Virus Hello New user Résolu/Fermé

Question

Bonjour !

Depuis quelques jours, une fenêtre intempestive s'ouvre quand je change de page sur internet...... Une fenêtre de dialogue où il est inscrit "Hello new user !". C'est vraiment lourd !

J'ai vu que je ne suis pas le seul à rencontrer ce problème... Pouvez-vous m'aider ?

J'ai suivi une procédure vue sur ce forum :

1 : AdwCleaner :

Voici le rapport :

# AdwCleaner v5.201 - Rapport créé le 02/07/2016 à 10:34:41
# Mis à jour le 30/06/2016 par ToolsLib
# Base de données : 2016-07-01.1 [Serveur]
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (X64)
# Nom d'utilisateur : hp - HP-PC
# Exécuté depuis : C:\Users\hp\Downloads\adwcleaner_5.201.exe
# Option : Nettoyer
# Support : https://toolslib.net/forum

 [ Services ] *****
 [ Dossiers ] *****

[-] Dossier supprimé : C:\ProgramData\VideoConverter
[-] Dossier supprimé : C:\ProgramData\fa19330b-0285-0
[-] Dossier supprimé : C:\ProgramData\fa19330b-3b53-1
[-] Dossier supprimé : C:\ProgramData\{0964d85c-412c-1}
[-] Dossier supprimé : C:\ProgramData\{0c5bd4ed-612c-0}
[-] Dossier supprimé : C:\ProgramData\{1e244580-412c-0}
[#] Dossier supprimé : C:\ProgramData\Application Data\VideoConverter
[#] Dossier supprimé : C:\ProgramData\Application Data\fa19330b-0285-0
[#] Dossier supprimé : C:\ProgramData\Application Data\fa19330b-3b53-1
[#] Dossier supprimé : C:\ProgramData\Application Data\{0964d85c-412c-1}
[#] Dossier supprimé : C:\ProgramData\Application Data\{0c5bd4ed-612c-0}
[#] Dossier supprimé : C:\ProgramData\Application Data\{1e244580-412c-0}
[-] Dossier supprimé : C:\Program Files (x86)\Conduit
[-] Dossier supprimé : C:\Program Files (x86)\SearchProtect
[-] Dossier supprimé : C:\Users\hp\AppData\Local\Conduit
[-] Dossier supprimé : C:\Users\hp\AppData\Local\NativeMessaging
[-] Dossier supprimé : C:\Users\hp\AppData\Local\SearchProtect
[-] Dossier supprimé : C:\Users\hp\AppData\Local\TB\APISupport
[-] Dossier supprimé : C:\Users\hp\AppData\Local\TBHostSupport
[-] Dossier supprimé : C:\Users\hp\AppData\Local\Video Converter
[-] Dossier supprimé : C:\Users\hp\AppData\LocalLow\Conduit
[-] Dossier supprimé : C:\Users\hp\AppData\Roaming\OpenCandy
[-] Dossier supprimé : C:\Users\hp\AppData\Roaming\RHEng
[-] Dossier supprimé : C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\Smartbar
[-] Dossier supprimé : C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\ValueApps
[-] Dossier supprimé : C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\extensions\{b64d9b05-48e1-4ceb-bf58-e0643994e900}

 [ Fichiers ] *****

[-] Fichier supprimé : C:\Windows\AppPatch\Custom\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb
[-] Fichier supprimé : C:\Windows\AppPatch\Custom\Custom64\{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb
[-] Fichier supprimé : C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\searchplugins\search-provided-by-bing.xml
[-] Fichier supprimé : C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_elhjaoldnkkbifioodjndkijecdeinld_0.localstorage

 [ DLLs ] *****
 [ WMI ] *****
 [ Raccourcis ] *****
 [ Tâches planifiées ] *****
 [ Registre ] *****

[-] Valeur supprimée : HKCU\Software\Mozilla\Firefox\Extensions [{b64d9b05-48e1-4ceb-bf58-e0643994e900}]
[-] Clé supprimée : HKCU\Software\Google\Chrome\Extensions\elhjaoldnkkbifioodjndkijecdeinld
[-] Clé supprimée : HKLM\SOFTWARE\Google\Chrome\Extensions\elhjaoldnkkbifioodjndkijecdeinld
[-] Clé supprimée : HKCU\Software\Google\Chrome\Extensions
ikpibnbobmbdbheedjfogjlikpgpnhp
[-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{25A3A431-30BB-47C8-AD6A-E1063801134F}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{0757C9D8-D8A3-33F5-CEE2-11D09918BA8F}
[-] Clé supprimée : HKLM\SOFTWARE\Classes\CLSID\{528B5866-2BA6-42CE-8F74-39FB23B49767}
[-] Clé supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25A3A431-30BB-47C8-AD6A-E1063801134F}
[-] Clé supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25A3A431-30BB-47C8-AD6A-E1063801134F}
[-] Valeur supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{25A3A431-30BB-47C8-AD6A-E1063801134F}]
[-] Valeur supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{21FA44EF-376D-4D53-9B0F-8A89D3229068}]
[-] Valeur supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{08C06D61-F1F3-4799-86F8-BE1A89362C85}]
[-] Valeur supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{EF79F67A-6AD7-4715-A0F8-932FCA442023}]
[-] Clé supprimée : HKCU\Software\Conduit
[-] Clé supprimée : HKCU\Software\PRODUCTSETUP
[-] Clé supprimée : HKCU\Software\Softonic
[-] Clé supprimée : HKCU\Software\System Healer
[-] Clé supprimée : HKCU\Software\TeleCharger
[-] Clé supprimée : HKCU\Software\YahooPartnerToolbar
[-] Clé supprimée : HKCU\Software\csastats
[-] Clé supprimée : HKLM\SOFTWARE\Conduit
[-] Clé supprimée : HKLM\SOFTWARE\SPPDCOM
[-] Clé supprimée : HKLM\SOFTWARE\Vittalia
[-] Clé supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564
[-] Donnée restaurée : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Donnée restaurée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[-] Donnée restaurée : HKU\S-1-5-21-3639967463-2268789195-1041579043-1000\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{15AE96E9-F094-439C-A792-51EFF23F79E9}
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
[-] Clé supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{fcd9f10e-0daa-405f-bca0-0dd3f37c59d9}
[-] Clé supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{15AE96E9-F094-439C-A792-51EFF23F79E9}
[-] Clé supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}
[-] Donnée restaurée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Clé supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
[-] Clé supprimée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{15AE96E9-F094-439C-A792-51EFF23F79E9}
[-] Donnée restaurée : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Donnée restaurée : HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{44B1280B-014A-4444-9925-5140CEDA95B1} [NameServer]
[-] Donnée restaurée : HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{68988A50-15BD-447B-8036-994E7EB27CEB} [NameServer]
[-] Donnée restaurée : HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\{C32FA50F-DD84-467C-BE4C-F52A76AC2702} [NameServer]

 [ Navigateurs ] *****

[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.1000234.TWC_TMP_city", "ORLEANS");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.1000234.TWC_TMP_country", "FR");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.1000234.TWC_locId", "BRXX2783");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.1000234.TWC_location", "Orleans, Brésil");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.1000234.TWC_region", "FR");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.1000234.TWC_temp_dis", "c");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.1000234.TWC_wind_dis", "kmh");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.1000234.weatherData", "{\"icon\":\"30.png\",\"temperature\":\"37°C\",\"temperatureClear\":\"37°C\",\"highTemperature\":\"29°C\",\"lowTemperature\":\"19°C\",\"feelsLike\":\"44°C\",[...]
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.CBOpenMAMSettings.enc", "MA==");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.FirstTime", "true");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.FirstTimeFF3", "true");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.LoginRevertSettingsEnabled", true);
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.PairingKey.enc", "ODM0REY4MzdDMjVGODg5NDk4OURGRjhFODFFOEYzMEFDRUY2N0MzNQ==");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.RestartDialogFirstTime", "false");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.RestartDialogShouldDisplay", "false");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.RevertSettingsEnabled", true);
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.UserID", "UN50476784042928886");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.addressBarTakeOverEnabledInHidden", "true");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.cbcountry_001.enc", "RlI=");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.cbfirsttime.enc", "V2VkIERlYyAyNiAyMDEyIDEzOjU1OjE2IEdNVCswMTAw");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.countryCode", "FR");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.defaultSearch", "false");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.enableAlerts", "always");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.enableFix404ByUser", "FALSE");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.enableSearchFromAddressBar", "false");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.firstTimeDialogOpened", "true");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.fixPageNotFoundError", "true");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.fixPageNotFoundErrorByUser", "true");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.fixPageNotFoundErrorInHidden", "true");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.fixUrls", true);
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.fullUserID", "UN50476784042928886.UP.20130710081209");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.homepageuserchanged", true);
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.installType", "xpe");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.isCheckedStartAsHidden", true);
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.isFirstTimeToolbarLoading", "false");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.isNewTabEnabled", false);
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.isPerformedSmartBarTransition", "true");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.conduit.com/?gd=&ctid=CT2849852&octid=CT2849852&ISID=ISID_ID&SearchSource=15&CUI=UN50476784042928886&Lay=1[...]
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.lastVersion", "10.33.0.517");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.migrateAppsAndComponents", true);
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxps%3A%2F%2Fwww.facebook.com%2F\",\"EB_MAIN_FRAME_TITLE\":\"Facebook\",\"EB_TOOLBAR_SUB_DOMAIN\":\"hxxp[...]
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.openThankYouPage", "true");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.openUninstallPage", "false");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.performedDomainChangesMigration", "true");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.revertSettingsEnabled", "false");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.scriptSource.enc", "aHR0cDovLzEyNy4wLjAuMToxMDAwMC9ndWkv");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.search.searchAppId", "129349795935906563");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.search.searchCount", "2");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.searchInNewTabEnabled", "false");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.searchInNewTabEnabledByUser", "false");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.searchInNewTabEnabledInHidden", "true");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.searchSuggestEnabledByUser", "false");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2849852\"}");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://BittorrentBarFR.OurToolbar.com//xpi\"}");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"BittorrentBar_FR \"}");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_Configuration_lastUpdate", "1410013427853");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1356526514017");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_appsMetadata_lastUpdate", "1356526514137");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1356526514729");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_location_lastUpdate", "1373386162594");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_login_10.13.40.15_lastUpdate", "1358714709294");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_login_10.14.370.524_lastUpdate", "1364147828590");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_login_10.14.40.128_lastUpdate", "1359664891315");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_login_10.14.42.7_lastUpdate", "1361108243616");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_login_10.14.65.43_lastUpdate", "1363188195960");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_login_10.15.0.562_lastUpdate", "1373398180839");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_login_10.16.2.509_lastUpdate", "1372313107000");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_login_10.16.4.519_lastUpdate", "1375006289778");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_login_10.16.70.505_lastUpdate", "1379189127048");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_login_10.20.0.513_lastUpdate", "1386245651988");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_login_10.22.3.518_lastUpdate", "1386865026991");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_login_10.22.5.510_lastUpdate", "1387472711908");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_login_10.23.0.822_lastUpdate", "1396459170978");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_login_10.29.0.520_lastUpdate", "1399220362554");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_login_10.30.1.502_lastUpdate", "1400700825273");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_login_10.31.0.526_lastUpdate", "1401390502163");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_login_10.31.2.501_lastUpdate", "1404365098318");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_login_10.33.0.505_lastUpdate", "1408621404757");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_login_10.33.0.517_lastUpdate", "1410078266972");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1356526514310");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_searchAPI_lastUpdate", "1410013427578");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_serviceMap_lastUpdate", "1410013427539");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_toolbarContextMenu_lastUpdate", "1356526514572");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_toolbarSettings_lastUpdate", "1410078266797");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.serviceLayer_services_translation_lastUpdate", "1410013427699");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.settingsINI", true);
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.shouldFirstTimeDialog", "false");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.showToolbarPermission", "false");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.smartbar.CTID", "CT2849852");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.smartbar.Uninstall", "0");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.smartbar.isHidden", true);
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.smartbar.toolbarName", "BittorrentBar_FR ");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.startPage", "false");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.toolbarBornServerTime", "26-12-2012");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.toolbarCurrentServerTime", "7-9-2014");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.toolbarLoginClientTime", "Wed Mar 13 2013 16:39:43 GMT+0100");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.uTTorrents.enc", "eyJidWlsZCI6Mjg0OTksImxhYmVsIjpbXSwidG9ycmVudHMiOltbIkM0ODU5MDhGMzIzNTIxNEJFRThGNDlCNkMwNkExQTIzRjg3NUYzMUUiLDIwMSwiRnJhbmtlbndlZW5pZS4yMDEyLkZSRU5DSC5CRFJpcC5Yd[...]
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852.url_history0001.enc", "aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo6OmNsaWNraGFuZGxlcjo6OjEzNTY1MjY1NzEyMDYsLCxodHRwOi8vd3d3LmZhY2Vib29rLmNvbS9hbWF1cnkuZ2Fybmllci4xL2FjdGl2aXR5LzEwMTUxMzIxMTUx[...]
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("CT2849852_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1410078258184,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("extensions.snipit.askTbInstalled", true);
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("extensions.snipit.history_query", "le%20grand%20detournement=ASKURL=hxxp://www.ask.com/web?q=le%20grand%20detournement&qsrc=2871&o=10611&l=disle%20grand%20detournement=ASKURL=//www.ask.co[...]
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"I[...]
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("extensions.wrc.SearchRules.ask.com.url", "^hxxp(s)?\:\/\/(.+\.)?ask\.com\/.*");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("plugin.state.npconduitfirefoxplugin", 2);
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("smartbar.machineId", "6ZBE93TMBLRMQFY59IJXOEM8DEEKT0IFSGIXDFWQRK6VNR56XTG4DEMV/RSD8W4KHDXDTSAMV+Y0THSMULPA2A");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("valueApps.CT2849852.mam_gk_currentVersion", "312E31332E302E3137");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("valueApps.CT2849852.mam_gk_currentVersion.storedInFile", false);
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("valueApps.CT2849852.mam_gk_migrated_from_ls", "31");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("valueApps.CT2849852.mam_gk_migrated_from_ls.storedInFile", false);
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("valueApps.CT2849852.mam_gk_userBornDate", "4E2F41");
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("valueApps.CT2849852.mam_gk_userBornDate.storedInFile", false);
[-] [C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profiles\ijqo05vg.default\prefs.js] supprimée : user_pref("valueApps.storage.mam_gk_userId", "62373264626566312D356431332D346636382D623830362D626631383030346662376139");
[-] [C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] supprimé : www.yahoo.com
[-] [C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] supprimé : elhjaoldnkkbifioodjndkijecdeinld



:: Clés "Tracing" supprimées
:: Paramètres Winsock réinitialisés



C:\AdwCleaner\AdwCleaner[C1].txt - [29538 octets] - [02/07/2016 10:34:41]
C:\AdwCleaner\AdwCleaner[S1].txt - [30178 octets] - [02/07/2016 10:04:17]
C:\AdwCleaner\AdwCleaner[S2].txt - [30223 octets] - [02/07/2016 10:08:49]

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [29763 octets] ##########


2 : Réinitialisation de navigateurs :

J'ai réinitialisé Firefox, qui est le navigateur que j'utilise quasiment exclusivement.

3 : FRST :

Voici les 3 rapports que j'ai obtenu :

FRST : https://pjjoint.malekal.com/files.php?id=FRST_20160702_s12w6q15f15q7

Addition : https://pjjoint.malekal.com/files.php?id=20160702_n7c15i11e12q15

Shortcut : https://pjjoint.malekal.com/files.php?id=20160702_f12h14s13w13j13

Merci d'avance de prendre le temps de m'aider ! :)

Malekal_morte- · Answer

Salut,

Réinitialise manuellement tes navigateurs :

 Réinitialiser et réparer Mozilla Firefox
 Réinitialiser et réparer Google Chrome
 Réinitialiser et réparer Internet Explorer


Vois si cela persiste. 
 
Veuillez appuyer sur une touche pour continuer la désinfection...

kwisatz36 · Answer

Il semble que ça va mieux ! :) Merci !

Malekal_morte- · Answer

=)



Termine par un nettoyage Malwarebytes -  Tutoriel Malwarebytes Anti-Malware version gratuite 


Quelques conseils : 

Pour tenter de prévenir les sites malicieux, tu peux installer Blockulicious.

Pour ne plus te faire avoir. 
A lire - Programmes parasites / PUPs : Dossier Adwares/PUPs : programmes indésirables et parasites
(Surtout active les détections LPIs pour détecter les programmes parasites et publicitaires)

Virus Hello New user

3 réponses

Discussions similaires