Page internet qui s'ouvre toute seule

Résolu
SouplaMC Messages postés 6 Statut Membre -  
SouplaMC Messages postés 6 Statut Membre -
Bonjour, bonjour.
Depuis quelques jours j’ai des pages internet qui s’ouvrent toutes seul, même lorsque chrome n’ai pas de page ouverte.
J’ai un antivirus Avast qui n’a rien détecté.
J’ai fait un scan avec AdwCleaner si quelqu’un pouvais m’aider.
Merci beaucoup.
Rapport Adw :

# AdwCleaner v5.032 - Logfile created 01/02/2016 at 18:30:48
# Updated 31/01/2016 by Xplode
# Database : 2016-01-31.1 [Server]
# Operating system : Windows 10 Pro (x64)
# Username : soupla - PC-SOUPLA
# Running from : E:\Download\adwcleaner_5.032.exe
# Option : Scan
# Support : https://toolslib.net/forum
          • [ Services ] *****


Service Found : bsdriver
Service Found : cherimoya
Service Found : csrcc
Service Found : zcengine
Service Found : zcwfp
Service Found : WdMan
Service Found : ryguqilizbt
Service Found : csrcc
Service Found : D984830C-57F9-4655-98F0-431DEBDAD030
Service Found : D984830C-57F9-4655-98F0-431DEBDAD030
          • [ Folders ] *****


Folder Found : C:\Program Files\shopperz310120160801
Folder Found : C:\Program Files (x86)\OneSystemCare
Folder Found : C:\Program Files (x86)\QuickSearch
Folder Found : C:\Program Files (x86)\Security Cleaner
Folder Found : C:\Program Files (x86)\SimpleFiles
Folder Found : C:\Program Files (x86)\SpaceSondPro
Folder Found : C:\Program Files (x86)\SunnyDay3
Folder Found : C:\Program Files (x86)\WSE_Binkiland
Folder Found : C:\Program Files (x86)\03AA02FC-1454224181-0509-6106-3C0700080009
Folder Found : C:\Program Files (x86)\gmsd_fr_005010223
Folder Found : C:\Program Files (x86)\rec_en_77
Folder Found : C:\Program Files (x86)\SunnyDay3
Folder Found : C:\Program Files (x86)\gmsd_fr_005010223
Folder Found : C:\Program Files (x86)\rec_en_77
Folder Found : C:\Program Files (x86)\SunnyDay3
Folder Found : C:\Program Files (x86)\SpaceSondPro_v53.12547
Folder Found : C:\ProgramData\{6F4E878D-3FCC-560B-8E4A-26895EC8F507}
Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\SimpleFiles
Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP
Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Cleaner
Folder Found : C:\Users\soupla\AppData\Local\Binkiland
Folder Found : C:\Users\soupla\AppData\Local\DailyWiki
Folder Found : C:\Users\soupla\AppData\Local\SunnyDay3
Folder Found : C:\Users\soupla\AppData\Local\gmsd_fr_005010223
Folder Found : C:\Users\soupla\AppData\Local\rec_en_77
Folder Found : C:\Users\soupla\AppData\Local\SunnyDay3
Folder Found : C:\Users\soupla\AppData\Local\gmsd_fr_005010223
Folder Found : C:\Users\soupla\AppData\Local\rec_en_77
Folder Found : C:\Users\soupla\AppData\Local\SunnyDay3
Folder Found : C:\Users\soupla\AppData\Local\03AA02FC-1454227839-0509-6106-3C0700080009
Folder Found : C:\Users\soupla\AppData\Local\03AA02FC-1454228357-0509-6106-3C0700080009
Folder Found : C:\Users\soupla\AppData\Local\Chromium\User Data\Default\Extensions\elggllhppljlljkgfeokjpehmdamkejk
Folder Found : C:\Users\soupla\AppData\Local\Temp\MAXDriverUpdater
Folder Found : C:\Users\soupla\AppData\LocalLow\{D2020D47-707D-4E26-B4D9-739C4F4C2E9A}
Folder Found : C:\Users\soupla\AppData\Roaming\ASPackage
Folder Found : C:\Users\soupla\AppData\Roaming\DailyWiki
Folder Found : C:\Users\soupla\AppData\Roaming\SimpleFiles
Folder Found : C:\Users\soupla\AppData\Roaming\Solvusoft
Folder Found : C:\Users\soupla\AppData\Roaming\WSE_Binkiland
Folder Found : C:\Users\soupla\AppData\Roaming\yoursearching
Folder Found : C:\Users\soupla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASPackage
Folder Found : C:\Users\soupla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DailyWiki
Folder Found : C:\Users\soupla\AppData\Roaming\Mozilla\Firefox\Profiles\ybhyszo9.default\Extensions\deskCutv2@gmail.com
Folder Found : C:\Users\soupla\AppData\Roaming\Mozilla\Firefox\Profiles\ybhyszo9.default\Extensions\yahooprotected@gmail.com
Folder Found : C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Local\zcengine
          • [ Files ] *****


File Found : C:\END
File Found : C:\task.vbs
File Found : C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
File Found : C:\Users\soupla\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.tradeadexchange.com_0.localstorage
File Found : C:\Users\soupla\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.tradeadexchange.com_0.localstorage-journal
File Found : C:\Users\soupla\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.wajam.com_0.localstorage
File Found : C:\Users\soupla\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.wajam.com_0.localstorage-journal
File Found : C:\Users\soupla\AppData\Local\Temp\lengine.ini.log
File Found : C:\Users\soupla\AppData\Roaming\Mozilla\Firefox\Profiles\ybhyszo9.default\searchplugins\securysearch.xml
File Found : C:\Users\soupla\AppData\Roaming\Mozilla\Firefox\Profiles\ybhyszo9.default\searchplugins\yoursearching.xml
File Found : C:\Users\soupla\Desktop\ftb.exe
File Found : C:\WINDOWS\SysNative\roboot64.exe
File Found : C:\WINDOWS\SysNative\zcengineOff.ini
File Found : C:\WINDOWS\SysNative\drivers\bsdriver.sys
File Found : C:\WINDOWS\SysNative\drivers\cherimoya.sys
File Found : C:\WINDOWS\SysNative\drivers\zcwfp64.sys
File Found : C:\WINDOWS\SysWOW64\zcengineOff.ini
File Found : C:\WINDOWS\SysWOW64\zcengine.dll
          • [ DLL ] *****
          • [ Shortcuts ] *****
          • [ Scheduled tasks ] *****


Task Found : WSE_binkiland
Task Found : zyh3018
          • [ Registry ] *****


Key Found : HKCU\Software\Mozilla\Extends
Key Found : HKLM\SOFTWARE\Classes\AppID\zcengine.EXE
Key Found : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\zcengine
Key Found : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\zcwfp
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [gmsd_fr_005010223]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [rec_en_77]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [sun3]
Key Found : HKLM\SOFTWARE\0d44d67b-e851-d135-b1b8-1205abaf67b6
Key Found : HKLM\SOFTWARE\shopperz310120160801
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [deskCutv2@gmail.com]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [yahooprotected@gmail.com]
Value Found : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{10F3F8E1-BC93-41D0-9B8D-29786546D090}]
Value Found : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{10F3F8E1-BC93-41D0-9B8D-29786546D090}]
Key Found : HKCU\Software\Google\Chrome\Extensions\elggllhppljlljkgfeokjpehmdamkejk
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\elggllhppljlljkgfeokjpehmdamkejk
Key Found : HKLM\SOFTWARE\Classes\AppID\{425F4ABF-B8E4-402D-9E49-06E494EB8DBF}
Key Found : HKLM\SOFTWARE\Classes\AppID\{A5BBB804-8009-4246-BED3-2D3335981EF6}
Key Found : HKLM\SOFTWARE\Classes\AppID\{9F2949D6-977B-4B61-B513-0C2EE52C2B4F}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{7D8DAE88-BC05-4578-8C29-E541FFBA5757}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{08ACFB57-8187-47F0-AF93-56360D03634A}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{34EBA76A-E745-4B18-96C9-2B8E2BA8B246}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3A8E009B-E66D-4016-87CF-EC57FA9A4BC1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{4D4D0357-0376-4656-A040-65AC089E84A2}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{6D5AF218-5F7E-40E0-B49D-54FFAFE2001A}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{89E46EA6-2F87-4D79-8FFA-8B264F93F54A}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{9ECCDEFC-1C26-4BB3-B6DF-252672D9FFFA}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F1BC674D-15D8-46C5-AC51-12AB16D67616}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F811C371-1DC7-4E2F-8676-D96B85BE4AF1}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{10F3F8E1-BC93-41D0-9B8D-29786546D090}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AC3801C-6736-466E-bE66-E3C23AC24556}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{7D8DAE88-BC05-4578-8C29-E541FFBA5757}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A9582D7B-F24A-441D-9D26-450D58F3CD17}
Key Found : HKLM\SOFTWARE\Classes\Interface\{EE0D8859-2ED4-4B0D-9812-16865B9AFD65}
Key Found : HKLM\SOFTWARE\Classes\Interface\{3323765B-5B83-4406-841E-473DBA4B8F29}
Key Found : HKLM\SOFTWARE\Classes\Interface\{389562C4-59D9-40C4-966E-28DA91725FFE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{3F8D3B31-AEB8-4ED7-8B05-5556068D6B54}
Key Found : HKLM\SOFTWARE\Classes\Interface\{6ED1EF08-DFF4-4252-8986-691D06C54131}
Key Found : HKLM\SOFTWARE\Classes\Interface\{83E07061-02D1-41EC-8751-BB176B823C38}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9F0948E7-227A-4F1B-9849-2D8912F185A7}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A471A4AA-5C18-429F-81BF-6C760941DB74}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C0A7C2B3-86D6-42AF-8221-79C9E4AD50BA}
Key Found : HKLM\SOFTWARE\Classes\Interface\{F2FB003D-07C7-4E4D-80E3-00B49468A6F4}
Key Found : HKLM\SOFTWARE\Classes\Interface\{F7971E81-FC71-4659-8CCE-C903576E0924}
Key Found : HKLM\SOFTWARE\Classes\Interface\{00E3D575-A24C-4BBC-A708-BCDB8BBCA6C7}
Key Found : HKLM\SOFTWARE\Classes\Interface\{024BF4C8-B53D-45B9-957F-D3BA9655FF39}
Key Found : HKLM\SOFTWARE\Classes\Interface\{074DCA49-F6A1-417F-B79E-D5E3ADC30330}
Key Found : HKLM\SOFTWARE\Classes\Interface\{6396C67C-FCAE-4CA7-927E-D57889DF8E34}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{14EF423E-3EE8-44AE-9337-07AC3F27B744}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{029AF757-A988-4BDD-A744-A4C7BCEBB011}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{14EF423E-3EE8-44AE-9337-07AC3F27B744}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9AE7A6AE-162E-44C4-9A2B-A6B4EF19909D}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{EE3D04C6-1B2D-44CF-8F5E-E092BFC03314}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{08ACFB57-8187-47F0-AF93-56360D03634A}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{10F3F8E1-BC93-41D0-9B8D-29786546D090}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{A9582D7B-F24A-441D-9D26-450D58F3CD17}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{EE0D8859-2ED4-4B0D-9812-16865B9AFD65}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{3323765B-5B83-4406-841E-473DBA4B8F29}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{389562C4-59D9-40C4-966E-28DA91725FFE}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{3F8D3B31-AEB8-4ED7-8B05-5556068D6B54}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{6ED1EF08-DFF4-4252-8986-691D06C54131}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{83E07061-02D1-41EC-8751-BB176B823C38}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{9F0948E7-227A-4F1B-9849-2D8912F185A7}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{A471A4AA-5C18-429F-81BF-6C760941DB74}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{C0A7C2B3-86D6-42AF-8221-79C9E4AD50BA}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{F2FB003D-07C7-4E4D-80E3-00B49468A6F4}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{F7971E81-FC71-4659-8CCE-C903576E0924}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{00E3D575-A24C-4BBC-A708-BCDB8BBCA6C7}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{024BF4C8-B53D-45B9-957F-D3BA9655FF39}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{074DCA49-F6A1-417F-B79E-D5E3ADC30330}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{6396C67C-FCAE-4CA7-927E-D57889DF8E34}
Key Found : HKCU\Software\Binkiland Browser
Key Found : HKCU\Software\Microsoft\Tinstalls
Key Found : HKCU\Software\Mozilla\Extends
Key Found : HKCU\Software\PRODUCTSETUP
Key Found : HKCU\Software\SimpleFiles
Key Found : HKCU\Software\tstamptoken
Key Found : HKCU\Software\Tutorials
Key Found : HKCU\Software\TutoTag
Key Found : HKCU\Software\WEBAPP
Key Found : HKCU\Software\WSE_Binkiland
Key Found : HKCU\Software\{E77F1635-E57F-4B49-9770-B4408CF7A52F}
Key Found : HKCU\Software\AppDataLow\Software\DailyWiki
Key Found : HKLM\SOFTWARE\FFPluginHp
Key Found : HKLM\SOFTWARE\GAMESDESKTOP
Key Found : HKLM\SOFTWARE\QuickSearch
Key Found : HKLM\SOFTWARE\SimpleFiles
Key Found : HKLM\SOFTWARE\SpaceSondPro
Key Found : HKLM\SOFTWARE\SUNNYDAY
Key Found : HKLM\SOFTWARE\SVH
Key Found : HKLM\SOFTWARE\Tutorials
Key Found : HKLM\SOFTWARE\WdsManPro
Key Found : HKLM\SOFTWARE\yoursearchingSoftware
Key Found : HKLM\SOFTWARE\shopperz310120160801
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SimpleFiles
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C42C5197-0EE9-4940-893B-F4EF047DFF0F}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ASPackage
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DailyWiki
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PopupProduct
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QuickSearch
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdater
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SunnyDay3_is1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VOPackage
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WSE_Binkiland
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\gmsd_fr_005010223_is1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\rec_en_77_is1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SunnyDay3_is1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\gmsd_fr_005010223_is1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\rec_en_77_is1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SunnyDay3_is1
Key Found : [x64] HKLM\SOFTWARE\shopperz310120160801
Key Found : HKU\.DEFAULT\Software\{E77F1635-E57F-4B49-9770-B4408CF7A52F}
Key Found : HKU\.DEFAULT\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
Key Found : HKU\S-1-5-19\Software\{E77F1635-E57F-4B49-9770-B4408CF7A52F}
Key Found : HKU\S-1-5-20\Software\{E77F1635-E57F-4B49-9770-B4408CF7A52F}
Key Found : HKU\S-1-5-21-1692917909-3945647877-1679147547-1001\Software\Binkiland Browser
Key Found : HKU\S-1-5-21-1692917909-3945647877-1679147547-1001\Software\Microsoft\Tinstalls
Key Found : HKU\S-1-5-21-1692917909-3945647877-1679147547-1001\Software\Mozilla\Extends
Key Found : HKU\S-1-5-21-1692917909-3945647877-1679147547-1001\Software\PRODUCTSETUP
Key Found : HKU\S-1-5-21-1692917909-3945647877-1679147547-1001\Software\SimpleFiles
Key Found : HKU\S-1-5-21-1692917909-3945647877-1679147547-1001\Software\tstamptoken
Key Found : HKU\S-1-5-21-1692917909-3945647877-1679147547-1001\Software\Tutorials
Key Found : HKU\S-1-5-21-1692917909-3945647877-1679147547-1001\Software\TutoTag
Key Found : HKU\S-1-5-21-1692917909-3945647877-1679147547-1001\Software\WEBAPP
Key Found : HKU\S-1-5-21-1692917909-3945647877-1679147547-1001\Software\WSE_Binkiland
Key Found : HKU\S-1-5-21-1692917909-3945647877-1679147547-1001\Software\{E77F1635-E57F-4B49-9770-B4408CF7A52F}
Key Found : HKU\S-1-5-21-1692917909-3945647877-1679147547-1001\Software\AppDataLow\Software\DailyWiki
Key Found : HKU\S-1-5-21-1692917909-3945647877-1679147547-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\SimpleFiles
Data Found : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.secury-search.com/fr/?from=c2
Data Found : HKU\S-1-5-21-1692917909-3945647877-1679147547-1001\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.secury-search.com/fr/?from=c2
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C865866B-6FAD-4826-872E-26B92D0B3239}
Data Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - {C865866B-6FAD-4826-872E-26B92D0B3239}
Key Found : HKU\S-1-5-21-1692917909-3945647877-1679147547-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKU\S-1-5-21-1692917909-3945647877-1679147547-1001\Software\Microsoft\Internet Explorer\SearchScopes\{C865866B-6FAD-4826-872E-26B92D0B3239}
Data Found : HKU\S-1-5-21-1692917909-3945647877-1679147547-1001\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - {C865866B-6FAD-4826-872E-26B92D0B3239}
Data Found : HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command [] - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.yoursearching.com/?type=sc&ts=1454224280&z=de630c09d3e658f8b88644fgez0w8z9o8o2zcoeb1o&from=brd&uid=SamsungXSSDX850XEVOX500GB_S21JNXAG480717A
Data Found : HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command [] - "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" hxxp://www.yoursearching.com/?type=sc&ts=1454224280&z=de630c09d3e658f8b88644fgez0w8z9o8o2zcoeb1o&from=brd&uid=SamsungXSSDX850XEVOX500GB_S21JNXAG480717A
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DailyWiki]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [sun3]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce [usun.exe]
Value Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SpaceSoundPro]
          • [ Web browsers ] *****


[C:\Users\soupla\AppData\Roaming\Mozilla\Firefox\Profiles\ybhyszo9.default\prefs.js] [Preference] Found : user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");
[C:\Users\soupla\AppData\Roaming\Mozilla\Firefox\Profiles\ybhyszo9.default\prefs.js] [Preference] Found : user_pref("browser.search.defaultenginename", "yoursearching");
[C:\Users\soupla\AppData\Roaming\Mozilla\Firefox\Profiles\ybhyszo9.default\prefs.js] [Preference] Found : user_pref("browser.search.selectedEngine", "yoursearching");
[C:\Users\soupla\AppData\Roaming\Mozilla\Firefox\Profiles\ybhyszo9.default\prefs.js] [Preference] Found : user_pref("browser.startup.homepage", "hxxp://www.yoursearching.com/?type=hp&ts=1454224280&z=de630c09d3e658f8b88644fgez0w8z9o8o2zcoeb1o&from=brd&uid=SamsungXSSDX850XEVOX500GB_S21JNXAG480717A");
[C:\Users\soupla\AppData\Roaming\Mozilla\Firefox\Profiles\ybhyszo9.default\prefs.js] [Preference] Found : user_pref("extensions.quick_start.enable_search1", false);
[C:\Users\soupla\AppData\Roaming\Mozilla\Firefox\Profiles\ybhyszo9.default\prefs.js] [Preference] Found : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);
[C:\Users\soupla\AppData\Roaming\Mozilla\Firefox\Profiles\ybhyszo9.default\prefs.js] [Preference] Found : user_pref("keyword.URL", "hxxp://www.secury-search.com/fr/web?from=c2&q=");
[C:\Users\soupla\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider] Found : hxxp://yoursearching.com/wefavicon.ico
[C:\Users\soupla\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider_Data] Found : hxxp://yoursearching.com/web?type=ds&ts=1454224280&z=de630c09d3e658f8b88644fgez0w8z9o8o2zcoeb1o&from=brd&uid=SamsungXSSDX850XEVOX500GB_S21JNXAG480717A&q={searchTerms}
[C:\Users\soupla\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Found : elggllhppljlljkgfeokjpehmdamkejk
[C:\Users\soupla\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Found : ombmmloebnfnpehgjnmkcgoegfachobp
[C:\Users\soupla\AppData\Local\Chromium\User Data\Default\Secure Preferences] [Extension] Found : elggllhppljlljkgfeokjpehmdamkejk

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [19307 bytes] ##########

7 réponses

  2.
    Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Salut,

    MalwareBytes ( durée : environ 40min de scan ):
    ==================================================
    Télécharge et installe MBAM. La version gratuite permet de nettoyer ( décoche bien la proposition d'essai de la version Premium à la fin de l'installation ) :

    Mettre MBAM à jour puis lancer un examen.
    A la fin du scan, clique sur "Supprimer Sélection" en bas à gauche.
    Redémarrer l'ordinateur si nécessaire puis relancer Malwarebytes.
    Vas chercher le rapport dans l'onglet "Historique".

    A gauche "Journal d'analyse", double-clique sur l'examen dans la liste. Puis en bas "Copier dans le presse papier", va sur http://pjjoint.malekal.com/, clique droit "Coller" pour coller le contenu du rapport du scan. Clique sur "Envoyer". Dans un nouveau message ici en réponse, donne le lien pjjoint afin de pouvoir consulter le rapport.

    0
  3. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    ok,

    Rootkit.Komodia.PUA, C:\Windows\System32\drivers\bsdriver.sys, Supprimer au redémarrage, [1871d3883267f343daad991fcc350ff1],

    2°)
    Réinitialise tes navigateurs et/ou re-paramètre manuellement tes navigateurs WEB ( page de démarrage, moteur de recherche, etc ) mais aussi supprimer/désactiver les extensions inutiles/parasites.
    Pour t'aider à effectuer ce ménage, clique ci-dessous sur le nom du navigateur WEB que tu utilises :

    3°) FRST
    Suis le tutoriel FRST. ( prends le temps de lire attentivement - tout y est bien expliqué ).

    Télécharge et lance le scan FRST, 3 rapports FRST seront générés :
    • FRST.txt
    • Shortcut.txt
    • Additionnal.txt


    Envoie ces 3 rapports sur le site http://pjjoint.malekal.com/ et en retour donne les 3 liens pjjoint qui mènent aux rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.

    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    des restes à priori,

    Voici la correction à effectuer avec FRST. Tu peux t'aider de cette note explicative avec des captures d'écran.

    Ouvre le bloc-notes : Touche Windows + R,
    Dans le champs "Exécuter", saisir notepad et OK.
    Copie/Colle dedans ce qui suit : 


     2014-12-30 22:09 - 2014-12-30 22:10 - 0001397 _____ () C:\Users\Marine\AppData\Roaming\Bubble Dock.boostrap.log 
     2014-12-30 22:09 - 2014-12-30 22:10 - 0006451 _____ () C:\Users\Marine\AppData\Roaming\Bubble Dock.installation.log 
     2014-09-01 09:18 - 2014-09-01 09:18 - 0001248 _____ () C:\Users\Marine\AppData\Roaming\RRXU 
     2014-09-01 09:18 - 2014-09-01 09:18 - 0002086 _____ () C:\Users\Marine\AppData\Roaming\VYFBZL 
     2016-02-01 11:25 - 2012-05-20 13:06 - 00000000 ____D C:\Program Files (x86)\SweetIM  
     1999-07-07 01:00 - 1999-07-07 01:00 - 0000006 __RSH () C:\ProgramData\DE280AC2-0786-4476-96E5-D6E6370396FE 
    2016-01-31 08:31 - 2016-01-31 08:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Cleaner 
     2016-01-31 08:31 - 2016-01-31 08:31 - 00000000 ____D C:\Program Files (x86)\Security Cleaner 
     2016-01-31 08:19 - 2016-01-31 08:19 - 00002044 _____ C:\WINDOWS\System32\Tasks\zyh3018 
     2016-01-31 08:11 - 2016-02-01 19:42 - 00000000 ____D C:\Users\soupla\AppData\LocalLow\Company 
     2016-01-31 08:11 - 2016-01-31 08:19 - 00000002 _____ C:\END 
     2016-01-31 08:11 - 2016-01-31 08:17 - 00000000 ____D C:\Program Files (x86)\OneSystemCare 
     2016-01-31 08:11 - 2016-01-31 08:11 - 00023404 _____ C:\WINDOWS\System32\Tasks\{780E7847-7905-0E7E-0511-787E097D117D} 
     2016-01-31 08:11 - 2016-01-31 08:11 - 00003412 _____ C:\WINDOWS\System32\Tasks\Toijewo 
     2016-01-31 08:11 - 2016-01-31 08:11 - 00000074 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat 
     2016-01-31 08:11 - 2016-01-31 08:11 - 00000000 ____D C:\ProgramData\a8521fd0-57d7-1 
     2016-01-31 08:11 - 2016-01-31 08:11 - 00000000 ____D C:\ProgramData\a8521fd0-5641-0 
     2016-01-31 08:10 - 2016-01-31 08:09 - 00000967 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak  
     2016-01-31 08:09 - 2016-02-01 19:43 - 00000000 ____D C:\Program Files (x86)\03AA02FC-1454224181-0509-6106-3C0700080009 
    Task: {46F05DF1-985F-4AD7-8F0C-FFE814F25713} - System32\Tasks\{780E7847-7905-0E7E-0511-787E097D117D}


    Une fois, le texte collé dans le Bloc-notes,
    Menu "Fichier" puis "Enregistrer sous",
    A gauche, place toi sur le Bureau,
    Dans le champs en bas, nom du fichier mets : fixlist.txt
    Clique sur "Enregistrer", cela va créer fixlist.txt sur le Bureau.

    Relance FRST et clique sur le bouton "Corriger / Fix"
    Un redémarrage sera peut-être nécessaire ( pas obligatoire )
    Un fichier texte apparait, copie/colle le contenu ici dans un nouveau message.

    Redémarre l'ordinateur.
    0
  7. SouplaMC Messages postés 6 Statut Membre 1
     
    Fix result of Farbar Recovery Scan Tool (x64) Version:27-01-2016
    Ran by soupla (2016-02-01 21:09:12) Run:1
    Running from C:\Users\soupla\Desktop
    Loaded Profiles: soupla (Available Profiles: soupla)
    Boot Mode: Normal
    ==============================================

    fixlist content:
    2014-12-30 22:09 - 2014-12-30 22:10 - 0001397 _____ () C:\Users\Marine\AppData\Roaming\Bubble Dock.boostrap.log
    2014-12-30 22:09 - 2014-12-30 22:10 - 0006451 _____ () C:\Users\Marine\AppData\Roaming\Bubble Dock.installation.log
    2014-09-01 09:18 - 2014-09-01 09:18 - 0001248 _____ () C:\Users\Marine\AppData\Roaming\RRXU
    2014-09-01 09:18 - 2014-09-01 09:18 - 0002086 _____ () C:\Users\Marine\AppData\Roaming\VYFBZL
    2016-02-01 11:25 - 2012-05-20 13:06 - 00000000 ____D C:\Program Files (x86)\SweetIM
    1999-07-07 01:00 - 1999-07-07 01:00 - 0000006 __RSH () C:\ProgramData\DE280AC2-0786-4476-96E5-D6E6370396FE
    2016-01-31 08:31 - 2016-01-31 08:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Cleaner
    2016-01-31 08:31 - 2016-01-31 08:31 - 00000000 ____D C:\Program Files (x86)\Security Cleaner
    2016-01-31 08:19 - 2016-01-31 08:19 - 00002044 _____ C:\WINDOWS\System32\Tasks\zyh3018
    2016-01-31 08:11 - 2016-02-01 19:42 - 00000000 ____D C:\Users\soupla\AppData\LocalLow\Company
    2016-01-31 08:11 - 2016-01-31 08:19 - 00000002 _____ C:\END
    2016-01-31 08:11 - 2016-01-31 08:17 - 00000000 ____D C:\Program Files (x86)\OneSystemCare
    2016-01-31 08:11 - 2016-01-31 08:11 - 00023404 _____ C:\WINDOWS\System32\Tasks\{780E7847-7905-0E7E-0511-787E097D117D}
    2016-01-31 08:11 - 2016-01-31 08:11 - 00003412 _____ C:\WINDOWS\System32\Tasks\Toijewo
    2016-01-31 08:11 - 2016-01-31 08:11 - 00000074 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
    2016-01-31 08:11 - 2016-01-31 08:11 - 00000000 ____D C:\ProgramData\a8521fd0-57d7-1
    2016-01-31 08:11 - 2016-01-31 08:11 - 00000000 ____D C:\ProgramData\a8521fd0-5641-0
    2016-01-31 08:10 - 2016-01-31 08:09 - 00000967 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
    2016-01-31 08:09 - 2016-02-01 19:43 - 00000000 ____D C:\Program Files (x86)\03AA02FC-1454224181-0509-6106-3C0700080009
    Task: {46F05DF1-985F-4AD7-8F0C-FFE814F25713} - System32\Tasks\{780E7847-7905-0E7E-0511-787E097D117D}

    "C:\Users\Marine\AppData\Roaming\Bubble Dock.boostrap.log" => not found.
    "C:\Users\Marine\AppData\Roaming\Bubble Dock.installation.log" => not found.
    "C:\Users\Marine\AppData\Roaming\RRXU" => not found.
    "C:\Users\Marine\AppData\Roaming\VYFBZL" => not found.
    "C:\Program Files (x86)\SweetIM" => not found.
    C:\ProgramData\DE280AC2-0786-4476-96E5-D6E6370396FE => moved successfully
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Cleaner => moved successfully
    C:\Program Files (x86)\Security Cleaner => moved successfully
    C:\WINDOWS\System32\Tasks\zyh3018 => moved successfully
    C:\Users\soupla\AppData\LocalLow\Company => moved successfully
    C:\END => moved successfully
    C:\Program Files (x86)\OneSystemCare => moved successfully
    C:\WINDOWS\System32\Tasks\{780E7847-7905-0E7E-0511-787E097D117D} => moved successfully
    C:\WINDOWS\System32\Tasks\Toijewo => moved successfully
    C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat => moved successfully
    C:\ProgramData\a8521fd0-57d7-1 => moved successfully
    C:\ProgramData\a8521fd0-5641-0 => moved successfully
    C:\WINDOWS\system32\Drivers\etc\hp.bak => moved successfully
    C:\Program Files (x86)\03AA02FC-1454224181-0509-6106-3C0700080009 => moved successfully
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{46F05DF1-985F-4AD7-8F0C-FFE814F25713}" => key removed successfully
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{46F05DF1-985F-4AD7-8F0C-FFE814F25713}" => key removed successfully
    C:\WINDOWS\System32\Tasks\{780E7847-7905-0E7E-0511-787E097D117D} => not found.
    "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{780E7847-7905-0E7E-0511-787E097D117D}" => key removed successfully

    End of Fixlog 21:09:13

    0
    1. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
       
      c'est mieux ?
      0
    2. SouplaMC Messages postés 6 Statut Membre 1
       
      yep, merci beaucoup :)
      0
  8. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Super! bonne soirée =)

    Quelques conseils :

    Pour tenter de prévenir les sites malicieux, tu peux installer Blockulicious.

    Pour ne plus te faire avoir.
    A lire - Programmes parasites / PUPs : Dossier Adwares/PUPs : programmes indésirables et parasites
    (Surtout active les détections LPIs pour détecter les programmes parasites et publicitaires)

    Renforce la sécurité de ton Windows : Comment sécuriser mon Windows

    0
    1. SouplaMC Messages postés 6 Statut Membre 1
       
      Je vais installer ça et regarder les liens que tu m’as donnés, encore une fois merci.
      0

Discussions similaires

FOTOSE (allemagne)
lix -
Yves -

13 réponses
Publicité s'ouvre toute seule ! ?
RRD91 -
Vinz -

52 réponses
Connecté à internet mais rien ne charge
gandounet -
fabiennetitou -

10 réponses
Problème Philips 42PFL3605H/12
PETERH1979 -
Mouss -

13 réponses