je pense avoir installé un virus Résolu/Fermé

Question

bonjour quelqu'un m'a envoyé un lien, j'ai téléchargé et installé, j'ai des raisons de penser que cest un virus espion, comment je peux m'en assurer svp ?

pardon pour le lien cetait stupid je suis un peu stressé la

Utilisateur anonyme · Answer

Bonsoir

Télécharge Malwaresbytes anti malware ici  
https://www.malwarebytes.com/
 
* Installe le (choisis bien "français" ; ne modifie pas les paramètres d'installe ) et  mets le à jour .   

* Potasse le tuto pour te familiariser avec le prg : 

https://forum.pcastuces.com/sujet.asp?f=31&s=3 

(cela dis, il est très simple d'utilisation). 

relance Malwaresbytes en suivant scrupuleusement ces consignes : 

! Déconnecte toi et ferme toutes applications en cours ! 

* Lance Malwarebyte's.   Sous Vista ;Seven ou Windows 8   (clic droit de la souris « exécuter en tant que administrateur »)

*Procèdes à une mise à jour

*Fais un examen dit "Rapide"

--> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ). 
--> à la fin tu cliques sur  "Afficher les résultats" "   . 
--> Vérifie que tous les objets infectés soient validés, puis  clique sur " supprimer la sélection "   . 

 Note   : si il faut redémarrer ton PC pour finir le nettoyage, fais le ! 


 Poste le rapport sauvegardé après la suppression des objets infectés   (dans l'onglet "rapport/log"de Malwaresbytes, le dernier en date)

@+

ant · Answer

dans le fichier j'ai trouvé ces lignes de codes dans un fichier appelé msconfig ça veut dire quoi tout ça ? - - - - - - - - - - - - - - - - - -

-

- ]]> - - -

-

]]> - - -

-

- ]]> - - -

-

- ]]> - - -

-

- ]]> - - -

-

- ]]> - - -

-

- ]]> - - -

-

]]> - - -

-

- ]]> - - -

-

- ]]> - - -

-

- ]]> - - -

-

- ]]> - - -

-

- ]]> - - -

-

- ]]> - - -

-

- ]]> - ]]> - ]]> - ]]> - ]]> - ]]> - ]]> - ]]> - ]]> - ]]> - ]]> - ]]> - ]]> - ]]> - ]]> - ]]> - -

-

Utilisateur anonyme · Answer

Re

ce n'est pas le rapport attendu !!!

@+

ant · Answer

s'il te plait aide moi, ou dis moi ou poser ma question

ant · Answer

bonjour pardon javais pas vu ta réponce, merci beacoup de m'aider, désolé je suis super stressé la, j'ai deja malware bytes en anglais

Utilisateur anonyme · Answer

Re

J'attends ce rapport de suppression

Merci

@+

ant · Answer

voici le rapport

Malwarebytes Anti-Malware (PRO) 1.75.0.1300
www.malwarebytes.org

Database version: v2013.11.30.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Bear :: CARILINK [administrator]

Protection: Enabled

30/11/2013 03:59:59
mbam-log-2013-11-30 (03-59-59).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 229642
Time elapsed: 1 minute(s), 13 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 6
HKCR\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899} (PUP.Optional.WebCake.A) -> Quarantined and deleted successfully.
HKCR\Interface\{DF84E609-C3A4-49CB-A160-61767DAF8899} (PUP.Optional.WebCake.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} (PUP.Optional.Qone8) -> Quarantined and deleted successfully.
HKCU\Software\1ClickDownload (PUP.Optional.1ClickDownload.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\qvo6Software (PUP.Optional.qvo6.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} (PUP.Optional.Qone8) -> Quarantined and deleted successfully.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 5
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (Hijack.StartPage) -> Bad: (http://www.qvo6.com/?utm_source=b&utm_medium=ild&from=ild&uid=CorsairXForceXGS_1246791400009741037D&ts=1370021213) Good: (http://www.google.com) -> Quarantined and repaired successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Page_URL (Hijack.StartPage) -> Bad: (http://www.qvo6.com/?utm_source=b&utm_medium=ild&from=ild&uid=CorsairXForceXGS_1246791400009741037D&ts=1370021213) Good: (http://www.google.com) -> Quarantined and repaired successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Page_URL (Hijack.StartPage) -> Bad: (http://www.qvo6.com/?utm_source=b&utm_medium=ild&from=ild&uid=CorsairXForceXGS_1246791400009741037D&ts=1370021213) Good: (http://www.google.com) -> Quarantined and repaired successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (Hijack.StartPage) -> Bad: (http://www.qvo6.com/?utm_source=b&utm_medium=ild&from=ild&uid=CorsairXForceXGS_1246791400009741037D&ts=1370021213) Good: (http://www.google.com) -> Quarantined and repaired successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes|DefaultScope (PUP.Optional.Qone8) -> Bad: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}) Good: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}) -> Quarantined and repaired successfully.

Folders Detected: 20
C:\Users\Bear\AppData\Roaming\Desk 365 (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\1 (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\3 (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\35 (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\36 (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\39 (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\4 (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\41 (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\42 (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\desk_bkg (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\promote (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\sysicons (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\wp (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Desk 365 (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Local\Temp\ct3288691 (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Local\Temp\ct3297861 (PUP.Optional.Conduit.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\hdvidcodec.com (PUP.Optional.HDVidCodec.A) -> Quarantined and deleted successfully.

Files Detected: 93
C:\Users\Bear\AppData\Roaming\eIntaller\EB0C8C5C43454e74B60BD83A1B862327\Desk365.exe (PUP.Optional.E7) -> Quarantined and deleted successfully.
C:\$Recycle.Bin\S-1-5-21-3906413075-3106456544-3094034350-1000\$RG29OZ0.exe (PUP.Optional.Installex) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Local\Temp
sn8401.tmp\elexinst.exe (PUP.Optional.Elex.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Local\Temp
sn8401.tmp\WBCSetup.exe (PUP.Optional.WebCake.A) -> Quarantined and deleted successfully.
C:\Users\Bear\Downloads\codec_pack_645877_ch.exe (PUP.BundleInstaller.DW) -> Quarantined and deleted successfully.
C:\Users\Bear\Downloads\le rapport campbell pdf.exe (PUP.Optional.Installex) -> Quarantined and deleted successfully.
C:\Users\Bear\Downloads\Rambo_III_[1988]-keltz.avi.exe (PUP.BundleInstaller.DW) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\promote.xml (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\accelerate (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\desk_bkg_list.xml (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\desk_list.xml (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\desk_settings.ini (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\firstrun (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\process_mgr.xml (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\1\angrybirds.db (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\1\angrybirds.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\3\BigFarm.db (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\3\BigFarm.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\35\Gmail.db (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\35\Gmail.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\36\Outlook.db (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\36\Outlook.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\39\ESPN.db (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\39\ESPN.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\4\Empire.db (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\4\Empire.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\41\gcalendar.db (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\41\gcalendar.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\42\pulse.db (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\app\config\42\pulse.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_1.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_2.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_3.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_4.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_5.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_default.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\337_7c9140b13c049fd26989f7fa25b77cb1_48_48.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\angrybirds_00ff92c12703baaf0130d6aec427d047_48_48.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\Barbie_00a67ff4ef657679a6c88553135d62ad_48_48.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\BigFarm_de933b0e5218a4db24bebe3d55ed3558_48_48.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\chrome_49c27705d2f62a4f6b2c6e949bb0c503.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\chrome_49c27705d2f62a4f6b2c6e949bb0c503_48_48.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\Empire_22b42f57d1c467841280810e218d5510_48_48.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\ESPN_a7b078f5f5f5b87efcef66ab5783cf9d_48_48.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\Facebook_aab07bc79cf599b25c0110f32d46a3ef_48_48.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\gcalendar_50b3e3c5fc202f0cfcae8032b2465c1b_48_48.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\Gmail_731b6d011bd9f67463a916a496775935_48_48.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\Google_60d75cb277f0c452fa60dba8350caf65_48_48.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\iexplore_30c9b530b79903e5b3e36bdbdcb97626.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\iexplore_30c9b530b79903e5b3e36bdbdcb97626_48_48.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\Mario_52934d81761dc31187a93a3a0be7fecc_48_48.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\Outlook_6f817b67fa6af1a9c8abfa3813a8595c_48_48.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\pulse_b5a242da04cc06eacd02b1ca41e3583c_48_48.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\sys_computer_48_48.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\sys_control_panel_48_48.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\sys_my_documents_48_48.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\Twitter_ebddd85ec04b7b94a2b2e97b73a90a4a_48_48.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\icons\Youtube_bf18fdfc4aefd6417a8bacae4be5b415_48_48.png (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\promote\337.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\promote\337_7c9140b13c049fd26989f7fa25b77cb1.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\promote\barbie.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\promote\Barbie_00a67ff4ef657679a6c88553135d62ad.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\promote\facebook.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\promote\Facebook_aab07bc79cf599b25c0110f32d46a3ef.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\promote\GameCenter.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\promote\google.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\promote\Google_60d75cb277f0c452fa60dba8350caf65.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\promote\mario.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\promote\Mario_52934d81761dc31187a93a3a0be7fecc.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\promote	witter.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\promote\Twitter_ebddd85ec04b7b94a2b2e97b73a90a4a.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\promote\v9.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\promote\youtube.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\promote\Youtube_bf18fdfc4aefd6417a8bacae4be5b415.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\sysicons\imageres.dll_104.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\sysicons\imageres.dll_107.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\sysicons\shell32.dll_21.ico (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\wp0.jpg (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\wp1.jpg (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\wp2.jpg (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\wp3.jpg (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\wp4.jpg (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\wp5.jpg (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\wp6.jpg (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\wp7.jpg (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\wp8.jpg (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Users\Bear\AppData\Roaming\Desk 365\wp9.jpg (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Desk 365\promote.xml (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Desk 365\desk_bkg_list.xml (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Desk 365\desk_list.xml (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Desk 365\desk_settings.ini (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Desk 365\process_mgr.xml (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.
C:\Program Files (x86)\Desk 365ecent.xml (PUP.Optional.Desk365.A) -> Quarantined and deleted successfully.

(end)

Utilisateur anonyme · Answer

Re

Télécharge AdwCleaner ( d'Xplode ) sur ton bureau. 
Lance le, clique sur [Scanner]   puis patiente le temps du scan. 
Une fois le scan terminé clique sur le bouton  [Nettoyer] 
Patiente durant le nettoyage. Lis le message qui apparaît, puis clique sur  Ok  . Le PC va être redémarré automatiquement et le rapport s'ouvrira à la fin du redémarrage. 
Poste le rapport

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

ant · Answer

# AdwCleaner v3.013 - Report created 30/11/2013 at 04:16:02
# Updated 24/11/2013 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Bear - CARILINK
# Running from : C:\Users\Bear\Downloads\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\eSafe
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZipper
Folder Deleted : C:\Program Files (x86)\WinZipper
Folder Deleted : C:\Program Files (x86)\Yontoo
Folder Deleted : C:\Users\Bear\AppData\LocalLow\boost_interprocess
Folder Deleted : C:\Users\Bear\AppData\Roaming\eIntaller
Folder Deleted : C:\Users\Bear\AppData\Roaming\WinZipper
File Deleted : C:\END
File Deleted : C:\Windows\System32\Tasks\Desk 365 RunAsStdUser

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\Users\Bear\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
Shortcut Disinfected : C:\Users\Bear\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\Bear\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Shortcut Disinfected : C:\Users\Bear\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Bear\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\kpkbnefaikfaeadgidhpoanckoiaheli
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\DeskSvc
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0AFD55C8-ADF8-4A33-A6E1-DEDB7A36AEB4}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKLM\Software\Desksvc
Key Deleted : HKLM\Software\hdcode
Key Deleted : [x64] HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar
Key Deleted : [x64] HKLM\SOFTWARE\Tarma Installer

***** [ Browsers ] *****

-\ Internet Explorer v9.0.8112.16483

Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\ Mozilla Firefox v

-\ Google Chrome v31.0.1650.57

[ File : C:\Users\Bear\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [4263 octets] - [30/11/2013 04:14:05]
AdwCleaner[S0].txt - [3226 octets] - [30/11/2013 04:16:02]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3286 octets] ##########

Utilisateur anonyme · Answer

Re

Pour de plus amples informations, fait ceci stp

Ouvre ce lien et télécharge ZHPDiag de Nicolas Coolman : 

https://www.zebulon.fr/telechargements/securite/systeme/zhpdiag.html

Ou

https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/

en bas de la page ZHP avec un numéro de version.
 
Une fois le téléchargement achevé, 

Double-clique sur l'icône pour lancer le programme.  Sous Vista ; Seven ou Windows 8 clic droit «  exécuter en tant que administrateur » 

 
Dans la fenêtre ZHPDiag qui vient de s'ouvrir,  clique sur "Configurer"

Clique sur  la loupe  en bas à gauche avec le signe plus   pour lancer l'analyse.


Laisse l'outil travailler, il peut être assez long. 

Un rapport s'ouvre. Ce rapport se trouve également sur ton bureau 

Pour transmettre le rapport clique sur ce lien: 
http://pjjoint.malekal.com/

Si problème utilise un des suivants

https://forums-fec.be/upload 
 https://www.cjoint.com/


Regarde sur le bureau
 
Sélectionne le fichier ZHPDiag.txt. 

Clique sur "Cliquez ici pour déposer le fichier". 

Un lien de cette forme : 

http://www.cijoint.com/cjlink.php?file=cj200905/cijSKAP5fU.txt 

est ajouté dans la page. 

Copie ce lien dans ta réponse.

Merci

@+

ant · Answer

le programme se bloque à 1% et ne réponds plus, quand je le ferme une fenetre s'ouvre et dit que le programme a put etre mal installé, il me propose de le reinstaller avec les parametres recommandés, ce que je fais mais ça recommence avec les meme problemes

ant · Answer

je n'ai pas trouvé la loupe, j'ai rechercher et configurer quand j'ouvre le programme

ant · Answer

pardon c'est ma faute j'ai trouvé, désolé (ça ne marche quand meme pas et ça fait la meme chose quand je clique sur la loupe)

ant · Answer

j'ai envoyé le rapport avec le site

ant · Answer

voici le lien sur le site de partage ou j'ai uploadé le report 

http://pjjoint.malekal.com/files.php?id=ZHPDiag_20131130_d14g8n8e8w9

ant · Answer

comment dois-je faire pour reinstaller un windows clean ?

Utilisateur anonyme · Answer

Bonjour

Tu reprends ZHPDiag mais en mode sans echec avec prise en charge reseau;merci

@+

ant · Answer

excuse moi, j'ai envoyé le rapport, entre temps j'ai fais une reinstallation clean de windows

Utilisateur anonyme · Answer

Re

Ton problème est donc résolu?

@+

ant · Answer

oui, merci beaucoup de tes réponses rapides et efficaces, c'est vraiment génial de ta part

Je pense avoir installé un virus

20 réponses

Discussions similaires