Supprimé : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions
pinfkdpalnkhphpkcgadlpbogaeedpe
[!] Dossier Supprimé : C:\Users\Invité\AppData\Local\Google\Chrome\User Data\Default\Extensions
pinfkdpalnkhphpkcgadlpbogaeedpe
[!] Dossier Supprimé : C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions
pinfkdpalnkhphpkcgadlpbogaeedpe
[!] Dossier Supprimé : C:\Users\Administrateur\AppData\Local\Google\Chrome\User Data\Default\Extensions
pinfkdpalnkhphpkcgadlpbogaeedpe
[!] Dossier Supprimé : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions
pinfkdpalnkhphpkcgadlpbogaeedpe
[!] Dossier Supprimé : C:\Users\Invité\AppData\Local\Google\Chrome\User Data\Default\Extensions
pinfkdpalnkhphpkcgadlpbogaeedpe
[!] Dossier Supprimé : C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions
pinfkdpalnkhphpkcgadlpbogaeedpe

***** [ Tâches planifiées ] *****


***** [ Raccourcis ] *****


***** [ Registre ] *****

Clé Supprimée : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
Clé Supprimée : HKCU\Software\RegisteredApplicationsEx
Clé Supprimée : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Clé Supprimée : HKLM\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Clé Supprimée : HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{993EA8F6-6E55-7E4E-39DE-5796E3226DB9}
Donnée Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - (x86)\SO_Booster\Assistant_x64.dll

***** [ Navigateurs ] *****

-\ Internet Explorer v10.0.9200.17054


-\ Google Chrome v35.0.1916.153

[ Fichier : C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Supprimée [Extension] : npinfkdpalnkhphpkcgadlpbogaeedpe

*************************

AdwCleaner[R0].txt - [4698 octets] - [21/09/2014 12:18:37]
AdwCleaner[S0].txt - [4439 octets] - [21/09/2014 12:22:33]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4499 octets] ##########

Site malveillant bloqué

14 réponses

Discussions similaires

Newsletters