Snap.do Résolu/Fermé

Question

Lors de l'installation d'un update Flash Player j'ai recupere plusieurs fichiers non souhaites... Je les ai elimine mais il me reste une fenetre de recherche "snap.do" dont j'arrive pas a me debarasser... ne la vois pas en startup ni ailleurs. Quelqu'un a t-il eu et solde ce probleme.
Merci

yoann090 · Answer

Bonjour, 

Télécharge AdwCleaner ( d'Xplode ) sur ton bureau : http://general-changelog-team.fr/fr/downloads/viewdownload/20-outils-de-xplode/2-adwcleaner

-Lance le, clique sur [Recherche] puis patiente le temps du scan.

Une fois le scan fini, un rapport s'ouvrira. Poste moi son contenu dans ta prochaine réponse.

silverrouster · Answer

Merci Yoann090.
Ci desso/us le rapport demande...
 AdwCleaner v2.302 - Logfile created 06/07/2013 at 18:25:12
# Updated 06/06/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Fernand-LT - FERNAND-LT-PC
# Boot Mode : Normal
# Running from : C:\Users\Fernand-LT\Downloads\adwcleaner.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

Folder Found : C:\Program Files\Updater By SweetPacks

***** [Registry] *****


***** [Internet Browsers] *****

-\ Internet Explorer v10.0.9200.16576

[OK] Registry is clean.

-\ Mozilla Firefox v21.0 (en-US)

File : C:\Users\Fernand-LT\AppData\Roaming\Mozilla\Firefox\Profiles\5kdyd6vc.default\prefs.js

Found : user_pref("CT3294791.1000082.isPlayDisplay", "true");
Found : user_pref("CT3294791.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Found : user_pref("CT3294791.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3294791.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Found : user_pref("CT3294791.FF19Solved", "true");
Found : user_pref("CT3294791.FirstTime", "true");
Found : user_pref("CT3294791.FirstTimeFF3", "true");
Found : user_pref("CT3294791.PG_ENABLE.enc", "dHJ1ZQ==");
Found : user_pref("CT3294791.SF_JUST_INSTALLED.enc", "RkFMU0U=");
Found : user_pref("CT3294791.SF_STATUS.enc", "RU5BQkxFRA==");
Found : user_pref("CT3294791.SF_USER_ID.enc", "Y2lkXzI4NTIwMTMxNTMzMzQyMjA3MTc=");
Found : user_pref("CT3294791.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT329[...]
Found : user_pref("CT3294791.UserID", "UN21939629765270208");
Found : user_pref("CT3294791.YTbyClickFavorites.enc", "W10=");
Found : user_pref("CT3294791.YTbyClickRecent.enc", "W10=");
Found : user_pref("CT3294791.addressBarTakeOverEnabledInHidden", "true");
Found : user_pref("CT3294791.autoDisableScopes", -1);
Found : user_pref("CT3294791.browser.search.defaultthis.engineName", "true");
Found : user_pref("CT3294791.cbfirsttime.enc", "VHVlIE1heSAyOCAyMDEzIDE1OjMzOjAzIEdNVC0wNDAwIChFYXN0ZXJuIFN0[...]
Found : user_pref("CT3294791.defaultSearch", "true");
Found : user_pref("CT3294791.embeddedsData", "[{\"appId\":\"130089396748860745\",\"apiPermissions\":{\"cross[...]
Found : user_pref("CT3294791.enableAlerts", "true");
Found : user_pref("CT3294791.enableFix404ByUser", "TRUE");
Found : user_pref("CT3294791.enableSearchFromAddressBar", "true");
Found : user_pref("CT3294791.firstTimeDialogOpened", "true");
Found : user_pref("CT3294791.fixPageNotFoundError", "true");
Found : user_pref("CT3294791.fixPageNotFoundErrorByUser", "true");
Found : user_pref("CT3294791.fixPageNotFoundErrorInHidden", "true");
Found : user_pref("CT3294791.fixUrls", true);
Found : user_pref("CT3294791.installDate", "28/5/2013 15:31:05");
Found : user_pref("CT3294791.installId", "stub.exe");
Found : user_pref("CT3294791.installSessionId", "{262693CD-F02D-412D-9792-2FB25E53D41D}");
Found : user_pref("CT3294791.installSp", "TRUE");
Found : user_pref("CT3294791.installType", "conduitnsisintegration");
Found : user_pref("CT3294791.installUsage", "2013-05-28T22:32:55.2596696+03:00");
Found : user_pref("CT3294791.installUsageEarly", "2013-05-28T22:32:53.6995996+03:00");
Found : user_pref("CT3294791.installerVersion", "1.4.2.3");
Found : user_pref("CT3294791.isCheckedStartAsHidden", true);
Found : user_pref("CT3294791.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3294791.isFirstTimeToolbarLoading", "false");
Found : user_pref("CT3294791.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Found : user_pref("CT3294791.keyword", "true");
Found : user_pref("CT3294791.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Found : user_pref("CT3294791.lastVersion", "10.16.2.9");
Found : user_pref("CT3294791.mam_gk_appStateReportTime.enc", "MTM2OTc2OTU4MTczOQ==");
Found : user_pref("CT3294791.mam_gk_appState_CouponBuddy.enc", "b24=");
Found : user_pref("CT3294791.mam_gk_appState_Easytobook.enc", "b24=");
Found : user_pref("CT3294791.mam_gk_appState_Easytobook_targeted.enc", "b24=");
Found : user_pref("CT3294791.mam_gk_appState_PriceGong.enc", "b24=");
Found : user_pref("CT3294791.mam_gk_appState_WindowShopper.enc", "b24=");
Found : user_pref("CT3294791.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9w[...]
Found : user_pref("CT3294791.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
Found : user_pref("CT3294791.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IlByaWNlR29uZyIsImN[...]
Found : user_pref("CT3294791.mam_gk_currentVersion.enc", "MS42LjAuMQ==");
Found : user_pref("CT3294791.mam_gk_eventsCache.enc", "eyJiMzc3ZmQzOS03NjdjLTRhMzMtOTEzYi1hYTI0OTQ3NzU1MzQiO[...]
Found : user_pref("CT3294791.mam_gk_first_time.enc", "MQ==");
Found : user_pref("CT3294791.mam_gk_gadgetOpen.enc", "MA==");
Found : user_pref("CT3294791.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Found : user_pref("CT3294791.mam_gk_lastLoginTime.enc", "MTM2OTc2OTU4MDY3Mw==");
Found : user_pref("CT3294791.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50[...]
Found : user_pref("CT3294791.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Found : user_pref("CT3294791.mam_gk_settings1.6.0.1.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Found : user_pref("CT3294791.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
Found : user_pref("CT3294791.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
Found : user_pref("CT3294791.mam_gk_userId.enc", "MmE3MjI1ZWMtZGVmYS00NDQxLWE5MDUtZjcwN2NmZWJiMzdk");
Found : user_pref("CT3294791.migrateAppsAndComponents", true);
Found : user_pref("CT3294791.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%[...]
Found : user_pref("CT3294791.openThankYouPage", "false");
Found : user_pref("CT3294791.openUninstallPage", "true");
Found : user_pref("CT3294791.originalHomepage", "hxxps://www.google.com/");
Found : user_pref("CT3294791.originalSearchAddressUrl", "");
Found : user_pref("CT3294791.originalSearchEngine", "");
Found : user_pref("CT3294791.price-gong.isManagedApp", "true");
Found : user_pref("CT3294791.revertSettingsEnabled", "false");
Found : user_pref("CT3294791.search.searchAppId", "130089396748860745");
Found : user_pref("CT3294791.search.searchCount", "0");
Found : user_pref("CT3294791.searchFromAddressBarEnabledByUser", "true");
Found : user_pref("CT3294791.searchInNewTabEnabledByUser", "true");
Found : user_pref("CT3294791.searchInNewTabEnabledInHidden", "true");
Found : user_pref("CT3294791.searchRevert", "false");
Found : user_pref("CT3294791.searchUserMode", "2");
Found : user_pref("CT3294791.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Found : user_pref("CT3294791.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Found : user_pref("CT3294791.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"2\[...]
Found : user_pref("CT3294791.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Found : user_pref("CT3294791.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Found : user_pref("CT3294791.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Found : user_pref("CT3294791.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Found : user_pref("CT3294791.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1369769576271");
Found : user_pref("CT3294791.serviceLayer_services_appsMetadata_lastUpdate", "1369769576211");
Found : user_pref("CT3294791.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1369769576089");
Found : user_pref("CT3294791.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1369769574[...]
Found : user_pref("CT3294791.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1369769576605")[...]
Found : user_pref("CT3294791.serviceLayer_services_location_lastUpdate", "1369769574841");
Found : user_pref("CT3294791.serviceLayer_services_login_10.16.2.9_lastUpdate", "1369769576351");
Found : user_pref("CT3294791.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1369769576129");
Found : user_pref("CT3294791.serviceLayer_services_searchAPI_lastUpdate", "1369769574830");
Found : user_pref("CT3294791.serviceLayer_services_serviceMap_lastUpdate", "1369769574377");
Found : user_pref("CT3294791.serviceLayer_services_toolbarContextMenu_lastUpdate", "1369769576053");
Found : user_pref("CT3294791.serviceLayer_services_toolbarSettings_lastUpdate", "1369769574745");
Found : user_pref("CT3294791.serviceLayer_services_translation_lastUpdate", "1369769576232");
Found : user_pref("CT3294791.settingsINI", true);
Found : user_pref("CT3294791.shouldFirstTimeDialog", "false");
Found : user_pref("CT3294791.showToolbarPermission", "false");
Found : user_pref("CT3294791.smartbar.CTID", "CT3294791");
Found : user_pref("CT3294791.smartbar.Uninstall", "0");
Found : user_pref("CT3294791.smartbar.homepage", "true");
Found : user_pref("CT3294791.smartbar.toolbarName", "Vafmusic2 ");
Found : user_pref("CT3294791.startPage", "true");
Found : user_pref("CT3294791.toolbarBornServerTime", "28-5-2013");
Found : user_pref("CT3294791.toolbarCurrentServerTime", "28-5-2013");
Found : user_pref("CT3294791.toolbarLoginClientTime", "Tue May 28 2013 15:32:56 GMT-0400 (Eastern Standard T[...]
Found : user_pref("CT3294791.versionFromInstaller", "10.16.2.9");
Found : user_pref("CT3294791_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Found : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3294791&octid=CT329479[...]
Found : user_pref("Smartbar.ConduitSearchEngineList", "Vafmusic2 Customized Web Search");
Found : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3294791[...]
Found : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "");
Found : user_pref("Smartbar.keywordURLSelectedCTID", "CT3294791");
Found : user_pref("browser.search.defaultthis.engineName", "Vafmusic2 Customized Web Search");
Found : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3294791&CUI[...]
Found : user_pref("browser.search.selectedEngine", "Web Search");
Found : user_pref("extensions.helperbar.SmartbarDisabled", false);
Found : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
Found : user_pref("smartbar.addressBarOwnerCTID", "CT3294791");
Found : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3294791&CUI=UN219396297[...]
Found : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT[...]
Found : user_pref("smartbar.defaultSearchOwnerCTID", "CT3294791");
Found : user_pref("smartbar.homePageOwnerCTID", "CT3294791");
Found : user_pref("smartbar.machineId", "Y2GB+GHWEJ6ND/D6BOFSILZHZOTFSP57AOTN1H4OBMBRJEUTRDHDCOLBDARPUFP2Z1L[...]
Found : user_pref("smartbar.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3294791&CUI=UN219396297652[...]

-\ Google Chrome v27.0.1453.110

File : C:\Users\Fernand-LT\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************
]
AdwCleaner[R4].txt - [11696 octets] - [07/06/2013 18:25:12]
]


########## EOF - C:\AdwCleaner[R4].txt - [11940 octets] ##########

yoann090 · Answer

Ok, relance en suppression cette fois ci et poste le rapport.

silverrouster · Answer

Rapport joint : 
Merci encore...
Bonne nuit yoann090

Fernand

silverrouster · Answer

yoann090
Merci pour ton aide ... je ne me souviens pas de la manip que j'ai fait hier soir pour transmettre le nouveau fichier (apres suppression). Helas je ne suis pas du tout familier avec ce site et y vais a taton....
Ci-dessous le fichier en question....
 AdwCleaner v2.302 - Logfile created 06/08/2013 at 09:29:02
# Updated 06/06/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Fernand-LT - FERNAND-LT-PC
# Boot Mode : Normal
# Running from : C:\Users\Fernand-LT\Downloads\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Deleted on reboot : C:\Program Files\Updater By SweetPacks

***** [Registry] *****


***** [Internet Browsers] *****

-\ Internet Explorer v10.0.9200.16576

[OK] Registry is clean.

-\ Mozilla Firefox v21.0 (en-US)

File : C:\Users\Fernand-LT\AppData\Roaming\Mozilla\Firefox\Profiles\5kdyd6vc.default\prefs.js

[OK] File is clean.

-\ Google Chrome v27.0.1453.110

File : C:\Users\Fernand-LT\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [17556 octets] - [09/04/2013 15:21:00]
AdwCleaner[R2].txt - [40918 octets] - [17/05/2013 09:54:15]
AdwCleaner[R3].txt - [14373 octets] - [07/06/2013 15:00:04]
AdwCleaner[R4].txt - [12010 octets] - [07/06/2013 18:25:12]
AdwCleaner[S1].txt - [18170 octets] - [09/04/2013 15:23:04]
AdwCleaner[S2].txt - [41804 octets] - [17/05/2013 09:55:53]
AdwCleaner[S3].txt - [14701 octets] - [07/06/2013 15:24:19]
AdwCleaner[S4].txt - [12338 octets] - [07/06/2013 19:34:37]
AdwCleaner[S5].txt - [1514 octets] - [07/06/2013 19:40:04]

silverrouster · Answer

Pour Yoann090
Mes excuses, je ne suis pas du tout familier avec ce site, en particulier comment adresser des messages...
Bref, j'essaye encore.... le fichier cree apres la suppression est ci-dessous.

 AdwCleaner v2.302 - Logfile created 06/08/2013 at 09:29:02
# Updated 06/06/2013 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Fernand-LT - FERNAND-LT-PC
# Boot Mode : Normal
# Running from : C:\Users\Fernand-LT\Downloads\adwcleaner.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Deleted on reboot : C:\Program Files\Updater By SweetPacks

***** [Registry] *****


***** [Internet Browsers] *****

-\ Internet Explorer v10.0.9200.16576

[OK] Registry is clean.

-\ Mozilla Firefox v21.0 (en-US)

File : C:\Users\Fernand-LT\AppData\Roaming\Mozilla\Firefox\Profiles\5kdyd6vc.default\prefs.js

[OK] File is clean.

-\ Google Chrome v27.0.1453.110

File : C:\Users\Fernand-LT\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[R1].txt - [17556 octets] - [09/04/2013 15:21:00]
AdwCleaner[R2].txt - [40918 octets] - [17/05/2013 09:54:15]
AdwCleaner[R3].txt - [14373 octets] - [07/06/2013 15:00:04]
AdwCleaner[R4].txt - [12010 octets] - [07/06/2013 18:25:12]
AdwCleaner[S1].txt - [18170 octets] - [09/04/2013 15:23:04]
AdwCleaner[S2].txt - [41804 octets] - [17/05/2013 09:55:53]
AdwCleaner[S3].txt - [14701 octets] - [07/06/2013 15:24:19]
AdwCleaner[S4].txt - [12338 octets] - [07/06/2013 19:34:37]
AdwCleaner[S5].txt - [1514 octets] - [07/06/2013 19:40:04]

yoann090 · Answer

Ok, Snap do persiste sous quel navigateur ?

yoann090 · Answer

Re, 

Ok on va faire un diagnostique, vous pouvez suivre ce tutoriel imagé : https://www.security-helpzone.com/2013/04/14/zhpdiag-generer-un-rapport-de-diagnostic/ 

A la fin il faut heberger sur https://www.cjoint.com/ et me donner le lien qui vous sera fourni, en cas de difficulté n'hesitez pas a demander.

silverrouster · Answer

yoann090,
Suivant tes instructions, j'ai fait le diagnostique...
Je ne vois pas ce qu'il faut faire pour l'heberger... en tous cas je l'ai sauvegarde.. Peux tu me dire ce que je dois faire ensuite...
Encore merci pour tout.
Fernand

silverrouster · Answer

Merci jacque..
J'ai compris ce qu'il fallait faire et voici le lien :

http://cjoint.com/?CFixgqRm0pq

J'espere que cela t'aidera...
Il faut que je dise que je suis un peu largue sur la denomination des commandes en francais ...je n'y suis pas du tout habitue pour 2 raisons : je ne suis pas assez connaisseur en informatique pour m'y aventurer et deuxio j'ai recours jusqu'a ce jour qu'aux sites en anglais... dont les desriptions sont tres differentes.
Merci encore et bonne soiree,

Fernand

yoann090 · Answer

Re, merci oui c est bon. J aurais pu vous proposer un outil de diagnostique americain mais disons que je favorise l utilisation de logiciel francais en general. 
J ai du quitter l ordinateur, je vous prepare un script demain et vous le transmet. 


Bonne soiree

yoann090 · Answer

Ok, si l'anglais est plus facile pour vous, il existe une branche de CCM en anglais : https://ccm.net/

Copiez le texte en gras ci dessous : 

SysRestore
G0 - GCSP: Preference [User Data\Default][HomePage] https://search.safefinder.com/?q=
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://search.safefinder.com/?q=
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://search.safefinder.com/?q=
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://search.safefinder.com/?q=
[MD5.1BA417F51BF6715F2A98014E4C093EB4] - (...) -- C:\Program Files\Updater By SweetPacks\ExtensionUpdaterService.exe   [188760] [PID.2928]    
O4 - GS\Desktop: Toolbar Cleaner.lnk . (.Visicom Media Inc. - Toolbar Cleaner.)  -- C:\Program Files (x86)\Toolbar Cleaner\ToolbarCleaner.exe    
O23 - Service: Updater By SweetPacks (Updater By SweetPacks) . (...) - C:\Program Files\Updater By SweetPacks\ExtensionUpdaterService.exe    
[MD5.00000000000000000000000000000000] [APT] [DealPlyUpdate] (...) -- C:\Program Files (x86)\DealPly\DealPlyUpdate.exe (.not file.)   [0]    
[HKCU\Software\AppDataLow\Software\GetSavin]   
[HKCU\Software\AppDataLow\Software\SingAlong]  
[HKCU\Software\SweetIM]    
[HKLM\Software\Updater By SweetPacks]    
[HKLM\Software\Wow6432Node\SweetIM]    
[HKLM\Software\Wow6432Node\Updater By SweetPacks]    
O43 - CFD: 3/24/2013 - 10:24:11 AM - [0.002] ----D C:\Program Files (x86)\Video Download Converter    
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011501158}]    
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011501158}]    
C:\Program Files (x86)\Video Download Converter
C:\Users\Fernand-LT\AppData\Local\Google\Chrome\User Data\Default\Extensions\klibnahbojhkanfgaglnlalfkgpcppfi    
SR - | Auto  188760 |  (Updater By SweetPacks) . (...) - C:\Program Files\Updater By SweetPacks\ExtensionUpdaterService.exe    
[HKCU\Software\Mixi.DJ]    
[HKLM\Software\DomaIQ]    
EmptyTemp
EmptyCLSID

Puis suivez ce tutoriel : https://www.security-helpzone.com/2013/04/14/zhpfix-fixer-les-lignes-dun-rapport-zhpdiag/

Resumé en anglais des opérations à mener : 

1) Copy the bold text. 
2) Run ZHPFix on your Desktop and click on the OK button
3) Click on "Paste clipboard" 
4) Click on "GO" 
5) Paste the logfile here.

silverrouster · Answer

yoann090
Toutes mes excuse ... je n'avais en fait RIEN compris a la manip demandee hier...
Je n'avais pas copie le fichier Systeme restore mais l'avais simplement sauvegarde..
Ne voyant plus de reponse de ta part et apres reflexion j'ai compris qu'il fallait le copier sur la fenetre ZHPFix....
C'est ce que viens de faire et le rapport est ci-dessous... il y en a 2 ce sont les derniers de la liste.
Me confirmer SVP que c'est ce que tu attendais ..
Merci encore et desole du retard du a cette incomprehension.

mistarffb · Answer

Salut, j'ai eu le même problème que toi. Je te donne un lien sur YOUTUBE qui m'a permis de me débarrasser de SNAP.DO

https://www.youtube.com/watch?v=sjanw9JvBt8

Vérifie les conditions d'utilisation avant de télécharger quelque chose

yoann090 · Answer

Salut, oui mais il n'y a pas que snap do dans son pc. 

Bonne soiree

silverrouster · Answer

yoann090 : est-ce le bon?Merci pout l'aide et
Bonsoir....
il se fait tard pour toi


Rapport de ZHPFix 2013.3.9.1 par Nicolas Coolman, Update du 9/03/2013
Fichier d'export Registre :
Run by petra at 25/03/2013 17:17:00
High Elevated Privileges : OK
Windows Vista Home Premium Edition, 32-bit Service Pack 1 (Build 6001)


Recycle Files Deleted


========== Memory Process ==========
DELETED Memory Process: C:\Program Files\RegClean Pro\SystweakASP.exe
DELETE on Reboot Memory Process: C:\Program Files\ExpressFiles\EFUpdater.exe
DELETED Memory Process: C:\Program Files\RegClean Pro\RegCleanPro.exe
DELETED Memory Process: C:\Users\petra\AppData\Local\Temp\ApnStub.exe
DELETED Memory Process: C:\Users\petra\AppData\Local\Temp\MSIM8984315.exe


========== Memory Module ==========
DELETED Memory Module: C:\Users\petra\AppData\Local\Temp\AskSLib.dll


========== Registry Key ==========
DELETED Key: CLSID BHO: {03124E67-0F8A-387E-0CD4-DFB1D6869016}
DELETED Key: CLSID: [HKLM\SOFTWARE\Classes\CLSID\{03124E67-0F8A-387E-0CD4-DFB1D6869016}]
DELETED Key: StartupReg: Shelter
DELETED Key: HKLM\Software\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
DELETED Key: HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\CloseIEAndShowToolband.exe
DELETED Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Uni nstall\SP_48c708f2


========== Registry Value ==========
DELETED RunValue: eRecoveryService


========== Repertory ==========
DELETED Folder: c:\programdata\bbrowose22ssave
DELETED Window Temporary
DELETED Flash Cookies


========== File ==========
DELETED File: c:\programdata\bbrowose22ssave\514e49afda8df.dll
DELETED File: c:\users\petra\appdataoaming\microsoft\windows\s tart menu\programs\hp drivekeyii utility.lnk
DELETED File: c:\users\petra\appdataoaming\microsoft\installer \{f9183525-8957-4459-b7f6-e2140099b6ee}\_294823.exe
DELETED File: c:\windows	asks\mcdefragtask.job
DELETED File: c:\windows	asks\mcqctask.job
DELETED File: c:\windows	asksegclean pro_default.job
DELETED File: c:\windows	asksegclean pro_updates.job
DELETED File***: c:\program filesegclean pro\systweakasp.exe
DELETED File***: c:\program filesegclean proegcleanpro.exe
NOT FOUND Folder/File: c:\program filesegclean proegcleanpro.exe
DELETE on Reboot c:\programdata\shelter\shelter.exe
DELETED File*: c:\users\petra\appdata\local	emp\apnstub.exe
DELETED File*: c:\users\petra\appdata\local	emp\askslib.dll
DELETED File: c:\users\petra\appdata\local	emp\msim8984315.exe
DELETED Window Temporary
DELETED Flash Cookies


========== Task ==========
DELETED Task: Advanced System Protector
DELETED Task: Express FilesUpdate
DELETED Task: RegClean Pro
DELETED Task: RegClean Pro_DEFAULT
DELETED Task: RegClean Pro_UPDATES




========== Summary ==========
5 : Memory Process
1 : Memory Module
6 : Registry Key
1 : Registry Value
3 : Repertory
16 : File
5 : Task




End of clean in 00mn 10s


========== Report File ==========
C:\ZHP\ZHPFix[R10].txt - 20/03/2013 22:20:32 [2178]
C:\ZHP\ZHPFix[R11].txt - 20/03/2013 22:20:33 [2246]
C:\ZHP\ZHPFix[R12].txt - 20/03/2013 22:20:38 [1123]
C:\ZHP\ZHPFix[R13].txt - 21/03/2013 19:58:56 [1120]
C:\ZHP\ZHPFix[R14].txt - 22/03/2013 22:14:29 [1171]
C:\ZHP\ZHPFix[R15].txt - 22/03/2013 22:45:41 [1660]
C:\ZHP\ZHPFix[R1].txt - 20/03/2013 22:18:44 [433]
C:\ZHP\ZHPFix[R2].txt - 20/03/2013 22:19:26 [581]
C:\ZHP\ZHPFix[R3].txt - 20/03/2013 22:19:39 [740]
C:\ZHP\ZHPFix[R4].txt - 20/03/2013 22:19:53 [922]
C:\ZHP\ZHPFix[R5].txt - 20/03/2013 22:19:56 [983]
C:\ZHP\ZHPFix[R6].txt - 20/03/2013 22:19:59 [1034]
C:\ZHP\ZHPFix[R7].txt - 20/03/2013 22:20:02 [1360]
C:\ZHP\ZHPFix[R8].txt - 20/03/2013 22:20:21 [2006]
C:\ZHP\ZHPFix[R9].txt - 20/03/2013 22:20:29 [2113]
C:\ZHP\ZHPFix[R16].txt - 25/03/2013 17:17:01 [3710]

yoann090 · Answer

C'est bon :)


Ne t'inquiete pas, il m est deja arrivé de poster beaucoup plus tard (vers 3h du matin ^^)

Par contre la je ne suis plus sur l'ordinateur, on reprendra demain. 

Comment se porte le pc ?

silverrouster · Answer

Content que tu aies le bon document...Tu es un homme de la nuit... pour moi coucher 11h et debout 6.30... et je suis assez vite fatigue, ma sante n'est pas excellente - on en reparlera si tu veux. Mon PC est OK, c'est un laptop Toshiba P875-S7200 assez performant... je l'utilise depuis un peu plus d'un an...pas de probleme jusqu'a present sauf quand je charge des "offres" qui  sont porteuses de programmes parasites. Je le purge tous les jours avec Ccleaner et tous les 4 ou 5 jours avec Glary Utilities. Comme AV j'ai Windows essentials qui jusqu'a present me convient. Je fais un backup systeme tous les 3 semaines...
J'utilise egalement un Netbook ASUS Eeepc1005 qui m'a bien servi lorsque je voyageais pas mal... Je le prends souvent avec moi pour aller au lit si la TV n'a rien d'interessant - ce qui est souvent le cas - j'ai pas mal de correspondants qui m'envoient des mails non stop et j'en ai en stock en ce moment dans les 1100... donc je purge avec l'Asus.
L'Asus a en gros les memes programmes que le Tosh... mais il ne m'a pas fait recuperer le fameux Snap.do.
Bonne nuit yoann et a demain.
Fernand

yoann090 · Answer

Bonjour, 

Si tout va bien, nous allons procéder à la suppression des outils de désinfection. 

Pour ce qui est de Glary Utilities, nous ne recommandons pas spécialement son utilisation sur le forum, mais si vous pensez qu'il est utile conservez le. 

&#9654 Nous allons utilisez l'utilitaire Delfix (Merci à Xplode). 
- Télécharger Delfix, puis exécuter le.
- Lance le, laisser la case précochée
- Clique ensuite sur Exécuter puis patiente pendant le processus de suppression.
- Le rapport sera enregistré sous C:\DelFix.txt. Copie/Colle le dans ta prochaine réponse.

silverrouster · Answer

Ci-dessous le fichier DelFix..
Bon courage ...
Fernand

Juste un mot : est-ce bien ce que tu souhaitais yoann090?


# DelFix v10.3 - Logfile created 11/06/2013 at 17:44:05
# Updated 08/06/2013 by Xplode
# Username : Fernand-LT - FERNAND-LT-PC
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Removing disinfection tools ...

Deleted : C:\ZHP
Deleted : C:\Program Files (x86)\ZHPDiag
Deleted : C:\AdwCleaner[R1].txt
Deleted : C:\AdwCleaner[R2].txt
Deleted : C:\AdwCleaner[R3].txt
Deleted : C:\AdwCleaner[R4].txt
Deleted : C:\AdwCleaner[R4]June 7.txt
Deleted : C:\AdwCleaner[S1].txt
Deleted : C:\AdwCleaner[S2].txt
Deleted : C:\AdwCleaner[S3].txt
Deleted : C:\AdwCleaner[S4].txt
Deleted : C:\AdwCleaner[S5].txt
Deleted : C:\AdwCleaner[S6].txt
Deleted : C:\AdwCleaner[S7].txt
Deleted : C:\Users\Fernand-LT\Desktop\adwcleaner - Shortcut.lnk
Deleted : C:\Users\Fernand-LT\Desktop\ZHPDiag.txt
Deleted : C:\Users\Fernand-LT\Desktop\ZHPFixReport.txt
Deleted : C:\Users\Public\Desktop\MBRCheck.lnk
Deleted : C:\Users\Public\Desktop\ZHPDiag.lnk
Deleted : C:\Users\Public\Desktop\ZHPFix.lnk
Deleted : C:\Users\Fernand-LT\Downloads\adwcleaner.exe
Deleted : C:\Users\Fernand-LT\Downloads\ZHPDiag2.exe
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZHPDiag_is1

########## - EOF - ##########

yoann090 · Answer

C'est tout bon ;)

Si tu n'as plus d autres questions pour ma part on a fini.

silverrouster · Answer

yoann090
Oui, merci ... je note que je pourrai faireppel a "Comment ca marche" ..
j'aurai certainement des problemes car comme dit auparavant je suis plutot novice en software... et pas du tout ose pour me lancer dans des solutions plus ou moins batardes.
Bonne journee et merci a toi et tes collegues... vous etes si sympa et si efficace.

Fernand

Snap.do

22 réponses

Discussions similaires