Searchnu 414

Résolu

r360allstar Messages postés 14 Date d'inscription Statut Membre Dernière intervention -
r360allstar Messages postés 14 Date d'inscription Statut Membre Dernière intervention - 4 nov. 2012 à 23:44

bonjour j'ai également searchnu414 qui s'est implanté après le téléchargement de free download converter comment le supprimer parce que ....!!!

Afficher la suite

A voir également:

Searchnu 414
Searchnu 406 - Forum Virus
Virus searchnu 406 - Forum Virus
Searchnu.com/406 ✓ - Forum Virus
À quel groupe de ports tcp appartient le port 414 ? ✓ - Forum Virus
Virus searchnu/406. - Forum Virus

21 réponses

Réponse 1 / 21

Destrio5 Messages postés 85985 Date d'inscription Statut Modérateur Dernière intervention 10 302

--> Copie tout le texte présent en gras ci-dessous (Sélectionne-le, clique droit dessus et choisis "Copier").

SysRestore
G0 - GCSP: Preference [User Data\Default][HomePage] http://www.searchnu.com
G0 - GCSP: Preference [User Data\Default] http://www.searchnu.com
G1 - GCS: Preference [User Data\Default] https://www.search.ask.com/web?l=dis&q=&o=APN10655A&apn_dtid=%5EBND101%5EYY%5EFR&shad=s_0048&gct=hp&apn_ptnrs=%5EAG5&d=101-0&lang=en&atb=sysid%3D101%3Auid%3D58c9331d816657ac%3Asrc%3Dhmp%3Ao%3DAPN10655A%3Atg%3D&p2=%5EAG5%5EBND101%5EYY%5EFR
M3 - MFPP: Plugins - [Romain] -- C:\Users\Romain\AppData\Roaming\Mozilla\Firefox\Profiles\s38czqzc.default\searchplugins\Search_Results.xml
M3 - MFPP: Plugins - [Romain] -- C:\Users\Romain\AppData\Roaming\Mozilla\Firefox\Profiles\s38czqzc.default\searchplugins\Web Search.xml
M3 - MFPP: Plugins - [Romain] -- C:\Program Files\Mozilla FireFox\searchplugins\Search_Results.xml
M0 - MFSP: prefs.js [Romain - s38czqzc.default] http://www.searchnu.com
M2 - MFEP: prefs.js [Romain - s38czqzc.default\cacaoweb@cacaoweb.org] [] cacaoweb v1.0.28 (.http://www.cacaoweb.org/
M2 - MFEP: prefs.js [Romain - s38czqzc.default\helperbar@helperbar.com] [] Snap.Do v1.0.28 (.Snap.Do.)
R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww1.bigseekpro.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://search.safefinder.com/?st=ds&q={searchterms}
O2 - BHO: (no name) - {31ad400d-1b06-4e33-a59a-90c2c140cba0} Clé orpheline
O2 - BHO: (no name) - {99079a25-328f-4bd4-be04-00955acaa0a7} Clé orpheline
O2 - BHO: (no name) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} Clé orpheline
O3 - Toolbar: (no name) - [HKLM]{338B4DFE-2E2C-4338-9E41-E176D497299E} . (...) -- (.not file.)
O3 - Toolbar: (no name) - [HKLM]{ae07101b-46d4-4a98-af68-0333ea26e113} . (...) -- (.not file.)
O3 - Toolbar: (no name) - [HKLM]{99079a25-328f-4bd4-be04-00955acaa0a7} . (...) -- (.not file.)
O4 - HKCU\..\Run: [Browser Infrastructure Helper] . (.Smartbar - Smartbar.) -- C:\Users\Romain\AppData\Local\Smartbar\Application\SnapDo.exe
O4 - HKUS\S-1-5-21-2210877300-1918626698-4132262208-1001\..\Run: [Browser Infrastructure Helper] . (.Smartbar - Smartbar.) -- C:\Users\Romain\AppData\Local\Smartbar\Application\SnapDo.exe
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\AutoKMS.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\AutoKMSDaily.job
[MD5.00000000000000000000000000000000] [APT] [{56485F57-A851-41A6-B5D2-9E518C85B662}] (...) -- C:\Program Files\Norton Internet Security\Engine\16.0.0.125\RunCmd.exe (.not file.)
O42 - Logiciel: Hyperionics DB Toolbar - (.Pas de propriétaire.) [HKLM] -- Hyperionics DB Toolbar
O42 - Logiciel: Snap.Do - (.ReSoft Ltd..) [HKLM] -- {02F88255-B4AC-43C9-AA47-B82C0DA00A24}
[HKCU\Software\AppDataLow\Software\searchqutoolbar]
[HKCU\Software\Datamngr]
[HKCU\Software\SMTTB2009]
[HKCU\Software\SmartbarBackup]
[HKCU\Software\SmartbarLog]
[HKCU\Software\Smartbar]
[HKCU\Software\cacaoweb]
O43 - CFD: 14/10/2011 - 18:45:18 - [3,626] ----D C:\Program Files\Hyperionics DB Toolbar
O43 - CFD: 04/11/2012 - 21:17:49 - [714,320] ----D C:\Users\Romain\AppData\Roaming\cacaoweb
O43 - CFD: 22/09/2012 - 19:09:59 - [16,166] ----D C:\Users\Romain\AppData\Roaming\OpenCandy
O43 - CFD: 27/09/2012 - 21:17:39 - [16,982] ----D C:\Users\Romain\AppData\Local\Smartbar
O69 - SBI: SearchScopes [HKCU] {006ee092-9658-4fd6-bd8e-a21a348e59f5} - (Web Search) - https://search.safefinder.com/?st=ds&q={searchTerms}
O69 - SBI: SearchScopes [HKCU] {96bd48dd-741b-41ae-ac4a-aff96ba00f7e} - (Search) - http://ww1.bigseekpro.com
O69 - SBI: SearchScopes [HKCU] {9BB47C17-9C68-4BB3-B188-DD9AF0FD2414} - (Search Results) - https://www.search.ask.com/web?l=dis&q=&o=APN10655A&apn_dtid=%5EBND101%5EYY%5EFR&shad=s_0048&gct=hp&apn_ptnrs=%5EAG5&d=101-0&lang=en&atb=sysid%3D101%3Auid%3D58c9331d816657ac%3Asrc%3Dhmp%3Ao%3DAPN10655A%3Atg%3D&p2=%5EAG5%5EBND101%5EYY%5EFR
O87 - FAEL: "TCP Query User{FAFE510D-C298-4656-A70A-3E9B7218E1DD}C:\windows\kmsemulator.exe" | In - Public - P6 - TRUE | .(...) -- C:\windows\kmsemulator.exe
O87 - FAEL: "TCP Query User{FAFE510D-C298-4656-A70A-3E9B7218E1DD}C:\windows\kmsemulator.exe" | In - Public - P6 - TRUE | .(...) -- C:\windows\kmsemulator.exe
O87 - FAEL: "TCP Query User{95DC62E1-94D2-4C49-AF03-0819709AF345}C:\users\romain\appdata\roaming\cacaoweb\cacaoweb.exe" |In - Public - P6 - TRUE | .(...) -- C:\users\romain\appdata\roaming\cacaoweb\cacaoweb.exe (.not file.)
O87 - FAEL: "UDP Query User{41B55597-C2C7-469D-8C4B-25D21F1E089D}C:\users\romain\appdata\roaming\cacaoweb\cacaoweb.exe" |In - Public - P17 - TRUE | .(...) -- C:\users\romain\appdata\roaming\cacaoweb\cacaoweb.exe (.not file.)
[HKLM\Software\Classes\AppID\TbCommonUtils.DLL]
[HKLM\Software\Classes\AppID\TbHelper.EXE]
[HKLM\Software\Classes\TbCommonUtils.CommonUtils]
[HKLM\Software\Classes\TbCommonUtils.CommonUtils.1]
[HKLM\Software\Classes\TbHelper.TbDownloadManager]
[HKLM\Software\Classes\TbHelper.TbDownloadManager.1]
[HKLM\Software\Classes\TbHelper.TbPropertyManager]
[HKLM\Software\Classes\TbHelper.TbPropertyManager.1]
[HKLM\Software\Classes\TbHelper.TbRequest]
[HKLM\Software\Classes\TbHelper.TbRequest.1]
[HKLM\Software\Classes\TbHelper.TbTask]
[HKLM\Software\Classes\TbHelper.TbTask.1]
[HKLM\Software\Classes\TbHelper.ToolbarHelper]
[HKLM\Software\Classes\TbHelper.ToolbarHelper.1]
[HKLM\Software\Classes\Toolbar3.ContextMenuNotifier]
[HKLM\Software\Classes\Toolbar3.ContextMenuNotifier.1]
[HKLM\Software\Classes\Toolbar3.CustomInternetSecurityImpl]
[HKLM\Software\Classes\Toolbar3.CustomInternetSecurityImpl.1]
[HKLM\Software\Classes\URLSearchHook.ToolbarURLSearchHook]
[HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook]
[HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook.1]
[HKLM\Software\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}]
[HKLM\Software\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}]
[HKLM\Software\Classes\Interface\{2a42d13c-d427-4787-821b-cf6973855778}]
[HKLM\Software\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{338B4DFE-2E2C-4338-9E41-E176D497299E}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{338B4DFE-2E2C-4338-9E41-E176D497299E}]
[HKLM\Software\Classes\CLSID\{338B4DFE-2E2C-4338-9E41-E176D497299E}]
[HKLM\Software\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}]
[HKLM\Software\Classes\Interface\{3d8478aa-7b88-48a9-8bcb-b85d594411ec}]
[HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}]
[HKLM\Software\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}]
[HKLM\Software\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}]
[HKLM\Software\Classes\Interface\{4897bba6-48d9-468c-8efa-846275d7701b}]
[HKLM\Software\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}]
[HKLM\Software\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}]
[HKLM\Software\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}]
[HKLM\Software\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}]
[HKLM\Software\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}]
[HKLM\Software\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
[HKLM\Software\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
[HKLM\Software\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}]
[HKLM\Software\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}]
[HKLM\Software\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}]
[HKLM\Software\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}]
[HKLM\Software\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}]
[HKLM\Software\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}]
[HKLM\Software\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}]
[HKLM\Software\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}]
[HKLM\Software\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}]
[HKLM\Software\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}]
[HKLM\Software\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}]
[HKLM\Software\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}]
[HKLM\Software\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}]
[HKLM\Software\Classes\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
[HKLM\Software\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
[HKCU\Software\cacaoweb]
[HKCU\Software\DataMngr]
[HKLM\Software\Minibar]
[HKCU\Software\AppDataLow\Software\searchqutoolbar]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Hyperionics DB Toolbar]
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{99079A25-328F-4BD4-BE04-00955ACAA0A7}
C:\Users\Romain\AppData\Roaming\cacaoweb
C:\Users\Romain\AppData\Roaming\OpenCandy
C:\Users\Romain\AppData\LocalLow\searchquband
C:\Users\Romain\AppData\LocalLow\Toolbar4
C:\Users\Romain\AppData\Roaming\Mozilla\Firefox\Profiles\s38czqzc.default\Extensions\cacaoweb@cacaoweb.org
O4 - Global Startup: C:\Users\Romain\Desktop\avast! Free Antivirus.lnk . (...) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe (.not file.)
[HKCU\Software\AVAST Software]
[HKLM\Software\AVAST Software]
O43 - CFD: 08/04/2011 - 12:32:18 - [0,001] ----D C:\Program Files\AVAST Software
O43 - CFD: 03/08/2012 - 12:56:57 - [0] ----D C:\ProgramData\AVAST Software
EmptyCLSID
EmptyFlash
EmptyTemp

--> Puis lance ZHPFix depuis le raccourci situé sur ton Bureau.
(Sous Vista/Win7, il faut cliquer droit sur le raccourci de ZHPFix et choisir Exécuter en tant qu'administrateur)

--> Une fois ZHPFix ouvert, clique sur le bouton "Coller le presse-papier".

--> Dans l'encadré principal, tu verras donc les lignes que tu as copié précédemment apparaître. Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.

--> Clique sur "GO" pour lancer le nettoyage. Laisse l'outil travailler et ne touche à rien.

--> Une fois terminé, copie-colle le rapport dans ton prochain message.

Réponse 2 / 21

Destrio5 Messages postés 85985 Date d'inscription Statut Modérateur Dernière intervention 10 302

Oui.

Réponse 3 / 21

Destrio5 Messages postés 85985 Date d'inscription Statut Modérateur Dernière intervention 10 302

Je voudrais un nouveau rapport ZHPDiag.

Réponse 4 / 21

Destrio5 Messages postés 85985 Date d'inscription Statut Modérateur Dernière intervention 10 302

Non.

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question

Réponse 5 / 21

Destrio5 Messages postés 85985 Date d'inscription Statut Modérateur Dernière intervention 10 302

searchnu414 t'embête encore ?

Réponse 6 / 21