Tremendous Sale/ Coupon

Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :

BHO: NiceOffferrS -> {206484D8-7F7B-4783-9B35-C1D3FF2E6EE7} -> C:\Program Files (x86)\NiceOffferrS\kwVf3M6taJl0JI.x64.dll No File
BHO-x32: NiceOffferrS -> {206484D8-7F7B-4783-9B35-C1D3FF2E6EE7} -> C:\Program Files (x86)\NiceOffferrS\kwVf3M6taJl0JI.dll No File
2015-06-18 08:07 - 2015-07-06 14:25 - 00000362 _____ C:\Windows\Tasks\TourMaster.job
2015-06-18 08:07 - 2015-06-18 08:07 - 00003282 _____ C:\Windows\System32\Tasks\TourMaster
2015-06-16 20:22 - 2015-06-16 20:22 - 00000000 ____D C:\Program Files (x86)\CutterMaker
2015-06-16 20:21 - 2015-06-16 20:21 - 00000000 ____D C:\Program Files (x86)\Omnibox
2015-06-16 20:20 - 2015-07-07 14:20 - 00000362 _____ C:\Windows\Tasks\SmartSpace.job
2015-06-16 20:20 - 2015-06-16 20:20 - 00003282 _____ C:\Windows\System32\Tasks\SmartSpace
Task: C:\Windows\Tasks\Bidaily Synchronize Task[pr].job => c:\programdata\{ad9338dd-912c-c668-ad93-338dd912e376}\download.exe <==== ATTENTION
Task: C:\Windows\Tasks\SmartSpace.job => c:\programdata\{c7eddec6-089f-8a91-c7ed-ddec60897b18}\4572970896549120991b.exe <==== ATTENTION
Task: C:\Windows\Tasks\TourMaster.job => c:\programdata\{a60efffe-d700-edc7-a60e-efffed70fffb}\4311045748184878290b.exe <==== ATTENTION
Task: {27F23A88-E543-48A2-87BA-D48023FEB277} - System32\Tasks\SmartSpace => c:\programdata\{c7eddec6-089f-8a91-c7ed-ddec60897b18}\4572970896549120991b.exe <==== ATTENTION
Task: {3DA3FEFC-2895-46F1-89F6-5980014F4084} - System32\Tasks\Bidaily Synchronize Task[pr] => c:\programdata\{ad9338dd-912c-c668-ad93-338dd912e376}\download.exe <==== ATTENTION
Task: {A0C75314-9C2B-4C55-8F6B-BF88AD9347A3} - System32\Tasks\TourMaster => c:\programdata\{a60efffe-d700-edc7-a60e-efffed70fffb}\4311045748184878290b.exe <==== ATTENTION


Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

Relance FRST et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

Redémarre l'ordinateur


puis réinitialise tes navigateurs:
==================================
Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :

• Internet Explorer et modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start=
• Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start=
• Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start=

Fix result of Farbar Recovery Scan Tool (x64) Version:05-07-2015
Ran by ALAFUENTE at 2015-07-07 15:33:12 Run:1
Running from C:\Users\ALAFUENTE\Desktop
Loaded Profiles: ALAFUENTE (Available Profiles: SBERARD & ALAFUENTE & Daytona & Administrateur & DefaultAppPool)
Boot Mode: Normal
==============================================

fixlist content:

BHO: NiceOffferrS -> {206484D8-7F7B-4783-9B35-C1D3FF2E6EE7} -> C:\Program Files (x86)\NiceOffferrS\kwVf3M6taJl0JI.x64.dll No File
BHO-x32: NiceOffferrS -> {206484D8-7F7B-4783-9B35-C1D3FF2E6EE7} -> C:\Program Files (x86)\NiceOffferrS\kwVf3M6taJl0JI.dll No File
2015-06-18 08:07 - 2015-07-06 14:25 - 00000362 _____ C:\Windows\Tasks\TourMaster.job
2015-06-18 08:07 - 2015-06-18 08:07 - 00003282 _____ C:\Windows\System32\Tasks\TourMaster
2015-06-16 20:22 - 2015-06-16 20:22 - 00000000 ____D C:\Program Files (x86)\CutterMaker
2015-06-16 20:21 - 2015-06-16 20:21 - 00000000 ____D C:\Program Files (x86)\Omnibox
2015-06-16 20:20 - 2015-07-07 14:20 - 00000362 _____ C:\Windows\Tasks\SmartSpace.job
2015-06-16 20:20 - 2015-06-16 20:20 - 00003282 _____ C:\Windows\System32\Tasks\SmartSpace
Task: C:\Windows\Tasks\Bidaily Synchronize Task[pr].job => c:\programdata\{ad9338dd-912c-c668-ad93-338dd912e376}\download.exe <==== ATTENTION
Task: C:\Windows\Tasks\SmartSpace.job => c:\programdata\{c7eddec6-089f-8a91-c7ed-ddec60897b18}\4572970896549120991b.exe <==== ATTENTION
Task: C:\Windows\Tasks\TourMaster.job => c:\programdata\{a60efffe-d700-edc7-a60e-efffed70fffb}\4311045748184878290b.exe <==== ATTENTION
Task: {27F23A88-E543-48A2-87BA-D48023FEB277} - System32\Tasks\SmartSpace => c:\programdata\{c7eddec6-089f-8a91-c7ed-ddec60897b18}\4572970896549120991b.exe <==== ATTENTION
Task: {3DA3FEFC-2895-46F1-89F6-5980014F4084} - System32\Tasks\Bidaily Synchronize Task[pr] => c:\programdata\{ad9338dd-912c-c668-ad93-338dd912e376}\download.exe <==== ATTENTION
Task: {A0C75314-9C2B-4C55-8F6B-BF88AD9347A3} - System32\Tasks\TourMaster => c:\programdata\{a60efffe-d700-edc7-a60e-efffed70fffb}\4311045748184878290b.exe <==== ATTENTION

"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{206484D8-7F7B-4783-9B35-C1D3FF2E6EE7}" => key removed successfully
"HKCR\CLSID\{206484D8-7F7B-4783-9B35-C1D3FF2E6EE7}" => key removed successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{206484D8-7F7B-4783-9B35-C1D3FF2E6EE7}" => key removed successfully
"HKCR\Wow6432Node\CLSID\{206484D8-7F7B-4783-9B35-C1D3FF2E6EE7}" => key removed successfully
C:\Windows\Tasks\TourMaster.job => moved successfully.
C:\Windows\System32\Tasks\TourMaster => moved successfully.
C:\Program Files (x86)\CutterMaker => moved successfully.
C:\Program Files (x86)\Omnibox => moved successfully.
C:\Windows\Tasks\SmartSpace.job => moved successfully.
C:\Windows\System32\Tasks\SmartSpace => moved successfully.
C:\Windows\Tasks\Bidaily Synchronize Task[pr].job => moved successfully.
C:\Windows\Tasks\SmartSpace.job not found.
C:\Windows\Tasks\TourMaster.job not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{27F23A88-E543-48A2-87BA-D48023FEB277}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{27F23A88-E543-48A2-87BA-D48023FEB277}" => key removed successfully
C:\Windows\System32\Tasks\SmartSpace not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SmartSpace" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3DA3FEFC-2895-46F1-89F6-5980014F4084}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3DA3FEFC-2895-46F1-89F6-5980014F4084}" => key removed successfully
C:\Windows\System32\Tasks\Bidaily Synchronize Task[pr] => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Bidaily Synchronize Task[pr]" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A0C75314-9C2B-4C55-8F6B-BF88AD9347A3}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A0C75314-9C2B-4C55-8F6B-BF88AD9347A3}" => key removed successfully
C:\Windows\System32\Tasks\TourMaster not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\TourMaster" => key removed successfully

End of Fixlog 15:33:14

Merci mille fois! Ca a marché! :)

Bonne journée,


Laquicheeninformatique

Super, merci!
Je vais tout lire! :) :)

Bonne journée,

Signée Laquicheeninformatique

Refais un scan FRST et donne les rapports.