Adware compatibility check.exe Cherche script FRST

humm y a des trojans, j'ai l'impression.


Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :

HKU\S-1-5-21-2363059054-3016285146-2918009218-1000\...\Run: [Windows Windows Update] => C:\Users\Raphael\AppData\Roaming\Windows Windows Update.exe
FF Plugin-x32: @www.dlmanager.net/omaha/tools//Software Update;version=8 -> C:\Program Files (x86)\Software\Update\1.2.201.0\npSoftwareOneClick8.dll (Boxore OU.)
FF Plugin HKU\S-1-5-21-2363059054-3016285146-2918009218-1000: boxore.com/BoxorePlugin -> C:\Program Files (x86)\Boxore\BoxoreClient\BoxorePlugin\1.0.0.1\npBoxorePlugin.dll (Boxore OU)
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\Web Assistant\Firefox
FF HKLM\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] - C:\Program Files\Web Assistant\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{9CD2384C-143B-4790-A075-E7FEFE2A554B}] - C:\Program Files (x86)\Boxore\BoxoreClient\BoxoreExtension\MozillaFirefox
FF HKLM-x32\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\Web Assistant\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] - C:\Program Files\Web Assistant\Firefox
CHR Plugin: (Boxore Plugin) - C:\Program Files (x86)\Boxore\BoxoreClient\BoxorePlugin\1.0.0.1\npBoxorePlugin.dll (Boxore OU)
CHR Plugin: (Software Update) - C:\Program Files (x86)\Software\Update\1.2.201.0\npSoftwareOneClick8.dll (Boxore OU.)
CHR HKLM\...\Chrome\Extension: [bakijjialdiiboeaknfpmflphhmljfkd] - C:\Users\Raphael\AppData\Local\newhb2.crx [2013-10-20]
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx [Not Found]
CHR HKU\S-1-5-21-2363059054-3016285146-2918009218-1000\...\Chrome\Extension: [bakijjialdiiboeaknfpmflphhmljfkd] - C:\Users\Raphael\AppData\Local\newhb2.crx [2013-10-20]
CHR HKU\S-1-5-21-2363059054-3016285146-2918009218-1000\...\Chrome\Extension: [paoponfhfdfnjgddpnpjkambkcgdaaib] - C:\Users\Raphael\AppData\Local\CRE\paoponfhfdfnjgddpnpjkambkcgdaaib.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [bakijjialdiiboeaknfpmflphhmljfkd] - C:\Users\Raphael\AppData\Local\newhb2.crx [2013-10-20]
CHR HKLM-x32\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [fjglfdldpdljgfjkfgieaocdapejkdlh] - C:\Program Files (x86)\Boxore\BoxoreClient\BoxoreExtension\GoogleChrome\BoxoreExtension.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\Raphael\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx [2012-06-07]
CHR HKLM-x32\...\Chrome\Extension: [jplinpmadfkdgipabgcdchbdikologlh] - C:\Program Files (x86)\1ClickDownload\1click12.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Windows\SysWOW64\jmdp\SweetNT.crx [2014-04-06]
CHR HKLM-x32\...\Chrome\Extension: [paoponfhfdfnjgddpnpjkambkcgdaaib] - C:\Users\Raphael\AppData\Local\CRE\paoponfhfdfnjgddpnpjkambkcgdaaib.crx [Not Found]
R2 IBUpdaterService; C:\Windows\system32\dmwu.exe [2919728 2014-08-27] ()
R2 rqpbhevlkc64; C:\Program Files\004\rqpbhevlkc64.exe [709120 2014-05-06] () [File not signed]
S2 supdate; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [139576 2012-10-27] (Boxore OU.)
R2 Verifies and fixes application compatibility issues; C:\Users\Raphael\AppData\Roaming\Compatibility Verifier\compatibilitychecksvc.exe [91304 2015-01-12] ()
2015-01-12 18:43 - 2015-01-15 20:15 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Compatibility Verifier
2015-01-12 18:43 - 2015-01-15 20:15 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Compatibility Verifier
2015-01-08 17:53 - 2015-01-08 17:53 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-08 17:52 - 2015-01-16 16:27 - 00000000 ____D () C:\Users\Raphael\AppData\Roaming\Compatibility Verifier
C:\Windows\System32\tprb
Task: {5C4B67BE-A2B6-4C72-A684-9EA3923A6035} - System32\Tasks\SoftwareUpdateTaskMachineCore => C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [2012-10-27] (Boxore OU.) <==== ATTENTION
Task: {DA0F0E6B-BB93-4622-8A0A-B5656CED7B7E} - System32\Tasks\SoftwareUpdateTaskMachineUA => C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [2012-10-27] (Boxore OU.) <==== ATTENTION
Task: {F6FE2611-1449-4D9A-B7C5-2552B242452D} - System32\Tasks\BoxSoftwareUpdate => C:\ProgramData\BoxUpdChk\updchk.exe [2013-08-16] () <==== ATTENTION
Task: {FC5F043E-8E6B-447E-9522-7C6A4DD6300F} - System32\Tasks\DigitalSite => C:\Users\Raphael\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\DigitalSite.job => C:\Users\Raphael\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: C:\Windows\Tasks\SoftwareUpdateTaskMachineCore.job => C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\SoftwareUpdateTaskMachineUA.job => C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe <==== ATTENTION
C:\Windows\SysWOW64\mjcm
C:\Windows\System32\tprb


Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

Relance FRST et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

Redémarre l'ordinateur