Site malveillant bloqué

Résolu
papis70 -  
yoann090 Messages postés 10597 Statut Contributeur sécurité -
Bonjour,

Je m'excuse mais à chaque fois l'agent avast m'informe qu'un site internet malveillant a été bloqué. J'ai tout fait mais sans succés et cela dure. Votre si vraiment quelqu'un pourrai m'aider je lui en serai très reconnaissant.

Je vous remercie

Pape

14 réponses

  1. karabatich Messages postés 16 Statut Membre 1
     
    Si il te dérange en affichant les alertes de blocage tu peux aller dans les Paramètres d'AVAST et puis dans la rubrique "MODE SILENCIEUX" tu coche le chois mode silencieux pour Avast et le problème et réglé
    0
  2. yoann090 Messages postés 10597 Statut Contributeur sécurité 1 697
     
    Bonjour, est ce que vous savez ce qu'avast a indiqué bloquer ?
    0
    1. papis70
       
      Bonjour,
      Oui avast a indiqué :
      objet :http://includeit.info/include.js?id=js25
      Infection : URL MAL
      processus : c:\program files\internet explorer\iexplorer.exe
      Merci
      Pape
      0
  3. yoann090 Messages postés 10597 Statut Contributeur sécurité 1 697
     
    Okok alors,

    1) Télécharge AdwCleaner ( d'Xplode ) sur ton bureau :

    Lance le, clique sur [Suppression] puis patiente le temps du scan.
    Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.

    Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

    Les toolbars, c'est pas obligatoire ( par Malekal ) :https://forum.malekal.com/viewtopic.php?t=6173&start=
    https://forum.malekal.com/viewtopic.php?t=33776&start=

    ----------------------------------------------------------------------
    2)▶ En cas de problème, n'hésite pas à consulter le tutoriel Malwarebytes Anti-Malware.

    Il se peut que le scan soit long, mais il faut le laisser se terminer.

    ▶ Télécharge Malwarebytes' Anti-Malware sur ton bureau.

    ▶ Lance l'installation, (Clic droit "exécuter en tant qu'administrateur" si tu es sous Windows Vista ou 7).

    ▶ Une fois l'installation terminée, le programme se lance et se met à jour. Dans l'onglet Mise à jour, clique sur le bouton "Recherche de mise à jour" au cas où cela n'aurait pas été le cas.

    ▶ Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
    ▶ Sélectionne Exécuter un examen complet.
    ▶ Sélectionne Tous les disques.
    ▶ Clique sur Rechercher.

    ▶ Si des menaces ont été détectées, clique sur Afficher les résultats.
    ▶ Sélectionne toutes les menaces et clique sur Supprimer la sélection, l'ordinateur peut demander le redémarrage, si tel est le cas accepte.

    ▶ Une fois redémarré, ouvre Malwarebytes et rends-toi dans l'onglet Rapport.
    ▶ Ouvre le dernier en date, et copie-colle le sur le forum.
    0
  4. papis70
     
    ======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 =======

    Updated by TeamXscript on 12/04/11
    Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
    website: http://www.teamxscript.org

    C:\Program Files\Ad-Remover\main.exe (CLEAN [1]) -> Launched at 15:19:47 on 06/07/2012, Normal boot

    Microsoft Windows 7 Home Premium Service Pack 1 (X86)
    marone@MARONE-PC (Hewlett-Packard Compaq 615)

    ============== ACTION(S) ==============

    File deleted: C:\Windows\system32\Tasks\Scheduled Update for Ask Toolbar
    Folder deleted: C:\ProgramData\GamesBar
    Folder deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GamesBar
    Folder deleted: C:\Program Files\GamesBar

    (!) -- Temporary files deleted.

    Key deleted: HKLM\Software\Classes\CLSID\{0020F9D9-007D-4F4B-9B38-77E3B7C937CF}
    Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0020F9D9-007D-4F4B-9B38-77E3B7C937CF}
    Key deleted: HKLM\Software\Classes\CLSID\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
    Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
    Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
    Key deleted: HKLM\Software\Classes\CLSID\{85790A84-D74D-49B3-B3F5-0B1FF7B11F9C}
    Key deleted: HKLM\Software\Classes\CLSID\{CB0D163C-E9F4-4236-9496-0597E24B23A5}
    Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CB0D163C-E9F4-4236-9496-0597E24B23A5}
    Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CB0D163C-E9F4-4236-9496-0597E24B23A5}
    Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CB0D163C-E9F4-4236-9496-0597E24B23A5}
    Key deleted: HKLM\Software\Classes\TypeLib\{AD76633E-E50D-4844-9E7F-4DFBC7C18467}
    Key deleted: HKLM\Software\Classes\Oberontb.Band
    Key deleted: HKLM\Software\Classes\Oberontb.Band.1
    Key deleted: HKLM\Software\Classes\oberontb.BrowserApi
    Key deleted: HKLM\Software\Classes\oberontb.BrowserApi.1
    Key deleted: HKLM\Software\Classes\oberontb.GamesBarBHO
    Key deleted: HKLM\Software\Classes\oberontb.GamesBarBHO.1
    Key deleted: HKLM\Software\GamesBar
    Key deleted: HKLM\Software\ResultBar
    Key deleted: HKCU\Software\GamesBar
    Key deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}
    Key deleted: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A6CCCEBD-D148-44E4-9196-9C479F95CCE7}
    Key deleted: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Gamesbar
    Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A93C934-025B-4C3A-B38E-9654A7003239}
    Key deleted: HKLM\Software\Microsoft\Internet Explorer\Extensions\{1a93c934-025b-4c3a-b38e-9654a7003239}
    Key deleting error: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar

    Value deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Run|OfferBox
    Value deleted: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{6F282B65-56BF-4BD1-A8B2-A4449A05863D}

    ============== ADDITIONNAL SCAN ==============

    **** Internet Explorer Version [8.0.7601.17514] ****

    HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
    HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896
    HKCU_Main|Start Page - hxxp://fr.msn.com/
    HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
    HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm
    HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKLM_Main|Start Page - hxxp://fr.msn.com/
    HKCU_URLSearchHooks|{b80f591e-fe9a-46cf-a13e-180377240586} - "Elf 1.13 Toolbar" (C:\Program Files\Elf_1.13\prxtbElf_.dll)
    HKCU_URLSearchHooks|{81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - "YTNavAssistPlugin Class" (C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll)
    HKLM_URLSearchHooks|{b80f591e-fe9a-46cf-a13e-180377240586} - "Elf 1.13 Toolbar" (C:\Program Files\Elf_1.13\prxtbElf_.dll)
    HKCU_Toolbar\WebBrowser|{B80F591E-FE9A-46CF-A13E-180377240586} (C:\Program Files\Elf_1.13\prxtbElf_.dll)
    HKCU_Toolbar\WebBrowser|{7FCC73D8-0CD9-4553-81F6-E827F6AE4432} (x)
    HKLM_Toolbar|{b80f591e-fe9a-46cf-a13e-180377240586} (C:\Program Files\Elf_1.13\prxtbElf_.dll)
    HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)
    HKCU_ElevationPolicy\{358C680F-F55D-43CB-8FE3-958BA437E0B5} - C:\Program Files\Foxit Software\Foxit Reader\Foxit Reader.exe (Foxit Software)
    HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\System32\wpcer.exe (x)
    HKLM_ElevationPolicy\{0A1D29C4-C7F2-4A65-8FBF-6CFA1681B64F} - C:\Users\marone\AppData\Local\Conduit\CT2857573\Elf_1.13AutoUpdateHelper.exe (x)
    HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\System32\winfxdocobj.exe (x)
    HKLM_ElevationPolicy\{437BCFE3-EFA7-4236-BA91-818D0085652B} - C:\Program Files\Elf_1.13\Elf_1.13ToolbarHelper.exe (?)
    HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x)
    HKLM_ElevationPolicy\{803E07A7-F4C1-4b55-81C0-21D9F6D75F49} - C:\Program Files\Common Files\Oberon Media\Parts\1.0.0.16\OberonParts.exe (?)
    HKLM_ElevationPolicy\{A6E2003F-95C5-4591-BA9A-0093080FDB5C} - C:\Program Files\Common Files\Oberon Media\OberonBroker\1.0.0.78\OberonBroker.exe (?)
    HKLM_ElevationPolicy\{E0A900DF-9611-4446-86BD-4B1D47E7DB2A} - C:\Program Files\Google\Chrome\Application\14.0.835.202\chrome_launcher.exe (x)
    BHO\{72853161-30C5-4D22-B7F9-0BBC1D38A37E} (?)
    BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)
    BHO\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - "Skype Browser Helper" (C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll)
    BHO\{b80f591e-fe9a-46cf-a13e-180377240586} - "Elf 1.13 Toolbar" (C:\Program Files\Elf_1.13\prxtbElf_.dll)

    ========================================

    C:\Program Files\Ad-Remover\Quarantine: 91 File(s)
    C:\Program Files\Ad-Remover\Backup: 15 File(s)

    C:\Ad-Report-CLEAN[1].txt - 06/07/2012 15:20:11 (6349 Byte(s))
    C:\Ad-Report-SCAN[1].txt - 06/07/2012 15:15:25 (6792 Byte(s))

    End at: 15:22:00, 06/07/2012

    ============== E.O.F ==============
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. papis70
     
    ======= REPORT FROM AD-REMOVER 2.0.0.2,G | ONLY XP/VISTA/7 =======

    Updated by TeamXscript on 12/04/11
    Contact: AdRemover[DOT]contact[AT]gmail[DOT]com
    website: http://www.teamxscript.org

    C:\Program Files\Ad-Remover\main.exe (SCAN [1]) -> Launched at 15:11:03 on 06/07/2012, Normal boot

    Microsoft Windows 7 Home Premium Service Pack 1 (X86)
    marone@MARONE-PC (Hewlett-Packard Compaq 615)

    ============== SEARCH ==============

    File found: C:\Windows\system32\Tasks\Scheduled Update for Ask Toolbar
    Folder found: C:\ProgramData\GamesBar
    Folder found: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GamesBar
    Folder found: C:\Program Files\GamesBar

    Key found: HKLM\Software\Classes\CLSID\{0020F9D9-007D-4F4B-9B38-77E3B7C937CF}
    Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0020F9D9-007D-4F4B-9B38-77E3B7C937CF}
    Key found: HKLM\Software\Classes\CLSID\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
    Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
    Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6F282B65-56BF-4BD1-A8B2-A4449A05863D}
    Key found: HKLM\Software\Classes\CLSID\{85790A84-D74D-49B3-B3F5-0B1FF7B11F9C}
    Key found: HKLM\Software\Classes\CLSID\{CB0D163C-E9F4-4236-9496-0597E24B23A5}
    Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CB0D163C-E9F4-4236-9496-0597E24B23A5}
    Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CB0D163C-E9F4-4236-9496-0597E24B23A5}
    Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CB0D163C-E9F4-4236-9496-0597E24B23A5}
    Key found: HKLM\Software\Classes\TypeLib\{AD76633E-E50D-4844-9E7F-4DFBC7C18467}
    Key found: HKLM\Software\Classes\Oberontb.Band
    Key found: HKLM\Software\Classes\Oberontb.Band.1
    Key found: HKLM\Software\Classes\oberontb.BrowserApi
    Key found: HKLM\Software\Classes\oberontb.BrowserApi.1
    Key found: HKLM\Software\Classes\oberontb.GamesBarBHO
    Key found: HKLM\Software\Classes\oberontb.GamesBarBHO.1
    Key found: HKLM\Software\GamesBar
    Key found: HKLM\Software\ResultBar
    Key found: HKCU\Software\GamesBar
    Key found: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}
    Key found: HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A6CCCEBD-D148-44E4-9196-9C479F95CCE7}
    Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Gamesbar
    Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1A93C934-025B-4C3A-B38E-9654A7003239}
    Key found: HKLM\Software\Microsoft\Internet Explorer\Extensions\{1a93c934-025b-4c3a-b38e-9654a7003239}
    Key found: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar

    Value found: HKCU\Software\Microsoft\Windows\CurrentVersion\Run|OfferBox
    Value found: HKLM\Software\Microsoft\Internet Explorer\Toolbar|{6F282B65-56BF-4BD1-A8B2-A4449A05863D}

    ============== ADDITIONNAL SCAN ==============

    **** Internet Explorer Version [8.0.7601.17514] ****

    HKCU_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
    HKCU_Main|Start Page - hxxp://fr.mg40.mail.yahoo.com/neo/launch?.rand=8om2ahrlmish6
    HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157
    HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896
    HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896
    HKLM_Main|Start Page - hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://go.microsoft.com/fwlink/?LinkId=69157
    HKCU_URLSearchHooks|{b80f591e-fe9a-46cf-a13e-180377240586} - "Elf 1.13 Toolbar" (C:\Program Files\Elf_1.13\prxtbElf_.dll)
    HKCU_URLSearchHooks|{81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - "YTNavAssistPlugin Class" (C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll)
    HKLM_URLSearchHooks|{b80f591e-fe9a-46cf-a13e-180377240586} - "Elf 1.13 Toolbar" (C:\Program Files\Elf_1.13\prxtbElf_.dll)
    HKCU_SearchScopes\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7} - "ALOT Recherche" (hxxp://search.alot.com/web?q={searchTerms}&pr=prov&client_id=A92FD5F001CC15FF002...)
    HKCU_Toolbar\WebBrowser|{B80F591E-FE9A-46CF-A13E-180377240586} (C:\Program Files\Elf_1.13\prxtbElf_.dll)
    HKCU_Toolbar\WebBrowser|{7FCC73D8-0CD9-4553-81F6-E827F6AE4432} (x)
    HKLM_Toolbar|{b80f591e-fe9a-46cf-a13e-180377240586} (C:\Program Files\Elf_1.13\prxtbElf_.dll)
    HKLM_Toolbar|{6F282B65-56BF-4BD1-A8B2-A4449A05863D} (C:\Program Files\GamesBar\2.0.1.109\oberontb.dll)
    HKLM_Toolbar|{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)
    HKCU_ElevationPolicy\{358C680F-F55D-43CB-8FE3-958BA437E0B5} - C:\Program Files\Foxit Software\Foxit Reader\Foxit Reader.exe (Foxit Software)
    HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\System32\wpcer.exe (x)
    HKLM_ElevationPolicy\{0A1D29C4-C7F2-4A65-8FBF-6CFA1681B64F} - C:\Users\marone\AppData\Local\Conduit\CT2857573\Elf_1.13AutoUpdateHelper.exe (x)
    HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\System32\winfxdocobj.exe (x)
    HKLM_ElevationPolicy\{437BCFE3-EFA7-4236-BA91-818D0085652B} - C:\Program Files\Elf_1.13\Elf_1.13ToolbarHelper.exe (?)
    HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files\Internet Explorer\iedw.exe (x)
    HKLM_ElevationPolicy\{803E07A7-F4C1-4b55-81C0-21D9F6D75F49} - C:\Program Files\Common Files\Oberon Media\Parts\1.0.0.16\OberonParts.exe (?)
    HKLM_ElevationPolicy\{A6CCCEBD-D148-44E4-9196-9C479F95CCE7} - C:\Program Files\ConduitEngine\ConduitEngineHelper.exe (x)
    HKLM_ElevationPolicy\{A6E2003F-95C5-4591-BA9A-0093080FDB5C} - C:\Program Files\Common Files\Oberon Media\OberonBroker\1.0.0.78\OberonBroker.exe (?)
    HKLM_ElevationPolicy\{E0A900DF-9611-4446-86BD-4B1D47E7DB2A} - C:\Program Files\Google\Chrome\Application\14.0.835.202\chrome_launcher.exe (x)
    HKLM_Extensions\{1A93C934-025B-4c3a-B38E-9654A7003239} - "?" (?)
    BHO\{72853161-30C5-4D22-B7F9-0BBC1D38A37E} (?)
    BHO\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - "avast! WebRep" (C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll)
    BHO\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - "Skype Browser Helper" (C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll)
    BHO\{b80f591e-fe9a-46cf-a13e-180377240586} - "Elf 1.13 Toolbar" (C:\Program Files\Elf_1.13\prxtbElf_.dll)
    BHO\{CB0D163C-E9F4-4236-9496-0597E24B23A5} - "GamesBarBHO Class" (C:\Program Files\GamesBar\2.0.1.109\oberontb.dll)

    ========================================

    C:\Program Files\Ad-Remover\Quarantine: 0 File(s)
    C:\Program Files\Ad-Remover\Backup: 1 File(s)

    C:\Ad-Report-SCAN[1].txt - 06/07/2012 15:15:25 (6654 Byte(s))

    End at: 15:17:01, 06/07/2012

    ============== E.O.F ==============
    0
  7. papis70
     
    # AdwCleaner v1.701 - Logfile created 07/06/2012 at 14:46:46
    # Updated 02/07/2012 by Xplode
    # Operating system : Windows 7 Home Premium Service Pack 1 (32 bits)
    # User : marone - MARONE-PC
    # Running from : C:\Users\marone\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XPZK39TH\2-adwcleaner[1].exe
    # Option [Delete]

    ***** [Services] *****

    ***** [Files / Folders] *****

    Folder Deleted : C:\Users\marone\AppData\Local\Babylon
    Folder Deleted : C:\Users\marone\AppData\Local\Conduit
    Folder Deleted : C:\Users\marone\AppData\Local\freetvradio Air
    Folder Deleted : C:\Users\marone\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda
    Folder Deleted : C:\Users\marone\AppData\LocalLow\AskToolbar
    Folder Deleted : C:\Users\marone\AppData\LocalLow\BabylonToolbar
    Folder Deleted : C:\Users\marone\AppData\LocalLow\Conduit
    Folder Deleted : C:\Users\marone\AppData\LocalLow\ConduitEngine
    Folder Deleted : C:\Users\marone\AppData\LocalLow\facemoods.com
    Folder Deleted : C:\Users\marone\AppData\LocalLow\PriceGong
    Folder Deleted : C:\Users\marone\AppData\LocalLow\ShoppingReport2
    Folder Deleted : C:\Users\marone\AppData\LocalLow\Toolbar4
    Folder Deleted : C:\Users\marone\AppData\Roaming\Babylon
    Folder Deleted : C:\Users\marone\AppData\Roaming\Complitly
    Folder Deleted : C:\Users\marone\AppData\Roaming\freeTVRadio
    Folder Deleted : C:\Users\marone\AppData\Roaming\OfferBox
    Folder Deleted : C:\Users\marone\Documents\widestream
    Folder Deleted : C:\ProgramData\Babylon
    Folder Deleted : C:\ProgramData\ResultBar
    Folder Deleted : C:\ProgramData\Tarma Installer
    Folder Deleted : C:\Program Files\Ask.com
    Folder Deleted : C:\Program Files\Complitly
    Folder Deleted : C:\Program Files\Conduit
    Folder Deleted : C:\Program Files\ConduitEngine
    Folder Deleted : C:\Program Files\freeTVRadio
    Folder Deleted : C:\Program Files\OfferBox
    Folder Deleted : C:\Program Files\ResultBar
    Folder Deleted : C:\Program Files\ShoppingReport2
    Folder Deleted : C:\Program Files\Yontoo Layers Runtime
    Folder Deleted : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
    File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\fcmdSrch.xml
    File Deleted : C:\Windows\Tasks\OfferBoxUpdate.job

    ***** [Registry] *****

    [*] Key Deleted : HKLM\SOFTWARE\Classes\TBSB02609.IEToolbar
    [*] Key Deleted : HKLM\SOFTWARE\Classes\TBSB02609.IEToolbar.1
    [*] Key Deleted : HKLM\SOFTWARE\Classes\TBSB02609.TBSB02609
    [*] Key Deleted : HKLM\SOFTWARE\Classes\TBSB02609.TBSB02609.3
    [*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2633954
    [*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2857573
    [*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.TBSB02609
    [*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.TBSB02609.1
    Key Deleted : HKCU\Software\AppDataLow\AskToolbarInfo
    Key Deleted : HKCU\Software\AppDataLow\Software\AskToolbar
    Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
    Key Deleted : HKCU\Software\AppDataLow\Software\conduitEngine
    Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
    Key Deleted : HKCU\Software\AppDataLow\Software\ShoppingReport2
    Key Deleted : HKCU\Software\AppDataLow\Toolbar
    Key Deleted : HKCU\Software\Ask.com
    Key Deleted : HKCU\Software\Complitly
    Key Deleted : HKCU\Software\Conduit
    Key Deleted : HKCU\Software\freeTVRadio
    Key Deleted : HKCU\Software\Offerbox
    Key Deleted : HKCU\Software\ShoppingReport2
    Key Deleted : HKCU\Software\Softonic
    Key Deleted : HKCU\Software\Spointer
    Key Deleted : HKLM\SOFTWARE\Babylon
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler
    Key Deleted : HKLM\SOFTWARE\Classes\ComObject.DeskbarEnabler.1
    Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
    Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
    Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
    Key Deleted : HKLM\SOFTWARE\Classes\Installer\Features\5B4758C25396ECF468E04F8E063287FF
    Key Deleted : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
    Key Deleted : HKLM\SOFTWARE\Classes\Installer\Products\5B4758C25396ECF468E04F8E063287FF
    Key Deleted : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
    Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbAx
    Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbAx.1
    Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbInfoBand
    Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.HbInfoBand.1
    Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButton
    Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButton.1
    Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButtonA
    Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.IEButtonA.1
    Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.RprtCtrl
    Key Deleted : HKLM\SOFTWARE\Classes\ShoppingReport2.RprtCtrl.1
    Key Deleted : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO
    Key Deleted : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO.1
    Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils
    Key Deleted : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1
    Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager
    Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1
    Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager
    Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1
    Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbRequest
    Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1
    Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbTask
    Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1
    Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper
    Key Deleted : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.SearchProviderManager.1
    Key Deleted : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook
    Key Deleted : HKLM\SOFTWARE\Classes\URLSearchHook.ToolbarURLSearchHook.1
    Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api
    Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
    Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers
    Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1
    Key Deleted : HKLM\SOFTWARE\Conduit
    Key Deleted : HKLM\SOFTWARE\conduitEngine
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dlfienamagdnkekbbbocojppncdambda
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Userdata\S-1-5-18\Products\5B4758C25396ECF468E04F8E063287FF
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
    Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2C8574B5-6935-4FCE-860E-F4E8602378FF}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShoppingReport2
    Key Deleted : HKLM\SOFTWARE\Offerbox
    Key Deleted : HKLM\SOFTWARE\ShoppingReport2
    Key Deleted : HKLM\SOFTWARE\Tarma Installer

    ***** [Registre - GUID] *****

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C0924543-15FD-4F3D-889C-0B4562A9CB45}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D433A9D0-8267-40CB-8AD5-24F22FA5373F}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0EB3F101-224A-4B2B-9E5B-DF720857529C}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0FA32667-9A8A-4E9C-902F-CA3323180003}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6B458F62-592F-4B25-8967-E6A350A59328}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A1F1ECD3-4806-44C6-A869-F0DADF11C57C}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FCC9CDD3-EFFF-11D1-A9F0-00A0244AC403}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D44FD6F0-9746-484E-B5C4-C66688393872}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EC4085F2-8DB3-45A6-AD0B-CA289F3C5D7E}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0D7562AE-8EF6-416D-A838-AB665251703A}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C0924543-15FD-4F3D-889C-0B4562A9CB45}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2BEFBCCE-46A6-4950-BCB5-7062EAC6C9C9}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{416AE1CB-7257-484A-B912-AEBC7FDAD4CE}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{64182481-4F71-486B-A045-B233BD0DA8FC}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C0924543-15FD-4F3D-889C-0B4562A9CB45}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{416AE1CB-7257-484A-B912-AEBC7FDAD4CE}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4AF195E5-1978-4F8D-A316-5BCCE06D7F89}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{57BCA5FA-5DBB-45A2-B558-1755C3F6253B}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64182481-4F71-486B-A045-B233BD0DA8FC}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C0924543-15FD-4F3D-889C-0B4562A9CB45}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CA3EB689-8F09-4026-AA10-B9534C691CE0}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB38E21A-0133-419D-92AD-ECDFD5244D6D}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EB620C54-E229-4942-87CE-E717109FC8C6}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FC0D62C2-9640-4AEB-A5D5-CF25DF11FA8C}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{30F9B915-B755-4826-820B-08FBA6BD249D}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1}]

    ***** [Internet Browsers] *****

    -\\ Internet Explorer v8.0.7601.17514

    Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://start.facemoods.com/?a=grupo&s={searchTerms}&f=4 --> hxxp://www.google.com

    -\\ Google Chrome v20.0.1132.47

    File : C:\Users\marone\AppData\Local\Google\Chrome\User Data\Default\Preferences

    Deleted : "homepage": "hxxp://start.facemoods.com/?a=grupo",
    Deleted : "urls_to_restore_on_startup": [ "hxxp://start.facemoods.com/?a=grupo" ]
    Deleted : "icon_url": "hxxp://facemoods.com/favicon.ico",
    Deleted : "keyword": "facemoods.com",
    Deleted : "name": "facemoods",
    Deleted : "search_url": "hxxp://start.facemoods.com/?a=grupo&s={searchTerms}&f=4",
    Deleted : "homepage": "hxxp://start.facemoods.com/?a=grupo",
    Deleted : "urls_to_restore_on_startup": [ "hxxp://start.facemoods.com/?a=grupo" ]

    *************************

    AdwCleaner[S1].txt - [20679 octets] - [06/07/2012 14:46:46]

    ########## EOF - C:\AdwCleaner[S1].txt - [20808 octets] ##########
    0
  8. papis70
     
    Bonjour,
    Je te remercie beaucoup Yoann090, grace à tes instructions que j'ai suivi à la lettre, j'ai pu regler le probleme. Je te remercie encore une fois de plus pour ta disponibilité.

    Bye
    Pape
    0
  9. yoann090 Messages postés 10597 Statut Contributeur sécurité 1 697
     
    Content que ça ait pu résoudre le problème, tu as fait le scan avec MBAM ?
    0
  10. papis70
     
    Malwarebytes Anti-Malware (Essai) 1.61.0.1400
    www.malwarebytes.org

    Version de la base de données: v2012.07.06.14

    Windows 7 Service Pack 1 x86 NTFS
    Internet Explorer 8.0.7601.17514
    marone :: MARONE-PC [administrateur]

    Protection: Activé

    07/07/2012 03:21:07
    mbam-log-2012-07-07 (03-21-07).txt

    Type d'examen: Examen complet
    Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM
    Options d'examen désactivées: P2P
    Elément(s) analysé(s): 285727
    Temps écoulé: 58 minute(s), 5 seconde(s)

    Processus mémoire détecté(s): 0
    (Aucun élément nuisible détecté)

    Module(s) mémoire détecté(s): 0
    (Aucun élément nuisible détecté)

    Clé(s) du Registre détectée(s): 0
    (Aucun élément nuisible détecté)

    Valeur(s) du Registre détectée(s): 0
    (Aucun élément nuisible détecté)

    Elément(s) de données du Registre détecté(s): 0
    (Aucun élément nuisible détecté)

    Dossier(s) détecté(s): 0
    (Aucun élément nuisible détecté)

    Fichier(s) détecté(s): 0
    (Aucun élément nuisible détecté)

    (fin)
    0
  11. yoann090 Messages postés 10597 Statut Contributeur sécurité 1 697
     
    Okok, vous pouvez relancer AdwCleaner et cliquer sur desinstaller. Maintenant, sauf si vous voulez qu'on fasse un diagnostique plus complet, le sujet est clos :)
    0
  12. s16guigui
     
    bonjour j ai aussi ce soucis j ai télécharger les 2 logiciels, effacer les soucis et impossible de sans débarrasser....
    0
    1. papis70 Messages postés 84 Date d'inscription   Statut Membre Dernière intervention   3
       
      Bonjour,

      quel soucis tu as et quels 2 logiciels tu as telecharger? explique moi.
      0
  13. s16guigui
     
    re,

    j ai téléchargé malwarebytes

    mais la j ai lu sur un forum que souvent ce sont les barres d outils et du coup j ai réinitialiser firefox en démarrage sans barre d outils et apparemment plus de soucis...
    0
    1. papis70 Messages postés 84 Date d'inscription   Statut Membre Dernière intervention   3
       
      Slt,

      Tu as pu régler le problème?
      0
    2. s16guigui
       
      oui je pense plus rien depuis ce matin
      0
  14. papis70 Messages postés 84 Date d'inscription   Statut Membre Dernière intervention   3
     
    Ne compliquer pas le probleme. Moi j'ai pu regler mon probleme grace aux instruction de yoann090. Je t'envoie ci-joint le caneva qu'il m'a donné pour regler mon probleme.

    1) Télécharge AdwCleaner ( d'Xplode ) sur ton bureau :

    Lance le, clique sur [Suppression] puis patiente le temps du scan.
    Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.

    Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

    Les toolbars, c'est pas obligatoire ( par Malekal ) :https://forum.malekal.com/viewtopic.php?t=6173&start=
    https://forum.malekal.com/viewtopic.php?t=33776&start=

    ----------------------------------------------------------------------
    2)? En cas de problème, n'hésite pas à consulter le tutoriel Malwarebytes Anti-Malware.

    Il se peut que le scan soit long, mais il faut le laisser se terminer.

    ? Télécharge Malwarebytes' Anti-Malware sur ton bureau.

    ? Lance l'installation, (Clic droit "exécuter en tant qu'administrateur" si tu es sous Windows Vista ou 7).

    ? Une fois l'installation terminée, le programme se lance et se met à jour. Dans l'onglet Mise à jour, clique sur le bouton "Recherche de mise à jour" au cas où cela n'aurait pas été le cas.

    ? Une fois la mise à jour terminée, rends-toi dans l'onglet Recherche.
    ? Sélectionne Exécuter un examen complet.
    ? Sélectionne Tous les disques.
    ? Clique sur Rechercher.

    ? Si des menaces ont été détectées, clique sur Afficher les résultats.
    ? Sélectionne toutes les menaces et clique sur Supprimer la sélection, l'ordinateur peut demander le redémarrage, si tel est le cas accepte.

    ? Une fois redémarré, ouvre Malwarebytes et rends-toi dans l'onglet Rapport.
    ? Ouvre le dernier en date, et copie-colle le sur le forum.
    0
  15. filiwi Messages postés 1 Statut Membre
     
    Bonjour,

    Je rencontre aujourd'hui le même problème que Papis70. Avast ouvre une pop-up, dès lors que j'ouvre mon navigateur Chrome qui m'indique que

    "l'Agent web a bloqué une page Web ou une fichier malveillant.
    Objet: http://downloadnicesuperguru.in/
    Infection: URL:Mal
    Processus: C:\Program Files (x86)\..."

    J'ai essayé de suivre à la lettre le process indiqué par yoann090 en téléchargeant adwcleaner et Malwarebytes anti-malwares et en réalisant les scans nécessaires.

    En vain... Pourriez-vous m'aider à résoudre ce problème?
    Merci d'avance.

    Voici le rapport de Adwcleaner:
    # AdwCleaner v3.310 - Rapport créé le 21/09/2014 à 12:22:33
    # Mis à jour le 12/09/2014 par Xplode
    # Système d'exploitation : Windows 8 (64 bits)
    # Nom d'utilisateur : Sabine - PCMAISON
    # Exécuté depuis : C:\Users\Sabine\Downloads\adwcleaner_3.310.exe
    # Option : Nettoyer

    ***** [ Services ] *****

    ***** [ Fichiers / Dossiers ] *****

    Dossier Supprimé : C:\Program Files (x86)\Adblocker
    Dossier Supprimé : C:\Users\Administrateur\AppData\Local\Chromatic Browser
    Dossier Supprimé : C:\Users\Administrateur\AppData\Local\torch
    Dossier Supprimé : C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser
    Dossier Supprimé : C:\Users\HomeGroupUser$\AppData\Local\torch
    Dossier Supprimé : C:\Users\Invité\AppData\Local\Chromatic Browser
    Dossier Supprimé : C:\Users\Invité\AppData\Local\torch
    Dossier Supprimé : C:\Users\Sabine\AppData\Local\Chromatic Browser
    Dossier Supprimé : C:\Users\Sabine\AppData\Local\torch
    Dossier Supprimé : C:\Users\Administrateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\npinfkdpalnkhphpkcgadlpbogaeedpe
    Dossier Supprimé : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\npinfkdpalnkhphpkcgadlpbogaeedpe
    Dossier Supprimé : C:\Users\Invité\AppData\Local\Google\Chrome\User Data\Default\Extensions\npinfkdpalnkhphpkcgadlpbogaeedpe
    Dossier Supprimé : C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\npinfkdpalnkhphpkcgadlpbogaeedpe
    [!] Dossier Supprimé : C:\Users\Administrateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\npinfkdpalnkhphpkcgadlpbogaeedpe
    [!] Dossier Supprimé : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\npinfkdpalnkhphpkcgadlpbogaeedpe
    [!] Dossier Supprimé : C:\Users\Invité\AppData\Local\Google\Chrome\User Data\Default\Extensions\npinfkdpalnkhphpkcgadlpbogaeedpe
    [!] Dossier Supprimé : C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\npinfkdpalnkhphpkcgadlpbogaeedpe
    [!] Dossier Supprimé : C:\Users\Administrateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\npinfkdpalnkhphpkcgadlpbogaeedpe
    [!] Dossier Supprimé : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\npinfkdpalnkhphpkcgadlpbogaeedpe
    [!] Dossier Supprimé : C:\Users\Invité\AppData\Local\Google\Chrome\User Data\Default\Extensions\npinfkdpalnkhphpkcgadlpbogaeedpe
    [!] Dossier Supprimé : C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\npinfkdpalnkhphpkcgadlpbogaeedpe
    [!] Dossier Supprimé : C:\Users\Administrateur\AppData\Local\Google\Chrome\User Data\Default\Extensions\npinfkdpalnkhphpkcgadlpbogaeedpe
    [!] Dossier Supprimé : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\npinfkdpalnkhphpkcgadlpbogaeedpe
    [!] Dossier Supprimé : C:\Users\Invité\AppData\Local\Google\Chrome\User Data\Default\Extensions\npinfkdpalnkhphpkcgadlpbogaeedpe
    [!] Dossier Supprimé : C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\Extensions\npinfkdpalnkhphpkcgadlpbogaeedpe

    ***** [ Tâches planifiées ] *****

    ***** [ Raccourcis ] *****

    ***** [ Registre ] *****

    Clé Supprimée : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
    Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
    Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
    Clé Supprimée : HKCU\Software\RegisteredApplicationsEx
    Clé Supprimée : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
    Clé Supprimée : HKLM\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}
    Clé Supprimée : HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
    Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{993EA8F6-6E55-7E4E-39DE-5796E3226DB9}
    Donnée Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - (x86)\SO_Booster\Assistant_x64.dll

    ***** [ Navigateurs ] *****

    -\\ Internet Explorer v10.0.9200.17054

    -\\ Google Chrome v35.0.1916.153

    [ Fichier : C:\Users\Sabine\AppData\Local\Google\Chrome\User Data\Default\preferences ]

    Supprimée [Extension] : npinfkdpalnkhphpkcgadlpbogaeedpe

    *************************

    AdwCleaner[R0].txt - [4698 octets] - [21/09/2014 12:18:37]
    AdwCleaner[S0].txt - [4439 octets] - [21/09/2014 12:22:33]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4499 octets] ##########
    0
    1. yoann090 Messages postés 10597 Statut Contributeur sécurité 1 697
       
      Bonjour,

      Je ne suis plus trop sur CCM ces derniers temps, pour avoir une réponse personnalisée à votre problème vous devriez ouvrir votre propre post.

      ++
      0