Chat land

Résolu
mimie -  
Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   -
Bonsoir ,chat land a envahis mon pc ,pouvez vous m'aidés svp merci

http://pjjoint.malekal.com/files.php?id=OTL_20130609_b15e10g11q6o12

http://pjjoint.malekal.com/files.php?id=OTL_Extras_20130609_h9s15r6i12q13

http://pjjoint.malekal.com/files.php?id=20130609_b13n6f14s7p7

18 réponses

  1. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    Bonjour,

    --> Télécharge et lance AdwCleaner (d'Xplode), choisis l'option "Suppression" et poste le rapport.
    0
  2. mimie42610 Messages postés 14 Statut Membre
     
    j'ai poster les 2 liens et aucune reponse a par la tienne je te remercie
    0
  3. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    J'ai vu les deux rapports d'OTL et celui de Malwarebytes Anti-Malware.
    0
  4. mimie42610 Messages postés 14 Statut Membre
     
    j'ai telecharger OTL
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    AdwCleaner est adapté à la situation.
    0
  7. mimie42610 Messages postés 14 Statut Membre
     
    ok je vais le faire merci bonne soirée
    0
  8. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    Je voudrais un nouveau rapport OTL.
    0
  9. mimie42610 Messages postés 14 Statut Membre
     
    ok je mis active
    0
  10. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    C'est un rapport AdwCleaner.
    0
  11. mimie42610 Messages postés 14 Statut Membre
     
    vous m'avez dit de le telecharger :)
    0
  12. mimie42610 Messages postés 14 Statut Membre
     
    OTL est tres long et est entrain de se faire
    0
  13. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    --> Double-clique sur OTL pour le lancer.
    (Sous Vista/Win7/Win8, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)

    --> Sous l'onglet Personnalisation en bas de la fenêtre, copie-colle le texte en gras présent ci-dessous :

    :OTL
    IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.eo.st
    [2013/06/09 20:58:19 | 000,000,000 | ---D | M] ("Deals Plugin Extension") -- C:\Documents and Settings\Touati\Application Data\Mozilla\Firefox\Profiles\bqvf5hc6.default\extensions\extension21806@extension21806.com
    CHR - homepage: https://fr.ask.com/?l=dis&o=15506
    CHR - Extension: Deals Plugin Extension = C:\Documents and Settings\Touati\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\bbhgoadfgiandmaieopaphefbhcdpfaf\1.23.47_0\crossrider
    CHR - Extension: Deals Plugin Extension = C:\Documents and Settings\Touati\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\bbhgoadfgiandmaieopaphefbhcdpfaf\1.23.47_0\
    O4 - HKCU..\Run: [Updater21806.exe] C:\Documents and Settings\Touati\Local Settings\Application Data\Updater21806\Updater21806.exe (Innovative Apps)
    O4 - Startup: C:\Documents and Settings\Touati\Menu Démarrer\Programmes\Démarrage\Chat-Land Messenger.LNK = File not found
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
    O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab (Reg Error: Key error.)
    O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
    O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
    O20 - AppInit_DLLs: (C:\WINDOWS\system32\__c006A5D1.dat) - File not found
    O20 - Winlogon\Notify\awvtu: DllName - (C:\WINDOWS\system32\awvtu.dll) - File not found
    O20 - Winlogon\Notify\mljge: DllName - (C:\WINDOWS\system32\mljge.dll) - File not found
    O20 - Winlogon\Notify\mllji: DllName - (C:\WINDOWS\system32\mllji.dll) - File not found
    O20 - Winlogon\Notify\pmnlj: DllName - (C:\WINDOWS\system32\pmnlj.dll) - File not found
    [2013/06/09 20:58:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Touati\Local Settings\Application Data\Updater21806
    [2013/06/08 23:36:09 | 000,841,871 | ---- | C] (Iminent.com) -- C:\Documents and Settings\Touati\Local Settings\Application Data\IminentMinibar.exe
    [2013/06/08 23:36:07 | 000,635,596 | ---- | C] (PricePeep.com) -- C:\Documents and Settings\Touati\Local Settings\Application Data\PricePeep.exe
    [2013/06/09 16:08:16 | 000,000,676 | ---- | M] () -- C:\Documents and Settings\Touati\Bureau\Chat-Land Messenger.LNK
    [2013/06/09 16:08:16 | 000,000,054 | ---- | M] () -- C:\Documents and Settings\Touati\Bureau\Chat-Land_site_de_chat_et_de_rencontre_gratuit.Url
    [2013/06/08 23:38:51 | 000,000,688 | ---- | M] () -- C:\Documents and Settings\Touati\Menu Démarrer\Programmes\Démarrage\Chat-Land Messenger.LNK
    [2013/06/08 23:38:48 | 000,000,057 | ---- | C] () -- C:\Documents and Settings\Touati\Bureau\Telecharger-gratuit.Url
    FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\lrcsTube@hansanddeta.com: C:\Program Files\LyricsTube\FF\ [2013/06/08 23:36:17 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\LrcsTb@hansenapps.com: C:\Program Files\LyricsTube\FF\ [2013/06/08 23:36:17 | 000,000,000 | ---D | M]
    CHR - Extension: LyricsTube = C:\Documents and Settings\Touati\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\bebdghdpchfhbbmfeddkijldlpnkbjkk\1.114_0\
    O2 - BHO: (LyricsTube) - {B399EDE8-1525-458C-8DD9-31EADF632D06} - C:\Program Files\LyricsTube\lrcstube.dll (Hansen & Destar Apps)
    [2013/06/08 23:36:17 | 000,000,000 | ---D | C] -- C:\Program Files\LyricsTube
    [2013/06/10 01:21:23 | 000,000,358 | ---- | M] () -- C:\WINDOWS\tasks\LyricsTube Update.job

    :files
    C:\Documents and Settings\Touati\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\bbhgoadfgiandmaieopaphefbhcdpfaf

    :reg
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{29C7E8BE-FBD9-4D91-BC4F-B470C718D554}]
    [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\lrcsTube@hansanddeta.com]

    :commands
    [emptytemp]


    --> Puis clique sur le bouton Correction en haut de la fenêtre.

    --> Laisse le programme travailler, redémarre une fois le fix terminé.

    --> Poste le rapport qui s'affichera après redémarrage.
    0
  14. mimie42610 Messages postés 14 Statut Membre
     
    All processes killed
    ========== OTL ==========
    HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
    C:\Documents and Settings\Touati\Application Data\Mozilla\Firefox\Profiles\bqvf5hc6.default\extensions\extension21806@extension21806.com\skin folder moved successfully.
    C:\Documents and Settings\Touati\Application Data\Mozilla\Firefox\Profiles\bqvf5hc6.default\extensions\extension21806@extension21806.com\locale\en-US folder moved successfully.
    C:\Documents and Settings\Touati\Application Data\Mozilla\Firefox\Profiles\bqvf5hc6.default\extensions\extension21806@extension21806.com\locale folder moved successfully.
    C:\Documents and Settings\Touati\Application Data\Mozilla\Firefox\Profiles\bqvf5hc6.default\extensions\extension21806@extension21806.com\defaults\preferences folder moved successfully.
    C:\Documents and Settings\Touati\Application Data\Mozilla\Firefox\Profiles\bqvf5hc6.default\extensions\extension21806@extension21806.com\defaults folder moved successfully.
    C:\Documents and Settings\Touati\Application Data\Mozilla\Firefox\Profiles\bqvf5hc6.default\extensions\extension21806@extension21806.com\chrome\content\extensionCode folder moved successfully.
    C:\Documents and Settings\Touati\Application Data\Mozilla\Firefox\Profiles\bqvf5hc6.default\extensions\extension21806@extension21806.com\chrome\content\core folder moved successfully.
    C:\Documents and Settings\Touati\Application Data\Mozilla\Firefox\Profiles\bqvf5hc6.default\extensions\extension21806@extension21806.com\chrome\content\api folder moved successfully.
    C:\Documents and Settings\Touati\Application Data\Mozilla\Firefox\Profiles\bqvf5hc6.default\extensions\extension21806@extension21806.com\chrome\content folder moved successfully.
    C:\Documents and Settings\Touati\Application Data\Mozilla\Firefox\Profiles\bqvf5hc6.default\extensions\extension21806@extension21806.com\chrome folder moved successfully.
    C:\Documents and Settings\Touati\Application Data\Mozilla\Firefox\Profiles\bqvf5hc6.default\extensions\extension21806@extension21806.com folder moved successfully.
    Use Chrome's Settings page to change the HomePage.
    File C:\Documents and Settings\Touati\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\bbhgoadfgiandmaieopaphefbhcdpfaf\1.23.47_0\crossrider not found.
    File C:\Documents and Settings\Touati\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\bbhgoadfgiandmaieopaphefbhcdpfaf\1.23.47_0 not found.
    Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Updater21806.exe deleted successfully.
    C:\Documents and Settings\Touati\Local Settings\Application Data\Updater21806\Updater21806.exe moved successfully.
    C:\Documents and Settings\Touati\Menu Démarrer\Programmes\Démarrage\Chat-Land Messenger.LNK moved successfully.
    Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
    Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
    Starting removal of ActiveX control {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}\ not found.
    Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}\ not found.
    Starting removal of ActiveX control {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully.
    Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
    Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
    Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\WINDOWS\system32\__c006A5D1.dat deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\awvtu\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\mljge\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\mllji\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\pmnlj\ deleted successfully.
    C:\Documents and Settings\Touati\Local Settings\Application Data\Updater21806 folder moved successfully.
    C:\Documents and Settings\Touati\Local Settings\Application Data\IminentMinibar.exe moved successfully.
    C:\Documents and Settings\Touati\Local Settings\Application Data\PricePeep.exe moved successfully.
    File C:\Documents and Settings\Touati\Bureau\Chat-Land Messenger.LNK not found.
    C:\Documents and Settings\Touati\Bureau\Chat-Land_site_de_chat_et_de_rencontre_gratuit.Url moved successfully.
    File C:\Documents and Settings\Touati\Menu Démarrer\Programmes\Démarrage\Chat-Land Messenger.LNK not found.
    C:\Documents and Settings\Touati\Bureau\Telecharger-gratuit.Url moved successfully.
    Registry value HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\lrcsTube@hansanddeta.com deleted successfully.
    C:\Program Files\LyricsTube\FF\chrome\content folder moved successfully.
    C:\Program Files\LyricsTube\FF\chrome folder moved successfully.
    C:\Program Files\LyricsTube\FF folder moved successfully.
    Registry value HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\LrcsTb@hansenapps.com deleted successfully.
    File C:\Program Files\LyricsTube\FF\ not found.
    File C:\Documents and Settings\Touati\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\bebdghdpchfhbbmfeddkijldlpnkbjkk\1.114_0 not found.
    Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B399EDE8-1525-458C-8DD9-31EADF632D06}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B399EDE8-1525-458C-8DD9-31EADF632D06}\ deleted successfully.
    C:\Program Files\LyricsTube\lrcstube.dll moved successfully.
    C:\Program Files\LyricsTube folder moved successfully.
    C:\WINDOWS\tasks\LyricsTube Update.job moved successfully.
    ========== FILES ==========
    File\Folder C:\Documents and Settings\Touati\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\bbhgoadfgiandmaieopaphefbhcdpfaf not found.
    ========== REGISTRY ==========
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{29C7E8BE-FBD9-4D91-BC4F-B470C718D554}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{29C7E8BE-FBD9-4D91-BC4F-B470C718D554}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\lrcsTube@hansanddeta.com\ deleted successfully.
    ========== COMMANDS ==========

    [EMPTYTEMP]

    User: All Users

    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 33170 bytes
    ->Flash cache emptied: 83 bytes

    User: LocalService
    ->Temp folder emptied: 66016 bytes
    ->Temporary Internet Files folder emptied: 13022053 bytes

    User: NetworkService
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 32902 bytes

    User: Touati
    ->Temp folder emptied: 401127187 bytes
    ->Temporary Internet Files folder emptied: 120649716 bytes
    ->Java cache emptied: 60818063 bytes
    ->FireFox cache emptied: 66871499 bytes
    ->Google Chrome cache emptied: 384284995 bytes
    ->Flash cache emptied: 425182 bytes

    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 3211881 bytes
    %systemroot%\System32 .tmp files removed: 3892988 bytes
    %systemroot%\System32\dllcache .tmp files removed: 0 bytes
    %systemroot%\System32\drivers .tmp files removed: 0 bytes
    Windows Temp folder emptied: 43063619 bytes
    %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 237265945 bytes
    %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33726 bytes
    RecycleBin emptied: 2962713628 bytes

    Total Files Cleaned = 4 098,00 mb

    OTL by OldTimer - Version 3.2.69.0 log created on 06102013_023658

    Files\Folders moved on Reboot...
    File\Folder C:\WINDOWS\temp\_avast5_\Webshlock.txt not found!

    PendingFileRenameOperations files...

    Registry entries deleted on Reboot...
    0
  15. mimie42610 Messages postés 14 Statut Membre
     
    merci enorment destrio :) j'ai plus chat land et compagnie
    0
  16. Destrio5 Messages postés 99820 Date d'inscription   Statut Modérateur Dernière intervention   10 324
     
    "Aucune action effectuée."

    --> As-tu supprimé les infections trouvées par Malwarebytes Anti-Malware ?
    0