Infecté par TVWizzard Résolu/Fermé

Question

Bonjour, 
Même problème que décrit dans ce post.
J'ai suivi la procédure indiquée par Malekal_morte.
Ci-dessous les liens vers les rapports OTL:
- Extra.txt : https://pjjoint.malekal.com/files.php?id=20150119_c67r14h6q5
- OTL.txt :  https://pjjoint.malekal.com/files.php?id=20150119_t13m14l11n14v12
Par avance merci pour votre aide.
Salutations,
R.


Configuration: Windows 8 / Chrome 39.0.2171.99

IdAnonymous · Answer

Mauvaise manip sorry ; je fais référence à ce post:
https://forums.commentcamarche.net/forum/affich-30786224-comment-supprimer-tv-wizard

Malekal_morte- · Answer

Salut,



Relance OTL. 
o sous Personnalisation (Custom Scan), copie_colle le contenu  ci dessous (bien prendre :OTL en début).
Clic Correction (Fix), un rapport apparraitra, copie/colle le contenu ici:  


:OTL
SRV - [2015/01/18 20:39:41 | 002,726,256 | ---- | M] (Small Island Development) [Auto | Running] -- C:\ProgramData\XJVvSjB\TncQusMjGpa.exe -- (TncQusMjGpa)
[2014/12/29 03:05:59 | 000,000,000 | ---D | C] -- C:\ProgramData\{BDD45517-ED56-8491-5CD0-F4138C52279D}
[2014/12/29 01:56:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\00541fdc-b918-43dd-9fea-09f9fee70ac2
[2015/01/18 20:39:41 | 000,000,000 | ---D | C] -- C:\ProgramData\XJVvSjB
[2015/01/18 20:39:29 | 001,842,144 | ---- | C] (MDplay+version) -- C:\Users\La Canette\AppData\Roaming\DQBG.exe

* poste le rapport ici 

Redémarre l'ordinateur

IdAnonymous · Answer

Cf. rapport ci-dessous (il y des erreurs...) : ______________________ Error: Unable to interpret <%ALLUSERSPROFILE%\Application Data\*. > in the current context! Error: Unable to interpret <%ALLUSERSPROFILE%\Application Data\*.exe /s > in the current context! Error: Unable to interpret <%ALLUSERSPROFILE%\Application Data\*.dll /s > in the current context! Error: Unable to interpret <%APPDATA%\*. > in the current context! Error: Unable to interpret <%PROGRAMFILES%\*. > in the current context! Error: Unable to interpret <%PROGRAMDATA%\*. > in the current context! Error: Unable to interpret <%APPDATA%\*.exe /s > in the current context! Error: Unable to interpret <%temp%\*.exe /s > in the current context! Error: Unable to interpret <%SYSTEMDRIVE%\*.exe > in the current context! Error: Unable to interpret <%systemroot%\*. /mp /s > in the current context! Error: Unable to interpret <%systemroot%\system32\consrv.dll > in the current context! Error: Unable to interpret <%systemroot%\system32\*.dll /lockedfiles > in the current context! Error: Unable to interpret <%windir%\Tasks\*.job /lockedfiles > in the current context! Error: Unable to interpret <%systemroot%\system32\drivers\*.sys /lockedfiles > in the current context! Error: Unable to interpret <%systemroot%\System32\config\*.sav > in the current context! Error: Unable to interpret in the current context! Error: Unable to interpret in the current context! Error: Unable to interpret in the current context! Error: Unable to interpret in the current context! Error: Unable to interpret in the current context! ========== OTL ========== Error: Unable to stop service TncQusMjGpa! Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TncQusMjGpa deleted successfully. C:\ProgramData\XJVvSjB\TncQusMjGpa.exe moved successfully. C:\ProgramData\{BDD45517-ED56-8491-5CD0-F4138C52279D}\1.7.1.0 folder moved successfully. C:\ProgramData\{BDD45517-ED56-8491-5CD0-F4138C52279D} folder moved successfully. C:\Program Files (x86)\00541fdc-b918-43dd-9fea-09f9fee70ac2 folder moved successfully. Folder move failed. C:\ProgramData\XJVvSjB\dat scheduled to be moved on reboot. Folder move failed. C:\ProgramData\XJVvSjB scheduled to be moved on reboot. C:\Users\La Canette\AppData\Roaming\DQBG.exe moved successfully. OTL by OldTimer - Version 3.2.69.0 log created on 01192015_123353 Files\Folders moved on Reboot... C:\ProgramData\XJVvSjB\dat folder moved successfully. C:\ProgramData\XJVvSjB folder moved successfully. PendingFileRenameOperations files... Registry entries deleted on Reboot...

Malekal_morte- · Answer

=)



Voila, c'est terminé, tu peux supprimer les programmes utilisés.

Quelques conseils :


Installe Malwarebyte's Anti-Malware : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Fais des scans réguliers avec, il est efficace.
(sauf si tu es sur un netbook)

Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start=


Pour ne plus te faire avoir.
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/ 


Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html

Infecté par TVWizzard

4 réponses

Discussions similaires