Exe. n'est pas une application win32 valide + beaucoup de pub

1er rapport

# AdwCleaner v4.202 - Logfile created 24/04/2015 at 16:47:48
# Updated 23/04/2015 by Xplode
# Database : 2015-04-23.2 [Server]
# Operating system : Microsoft Windows XP Service Pack 3 (x86)
# Username : Administrator - STATION01
# Running from : C:\Documents and Settings\Administrator\My Documents\Downloads\adwcleaner_4.202.exe
# Option : Cleaning

• • • • • [ Services ] *****

Service Deleted : ReimageRealTimeProtector
[#] Service Deleted : SmdmFService
[#] Service Deleted : F06DEFF2-5B9C-490D-910F-35D3A91196222

• • • • • [ Files / Folders ] *****

Folder Deleted : C:\rei
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Browser
[!] Folder Deleted : C:\Documents and Settings\All Users\Application Data\smdmf
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Systweak
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Reimage Protector
Folder Deleted : C:\Documents and Settings\All Users\Application Data\SafeWeb
[!] Folder Deleted : C:\Documents and Settings\All Users\Application Data\NetEngine
Folder Deleted : C:\Documents and Settings\All Users\Start Menu\Programs\speed browser
Folder Deleted : C:\Program Files\Advanced System Protector
Folder Deleted : C:\Program Files\BatBrowse
Folder Deleted : C:\Program Files\BonanzaDeals
Folder Deleted : C:\Program Files\cacaoweb
Folder Deleted : C:\Program Files\MyPC Backup
Folder Deleted : C:\Program Files\Reimage
Folder Deleted : C:\Program Files\Settings Manager
Folder Deleted : C:\Program Files\speed browser
Folder Deleted : C:\Program Files\FLV Player
[!] Folder Deleted : C:\Program Files\Assets Manager
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Linkey
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\speed browser
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\SafeWeb
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\cacaoweb
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\MetaCrawler
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\pay-by-ads
Folder Deleted : C:\Documents and Settings\Administrator\Application Data\Systweak
Folder Deleted : C:\Documents and Settings\Administrator\Start Menu\Programs\FLV Player
[!] Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\fpmeembnagmagppkgghhfjfdfajdfcah
[!] Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\gebbadcnkcgcfgpbmcdleckpejgopimf
[!] Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pbpjplgmaeigbnpadeajipebdlihpcfn
[!] Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\poimdfnhgefmnkeefbjibbiemlimdnof
File Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ccncljhbalbbkkfgopogabimepmfkmff_0.localstorage
File Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ccncljhbalbbkkfgopogabimepmfkmff_0.localstorage-journal
File Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\ccncljhbalbbkkfgopogabimepmfkmff
File Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ieadcoanfjloocmfafkebdnfefmohngj_0.localstorage-journal
File Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pbpjplgmaeigbnpadeajipebdlihpcfn_0.localstorage
File Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pbpjplgmaeigbnpadeajipebdlihpcfn_0.localstorage-journal
File Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\pbpjplgmaeigbnpadeajipebdlihpcfn
File Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\doobfiogmfmpjnoofjhhgjehmlofngfp
File Deleted : C:\WINDOWS\efix.ini
File Deleted : C:\WINDOWS\Reimage.ini
File Deleted : C:\WINDOWS\system32\roboot.exe
File Deleted : C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\speed browser.lnk
File Deleted : C:\Documents and Settings\Administrator\Desktop\speed browser.lnk

• • • • • [ Scheduled tasks ] *****

Task Deleted : RegClean Pro_DEFAULT
Task Deleted : RegClean Pro_UPDATES
Task Deleted : Reimage Reminder
Task Deleted : ReimageUpdater

• • • • • [ Shortcuts ] *****
        • [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\fpmeembnagmagppkgghhfjfdfajdfcah
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pbpjplgmaeigbnpadeajipebdlihpcfn
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\poimdfnhgefmnkeefbjibbiemlimdnof
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [cacaoweb]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Key Deleted : HKCU\Software\Classes\keepmysearch
Key Deleted : HKLM\SOFTWARE\Classes\AppID\iedll.dll
Key Deleted : HKLM\SOFTWARE\Classes\AppID\REI_AxControl.DLL
Key Deleted : HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine.1
Key Deleted : HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6A7CD9EC-D8BD-4340-BCD0-77C09A282921}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B67B3DBB-C1C9-49D2-B016-2748B0B5017E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{88CCA982-C030-4B27-8FBC-201189970FDE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4613B1C1-FBC0-43C3-A4B9-B1D6CD360BB3}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{03F38765-173F-4344-B4D6-78500A46CACE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{726E90BE-DC22-4965-B215-E0784DC26F47}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B67B3DBB-C1C9-49D2-B016-2748B0B5017E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B67B3DBB-C1C9-49D2-B016-2748B0B5017E}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{987836E5-FF53-4A72-9D71-35D4068030E1}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Key Deleted : HKCU\Software\BatBrowse
Key Deleted : HKCU\Software\cacaoweb
Key Deleted : HKCU\Software\DynConIE
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\SmdmF
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\systweak
Key Deleted : HKCU\Software\AffiliatedUpdate
Key Deleted : HKCU\Software\eFix
Key Deleted : HKCU\Software\Local AppWizard-Generated Applications
Key Deleted : HKCU\Software\Linkey
Key Deleted : HKLM\SOFTWARE\BatBrowse
Key Deleted : HKLM\SOFTWARE\BonanzaDealsLive
Key Deleted : HKLM\SOFTWARE\SmdmF
Key Deleted : HKLM\SOFTWARE\systweak
Key Deleted : HKLM\SOFTWARE\Reimage
Key Deleted : HKLM\SOFTWARE\SpeedBrowser
Key Deleted : HKLM\SOFTWARE\eFix
Key Deleted : HKLM\SOFTWARE\Linkey
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\FLV Player
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Search
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AffiliatedUpdate
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Linkey
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ac225167-00fc-452d-94c5-bb93600e7d9a}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BatBrowse
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegClean Pro_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Settings Manager
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\speed browser
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SafeWeb
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\FLV Player
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AffiliatedUpdate
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BatBrowse
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\MyPC Backup
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\RegClean Pro_is1
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>

• • • • • [ Web browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]

-\\ Google Chrome v42.0.2311.90

[C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Extension] : fpmeembnagmagppkgghhfjfdfajdfcah
[C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Extension] : gebbadcnkcgcfgpbmcdleckpejgopimf
[C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Extension] : pbpjplgmaeigbnpadeajipebdlihpcfn
[C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Extension] : doobfiogmfmpjnoofjhhgjehmlofngfp
[C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Extension] : poimdfnhgefmnkeefbjibbiemlimdnof
[C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Homepage] : hxxp://rts.dsrlte.com
[C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Startup_URLs] : hxxp://rts.dsrlte.com

AdwCleaner[R0].txt - [12423 bytes] - [24/04/2015 16:42:14]
AdwCleaner[S0].txt - [12493 bytes] - [24/04/2015 16:47:48]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [12553 bytes] ##########

La 2 ème partie

https://pjjoint.malekal.com/files.php?id=20150424_i14j7k10t8m5
https://pjjoint.malekal.com/files.php?id=20150424_d9j6x5d9p7
https://pjjoint.malekal.com/files.php?id=20150424_o14i12c11l6n15

Merci

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 23-04-2015 02
Ran by Administrator at 2015-04-24 19:29:20 Run:1
Running from C:\Documents and Settings\Administrator\Desktop
Loaded Profiles: Administrator (Available profiles: Administrator)
Boot Mode: Normal

==============================================

Content of fixlist:

R2 YUMOmdqA; C:\Documents and Settings\All Users\Application Data\kanOJXughq\YUMOmdqA.exe [2726256 2014-12-27] (Acute Angle Solutions Ltd)
2015-04-22 20:00 - 2015-04-22 20:00 - 00000000 ____D () C:\Documents and Settings\LocalService\Local Settings\Application Data\speed browser
2015-04-24 15:33 - 2015-04-24 15:33 - 00000000 ____D () C:\Documents and Settings\All Users\Start Menu\Programs\eFix Pro
2015-04-24 15:29 - 2015-04-24 15:32 - 11244136 _____ (eFix®) C:\TRANSLATE
2015-04-24 17:01 - 2015-04-24 17:01 - 00000000 ____D () C:\Documents and Settings\All Users\Application Data\NetEngine
2015-04-24 16:52 - 2015-04-24 17:01 - 00000000 ____D () C:\Documents and Settings\Administrator\Local Settings\Application Data\SafeWeb
C:\Documents and Settings\All Users\Application Data\kanOJXughq
Task: C:\WINDOWS\Tasks\At1.job => C:\DOCUME~1\ADMINI~1\APPLIC~1\AFFILI~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

YUMOmdqA => Unable to stop service
YUMOmdqA => Service deleted successfully.
C:\Documents and Settings\LocalService\Local Settings\Application Data\speed browser => Moved successfully.
C:\Documents and Settings\All Users\Start Menu\Programs\eFix Pro => Moved successfully.
C:\TRANSLATE => Moved successfully.

"C:\Documents and Settings\All Users\Application Data\NetEngine" directory move:

Could not move "C:\Documents and Settings\All Users\Application Data\NetEngine" directory. => Scheduled to move on reboot.

C:\Documents and Settings\Administrator\Local Settings\Application Data\SafeWeb => Moved successfully.

"C:\Documents and Settings\All Users\Application Data\kanOJXughq" directory move:

Could not move "C:\Documents and Settings\All Users\Application Data\kanOJXughq" directory. => Scheduled to move on reboot.

C:\WINDOWS\Tasks\At1.job => Moved successfully.

> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-04-24 19:31:34)<

C:\Documents and Settings\All Users\Application Data\NetEngine => Moved successfully.
C:\Documents and Settings\All Users\Application Data\kanOJXughq => Moved successfully.

End of Fixlog 19:31:34

C'est bon plus de pub ! Merci !

Merci !

J'ai toujours le même problème avec autocad, tu ne serai pas comment réparer ça ?
Merci

Si tu parles du message win32, c'est que le fichier est corrompu.

Et tu ne sais pas comment on pourrai résoudre ce problème ?
Désolé de te déranger mais j'ai vraiment besoin d autocad ...
Merci

il faut trouver une version non corrompu en réinstallant l'application par exemple.