Delta Search

Résolu
melin Messages postés 204 Statut Membre -  
g3n-h@ckm@n Messages postés 14350 Statut Membre -
Bonjour,



Je me retrouve avec le fameux Delta Search que j'ai pu supprimer de IE mais impossible de l'enlever de Mozilla.

Quelqu'un peut-il m'aider ?

Cordialement

12 réponses

  1. melin Messages postés 204 Statut Membre 2
     
    J'aurais du commencer par là :
    un coup d'Adwcleaner et Delta Search a disparu !
    0
  2. g3n-h@ckm@n Messages postés 14350 Statut Membre 949
     
    salut poste ton rapport d'adwcleaner

    ensuite , il en reste , fais ceci :

    http://security-helpzone.com/gen-hackman/tutos-canneds/junkware-removal-tool/
    0
  3. melin Messages postés 204 Statut Membre 2
     
    0
    1. melin Messages postés 204 Statut Membre 2
       
      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      Junkware Removal Tool (JRT) by Thisisu
      Version: 5.4.6 (08.15.2013:1)
      OS: Windows 7 Enterprise x86
      Ran by MARC on 16/08/2013 at 9:50:08,01
      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




      ~~~ Services



      ~~~ Registry Values

      Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs



      ~~~ Registry Keys

      Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
      Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}



      ~~~ Files



      ~~~ Folders

      Successfully deleted: [Folder] "C:\ProgramData\browserdefender"
      Successfully deleted: [Folder] "C:\Users\MARC\Qtrax"



      ~~~ FireFox

      Successfully deleted: [File] C:\Users\MARC\AppData\Roaming\mozilla\firefox\profiles\lvla1da4.default\searchplugins\babylon.xml
      Emptied folder: C:\Users\MARC\AppData\Roaming\mozilla\firefox\profiles\lvla1da4.default\minidumps [106 files]



      ~~~ Event Viewer Logs were cleared





      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      Scan was completed on 16/08/2013 at 9:53:09,29
      End of JRT log
      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      0
  4. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  5. g3n-h@ckm@n Messages postés 14350 Statut Membre 949
     
    j'ai demandé le rapport après suppression des eelements trouvés
    0
  6. g3n-h@ckm@n Messages postés 14350 Statut Membre 949
     
    ATTENTION !!! : Script personnalisé pour cette machine uniquement , ne pas reproduire !!

    si tu as XP => double clique
    si tu as Vista ou windows 7 => clic droit "executer en tant que...."


    sur OTL.exe pour le lancer.

    ▶Copie la liste qui se trouve en gras ci-dessous,

    ▶ colle-la dans la zone sous "Personnalisation" :


    :processes
    explorer.exe
    iexplore.exe
    firefox.exe
    msnmsgr.exe
    Teatimer.exe

    :OTL
    IE - HKCU\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
    FF - user.js - File not found
    O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
    [2013/08/15 09:30:27 | 000,000,000 | ---D | C] -- C:\Windows\System32\Extensions
    [2013/08/15 09:30:26 | 000,000,000 | ---D | C] -- C:\Windows\System32\searchplugins
    [2013/08/16 08:37:10 | 000,000,098 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat
    [2013/08/08 19:18:50 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox.bak

    :Reg
    [-HKEY_CURRENT_USER\Software\Qtrax]
    [-HKEY_LOCAL_MACHINE\Software\Eset]

    :commands
    [emptytemp]


    ▶ Clique sur "Correction" pour lancer la suppression.

    ▶ Poste le rapport qui logiquement s'ouvrira tout seul en fin de travail appres le redemarrage.

    0
    1. melin Messages postés 204 Statut Membre 2
       
      ========== COMMANDS ==========

      [EMPTYTEMP]

      User: All Users

      User: Default
      ->Temp folder emptied: 0 bytes
      ->Temporary Internet Files folder emptied: 0 bytes

      User: Default User
      ->Temp folder emptied: 0 bytes
      ->Temporary Internet Files folder emptied: 0 bytes

      User: MARC
      ->Temp folder emptied: 43300653 bytes
      ->Temporary Internet Files folder emptied: 151313431 bytes
      ->FireFox cache emptied: 18736294 bytes
      ->Flash cache emptied: 2981 bytes

      User: Public

      User: UpdatusUser
      ->Temp folder emptied: 0 bytes
      ->Temporary Internet Files folder emptied: 0 bytes

      %systemdrive% .tmp files removed: 0 bytes
      %systemroot% .tmp files removed: 0 bytes
      %systemroot%\System32 .tmp files removed: 0 bytes
      %systemroot%\System32\drivers .tmp files removed: 0 bytes
      Windows Temp folder emptied: 11292797 bytes
      %systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33298 bytes
      RecycleBin emptied: 58014413 bytes

      Total Files Cleaned = 270,00 mb


      OTL by OldTimer - Version 3.2.69.0 log created on 08162013_165345

      Files\Folders moved on Reboot...

      PendingFileRenameOperations files...

      Registry entries deleted on Reboot...
      0
  7. g3n-h@ckm@n Messages postés 14350 Statut Membre 949
     
    je peux l'avoir entier ?
    0
    1. melin Messages postés 204 Statut Membre 2
       
      All processes killed
      ========== PROCESSES ==========
      No active process named explorer.exe was found!
      No active process named iexplore.exe was found!
      No active process named firefox.exe was found!
      No active process named msnmsgr.exe was found!
      No active process named Teatimer.exe was found!
      ========== OTL ==========
      HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
      Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck not found.
      Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
      Folder C:\Windows\System32\Extensions\ not found.
      Folder C:\Windows\System32\searchplugins\ not found.
      File C:\Windows\DeleteOnReboot.bat not found.
      Folder C:\Program Files\Mozilla Firefox.bak\ not found.
      ========== REGISTRY ==========
      Registry key HKEY_CURRENT_USER\Software\Qtrax\ not found.
      Registry key HKEY_LOCAL_MACHINE\Software\Eset\ not found.
      ========== COMMANDS ==========

      [EMPTYTEMP]

      User: All Users

      User: Default
      ->Temp folder emptied: 0 bytes
      ->Temporary Internet Files folder emptied: 0 bytes

      User: Default User
      ->Temp folder emptied: 0 bytes
      ->Temporary Internet Files folder emptied: 0 bytes

      User: MARC
      ->Temp folder emptied: 703 bytes
      ->Temporary Internet Files folder emptied: 855636 bytes
      ->FireFox cache emptied: 17768560 bytes
      ->Flash cache emptied: 492 bytes

      User: Public

      User: UpdatusUser
      ->Temp folder emptied: 0 bytes
      ->Temporary Internet Files folder emptied: 0 bytes

      %systemdrive% .tmp files removed: 0 bytes
      %systemroot% .tmp files removed: 0 bytes
      %systemroot%\System32 .tmp files removed: 0 bytes
      %systemroot%\System32\drivers .tmp files removed: 0 bytes
      Windows Temp folder emptied: 1858 bytes
      RecycleBin emptied: 0 bytes

      Total Files Cleaned = 18,00 mb


      OTL by OldTimer - Version 3.2.69.0 log created on 08162013_201401

      Files\Folders moved on Reboot...

      PendingFileRenameOperations files...

      Registry entries deleted on Reboot...
      0
  8. g3n-h@ckm@n Messages postés 14350 Statut Membre 949
     
    plus de soucis ?
    0
  9. melin Messages postés 204 Statut Membre 2
     
    Tout à l'air de bien se passer maintenant.
    0
  10. g3n-h@ckm@n Messages postés 14350 Statut Membre 949
     
    ok fais le menage final :
    http://security-helpzone.com/gen-hackman/nettoyage-en-fin-de-desinfection/

    ¤¤¤¤¤¤¤¤¤¤_Pre_Scan_Concept_¤¤¤¤¤¤¤¤¤¤
    Windows 8 => meme flop que Vista X 10...Tiranium Antivirus Attention => Fake
    0
    1. melin Messages postés 204 Statut Membre 2
       
      Bonjour,

      Merci beaucoup pour ton aide.

      Cordialement
      0
    2. g3n-h@ckm@n Messages postés 14350 Statut Membre 949
       
      :)

      tu pouras mettre le sujet en résolu ensuite :)
      0