Désinstaller Boxore

Bonjour,

Un ami m'a confié son PC suite à l'apparition de fenêtres et pub porno.
Un début de nettoyage a été fait par ses soins avec Malwarebyte (plus de 2 000 éléments supprimés).
Je l'ai poursuivi avec Adwcleaner et JRT mais Boroxe est toujours présent dans les programmes installés et il existe toujours plusieurs entrées dans la base de registre.

A ce jour, il n'y a plus de pub, juste ce Boxore qui s'incruste

J'ai désinstallé Adwcleaner trop vite et je ne retrouve pas le rapport. Un scan complet aujourd'hui avec Malwarebyte n'a rien révélé.

Pour information, il utilise Chrome et je lui ai installé Adblock Plus, WOT et Click&Clean

Merci d'avance


Ci-après le rapport JRT.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by christophe lambert on 07/04/2014 at 11:23:22,62
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\\DisplayName
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\\URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-949214282-3049770341-4145110818-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\1c875dde39636004ca8cdaec335b4160
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110111271147}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0391E087-8E48-4C70-A8E7-124ACE32F9E4}



~~~ Files

Successfully deleted: [File] "C:\Users\christophe lambert\appdata\locallow\microsoft\silverlight\outofbrowser\index\portal.qtrax.com"
Successfully deleted: [File] "C:\Users\christophe lambert\appdata\locallow\SkwConfig.bin"



~~~ Folders

Successfully deleted: [Folder] "C:\Users\christophe lambert\music\qtrax media library"
Successfully deleted: [Empty Folder] C:\Users\christophe lambert\appdata\local\{08130625-AC14-4E70-A329-CE22FD7970B6}
Successfully deleted: [Empty Folder] C:\Users\christophe lambert\appdata\local\{3E5277DB-5D05-46BD-95CF-DD7F915115A4}
Successfully deleted: [Empty Folder] C:\Users\christophe lambert\appdata\local\{465DB910-6103-47DD-A332-ACCC8D9EA319}
Successfully deleted: [Empty Folder] C:\Users\christophe lambert\appdata\local\{4E479C7E-285E-4953-BCB3-C69FC00DBF45}
Successfully deleted: [Empty Folder] C:\Users\christophe lambert\appdata\local\{557AA3E1-4878-425B-9B76-B03BB530BA6A}
Successfully deleted: [Empty Folder] C:\Users\christophe lambert\appdata\local\{5B5D475F-456F-4065-89E8-98780465620D}
Successfully deleted: [Empty Folder] C:\Users\christophe lambert\appdata\local\{5C9631E5-EBD5-4175-B1C5-5F0593BA309F}
Successfully deleted: [Empty Folder] C:\Users\christophe lambert\appdata\local\{72C564D8-446C-4625-ABED-25CBADBB1A32}
Successfully deleted: [Empty Folder] C:\Users\christophe lambert\appdata\local\{80142894-C59D-4014-B1F0-0ECFA4161807}
Successfully deleted: [Empty Folder] C:\Users\christophe lambert\appdata\local\{8D8F404A-A80C-49B5-B4F1-1C732F95A4CF}
Successfully deleted: [Empty Folder] C:\Users\christophe lambert\appdata\local\{96BADA01-D7C1-4C68-B833-AAD3340B9643}
Successfully deleted: [Empty Folder] C:\Users\christophe lambert\appdata\local\{ADF32BA2-299A-4C7A-9AD3-10BD477BF27C}
Successfully deleted: [Empty Folder] C:\Users\christophe lambert\appdata\local\{D5A56461-FAC3-4449-8915-D5DF9ADB6220}
Successfully deleted: [Empty Folder] C:\Users\christophe lambert\appdata\local\{EA0C4607-1E57-44F6-B116-03234059ED41}
Successfully deleted: [Empty Folder] C:\Users\christophe lambert\appdata\local\{EC66F2AF-5239-41CD-8464-602F2DBE58AD}
Successfully deleted: [Empty Folder] C:\Users\christophe lambert\appdata\local\{F95EE193-C3B1-495B-8A74-81E77909799D}
Successfully deleted: [Empty Folder] C:\Users\christophe lambert\appdata\local\{FC18B5DD-00B5-4295-88D0-489B1C040A0D}



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Google [Blacklisted Policy]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 07/04/2014 at 11:44:02,27
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~