Adwcleaner

Résolu
Gabizman Messages postés 23 Date d'inscription   Statut Membre Dernière intervention   -  
Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   -
J'en est marre des publicités qui s'ouvrent toutes seuls, j'ai donc fais le scan adwcleaner recommandé dans plusieurs réponses à plusieurs questions, le voici :



# AdwCleaner v3.018 - Rapport créé le 16/02/2014 à 18:31:24
# Mis à jour le 28/01/2014 par Xplode
# Système d'exploitation : Windows 7 Ultimate (32 bits)
# Nom d'utilisateur : NOFXPAUL - NOFXPAUL-PC
# Exécuté depuis : C:\Users\NOFXPAUL\Downloads\adwcleaner.exe
# Option : Nettoyer

***** [ Services ] *****

Service Supprimé : CltMngSvc

***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\Program Files\Searchprotect
Dossier Supprimé : C:\Windows\system32\Searchprotect
Dossier Supprimé : C:\Users\NOFXPAUL\AppData\Local\Searchprotect
Dossier Supprimé : C:\Users\NOFXPAUL\AppData\Roaming\Systweak
Dossier Supprimé : C:\Users\NOFXPAUL\AppData\Local\Google\Chrome\User Data\Default\Extensions\cekcjpgehmohobmdiikfnopibipmgnml
Fichier Supprimé : C:\END
Fichier Supprimé : C:\Users\NOFXPAUL\AppData\Roaming\Mozilla\Firefox\Profiles\laft8nka.default\user.js

***** [ Raccourcis ] *****


***** [ Registre ] *****

Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Clé Supprimée : HKCU\Software\FreeSoftToday
Clé Supprimée : HKCU\Software\Tutorials
Clé Supprimée : HKLM\Software\SearchProtect
Clé Supprimée : HKLM\Software\Tutorials
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect

***** [ Navigateurs ] *****

-\\ Internet Explorer v8.0.7600.16385

Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v22.0 (fr)

[ Fichier : C:\Users\NOFXPAUL\AppData\Roaming\Mozilla\Firefox\Profiles\laft8nka.default\prefs.js ]

Ligne Supprimée : user_pref("browser.startup.homepage", "hxxp://www.trovigo.com/?gd=&ctid=CT3320052&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SP3BCBA970-631E-4670-8E78-C266C773470E&SSPV=");
Ligne Supprimée : user_pref("browser.search.selectedEngine", "hxxp://www.trovigo.com/Results.aspx?gd=&ctid=CT3320052&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP3BCBA970-631E-4670-8E78-C266C773470E&q={searchT[...]
Ligne Supprimée : user_pref("browser.newtab.url", "hxxp://www.trovigo.com/?gd=&ctid=CT3320052&octid=EB_ORIGINAL_CTID&SearchSource=69&CUI=&SSPV=&Lay=1&UM=4&UP=SP3BCBA970-631E-4670-8E78-C266C773470E");

-\\ Google Chrome v31.0.1650.63

[ Fichier : C:\Users\NOFXPAUL\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Supprimée : keyword
Supprimée : search_url

19 réponses

Réponse 1 / 19
Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 685
 
Salut,

Réinitialise tes navigateurs :
* Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start=
* Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start=


Faire un Scan OTL - Temps : Environ 40min
=============================================
OTL permet de diagnostiquer les programmes qui tournent et déceler des infections - Le programme va générer deux rapports OTL.txt et Extras.txt
Fournir les deux rapports :

Tu peux suivre les indications de cette page pour t'aider : https://www.malekal.com/tutorial-otl/

* Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau.
(Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)

Dans le cas d'Avast!, ne pas lancer le programme dans la Sandbox (voir lien d'aide ci-dessus).

* Lance OTL
* En haut à droite de Analyse rapide, coche "tous les utilisateurs"
* Clique sur le bouton Analyse.

**** Si durant le scan - OTL ne répond pas, ne touche à rien et laisse le scan se poursuivre ****

* Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer le rapport OTL.txt (et Extra.txt si présent).
Donne le ou les liens pjjoint qui pointent vers ces rapports ici dans une réponse.
Je répète : donne le lien du rapport pjjoint ici en réponse.

NE PAS COPIER/COLLER LE RAPPORT ICI - DONNER LE LIEN PJJOINT DANS UN NOUVEAU MESSAGE



Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left
0
Réponse 2 / 19
gabizman
 
Merci j'ai commencé le scan.. juste pour être sur : comment on envoyer le lien du rapport "pjjoint" ? (je ne comprend pas le "pjjoint")
0
Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 685
 
tu vas sur le site, tu envoies le rapport et tu donnes le lien ici dans une nouvelle réponse.
0
Gabizman Messages postés 23 Date d'inscription   Statut Membre Dernière intervention  
 
d'accord, je dois m'inscrire et/ou téléchargé un autre logiciel ?
0
Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 685
 
Tout est expliqué.
0
Gabizman Messages postés 23 Date d'inscription   Statut Membre Dernière intervention  
 
voici maintenent le lien :
https://pjjoint.malekal.com/files.php?id=20140216_i5m13m11u6t10
0
Réponse 3 / 19
Gabizman Messages postés 23 Date d'inscription   Statut Membre Dernière intervention  
 
voici maintenent le lien :
https://pjjoint.malekal.com/files.php?id=20140216_i5m13m11u6t10
0
Réponse 4 / 19
Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 685
 
Relance OTL.
o sous Personnalisation (Custom Scan), copie_colle le contenu du cadre ci dessous (bien prendre :OTL en début).
Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:

:OTL
SRV - [2014/02/13 17:47:10 | 000,080,672 | ---- | M] () [Auto | Running] -- C:\Program Files\Cling Clang\updateClingClang.exe -- (Update Cling Clang)
SRV - [2014/02/13 17:16:26 | 000,080,672 | ---- | M] () [Auto | Running] -- C:\Program Files\Cling Clang\bin\utilClingClang.exe -- (Util Cling Clang)
SRV - [2014/01/28 20:35:56 | 000,493,568 | ---- | M] (Cherished Technololgy LIMITED) [Auto | Running] -- C:\ProgramData\WPM\wprotectmanager.exe -- (Wpm)
SRV - [2014/01/14 10:04:32 | 000,508,016 | ---- | M] (Cherished Technololgy LIMITED) [Auto | Running] -- C:\ProgramData\IePluginService\PluginService.exe -- (IePluginService)
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.awesomehp.com/?type=hp&ts=1390937667&from=tugs&uid=SAMSUNGXHD753LJ_S13UJDWSC03196 <b>[Pays US - 50.97.32.134]</b>
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/webhp?gws_rd=ssl{searchTerms} <b>[Pays US - 50.97.32.134]</b>
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/webhp?gws_rd=ssl{searchTerms} <b>[Pays US - 50.97.32.134]</b>
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.awesomehp.com/?type=hp&ts=1390937667&from=tugs&uid=SAMSUNGXHD753LJ_S13UJDWSC03196 <b>[Pays US - 50.97.32.134]</b>
IE - HKU\S-1-5-21-1604226597-3367414347-3236197904-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.awesomehp.com/?type=hp&ts=1390937667&from=tugs&uid=SAMSUNGXHD753LJ_S13UJDWSC03196 <b>[Pays US - 50.97.32.134]</b>
[2014/01/28 23:34:34 | 000,000,000 | ---D | M] (Discount Dragon) -- C:\Users\NOFXPAUL\AppData\Roaming\mozilla\Firefox\Profiles\laft8nka.default\Extensions\{D8A30808-3888-E608-3AA4-A2CEA2623402}
O2 - BHO: (Re-markit) - {22660363-f9e8-4f8f-bb90-b7554bd2641a} - C:\Program Files\Re-markit\150.dll ()
O2 - BHO: (IETabPage Class) - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files\SupTab\SupTab.dll (Thinknice Co. Limited)
O2 - BHO: (Cling Clang) - {aa9aa36b-5b7b-4996-b083-83ef84d53b19} - C:\Program Files\Cling Clang\ClingClangbho.dll (Cling Clang)
O2 - BHO: (Discount Dragon BHO) - {EA34C851-D481-49F5-A356-3A8B0A8F3B7E} - C:\Program Files\Discount Dragon\FrameworkBHO.dll ()
O4 - HKU\S-1-5-21-1604226597-3367414347-3236197904-1000..\Run: [OMESupervisor] C:\Users\NOFXPAUL\AppData\Local\omesuperv.exe ()
O4 - HKU\S-1-5-21-1604226597-3367414347-3236197904-1000..\Run: [Snoozer] C:\Users\NOFXPAUL\AppData\Roaming\Snz\Snz.exe ()
O4 - HKLM..\RunOnce: [Discount Dragon-repairJob] C:\Users\NOFXPAUL\AppData\Local\Discount Dragon\repair.js ()
O4 - HKLM..\RunOnce: [upfst_fr_71.exe] C:\Users\NOFXPAUL\AppData\Local\fst_fr_71\upfst_fr_71.exe ()
[2014/01/30 21:21:05 | 000,000,000 | ---D | C] -- C:\ProgramData\TheBBliocker
[2014/01/30 21:21:03 | 000,000,000 | ---D | C] -- C:\ProgramData\elliedcmikfpocenlfkmdnbgcpofkbbi
[2014/01/28 23:34:38 | 000,000,000 | ---D | C] -- C:\Users\NOFXPAUL\AppData\Local\BenchUpdater
[2014/01/28 23:34:37 | 000,000,000 | ---D | C] -- C:\Program Files\Discount Dragon
[2014/01/28 23:34:00 | 000,000,000 | ---D | C] -- C:\Program Files\Bench
[2014/01/28 23:33:59 | 000,000,000 | ---D | C] -- C:\Users\NOFXPAUL\AppData\Local\Discount Dragon
[2014/01/28 20:47:15 | 000,000,000 | ---D | C] -- C:\Program Files\Cling Clang
[2014/01/28 20:47:04 | 000,000,000 | ---D | C] -- C:\Program Files\predm
[2014/01/28 20:36:30 | 000,000,000 | ---D | C] -- C:\Program Files\Uninstaller
[2014/01/28 20:36:04 | 000,000,000 | ---D | C] -- C:\ProgramData\IePluginService
[2014/01/28 20:36:00 | 000,000,000 | ---D | C] -- C:\Program Files\SupTab
[2014/01/28 20:35:57 | 000,000,000 | ---D | C] -- C:\ProgramData\WPM
[2014/01/28 20:33:44 | 000,000,000 | ---D | C] -- C:\Users\NOFXPAUL\AppData\Local\fst_fr_71
[2014/01/28 20:33:43 | 000,000,000 | ---D | C] -- C:\Program Files\fst_fr_71
[2014/01/28 20:33:38 | 000,000,000 | ---D | C] -- C:\Program Files\Re-markit
[2014/02/05 20:53:55 | 000,000,000 | ---D | C] -- C:\Users\NOFXPAUL\AppData\Local\fst_fr_33
[2014/02/05 20:53:54 | 000,000,000 | ---D | C] -- C:\Program Files\fst_fr_33
[2014/01/28 20:39:07 | 000,366,611 | ---- | M] () -- C:\Users\NOFXPAUL\AppData\Local\mysearchdial-speeddial.crx


* poste le rapport ici
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 19
Gabizman Messages postés 23 Date d'inscription   Statut Membre Dernière intervention  
 
Voici le rapport demandé :

========== OTL ==========
Error: Unable to stop service Update Cling Clang!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Update Cling Clang deleted successfully.
C:\Program Files\Cling Clang\updateClingClang.exe moved successfully.
Error: Unable to stop service Util Cling Clang!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Util Cling Clang deleted successfully.
C:\Program Files\Cling Clang\bin\utilClingClang.exe moved successfully.
Service Wpm stopped successfully!
Service Wpm deleted successfully!
C:\ProgramData\WPM\wprotectmanager.exe moved successfully.
Service IePluginService stopped successfully!
Service IePluginService deleted successfully!
C:\ProgramData\IePluginService\PluginService.exe moved successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Search_URL| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Page| /E : value set successfully!
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKU\S-1-5-21-1604226597-3367414347-3236197904-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E : value set successfully!
C:\Users\NOFXPAUL\AppData\Roaming\mozilla\Firefox\Profiles\laft8nka.default\Extensions\{D8A30808-3888-E608-3AA4-A2CEA2623402}\icons folder moved successfully.
C:\Users\NOFXPAUL\AppData\Roaming\mozilla\Firefox\Profiles\laft8nka.default\Extensions\{D8A30808-3888-E608-3AA4-A2CEA2623402}\framework-ui folder moved successfully.
C:\Users\NOFXPAUL\AppData\Roaming\mozilla\Firefox\Profiles\laft8nka.default\Extensions\{D8A30808-3888-E608-3AA4-A2CEA2623402}\framework folder moved successfully.
C:\Users\NOFXPAUL\AppData\Roaming\mozilla\Firefox\Profiles\laft8nka.default\Extensions\{D8A30808-3888-E608-3AA4-A2CEA2623402}\CanvasFramework folder moved successfully.
C:\Users\NOFXPAUL\AppData\Roaming\mozilla\Firefox\Profiles\laft8nka.default\Extensions\{D8A30808-3888-E608-3AA4-A2CEA2623402}\AppFramework folder moved successfully.
C:\Users\NOFXPAUL\AppData\Roaming\mozilla\Firefox\Profiles\laft8nka.default\Extensions\{D8A30808-3888-E608-3AA4-A2CEA2623402} folder moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22660363-f9e8-4f8f-bb90-b7554bd2641a}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22660363-f9e8-4f8f-bb90-b7554bd2641a}\ deleted successfully.
C:\Program Files\Re-markit\150.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}\ deleted successfully.
C:\Program Files\SupTab\SupTab.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{aa9aa36b-5b7b-4996-b083-83ef84d53b19}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{aa9aa36b-5b7b-4996-b083-83ef84d53b19}\ deleted successfully.
C:\Program Files\Cling Clang\ClingClangbho.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA34C851-D481-49F5-A356-3A8B0A8F3B7E}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EA34C851-D481-49F5-A356-3A8B0A8F3B7E}\ deleted successfully.
C:\Program Files\Discount Dragon\FrameworkBHO.dll moved successfully.
Registry value HKEY_USERS\S-1-5-21-1604226597-3367414347-3236197904-1000\Software\Microsoft\Windows\CurrentVersion\Run\\OMESupervisor deleted successfully.
C:\Users\NOFXPAUL\AppData\Local\omesuperv.exe moved successfully.
Registry value HKEY_USERS\S-1-5-21-1604226597-3367414347-3236197904-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Snoozer deleted successfully.
C:\Users\NOFXPAUL\AppData\Roaming\Snz\Snz.exe moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Discount Dragon-repairJob deleted successfully.
C:\Users\NOFXPAUL\AppData\Local\Discount Dragon\repair.js moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\upfst_fr_71.exe deleted successfully.
C:\Users\NOFXPAUL\AppData\Local\fst_fr_71\upfst_fr_71.exe moved successfully.
C:\ProgramData\TheBBliocker folder moved successfully.
C:\ProgramData\elliedcmikfpocenlfkmdnbgcpofkbbi folder moved successfully.
C:\Users\NOFXPAUL\AppData\Local\BenchUpdater folder moved successfully.
C:\Program Files\Discount Dragon\icons folder moved successfully.
C:\Program Files\Discount Dragon\framework-ui\theme\bubble folder moved successfully.
C:\Program Files\Discount Dragon\framework-ui\theme folder moved successfully.
C:\Program Files\Discount Dragon\framework-ui folder moved successfully.
C:\Program Files\Discount Dragon\framework folder moved successfully.
C:\Program Files\Discount Dragon\CanvasFramework folder moved successfully.
C:\Program Files\Discount Dragon\AppFramework folder moved successfully.
C:\Program Files\Discount Dragon folder moved successfully.
C:\Program Files\Bench\Updater\1.7.0.0 folder moved successfully.
C:\Program Files\Bench\Updater folder moved successfully.
C:\Program Files\Bench\NmHost\data\installer folder moved successfully.
C:\Program Files\Bench\NmHost\data folder moved successfully.
C:\Program Files\Bench\NmHost folder moved successfully.
C:\Program Files\Bench folder moved successfully.
C:\Users\NOFXPAUL\AppData\Local\Discount Dragon\firefox\icons folder moved successfully.
C:\Users\NOFXPAUL\AppData\Local\Discount Dragon\firefox\framework-ui folder moved successfully.
C:\Users\NOFXPAUL\AppData\Local\Discount Dragon\firefox\framework folder moved successfully.
C:\Users\NOFXPAUL\AppData\Local\Discount Dragon\firefox\CanvasFramework folder moved successfully.
C:\Users\NOFXPAUL\AppData\Local\Discount Dragon\firefox\AppFramework folder moved successfully.
C:\Users\NOFXPAUL\AppData\Local\Discount Dragon\firefox folder moved successfully.
C:\Users\NOFXPAUL\AppData\Local\Discount Dragon folder moved successfully.
C:\Program Files\Cling Clang\bin folder moved successfully.
C:\Program Files\Cling Clang folder moved successfully.
C:\Program Files\predm folder moved successfully.
C:\Program Files\Uninstaller folder moved successfully.
C:\ProgramData\IePluginService\update folder moved successfully.
C:\ProgramData\IePluginService folder moved successfully.
C:\Program Files\SupTab\web\_locales\zh-TW folder moved successfully.
C:\Program Files\SupTab\web\_locales\zh-CN folder moved successfully.
C:\Program Files\SupTab\web\_locales\vi-VI folder moved successfully.
C:\Program Files\SupTab\web\_locales\tr-TR folder moved successfully.
C:\Program Files\SupTab\web\_locales\ru-MO folder moved successfully.
C:\Program Files\SupTab\web\_locales\ru folder moved successfully.
C:\Program Files\SupTab\web\_locales\pt-BR folder moved successfully.
C:\Program Files\SupTab\web\_locales\pl folder moved successfully.
C:\Program Files\SupTab\web\_locales\it-IT folder moved successfully.
C:\Program Files\SupTab\web\_locales\it-CH folder moved successfully.
C:\Program Files\SupTab\web\_locales\fr-LU folder moved successfully.
C:\Program Files\SupTab\web\_locales\fr-FR folder moved successfully.
C:\Program Files\SupTab\web\_locales\fr-CH folder moved successfully.
C:\Program Files\SupTab\web\_locales\fr-CA folder moved successfully.
C:\Program Files\SupTab\web\_locales\fr-BE folder moved successfully.
C:\Program Files\SupTab\web\_locales\es-ES folder moved successfully.
C:\Program Files\SupTab\web\_locales\es-419 folder moved successfully.
C:\Program Files\SupTab\web\_locales\en-US folder moved successfully.
C:\Program Files\SupTab\web\_locales folder moved successfully.
C:\Program Files\SupTab\web\js folder moved successfully.
C:\Program Files\SupTab\web\img folder moved successfully.
C:\Program Files\SupTab\web folder moved successfully.
C:\Program Files\SupTab folder moved successfully.
C:\ProgramData\WPM\update folder moved successfully.
C:\ProgramData\WPM folder moved successfully.
C:\Users\NOFXPAUL\AppData\Local\fst_fr_71\Download folder moved successfully.
C:\Users\NOFXPAUL\AppData\Local\fst_fr_71 folder moved successfully.
C:\Program Files\fst_fr_71 folder moved successfully.
C:\Program Files\Re-markit folder moved successfully.
C:\Users\NOFXPAUL\AppData\Local\fst_fr_33\fst_fr_33\1.10 folder moved successfully.
C:\Users\NOFXPAUL\AppData\Local\fst_fr_33\fst_fr_33 folder moved successfully.
C:\Users\NOFXPAUL\AppData\Local\fst_fr_33 folder moved successfully.
C:\Program Files\fst_fr_33 folder moved successfully.
C:\Users\NOFXPAUL\AppData\Local\mysearchdial-speeddial.crx moved successfully.

OTL by OldTimer - Version 3.2.69.0 log created on 02182014_004450
0
Réponse 6 / 19
Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 685
 
Ca donne quoi les pubs etc ?

Refais un scan OTL et donne le rapport par pjjoint, voir ce qu'il reste.
0
Réponse 7 / 19
Gabizman Messages postés 23 Date d'inscription   Statut Membre Dernière intervention  
 
Merci beacoup, je ne reçois plus de publicité. voici quand meme le lien :

https://pjjoint.malekal.com/files.php?id=OTL_20140218_m15o15v15e5f8
0
Réponse 8 / 19
Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 685
 
hier tu as installé Search Protect qui est autre programme parasite.
Donc là c'est reparti...

Désinstalle Search Protect et réinitialise Firefox.


Relance OTL.
o sous Personnalisation (Custom Scan), copie_colle le contenu du cadre ci dessous (bien prendre :OTL en début).
Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:


:OTL
SRV - [2014/02/06 14:28:30 | 002,360,608 | ---- | M] (Conduit) [Auto | Running] -- C:\PROGRA~1\SearchProtect\Main\bin\CltMngSvc.exe -- (CltMngSvc)
O4 - HKLM..\Run: [fst_fr_33] C:\Program Files\fst_fr_33\fst_fr_33.exe File not found
O4 - HKLM..\Run: [fst_fr_71] File not found
O20 - AppInit_DLLs: (C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll) - C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll (Conduit)
[2014/02/17 13:09:02 | 000,000,000 | ---D | C] -- C:\Windows\System32\SearchProtect
[2014/02/17 13:03:34 | 000,000,000 | ---D | C] -- C:\Users\NOFXPAUL\AppData\Local\SearchProtect
[2014/02/17 13:03:34 | 000,000,000 | ---D | C] -- C:\Program Files\SearchProtect
:Commands
[resethosts]


* poste le rapport ici
0
Réponse 9 / 19
gabizman
 
plutot que de devoir recommencer plus tard je te renvois un scan, un autre logiciel c'est installé (tout seul), j'ai donc refais un scan otl

http://pjjoint.malekal.com/files.php?id=OTL_20140219_e10h12k14e12v15
0
Réponse 10 / 19
Gabizman
 
j'ai quand meme fait la correction:

========== OTL ==========
Error: No service named CltMngSvc was found to stop!
Service\Driver key CltMngSvc not found.
C:\PROGRA~1\SearchProtect\Main\bin\CltMngSvc.exe moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\fst_fr_33 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\fst_fr_71 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll deleted successfully.
File C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll not found.
C:\Windows\System32\SearchProtect\Logs folder moved successfully.
C:\Windows\System32\SearchProtect folder moved successfully.
Folder C:\Users\NOFXPAUL\AppData\Local\SearchProtect\ not found.
C:\Program Files\SearchProtect\Main\bin folder moved successfully.
C:\Program Files\SearchProtect\Main folder moved successfully.
C:\Program Files\SearchProtect folder moved successfully.
========== COMMANDS ==========
Error: Unble to create default HOSTS file!

OTL by OldTimer - Version 3.2.69.0 log created on 02192014_004055
0
Réponse 11 / 19
Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 685
 
Ca donne quoi au niveau des pubs etc ?
0
Réponse 12 / 19
Gabizman Messages postés 23 Date d'inscription   Statut Membre Dernière intervention  
 
j'ai plus de pubs c'est bon. Mais j'ai remarqué que awesomeHp se réinstallait tout seul, depuis la correction je sais pas donc pour l'instant ça va.
0
Réponse 13 / 19
Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 685
 
sur quel navigateur ?

fais un nettoyage Shortcut cleaner : https://forum.malekal.com/viewtopic.php?t=46433&start=
Donne le rapport Shorter Cleaner
0
Réponse 14 / 19
Gabizman Messages postés 23 Date d'inscription   Statut Membre Dernière intervention  
 
Voila le raport

Shortcut Cleaner 1.2.8 by Lawrence Abrams (Grinler)
https://www.bleepingcomputer.com/
Copyright 2008-2014 BleepingComputer.com
More Information about Shortcut Cleaner can be found at this link:
https://www.bleepingcomputer.com/download/shortcut-cleaner/

Windows Version: Windows 7 Ultimate
Program started at: 02/19/2014 09:33:27 PM.

Scanning for registry hijacks:

* No issues found in the Registry.

Searching for Hijacked Shortcuts:

Searching C:\Users\NOFXPAUL\AppData\Roaming\Microsoft\Windows\Start Menu\

Searching C:\ProgramData\Microsoft\Windows\Start Menu\

Searching C:\Users\NOFXPAUL\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\

Searching C:\Users\Public\Desktop\

Searching C:\Users\NOFXPAUL\Desktop


0 bad shortcuts found.

Program finished at: 02/19/2014 09:33:31 PM
Execution time: 0 hours(s), 0 minute(s), and 4 seconds(s)
0
Réponse 15 / 19
Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 685
 
sur quel navigateur ?
0
Réponse 16 / 19
Gabizman Messages postés 23 Date d'inscription   Statut Membre Dernière intervention  
 
Google Chrome
0
Réponse 17 / 19
Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 685
 
y a quoi dans les paramètres d'ouvertures de page ?
Ensembles de pages ?
AwesomeHP est dans la liste ?

Sur l'icone que tu utilises pour lancer Google Chrome.
Clic droit puis propriétés
dans le champs cible, pas d'adresse awesomehp à la fin ?

y a quoi dans les extensions de Google Chrome ?
0
Réponse 18 / 19
Gabizman Messages postés 23 Date d'inscription   Statut Membre Dernière intervention  
 
Non c'est bon j'ai regardé ou vous m'avez indiqué il n'y a rien.. c'est bon je crois que le problème est résolu merci beaucoup de votre aide.
0
Réponse 19 / 19
Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 685
 
ok :)


Installe Malwarebyte's Anti-Malware : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Fais des scans réguliers avec, il est efficace.



Pour ne plus te faire avoir.
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/


0

Discussions similaires

Adwcleaner Mac
Weel -
Michel -

21 réponses
adwcleaner pour mac
gepe5 -
princewill -

2 réponses
ADW Cleaner, un substitut gratuit pour Mac ?
Fanny0604 -
bazfile -

1 réponse
AdwCleaner pour android
christophe tremelo -
Manquant -

8 réponses
Pourquoi AdwCleaner ne donne plus de résultat ?
Utilisateur anonyme -
g3n-h@ckm@n -

5 réponses