Desinfection PC

Salut,

Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB.
Voici la procédure à suivre pour les supprimer :

Commence par ceci :

Suis le tutorial AdwCleaner https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= ( d'Xplode )
Télécharge le sur ton bureau ou dossier de téléchargement.
Lance AdwCleaner, clique sur [Scanner].
L'analyse peux durer plusieurs minutes, patiente.
Une fois le scan terminé, ne décoche rien, clique sur [Nettoyer]

Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

puis :

Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
Télécharge et lance le scan FRST, cela va générer trois rapports FRST :

• FRST.txt
• Shortcut.txt
• Additionnal.txt

Envoie comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et donne les trois liens pjjoint de ces rapports afin qu'ils puissent être consultés.

salut, voici le rapport avec adw cleaner :
https://pjjoint.malekal.com/files.php?id=20150305_r9i14u12d6s7

et voici les liens pour les 3 rapports qui suivent :
https://pjjoint.malekal.com/files.php?id=20150305_o13h7h5l13v8
https://pjjoint.malekal.com/files.php?id=20150305_s14u10i6e5o13
https://pjjoint.malekal.com/files.php?id=20150305_v12u14l7s9j6

Salut,
quel moteur ?

es tu allé dans gestion des modules complémentaires ???

j'utilise google chrome

Désinstalle DriverMax,

Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :

HKU\S-1-5-21-648030371-180142737-259566797-1000\...\Run: [DriverMax] => C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe -agent
HKU\S-1-5-21-648030371-180142737-259566797-1000\...\Run: [DriverMax_RESTART] => C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe -RESTART
HKU\S-1-5-21-648030371-180142737-259566797-1000\...\Run: [Loader] => C:\Users\ALEXAN~1\AppData\Local\Temp\remote\loader.vbe <===== ATTENTION
HKU\S-1-5-21-648030371-180142737-259566797-1000\...\Run: [Keeper] => C:\Users\ALEXAN~1\AppData\Local\Temp\remote\gkeeper.vbe <===== ATTENTION
Task: {0633B7CC-6556-4024-9230-39B79BB53846} - System32\Tasks\klcp_update => C:\Program Files\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2015-02-18] ()
Task: {154F6B4E-C7A0-41BE-A6AD-9A8329D1E3EC} - System32\Tasks\SBW_UpdateTask_Time_333535373337323834342d3437415a556c2a3223346c41 => Wscript.exe //B "C:\ProgramData\SpeedBit\sbhe.js" sbu.exe /invoke /f:check_services /l:0
Task: {1B9FBDE4-94B5-42B8-9BCB-3862D2F92343} - System32\Tasks\dfa13398 => C:\Users\ALEXAN~1\AppData\Local\Temp\\setup1009883672.exe <==== ATTENTION
Task: {62464543-2416-40A1-982F-B3994E2DC79E} - System32\Tasks\{C2A6D9F7-CFEB-40F0-A4D8-8BF1C820A8C0} => pcalua.exe -a C:\Users\Alexandre\Downloads\IN1SRM08WW3.exe -d "C:\Program Files\Mozilla Firefox"
Task: {704610CB-B581-4047-B1DD-393BAF4F1D00} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION
Task: {D1F98269-E68C-4156-B7E3-D2D54373AD39} - System32\Tasks\c0bdd0a8 => C:\Users\ALEXAN~1\AppData\Local\Temp\\setup1113665192.exe <==== ATTENTION
Task: {E75B9815-8D9D-4AA9-8A65-4855523AAB5C} - \WSE_Astromenda No Task File <==== ATTENTION
2011-01-03 20:07 - 2011-01-03 20:07 - 0000344 _____ () C:\ProgramData\eHXCShrqZBG
2010-10-19 18:19 - 2010-10-19 18:19 - 0000056 _____ () C:\ProgramData\ezsidmv.dat
2011-01-03 19:44 - 2011-01-03 19:47 - 0000480 _____ () C:\ProgramData\LGFSLWGZ
2012-12-05 13:33 - 2012-12-05 13:33 - 0004988 _____ () C:\ProgramData\xgneqrwu.hrx
2011-05-29 11:37 - 2011-05-29 11:37 - 0000104 ____H () C:\ProgramData\~33283832
2011-05-29 11:37 - 2011-05-29 11:37 - 0000136 ____H () C:\ProgramData\~33283832r
2011-01-03 20:08 - 2011-01-03 20:08 - 0000272 _____ () C:\ProgramData\~eHXCShrqZBG
2011-01-03 20:08 - 2011-01-03 20:08 - 0000152 _____ () C:\ProgramData\~eHXCShrqZBGr
2011-01-03 19:44 - 2011-01-03 19:44 - 0000272 _____ () C:\ProgramData\~LGFSLWGZ
2011-01-03 19:44 - 2011-01-03 19:44 - 0000152 _____ () C:\ProgramData\~LGFSLWGZr
C:\Program Files\Innovative Solutions\DriverMax

Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

Relance FRST et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

Redémarre l'ordinateur

puis réinitialise tes navigateurs:
==================================
Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :

• Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start=
• Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start=
• Internet Explorer et modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start=

pardon, voici le rapport entier :
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 04-03-2015
Ran by Alexandre at 2015-03-05 22:25:28 Run:1
Running from C:\Users\Alexandre\Desktop
Loaded Profiles: Alexandre (Available profiles: Alexandre)
Boot Mode: Normal

==============================================

Content of fixlist:
HKU\S-1-5-21-648030371-180142737-259566797-1000\...\Run: [DriverMax] => C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe -agent
HKU\S-1-5-21-648030371-180142737-259566797-1000\...\Run: [DriverMax_RESTART] => C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe -RESTART
HKU\S-1-5-21-648030371-180142737-259566797-1000\...\Run: [Loader] => C:\Users\ALEXAN~1\AppData\Local\Temp\remote\loader.vbe <===== ATTENTION
HKU\S-1-5-21-648030371-180142737-259566797-1000\...\Run: [Keeper] => C:\Users\ALEXAN~1\AppData\Local\Temp\remote\gkeeper.vbe <===== ATTENTION
Task: {0633B7CC-6556-4024-9230-39B79BB53846} - System32\Tasks\klcp_update => C:\Program Files\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2015-02-18] ()
Task: {154F6B4E-C7A0-41BE-A6AD-9A8329D1E3EC} - System32\Tasks\SBW_UpdateTask_Time_333535373337323834342d3437415a556c2a3223346c41 => Wscript.exe //B "C:\ProgramData\SpeedBit\sbhe.js" sbu.exe /invoke /f:check_services /l:0
Task: {1B9FBDE4-94B5-42B8-9BCB-3862D2F92343} - System32\Tasks\dfa13398 => C:\Users\ALEXAN~1\AppData\Local\Temp\\setup1009883672.exe <==== ATTENTION
Task: {62464543-2416-40A1-982F-B3994E2DC79E} - System32\Tasks\{C2A6D9F7-CFEB-40F0-A4D8-8BF1C820A8C0} => pcalua.exe -a C:\Users\Alexandre\Downloads\IN1SRM08WW3.exe -d "C:\Program Files\Mozilla Firefox"
Task: {704610CB-B581-4047-B1DD-393BAF4F1D00} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION
Task: {D1F98269-E68C-4156-B7E3-D2D54373AD39} - System32\Tasks\c0bdd0a8 => C:\Users\ALEXAN~1\AppData\Local\Temp\\setup1113665192.exe <==== ATTENTION
Task: {E75B9815-8D9D-4AA9-8A65-4855523AAB5C} - \WSE_Astromenda No Task File <==== ATTENTION
2011-01-03 20:07 - 2011-01-03 20:07 - 0000344 _____ () C:\ProgramData\eHXCShrqZBG
2010-10-19 18:19 - 2010-10-19 18:19 - 0000056 _____ () C:\ProgramData\ezsidmv.dat
2011-01-03 19:44 - 2011-01-03 19:47 - 0000480 _____ () C:\ProgramData\LGFSLWGZ
2012-12-05 13:33 - 2012-12-05 13:33 - 0004988 _____ () C:\ProgramData\xgneqrwu.hrx
2011-05-29 11:37 - 2011-05-29 11:37 - 0000104 ____H () C:\ProgramData\~33283832
2011-05-29 11:37 - 2011-05-29 11:37 - 0000136 ____H () C:\ProgramData\~33283832r
2011-01-03 20:08 - 2011-01-03 20:08 - 0000272 _____ () C:\ProgramData\~eHXCShrqZBG
2011-01-03 20:08 - 2011-01-03 20:08 - 0000152 _____ () C:\ProgramData\~eHXCShrqZBGr
2011-01-03 19:44 - 2011-01-03 19:44 - 0000272 _____ () C:\ProgramData\~LGFSLWGZ
2011-01-03 19:44 - 2011-01-03 19:44 - 0000152 _____ () C:\ProgramData\~LGFSLWGZr
C:\Program Files\Innovative Solutions\DriverMax

HKU\S-1-5-21-648030371-180142737-259566797-1000\Software\Microsoft\Windows\CurrentVersion\Run\\DriverMax => Value not found.
HKU\S-1-5-21-648030371-180142737-259566797-1000\Software\Microsoft\Windows\CurrentVersion\Run\\DriverMax_RESTART => value deleted successfully.
HKU\S-1-5-21-648030371-180142737-259566797-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Loader => value deleted successfully.
HKU\S-1-5-21-648030371-180142737-259566797-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Keeper => value deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0633B7CC-6556-4024-9230-39B79BB53846}" => Key Deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0633B7CC-6556-4024-9230-39B79BB53846}" => Key Deleted successfully.
C:\Windows\System32\Tasks\klcp_update => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\klcp_update" => Key Deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{154F6B4E-C7A0-41BE-A6AD-9A8329D1E3EC}" => Key Deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{154F6B4E-C7A0-41BE-A6AD-9A8329D1E3EC}" => Key Deleted successfully.
C:\Windows\System32\Tasks\SBW_UpdateTask_Time_333535373337323834342d3437415a556c2a3223346c41 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SBW_UpdateTask_Time_333535373337323834342d3437415a556c2a3223346c41" => Key Deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1B9FBDE4-94B5-42B8-9BCB-3862D2F92343}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1B9FBDE4-94B5-42B8-9BCB-3862D2F92343}" => Key deleted successfully.
C:\Windows\System32\Tasks\dfa13398 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\dfa13398" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{62464543-2416-40A1-982F-B3994E2DC79E}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{62464543-2416-40A1-982F-B3994E2DC79E}" => Key deleted successfully.
C:\Windows\System32\Tasks\{C2A6D9F7-CFEB-40F0-A4D8-8BF1C820A8C0} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{C2A6D9F7-CFEB-40F0-A4D8-8BF1C820A8C0}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{704610CB-B581-4047-B1DD-393BAF4F1D00}" => Key Deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{704610CB-B581-4047-B1DD-393BAF4F1D00}" => Key Deleted successfully.
C:\Windows\System32\Tasks\0 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\0" => Key Deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D1F98269-E68C-4156-B7E3-D2D54373AD39}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1F98269-E68C-4156-B7E3-D2D54373AD39}" => Key deleted successfully.
C:\Windows\System32\Tasks\c0bdd0a8 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\c0bdd0a8" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E75B9815-8D9D-4AA9-8A65-4855523AAB5C}" => Key Deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E75B9815-8D9D-4AA9-8A65-4855523AAB5C}" => Key Deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WSE_Astromenda" => Key Deleted successfully.
C:\ProgramData\eHXCShrqZBG => Moved successfully.
C:\ProgramData\ezsidmv.dat => Moved successfully.
C:\ProgramData\LGFSLWGZ => Moved successfully.
C:\ProgramData\xgneqrwu.hrx => Moved successfully.
C:\ProgramData\~33283832 => Moved successfully.
C:\ProgramData\~33283832r => Moved successfully.
C:\ProgramData\~eHXCShrqZBG => Moved successfully.
C:\ProgramData\~eHXCShrqZBGr => Moved successfully.
C:\ProgramData\~LGFSLWGZ => Moved successfully.
C:\ProgramData\~LGFSLWGZr => Moved successfully.
"C:\Program Files\Innovative Solutions\DriverMax" => File/Directory not found.

End of Fixlog 22:25:28

Fais le reste et vois ce que cela donne.

c'est bon j'ai réinitialiser tous mes moteurs de recherches

=)

Voila, c'est terminé, tu peux supprimer les programmes utilisés.

Quelques conseils :

Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start=

Pour ne plus te faire avoir.
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/

Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html

Merci encore