Supprimer YTdownloader?

Résolu
bociste Messages postés 5 Date d'inscription   Statut Membre Dernière intervention   -  
bociste Messages postés 5 Date d'inscription   Statut Membre Dernière intervention   -
Bonjour,

Depuis quelques jours, j'ai YTdownloader sur mon ordinateur sans trop savoir comment... je voudrai le supprimer mais il semble difficile à éliminer. Est ce que quelqu'un peut m'aider?

ci joint le rapport OTL.txt
https://pjjoint.malekal.com/files.php?id=20150620_j14w12s9b10g11

En vous remerciant par avance.

Bociste

8 réponses

  1. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Salut,

    Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB.
    Voici la procédure à suivre pour les supprimer :

    Commence par ceci :

    Suis le tutorial AdwCleaner https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= ( d'Xplode )
    Télécharge le sur ton bureau ou dossier de téléchargement.
    Lance AdwCleaner, clique sur [Scanner].
    L'analyse peux durer plusieurs minutes, patiente.
    Une fois le scan terminé, ne décoche rien, clique sur [Nettoyer]

    Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller.
    Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message.

    Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

    puis :

    Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
    (et bien prendre le temps de lire afin d'appliquer correctement - tout y est expliqué).
    Télécharge et lance le scan FRST, cela va générer trois rapports FRST :
    • FRST.txt
    • Shortcut.txt
    • Additionnal.txt


    Envoie, comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et en retour donne les trois liens pjjoint qui mènent à ses rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.

    0
  2. bociste Messages postés 5 Date d'inscription   Statut Membre Dernière intervention  
     
    Merci beaucoup pour la réponse rapide Malekal Morte,

    voici le rapport adwcleaner:

    # AdwCleaner v4.206 - Logfile created 20/06/2015 at 20:45:50
    # Updated 01/06/2015 by Xplode
    # Database : 2015-06-17.1 [Server]
    # Operating system : Microsoft Windows XP Service Pack 3 (x86)
    # Username : Administrateur - SWEET-28CF95473
    # Running from : C:\Documents and Settings\Administrateur\Bureau\adwcleaner_4.206.exe
    # Option : Cleaning
            • [ Services ] *****


    [#] Service Deleted : BrowserDefendert
    [#] Service Deleted : BrsHelper
    Service Deleted : sbmntr
    [#] Service Deleted : SPBIUpd
    Service Deleted : SPBIUpdd
            • [ Files / Folders ] *****


    Folder Deleted : C:\Documents and Settings\All Users\Application Data\Ask
    Folder Deleted : C:\Documents and Settings\All Users\Application Data\Babylon
    Folder Deleted : C:\Documents and Settings\All Users\Application Data\BrowserDefender
    Folder Deleted : C:\Documents and Settings\All Users\Application Data\ShopperPro
    Folder Deleted : C:\Program Files\1ClickDownload
    Folder Deleted : C:\Program Files\DAEMON Tools Toolbar
    Folder Deleted : C:\Program Files\Delta
    Folder Deleted : C:\Program Files\globalUpdate
    Folder Deleted : C:\Program Files\ShopperPro
    Folder Deleted : C:\Program Files\YTDownloader
    Folder Deleted : C:\Program Files\Fichiers communs\Software Update Utility
    Folder Deleted : C:\Documents and Settings\Administrateur\Local Settings\Application Data\globalUpdate
    Folder Deleted : C:\Documents and Settings\Administrateur\Local Settings\Application Data\Ilivid Player
    Folder Deleted : C:\Documents and Settings\Administrateur\Application Data\nitionto
    Folder Deleted : C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\YTDownloader
    Folder Deleted : C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\Extensions\{0B38152B-1B20-484D-A11F-5E04A9B0661F}
    File Deleted : C:\Documents and Settings\Administrateur\Application Data\MSNMessengerAPI.dll
    File Deleted : C:\Program Files\Mozilla Firefox\plugins\npdnu.dll
    File Deleted : C:\Program Files\Mozilla Firefox\plugins\npdnu.xpt
    File Deleted : C:\Program Files\Mozilla Firefox\plugins\npdnupdater2.dll
    File Deleted : C:\Program Files\Mozilla Firefox\plugins\npdnupdater2.xpt
    File Deleted : C:\Program Files\Mozilla Firefox\Plugins\npvsharetvplg.dll
    File Deleted : C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\searchplugins\aol-web-search.xml
    File Deleted : C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\searchplugins\Askcom.xml
    File Deleted : C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\searchplugins\mngr.xml
    File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\Search_Results.xml
    File Deleted : C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\searchplugins\web-search.xml
    File Deleted : C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\user.js
            • [ Scheduled tasks ] *****


    Task Deleted : YTDownloader
    Task Deleted : YTDownloaderUpd
    Task Deleted : SPBIW_UpdateTask_Time_323836373533383930382d3437415a556c2a3223346c41
            • [ Shortcuts ] *****
            • [ Registry ] *****


    Key Deleted : HKLM\SOFTWARE\Classes\AppID\dnu.EXE
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
    Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
    Key Deleted : HKLM\SOFTWARE\Classes\dnUpdate
    Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser
    Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1
    Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController
    Key Deleted : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1
    Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
    Value Deleted : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [YTDownloader]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [YTDownloader]
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\YTDownloader.exe
    Key Deleted : HKLM\SYSTEM\CurrentControlSet\Control\Class\{0014298C-A9BA-440D-AAA8-AD12C7010EE5}
    Key Deleted : HKLM\SYSTEM\CurrentControlSet\Control\Class\{181A06EA-B82C-47DE-B851-E20FD0E1CC7D}
    Key Deleted : HKCU\Software\586d78ce568b949
    Key Deleted : HKLM\SOFTWARE\586d78ce568b949
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{058F0E48-61CA-4964-9FBA-1978A1BB060D}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{18F33C35-8EF2-40D7-8BA4-932B0121B472}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E1164984-B567-47BD-A7FF-240C2594404A}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322712280}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E43339A0-34D3-49E1-8283-30E84DFFA195}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366716680}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D0F4A166-B8D4-48B8-9D63-80849FE137CB}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C524C869-72F8-42E7-BC9C-E3022F089362}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}
    Key Deleted : HKCU\Software\BABSOLUTION
    Key Deleted : HKCU\Software\Delta
    Key Deleted : HKCU\Software\dt soft\daemon tools toolbar
    Key Deleted : HKCU\Software\GlobalUpdate
    Key Deleted : HKCU\Software\InstalledBrowserExtensions
    Key Deleted : HKCU\Software\StartSearch
    Key Deleted : HKCU\Software\vShare.tv
    Key Deleted : HKCU\Software\YTDownloader
    Key Deleted : HKCU\Software\rttasks
    Key Deleted : HKCU\Software\canortic
    Key Deleted : HKLM\SOFTWARE\Babylon
    Key Deleted : HKLM\SOFTWARE\Crossrider
    Key Deleted : HKLM\SOFTWARE\Delta
    Key Deleted : HKLM\SOFTWARE\GlobalUpdate
    Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
    Key Deleted : HKLM\SOFTWARE\ShopperPro
    Key Deleted : HKLM\SOFTWARE\SimplyGen
    Key Deleted : HKLM\SOFTWARE\YTDownloader
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShopperPro
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\YTDownloader
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{46d699b3-6a25-4071-6078-4e96aeed2e07}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\iWebar
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Object Browser
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ShopperPro
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SoftwareUpdUtility
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\vShare.tv plugin
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Winamp Toolbar
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{46d699b3-6a25-4071-6078-4e96aeed2e07}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SoftwareUpdate.exe
    Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] - hxxp=127.0.0.1:1070;hxxps=127.0.0.1:1070
    Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <-loopback>
            • [ Web browsers ] *****


    -\\ Internet Explorer v7.0.6000.20861

    -\\ Mozilla Firefox v10.0.2 (fr)

    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.surf.date", "15");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.surf.lastDate", "28");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.surf.lastMonth", "2");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.surf.lastYear", "2015");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.surf.month", "15");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.surf.prevMonth", "8");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.surf.total", "82");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.surf.week", "15");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("aol_toolbar.surf.year", "15");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("browser.search.defaultengine", "Ask.com");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("browser.search.defaulturl", "hxxp://search.winamp.com/search/search?query={searchTerms}&invocationType=winamp-ff&s_qt=sb&tb_uuid=20111226175152531&tb_oid=31-12-2011&tb_mrud=21-11-2012&query[...]
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("keyword.URL", "hxxp://slirsredirect.search.aol.com/redirector/sredir?sredir=2685&s_qt=ab&s_it=winamp-ff&tb_uuid=20111226175152531&tb_oid=31-12-2011&tb_mrud=21-11-2012&q=");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("vshare.install.date", "1315695774");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("vshare.install.finished", "1.0.0");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("vshare.install.fresh", "false");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("vshare.install.guid", "{9906254b-5bd9-4cdc-883e-41ef3a3ee138}");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("vshare.install.istoolbarhp", true);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("vshare.install.istoolbarsearch", true);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("vshare.install.newtab", false);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.buttons.layout", "shoutcast_30026;mobile/android_33522;post_to_twitter_33500;post_to_facebook_33511;post_to_AIM_33511;;facebook_45469");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.cookie.homepage", "");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.cookie.search", "");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.default.homepage.check", false);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.default.search.check", false);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.default.search.label", "AOL Search");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.default.search.url", "hxxp://search.winamp.com/search/search?query={searchTerms}&invocationType=winamp-ff&s_qt=sb&tb_uuid=20111226175152531&tb_oid=31-12-2011&tb_mrud=21-11-20[...]
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.firsttime.showwindow", false);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.guid", "{A79D9533-BB0A-3183-8DB5-EA3A32A5AB1B}");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.install.distroid", "");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.install.lastTbVersion", "5.6.20.8949");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.install.lid", "");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.install.mtmhp", "");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.install.ncid", "");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.metrics.activestampdate", "28");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.metrics.activestampmonth", "2");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.metrics.activestampyear", "2015");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.metrics.log", false);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.metrics.originalDate", "31");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.metrics.originalHours", "19");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.metrics.originalMinutes", "11");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.metrics.originalMonth", "12");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.metrics.originalSeconds", "6");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.metrics.originalYear", "2011");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.relatednews.enabled", false);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.remote..xml", "1427502358623");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.remote.publish.xml", "1427502358623");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.search.button", true);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.search.cid", "21-11-2012");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.search.instd", "20111226175152531");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.search.oid", "31-12-2011");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.search.placement", "left");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.search.populateoncomplete", false);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.search.savehistory", false);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.search.searchtype", "web");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.search.source", "winamp-ff");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.skin.custom", true);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.upgrade.showwindow", false);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.weather.degc", "7");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.weather.degf", "45");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.weather.image", "chrome://winamptoolbar/skin/weather/26_n.png");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.weather.locationid", "USNY0996");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.weather.metric", true);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.weather.tooltip", "New York , NY : Cloudy");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.weather.update", "1427502358624");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.artist", "");
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.button.focus", true);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.button.forward", true);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.button.open", true);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.button.pause", true);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.button.play", true);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.button.rewind", true);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.button.stop", false);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.button.volume", true);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.ticker.show", true);
    [qqc8tqql.default\prefs.js] - Line Deleted : user_pref("winamp_toolbar.winamp.title", "-999999");

    -\\ Google Chrome v

    -\\ Chromium v

    AdwCleaner[R0].txt - [18383 bytes] - [20/06/2015 20:38:07]
    AdwCleaner[S0].txt - [19201 bytes] - [20/06/2015 20:45:50]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [19261 bytes] ##########

    le rapport FRST.txt : https://pjjoint.malekal.com/files.php?id=20150620_v15i15i14g5s8
    le rapport shortcut.txt : https://pjjoint.malekal.com/files.php?id=20150620_f8p10l10y11e11
    le rapport addition.txt : https://pjjoint.malekal.com/files.php?id=20150620_y6d8v15e11t7

    Merci beaucoup.
    Bociste
    0
  3. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Voici la correction à effectuer avec FRST.
    Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

    Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
    Copie/colle dedans ce qui suit :

    FF Extension: No Name - C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com [not found]
    FF Extension: No Name - C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com [not found]
    2015-06-15 15:34 - 2015-06-20 00:57 - 00000000 _____ C:\Documents and Settings\Administrateur\TempWmicBatchFile.bat
    2015-06-15 14:24 - 2015-06-16 11:13 - 00000000 ____D C:\Program Files\c438dd3a-84e6-41c6-bc20-94d959ef6717
    2015-06-15 14:24 - 2015-06-16 11:13 - 00000000 ____D C:\Program Files\2db716c1-d016-4e3f-a9e9-1125576e702b
    2015-06-15 14:23 - 2015-06-15 14:29 - 00000000 ____D C:\Program Files\Software
    2015-06-15 14:23 - 2015-06-15 14:23 - 00000000 ____D C:\Documents and Settings\Administrateur\Local Settings\Application Data\Software
    2015-06-15 14:23 - 2015-06-15 14:23 - 00000000 ____D C:\Documents and Settings\Administrateur\Local Settings\Application Data\CrashRpt
    2011-05-09 07:15 - 2011-05-09 07:15 - 0519176 _____ () C:\Documents and Settings\Administrateur\Application Data\771.tmp
    2011-05-09 08:58 - 2011-05-09 08:58 - 0040880 _____ () C:\Documents and Settings\Administrateur\Application Data\780.tmp
    2011-05-10 16:54 - 2011-05-10 16:54 - 0000127 _____ () C:\Documents and Settings\Administrateur\Application Data\93.tmp
    2005-09-25 20:21 - 2011-08-14 17:10 - 0000877 ____H () C:\Documents and Settings\Administrateur\Application Data\Administrateurlog.dat
    2011-09-10 21:44 - 2011-09-10 21:44 - 0002096 _____ () C:\Documents and Settings\Administrateur\Application Data\C4.tmp
    2011-04-27 17:30 - 2011-09-02 00:17 - 0118784 _____ () C:\Documents and Settings\Administrateur\Application Data\chrtmp
    2011-09-14 09:18 - 2011-09-14 09:18 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\dFheftIfFEh8
    2011-09-02 05:32 - 2011-09-02 05:32 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\dh1dg0766Ai6
    2011-09-05 13:59 - 2011-09-05 13:59 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\dlEdM6Fggk7f
    2011-09-14 09:19 - 2011-09-14 09:19 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\E767d0kH81KJ
    2011-09-07 14:02 - 2011-09-07 14:02 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\EgG6rht6jEgr
    2011-09-02 00:25 - 2011-09-02 00:25 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\hK6rkdEtt6ft
    2011-11-02 23:53 - 2011-11-02 23:53 - 0593408 _____ (Microsoft Corporation) C:\Documents and Settings\Administrateur\Application Data\Iucwce.exe
    2011-09-01 23:58 - 2011-09-01 23:58 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\khrkIldjj7dK

    Une fois, le texte coller dans le bloc-note.
    Menu Fichier puis Enregistrer sous.
    A gauche, place toi sur le bureau.

    Dans le champs en bas, nom du fichier mets : fixlist.txt
    Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

    Relance FRST qui doit se trouver sur le bureau et clic sur le bouton Fix
    Selon comment un redémarrage est nécessaire (pas obligatoire).
    Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

    Redémarre l'ordinateur

    puis réinitialise tes navigateurs:
    ==================================
    Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :

    0
  4. bociste Messages postés 5 Date d'inscription   Statut Membre Dernière intervention  
     
    Bonjour Malekal morte,

    voici le rapport fixlog.txt

    Fix result of Farbar Recovery Scan Tool (x86) Version: 21-06-2015 01
    Ran by Administrateur at 2015-06-21 15:08:09 Run:1
    Running from C:\Documents and Settings\Administrateur\Bureau
    Loaded Profiles: Administrateur (Available Profiles: Administrateur)
    Boot Mode: Normal

    ==============================================

    fixlist content:
    FF Extension: No Name - C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com [not found]
    FF Extension: No Name - C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com [not found]
    2015-06-15 15:34 - 2015-06-20 00:57 - 00000000 _____ C:\Documents and Settings\Administrateur\TempWmicBatchFile.bat
    2015-06-15 14:24 - 2015-06-16 11:13 - 00000000 ____D C:\Program Files\c438dd3a-84e6-41c6-bc20-94d959ef6717
    2015-06-15 14:24 - 2015-06-16 11:13 - 00000000 ____D C:\Program Files\2db716c1-d016-4e3f-a9e9-1125576e702b
    2015-06-15 14:23 - 2015-06-15 14:29 - 00000000 ____D C:\Program Files\Software
    2015-06-15 14:23 - 2015-06-15 14:23 - 00000000 ____D C:\Documents and Settings\Administrateur\Local Settings\Application Data\Software
    2015-06-15 14:23 - 2015-06-15 14:23 - 00000000 ____D C:\Documents and Settings\Administrateur\Local Settings\Application Data\CrashRpt
    2011-05-09 07:15 - 2011-05-09 07:15 - 0519176 _____ () C:\Documents and Settings\Administrateur\Application Data\771.tmp
    2011-05-09 08:58 - 2011-05-09 08:58 - 0040880 _____ () C:\Documents and Settings\Administrateur\Application Data\780.tmp
    2011-05-10 16:54 - 2011-05-10 16:54 - 0000127 _____ () C:\Documents and Settings\Administrateur\Application Data\93.tmp
    2005-09-25 20:21 - 2011-08-14 17:10 - 0000877 ____H () C:\Documents and Settings\Administrateur\Application Data\Administrateurlog.dat
    2011-09-10 21:44 - 2011-09-10 21:44 - 0002096 _____ () C:\Documents and Settings\Administrateur\Application Data\C4.tmp
    2011-04-27 17:30 - 2011-09-02 00:17 - 0118784 _____ () C:\Documents and Settings\Administrateur\Application Data\chrtmp
    2011-09-14 09:18 - 2011-09-14 09:18 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\dFheftIfFEh8
    2011-09-02 05:32 - 2011-09-02 05:32 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\dh1dg0766Ai6
    2011-09-05 13:59 - 2011-09-05 13:59 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\dlEdM6Fggk7f
    2011-09-14 09:19 - 2011-09-14 09:19 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\E767d0kH81KJ
    2011-09-07 14:02 - 2011-09-07 14:02 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\EgG6rht6jEgr
    2011-09-02 00:25 - 2011-09-02 00:25 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\hK6rkdEtt6ft
    2011-11-02 23:53 - 2011-11-02 23:53 - 0593408 _____ (Microsoft Corporation) C:\Documents and Settings\Administrateur\Application Data\Iucwce.exe
    2011-09-01 23:58 - 2011-09-01 23:58 - 0000000 ____H () C:\Documents and Settings\Administrateur\Application Data\khrkIldjj7dK

    C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com => not found.
    C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\qqc8tqql.default\extensions\14fef81ee28d4335a493c2d@6383fd42ff9b4872bccb5b.com => not found.
    C:\Documents and Settings\Administrateur\TempWmicBatchFile.bat => moved successfully.
    C:\Program Files\c438dd3a-84e6-41c6-bc20-94d959ef6717 => moved successfully.
    C:\Program Files\2db716c1-d016-4e3f-a9e9-1125576e702b => moved successfully.
    C:\Program Files\Software => moved successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\Software => moved successfully.
    C:\Documents and Settings\Administrateur\Local Settings\Application Data\CrashRpt => moved successfully.
    C:\Documents and Settings\Administrateur\Application Data\771.tmp => moved successfully.
    C:\Documents and Settings\Administrateur\Application Data\780.tmp => moved successfully.
    C:\Documents and Settings\Administrateur\Application Data\93.tmp => moved successfully.
    C:\Documents and Settings\Administrateur\Application Data\Administrateurlog.dat => moved successfully.
    C:\Documents and Settings\Administrateur\Application Data\C4.tmp => moved successfully.
    C:\Documents and Settings\Administrateur\Application Data\chrtmp => moved successfully.
    C:\Documents and Settings\Administrateur\Application Data\dFheftIfFEh8 => moved successfully.
    C:\Documents and Settings\Administrateur\Application Data\dh1dg0766Ai6 => moved successfully.
    C:\Documents and Settings\Administrateur\Application Data\dlEdM6Fggk7f => moved successfully.
    C:\Documents and Settings\Administrateur\Application Data\E767d0kH81KJ => moved successfully.
    C:\Documents and Settings\Administrateur\Application Data\EgG6rht6jEgr => moved successfully.
    C:\Documents and Settings\Administrateur\Application Data\hK6rkdEtt6ft => moved successfully.
    C:\Documents and Settings\Administrateur\Application Data\Iucwce.exe => moved successfully.
    C:\Documents and Settings\Administrateur\Application Data\khrkIldjj7dK => moved successfully.

    End of Fixlog 15:08:09

    Je vais maintenant réinitialiser les navigateurs.

    Merci beaucoup.

    Bociste
    0
  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    vois ce qu'il reste comme problème.
    0
  7. bociste Messages postés 5 Date d'inscription   Statut Membre Dernière intervention  
     
    Bonjour Malekal morte,

    Tous me semble revenu à la normale... en tout cas, YTdownloader a disparu.
    Y a t-il encore une procédure à suivre?

    Merci encore pour l'assistance.

    Bociste
    0
  8. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    non =)

    Voila, c'est terminé, tu peux supprimer les programmes utilisés.

    Quelques conseils :

    Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start=

    Pour ne plus te faire avoir.
    A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/
    (Surtout active les détections LPIs pour détecter les programmes parasites et publicitaires)

    Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html

    0
  9. bociste Messages postés 5 Date d'inscription   Statut Membre Dernière intervention  
     
    Bonjour Malekal Morte

    super, tous cela est noté!

    Merci encore pour le coup de main.

    Bociste
    0