CrossBrowse et adwares

Résolu
galestus -  
Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   -
Bonjour j'ai suivi le tuto:
http://www.malekal.com/2013/06/15/tutorial-farbar-recovery-scan-tool-frst/#fix

Maintenant il me faut de l'aide pour avoir le fichier fixlist.txt

voila mes rapports:
http://pjjoint.malekal.com/files.php?id=FRST_20150622_d6c6d6c912
http://pjjoint.malekal.com/files.php?id=20150622_t15r10o12c8n9
http://pjjoint.malekal.com/files.php?id=20150622_k11e13p7w11t9

6 réponses

  1.
    Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Salut,

    Je regarde les rapports.
    1
    1. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
       
      Voici la correction à effectuer avec FRST.
      Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

      Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
      Copie/colle dedans ce qui suit :


      HKLM\...\Run: [3D BubbleSound] => C:\Program Files\BubbleSound\3D BubbleSound.exe
      HKLM\...\Run: [shopperz] => C:\Program Files\shopperz\Ynauoihe.exe
      HKLM\...\Run: [shopperz64] => C:\Program Files\shopperz\Ynauoihe64.exe
      HKLM-x32\...\Run: [Boxore Client] => C:\Program Files (x86)\Boxore\Boxore Client\boxore.exe [1527808 2015-05-07] (Boxore OU)
      HKLM-x32\...\RunOnce: [MaxComputerCleaner_v35.802] => C:\Program Files (x86)\MaxComputerCleaner_v35.802\MaxComputerCleaner_Maintenance.exe [31432 2015-06-20] ()
      HKU\S-1-5-21-3197866438-3115968672-2919077457-1001\...\Run: [GoogleChromeAutoLaunch_9CF389E686A17F4A41B0726C19415637] => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe --no-startup-window
      AppInit_DLLs: C:\ProgramData\FlashBeat\FlashBeat64.dll => C:\ProgramData\FlashBeat\FlashBeat64.dll File not found
      AppInit_DLLs-x32: C:\PROGRA~3\{5693B~1\1173~1.1\meca.dll => C:\ProgramData\{5693BE50-0611-6FD6-B797-1F546715CCDA}\1.17.3.1\meca.dll [788480 2015-06-22] ()
      AppInit_DLLs-x32: C:\ProgramData\FlashBeat\FlashBeat32.dll => C:\ProgramData\FlashBeat\FlashBeat32.dll File not found
      Startup: C:\Users\nicolas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RapidMediaConverterApp.lnk [2015-06-21]
      ShortcutTarget: RapidMediaConverterApp.lnk -> C:\Program Files (x86)\RapidMediaConverter\RapidMediaConverterApp.exe ()
      ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled
      ProxyServer: [.DEFAULT] => http=127.0.0.1:50198;https=127.0.0.1:50198 [Attention - Possible Proxy Malicieux]
      FF user.js: detected! => C:\Users\nicolas\AppData\Roaming\Mozilla\Firefox\Profiles\cd5yhmsw.default-1434926334274\user.js [2015-06-22]
      FF Extension: Plus HD Video 3.1cV21.06 - C:\Users\nicolas\AppData\Roaming\Mozilla\Firefox\Profiles\cd5yhmsw.default-1434926334274\Extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com [2015-06-22]
      R2 IHProtect Service; C:\Program Files (x86)\MiuiTab\ProtectService.exe [125112 2015-06-16] (XTab system)
      R2 Hydrup; C:\Program Files (x86)\Common Files\Hydrup\hydrup.exe [266536 2015-03-30] (Software)
      R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [695976 2015-06-22] (DTools LIMITED) <==== ATTENTION
      R2 wir; c:\windows\wir.exe [417792 2015-06-21] () [File not signed]
      R2 wuOFllkACBc; C:\ProgramData\OBnemMeSI\wuOFllkACBc.exe [2731488 2015-06-21] (Useful Technology)
      R2 xoperoze; C:\Users\nicolas\AppData\Roaming\A6C19681-1434923132-11CB-A896-DE05296641EA\jnsrE212.tmp [219136 2015-06-21] () [File not signed]
      R2 zedepory; C:\Users\nicolas\AppData\Roaming\A6C19681-1434923132-11CB-A896-DE05296641EA\hnsaF945.tmp [166912 2015-06-21] () [File not signed]
      S2 insvc_1.10.0.14; C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe [X]
      S2 internetControllerService; C:\Users\nicolas\AppData\Roaming\Internet-Controller\internet-controllerservice.exe [X]
      R2 myqifedo; C:\Users\nicolas\AppData\Roaming\A6C19681-1434923132-11CB-A896-DE05296641EA\knswC963.tmpfs [X]
      S2 scsvc_1.10.0.16; C:\Program Files (x86)\SuperClick_1.10.0.16\Service\scsvc.exe [X]
      R2 mwir; c:\windows\mwir.exe [408576 2015-06-21] () [File not signed]
      S2 Software_update; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [108032 2015-06-22] (The Software Group) [File not signed]
      S3 Software_update_m; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [108032 2015-06-22] (The Software Group) [File not signed]
      2015-06-22 00:55 - 2015-06-22 00:55 - 00000000 ____D C:\ProgramData\WindowsMangerProtect
      2015-06-22 00:55 - 2015-06-22 00:55 - 00000000 ____D C:\ProgramData\IHProtectUpDate
      2015-06-22 00:55 - 2015-06-22 00:55 - 00000000 ____D C:\Program Files (x86)\MiuiTab
      2015-06-22 00:51 - 2015-06-22 00:56 - 00000940 _____ C:\WINDOWS\Tasks\SoftwareUpdateTaskMachineUA.job
      2015-06-22 00:51 - 2015-06-22 00:56 - 00000936 _____ C:\WINDOWS\Tasks\SoftwareUpdateTaskMachineCore.job
      2015-06-22 00:51 - 2015-06-22 00:51 - 00003950 _____ C:\WINDOWS\System32\Tasks\amiupdaterExi
      2015-06-22 00:51 - 2015-06-22 00:51 - 00003912 _____ C:\WINDOWS\System32\Tasks\SoftwareUpdateTaskMachineUA
      2015-06-22 00:51 - 2015-06-22 00:51 - 00003738 _____ C:\WINDOWS\System32\Tasks\amiupdaterExd
      2015-06-22 00:51 - 2015-06-22 00:51 - 00003676 _____ C:\WINDOWS\System32\Tasks\SoftwareUpdateTaskMachineCore
      2015-06-22 00:51 - 2015-06-22 00:51 - 00000000 ____D C:\Users\nicolas\AppData\Local\Boxore
      2015-06-22 00:51 - 2015-06-22 00:51 - 00000000 ____D C:\Program Files (x86)\Software
      2015-06-22 00:51 - 2015-06-22 00:51 - 00000000 ____D C:\Program Files (x86)\Boxore
      2015-06-22 00:49 - 2015-06-22 01:01 - 00000000 ____D C:\Users\nicolas\AppData\Local\BreakingNewsAlert
      2015-06-22 00:43 - 2015-06-22 00:48 - 00001026 _____ C:\WINDOWS\Tasks\6kQqMbXYUDhrg.job
      2015-06-22 00:43 - 2015-06-22 00:48 - 00001016 _____ C:\WINDOWS\Tasks\wBXWnbSg.job
      2015-06-22 00:43 - 2015-06-22 00:47 - 00003168 _____ C:\WINDOWS\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-1-7.job
      2015-06-22 00:43 - 2015-06-22 00:47 - 00003168 _____ C:\WINDOWS\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-1-6.job
      2015-06-22 00:43 - 2015-06-22 00:47 - 00002476 _____ C:\WINDOWS\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-5_user.job
      2015-06-22 00:43 - 2015-06-22 00:47 - 00002476 _____ C:\WINDOWS\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-5.job
      2015-06-22 00:43 - 2015-06-22 00:43 - 00006172 _____ C:\WINDOWS\System32\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-1-7
      2015-06-22 00:43 - 2015-06-22 00:43 - 00006172 _____ C:\WINDOWS\System32\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-1-6
      2015-06-22 00:43 - 2015-06-22 00:43 - 00005480 _____ C:\WINDOWS\System32\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-5
      2015-06-22 00:43 - 2015-06-22 00:43 - 00004038 _____ C:\WINDOWS\System32\Tasks\6kQqMbXYUDhrg
      2015-06-22 00:43 - 2015-06-22 00:43 - 00004030 _____ C:\WINDOWS\System32\Tasks\wBXWnbSg
      2015-06-22 00:42 - 2015-06-22 00:47 - 00004524 _____ C:\WINDOWS\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-4.job
      2015-06-22 00:42 - 2015-06-22 00:42 - 00007528 _____ C:\WINDOWS\System32\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-4
      2015-06-22 00:42 - 2015-06-22 00:42 - 00000000 ____D C:\Program Files (x86)\757d9536-0a6e-4915-809e-b80388fc5689
      2015-06-22 00:10 - 2015-06-22 00:10 - 00003432 _____ C:\WINDOWS\System32\Tasks\{894749D3-C087-4475-8FF2-63207845D2EC}
      2015-06-22 00:09 - 2015-06-22 00:46 - 00000000 ____D C:\Users\nicolas\AppData\Local\Chromium
      2015-06-22 00:07 - 2015-06-22 00:07 - 00004142 _____ C:\WINDOWS\System32\Tasks\Dregol meca
      2015-06-22 00:07 - 2015-06-22 00:07 - 00000000 ____D C:\ProgramData\{5693BE50-0611-6FD6-B797-1F546715CCDA}
      2015-06-22 00:02 - 2015-06-22 00:04 - 00000000 ____D C:\Program Files (x86)\ff8380ce-0ebd-460b-b253-ec193a0107c8
      2015-06-22 00:00 - 2015-06-22 00:00 - 00000000 ____D C:\Program Files (x86)\c0bb9463-d3fb-44a7-b275-493bcf3d3759
      2015-06-21 23:59 - 2015-06-22 00:42 - 00000004 _____ C:\WINDOWS\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
      2015-06-21 23:58 - 2015-06-21 23:58 - 00003632 _____ C:\WINDOWS\System32\Tasks\Ioect
      2015-06-21 23:51 - 2015-06-22 00:40 - 00003468 _____ C:\WINDOWS\System32\Tasks\Broocseiaseu
      2015-06-21 23:51 - 2015-06-21 23:51 - 00000000 ____D C:\ProgramData\Broocseiaseu
      2015-06-21 23:50 - 2015-06-21 23:50 - 00000000 ____D C:\Users\nicolas\AppData\Roaming\RapidMediaConverter
      2015-06-21 23:50 - 2015-06-21 23:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rapid Media Converter
      2015-06-21 23:49 - 2015-06-22 00:49 - 00000000 ____D C:\Program Files (x86)\FastSearch
      2015-06-21 23:49 - 2015-06-22 00:47 - 00000354 _____ C:\WINDOWS\Tasks\DBJXMQ1.job
      2015-06-21 23:49 - 2015-06-21 23:50 - 00000000 ____D C:\Program Files (x86)\RapidMediaConverter
      2015-06-21 23:49 - 2015-06-21 23:49 - 00003092 _____ C:\WINDOWS\System32\Tasks\sol3007
      2015-06-21 23:49 - 2015-06-21 23:49 - 00002868 _____ C:\WINDOWS\System32\Tasks\DBJXMQ1
      2015-06-21 23:49 - 2015-06-21 23:49 - 00000000 ____D C:\Users\nicolas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rapid Media Converter
      2015-06-21 23:49 - 2015-06-21 23:49 - 00000000 ____D C:\Users\nicolas\AppData\Local\RapidMediaConverter
      2015-06-21 23:49 - 2015-06-21 23:49 - 00000000 ____D C:\ProgramData\28341ff220e0446c9fff27c4493d622e
      2015-06-21 23:48 - 2015-06-22 00:52 - 00000000 ____D C:\Users\nicolas\AppData\Local\A6C19681-1434930510-11CB-A896-DE05296641EA
      2015-06-21 23:48 - 2015-06-22 00:51 - 00000000 ___HD C:\ProgramData\wir
      2015-06-21 23:47 - 2015-06-21 23:47 - 00000000 _____ C:\WINDOWS\prleth.sys
      2015-06-21 23:47 - 2015-06-21 23:47 - 00000000 _____ C:\WINDOWS\hgfs.sys
      2015-06-21 23:46 - 2015-06-21 23:47 - 00000000 ____D C:\ProgramData\OBnemMeSI
      2015-06-21 23:45 - 2015-06-21 23:50 - 00000000 ____D C:\Program Files (x86)\MaxComputerCleaner_v35.802
      2015-06-21 23:45 - 2015-06-21 23:45 - 00631808 _____ C:\WINDOWS\wir.dat
      2015-06-21 23:45 - 2015-06-21 23:45 - 00417792 _____ C:\WINDOWS\wir.exe
      2015-06-21 23:45 - 2015-06-21 23:45 - 00408576 _____ C:\WINDOWS\mwir.exe
      2015-06-21 23:45 - 2015-06-21 23:45 - 00000000 ____D C:\Users\nicolas\AppData\Roaming\A6C19681-1434923132-11CB-A896-DE05296641EA
      2015-06-21 23:45 - 2013-08-22 15:25 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
      2015-06-21 23:44 - 2015-06-21 23:44 - 00690392 _____ ( ) C:\Users\nicolas\Downloads\Duel%20Quiz%20pour%20PC.exe
      2015-06-21 20:47 - 2015-06-21 20:47 - 00000000 ____D C:\Users\nicolas\AppData\Roaming\Shooter
      2015-06-15 11:46 - 2015-06-21 08:56 - 00000000 ____D C:\ProgramData\197815149853072145
      2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\nicolas\AppData\Roaming\6kQqMbXYUDhrg
      2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\nicolas\AppData\Roaming\6kQqMbXYUDhrg.exe
      2013-07-28 17:39 - 2014-02-12 17:31 - 0026423 _____ () C:\Users\nicolas\AppData\Roaming\AbsoluteReminder.xml
      2015-06-15 11:47 - 2015-06-22 00:02 - 0000024 _____ () C:\Users\nicolas\AppData\Roaming\appdataFr25.bin
      2013-12-23 16:19 - 2014-01-09 15:58 - 0076976 _____ () C:\Users\nicolas\AppData\Roaming\LoJackSetup.exe
      2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\nicolas\AppData\Roaming\wBXWnbSg
      2015-04-20 16:05 - 2015-04-20 16:05 - 1246720 _____ () C:\Users\nicolas\AppData\Roaming\wBXWnbSg.exe

      Une fois, le texte coller dans le bloc-note.
      Menu Fichier puis Enregistrer sous.
      A gauche, place toi sur le bureau.

      Dans le champs en bas, nom du fichier mets : fixlist.txt
      Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

      Relance FRST qui doit se trouver sur le bureau et clic sur le bouton Fix
      Selon comment un redémarrage est nécessaire (pas obligatoire).
      Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

      Redémarre l'ordinateur


      puis réinitialise tes navigateurs:
      ==================================
      Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :


      puis :


      Installe Avast! : https://www.malekal.com/tutoriel-antivirus-avast/
      Surtout active les détections LPIs.
      0
    2. galestus Messages postés 9 Statut Membre
       
      voila le texte merci



      Fix result of Farbar Recovery Scan Tool (x64) Version:21-06-2015 01
      Ran by nicolas at 2015-06-22 18:17:15 Run:1
      Running from C:\Users\nicolas\Desktop
      Loaded Profiles: nicolas (Available Profiles: nicolas)
      Boot Mode: Normal
      ==============================================

      fixlist content:

      HKLM\...\Run: [3D BubbleSound] => C:\Program Files\BubbleSound\3D BubbleSound.exe
      HKLM\...\Run: [shopperz] => C:\Program Files\shopperz\Ynauoihe.exe
      HKLM\...\Run: [shopperz64] => C:\Program Files\shopperz\Ynauoihe64.exe
      HKLM-x32\...\Run: [Boxore Client] => C:\Program Files (x86)\Boxore\Boxore Client\boxore.exe [1527808 2015-05-07] (Boxore OU)
      HKLM-x32\...\RunOnce: [MaxComputerCleaner_v35.802] => C:\Program Files (x86)\MaxComputerCleaner_v35.802\MaxComputerCleaner_Maintenance.exe [31432 2015-06-20] ()
      HKU\S-1-5-21-3197866438-3115968672-2919077457-1001\...\Run: [GoogleChromeAutoLaunch_9CF389E686A17F4A41B0726C19415637] => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe --no-startup-window
      AppInit_DLLs: C:\ProgramData\FlashBeat\FlashBeat64.dll => C:\ProgramData\FlashBeat\FlashBeat64.dll File not found
      AppInit_DLLs-x32: C:\PROGRA~3\{5693B~1\1173~1.1\meca.dll => C:\ProgramData\{5693BE50-0611-6FD6-B797-1F546715CCDA}\1.17.3.1\meca.dll [788480 2015-06-22] ()
      AppInit_DLLs-x32: C:\ProgramData\FlashBeat\FlashBeat32.dll => C:\ProgramData\FlashBeat\FlashBeat32.dll File not found
      Startup: C:\Users\nicolas\AppData\Roaming\Microsoft Windows\Start Menu\Programs\Startup\RapidMediaConverterApp.lnk [2015-06-21]
      ShortcutTarget: RapidMediaConverterApp.lnk -> C:\Program Files (x86)\RapidMediaConverter\RapidMediaConverterApp.exe ()
      ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled
      ProxyServer: [.DEFAULT] => http=127.0.0.1:50198;https=127.0.0.1:50198 [Attention - Possible Proxy Malicieux]
      FF user.js: detected! => C:\Users\nicolas\AppData\Roaming\Mozilla\Firefox\Profiles\cd5yhmsw.default-1434926334274\user.js [2015-06-22]
      FF Extension: Plus HD Video 3.1cV21.06 - C:\Users\nicolas\AppData\Roaming\Mozilla\Firefox\Profiles\cd5yhmsw.default-1434926334274\Extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com [2015-06-22]
      R2 IHProtect Service; C:\Program Files (x86)\MiuiTab\ProtectService.exe [125112 2015-06-16] (XTab system)
      R2 Hydrup; C:\Program Files (x86)\Common Files\Hydrup\hydrup.exe [266536 2015-03-30] (Software)
      R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [695976 2015-06-22] (DTools LIMITED) <==== ATTENTION
      R2 wir; c: windows\wir.exe [417792 2015-06-21] () [File not signed]
      R2 wuOFllkACBc; C:\ProgramData\OBnemMeSI\wuOFllkACBc.exe [2731488 2015-06-21] (Useful Technology)
      R2 xoperoze; C:\Users\nicolas\AppData\Roaming\A6C19681-1434923132-11CB-A896-DE05296641EA\jnsrE212.tmp [219136 2015-06-21] () [File not signed]
      R2 zedepory; C:\Users\nicolas\AppData\Roaming\A6C19681-1434923132-11CB-A896-DE05296641EA\hnsaF945.tmp [166912 2015-06-21] () [File not signed]
      S2 insvc_1.10.0.14; C:\Program Files (x86)\Infonaut_1.10.0.14\Service\insvc.exe [X]
      S2 internetControllerService; C:\Users\nicolas\AppData\Roaming\Internet-Controller\internet-controllerservice.exe [X]
      R2 myqifedo; C:\Users\nicolas\AppData\Roaming\A6C19681-1434923132-11CB-A896-DE05296641EA\knswC963.tmpfs [X]
      S2 scsvc_1.10.0.16; C:\Program Files (x86)\SuperClick_1.10.0.16\Service\scsvc.exe [X]
      R2 mwir; c:\windows\mwir.exe [408576 2015-06-21] () [File not signed]
      S2 Software_update; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [108032 2015-06-22] (The Software Group) [File not signed]
      S3 Software_update_m; C:\Program Files (x86)\Software\Update\SoftwareUpdate.exe [108032 2015-06-22] (The Software Group) [File not signed]
      2015-06-22 00:55 - 2015-06-22 00:55 - 00000000 ____D C:\ProgramData\WindowsMangerProtect
      2015-06-22 00:55 - 2015-06-22 00:55 - 00000000 ____D C:\ProgramData\IHProtectUpDate
      2015-06-22 00:55 - 2015-06-22 00:55 - 00000000 ____D C:\Program Files (x86)\MiuiTab
      2015-06-22 00:51 - 2015-06-22 00:56 - 00000940 _____ C:\WINDOWS\Tasks\SoftwareUpdateTaskMachineUA.job
      2015-06-22 00:51 - 2015-06-22 00:56 - 00000936 _____ C:\WINDOWS\Tasks\SoftwareUpdateTaskMachineCore.job
      2015-06-22 00:51 - 2015-06-22 00:51 - 00003950 _____ C:\WINDOWS\System32\Tasks\amiupdaterExi
      2015-06-22 00:51 - 2015-06-22 00:51 - 00003912 _____ C:\WINDOWS\System32\Tasks\SoftwareUpdateTaskMachineUA
      2015-06-22 00:51 - 2015-06-22 00:51 - 00003738 _____ C:\WINDOWS\System32\Tasks\amiupdaterExd
      2015-06-22 00:51 - 2015-06-22 00:51 - 00003676 _____ C:\WINDOWS\System32\Tasks\SoftwareUpdateTaskMachineCore
      2015-06-22 00:51 - 2015-06-22 00:51 - 00000000 ____D C:\Users\nicolas\AppData\Local\Boxore
      2015-06-22 00:51 - 2015-06-22 00:51 - 00000000 ____D C:\Program Files (x86)\Software
      2015-06-22 00:51 - 2015-06-22 00:51 - 00000000 ____D C:\Program Files (x86)\Boxore
      2015-06-22 00:49 - 2015-06-22 01:01 - 00000000 ____D C:\Users\nicolas\AppData\Local\BreakingNewsAlert
      2015-06-22 00:43 - 2015-06-22 00:48 - 00001026 _____ C:\WINDOWS\Tasks\6kQqMbXYUDhrg.job
      2015-06-22 00:43 - 2015-06-22 00:48 - 00001016 _____ C:\WINDOWS\Tasks\wBXWnbSg.job
      2015-06-22 00:43 - 2015-06-22 00:47 - 00003168 _____ C:\WINDOWS\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-1-7.job
      2015-06-22 00:43 - 2015-06-22 00:47 - 00003168 _____ C:\WINDOWS\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-1-6.job
      2015-06-22 00:43 - 2015-06-22 00:47 - 00002476 _____ C:\WINDOWS\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-5_user.job
      2015-06-22 00:43 - 2015-06-22 00:47 - 00002476 _____ C:\WINDOWS\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-5.job
      2015-06-22 00:43 - 2015-06-22 00:43 - 00006172 _____ C:\WINDOWS\System32\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-1-7
      2015-06-22 00:43 - 2015-06-22 00:43 - 00006172 _____ C:\WINDOWS\System32\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-1-6
      2015-06-22 00:43 - 2015-06-22 00:43 - 00005480 _____ C:\WINDOWS\System32\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-5
      2015-06-22 00:43 - 2015-06-22 00:43 - 00004038 _____ C:\WINDOWS\System32\Tasks\6kQqMbXYUDhrg
      2015-06-22 00:43 - 2015-06-22 00:43 - 00004030 _____ C:\WINDOWS\System32\Tasks\wBXWnbSg
      2015-06-22 00:42 - 2015-06-22 00:47 - 00004524 _____ C:\WINDOWS\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-4.job
      2015-06-22 00:42 - 2015-06-22 00:42 - 00007528 _____ C:\WINDOWS\System32\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-4
      2015-06-22 00:42 - 2015-06-22 00:42 - 00000000 ____D C:\Program Files (x86)\757d9536-0a6e-4915-809e-b80388fc5689
      2015-06-22 00:10 - 2015-06-22 00:10 - 00003432 _____ C:\WINDOWS\System32\Tasks\{894749D3-C087-4475-8FF2-63207845D2EC}
      2015-06-22 00:09 - 2015-06-22 00:46 - 00000000 ____D C:\Users\nicolas\AppData\Local\Chromium
      2015-06-22 00:07 - 2015-06-22 00:07 - 00004142 _____ C:\WINDOWS\System32\Tasks\Dregol meca
      2015-06-22 00:07 - 2015-06-22 00:07 - 00000000 ____D C:\ProgramData\{5693BE50-0611-6FD6-B797-1F546715CCDA}
      2015-06-22 00:02 - 2015-06-22 00:04 - 00000000 ____D C:\Program Files (x86)\ff8380ce-0ebd-460b-b253-ec193a0107c8
      2015-06-22 00:00 - 2015-06-22 00:00 - 00000000 ____D C:\Program Files (x86)\c0bb9463-d3fb-44a7-b275-493bcf3d3759
      2015-06-21 23:59 - 2015-06-22 00:42 - 00000004 _____ C:\WINDOWS\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
      2015-06-21 23:58 - 2015-06-21 23:58 - 00003632 _____ C:\WINDOWS\System32\Tasks\Ioect
      2015-06-21 23:51 - 2015-06-22 00:40 - 00003468 _____ C:\WINDOWS\System32\Tasks\Broocseiaseu
      2015-06-21 23:51 - 2015-06-21 23:51 - 00000000 ____D C:\ProgramData\Broocseiaseu
      2015-06-21 23:50 - 2015-06-21 23:50 - 00000000 ____D C:\Users\nicolas\AppData\Roaming\RapidMediaConverter
      2015-06-21 23:50 - 2015-06-21 23:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rapid Media Converter
      2015-06-21 23:49 - 2015-06-22 00:49 - 00000000 ____D C:\Program Files (x86)\FastSearch
      2015-06-21 23:49 - 2015-06-22 00:47 - 00000354 _____ C:\WINDOWS\Tasks\DBJXMQ1.job
      2015-06-21 23:49 - 2015-06-21 23:50 - 00000000 ____D C:\Program Files (x86)\RapidMediaConverter
      2015-06-21 23:49 - 2015-06-21 23:49 - 00003092 _____ C:\WINDOWS\System32\Tasks\sol3007
      2015-06-21 23:49 - 2015-06-21 23:49 - 00002868 _____ C:\WINDOWS\System32\Tasks\DBJXMQ1
      2015-06-21 23:49 - 2015-06-21 23:49 - 00000000 ____D C:\Users\nicolas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rapid Media Converter
      2015-06-21 23:49 - 2015-06-21 23:49 - 00000000 ____D C:\Users\nicolas\AppData\Local\RapidMediaConverter
      2015-06-21 23:49 - 2015-06-21 23:49 - 00000000 ____D C:\ProgramData\28341ff220e0446c9fff27c4493d622e
      2015-06-21 23:48 - 2015-06-22 00:52 - 00000000 ____D C:\Users\nicolas\AppData\Local\A6C19681-1434930510-11CB-A896-DE05296641EA
      2015-06-21 23:48 - 2015-06-22 00:51 - 00000000 ___HD C:\ProgramData\wir
      2015-06-21 23:47 - 2015-06-21 23:47 - 00000000 _____ C:\WINDOWS\prleth.sys
      2015-06-21 23:47 - 2015-06-21 23:47 - 00000000 _____ C:\WINDOWS\hgfs.sys
      2015-06-21 23:46 - 2015-06-21 23:47 - 00000000 ____D C:\ProgramData\OBnemMeSI
      2015-06-21 23:45 - 2015-06-21 23:50 - 00000000 ____D C:\Program Files (x86)\MaxComputerCleaner_v35.802
      2015-06-21 23:45 - 2015-06-21 23:45 - 00631808 _____ C:\WINDOWS\wir.dat
      2015-06-21 23:45 - 2015-06-21 23:45 - 00417792 _____ C:\WINDOWS\wir.exe
      2015-06-21 23:45 - 2015-06-21 23:45 - 00408576 _____ C:\WINDOWS\mwir.exe
      2015-06-21 23:45 - 2015-06-21 23:45 - 00000000 ____D C:\Users\nicolas\AppData\Roaming\A6C19681-1434923132-11CB-A896-DE05296641EA
      2015-06-21 23:45 - 2013-08-22 15:25 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
      2015-06-21 23:44 - 2015-06-21 23:44 - 00690392 _____ ( ) C:\Users\nicolas\Downloads\Duel%20Quiz%20pour%20PC.exe
      2015-06-21 20:47 - 2015-06-21 20:47 - 00000000 ____D C:\Users\nicolas\AppData\Roaming\Shooter
      2015-06-15 11:46 - 2015-06-21 08:56 - 00000000 ____D C:\ProgramData\197815149853072145
      2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\nicolas\AppData\Roaming\6kQqMbXYUDhrg
      2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\nicolas\AppData\Roaming\6kQqMbXYUDhrg.exe
      2013-07-28 17:39 - 2014-02-12 17:31 - 0026423 _____ () C:\Users\nicolas\AppData\Roaming\AbsoluteReminder.xml
      2015-06-15 11:47 - 2015-06-22 00:02 - 0000024 _____ () C:\Users\nicolas\AppData\Roaming\appdataFr25.bin
      2013-12-23 16:19 - 2014-01-09 15:58 - 0076976 _____ () C:\Users\nicolas\AppData\Roaming\LoJackSetup.exe
      2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\nicolas\AppData\Roaming\wBXWnbSg
      2015-04-20 16:05 - 2015-04-20 16:05 - 1246720 _____ () C:\Users\nicolas\AppData\Roaming\wBXWnbSg.exe


      HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\3D BubbleSound => value removed successfully
      HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\shopperz => value removed successfully
      HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\shopperz64 => value removed successfully
      HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Boxore Client => value removed successfully
      HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\MaxComputerCleaner_v35.802 => value removed successfully
      HKU\S-1-5-21-3197866438-3115968672-2919077457-1001\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_9CF389E686A17F4A41B0726C19415637 => value removed successfully
      "C:\ProgramData\FlashBeat\FlashBeat64.dll" => value data removed successfully.
      "C:\PROGRA~3\{5693B~1\1173~1.1\meca.dll" => value data removed successfully.
      "C:\ProgramData\FlashBeat\FlashBeat32.dll" => value data removed successfully.
      C:\Users\nicolas\AppData\Roaming\Microsoft Windows\Start Menu\Programs\Startup\RapidMediaConverterApp.lnk not found.
      C:\Program Files (x86)\RapidMediaConverter\RapidMediaConverterApp.exe => moved successfully.
      HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value removed successfully
      HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value removed successfully
      C:\Users\nicolas\AppData\Roaming\Mozilla\Firefox\Profiles\cd5yhmsw.default-1434926334274\user.js => moved successfully.
      C:\Users\nicolas\AppData\Roaming\Mozilla\Firefox\Profiles\cd5yhmsw.default-1434926334274\Extensions\d4db60df25f14dae9dd18@185c395f9e794c9ab86be3eb.com => moved successfully.
      IHProtect Service => Unable to stop service.
      IHProtect Service => Service removed successfully
      Hydrup => Unable to stop service.
      Hydrup => Service removed successfully
      WindowsMangerProtect => Unable to stop service.
      WindowsMangerProtect => Service removed successfully
      wir => Unable to stop service.
      wir => Service removed successfully
      wuOFllkACBc => Unable to stop service.
      wuOFllkACBc => Service removed successfully
      xoperoze => Unable to stop service.
      xoperoze => Service removed successfully
      zedepory => Unable to stop service.
      zedepory => Service removed successfully
      insvc_1.10.0.14 => Service removed successfully
      internetControllerService => Service removed successfully
      myqifedo => Service not found.
      scsvc_1.10.0.16 => Service removed successfully
      mwir => Unable to stop service.
      mwir => Service removed successfully
      Software_update => Service removed successfully
      Software_update_m => Service removed successfully
      C:\ProgramData\WindowsMangerProtect => moved successfully.
      C:\ProgramData\IHProtectUpDate => moved successfully.
      C:\Program Files (x86)\MiuiTab => moved successfully.
      C:\WINDOWS\Tasks\SoftwareUpdateTaskMachineUA.job => moved successfully.
      C:\WINDOWS\Tasks\SoftwareUpdateTaskMachineCore.job => moved successfully.
      "C:\WINDOWS\System32\Tasks\amiupdaterExi" => File/Folder not found.
      C:\WINDOWS\System32\Tasks\SoftwareUpdateTaskMachineUA => moved successfully.
      "C:\WINDOWS\System32\Tasks\amiupdaterExd" => File/Folder not found.
      C:\WINDOWS\System32\Tasks\SoftwareUpdateTaskMachineCore => moved successfully.
      C:\Users\nicolas\AppData\Local\Boxore => moved successfully.
      C:\Program Files (x86)\Software => moved successfully.

      "C:\Program Files (x86)\Boxore" folder move:

      Could not move "C:\Program Files (x86)\Boxore" folder => Scheduled to move on reboot.

      C:\Users\nicolas\AppData\Local\BreakingNewsAlert => moved successfully.
      C:\WINDOWS\Tasks\6kQqMbXYUDhrg.job => moved successfully.
      C:\WINDOWS\Tasks\wBXWnbSg.job => moved successfully.
      C:\WINDOWS\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-1-7.job => moved successfully.
      C:\WINDOWS\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-1-6.job => moved successfully.
      C:\WINDOWS\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-5_user.job => moved successfully.
      C:\WINDOWS\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-5.job => moved successfully.
      C:\WINDOWS\System32\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-1-7 => moved successfully.
      C:\WINDOWS\System32\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-1-6 => moved successfully.
      C:\WINDOWS\System32\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-5 => moved successfully.
      C:\WINDOWS\System32\Tasks\6kQqMbXYUDhrg => moved successfully.
      C:\WINDOWS\System32\Tasks\wBXWnbSg => moved successfully.
      C:\WINDOWS\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-4.job => moved successfully.
      C:\WINDOWS\System32\Tasks\6d4ca89f-dd70-4397-81f2-9b646f39412d-4 => moved successfully.
      C:\Program Files (x86)\757d9536-0a6e-4915-809e-b80388fc5689 => moved successfully.
      C:\WINDOWS\System32\Tasks\{894749D3-C087-4475-8FF2-63207845D2EC} => moved successfully.
      C:\Users\nicolas\AppData\Local\Chromium => moved successfully.
      C:\WINDOWS\System32\Tasks\Dregol meca => moved successfully.
      C:\ProgramData\{5693BE50-0611-6FD6-B797-1F546715CCDA} => moved successfully.
      C:\Program Files (x86)\ff8380ce-0ebd-460b-b253-ec193a0107c8 => moved successfully.
      C:\Program Files (x86)\c0bb9463-d3fb-44a7-b275-493bcf3d3759 => moved successfully.
      C:\WINDOWS\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 => moved successfully.
      C:\WINDOWS\System32\Tasks\Ioect => moved successfully.
      C:\WINDOWS\System32\Tasks\Broocseiaseu => moved successfully.
      C:\ProgramData\Broocseiaseu => moved successfully.
      C:\Users\nicolas\AppData\Roaming\RapidMediaConverter => moved successfully.
      C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rapid Media Converter => moved successfully.
      C:\Program Files (x86)\FastSearch => moved successfully.
      C:\WINDOWS\Tasks\DBJXMQ1.job => moved successfully.

      "C:\Program Files (x86)\RapidMediaConverter" folder move:

      Could not move "C:\Program Files (x86)\RapidMediaConverter" folder => Scheduled to move on reboot.

      C:\WINDOWS\System32\Tasks\sol3007 => moved successfully.
      C:\WINDOWS\System32\Tasks\DBJXMQ1 => moved successfully.
      C:\Users\nicolas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rapid Media Converter => moved successfully.
      C:\Users\nicolas\AppData\Local\RapidMediaConverter => moved successfully.
      C:\ProgramData\28341ff220e0446c9fff27c4493d622e => moved successfully.

      "C:\Users\nicolas\AppData\Local\A6C19681-1434930510-11CB-A896-DE05296641EA" folder move:

      Could not move "C:\Users\nicolas\AppData\Local\A6C19681-1434930510-11CB-A896-DE05296641EA" folder => Scheduled to move on reboot.

      C:\ProgramData\wir => moved successfully.
      C:\WINDOWS\prleth.sys => moved successfully.
      C:\WINDOWS\hgfs.sys => moved successfully.

      "C:\ProgramData\OBnemMeSI" folder move:

      Could not move "C:\ProgramData\OBnemMeSI" folder => Scheduled to move on reboot.

      C:\Program Files (x86)\MaxComputerCleaner_v35.802 => moved successfully.
      C:\WINDOWS\wir.dat => moved successfully.
      C:\WINDOWS\wir.exe => moved successfully.
      C:\WINDOWS\mwir.exe => moved successfully.
      C:\Users\nicolas\AppData\Roaming\A6C19681-1434923132-11CB-A896-DE05296641EA => moved successfully.
      C:\WINDOWS\system32\Drivers\etc\hp.bak => moved successfully.
      C:\Users\nicolas\Downloads\Duel%20Quiz%20pour%20PC.exe => moved successfully.
      C:\Users\nicolas\AppData\Roaming\Shooter => moved successfully.
      C:\ProgramData\197815149853072145 => moved successfully.
      C:\Users\nicolas\AppData\Roaming\6kQqMbXYUDhrg => moved successfully.
      C:\Users\nicolas\AppData\Roaming\6kQqMbXYUDhrg.exe => moved successfully.
      C:\Users\nicolas\AppData\Roaming\AbsoluteReminder.xml => moved successfully.
      C:\Users\nicolas\AppData\Roaming\appdataFr25.bin => moved successfully.
      C:\Users\nicolas\AppData\Roaming\LoJackSetup.exe => moved successfully.
      C:\Users\nicolas\AppData\Roaming\wBXWnbSg => moved successfully.
      C:\Users\nicolas\AppData\Roaming\wBXWnbSg.exe => moved successfully.

      Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-06-22 18:20:56)<=

      C:\Program Files (x86)\Boxore => Is moved successfully
      C:\Program Files (x86)\RapidMediaConverter => moved successfully
      C:\Users\nicolas\AppData\Local\A6C19681-1434930510-11CB-A896-DE05296641EA => Is moved successfully
      C:\ProgramData\OBnemMeSI => Is moved successfully

      End of Fixlog 18:20:57

      0
    3. galestus Messages postés 9 Statut Membre
       
      de plus comment a tu fait pour savoir quoi mettre sa m'interesse stp explique moi

      et encore merci
      0
  2. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Question d'habitude.

    Désinstalle McAfee Security Scan.

    puis :

    Malwarebytes (temps : environ 40min de scan):
    ==================================================
    Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
    Mets le à jour puis lance un examen.

    A la fin du scan, clic sur "Supprimer Selection" en bas à gauche.
    Redémarre l'ordinateur si besoin.
    Après redémarrage, relance Malwarebytes.
    Vas chercher le rapport dans l'onglet Historique.
    A gauche Journal des examens.
    Doube-clic sur l'examen dans la liste.
    Puis en bas Copier dans le presse papier
    Vas sur http://pjjoint.malekal.com et en bas, clic droit / coller pour coller le rapport du scan Malwarebytes.
    Clic sur envoyer.
    Dans un nouveau message ici en réponse, donne le lien pjjoint afin de pouvoir consulter le rapport.

    puis refais un scan FRST et donne les rapports via pjjoint.
    Histoire de s'assurer qu'il ne reste plus rien.
    0
    1. galestus Messages postés 9 Statut Membre
       
      ok je fais cela merci
      0
    2. galestus Messages postés 9 Statut Membre
       
      je ferai cela demain xD
      0
    5. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
       
      Le rapport FRST.txt est vide.
      0
  3. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Voici la correction à effectuer avec FRST.
    Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

    Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
    Copie/colle dedans ce qui suit :

    2015-06-22 18:22 - 2015-06-22 18:40 - 00000000 ____D C:\ProgramData\MailUpdate
    2015-06-22 18:22 - 2015-06-22 18:22 - 00000008 _____ C:\END
    2015-06-22 18:22 - 2015-06-22 18:22 - 00000000 ____D C:\Users\nicolas\AppData\Roaming\MailUpdate
    2015-06-22 18:22 - 2015-06-22 18:22 - 00000000 _____ C:\WINDOWS\prleth.sys
    2015-06-22 18:22 - 2015-06-22 18:22 - 00000000 _____ C:\WINDOWS\hgfs.sys
    2015-06-22 01:13 - 2015-06-22 20:53 - 00000000 ____D C:\Users\nicolas\AppData\Local\15592
    2015-06-23 17:10 - 2015-04-23 00:10 - 00000320 _____ C:\WINDOWS\Tasks\yupdater.job
    Task: C:\WINDOWS\Tasks\yupdater.job => C:\Users\nicolas\AppData\Roaming\yupdater\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
    C:\Users\nicolas\AppData\Roaming\yupdater
    Task: {E249634A-46D5-4095-891D-4E9CE76625B8} - System32\Tasks\yupdater => C:\Users\nicolas\AppData\Roaming\yupdater\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

    Une fois, le texte coller dans le bloc-note.
    Menu Fichier puis Enregistrer sous.
    A gauche, place toi sur le bureau.

    Dans le champs en bas, nom du fichier mets : fixlist.txt
    Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

    Relance FRST qui doit se trouver sur le bureau et clic sur le bouton Fix
    Selon comment un redémarrage est nécessaire (pas obligatoire).
    Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

    Redémarre l'ordinateur

    0
    1. galestus
       
      voila

      Fix result of Farbar Recovery Scan Tool (x64) Version:21-06-2015 01
      Ran by nicolas at 2015-06-23 18:17:28 Run:2
      Running from C:\Users\nicolas\Desktop
      Loaded Profiles: nicolas (Available Profiles: nicolas)
      Boot Mode: Normal
      ==============================================

      fixlist content:

      2015-06-22 18:22 - 2015-06-22 18:40 - 00000000 ____D C:\ProgramData\MailUpdate
      2015-06-22 18:22 - 2015-06-22 18:22 - 00000008 _____ C:\END
      2015-06-22 18:22 - 2015-06-22 18:22 - 00000000 ____D C:\Users\nicolas\AppData\Roaming\MailUpdate
      2015-06-22 18:22 - 2015-06-22 18:22 - 00000000 _____ C:\WINDOWS\prleth.sys
      2015-06-22 18:22 - 2015-06-22 18:22 - 00000000 _____ C:\WINDOWS\hgfs.sys
      2015-06-22 01:13 - 2015-06-22 20:53 - 00000000 ____D C:\Users\nicolas\AppData\Local\15592
      2015-06-23 17:10 - 2015-04-23 00:10 - 00000320 _____ C:\WINDOWS\Tasks\yupdater.job
      Task: C:\WINDOWS\Tasks\yupdater.job => C:\Users\nicolas\AppData\Roaming\yupdater\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
      C:\Users\nicolas\AppData\Roaming\yupdater
      Task: {E249634A-46D5-4095-891D-4E9CE76625B8} - System32\Tasks\yupdater => C:\Users\nicolas\AppData\Roaming\yupdater\UPDATE~1\UPDATE~1.EXE <==== ATTENTION


      C:\ProgramData\MailUpdate => moved successfully.
      C:\END => moved successfully.
      C:\Users\nicolas\AppData\Roaming\MailUpdate => moved successfully.
      C:\WINDOWS\prleth.sys => moved successfully.
      C:\WINDOWS\hgfs.sys => moved successfully.
      C:\Users\nicolas\AppData\Local\15592 => moved successfully.
      C:\WINDOWS\Tasks\yupdater.job => moved successfully.
      C:\WINDOWS\Tasks\yupdater.job not found.
      "C:\Users\nicolas\AppData\Roaming\yupdater" => File/Folder not found.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E249634A-46D5-4095-891D-4E9CE76625B8}" => key removed successfully
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E249634A-46D5-4095-891D-4E9CE76625B8}" => key removed successfully
      C:\Windows\System32\Tasks\yupdater => moved successfully.
      "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\yupdater" => key removed successfully

      End of Fixlog 18:17:32

      0
  4. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    ok, voici la suite :

    Malwarebytes (temps : environ 40min de scan):
    ==================================================
    Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
    Mets le à jour puis lance un examen.

    A la fin du scan, clic sur "Supprimer Selection" en bas à gauche.
    Redémarre l'ordinateur si besoin.
    Après redémarrage, relance Malwarebytes.
    Vas chercher le rapport dans l'onglet Historique.
    A gauche Journal des examens.
    Doube-clic sur l'examen dans la liste.
    Puis en bas Copier dans le presse papier
    Vas sur http://pjjoint.malekal.com et en bas, clic droit / coller pour coller le rapport du scan Malwarebytes.
    Clic sur envoyer.
    Dans un nouveau message ici en réponse, donne le lien pjjoint afin de pouvoir consulter le rapport.

    0
    1. galestus
       
      ok voila le lien:
      http://pjjoint.malekal.com/files.php?id=20150624_r12g106r14f8

      Merci beaucoup !!!
      0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Ca m'a l'air bon,

    que reste-t-il comme problème ?
    0
    1. galestus
       
      aucun c'est nickel merci
      0
  7. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    =)

    Voila, c'est terminé, tu peux supprimer les programmes utilisés.

    Quelques conseils :

    Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start=

    Pour ne plus te faire avoir.
    A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/
    (Surtout active les détections LPIs pour détecter les programmes parasites et publicitaires)

    Le reste de la sécurité : http://forum.malekal.com/comment-securiser-son-ordinateur.html

    0

Discussions similaires

adwares : plus-hd - publicités
guillaume11100 -
Malekal_morte- -

7 réponses
JoniCoupon, EnjoyCoupon et autres adwares trop envahissants
Tony314 -
Malekal_morte- -

6 réponses
Supprimer Adwares et publicités indésirables sur Mac OS
baissaoui -
baissaoui -

0 réponse
Desinstaller MaxDrivrUpdater et crossbrowser
Ggette -
lilidurhone -

9 réponses
Supprimer Systweak et Adware Bprotect
Lotus -
Lotus -

15 réponses