Ads by name

Résolu/Fermé
Baptiste - Modifié par Malekal_morte- le 8/05/2015 à 22:17
Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 - 8 mai 2015 à 23:08
Bonjour,

J'ai effectuer afin de supprimer "ads by name" plusieurs rapports obtenus avec le logiciel FRST en suivant ce tutoriel : http://www.malekal.com/2013/06/15/tutorial-farbar-recovery-scan-tool-frst/#fix

Voici les rapports :

FRST : http://pjjoint.malekal.com/files.php?id=20150508_v5v12m9y8s9

ADDITION : http://pjjoint.malekal.com/files.php?id=20150508_b14v7x13l9w10

SHORTCUT : http://pjjoint.malekal.com/files.php?id=20150508_x13h10t11y11u11

Dans l'attente de votre aide...

Baptiste


2 réponses

Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 24 668
8 mai 2015 à 22:17
Salut,

ok je regarde, désinstalle Stronghold antimalware si tu peux.
1
Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 24 668
8 mai 2015 à 22:19
Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :


Task: {0F128B36-21E4-4180-A9BB-5E5329209524} - \aUXnlIRTaJOn1pfBOdE No Task File <==== ATTENTION
Task: {434FF80F-F80E-4EA8-8E58-7E9E3366D6BD} - \CS Browser Assistant 2.0-updater No Task File <==== ATTENTION
Task: {6C5B22AA-F983-46E3-8A7F-60AD104E5973} - \PassWidget Update No Task File <==== ATTENTION
Task: {BF39CC27-2814-4E34-B006-59F141FE3580} - \CS Browser Assistant 2.0-firefoxinstaller No Task File <==== ATTENTION
Task: {D8DDDF0E-0C45-45F0-8CDB-9C5EB02F83A0} - System32\Tasks\{E4DA36B2-84CE-48D1-B8A7-6776D219D8C8} => C:\Users\Baptiste\Downloads\GTA San andreas\Installation + Crack\Crack GTA\gta_sa.exe
Task: {DFE34581-BF8E-4512-A413-00BD3CC8EB7D} - \CS Browser Assistant 2.0-enabler No Task File <==== ATTENTION
Task: {F321543C-52A9-4D98-8030-060D1580CE68} - \CS Browser Assistant 2.0-codedownloader No Task File <==== ATTENTION
HKLM\...\Run: [AutoKMS] => C:\Windows\AutoKMS.exe [615936 2012-05-04] ()
HKLM-x32\...\Run: [tuto4pc_fr_70] => [X]
HKLM-x32\...\Run: [Stronghold AntiMalware] => C:\Program Files (x86)\Stronghold AntiMalware\StrongholdAntiMalware.exe
2015-04-09 11:52 - 2015-04-09 11:52 - 00818024 _____ () C:\Users\Baptiste\Downloads\yet_another_cleaner_sk_7489108(1).exe
2015-04-09 11:43 - 2015-04-09 11:43 - 00000000 ____D () C:\Users\Baptiste\AppData\Roaming\eCyber
2015-04-09 11:42 - 2015-04-09 11:42 - 00818024 _____ () C:\Users\Baptiste\Downloads\yet_another_cleaner_sk_7489108.exe
2015-04-09 13:22 - 2015-04-09 13:22 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\Baptiste\Downloads\SpyHunter-Installer(1).exe
2015-04-09 12:26 - 2015-04-09 12:39 - 00000000 ____D () C:\Users\Public\Documents\Stronghold AntiMalware
2015-04-09 12:25 - 2015-04-09 12:25 - 06995432 _____ (Security Stronghold ) C:\Users\Baptiste\Downloads\StrongholdAntiMalware.exe
2015-04-09 12:24 - 2015-04-09 12:25 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\Baptiste\Downloads\SpyHunter-Installer.exe
2015-04-08 21:08 - 2014-06-17 10:47 - 00001081 _____ () C:\Users\Baptiste\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2015-04-08 20:30 - 2015-04-01 20:52 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-03-31 10:14 - 2015-03-31 10:14 - 0004387 _____ () C:\Users\Baptiste\AppData\Roaming\aUXnlIRTaJOn1pfBOdE


Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

Relance FRST et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.


Redémarre l'ordinateur


puis réinitialise tes navigateurs:
==================================
Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :


~~

Si tu as encore des pubs sur Firefox :

Exporte tes favoris : https://support.mozilla.org/fr/kb/exporter-marque-pages-firefox-fichier-html
Désinstalle Mozilla Firefox en cochant l'option de suppression du profil.

Affiche les fichiers cachés et systèmes : https://www.commentcamarche.net/informatique/windows/185-afficher-les-extensions-et-les-fichiers-caches-sous-windows/

Supprimer le profil :
Mon Ordinateur => Disque C => Utilisateurs => Ton user => AppData => Roaming
clic droit sur le dossier Mozilla puis renommer
renomme le en Mozilla.old

Mon Ordinateur => Disque C => Program Files => supprime le dossier Mozilla.

Réinstalle Firefox à partir de ce lien : https://telecharger.malekal.com/download/mozilla-firefox/

Réimporte tes favoris.
0
voila qui est fait...
0
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 06-05-2015 01
Ran by Baptiste at 2015-05-08 22:27:57 Run:1
Running from C:\Users\Baptiste\Desktop
Loaded Profiles: Baptiste (Available profiles: UpdatusUser & Evelyne & Baptiste & Molène & Suzanne)
Boot Mode: Normal
==============================================

Content of fixlist:

Task: {0F128B36-21E4-4180-A9BB-5E5329209524} - \aUXnlIRTaJOn1pfBOdE No Task File <==== ATTENTION
Task: {434FF80F-F80E-4EA8-8E58-7E9E3366D6BD} - \CS Browser Assistant 2.0-updater No Task File <==== ATTENTION
Task: {6C5B22AA-F983-46E3-8A7F-60AD104E5973} - \PassWidget Update No Task File <==== ATTENTION
Task: {BF39CC27-2814-4E34-B006-59F141FE3580} - \CS Browser Assistant 2.0-firefoxinstaller No Task File <==== ATTENTION
Task: {D8DDDF0E-0C45-45F0-8CDB-9C5EB02F83A0} - System32\Tasks\{E4DA36B2-84CE-48D1-B8A7-6776D219D8C8} => C:\Users\Baptiste downloads\GTA San andreas\Installation + Crack\Crack GTA\gta_sa.exe
Task: {DFE34581-BF8E-4512-A413-00BD3CC8EB7D} - \CS Browser Assistant 2.0-enabler No Task File <==== ATTENTION
Task: {F321543C-52A9-4D98-8030-060D1580CE68} - \CS Browser Assistant 2.0-codedownloader No Task File <==== ATTENTION
HKLM\...\Run: [AutoKMS] => C: windows\AutoKMS.exe [615936 2012-05-04] ()
HKLM-x32\...\Run: [tuto4pc_fr_70] => [X]
HKLM-x32\...\Run: [Stronghold AntiMalware] => C:\Program Files (x86)\Stronghold AntiMalware\StrongholdAntiMalware.exe
2015-04-09 11:52 - 2015-04-09 11:52 - 00818024 _____ () C:\Users\Baptiste\Downloads\yet_another_cleaner_sk_7489108(1).exe
2015-04-09 11:43 - 2015-04-09 11:43 - 00000000 ____D () C:\Users\Baptiste\AppData\Roaming\eCyber
2015-04-09 11:42 - 2015-04-09 11:42 - 00818024 _____ () C:\Users\Baptiste\Downloads\yet_another_cleaner_sk_7489108.exe
2015-04-09 13:22 - 2015-04-09 13:22 - 03109248 _____ enigma software Group USA, LLC.) C:\Users\Baptiste\Downloads\SpyHunter-Installer(1).exe
2015-04-09 12:26 - 2015-04-09 12:39 - 00000000 ____D () C:\Users\Public\Documents\Stronghold AntiMalware
2015-04-09 12:25 - 2015-04-09 12:25 - 06995432 _____ (Security Stronghold ) C:\Users\Baptiste\Downloads\StrongholdAntiMalware.exe
2015-04-09 12:24 - 2015-04-09 12:25 - 03109248 _____ (Enigma Software Group USA, LLC.) C:\Users\Baptiste\Downloads\SpyHunter-Installer.exe
2015-04-08 21:08 - 2014-06-17 10:47 - 00001081 _____ () C:\Users\Baptiste\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
2015-04-08 20:30 - 2015-04-01 20:52 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-03-31 10:14 - 2015-03-31 10:14 - 0004387 _____ () C:\Users\Baptiste\AppData\Roaming\aUXnlIRTaJOn1pfBOdE


"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0F128B36-21E4-4180-A9BB-5E5329209524}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0F128B36-21E4-4180-A9BB-5E5329209524}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\aUXnlIRTaJOn1pfBOdE" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{434FF80F-F80E-4EA8-8E58-7E9E3366D6BD}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{434FF80F-F80E-4EA8-8E58-7E9E3366D6BD}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CS Browser Assistant 2.0-updater" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6C5B22AA-F983-46E3-8A7F-60AD104E5973}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6C5B22AA-F983-46E3-8A7F-60AD104E5973}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PassWidget Update" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{BF39CC27-2814-4E34-B006-59F141FE3580}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BF39CC27-2814-4E34-B006-59F141FE3580}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CS Browser Assistant 2.0-firefoxinstaller" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D8DDDF0E-0C45-45F0-8CDB-9C5EB02F83A0}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D8DDDF0E-0C45-45F0-8CDB-9C5EB02F83A0}" => Key deleted successfully.
C:\Windows\System32\Tasks\{E4DA36B2-84CE-48D1-B8A7-6776D219D8C8} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{E4DA36B2-84CE-48D1-B8A7-6776D219D8C8}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DFE34581-BF8E-4512-A413-00BD3CC8EB7D}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DFE34581-BF8E-4512-A413-00BD3CC8EB7D}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CS Browser Assistant 2.0-enabler" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F321543C-52A9-4D98-8030-060D1580CE68}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F321543C-52A9-4D98-8030-060D1580CE68}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CS Browser Assistant 2.0-codedownloader" => Key deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AutoKMS => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\tuto4pc_fr_70 => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Stronghold AntiMalware => value deleted successfully.
C:\Users\Baptiste\Downloads\yet_another_cleaner_sk_7489108(1).exe => Moved successfully.
C:\Users\Baptiste\AppData\Roaming\eCyber => Moved successfully.
C:\Users\Baptiste\Downloads\yet_another_cleaner_sk_7489108.exe => Moved successfully.
C:\Users\Baptiste\Downloads\SpyHunter-Installer(1).exe => Moved successfully.
"C:\Users\Public\Documents\Stronghold AntiMalware" => File/Directory not found.
"C:\Users\Baptiste\Downloads\StrongholdAntiMalware.exe" => File/Directory not found.
C:\Users\Baptiste\Downloads\SpyHunter-Installer.exe => Moved successfully.
C:\Users\Baptiste\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk => Moved successfully.
C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 => Moved successfully.
C:\Users\Baptiste\AppData\Roaming\aUXnlIRTaJOn1pfBOdE => Moved successfully.

End of Fixlog 22:28:35

0
Merci 1000 fois!!!! Ca fonctionne, je redécouvre internet!!!! Super!!!
0
Malekal_morte- Messages postés 180304 Date d'inscription mercredi 17 mai 2006 Statut Modérateur, Contributeur sécurité Dernière intervention 15 décembre 2020 24 668
8 mai 2015 à 23:08
Pas de soucis =)

Voila, c'est terminé, tu peux supprimer les programmes utilisés.

Quelques conseils :


Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start=


Pour ne plus te faire avoir.
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/
(Surtout active les détections LPIs pour détecter les programmes parasites et publicitaires)


Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html

1