WinServices86

Salut,

Tu as installé des adwares et programmes parasites sur ton PC qui ouvrent des publicités et ralentissent l'ordinateur et les navigateurs WEB.
Voici la procédure à suivre pour les supprimer :

Commence par ceci :

Fais un nettoyage ZHPCleaner : https://forum.malekal.com/viewtopic.php?t=48954&start=

puis :

Suis le tutoriel FRST.
(et bien prendre le temps de lire afin d'appliquer correctement - tout y est expliqué).
Télécharge et lance le scan FRST, cela va générer trois rapports FRST :

• FRST.txt
• Shortcut.txt
• Additionnal.txt

Envoie, comme expliqué, ces trois rapports sur le site http://pjjoint.malekal.com et en retour donne les trois liens pjjoint qui mènent à ses rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.

Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left

Les liens pour consultation :

http://pjjoint.malekal.com/files.php?id=20150808_f11c10d10p11k10

http://pjjoint.malekal.com/files.php?id=20150808_q11p14v7p11e8

http://pjjoint.malekal.com/files.php?id=20150808_m9r11n5f14h10

Désinstalle Spyhunter,

Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit :

CHR Extension: (winservice86) - C:\Users\jean yves\AppData\Local\Google\Chrome\User Data\Default\Extensions\onhcengeacabehdkdhbdcigfolmmakof [2015-04-27]
CHR HKLM-x32\...\Chrome\Extension: [gfkbfjcbkhnmiignagpkiijohkcdkffb] - https://clients2.google.com/service/update2/crx
2015-07-29 11:20 - 2015-07-29 11:20 - 00003290 _____ C:\WINDOWS\System32\Tasks\3LD06DUzcjIZG4R
2015-07-29 11:20 - 2015-07-29 11:20 - 00003248 _____ C:\WINDOWS\System32\Tasks\LsaERM4LRn8BLoN
2013-12-27 12:48 - 2013-12-27 12:48 - 0000001 ____H () C:\ProgramData\T23J7
2013-12-27 12:44 - 2014-01-13 14:58 - 0000128 ____H () C:\ProgramData\V93GE
Task: {4168476B-6E11-469A-9016-4CCEDFCAF277} - System32\Tasks\3LD06DUzcjIZG4R => C:\Users\jean yves\AppData\Roaming\uJINghj\m3N2mAl.exe
Task: {519DE456-C222-4E98-B6A6-D8DDAF689519} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe [2015-05-07] (Enigma Software Group USA, LLC.)
Task: {58E7E753-C8E4-47E3-A83E-A9FC0AAE3070} - System32\Tasks\LsaERM4LRn8BLoN => C:\Users\jean yves\AppData\Roaming\5sD0Bb4\aSEVMQ2.exe
R3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [15920 2015-05-07] (Enigma Software Group USA, LLC.)
R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1026432 2015-05-07] (Enigma Software Group USA, LLC.)
C:\Users\jean yves\AppData\Roaming\ZHP\Quarantine\
Task: {830EED2B-1F79-4364-87A5-390901D48782} - System32\Tasks\ehnPF2YQHcyFdle => C:\Users\jean yves\AppData\Roaming\iwf4D46\vqoLxhx.exe

Relance FRST et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

Redémarre l'ordinateur

puis réinitialise tes navigateurs:
==================================
Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :

• Internet Explorer et modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start=
• Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start=
• Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start=

Ci-dessous le fixlist.log

Fix result of Farbar Recovery Scan Tool (x64) Version:08-08-2015
Ran by jean yves (2015-08-08 14:41:15) Run:1
Running from C:\Users\jean yves\Desktop
Loaded Profiles: jean yves & UpdatusUser (Available Profiles: jean yves & UpdatusUser)
Boot Mode: Normal
==============================================

fixlist content:
CHR Extension: (winservice86) - C:\Users\jean yves\AppData\Local\Google\Chrome\User Data\Default\Extensions\onhcengeacabehdkdhbdcigfolmmakof [2015-04-27]
CHR HKLM-x32\...\Chrome\Extension: [gfkbfjcbkhnmiignagpkiijohkcdkffb] - https://clients2.google.com/service/update2/crx
2015-07-29 11:20 - 2015-07-29 11:20 - 00003290 _____ C:\WINDOWS\System32\Tasks\3LD06DUzcjIZG4R
2015-07-29 11:20 - 2015-07-29 11:20 - 00003248 _____ C:\WINDOWS\System32\Tasks\LsaERM4LRn8BLoN
2013-12-27 12:48 - 2013-12-27 12:48 - 0000001 ____H () C:\ProgramData\T23J7
2013-12-27 12:44 - 2014-01-13 14:58 - 0000128 ____H () C:\ProgramData\V93GE
Task: {4168476B-6E11-469A-9016-4CCEDFCAF277} - System32\Tasks\3LD06DUzcjIZG4R => C:\Users\jean yves\AppData\Roaming\uJINghj\m3N2mAl.exe
Task: {519DE456-C222-4E98-B6A6-D8DDAF689519} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe [2015-05-07] (Enigma Software Group USA, LLC.)
Task: {58E7E753-C8E4-47E3-A83E-A9FC0AAE3070} - System32\Tasks\LsaERM4LRn8BLoN => C:\Users\jean yves\AppData\Roaming\5sD0Bb4\aSEVMQ2.exe
R3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [15920 2015-05-07] (Enigma Software Group USA, LLC.)
R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1026432 2015-05-07] (Enigma Software Group USA, LLC.)
C:\Users\jean yves\AppData\Roaming\ZHP\Quarantine\
Task: {830EED2B-1F79-4364-87A5-390901D48782} - System32\Tasks\ehnPF2YQHcyFdle => C:\Users\jean yves\AppData\Roaming\iwf4D46\vqoLxhx.exe

C:\Users\jean yves\AppData\Local\Google\Chrome\User Data\Default\Extensions\onhcengeacabehdkdhbdcigfolmmakof => moved successfully.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gfkbfjcbkhnmiignagpkiijohkcdkffb" => key removed successfully
C:\WINDOWS\System32\Tasks\3LD06DUzcjIZG4R => moved successfully.
C:\WINDOWS\System32\Tasks\LsaERM4LRn8BLoN => moved successfully.
C:\ProgramData\T23J7 => moved successfully.
C:\ProgramData\V93GE => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4168476B-6E11-469A-9016-4CCEDFCAF277}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4168476B-6E11-469A-9016-4CCEDFCAF277}" => key removed successfully
C:\WINDOWS\System32\Tasks\3LD06DUzcjIZG4R not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\3LD06DUzcjIZG4R" => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{519DE456-C222-4E98-B6A6-D8DDAF689519} => key not found.
C:\WINDOWS\System32\Tasks\SpyHunter4Startup not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SpyHunter4Startup => key not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{58E7E753-C8E4-47E3-A83E-A9FC0AAE3070}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{58E7E753-C8E4-47E3-A83E-A9FC0AAE3070}" => key removed successfully
C:\WINDOWS\System32\Tasks\LsaERM4LRn8BLoN not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LsaERM4LRn8BLoN" => key removed successfully
esgiguard => service not found.
SpyHunter 4 Service => service not found.
C:\Users\jean yves\AppData\Roaming\ZHP\Quarantine => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{830EED2B-1F79-4364-87A5-390901D48782}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{830EED2B-1F79-4364-87A5-390901D48782}" => key removed successfully
C:\WINDOWS\System32\Tasks\ehnPF2YQHcyFdle => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ehnPF2YQHcyFdle" => key removed successfully

End of Fixlog 14:41:17

il reste quel problème et sur quel navigateur WEB ?

Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left