Supprimer ZombieAlert

Résolu
molly0033 Messages postés 13 Date d'inscription   Statut Membre Dernière intervention   -  
Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   -
mon ordinateur a des zombie, yahoo ouvre pas,il me dise que mon microsof 100 fonctionne pas.
merci
A voir également:

6 réponses

Réponse 1 / 6
Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 685
 
Salut,

Voici la suite :


Sur Firefox : Menu Outils / Modules complémentaires
Onglet Extension.
Donne la liste.

Sur Google Chrome : Menu en haut à droite puis Outils / Extensions
Donne la liste.

puis :

Faire un Scan OTL - Temps : Environ 40min
=============================================
OTL permet de diagnostiquer les programmes qui tournent et déceler des infections - Le programme va générer deux rapports OTL.txt et Extras.txt
Fournir les deux rapports :

Tu peux suivre les indications de cette page pour t'aider : https://www.malekal.com/tutorial-otl/

* Télécharge http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/ sur ton bureau.
(Sous Vista/Win7, il faut cliquer droit sur OTL et choisir Exécuter en tant qu'administrateur)

* Lance OTL
* En haut à droite de Analyse rapide, coche "tous les utilisateurs"
* Clique sur le bouton Analyse.

**** Si durant le scan - OTL ne répond pas, ne touche à rien et laisse le scan se poursuivre ****

* Quand le scan est fini, utilise le site http://pjjoint.malekal.com/ pour envoyer le rapport OTL.txt (et Extra.txt si présent).
Donne le ou les liens pjjoint qui pointent vers ces rapports ici dans une réponse.
Je répète : donne le lien du rapport pjjoint ici en réponse.

NE PAS COPIER/COLLER LE RAPPORT ICI - DONNER LE LIEN PJJOINT DANS UN NOUVEAU MESSAGE



1
molly0033 Messages postés 13 Date d'inscription   Statut Membre Dernière intervention  
 
voici le lien du raport.
https://pjjoint.malekal.com/files.php?id=OTL_20140421_f8k8j7d14b15
https://pjjoint.malekal.com/files.php?id=OTL_20140421_z13u7p7b8i9
dans mes extention il y a adblock plus 2.5.1 et il en a 4 que j ai d esactivé
media playersplus 0.94.21
my searchdial9.5.5.1
offer mosquito 2.4
swirlz 10.29.0.20
merci
0
molly0033 Messages postés 13 Date d'inscription   Statut Membre Dernière intervention  
 
je trouve pas zombiealert dans mon panneau de configuration.
merci
0
Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 685
 
ok, continue.
0
molly0033 Messages postés 13 Date d'inscription   Statut Membre Dernière intervention  
 
voici le nouveau rapport otl
https://pjjoint.malekal.com/files.php?id=20140421_p7x14u7q13q5
merci
0
Réponse 2 / 6
Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 685
 
Supprime toutes les extensions que tu as listées.

Réinitialise Firefox : Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start=

Désactive le proxy sur Internet Explorer : https://forums.commentcamarche.net/forum/affich-37640573-desactiver-son-proxy


désinstalle :
ZombieAlaert

Relance OTL.
o sous Personnalisation (Custom Scan), copie_colle le contenu du cadre ci dessous (bien prendre :OTL en début).
Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:


:OTL
SRV:[b]64bit:[/b] - [2014-04-21 04:41:49 | 000,706,560 | ---- | M] () [Auto | Running] -- C:\Program Files\003\xmkysecqun64.exe -- (xmkysecqun64)
SRV - [2014-03-31 16:40:42 | 000,064,888 | ---- | M] (Creative Island Media, LLC) [Auto | Running] -- C:\ProgramData\ZombieAlert\ZombieAlertService.exe -- (ZombieAlert)
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}: URL = https://fr.search.yahoo.com/yhs/search?hspart=aztec&hsimp=yhs-default&type=ds_123_476&p=&rnd=565091192¶m1=sid%3D476%3Aaid%3D123%3Aver%3D12302%3Atm%3D322%3Asrc%3Dds%3Alng%3Den%3Aitype%3Dn%3Auip%3D1540432858%3Aup%3D{searchTerms} <b>[Pays US - 23.23.140.1]</b>
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{A5165AA5-75B0-46F1-A23D-0CD3AB0ADCCE}: URL = https://www.amazon.ca/s/ref=azs_osd_ieaca?ie=UTF-8&tag=hp-ca2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms} <b>[Pays US - 72.21.215.233]</b>
IE:[b]64bit:[/b] - HKLM\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: URL = https://www.ebay.ca ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} <b>[Pays US - 66.211.181.172]</b>
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: URL = https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms}&FORM=IE8SRC <b>[Pays US - 204.79.197.200]</b>
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}: URL = https://fr.search.yahoo.com/yhs/search?hspart=aztec&hsimp=yhs-default&type=ds_123_476&p=&rnd=565091192¶m1=sid%3D476%3Aaid%3D123%3Aver%3D12302%3Atm%3D322%3Asrc%3Dds%3Alng%3Den%3Aitype%3Dn%3Auip%3D1540432858%3Aup%3D{searchTerms} <b>[Pays US - 23.23.140.1]</b>
IE - HKLM\..\SearchScopes\{A5165AA5-75B0-46F1-A23D-0CD3AB0ADCCE}: URL = https://www.amazon.ca/s/ref=azs_osd_ieaca?ie=UTF-8&tag=hp-ca2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms} <b>[Pays US - 72.21.215.233]</b>
IE - HKLM\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: URL = https://www.ebay.ca ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} <b>[Pays US - 66.135.216.134]</b>
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&CUI=UN17821136693084827&UM=4&ctid=CT3309759 <b>[Pays NL - 195.78.120.88]</b>
IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}: URL = https://fr.search.yahoo.com/yhs/search?hspart=aztec&hsimp=yhs-default&type=ds_123_476&p=&rnd=565091192¶m1=sid%3D476%3Aaid%3D123%3Aver%3D12302%3Atm%3D322%3Asrc%3Dds%3Alng%3Den%3Aitype%3Dn%3Auip%3D1540432858%3Aup%3D{searchTerms} <b>[Pays US - 23.23.140.1]</b>
IE - HKCU\..\SearchScopes\{A5165AA5-75B0-46F1-A23D-0CD3AB0ADCCE}: URL = https://www.amazon.ca/s/ref=azs_osd_ieaca?ie=UTF-8&tag=hp-ca2-vsb-20&link%5Fcode=qs&index=aps&field-keywords={searchTerms} <b>[Pays NL - 176.32.98.168]</b>
IE - HKCU\..\SearchScopes\{BFE304CC-61CB-4225-87AD-AF26F4D04493}: URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3309759&CUI=UN17821136693084827&UM=4 <b>[Pays NL - 195.78.120.88]</b>
IE - HKCU\..\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}: URL = https://www.ebay.ca ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms} <b>[Pays US - 66.135.216.134]</b>
IE - HKCU\..\SearchScopes\{F7973799-700E-4D73-8F90-FB61C5477C44}: URL = https://www.bing.com/?scope=web&mkt=fr-FR&FORM=UP97DF&pc=UP97{searchTerms}&src=IE-SearchBox <b>[Pays US - 204.79.197.200]</b>
IE - HKCU\..\SearchScopes\2B0524DE72A74EDD9D17AF758E6C2ACE: URL = http://search.conduit.com/?gd=&ctid=CT3320133&octid=EB_ORIGINAL_CTID&ISID=M3B5BD4F4-CFF0-47B9-A643-78890AA28331&SearchSource=58&CUI=&UM=5&UP=SP3FDC3170-6FC4-479C-B493-C30FC62B3D98&q={searchTerms}&SSPV= <b>[Pays NL - 195.78.120.88]</b>
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: ProxyEnable = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: ProxyOverride = <-loopback>
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: ProxyServer = http=127.0.0.1:55711;https=127.0.0.1:55711 [Attention - Possible Proxy Malicieux]
FF - prefs.js..browser.startup.homepage: https://www.default-search.net/?sid=476&aid=123&itype=n&ver=12302&tm=322&src=hmp <b>[Pays US - 23.23.140.1]</b>
FF - prefs.js..keyword.URL: https://fr.search.yahoo.com/yhs/search?hspart=aztec&hsimp=yhs-default&type=ds_123_476&p=&rnd=565091192¶m1=sid%3D476%3Aaid%3D123%3Aver%3D12302%3Atm%3D322%3Asrc%3Dds%3Alng%3Den%3Aitype%3Dn%3Auip%3D1540432858%3Aup%3D <b>[Pays US - 23.23.140.1]</b>
FF - HKCU\Software\MozillaPlugins\bebomedia.com/OfferMosquitoIEHelper: C:\Users\lisef_000\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll (Bebo Media Ltd)
FF - HKCU\Software\MozillaPlugins\hp.com/HPDetect: C:\Users\lisef_000\AppData\Roaming\HewlettPackard\HPDetect\1.0.0.0\npHPDetect.dll (HP)
[2014-04-20 01:19:43 | 000,000,000 | ---D | M] (Settings Manager) -- C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{18D63913-1600-1A60-CAA3-13A60D86A1B1}
[2014-04-21 04:41:42 | 000,000,000 | ---D | M] (Swirlz) -- C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}
[2014-04-19 22:29:23 | 000,000,000 | ---D | M] (MediaPlayerplus) -- C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com
[2014-04-19 22:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData
[2014-04-19 22:29:21 | 000,000,000 | ---D | M] (No name found) -- C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins
[2014-04-19 22:29:20 | 000,000,000 | ---D | M] (No name found) -- C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\userCode
[2014-04-19 20:45:29 | 000,075,130 | ---- | M] () (No name found) -- C:\Users\lisef_000\AppData\Roaming\mozilla\firefox\profiles\ixi1b9rr.default-1396026272403\extensions\om@offermosquito.com.xpi
[2014-04-19 05:54:09 | 000,353,958 | ---- | M] () (No name found) -- C:\Users\lisef_000\AppData\Roaming\mozilla\firefox\profiles\ixi1b9rr.default-1396026272403\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}.xpi
CHR - default_search_provider: search_url = https://fr.search.yahoo.com/yhs/search?hspart=aztec&hsimp=yhs-default&type=ds_123_476&p=&rnd=565091192¶m1=sid%3D476%3Aaid%3D123%3Aver%3D12302%3Atm%3D322%3Asrc%3Dds%3Alng%3Den%3Aitype%3Dn%3Auip%3D1540432858%3Aup%3D{searchTerms} <b>[Pays US - 23.23.140.1]</b>
CHR - default_search_provider: suggest_url = ,
CHR - homepage: https://www.default-search.net/?sid=476&aid=123&itype=n&ver=12302&tm=322&src=hmp <b>[Pays US - 23.23.140.1]</b>
O4 - HKCU..\Run: [ContentExplorer] C:\Users\lisef_000\AppData\Roaming\ContentExplorer\ContentExplorer.exe (ContentExplorer)
O36 - AppCertDlls: x64 - (c:\program files (x86)\settings manager\systemk\x64\sysapcrt.dll) - c:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll ()
O36 - AppCertDlls: x86 - (c:\program files (x86)\settings manager\systemk\sysapcrt.dll) - c:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll ()
[2014-04-21 04:42:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Tbccint
[2014-04-21 04:42:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Tbccint
[2014-04-21 04:42:01 | 000,000,000 | ---D | C] -- C:\Users\lisef_000\AppData\Local\Tbccint
[2014-04-21 04:41:50 | 000,000,000 | ---D | C] -- C:\Program Files\suprasavings
[2014-04-21 04:41:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AnyProtectEx
[2014-04-21 04:41:07 | 000,000,000 | ---D | C] -- C:\Users\lisef_000\AppData\Roaming\VOPackage
[2014-04-21 04:40:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BetterDeals-11
[2014-04-21 04:40:15 | 000,000,000 | ---D | C] -- C:\Program Files\003
[2014-04-19 16:47:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Logs
[2014-04-19 16:40:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LookSafe Utility
[2014-04-19 16:40:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Settings Manager
[2014-04-19 16:39:59 | 000,000,000 | ---D | C] -- C:\ProgramData\systemk
[2014-04-19 12:21:23 | 000,000,000 | ---D | C] -- C:\Users\lisef_000\AppData\Roaming\DriverCure
[2014-04-17 11:39:59 | 000,000,000 | ---D | C] -- C:\Users\lisef_000\AppData\Local\ZombieAlert
[2014-04-17 11:39:11 | 000,000,000 | ---D | C] -- C:\ProgramData\ZombieAlert
[2014-04-16 13:39:51 | 000,000,000 | ---D | C] -- C:\Users\lisef_000\AppData\Roaming\ContentExplorer
[2014-04-16 13:35:25 | 000,000,000 | ---D | C] -- C:\Users\lisef_000\AppData\Roaming\mysearchdial
[2014-04-16 13:35:11 | 001,079,839 | ---- | C] (AnyProtect.com) -- C:\Users\lisef_000\AppData\Local\AnyProtectScannerSetup.exe
[2014-04-16 13:28:33 | 000,000,000 | ---D | C] -- C:\Users\lisef_000\AppData\Local\LPT
[2014-04-16 13:28:00 | 000,000,000 | ---D | C] -- C:\Users\lisef_000\AppData\Local\Smartbar
[2014-04-21 11:14:35 | 000,003,128 | ---- | M] () -- C:\Windows\tasks\cf5e64e3-8c82-4a2c-9310-db0821db11bd-3.job
[2014-04-21 11:14:35 | 000,002,174 | ---- | M] () -- C:\Windows\tasks\cf5e64e3-8c82-4a2c-9310-db0821db11bd-4.job
[2014-04-21 11:14:35 | 000,001,488 | ---- | M] () -- C:\Windows\tasks\cf5e64e3-8c82-4a2c-9310-db0821db11bd-5.job
[2014-04-21 11:14:35 | 000,000,344 | ---- | M] () -- C:\Windows\tasks\spmonitor.job
[2014-04-21 04:45:51 | 000,000,000 | ---D | M] -- C:\Users\lisef_000\AppData\Roaming\VOPackage
[2013-09-12 23:14:10 | 000,000,000 | ---D | M] -- C:\Users\lisef_000\AppData\Roaming\Systweak
[2013-04-15 14:51:41 | 000,000,000 | ---D | M] -- C:\Users\lisef_000\AppData\Roaming\Babylon
[2014-04-19 22:29:23 | 000,000,000 | ---D | M] -- C:\Users\lisef_000\AppData\Roaming\ContentExplorer
[2013-11-08 17:50:44 | 000,000,000 | ---D | M] -- C:\Users\lisef_000\AppData\Roaming\DataMgr
[2014-04-19 12:21:23 | 000,000,000 | ---D | M] -- C:\Users\lisef_000\AppData\Roaming\DriverCure
[2013-12-24 20:04:10 | 000,000,000 | ---D | M] -- C:\Users\lisef_000\AppData\Roaming\Intermediate
[2014-04-16 13:35:36 | 000,000,000 | ---D | M] -- C:\Users\lisef_000\AppData\Roaming\mysearchdial
[2013-11-08 17:48:57 | 000,000,000 | ---D | M] -- C:\Users\lisef_000\AppData\Roaming\OfferMosquito


* poste le rapport ici


Redémarre l'ordinateur

1
molly0033 Messages postés 13 Date d'inscription   Statut Membre Dernière intervention  
 
voici le nouveau rapport otl
========== OTL ==========
Service xmkysecqun64 stopped successfully!
Service xmkysecqun64 deleted successfully!
C:\Program Files\003\xmkysecqun64.exe moved successfully.
Service ZombieAlert stopped successfully!
Service ZombieAlert deleted successfully!
C:\ProgramData\ZombieAlert\ZombieAlertService.exe moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A5165AA5-75B0-46F1-A23D-0CD3AB0ADCCE}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A5165AA5-75B0-46F1-A23D-0CD3AB0ADCCE}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D944BB61-2E34-4DBF-A683-47E505C587DC}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A5165AA5-75B0-46F1-A23D-0CD3AB0ADCCE}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A5165AA5-75B0-46F1-A23D-0CD3AB0ADCCE}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D944BB61-2E34-4DBF-A683-47E505C587DC}\ not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A5165AA5-75B0-46F1-A23D-0CD3AB0ADCCE}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A5165AA5-75B0-46F1-A23D-0CD3AB0ADCCE}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BFE304CC-61CB-4225-87AD-AF26F4D04493}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BFE304CC-61CB-4225-87AD-AF26F4D04493}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D944BB61-2E34-4DBF-A683-47E505C587DC}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{F7973799-700E-4D73-8F90-FB61C5477C44}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F7973799-700E-4D73-8F90-FB61C5477C44}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{searchTerms}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{searchTerms}\ not found.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\| /E : value set successfully!
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\| /E : value set successfully!
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\| /E : value set successfully!
Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\bebomedia.com/OfferMosquitoIEHelper\ deleted successfully.
C:\Users\lisef_000\AppData\Local\ext_offermosquito\npOfferMosquitoIEHelper.dll moved successfully.
Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\hp.com/HPDetect\ deleted successfully.
C:\Users\lisef_000\AppData\Roaming\HewlettPackard\HPDetect\1.0.0.0\npHPDetect.dll moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{18D63913-1600-1A60-CAA3-13A60D86A1B1} folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\defaults folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\components folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\test\toolbar folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\test folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\lib\jquery.alerts folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\lib folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\wa\WEATHER folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\wa\TWITTER folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\wa\SEARCH\view\style folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\wa\SEARCH\view folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\wa\SEARCH folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\wa\RADIO_PLAYER\js folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\wa\RADIO_PLAYER\css folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\wa\RADIO_PLAYER folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\wa\PRICE_GONG\css folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\wa\PRICE_GONG folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\wa\Optimizer folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\wa\NOTIFICATION\images folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\wa\NOTIFICATION folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\wa\MULTI_RSS\js folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\wa\MULTI_RSS folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\wa\HIGHLIGHTER folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\wa\EMAIL_NOTIFIER folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\wa\APPLICATION_BUTTON folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\wa folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\ui\menu folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\ui\gf folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\ui\dlg\restart folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\ui\dlg\ftd folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\ui\dlg folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\ui folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\sp\spsd folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\sp\spbd folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\sp folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\options\js folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\options folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\ac folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al\aboutBox folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb\al folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\tb folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\logic\uninstall\dialog folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\logic\uninstall folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content\logic folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759\content folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome\CT3309759 folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9}\Chrome folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\{4cb3c467-0d72-44e6-9237-750b9b8b5ac9} folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\locale folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\defaults folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome\content folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\chrome folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com folder moved successfully.
Folder C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\ not found.
Folder C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\plugins\ not found.
Folder C:\Users\lisef_000\AppData\Roaming\mozilla\Firefox\Profiles\ixi1b9rr.default-1396026272403\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com\extensionData\userCode\ not found.
File C:\Users\lisef_000\AppData\Roaming\mozilla\firefox\profiles\ixi1b9rr.default-1396026272403\extensions\om@offermosquito.com.xpi not found.
File C:\Users\lisef_000\AppData\Roaming\mozilla\firefox\profiles\ixi1b9rr.default-1396026272403\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}.xpi not found.
Use Chrome's Settings page to remove the default_search_provider items.
Use Chrome's Settings page to remove the default_search_provider items.
Use Chrome's Settings page to change the HomePage.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ContentExplorer deleted successfully.
C:\Users\lisef_000\AppData\Roaming\ContentExplorer\ContentExplorer.exe moved successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls\\x64 deleted successfully.
c:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll moved successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls\\x86 deleted successfully.
c:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll moved successfully.
C:\Program Files (x86)\Tbccint\ToolbarService folder moved successfully.
C:\Program Files (x86)\Tbccint folder moved successfully.
C:\ProgramData\Tbccint\Multi\CT3309759 folder moved successfully.
C:\ProgramData\Tbccint\Multi folder moved successfully.
C:\ProgramData\Tbccint\IE\CT3309759 folder moved successfully.
C:\ProgramData\Tbccint\IE folder moved successfully.
C:\ProgramData\Tbccint folder moved successfully.
C:\Users\lisef_000\AppData\Local\Tbccint\CT3309759 folder moved successfully.
C:\Users\lisef_000\AppData\Local\Tbccint\Community Alerts folder moved successfully.
C:\Users\lisef_000\AppData\Local\Tbccint folder moved successfully.
C:\Program Files\suprasavings folder moved successfully.
C:\Program Files (x86)\AnyProtectEx folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\VOPackage folder moved successfully.
C:\Program Files (x86)\BetterDeals-11 folder moved successfully.
C:\Program Files\003 folder moved successfully.
C:\ProgramData\Logs folder moved successfully.
C:\Program Files (x86)\LookSafe Utility folder moved successfully.
C:\Program Files (x86)\Settings Manager\systemk\x64 folder moved successfully.
C:\Program Files (x86)\Settings Manager\systemk folder moved successfully.
C:\Program Files (x86)\Settings Manager folder moved successfully.
C:\ProgramData\systemk folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\DriverCure folder moved successfully.
C:\Users\lisef_000\AppData\Local\ZombieAlert folder moved successfully.
C:\ProgramData\ZombieAlert folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\ContentExplorer folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mysearchdial\UpdateProc folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mysearchdial\icons_2.20.1.0 folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\mysearchdial folder moved successfully.
C:\Users\lisef_000\AppData\Local\AnyProtectScannerSetup.exe moved successfully.
C:\Users\lisef_000\AppData\Local\LPT\Resources folder moved successfully.
C:\Users\lisef_000\AppData\Local\LPT\Configs folder moved successfully.
C:\Users\lisef_000\AppData\Local\LPT folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\DistributionFiles\Profiles folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\DistributionFiles\Configs folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\DistributionFiles folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Common\ServicesPlugins folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Common\iconsWide folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Common\icons folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Common\Configs folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Common folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application\tr folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application\ru folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application\pt folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application\nl folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application\it folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application\helperbar@helperbar.com folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application\he folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application\fr folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application\es folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application\de folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application\Configs folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application\ar folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\PublisherImages folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\JS folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\images folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\CSS folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar\Application folder moved successfully.
C:\Users\lisef_000\AppData\Local\Smartbar folder moved successfully.
C:\Windows\Tasks\cf5e64e3-8c82-4a2c-9310-db0821db11bd-3.job moved successfully.
C:\Windows\Tasks\cf5e64e3-8c82-4a2c-9310-db0821db11bd-4.job moved successfully.
C:\Windows\Tasks\cf5e64e3-8c82-4a2c-9310-db0821db11bd-5.job moved successfully.
C:\Windows\Tasks\spmonitor.job moved successfully.
Folder C:\Users\lisef_000\AppData\Roaming\VOPackage\ not found.
C:\Users\lisef_000\AppData\Roaming\Systweak folder moved successfully.
C:\Users\lisef_000\AppData\Roaming\Babylon folder moved successfully.
Folder C:\Users\lisef_000\AppData\Roaming\ContentExplorer\ not found.
C:\Users\lisef_000\AppData\Roaming\DataMgr folder moved successfully.
Folder C:\Users\lisef_000\AppData\Roaming\DriverCure\ not found.
C:\Users\lisef_000\AppData\Roaming\Intermediate folder moved successfully.
Folder C:\Users\lisef_000\AppData\Roaming\mysearchdial\ not found.
C:\Users\lisef_000\AppData\Roaming\OfferMosquito folder moved successfully.

OTL by OldTimer - Version 3.2.69.0 log created on 04212014_143241
merci.
0
molly0033 Messages postés 13 Date d'inscription   Statut Membre Dernière intervention  
 
ok quant je redémarre mon ordinateur il y a ceci qui apparais.
uniblue
speeduppc2013
plus registry booster.
merci
0
Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 685
 
regarde si tu peux les désinstaller depuis programmes et fonctionnalités.

Refais un scan OTL et donne le rapport par pjjoint.

Tu as/avais bcp de programmes parasites.
0
molly0033 Messages postés 13 Date d'inscription   Statut Membre Dernière intervention  
 
voici le nouveau rapport otl
https://pjjoint.malekal.com/files.php?id=OTL_20140421_j13u8y7j6w15
merci
0
molly0033 Messages postés 13 Date d'inscription   Statut Membre Dernière intervention  
 
slt même quant je vais dans programme et fonctionnalité je trouve pas le programme qui ouvre toujours,uniblue
merci
0
Réponse 3 / 6
Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 685
 
Désactive le proxy sur Internet Explorer : https://forums.commentcamarche.net/forum/affich-37640573-desactiver-son-proxy


Relance OTL.
o sous Personnalisation (Custom Scan), copie_colle le contenu du cadre ci dessous (bien prendre :OTL en début).
Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:


:OTL
CHR - default_search_provider: search_url = https://fr.search.yahoo.com/yhs/search?hspart=aztec&hsimp=yhs-default&type=ds_123_476&p=&rnd=565091192¶m1=sid%3D476%3Aaid%3D123%3Aver%3D12302%3Atm%3D322%3Asrc%3Dds%3Alng%3Den%3Aitype%3Dn%3Auip%3D1540432858%3Aup%3D{searchTerms} <b>[Pays US - 23.23.140.1]</b>
CHR - default_search_provider: suggest_url = ,
CHR - homepage: https://www.default-search.net/?sid=476&aid=123&itype=n&ver=12302&tm=322&src=hmp <b>[Pays US - 23.23.140.1]</b>
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {4CB3C467-0D72-44E6-9237-750B9B8B5AC9} - No CLSID value found.
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No CLSID value found.
O3:[b]64bit:[/b] - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {4cb3c467-0d72-44e6-9237-750b9b8b5ac9} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3:HKU - HKCU\..\Toolbar\WebBrowser: (Swirlz Toolbar) - {4CB3C467-0D72-44E6-9237-750B9B8B5AC9} - C:\Users\lisef_000\AppData\LocalLow\Swirlz\prxtbSwir.dll (ClientConnect Ltd.)
[2014-03-31 16:40:12 | 001,161,080 | ---- | M] () -- C:\Windows\SysWow64\ZombieAlert.A222801BB6B4.dll
[2014-04-21 14:38:22 | 000,000,380 | ---- | M] () -- C:\Windows\tasks\APSnotifierPP1.job
[2014-04-21 14:38:22 | 000,000,378 | ---- | M] () -- C:\Windows\tasks\APSnotifierPP3.job
[2014-04-21 14:38:22 | 000,000,378 | ---- | M] () -- C:\Windows\tasks\APSnotifierPP2.job
:files
C:\Program Files (x86)\Uniblue\
C:\Users\lisef_000\AppData\LocalLow\Swirlz\


* poste le rapport ici


Redémarre l'ordinateur

Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left
1
molly0033 Messages postés 13 Date d'inscription   Statut Membre Dernière intervention  
 
désolé voici le nouveau rapport otl
https://pjjoint.malekal.com/files.php?id=20140421_p7x14u7q13q5
merci
0
Réponse 4 / 6
Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 685
 
ça va mieux ?
1
molly0033 Messages postés 13 Date d'inscription   Statut Membre Dernière intervention  
 
un GROS,GROS merci.
0

Vous n’avez pas trouvé la réponse que vous recherchez ?

Posez votre question
Réponse 5 / 6
Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 685
 
super :)

Installe Malwarebyte's Anti-Malware : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Fais des scans réguliers avec, il est efficace.



Pour ne plus te faire avoir.
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/


1
Réponse 6 / 6
molly0033 Messages postés 13 Date d'inscription   Statut Membre Dernière intervention  
 
j ai rentrer adwcleaner et il ma donner un rapport.# AdwCleaner v3.100 - Rapport créé le 20/04/2014 à 14:25:10
# Mis à jour le 20/04/2014 par Xplode
# Système d'exploitation : Windows 8 (64 bits)
# Nom d'utilisateur : lise - MAYA
# Exécuté depuis : C:\Users\lisef_000\Downloads\adwcleaner.exe
# Option : Nettoyer

***** [ Services ] *****

Service Supprimé : buuoujqmrk64
[#] Service Supprimé : hlnfd
[#] Service Supprimé : SystemkService

***** [ Fichiers / Dossiers ] *****

Dossier Supprimé : C:\ProgramData\Babylon
Dossier Supprimé : C:\ProgramData\boost_interprocess
Dossier Supprimé : C:\ProgramData\Browser Manager
Dossier Supprimé : C:\ProgramData\Package Cache
Dossier Supprimé : C:\ProgramData\Registry Helper
Dossier Supprimé : C:\ProgramData\SpeedMaxPc
[!] Dossier Supprimé : C:\ProgramData\systemk
Dossier Supprimé : C:\ProgramData\Tarma Installer
Dossier Supprimé : C:\ProgramData\VisualBee
Dossier Supprimé : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
Dossier Supprimé : C:\Program Files (x86)\AnyProtectEx
Dossier Supprimé : C:\Program Files (x86)\MediaPlayerplus
Dossier Supprimé : C:\Program Files (x86)\Optimizer Pro
Dossier Supprimé : C:\Program Files (x86)\predm
[!] Dossier Supprimé : C:\Program Files (x86)\Settings Manager
Dossier Supprimé : C:\Program Files (x86)\Uniblue
Dossier Supprimé : C:\Program Files\003
Fichier Supprimé : C:\END
Fichier Supprimé : C:\Windows\System32\roboot64.exe
Fichier Supprimé : C:\Windows\System32\Tasks\Advanced System Protector
Fichier Supprimé : C:\Windows\Tasks\MySearchDial.job
Fichier Supprimé : C:\Windows\System32\Tasks\MySearchDial
Fichier Supprimé : C:\Windows\Tasks\SpeedUpMyPC Maintenance.job
Fichier Supprimé : C:\Windows\System32\Tasks\SpeedUpMyPC Maintenance
Fichier Supprimé : C:\Windows\Tasks\SpeedUpMyPC Startup.job
Fichier Supprimé : C:\Windows\System32\Tasks\SpeedUpMyPC Startup
Fichier Supprimé : C:\Windows\System32\Tasks\SpyHunter4Startup

***** [ Raccourcis ] *****


***** [ Registre ] *****

Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf
Clé Supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\ehgldbbpchgpcfagfpfjgoomddhccfgh
Clé Supprimée : HKCU\Software\Google\Chrome\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Infrastructure Helper]
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [DataMgr]
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Intermediate]
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [OMESupervisor]
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [scheck]
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Snoozer]
Valeur Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [ssync]
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Clé Supprimée : HKLM\SOFTWARE\Classes\Prod.cap
Clé Supprimée : HKLM\SOFTWARE\Classes\speedupmypc
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasapi32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasmancs
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\speedupmypc_RASAPI32
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Tracing\speedupmypc_RASMANCS
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Valeur Supprimée : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Valeur Supprimée : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Clé Supprimée : HKCU\Software\828f8fb069ef44
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT3268494
Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT3290971
Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{0EEDB912-C5FA-486F-8334-57288578C627}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{82B16A3D-F03E-4565-A532-666B219C9A53}
Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0EEDB912-C5FA-486F-8334-57288578C627}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{82B16A3D-F03E-4565-A532-666B219C9A53}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0EEDB912-C5FA-486F-8334-57288578C627}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3BC93E76-92F8-5FDA-B676-5AFEE3735BF1}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82B16A3D-F03E-4565-A532-666B219C9A53}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0EEDB912-C5FA-486F-8334-57288578C627}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82B16A3D-F03E-4565-A532-666B219C9A53}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3BC93E76-92F8-5FDA-B676-5AFEE3735BF1}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{377E5D4D-77E5-476A-8716-7E70A9272DA0}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{0EEDB912-C5FA-486F-8334-57288578C627}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Clé Supprimée : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0EEDB912-C5FA-486F-8334-57288578C627}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Clé Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Clé Supprimée : HKCU\Software\AnyProtect
Clé Supprimée : HKCU\Software\BabylonToolbar
Clé Supprimée : HKCU\Software\ilivid
Clé Supprimée : HKCU\Software\InstallCore
Clé Supprimée : HKCU\Software\installedbrowserextensions
Clé Supprimée : HKCU\Software\mysearchdial.com
Clé Supprimée : HKCU\Software\OfferMosquito
Clé Supprimée : HKCU\Software\Protector
Clé Supprimée : HKCU\Software\SmartBar
Clé Supprimée : HKCU\Software\smartbarbackup
Clé Supprimée : HKCU\Software\smartbarlog
Clé Supprimée : HKCU\Software\Softonic
Clé Supprimée : HKCU\Software\SpeedMaxPC
Clé Supprimée : HKCU\Software\systweak
Clé Supprimée : HKCU\Software\TutoTag
Clé Supprimée : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clé Supprimée : HKCU\Software\AppDataLow\Software\Crossrider
Clé Supprimée : HKCU\Software\AppDataLow\Software\DynConIE
Clé Supprimée : HKCU\Software\AppDataLow\Software\PriceGong
Clé Supprimée : HKCU\Software\AppDataLow\Software\Rr Savings
Clé Supprimée : HKCU\Software\AppDataLow\Software\suprasavings
Clé Supprimée : HKCU\Software\AppDataLow\Software\ViewPassword
Clé Supprimée : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Clé Supprimée : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Clé Supprimée : HKLM\Software\Babylon
Clé Supprimée : HKLM\Software\installedbrowserextensions
Clé Supprimée : HKLM\Software\mysearchdial
Clé Supprimée : HKLM\Software\Registry Helper
Clé Supprimée : HKLM\Software\SpeedMaxPC
Clé Supprimée : HKLM\Software\suprasavings
Clé Supprimée : HKLM\Software\systweak
Clé Supprimée : HKLM\Software\Tutorials
Clé Supprimée : HKLM\Software\Uniblue
Clé Supprimée : HKLM\Software\visualbee
Clé Supprimée : [x64] HKLM\SOFTWARE\installedbrowserextensions
Clé Supprimée : [x64] HKLM\SOFTWARE\LevelQualityWatcher
Clé Supprimée : [x64] HKLM\SOFTWARE\suprasavings
Clé Supprimée : [x64] HKLM\SOFTWARE\Tarma Installer
Donnée Supprimée : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\Linkey\IEEXTE~1\iedll64.dll

***** [ Navigateurs ] *****

-\\ Internet Explorer v10.0.9200.16537

Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
Paramètre Restauré : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
Paramètre Restauré : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Paramètre Restauré : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v28.0 (fr)

-\\ Google Chrome v

*************************

AdwCleaner[R0].txt - [14353 octets] - [20/04/2014 14:23:51]
AdwCleaner[S0].txt - [11018 octets] - [20/04/2014 14:25:10]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [11079 octets] ##########
0

Discussions similaires

Supprimer compte Tendermeets.com
anonyme -
anonyme -

1 réponse