desinstallation right surf Résolu/Fermé

Question

Bonjour, 
je souhaite désinstaller right surf de mon ordinateur svp
j ai suivi la procédure du site malekal.com dont voici les liens des 2 rapports

https://pjjoint.malekal.com/files.php?id=20140204_r11n7y5p9q12
https://pjjoint.malekal.com/files.php?id=20140204_s13d8c9p158

d avance merci de m'aider à désinstaller ce virus
:)
 


Configuration: Windows 7 / Mozilla 11.0

Malekal_morte- · Answer

Salut,

je regarde, tu as utilisé AdwCleaner ?

stan312 · Answer

bonjour

Merci pour votre aide oui j ai déjà utilisé adw cleaner  et effectué un nettoyage complet avant OTL le dossier rightsurf étais toujours présent après le nettoyage de adw

Malekal_morte- · Answer

regarde si rightsurf ne se désinstalle pas depuis programmes et fonctionnalités du panneau de configuration.




Relance OTL. 
o sous Personnalisation (Custom Scan), copie_colle le contenu du cadre ci dessous (bien prendre :OTL en début).
Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:  

:OTL
SRV - [2014/02/01 10:46:02 | 000,103,200 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\RightSurf\bin\utilRightSurf.exe -- (Util RightSurf)  
SRV - [2014/01/29 23:13:48 | 000,103,200 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\RightSurf\updateRightSurf.exe -- (Update RightSurf) 
DRV:[b]64bit:[/b] - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys -- (esgiguard)  
O2 - BHO: (RightSurf) - {88be1aa9-6740-461c-9e3e-f35eb8fa741c} - C:\Program Files (x86)\RightSurf\RightSurfbho.dll File not found  
[2014/01/31 23:34:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RightSurf  
 [2014/01/07 21:59:49 | 000,000,000 | ---D | C] -- C:\Users\STAN\AppData\Roaming
ewnext.me  
 [2014/01/07 21:59:49 | 000,000,000 | ---D | C] -- C:\Users\STAN\AppData\Local\genienext  
 [2014/01/07 21:59:48 | 000,000,000 | ---D | C] -- C:\Users\STAN\Documents\Mobogenie  
 [2014/01/07 21:59:48 | 000,000,000 | ---D | C] -- C:\Users\STAN\AppData\Local\Mobogenie  
 [2014/01/07 21:59:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Jump Flip
:Commands
[reboot]

* poste le rapport ici

stan312 · Answer

Bonjour 

je fais suite à votre réponse

1/rightsurf n apparait pas dans ajout suppression de programmes
2/après avoir relancer OTL a l aide de votre fix le dossier rightsurf n apparait plus dans le disque dur

je vous joint le nouveau rapport d OTL

https://pjjoint.malekal.com/files.php?id=20140204_h5w11n10g12i14

D'avance merci pour votre aide

cordialement

Malekal_morte- · Answer

Relance OTL. 
o sous Personnalisation (Custom Scan), copie_colle le contenu du cadre ci dessous (bien prendre :OTL en début).
Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:  

:OTL
O4 - HKU\S-1-5-21-2219473226-3065652129-3038185199-1001..\Run: [NextLive] C:\Windows\SysWOW64undll32.exe "C:\Users\STAN\AppData\Roaming
ewnext.me
engine.dll",EntryPoint -m l File not found
[2014/02/04 11:49:17 | 000,000,000 | ---D | C] -- C:\Users\STAN\AppData\Roaming
ewnext.me
:commands
[emptytemp] 
[emptyflash] 
[resethosts]
[reboot]

* poste le rapport ici

stan312 · Answer

BONJOUR
merci pour votre aide j ai effectué la manipulation demandé

je vous joint le rapport Merci 

All processes killed
========== OTL ==========
Registry value HKEY_USERS\S-1-5-21-2219473226-3065652129-3038185199-1001\Software\Microsoft\Windows\CurrentVersion\Run\NextLive deleted successfully.
C:\Users\STAN\AppData\Roaming
ewnext.me folder moved successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 57472 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Public
 
User: STAN
->Temp folder emptied: 53320574 bytes
->Temporary Internet Files folder emptied: 86664465 bytes
->Java cache emptied: 1 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 1576 bytes
 
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 41620 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1901275 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 86841 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 85828 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 136,00 mb
 
 
[EMPTYFLASH]
 
User: All Users
 
User: Default
->Flash cache emptied: 0 bytes
 
User: Default User
->Flash cache emptied: 0 bytes
 
User: Public
 
User: STAN
->Flash cache emptied: 0 bytes
 
User: UpdatusUser
->Flash cache emptied: 0 bytes
 
Total Flash Files Cleaned = 0,00 mb
 
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
OTL by OldTimer - Version 3.2.69.0 log created on 02042014_182647

Files\Folders moved on Reboot...
C:\Users\STAN\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\STAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\4A72F430-B40C-4D36-A068-CE33ADA5ADF9.dat moved successfully.
C:\Users\STAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QRLQ9C35\likebox[1].htm moved successfully.
C:\Users\STAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D109FDOB\affich-29641772-desinstallation-right-surf[1].htm moved successfully.
C:\Users\STAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9OWC1DNF\b9QBgL0iMZfDSpmcXcE8nJTpJ4fOLLwmHp8vl0kIMg4[1].eot moved successfully.
C:\Users\STAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9OWC1DNF\follow_button.1387492107[1].htm moved successfully.
C:\Users\STAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9OWC1DNF\Zd2E9abXLFGSr9G3YK2MsG8ITcfo9NwJpvZiO7_FxEg[1].eot moved successfully.
C:\Users\STAN\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
File move failed. C:\Windows	emp\_avast_\Webshlock.txt scheduled to be moved on reboot.
File move failed. C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Malekal_morte- · Answer

ca doit être bon :)

Installe Malwarebyte's Anti-Malware : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Fais des scans réguliers avec, il est efficace.



Pour ne plus te faire avoir.
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/

stan312 · Answer

Merci beaucoup pour votre aide :)

Desinstallation right surf

8 réponses

Discussions similaires