Searchnu.com/410

Résolu
Bonjour,

J'ai aussi choppé le virus Searchnu.com/410 avec logiciel de convertisseur de fichier. Sauf que j'ai lu toutes vos réponses plus bas et c'est du chinois pour moi qui ne suit pas très forte en informatique, je me débrouille sans plus..quelqu'un peut m'aider à m'en débarrasser en utilisant un language compréhensible pour les nulles ?

16 réponses

  1. Contributeur sécurité
    Bonjour, commencez par ceci :
    Télécharge AdwCleaner ici : http://general-changelog-team.fr/fr/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner

    ( d'Xplode ) sur ton bureau :

    Lance le, clique sur *[Recherche]* puis patiente le temps du scan.
    Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.

    Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

    Les toolbars, c'est pas obligatoire ( par Malekal ) :https://forum.malekal.com/viewtopic.php?t=6173&start=
    1. Bonjour,

      Merci de m'aider, voici le rapport obtenu.

      AdwCleaner v2.103 - Logfile created 01/11/2013 at 10:15:01
      # Updated 25/12/2012 by Xplode
      # Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
      # User : cat - IBM-52E00CF4427
      # Boot Mode : Normal
      # Running from : C:\Documents and Settings\User\My Documents\adwcleaner.exe
      # Option [Delete]

      ***** [Services] *****

      ***** [Files / Folders] *****

      File Deleted : C:\WINDOWS\system32\conduitEngine.tmp
      Folder Deleted : C:\Documents and Settings\All Users\Application Data\Ask
      Folder Deleted : C:\Documents and Settings\All Users\Application Data\boost_interprocess
      Folder Deleted : C:\Documents and Settings\All Users\Application Data\Tarma Installer
      Folder Deleted : C:\Program Files\Ask.com
      Folder Deleted : C:\Program Files\Babylon
      Folder Deleted : C:\Program Files\Free Offers from Freeze.com
      Folder Deleted : C:\Program Files\SweetIM
      Folder Deleted : C:\Program Files\Windows Searchqu Toolbar
      Folder Deleted : C:\Program Files\Yontoo Layers Runtime
      Folder Deleted : C:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

      ***** [Registry] *****

      Key Deleted : HKCU\Software\APN
      Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
      Key Deleted : HKCU\Software\Ask.com
      Key Deleted : HKCU\Software\AskToolbar
      Key Deleted : HKCU\Software\Conduit
      Key Deleted : HKCU\Software\IM
      Key Deleted : HKCU\Software\ImInstaller
      Key Deleted : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
      Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
      Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2410}
      Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{474597C5-AB09-49D6-A4D5-2E8D7341384E}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4F12-8568-69135F087DB0}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{474597C5-AB09-49D6-A4D5-2E8D7341384E}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
      Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
      Key Deleted : HKCU\Software\PriceGong
      Key Deleted : HKCU\Software\searchqutoolbar
      Key Deleted : HKCU\Software\SmartBar
      Key Deleted : HKCU\Software\Softonic
      Key Deleted : HKCU\Software\SweetIM
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
      Key Deleted : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
      Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
      Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
      Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
      Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
      Key Deleted : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
      Key Deleted : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
      Key Deleted : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
      Key Deleted : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
      Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT1351374
      Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
      Key Deleted : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
      Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
      Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api
      Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
      Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers
      Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1
      Key Deleted : HKLM\Software\Conduit
      Key Deleted : HKLM\Software\Freeze.com
      Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
      Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
      Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
      Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
      Key Deleted : HKLM\Software\ImInstaller
      Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2410}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
      Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}
      Key Deleted : HKLM\Software\SearchquMediabarTb
      Key Deleted : HKLM\Software\SweetIM
      Key Deleted : HKLM\Software\Tarma Installer
      Key Deleted : HKLM\Software\TENCENT
      Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
      Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00000000-6E41-4FD3-8538-502F5495E5FC}]
      Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
      Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]
      Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
      Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]

      ***** [Internet Browsers] *****

      -\\ Internet Explorer v8.0.6001.18702

      Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://home.sweetim.com/?crg=3.1010000.10002&barid={6756E921-5C48-11E2-A9AF-00166F1ADB0A} --> hxxp://www.google.com

      -\\ Google Chrome v23.0.1271.97

      *************************

      AdwCleaner[R1].txt - [10818 octets] - [11/01/2013 10:14:14]
      AdwCleaner[S1].txt - [10560 octets] - [11/01/2013 10:15:01]

      ########## EOF - C:\AdwCleaner[S1].txt - [10621 octets] ##########
      1. Contributeur sécurité
        Searchnu est toujours là ? Si oui c'est sous chrome ?
        1. Execute...c'est Run dans le fichier Démarrer ?
          1. Contributeur sécurité
            A oui c'est vrai que votre pc est en anglais. Oui c'est ça.
        2. J'obtiens un message d'erreur....qui dit que la location is unavailable et me dit de vérifier qu'internet est ouvert, mais il est ouvert...
          1. Contributeur sécurité
            Justement faut le fermer ^^.
            Désolé ça me semblait logique pour le réinitialiser
            1. Toujours le meme message, j'aimerais te faire parvenir une capture d'écran....on ne peut pas joindre un fichier sur ce forum...
              1. Contributeur sécurité
                Pas directement il faut l' heberger par exemple sur https://www.cjoint.com/ et donner le lien.

                Sinon te casse pas la tête desinstalle et reinstalle ca fera le même effet.
                1. Contributeur sécurité
                  On revoit la suite plus tard, je vais me coucher, donne des nouvelles une fois que tu l'as fait.

                  ++
                  1. OKay merci bcp...plus de Searchnu apres la réinstallation de Chrome, mais je n'arrive pas à programmer ma page d'ouverture Google sur Google.ca.....il ne le prend pas......
                    1. BINGO !...tout fonctionne normalement....merci beaucoup de ton aide, je n'en espérait pas tant.....Bonne et heureuse année 2013 à vous !.