9093122159526332460b.exe c'est quoi???
MyTinks
Messages postés
29
Date d'inscription
Statut
Membre
Dernière intervention
-
MyTinks Messages postés 29 Date d'inscription Statut Membre Dernière intervention -
MyTinks Messages postés 29 Date d'inscription Statut Membre Dernière intervention -
Bonjour depuis quelque temps il y a 9093122159526332460b.exe qui veut s'ouvrire mais je ne sais pas quesque c'est. aider moi!!!
6 réponses
Salut,
probablement un malwares fais ceci
Suis le tutoriel FRST https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
Cela va générer trois rapports FRST :
Envoie comme expliqué, ces trois rapports sur le site pjjoint et donne les trois liens pjjoint de ces rapports afin qu'ils puissent être consultés.
--
probablement un malwares fais ceci
Suis le tutoriel FRST https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
Cela va générer trois rapports FRST :
- FRST.txt
- Shortcut.txt
- Additionnal.txt
Envoie comme expliqué, ces trois rapports sur le site pjjoint et donne les trois liens pjjoint de ces rapports afin qu'ils puissent être consultés.
--
Envoie C:\Users\robin\AppData\Roaming\abyssa2.exe
sur http://upload.malekal.com
Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix
Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :
HKU\S-1-5-21-3709466023-1338611908-758753688-1000\...\Winlogon: [Shell] %AppData%\plugin-container.exe,explorer.exe <==== ATTENTION
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BLITZKRIEG.lnk [2015-03-07]
ShortcutTarget: BLITZKRIEG.lnk -> C:\Users\robin\AppData\Roaming\abyssa2.exe ()
Startup: C:\Users\robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Action-1.24.3.0.zip.lnk [2015-05-05]
ShortcutTarget: Action-1.24.3.0.zip.lnk -> C:\ProgramData\{8a4dc257-6e6e-9ccb-8a4d-dc2576e6095d}\Action-1.24.3.0.zip.exe ()
Task: {6A741C82-7257-4785-9745-77FE9E7B04A0} - System32\Tasks\WorkWizard => c:\programdata\{5b101afa-adb0-82d3-5b10-01afaadb6bea}\9093122159526332460b.exe [2014-07-09] () <==== ATTENTION
Task: {5D585AF2-A081-4248-854A-EE5B4B1E6837} - System32\Tasks\AppExpo => c:\programdata\{227e8aee-0527-625a-227e-e8aee0522bb8}\710443661289307676b.exe <==== ATTENTION
Task: {A4133C86-1237-4C2B-8232-599823A6A872} - System32\Tasks\CacheCleaner => c:\programdata\{f125b6cc-f0fb-7c2c-f125-5b6ccf0fdb33}\6628713769649230775b.exe <==== ATTENTION
Task: {BFB8CCB7-BB38-43B7-ADD9-483C28150008} - System32\Tasks\PragmaMaker => c:\programdata\{b9220524-286a-3176-b922-205242861490}\6343754079040389280b.exe <==== ATTENTION
Task: C:\Windows\Tasks\AppExpo.job => c:\programdata\{227e8aee-0527-625a-227e-e8aee0522bb8}\710443661289307676b.exe <==== ATTENTION
Task: C:\Windows\Tasks\CacheCleaner.job => c:\programdata\{f125b6cc-f0fb-7c2c-f125-5b6ccf0fdb33}\6628713769649230775b.exe <==== ATTENTION
Task: C:\Windows\Tasks\PragmaMaker.job => c:\programdata\{b9220524-286a-3176-b922-205242861490}\6343754079040389280b.exe <==== ATTENTION
Task: C:\Windows\Tasks\RtlNetworkGenieVistaStart.job => C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe
Task: C:\Windows\Tasks\WorkWizard.job => c:\programdata\{5b101afa-adb0-82d3-5b10-01afaadb6bea}\9093122159526332460b.exe <==== ATTENTION
C:\ProgramData\{8a4dc257-6e6e-9ccb-8a4d-dc2576e6095d}
2015-06-26 00:12 - 2015-06-28 18:12 - 00000000 ____D C:\ProgramData\{f125b6cc-f0fb-7c2c-f125-5b6ccf0fdb33}
2014-04-26 18:29 - 2014-04-26 18:29 - 0000036 _____ () C:\Users\robin\AppData\Roaming\DOK52P4Q3J.dat
ProxyServer: [S-1-5-21-3709466023-1338611908-758753688-1000] => socks=207.182.145.231:1080
Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.
Relance FRST et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.
Redémarre l'ordinateur
sur http://upload.malekal.com
Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix
Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :
HKU\S-1-5-21-3709466023-1338611908-758753688-1000\...\Winlogon: [Shell] %AppData%\plugin-container.exe,explorer.exe <==== ATTENTION
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BLITZKRIEG.lnk [2015-03-07]
ShortcutTarget: BLITZKRIEG.lnk -> C:\Users\robin\AppData\Roaming\abyssa2.exe ()
Startup: C:\Users\robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Action-1.24.3.0.zip.lnk [2015-05-05]
ShortcutTarget: Action-1.24.3.0.zip.lnk -> C:\ProgramData\{8a4dc257-6e6e-9ccb-8a4d-dc2576e6095d}\Action-1.24.3.0.zip.exe ()
Task: {6A741C82-7257-4785-9745-77FE9E7B04A0} - System32\Tasks\WorkWizard => c:\programdata\{5b101afa-adb0-82d3-5b10-01afaadb6bea}\9093122159526332460b.exe [2014-07-09] () <==== ATTENTION
Task: {5D585AF2-A081-4248-854A-EE5B4B1E6837} - System32\Tasks\AppExpo => c:\programdata\{227e8aee-0527-625a-227e-e8aee0522bb8}\710443661289307676b.exe <==== ATTENTION
Task: {A4133C86-1237-4C2B-8232-599823A6A872} - System32\Tasks\CacheCleaner => c:\programdata\{f125b6cc-f0fb-7c2c-f125-5b6ccf0fdb33}\6628713769649230775b.exe <==== ATTENTION
Task: {BFB8CCB7-BB38-43B7-ADD9-483C28150008} - System32\Tasks\PragmaMaker => c:\programdata\{b9220524-286a-3176-b922-205242861490}\6343754079040389280b.exe <==== ATTENTION
Task: C:\Windows\Tasks\AppExpo.job => c:\programdata\{227e8aee-0527-625a-227e-e8aee0522bb8}\710443661289307676b.exe <==== ATTENTION
Task: C:\Windows\Tasks\CacheCleaner.job => c:\programdata\{f125b6cc-f0fb-7c2c-f125-5b6ccf0fdb33}\6628713769649230775b.exe <==== ATTENTION
Task: C:\Windows\Tasks\PragmaMaker.job => c:\programdata\{b9220524-286a-3176-b922-205242861490}\6343754079040389280b.exe <==== ATTENTION
Task: C:\Windows\Tasks\RtlNetworkGenieVistaStart.job => C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe
Task: C:\Windows\Tasks\WorkWizard.job => c:\programdata\{5b101afa-adb0-82d3-5b10-01afaadb6bea}\9093122159526332460b.exe <==== ATTENTION
C:\ProgramData\{8a4dc257-6e6e-9ccb-8a4d-dc2576e6095d}
2015-06-26 00:12 - 2015-06-28 18:12 - 00000000 ____D C:\ProgramData\{f125b6cc-f0fb-7c2c-f125-5b6ccf0fdb33}
2014-04-26 18:29 - 2014-04-26 18:29 - 0000036 _____ () C:\Users\robin\AppData\Roaming\DOK52P4Q3J.dat
ProxyServer: [S-1-5-21-3709466023-1338611908-758753688-1000] => socks=207.182.145.231:1080
Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.
Relance FRST et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.
Redémarre l'ordinateur
Fix result of Farbar Recovery Scan Tool (x64) Version:05-07-2015
Ran by robin at 2015-07-09 16:03:47 Run:1
Running from C:\Users\robin\Desktop
Loaded Profiles: robin (Available Profiles: robin & Invité)
Boot Mode: Normal
==============================================
fixlist content:
HKU\S-1-5-21-3709466023-1338611908-758753688-1000\...\Winlogon: [Shell] %AppData%\plugin-container.exe,explorer.exe <==== ATTENTION
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BLITZKRIEG.lnk [2015-03-07]
ShortcutTarget: BLITZKRIEG.lnk -> C:\Users\robin\AppData\Roaming\abyssa2.exe ()
Startup: C:\Users\robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Action-1.24.3.0.zip.lnk [2015-05-05]
ShortcutTarget: Action-1.24.3.0.zip.lnk -> C:\ProgramData\{8a4dc257-6e6e-9ccb-8a4d-dc2576e6095d}\Action-1.24.3.0.zip.exe ()
Task: {6A741C82-7257-4785-9745-77FE9E7B04A0} - System32\Tasks\WorkWizard => c:\programdata\{5b101afa-adb0-82d3-5b10-01afaadb6bea}\9093122159526332460b.exe [2014-07-09] () <==== ATTENTION
Task: {5D585AF2-A081-4248-854A-EE5B4B1E6837} - System32\Tasks\AppExpo => c:\programdata\{227e8aee-0527-625a-227e-e8aee0522bb8}\710443661289307676b.exe <==== ATTENTION
Task: {A4133C86-1237-4C2B-8232-599823A6A872} - System32\Tasks\CacheCleaner => c:\programdata\{f125b6cc-f0fb-7c2c-f125-5b6ccf0fdb33}\6628713769649230775b.exe <==== ATTENTION
Task: {BFB8CCB7-BB38-43B7-ADD9-483C28150008} - System32\Tasks\PragmaMaker => c:\programdata\{b9220524-286a-3176-b922-205242861490}\6343754079040389280b.exe <==== ATTENTION
Task: C:\Windows\Tasks\AppExpo.job => c:\programdata\{227e8aee-0527-625a-227e-e8aee0522bb8}\710443661289307676b.exe <==== ATTENTION
Task: C:\Windows\Tasks\CacheCleaner.job => c:\programdata\{f125b6cc-f0fb-7c2c-f125-5b6ccf0fdb33}\6628713769649230775b.exe <==== ATTENTION
Task: C:\Windows\Tasks\PragmaMaker.job => c:\programdata\{b9220524-286a-3176-b922-205242861490}\6343754079040389280b.exe <==== ATTENTION
Task: C:\Windows\Tasks\RtlNetworkGenieVistaStart.job => C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe
Task: C:\Windows\Tasks\WorkWizard.job => c:\programdata\{5b101afa-adb0-82d3-5b10-01afaadb6bea}\9093122159526332460b.exe <==== ATTENTION
C:\ProgramData\{8a4dc257-6e6e-9ccb-8a4d-dc2576e6095d}
2015-06-26 00:12 - 2015-06-28 18:12 - 00000000 ____D C:\ProgramData\{f125b6cc-f0fb-7c2c-f125-5b6ccf0fdb33}
2014-04-26 18:29 - 2014-04-26 18:29 - 0000036 _____ () C:\Users\robin\AppData\Roaming\DOK52P4Q3J.dat
ProxyServer: [S-1-5-21-3709466023-1338611908-758753688-1000] => socks=207.182.145.231:1080
HKU\S-1-5-21-3709466023-1338611908-758753688-1000\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => value removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BLITZKRIEG.lnk => moved successfully.
C:\Users\robin\AppData\Roaming\abyssa2.exe => moved successfully.
C:\Users\robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Action-1.24.3.0.zip.lnk => moved successfully.
C:\ProgramData\{8a4dc257-6e6e-9ccb-8a4d-dc2576e6095d}\Action-1.24.3.0.zip.exe => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6A741C82-7257-4785-9745-77FE9E7B04A0}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6A741C82-7257-4785-9745-77FE9E7B04A0}" => key removed successfully
C:\Windows\System32\Tasks\WorkWizard => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WorkWizard" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5D585AF2-A081-4248-854A-EE5B4B1E6837}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5D585AF2-A081-4248-854A-EE5B4B1E6837}" => key removed successfully
C:\Windows\System32\Tasks\AppExpo => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AppExpo" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A4133C86-1237-4C2B-8232-599823A6A872}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A4133C86-1237-4C2B-8232-599823A6A872}" => key removed successfully
C:\Windows\System32\Tasks\CacheCleaner => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CacheCleaner" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BFB8CCB7-BB38-43B7-ADD9-483C28150008}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BFB8CCB7-BB38-43B7-ADD9-483C28150008}" => key removed successfully
C:\Windows\System32\Tasks\PragmaMaker => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PragmaMaker" => key removed successfully
C:\Windows\Tasks\AppExpo.job => moved successfully.
C:\Windows\Tasks\CacheCleaner.job => moved successfully.
C:\Windows\Tasks\PragmaMaker.job => moved successfully.
C:\Windows\Tasks\RtlNetworkGenieVistaStart.job => moved successfully.
C:\Windows\Tasks\WorkWizard.job => moved successfully.
"C:\ProgramData\{8a4dc257-6e6e-9ccb-8a4d-dc2576e6095d}" folder move:
Could not move "C:\ProgramData\{8a4dc257-6e6e-9ccb-8a4d-dc2576e6095d}" folder => Scheduled to move on reboot.
C:\ProgramData\{f125b6cc-f0fb-7c2c-f125-5b6ccf0fdb33} => moved successfully.
C:\Users\robin\AppData\Roaming\DOK52P4Q3J.dat => moved successfully.
HKU\S-1-5-21-3709466023-1338611908-758753688-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value removed successfully
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-07-09 16:05:58)<=
C:\ProgramData\{8a4dc257-6e6e-9ccb-8a4d-dc2576e6095d} => moved successfully
Ran by robin at 2015-07-09 16:03:47 Run:1
Running from C:\Users\robin\Desktop
Loaded Profiles: robin (Available Profiles: robin & Invité)
Boot Mode: Normal
==============================================
fixlist content:
HKU\S-1-5-21-3709466023-1338611908-758753688-1000\...\Winlogon: [Shell] %AppData%\plugin-container.exe,explorer.exe <==== ATTENTION
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BLITZKRIEG.lnk [2015-03-07]
ShortcutTarget: BLITZKRIEG.lnk -> C:\Users\robin\AppData\Roaming\abyssa2.exe ()
Startup: C:\Users\robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Action-1.24.3.0.zip.lnk [2015-05-05]
ShortcutTarget: Action-1.24.3.0.zip.lnk -> C:\ProgramData\{8a4dc257-6e6e-9ccb-8a4d-dc2576e6095d}\Action-1.24.3.0.zip.exe ()
Task: {6A741C82-7257-4785-9745-77FE9E7B04A0} - System32\Tasks\WorkWizard => c:\programdata\{5b101afa-adb0-82d3-5b10-01afaadb6bea}\9093122159526332460b.exe [2014-07-09] () <==== ATTENTION
Task: {5D585AF2-A081-4248-854A-EE5B4B1E6837} - System32\Tasks\AppExpo => c:\programdata\{227e8aee-0527-625a-227e-e8aee0522bb8}\710443661289307676b.exe <==== ATTENTION
Task: {A4133C86-1237-4C2B-8232-599823A6A872} - System32\Tasks\CacheCleaner => c:\programdata\{f125b6cc-f0fb-7c2c-f125-5b6ccf0fdb33}\6628713769649230775b.exe <==== ATTENTION
Task: {BFB8CCB7-BB38-43B7-ADD9-483C28150008} - System32\Tasks\PragmaMaker => c:\programdata\{b9220524-286a-3176-b922-205242861490}\6343754079040389280b.exe <==== ATTENTION
Task: C:\Windows\Tasks\AppExpo.job => c:\programdata\{227e8aee-0527-625a-227e-e8aee0522bb8}\710443661289307676b.exe <==== ATTENTION
Task: C:\Windows\Tasks\CacheCleaner.job => c:\programdata\{f125b6cc-f0fb-7c2c-f125-5b6ccf0fdb33}\6628713769649230775b.exe <==== ATTENTION
Task: C:\Windows\Tasks\PragmaMaker.job => c:\programdata\{b9220524-286a-3176-b922-205242861490}\6343754079040389280b.exe <==== ATTENTION
Task: C:\Windows\Tasks\RtlNetworkGenieVistaStart.job => C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe
Task: C:\Windows\Tasks\WorkWizard.job => c:\programdata\{5b101afa-adb0-82d3-5b10-01afaadb6bea}\9093122159526332460b.exe <==== ATTENTION
C:\ProgramData\{8a4dc257-6e6e-9ccb-8a4d-dc2576e6095d}
2015-06-26 00:12 - 2015-06-28 18:12 - 00000000 ____D C:\ProgramData\{f125b6cc-f0fb-7c2c-f125-5b6ccf0fdb33}
2014-04-26 18:29 - 2014-04-26 18:29 - 0000036 _____ () C:\Users\robin\AppData\Roaming\DOK52P4Q3J.dat
ProxyServer: [S-1-5-21-3709466023-1338611908-758753688-1000] => socks=207.182.145.231:1080
HKU\S-1-5-21-3709466023-1338611908-758753688-1000\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => value removed successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BLITZKRIEG.lnk => moved successfully.
C:\Users\robin\AppData\Roaming\abyssa2.exe => moved successfully.
C:\Users\robin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Action-1.24.3.0.zip.lnk => moved successfully.
C:\ProgramData\{8a4dc257-6e6e-9ccb-8a4d-dc2576e6095d}\Action-1.24.3.0.zip.exe => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6A741C82-7257-4785-9745-77FE9E7B04A0}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6A741C82-7257-4785-9745-77FE9E7B04A0}" => key removed successfully
C:\Windows\System32\Tasks\WorkWizard => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WorkWizard" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5D585AF2-A081-4248-854A-EE5B4B1E6837}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5D585AF2-A081-4248-854A-EE5B4B1E6837}" => key removed successfully
C:\Windows\System32\Tasks\AppExpo => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AppExpo" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A4133C86-1237-4C2B-8232-599823A6A872}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A4133C86-1237-4C2B-8232-599823A6A872}" => key removed successfully
C:\Windows\System32\Tasks\CacheCleaner => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CacheCleaner" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BFB8CCB7-BB38-43B7-ADD9-483C28150008}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BFB8CCB7-BB38-43B7-ADD9-483C28150008}" => key removed successfully
C:\Windows\System32\Tasks\PragmaMaker => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PragmaMaker" => key removed successfully
C:\Windows\Tasks\AppExpo.job => moved successfully.
C:\Windows\Tasks\CacheCleaner.job => moved successfully.
C:\Windows\Tasks\PragmaMaker.job => moved successfully.
C:\Windows\Tasks\RtlNetworkGenieVistaStart.job => moved successfully.
C:\Windows\Tasks\WorkWizard.job => moved successfully.
"C:\ProgramData\{8a4dc257-6e6e-9ccb-8a4d-dc2576e6095d}" folder move:
Could not move "C:\ProgramData\{8a4dc257-6e6e-9ccb-8a4d-dc2576e6095d}" folder => Scheduled to move on reboot.
C:\ProgramData\{f125b6cc-f0fb-7c2c-f125-5b6ccf0fdb33} => moved successfully.
C:\Users\robin\AppData\Roaming\DOK52P4Q3J.dat => moved successfully.
HKU\S-1-5-21-3709466023-1338611908-758753688-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value removed successfully
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-07-09 16:05:58)<=
C:\ProgramData\{8a4dc257-6e6e-9ccb-8a4d-dc2576e6095d} => moved successfully
End of Fixlog 16:05:59
voici la suite :
Malwarebytes (temps : environ 40min de scan):
==================================================
Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Mets le à jour puis lance un examen.
A la fin du scan, clic sur "Supprimer Selection" en bas à gauche.
Redémarre l'ordinateur si besoin.
Après redémarrage, relance Malwarebytes.
Vas chercher le rapport dans l'onglet Historique.
A gauche Journal des examens.
Doube-clic sur l'examen dans la liste.
Puis en bas Copier dans le presse papier
Vas sur http://pjjoint.malekal.com et en bas, clic droit / coller pour coller le rapport du scan Malwarebytes.
Clic sur envoyer.
Dans un nouveau message ici en réponse, donne le lien pjjoint afin de pouvoir consulter le rapport.
Malwarebytes (temps : environ 40min de scan):
==================================================
Télécharge et installe Malwarebyte : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Mets le à jour puis lance un examen.
A la fin du scan, clic sur "Supprimer Selection" en bas à gauche.
Redémarre l'ordinateur si besoin.
Après redémarrage, relance Malwarebytes.
Vas chercher le rapport dans l'onglet Historique.
A gauche Journal des examens.
Doube-clic sur l'examen dans la liste.
Puis en bas Copier dans le presse papier
Vas sur http://pjjoint.malekal.com et en bas, clic droit / coller pour coller le rapport du scan Malwarebytes.
Clic sur envoyer.
Dans un nouveau message ici en réponse, donne le lien pjjoint afin de pouvoir consulter le rapport.
J'ai un doute sur tes adresses DNS.
Remets/vérifie que tous les serveurs de noms (DNS) sont automatiques : https://forum.malekal.com/viewtopic.php?t=48312&start=
Remets/vérifie que tous les serveurs de noms (DNS) sont automatiques : https://forum.malekal.com/viewtopic.php?t=48312&start=
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Supprime ce dossier C:\ProgramData\{227e8aee-0527-625a-227e-e8aee0522bb8}
reste quel problème ?
reste quel problème ?
Surement un problème matériel.
Passe un coup de TDSSKiller : https://forum.malekal.com/viewtopic.php?t=28637&start=
Fais skip sur les détections.
Clic en haut à droite sur reports.
Vas sur http://pjjoint.malekal.com et copie/colle le contenu du rapport TDSSKiller en bas, fais envoyer.
Donne le lien du rapport pjjoint ici dans un nouveau message.
~~
fais passer un rapport WhoCrashed : https://forum.malekal.com/viewtopic.php?t=47660&start=
Passe un coup de TDSSKiller : https://forum.malekal.com/viewtopic.php?t=28637&start=
Fais skip sur les détections.
Clic en haut à droite sur reports.
Vas sur http://pjjoint.malekal.com et copie/colle le contenu du rapport TDSSKiller en bas, fais envoyer.
Donne le lien du rapport pjjoint ici dans un nouveau message.
~~
fais passer un rapport WhoCrashed : https://forum.malekal.com/viewtopic.php?t=47660&start=
https://pjjoint.malekal.com/files.php?id=20150709_x12c10y10v14i5 Addition mdp:1234
https://pjjoint.malekal.com/files.php?id=20150709_r8n10w8p7i5 Shortcut mdp:1234