Desinstallation right surf

Résolu
Bonjour,
je souhaite désinstaller right surf de mon ordinateur svp
j ai suivi la procédure du site malekal.com dont voici les liens des 2 rapports

https://pjjoint.malekal.com/files.php?id=20140204_r11n7y5p9q12
https://pjjoint.malekal.com/files.php?id=20140204_s13d8c9p158

d avance merci de m'aider à désinstaller ce virus
:)

8 réponses

  1. Modérateur
    Salut,

    je regarde, tu as utilisé AdwCleaner ?
    1. bonjour

      Merci pour votre aide oui j ai déjà utilisé adw cleaner et effectué un nettoyage complet avant OTL le dossier rightsurf étais toujours présent après le nettoyage de adw
      1. Modérateur
        regarde si rightsurf ne se désinstalle pas depuis programmes et fonctionnalités du panneau de configuration.

        Relance OTL.
        o sous Personnalisation (Custom Scan), copie_colle le contenu du cadre ci dessous (bien prendre :OTL en début).
        Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:

        :OTL
        SRV - [2014/02/01 10:46:02 | 000,103,200 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\RightSurf\bin\utilRightSurf.exe -- (Util RightSurf)
        SRV - [2014/01/29 23:13:48 | 000,103,200 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\RightSurf\updateRightSurf.exe -- (Update RightSurf)
        DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys -- (esgiguard)
        O2 - BHO: (RightSurf) - {88be1aa9-6740-461c-9e3e-f35eb8fa741c} - C:\Program Files (x86)\RightSurf\RightSurfbho.dll File not found
        [2014/01/31 23:34:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RightSurf
        [2014/01/07 21:59:49 | 000,000,000 | ---D | C] -- C:\Users\STAN\AppData\Roaming\newnext.me
        [2014/01/07 21:59:49 | 000,000,000 | ---D | C] -- C:\Users\STAN\AppData\Local\genienext
        [2014/01/07 21:59:48 | 000,000,000 | ---D | C] -- C:\Users\STAN\Documents\Mobogenie
        [2014/01/07 21:59:48 | 000,000,000 | ---D | C] -- C:\Users\STAN\AppData\Local\Mobogenie
        [2014/01/07 21:59:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Jump Flip
        :Commands
        [reboot]

        * poste le rapport ici

        1. Modérateur
          Relance OTL.
          o sous Personnalisation (Custom Scan), copie_colle le contenu du cadre ci dessous (bien prendre :OTL en début).
          Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:

          :OTL
          O4 - HKU\S-1-5-21-2219473226-3065652129-3038185199-1001..\Run: [NextLive] C:\Windows\SysWOW64\rundll32.exe "C:\Users\STAN\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l File not found
          [2014/02/04 11:49:17 | 000,000,000 | ---D | C] -- C:\Users\STAN\AppData\Roaming\newnext.me
          :commands
          [emptytemp]
          [emptyflash]
          [resethosts]
          [reboot]

          * poste le rapport ici

          1. BONJOUR
            merci pour votre aide j ai effectué la manipulation demandé

            je vous joint le rapport Merci

            All processes killed
            ========== OTL ==========
            Registry value HKEY_USERS\S-1-5-21-2219473226-3065652129-3038185199-1001\Software\Microsoft\Windows\CurrentVersion\Run\\NextLive deleted successfully.
            C:\Users\STAN\AppData\Roaming\newnext.me folder moved successfully.
            ========== COMMANDS ==========

            [EMPTYTEMP]

            User: All Users

            User: Default
            ->Temp folder emptied: 0 bytes
            ->Temporary Internet Files folder emptied: 0 bytes
            ->Flash cache emptied: 57472 bytes

            User: Default User
            ->Temp folder emptied: 0 bytes
            ->Temporary Internet Files folder emptied: 0 bytes
            ->Flash cache emptied: 0 bytes

            User: Public

            User: STAN
            ->Temp folder emptied: 53320574 bytes
            ->Temporary Internet Files folder emptied: 86664465 bytes
            ->Java cache emptied: 1 bytes
            ->Google Chrome cache emptied: 0 bytes
            ->Flash cache emptied: 1576 bytes

            User: UpdatusUser
            ->Temp folder emptied: 0 bytes
            ->Temporary Internet Files folder emptied: 0 bytes
            ->Flash cache emptied: 41620 bytes

            %systemdrive% .tmp files removed: 0 bytes
            %systemroot% .tmp files removed: 1901275 bytes
            %systemroot%\System32 .tmp files removed: 0 bytes
            %systemroot%\System32 (64bit) .tmp files removed: 0 bytes
            %systemroot%\System32\drivers .tmp files removed: 0 bytes
            Windows Temp folder emptied: 86841 bytes
            %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 85828 bytes
            RecycleBin emptied: 0 bytes

            Total Files Cleaned = 136,00 mb

            [EMPTYFLASH]

            User: All Users

            User: Default
            ->Flash cache emptied: 0 bytes

            User: Default User
            ->Flash cache emptied: 0 bytes

            User: Public

            User: STAN
            ->Flash cache emptied: 0 bytes

            User: UpdatusUser
            ->Flash cache emptied: 0 bytes

            Total Flash Files Cleaned = 0,00 mb

            C:\Windows\System32\drivers\etc\Hosts moved successfully.
            HOSTS file reset successfully

            OTL by OldTimer - Version 3.2.69.0 log created on 02042014_182647

            Files\Folders moved on Reboot...
            C:\Users\STAN\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
            C:\Users\STAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\4A72F430-B40C-4D36-A068-CE33ADA5ADF9.dat moved successfully.
            C:\Users\STAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QRLQ9C35\likebox[1].htm moved successfully.
            C:\Users\STAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D109FDOB\affich-29641772-desinstallation-right-surf[1].htm moved successfully.
            C:\Users\STAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9OWC1DNF\b9QBgL0iMZfDSpmcXcE8nJTpJ4fOLLwmHp8vl0kIMg4[1].eot moved successfully.
            C:\Users\STAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9OWC1DNF\follow_button.1387492107[1].htm moved successfully.
            C:\Users\STAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9OWC1DNF\Zd2E9abXLFGSr9G3YK2MsG8ITcfo9NwJpvZiO7_FxEg[1].eot moved successfully.
            C:\Users\STAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
            File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.
            File move failed. C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.

            PendingFileRenameOperations files...

            Registry entries deleted on Reboot...