Pub "ad by WorldWideCoupon" sur page Chrome

REteam Messages postés 2 Statut Membre -  
Malekal_morte- Messages postés 184347 Statut Modérateur, Contributeur sécurité -
Bonjour,

Je suis sous Windows 8.1 et sur tous les navigateurs que j'utilise, j'ai des pubs PARTOUT par "ad by WorldWideCoupon" entre autres!!!

J'ai installe AVAST, YAC et rien ne change! Pouvez-vous m'aider svp c'est invivable!

Merci d'avance
A voir également:

1 réponse

Réponse 1 / 1
Malekal_morte- Messages postés 184347 Statut Modérateur, Contributeur sécurité 24 689
 
Salut,

Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB.
Voici la procédure à suivre pour les supprimer :

Commence par ceci :

Suis le tutorial AdwCleaner https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= ( d'Xplode )
Télécharge le sur ton bureau ou dossier de téléchargement.
Lance AdwCleaner, clique sur [Scanner].
L'analyse peux durer plusieurs minutes, patiente.
Une fois le scan terminé, ne décoche rien, clique sur [Nettoyer]

Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt


puis :

Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
(et bien prendre le temps de lire afin d'appliquer correctement - tout y est expliqué).
Télécharge et lance le scan FRST, cela va générer trois rapports FRST :
  • FRST.txt
  • Shortcut.txt
  • Additionnal.txt


Envoie, comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et en retour donne les trois liens pjjoint qui mènent à ses rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.


0
REteam Messages postés 2 Statut Membre
 
Merci pour ton retour! Voici

# AdwCleaner v4.113 - Logfile created 26/03/2015 at 09:10:54
# Updated 22/03/2015 by Xplode
# Database : 2015-03-23.1 [Server]
# Operating system : Windows 8.1 (x64)
# Username : Sarah - KRONOZ
# Running from : C:\Users\Sarah\Downloads\adwcleaner_4.113.exe
# Option : Cleaning
          • [ Services ] *****


Service Deleted : iSafeKrnlMon
Service Deleted : {31c21995-b861-4864-ab50-4a53fbca73d4}Gw64
Service Deleted : {df8eec40-f909-439c-9ffe-3fee212f71b9}Gw64
          • [ Files / Folders ] *****


Folder Deleted : C:\ProgramData\374311380
Folder Deleted : C:\ProgramData\GoldenCoupon
Folder Deleted : C:\Program Files (x86)\IndepthGeneration
Folder Deleted : C:\Program Files (x86)\FineDealSSoft
Folder Deleted : C:\Program Files (x86)\greatsAving
Folder Deleted : C:\Program Files (x86)\leiss2PPay
Folder Deleted : C:\Program Files (x86)\less2paY
Folder Deleted : C:\Program Files (x86)\PPrOSaheoppEr
Folder Deleted : C:\Program Files (x86)\PrIceiDoownuloadeR
Folder Deleted : C:\Users\Sarah\AppData\Local\Temp\Solution Real
Folder Deleted : C:\Users\Sarah\AppData\Local\pay-by-ads
File Deleted : C:\Windows\System32\log\iSafeKrnlCall.log
File Deleted : C:\Windows\System32\drivers\{31c21995-b861-4864-ab50-4a53fbca73d4}Gw64.sys
File Deleted : C:\Windows\System32\drivers\{df8eec40-f909-439c-9ffe-3fee212f71b9}Gw64.sys
File Deleted : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.boostsaves.com_0.localstorage
File Deleted : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.boostsaves.com_0.localstorage-journal
File Deleted : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Deleted : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
File Deleted : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.boostsaves.com_0.localstorage
File Deleted : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.boostsaves.com_0.localstorage-journal
File Deleted : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
File Deleted : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal
File Deleted : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.publikeco00.publikeco.com_0.localstorage
File Deleted : C:\Users\Sarah\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_static.publikeco00.publikeco.com_0.localstorage-journal
          • [ Scheduled tasks ] *****
          • [ Shortcuts ] *****
          • [ Registry ] *****


Key Deleted : HKLM\SOFTWARE\Classes\P66c7768e_910e_4cbd_84a2_d648011a9ba6_.P66c7768e_910e_4cbd_84a2_d648011a9ba6_
Key Deleted : HKLM\SOFTWARE\Classes\P66c7768e_910e_4cbd_84a2_d648011a9ba6_.P66c7768e_910e_4cbd_84a2_d648011a9ba6_.9
Key Deleted : HKLM\SOFTWARE\Classes\P6774b67d_d2f4_4c90_a98b_cdb8604544db_.P6774b67d_d2f4_4c90_a98b_cdb8604544db_
Key Deleted : HKLM\SOFTWARE\Classes\P6774b67d_d2f4_4c90_a98b_cdb8604544db_.P6774b67d_d2f4_4c90_a98b_cdb8604544db_.9
Key Deleted : HKLM\SOFTWARE\Classes\P6cabe335_1b19_4ad5_b44e_37fc7bdc0298_.P6cabe335_1b19_4ad5_b44e_37fc7bdc0298_
Key Deleted : HKLM\SOFTWARE\Classes\P6cabe335_1b19_4ad5_b44e_37fc7bdc0298_.P6cabe335_1b19_4ad5_b44e_37fc7bdc0298_.9
Key Deleted : HKLM\SOFTWARE\Classes\Pae8529e1_a582_4790_89b5_e04430dfd3d5_.Pae8529e1_a582_4790_89b5_e04430dfd3d5_
Key Deleted : HKLM\SOFTWARE\Classes\Pae8529e1_a582_4790_89b5_e04430dfd3d5_.Pae8529e1_a582_4790_89b5_e04430dfd3d5_.9
Key Deleted : HKLM\SOFTWARE\3e9bcc4f-cf51-0476-2dd5-63e03deb483f
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{46a69adc}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66c7768e-910e-4cbd-84a2-d648011a9ba6}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6774b67d-d2f4-4c90-a98b-cdb8604544db}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6cabe335-1b19-4ad5-b44e-37fc7bdc0298}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ae8529e1-a582-4790-89b5-e04430dfd3d5}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2105FE20-DEBD-4084-A306-61C5DA001CCA}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{66c7768e-910e-4cbd-84a2-d648011a9ba6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6774b67d-d2f4-4c90-a98b-cdb8604544db}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6cabe335-1b19-4ad5-b44e-37fc7bdc0298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{ae8529e1-a582-4790-89b5-e04430dfd3d5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{66c7768e-910e-4cbd-84a2-d648011a9ba6}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{6774b67d-d2f4-4c90-a98b-cdb8604544db}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{6cabe335-1b19-4ad5-b44e-37fc7bdc0298}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{ae8529e1-a582-4790-89b5-e04430dfd3d5}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{66c7768e-910e-4cbd-84a2-d648011a9ba6}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6774b67d-d2f4-4c90-a98b-cdb8604544db}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6cabe335-1b19-4ad5-b44e-37fc7bdc0298}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ae8529e1-a582-4790-89b5-e04430dfd3d5}
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Key Deleted : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
          • [ Web browsers ] *****


-\\ Internet Explorer v11.0.9600.17416

Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Google Chrome v41.0.2272.101


AdwCleaner[R0].txt - [7065 bytes] - [26/03/2015 09:08:33]
AdwCleaner[S0].txt - [6412 bytes] - [26/03/2015 09:10:54]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6471 bytes] ##########
0
Malekal_morte- Messages postés 184347 Statut Modérateur, Contributeur sécurité 24 689
 
ok passe à FRST.
0

Discussions similaires

mail rejeté
biljp -
biljp -

7 réponses