PC infesté Fermé

Question

Bonjour, 

J'essaie de désinfecter l'ordi à mon fils.  J'ai fait ZHPDiag.  Ensuite, je fait le ZHPFix.  À cette étape, je fait un copier coller du rapport dans importer et je rajoute en début de texte: Script ZHPFix comme indiqué dans le tutoriel.  Lorsque je fait "go", des programmes veulent se désinstaller.  Je fais cancel à ces désinstallations et le processus s'arrête au milieu.

J'ai fait également malwarebyte et adwcleaner... l'ordi est toujours infecté.

Voici le dernier rapport de ZHPDiag : 
https://pjjoint.malekal.com/files.php?id=20150706_q11t7n10v8x15

Merci de m,aider

Configuration: Windows 7 / Firefox 39.0Fic

fabul · Answer

Salut, Importe ce script et GO! Mais je ne suis pas sur qu'il y a une erreur a cause du point d'interrogation: O43 - CFD: 2012/11/19 16:06:54 - [0] SHD -- C:\ProgramData\Mod?les Script ZHPFix SysRestore O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{04EA90ED-DA21-4D89-B755-D645CD6AB9A0} [3316] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{0EC8CD8C-CA5B-43DF-9837-164075087E22} [3204] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{12EF0F0A-99FA-4844-B5B8-AD81D4F98CA0} [2992] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{1318EF42-CADC-4475-9052-5CE07F795DAB} [3248] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{156C3E33-F2F5-4C41-86F4-93F04E66E393} [3370] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{1875593A-039B-45D4-B12E-46255263A6E6} [3358] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{3616525C-CC3B-4D03-B0BA-8608FBCEC8B6} [3232] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{44035D62-C7B3-4B7A-9B55-1C19FD2EEF49} [3482] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{5473C19C-5072-493E-B109-8A29FD6C7318} [3040] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{6C692A8A-D8C4-4D91-BABB-6DA699995C5A} [3236] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{81A1BCCE-C322-4314-80FF-144F5CBC415C} [3040] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{95D2C3F7-0715-48C6-AAAC-FA31CC50EFFE} [3114] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{B079B7F7-A50B-4989-8C1A-261C3DC5D3DA} [3308] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{D6020727-1B16-4492-BAB5-679C8CCD936C} [3184] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{E662D6A1-8DDC-4F30-9DEB-9911BDB271C5} [3022] O43 - CFD: 2014/07/15 17:55:55 - [] D -- C:\Users\Xavier\AppData\Roaming\.GrinderCache O43 - CFD: 2014/12/30 20:27:03 - [] D -- C:\Users\Xavier\AppData\Roaming\.mono O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- iexplore.exe O43 - CFD: 2015/04/05 00:06:05 - [] D -- C:\Users\Xavier\AppData\Local\Pro_PC_Cleaner =>USP.PCCleaner O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Users\Xavier\AppData\Local\Rocket\Application\rocket.exe (.not file.) =>Adware.Sambreel O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Users\Xavier\AppData\Local\Rocket\Application\rocket.exe (.not file.) =>Adware.Sambreel O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Users\Xavier\AppData\Local\Rocket\Application\rocket.exe (.not file.) =>Adware.Sambreel O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.ace race.asul", "1422586166733"); =>PUP.AceRace O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.ace race.aul", "1422586385821"); =>PUP.AceRace O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.ace race.irl", true); =>PUP.AceRace O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.ace race.is", "isgiwhCA"); =>PUP.AceRace O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.ace race.ug", "9FB4C74D-3707-45B5-A4FE-BB59921A8D26"); =>PUP.AceRace O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.internaldb.monetization_plugin_bundledUrls.expi[...] =>PUP.Monetization O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.internaldb.monetization_plugin_bundledWithHash.[...] =>PUP.Monetization O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.internaldb.monetization_plugin_notBundledArr_.e[...] =>PUP.Monetization O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.internaldb.monetization_plugin_notBundledArr_.v[...] =>PUP.Monetization O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.internaldb.monetization_plugin_regBundledWithSo[...] =>PUP.Monetization O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.ad4db60df25f14dae9dd18185c395f9e794c9ab86be3ebcom72893.72893.name", "CinemaPlus-3.2c"); =>Adware.CrossRider O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.boost@boost.net.install-event-fired", true); =>PUP.Boost O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.srchvstrn.AL", 4); =>PUP.Vosteran O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.srchvstrn.aflt", "vst_tele_14_48_ff"); =>PUP.Vosteran O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.srchvstrn.appId", "{4CB3598A-82E8-4D1F-983F-061238AE696E}"); =>PUP.Vosteran O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.srchvstrn.cd", "2XzuyEtN2Y1L1Qzuzy0C0DyCyEtAyCtDyByDtD0D0F0CyCtAtN0D0Tzu0StCtDyCtAtN1L2XzutAtFyCtFyCtFtDtN1L[...] =>PUP.Vosteran O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.srchvstrn.cr", "787793609"); =>PUP.Vosteran O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.srchvstrn.dfltLng", ""); =>PUP.Vosteran O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.srchvstrn.dfltSrch", true); =>PUP.Vosteran O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.srchvstrn.dnsErr", true); =>PUP.Vosteran O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.srchvstrn.excTlbr", false); =>PUP.Vosteran O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.srchvstrn.hmpg", true); =>PUP.Vosteran O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.srchvstrn.id", "9CD64360750DFC63"); =>PUP.Vosteran O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.srchvstrn.instlDay", "16404"); =>PUP.Vosteran O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.srchvstrn.instlRef", "142905_s"); =>PUP.Vosteran O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.srchvstrn.prdct", "srchvstrn"); =>PUP.Vosteran O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.srchvstrn.tlbrId", ""); =>PUP.Vosteran O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.srchvstrn.vrsn", ""); =>PUP.Vosteran O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.srchvstrn.vrsni", ""); =>PUP.Vosteran O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.srchvstrn_i.newTab", true); =>PUP.Vosteran O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.srchvstrn_i.smplGrp", "none"); =>PUP.Vosteran O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("extensions.srchvstrn_i.vrsnTs", "1:58:17"); =>PUP.Vosteran O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("toparcadehits.settings.addon_data", "https://www.gdprcountryrestriction.com[...] =>PUP.TopArcadeHits O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("toparcadehits.settings.allowed_domains", "toparcadehits.comwww.toparcadehits.com"); =>PUP.TopArcadeHits O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("toparcadehits.settings.last_update", "1375965807813"); =>PUP.TopArcadeHits O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("toparcadehits.settings.storage_disabled", "0"); =>PUP.TopArcadeHits O69 - SBI: prefs.js [Xavier - zwdrvms6.default] user_pref("toparcadehits.settings.update_interval", "3600"); =>PUP.TopArcadeHits C:\Users\Xavier\AppData\Local\Pro_PC_Cleaner =>USP.PCCleaner O43 - CFD: 2012/11/19 16:06:54 - [0] SHD -- C:\ProgramData\Menu D?marrer O43 - CFD: 2012/11/19 16:06:54 - [0] SHD -- C:\ProgramData\Mod?les O43 - CFD: 2012/12/14 12:07:26 - [] D -- C:\Users\Xavier\AppData\Local\Apps R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 ProxyFix ShortcutFix EmptyPrefetch EmptyCLSID EmptyFlash EmptyTemp