Mon pc a un virus - publicités intempestives

Salut,

Sur Firefox : Menu Outils / Modules complémentaires
Onglet Extension.
Donne la liste.

Sur Google Chrome : Menu en haut à droite puis Outils / Extensions
Donne la liste.

puis :

Faire un Scan OTL - Temps : Environ 40min
=============================================
OTL permet de diagnostiquer les programmes qui tournent et déceler des infections - Le programme va générer deux rapports OTL.txt et Extras.txt
Fournir les deux rapports :

Tu peux suivre les indications de cette page pour t'aider : https://www.malekal.com/tutorial-otl/

* Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau.
(Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)

Dans le cas d'Avast!, ne pas lancer le programme dans la Sandbox (voir lien d'aide ci-dessus).

* Lance OTL
* En haut à droite de Analyse rapide, coche "tous les utilisateurs"
* Clique sur le bouton Analyse.

**** Si durant le scan - OTL ne répond pas, ne touche à rien et laisse le scan se poursuivre ****

* Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer le rapport OTL.txt (et Extra.txt si présent).
Donne le ou les liens pjjoint qui pointent vers ces rapports ici dans une réponse.
Je répète : donne le lien du rapport pjjoint ici en réponse.

NE PAS COPIER/COLLER LE RAPPORT ICI - DONNER LE LIEN PJJOINT DANS UN NOUVEAU MESSAGE

bonjour voici le rapport de otl et merci de votre aide https://pjjoint.malekal.com/files.php?read=OTL_20140417_d7h14k14c5t15

ensuite extension google chrome sur Mozilla y en a pas

Adblock Advisor 1.3
The most popular Chrome adblock extensions, all in one! Autorisations Accéder au site Web

Autoriser en mode navigation privée

Activée

Adguard AdBlocker 1.0.0.50
Unmatched adblock extension against advertising and pop-ups. Blocks ads on Facebook, Youtube and all other websites. Autorisations Accéder au site Web

Activer

avast! WebRep 7.0.1466
Web Reputation Plugin Autorisations

Activer
Installé par un tiers

Awesome New Tab Page(TM) 2014.112.31
Enhance your New Tab Page with ultimate customizability and power. Awesome, like you. [ANTP] Autorisations Accéder au site Web

Activer

BaitSaaver 5.1
Autorisations

Autoriser en mode navigation privée

Activée
Pas depuis le Chrome Web Store

MeasureIt! 1.1.3
Draw out a ruler that will help you get the pixel width and height of any elements on a webpage. Autorisations Accéder au site Web

Activer

SaveClicker 2.1
Autorisations

Autoriser en mode navigation privée

Activée
Pas depuis le Chrome Web Store

Smart Display 1.8
Smart Display extension Autorisations

Autoriser en mode navigation privée

Activée
Pas depuis le Chrome Web Store

Snap.Do 1.4
In order to remove SnapDo installation go to control panel -> Add/Remove Programs (xp) or Programs and Features (vista and above) -> SnapDo Autorisations

Activer
Pas depuis le Chrome Web Store

Value apps 1.7.0.2
Value apps Autorisations

Autoriser en mode navigation privée
Options

Activée
Pas depuis le Chrome Web Store

Plus d'extensions

Sur Google Chrome, supprime si tu peux :

BaitSaaver 5.1
SaveClicker 2.1
Smart Display 1.8
Snap.Do 1.4
Value apps 1.7.0.2

Sur Firefox, faudrait supprimer QuickStart

~~

Relance OTL.
o sous Personnalisation (Custom Scan), copie_colle le contenu du cadre ci dessous (bien prendre :OTL en début).
Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:

:OTL
CHR - Extension: BaitSaaver = C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cegfklbnogmjkfkmicoacbninkgacpig\5.1\
CHR - Extension: SaveClicker = C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fefhnbdpcapahbphmoobknchbjfdkdhj\2.1\
CHR - Extension: Value apps = C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcnnhcneegeeojhgpfijnlnocjdmlaon\1.0.0_0\
CHR - Extension: Awesome New Tab Pageâ"¢ = C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\
O2:[b]64bit:[/b] - BHO: (SaveClicker) - {E87A0EC4-3B45-D7F8-B7F8-2D83C6EF8B2E} - C:\Program Files (x86)\SaveClicker\CqJFqeM8N.x64.dll ()
O2 - BHO: (SaveClicker) - {E87A0EC4-3B45-D7F8-B7F8-2D83C6EF8B2E} - C:\Program Files (x86)\SaveClicker\CqJFqeM8N.dll ()
O4 - HKU\S-1-5-21-1015235998-439032192-2360028604-1000..\Run: [Browser Tab Search by Askx64] C:\Program Files (x86)\Browser Tab Search by Ask\SafetyNut\BrowserTabSearch\msbloader64.exe File not found
O4 - HKU\S-1-5-21-1015235998-439032192-2360028604-1000..\Run: [Omiga Plus] C:\Program Files (x86)\Omiga Plus\omigaplus.exe /autorun File not found
O20:[b]64bit:[/b] - AppInit_DLLs: (C:\PROGRA~2\SUPPOR~1\SUPPOR~2.DLL) - C:\Program Files (x86)\Supporter\Supporter_x64.dll ()
O20 - AppInit_DLLs: (c:\progra~2\suppor~1\suppor~1.dll) - c:\Program Files (x86)\Supporter\Supporter.dll ()
O27:[b]64bit:[/b] - HKLM IFEO\bpsvc.exe: Debugger - tasklist.exe File not found
O27:[b]64bit:[/b] - HKLM IFEO\browsersafeguard.exe: Debugger - tasklist.exe File not found
O27:[b]64bit:[/b] - HKLM IFEO\dprotectsvc.exe: Debugger - tasklist.exe File not found
O27:[b]64bit:[/b] - HKLM IFEO\protectedsearch.exe: Debugger - tasklist.exe File not found
O27:[b]64bit:[/b] - HKLM IFEO\rjatydimofu.exe: Debugger - tasklist.exe File not found
O27:[b]64bit:[/b] - HKLM IFEO\searchprotection.exe: Debugger - tasklist.exe File not found
O27:[b]64bit:[/b] - HKLM IFEO\searchprotector.exe: Debugger - tasklist.exe File not found
O27:[b]64bit:[/b] - HKLM IFEO\snapdo.exe: Debugger - tasklist.exe File not found
O27:[b]64bit:[/b] - HKLM IFEO\stinst32.exe: Debugger - tasklist.exe File not found
O27:[b]64bit:[/b] - HKLM IFEO\stinst64.exe: Debugger - tasklist.exe File not found
O27:[b]64bit:[/b] - HKLM IFEO\utiljumpflip.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\bpsvc.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\browsersafeguard.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\dprotectsvc.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\protectedsearch.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\rjatydimofu.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\searchprotection.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\searchprotector.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\snapdo.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\stinst32.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\stinst64.exe: Debugger - tasklist.exe File not found
O27 - HKLM IFEO\utiljumpflip.exe: Debugger - tasklist.exe File not found
[2014/03/26 17:46:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Supporter
[2014/03/26 17:46:31 | 000,000,000 | ---D | C] -- C:\ProgramData\SaveClicker
[2014/03/26 17:46:31 | 000,000,000 | ---D | C] -- C:\Users\Florentin\AppData\Local\Packages
[2014/03/26 17:46:31 | 000,000,000 | ---D | C] -- C:\ProgramData\92fa3a8b5ab806cb
[2014/03/26 17:46:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SaveClicker
[2012/05/21 14:00:54 | 000,020,984 | ---- | C] (Intel Corporation) -- C:\Users\Florentin\AppData\Roaming\JomCap.dll
:files
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cegfklbnogmjkfkmicoacbninkgacpig
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fefhnbdpcapahbphmoobknchbjfdkdhj\
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcnnhcneegeeojhgpfijnlnocjdmlaon\
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\

* poste le rapport ici

Redémarre l'ordinateur

========== OTL ==========
File C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cegfklbnogmjkfkmicoacbninkgacpig\5.1 not found.
File C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fefhnbdpcapahbphmoobknchbjfdkdhj\2.1 not found.
File C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcnnhcneegeeojhgpfijnlnocjdmlaon\1.0.0_0 not found.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\_locales\en folder moved successfully.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\_locales folder moved successfully.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\widgets\twitter folder moved successfully.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\widgets\tv folder moved successfully.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\widgets\tutorial folder moved successfully.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\widgets\tabs folder moved successfully.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\widgets\notepad folder moved successfully.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\widgets\google folder moved successfully.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\widgets\facebook folder moved successfully.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\widgets\clock folder moved successfully.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\widgets folder moved successfully.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\javascript\libs folder moved successfully.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\javascript\angular folder moved successfully.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\javascript folder moved successfully.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\images\ui-2 folder moved successfully.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\images folder moved successfully.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\css folder moved successfully.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\colorpicker\js folder moved successfully.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\colorpicker\images folder moved successfully.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\colorpicker\css folder moved successfully.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0\colorpicker folder moved successfully.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg\2014.112.31_0 folder moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E87A0EC4-3B45-D7F8-B7F8-2D83C6EF8B2E}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E87A0EC4-3B45-D7F8-B7F8-2D83C6EF8B2E}\ deleted successfully.
C:\Program Files (x86)\SaveClicker\CqJFqeM8N.dll moved successfully.
Registry value HKEY_USERS\S-1-5-21-1015235998-439032192-2360028604-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Browser Tab Search by Askx64 deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1015235998-439032192-2360028604-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Omiga Plus deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls:c:\progra~2\suppor~1\suppor~1.dll deleted successfully.
c:\Program Files (x86)\Supporter\Supporter.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rjatydimofu.exe\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe\ deleted successfully.
C:\Program Files (x86)\Supporter folder moved successfully.
C:\ProgramData\SaveClicker folder moved successfully.
C:\Users\Florentin\AppData\Local\Packages\windows_ie_ac_001\AC\{E87A0EC4-3B45-D7F8-B7F8-2D83C6EF8B2E} folder moved successfully.
C:\Users\Florentin\AppData\Local\Packages\windows_ie_ac_001\AC\{6BD5F992-EF7A-6660-617A-5A65A18CA96D} folder moved successfully.
C:\Users\Florentin\AppData\Local\Packages\windows_ie_ac_001\AC folder moved successfully.
C:\Users\Florentin\AppData\Local\Packages\windows_ie_ac_001 folder moved successfully.
C:\Users\Florentin\AppData\Local\Packages folder moved successfully.
C:\ProgramData\92fa3a8b5ab806cb folder moved successfully.
C:\Program Files (x86)\SaveClicker folder moved successfully.
C:\Users\Florentin\AppData\Roaming\JomCap.dll moved successfully.
========== FILES ==========
File\Folder C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cegfklbnogmjkfkmicoacbninkgacpig not found.
Folder C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fefhnbdpcapahbphmoobknchbjfdkdhj not found.
Folder C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcnnhcneegeeojhgpfijnlnocjdmlaon not found.
C:\Users\Florentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmiemnjjchgkmgbeljfocdjjnpjnmcg folder moved successfully.

OTL by OldTimer - Version 3.2.69.0 log created on 04172014_134244

redémarre bien l'ordinateur et regarde ce que cela donne pour les pubs.

cool :)

Installe Malwarebyte's Anti-Malware : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Fais des scans réguliers avec, il est efficace.

Pour ne plus te faire avoir.
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/

merci de ton aide