lecture FRST pour résoudre une pollution pub sur mon PC Fermé

Question

Bonjour à tous.
    Après avoir longuement cherché a résoudre le problème de mon père qui a    - en plus du reste- une fenêtre intempestive "you are missing a plugin to play the video". Inefficace: ccleaner, adwcleaner, malwareantimalware plus son antivirus microsoft essentiel.
J'ai trouvé par CCM le tutorial Farbar Recovery Scan Tool et je l'ai appliqué jusqu'à l'obtention des liens grâce à pjjointmalekal.com.

1:  A partir de là, on se sent bien seul... Pourriez-vous, svp, y jeter un oeil et m'envoyer un correctif??? 
2:  Existe t-il un correcteur automatique pour que des personnes comme moi ne viennent vous embêter avec des choses qui sont certainement bateau pour vous?

Merci d'avance pour les réponses, affirmatives ou non.

kernavo! 
Fuzuke. (un manga rigolot)

Destrio5 · Answer

Bonjour,

Il n'y a pas de correcteur automatique.

Tu peux mettre les deux liens, je regarderai.

Destrio5 · Answer

Fais un scan avec RogueKiller puis transmets-moi le rapport :
https://www.commentcamarche.net/faq/30719-utiliser-roguekiller

Destrio5 · Answer

--> Ouvre le Bloc-notes (Démarrer => Tous les programmes => Accessoires => Bloc-notes). --> Copie-colle le texte en gras ci-dessous dans le Bloc-notes : start CloseProcesses: HKU\S-1-5-21-3955473603-544043898-4286527960-1000\...0c966feabec1\InprocServer32: [Default-shell32] ATTENTION! ====> ZeroAccess? HKU\S-1-5-21-3955473603-544043898-4286527960-1000\...A8F59079A8D5}\localserver32: <==== ATTENTION! CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION HKU\S-1-5-21-3955473603-544043898-4286527960-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION URLSearchHook: [S-1-5-21-3955473603-544043898-4286527960-1000] ATTENTION ==> Default URLSearchHook is missing. BHO: rrocKeTddeal -> {3db0c605-b77d-44bc-b5ab-ac073eebaac0} -> C:\Program Files\rrocKeTddeal\LIuNHSJNZM5K1r.dll () BHO: CoOlnncheAp -> {41506ff8-ed89-4650-b55e-178fae42bbd3} -> C:\Program Files\CoOlnncheAp\LQ0GGyaCwim3fX.dll () DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab FF Extension: roCkketdeeal - C:\Users\remi\AppData\Roaming\Mozilla\Firefox\Profiles\cgxzetzh.default-1417965153365\Extensions\pGrDoE@R9H.edu [2015-02-15] FF Extension: lowporicEs - C:\Users\remi\AppData\Roaming\Mozilla\Firefox\Profiles\cgxzetzh.default-1417965153365\Extensions\uiyibv@fg3.org [2014-12-28] CHR Extension: (Interest Recognizer for Pixeasy) - C:\Users\remi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaigemenfdchjldbnoeklodikdljomnf [2012-09-04] CHR Extension: (TheFreeDictionarycom Extension) - C:\Users\remi\AppData\Local\Google\Chrome\User Data\Default\Extensions\afgabimphpgkjochcoogplolgpcagmap [2015-01-16] CHR Extension: (aappsave) - C:\Users\remi\AppData\Local\Google\Chrome\User Data\Default\Extensions\clehimfagikkhcmidjghpgplpgdgiide [2015-02-15] CHR Extension: (ifhikkcafabcgolfjegfcgloomalapol) - C:\Users\remi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifhikkcafabcgolfjegfcgloomalapol [2014-12-03] CHR Extension: (FSymbols Stickers for Facebook) - C:\Users\remi\AppData\Local\Google\Chrome\User Data\Default\Extensions\kehodepjgiiheddbihdkcgcbkeibmnij [2015-02-15] CHR Extension: (cheaap4ALll) - C:\Users\remi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkfdklejoieeoflihdhploecbkchehac [2015-01-31] S2 845ed441; c:\Program Files\ProcessFunc\ProcessFunc.dll [5348864 2014-12-27] () [File not signed] c:\Program Files\ProcessFunc S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X] 2015-02-17 09:23 - 2015-02-17 09:24 - 00775968 _____ (Reimage®) C:\Users\remi\Downloads\ReimageRepair(3).exe 2015-02-15 07:55 - 2015-02-15 07:56 - 00000000 ____D () C:\Program Files\rrocKeTddeal 2015-02-15 07:55 - 2015-02-15 07:56 - 00000000 ____D () C:\Program Files\roCkketdeeal 2015-02-15 07:55 - 2015-02-15 07:56 - 00000000 ____D () C:\Program Files\aappsave 2015-01-31 08:34 - 2015-01-31 08:38 - 00000000 ____D () C:\Program Files\Ed2kHelper 2015-01-31 08:34 - 2015-01-31 08:38 - 00000000 ____D () C:\Program Files\CoOlnncheAp 2015-01-31 08:33 - 2015-01-31 08:38 - 00000000 ____D () C:\Program Files\cheaap4ALll 2015-01-22 22:00 - 2015-01-22 22:00 - 00775968 _____ (Reimage®) C:\Users\remi\Downloads\ReimageRepair(2).exe 2015-01-22 21:59 - 2015-01-22 22:00 - 00775968 _____ (Reimage®) C:\Users\remi\Downloads\ReimageRepair(1).exe 2015-02-19 21:55 - 2014-12-07 10:06 - 00001682 _____ () C:\Windows\Tasks\LSHLRGPF.job 2015-02-19 21:09 - 2015-01-16 08:02 - 00000000 ____D () C:\ProgramData\offeraPPp 2015-02-19 21:09 - 2015-01-16 08:01 - 00000000 ____D () C:\ProgramData\rockeatdEal 2015-02-19 21:09 - 2014-12-28 08:53 - 00000000 ____D () C:\ProgramData\lowPricEes 2015-02-19 21:09 - 2014-11-29 23:54 - 00000000 ____D () C:\Program Files\HQVid-v2.5V29.11 2014-09-01 09:18 - 2014-09-01 09:18 - 0001248 _____ () C:\Users\remi\AppData\Roaming\LSHLRGPF Task: {0073E32D-857B-4961-BB30-2C0A6A096483} - \a23a83a9-3831-448a-927d-d62a4a4d0608-3 No Task File <==== ATTENTION Task: {01D2A314-819D-45AF-928D-AE421BBD9C96} - \5e78d405-5ef8-415c-8ce7-429082810130 No Task File <==== ATTENTION Task: {02D2828E-D735-4A72-A5ED-619B600D87F1} - \70d1c105-1008-41d4-b85d-240ef575a3ff-11 No Task File <==== ATTENTION Task: {03B88F01-0D2D-42EC-8D8A-848D3F2A10E3} - \70d1c105-1008-41d4-b85d-240ef575a3ff-5_user No Task File <==== ATTENTION Task: {0B53B60C-CD73-4990-A68D-8B9D44750CED} - \1378e84e-a902-44c1-b5cc-f3762948367c-5 No Task File <==== ATTENTION Task: {10B78989-B5ED-461B-83CC-65B408BB421E} - \1378e84e-a902-44c1-b5cc-f3762948367c-4 No Task File <==== ATTENTION Task: {1EA0175C-4937-4DC9-86C3-AF6F257EBA5A} - \70d1c105-1008-41d4-b85d-240ef575a3ff-1 No Task File <==== ATTENTION Task: {26B40A35-85D9-497A-B7B3-1A9D518722AF} - \70d1c105-1008-41d4-b85d-240ef575a3ff-10_user No Task File <==== ATTENTION Task: {29C42376-20CA-424B-B830-FC94690D546F} - \ad1ca8ac-8c4a-45aa-953d-1f2812f5573c No Task File <==== ATTENTION Task: {3BB6E842-CCB6-46B0-8801-B7E3FD8870F7} - \70d1c105-1008-41d4-b85d-240ef575a3ff-7 No Task File <==== ATTENTION Task: {3FCACFB2-9DDE-44AD-884F-6B03C5A9D7BF} - \1378e84e-a902-44c1-b5cc-f3762948367c-6 No Task File <==== ATTENTION Task: {567CA967-27A8-4C56-8633-2A30C22544DC} - System32\Tasks\LSHLRGPF => C:\Users\remi\AppData\Roaming\LSHLRGPF.exe <==== ATTENTION Task: {5E7AAF5D-5763-4285-85CB-AB1324E7159C} - \globalUpdateUpdateTaskMachineCore No Task File <==== ATTENTION Task: {5FD665BC-CAD8-43E5-B6AF-DD0B040A1DE6} - \1378e84e-a902-44c1-b5cc-f3762948367c-1 No Task File <==== ATTENTION Task: {74E9241C-8FE0-48A0-B877-D357F4361FA6} - \d260984a-7aea-4eed-a74a-9936d7a614b5 No Task File <==== ATTENTION Task: {768FC361-6FB9-48A2-87E5-ECFFA8D76572} - \1378e84e-a902-44c1-b5cc-f3762948367c-5_user No Task File <==== ATTENTION Task: {803015A9-C7AA-4978-B5A5-3E1450EEEC9F} - \70d1c105-1008-41d4-b85d-240ef575a3ff-6 No Task File <==== ATTENTION Task: {82CF1433-1720-4D7C-B2D9-30D05BF18096} - \1378e84e-a902-44c1-b5cc-f3762948367c-3 No Task File <==== ATTENTION Task: {88746F3D-39B5-4038-9BF1-EB6E44924A45} - \1378e84e-a902-44c1-b5cc-f3762948367c-2 No Task File <==== ATTENTION Task: {9FFB4FE3-098B-46DB-8A49-36255D147506} - \70d1c105-1008-41d4-b85d-240ef575a3ff-4 No Task File <==== ATTENTION Task: {A61E0B17-F81C-4143-90DA-8098F4B943FE} - \70d1c105-1008-41d4-b85d-240ef575a3ff-3 No Task File <==== ATTENTION Task: {B63C9799-9393-4AD5-AC9E-4E5E14C8E5F7} - \70d1c105-1008-41d4-b85d-240ef575a3ff-2 No Task File <==== ATTENTION Task: {BFC2FE00-A13A-4720-A1D3-9F5809236B96} - \a23a83a9-3831-448a-927d-d62a4a4d0608-10_user No Task File <==== ATTENTION Task: {C5271336-6669-47EB-AD57-D7560E7A56F6} - \1378e84e-a902-44c1-b5cc-f3762948367c-7 No Task File <==== ATTENTION Task: {DCE626A5-AB7C-42B5-AA0F-B16187ED6D51} - \70d1c105-1008-41d4-b85d-240ef575a3ff-5 No Task File <==== ATTENTION Task: {F28F4317-0D89-48F0-BA8C-3D1C4BB49331} - \beb65a7c-a4f1-4e36-a647-0bf74db31cfd No Task File <==== ATTENTION Task: {F5C0656A-69ED-4395-9784-B32B015990C5} - \1378e84e-a902-44c1-b5cc-f3762948367c-11 No Task File <==== ATTENTION Task: C:\Windows\Tasks\LSHLRGPF.job => C:\Users\remi\AppData\Roaming\LSHLRGPF.exe <==== ATTENTION C:\Users\remi\AppData\Roaming\LSHLRGPF.exe Reg: reg delete "HKU\S-1-5-21-3955473603-544043898-4286527960-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{23564cb7-8dc2-4f54-80ba-75b958f88b3f}" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{01E5401C-D2E0-4FEC-9A37-92ACD8852F81}" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1D301950-EA2F-4882-9AA0-49467756842A}" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B9D71BE6-7226-4BA3-AB0D-09CCB27B6A9F}" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PDFCreator Toolbar" /f Reg: reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97BBECCF-B1FD-4010-8D4B-EFC9E3CCEECF}" /f end --> Enregistre le fichier sur ton Bureau (au même endroit que FRST) sous le nom fixlist.txt --> Lance FRST (Sous Windows Vista/7/8, clic droit sur FRST > Exécuter en tant qu'administrateur). --> Clique sur Fix. Patiente le temps de la correction. Note : si l'outil a besoin d'un redémarrage, laisse le système redémarrer normalement, l'outil terminera son travail. --> Une fois la correction terminée, un rapport Fixlog.txt sera présent sur le Bureau. --> Héberge le rapport sur pjjoint.malekal.com et copie-colle le lien fourni dans ta prochaine réponse.

Lecture FRST pour résoudre une pollution pub sur mon PC

3 réponses