Amisites

roronoazoro92 Messages postés 26 Statut Membre -  
Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   -
salut
depuis quelques jours, un moteur de recherche ''amisites'' et un programme ''amule'' s'installent automatiquement dans mon pc, quand je les efface, ils reviennent

voici mes rapports de FRST

ADDITION
https://pjjoint.malekal.com/files.php?id=20161116_k15n7v12v13n15

FRST
https://pjjoint.malekal.com/files.php?id=FRST_20161116_b15c5p11p14v7

SHORTCUT
https://pjjoint.malekal.com/files.php?id=20161116_w5p15q6y5y10

2 réponses

  1.
    Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Salut

    je regarde les rapports.

    --
    0
  2. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Désinstalle Baidu Antivirus

    L'ordi est très infecté.

    Voici la correction à effectuer avec FRST. Tu peux t'aider de cette note explicative avec des captures d'écran.

    Ouvre le bloc-notes : Touche Windows + R,
    Dans le champs "Exécuter", saisir notepad et OK.
    Copie/Colle dedans ce qui suit : 

    CreateRestorePoint:
    CloseProcesses:
    Task: {31BCB260-A78E-4BC5-AF39-BF78E720538A} - System32\Tasks\Update Service for Youtube AdBlock => C:\Program Files\Youtube AdBlock\8ZEzCfP.exe [2016-11-08] () <==== ATTENTION
    Task: {38B7369F-7455-45D1-9B7C-FDFD2237B7B2} - System32\Tasks\ChelfNotify Task => C:\ProgramData\ChelfNotify\BrowserUpdate.exe [2016-06-30] (Tencent) <==== ATTENTION
    Task: {5E1DFED7-0350-44DC-9362-95B4609F6654} - System32\Tasks\Chohigh Cloud => C:\Program Files\Reerdisy\pers.exe
    Task: {9AB15F24-CBA8-40BB-93DA-88E6123D4EE0} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
    Task: {B39C4203-465E-4236-BBD3-A6DE2F2CEA30} - System32\Tasks\Baidu Antivirus Update => C:\Program Files\Baidu Security\Baidu Antivirus\5.6.2.147365.0\BavUpdater.exe [2015-07-14] (Baidu, Inc.)
    Task: {BCF07312-89F4-4EF6-BDF3-EC0ABD19E71E} - System32\Tasks\811b75f1da9ca1826db1da0652e8e05d => Rundll32.exe "C:\Program Files\Netflix Trailer Button Adder\oldigq.dll",e62dc6c6547f46bda862da2d05af6862 <==== ATTENTION
    Task: C:\Windows\Tasks\Update Service for Youtube AdBlock.job => C:\Program Files\Youtube AdBlock\8ZEzCfP.exe <==== ATTENTION
    Task: C:\Windows\Tasks\Update Service for Youtube AdBlock2.job => C:\Program Files\Youtube AdBlock\8ZEzCfP.exe <==== ATTENTION
    ShortcutWithArgument: C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.amisites.com/?type=sc&ts=1478780084&z=d7497a5c5681f8feda74319g7z1m3b5mfb0e4e5m5e&from=che0812&uid=WDCXWD3200AVVS-63L2B0_WD-WCAV1361968519685
    ShortcutWithArgument: C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qt 5.5.1\5.5\MinGW 4.9.2 (32-bit)\Qt 5.5 for Desktop (MinGW 4.9.2 32 bit).lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /A /Q /K C:\Qt\Qt5.5.1\5.5\mingw492_32\bin\qtenv2.bat
    ShortcutWithArgument: C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.amisites.com/?type=sc&ts=1478780084&z=d7497a5c5681f8feda74319g7z1m3b5mfb0e4e5m5e&from=che0812&uid=WDCXWD3200AVVS-63L2B0_WD-WCAV1361968519685
    ShortcutWithArgument: C:\Users\pc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.amisites.com/?type=sc&ts=1478780084&z=d7497a5c5681f8feda74319g7z1m3b5mfb0e4e5m5e&from=che0812&uid=WDCXWD3200AVVS-63L2B0_WD-WCAV1361968519685
    ShortcutWithArgument: C:\Users\pc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.amisites.com/?type=sc&ts=1478780084&z=d7497a5c5681f8feda74319g7z1m3b5mfb0e4e5m5e&from=che0812&uid=WDCXWD3200AVVS-63L2B0_WD-WCAV1361968519685
    ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files\Firefox\Firefox.exe (Mozilla Corporation) -> hxxp://www.amisites.com/?type=sc&ts=1479122642&z=1bbbb4b3f43a1f837c5b6cag7zam3tcg3o9o1q4z6g&from=che0812&uid=WDCXWD3200AVVS-63L2B0_WD-WCAV1361968519685
    HKLM\...\Run: [Baidu Antivirus] => C:\Program Files\Baidu Security\Baidu Antivirus\5.6.2.147365.0\BavTray.exe [2553328 2015-07-14] (Baidu, Inc.)
    HKLM\...\Providers\02ee4hfv: C:\UsbFix\\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\0oxpy42r: C:\Users\pc\AppData\LocalLow\Youtube AdBlock\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\0u9npv3j: C:\build-MDVRPTW_bis-Desktop_Qt_5_5_1_MinGW_32bit-Release\\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\14rfrgl6: C:\Users\pc\AppData\LocalLow\Youtube AdBlock1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\1782sei5: C:\build-MDVRPTW_bis-Desktop_Qt_5_5_1_MinGW_32bit-Release\\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\1924vhbm: C:\Users\pc\AppData\Local\Google\Chrome\User Data1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\20lrmiks: C:\build-MDVRPTW_bis-Desktop_Qt_5_5_1_MinGW_32bit-Release1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\2y7bt77o: C:\Users\pc\AppData\Local\Google\Chrome\User Data\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\31wdu25i: C:\1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\3v8d3uel: C:\Program Files\Youtube AdBlock1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\4vaa967m: C:\\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\4y1d5dh2: C:\Users\pc\AppData\Local\Temp1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\5dgkcu7v: C:\Users\pc\AppData\Local\Temp1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\5yqel1t8: C:\Empire Earth 1 Gold Edition\\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\7ehuep58: C:\Empire Earth 1 Gold Edition\\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\7nfgwneu: C:\UsbFix1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\8uznueuq: C:\Users\pc\AppData\Local\Google\Chrome\User Data\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\9m7u9klf: C:\build-MDVRPTW_bis-Desktop_Qt_5_5_1_MinGW_32bit-Release1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\a9ub1nso: C:\Users\pc\AppData\Roaming\Opera Software\Opera Stable1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\amqm3wgy: C:\UsbFix1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\aywya2hf: C:\Program Files\Mozilla Firefox\browser\features1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\c00uhjej: C:\Windows\Temp1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\chtc1ui0: C:\dvbdream\\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\d5l9zdpm: C:\Empire Earth 1 Gold Edition1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\dctzfqea: C:\build-MDVRPTW_bis-Desktop_Qt_5_5_1_MinGW_32bit-Release\\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\dxpc9zq9: C:\Program Files\Youtube AdBlock1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\dy91brro: C:\Users\pc\AppData\Local\Temp1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\e75e1rsk: C:\Program Files\Mozilla Firefox\browser\features\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\ewdwwgb7: C:\UsbFix1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\gfhwbcgl: C:\1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\gwttnulj: C:\\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\h079g01u: C:\Users\pc\AppData\Local\Temp\local32spl.dll
    HKLM\...\Providers\hmvcjfpk: C:\Program Files\Mozilla Firefox\browser\features\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\htbhty57: C:\UsbFix\\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\i2zlthn5: C:\Users\pc\AppData\Roaming\Opera Software\Opera Stable1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\icurnu8b: C:\Program Files\Youtube AdBlock1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\id7pqgvt: C:\Empire Earth 1 Gold Edition1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\imaycwgr: C:\dvbdream1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\jz5fqnqc: C:\Users\pc\AppData\Local\Google\Chrome\User Data1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\k4e67xzt: C:\dvbdream1\local32spl.dll [145408 2016-11-08] ()
    S3 BdSandboxSrv; C:\Program Files\Baidu Security\Baidu Antivirus\5.6.2.147365.0\BdSandboxSrv.exe [X]
    S2 ed2kidle; "C:\Program Files\amuleC\ed2k.exe" -downloadwhenidle [X]
    R2 winsaber; C:\Program Files\WinSaber\WinSaber.exe [477400 2016-09-22] ()
    R2 VacationUpdate; C:\Windows\System32\devoscommand.dll [414488 2010-11-20] ()
    R2 Veletplerpitain; C:\Program Files\Reerdisy\ChhEng.dll [273408 2016-11-08] () [Fichier non signé]
    R2 Archer; C:\Program Files\WinArcher\Archer.dll [358912 2016-11-07] () [Fichier non signé]
    R2 BavSvc; C:\Program Files\Baidu Security\Baidu Antivirus\5.6.2.147365.0\BavSvc.exe [2805208 2015-07-14] (Baidu, Inc.)
    R2 BHipsSvc; C:\Program Files\Baidu Security\Baidu Antivirus\5.6.2.147365.0\BHipsSvc.exe [544032 2015-07-14] (Baidu, Inc.)
    S3 BsrSvc; C:\Program Files\Baidu Security\Baidu Antivirus\BavAdvTools2\128B4BEC-5D89-43AD-BAA8-207084AA0E4F\tool\BsrSvc.exe [3503416 2015-07-08] (Baidu, Inc.)
    R3 bdark; C:\Windows\system32\drivers\bdark.sys [82376 2015-04-27] ()
    S3 BdSandbox; C:\Windows\System32\drivers\BdSandbox.sys [197624 2015-03-05] (Baidu, Inc.)
    R1 Bfilter; C:\Windows\System32\drivers\Bfilter.sys [51144 2015-07-14] (Baidu, Inc.)
    R1 Bfmon; C:\Windows\System32\drivers\Bfmon.sys [31176 2015-07-14] (Baidu, Inc.)
    R0 Bhbase; C:\Windows\System32\drivers\Bhbase.sys [74888 2015-07-14] (Baidu, Inc.)
    S3 BHipsEx; C:\Windows\System32\drivers\BHipsEx.sys [149960 2015-07-14] (Baidu, Inc.)
    R1 Bnbase; C:\Windows\System32\drivers\bnbasex.sys [75432 2015-07-14] (Baidu, Inc.)
    R1 Bndef; C:\Windows\System32\drivers\bndef.sys [462152 2015-07-14] (Baidu, Inc.)
    R3 BNmon; C:\Program Files\Baidu Security\Baidu Antivirus\5.6.2.147365.0\Bnmon.sys [84936 2015-07-14] (Baidu, Inc.)
    R1 Bprotect; C:\Windows\System32\drivers\Bprotect.sys [197064 2015-07-14] (Baidu, Inc.)
    2016-11-10 13:14 - 2016-11-16 12:02 - 00000003 _____ C:\Windows\system32\hoewmds
    2016-11-10 13:14 - 2016-11-16 12:02 - 00000000 _____ C:\Users\Public\Documents\temp.dat
    2016-11-10 13:14 - 2016-11-10 13:15 - 00000000 ____D C:\Program Files\UvConverter
    2016-11-10 13:14 - 2016-11-10 13:14 - 00000000 ____D C:\Users\pc\AppData\Roaming\fibfi
    2016-11-09 21:10 - 2016-11-09 21:10 - 00001272 _____ C:\Users\pc\Desktop\photoFXlab (32-bit).lnk
    2016-11-09 21:10 - 2016-11-09 21:10 - 00000000 ____D C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Topaz Labs
    2016-11-09 21:10 - 2016-11-09 21:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Topaz Labs
    2016-11-09 21:08 - 2016-11-09 21:09 - 00000000 ____D C:\Program Files\Topaz Labs
    2016-11-09 21:08 - 2016-11-09 21:09 - 00000000 ____D C:\Program Files\Common Files\Topaz Labs
    2016-11-09 21:07 - 2016-11-09 21:07 - 00000000 ____D C:\Users\pc\AppData\Local\PackageAware
    2016-11-09 11:21 - 2016-11-09 11:21 - 00002621 _____ C:\Users\pc\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
    2016-11-09 11:20 - 2016-11-16 15:09 - 00000000 ____D C:\Users\pc\AppData\Roaming\uTorrent
    2016-11-08 23:46 - 2016-11-16 12:02 - 00000000 ____D C:\ProgramData\ChelfNotify
    2016-11-08 23:46 - 2016-11-11 06:22 - 00000000 ____D C:\ProgramData\WinSAPSvc
    2016-11-08 23:46 - 2016-11-08 23:46 - 00000000 ____D C:\Program Files\WinArcher
    2016-11-08 15:46 - 2016-11-15 15:32 - 00000000 ____D C:\Users\pc\AppData\LocalLow\Youtube AdBlock
    2016-11-08 15:46 - 2016-11-09 05:57 - 00000000 ___HD C:\Windows\Temp1
    2016-11-08 15:46 - 2016-11-09 05:57 - 00000000 ___HD C:\Users\pc\AppData\LocalLow\Youtube AdBlock1
    2016-11-08 15:46 - 2016-11-09 05:57 - 00000000 ___HD C:\Users\pc\AppData\Local\Temp1
    2016-11-08 15:46 - 2016-11-09 05:57 - 00000000 ___HD C:\UsbFix1
    2016-11-08 15:46 - 2016-11-09 05:57 - 00000000 ___HD C:\Program Files\Youtube AdBlock1
    2016-11-08 11:46 - 2016-11-08 11:46 - 00000000 ____D C:\ProgramData\Avira
    2016-11-08 11:46 - 2016-11-08 11:46 - 00000000 ____D C:\ProgramData\Avg
    2016-11-08 11:46 - 2016-11-08 11:46 - 00000000 ____D C:\ProgramData\AVAST Software
    2016-11-08 11:45 - 2016-11-16 11:45 - 00000304 _____ C:\Windows\Tasks\Update Service for Youtube AdBlock2.job
    2016-11-08 11:45 - 2016-11-08 11:45 - 00000000 ____D C:\Users\Public\Thunder Network
    2016-11-08 11:45 - 2016-11-08 11:45 - 00000000 ____D C:\ProgramData\Thunder Network
    2016-11-08 11:44 - 2016-11-16 08:47 - 00000304 _____ C:\Windows\Tasks\Update Service for Youtube AdBlock.job
    2016-11-08 11:44 - 2016-11-16 06:05 - 00000000 ____D C:\Program Files\Reerdisy
    2016-11-08 11:44 - 2016-11-09 05:57 - 00000000 ____D C:\Users\pc\AppData\Roaming\Rukisyreitse
    2016-11-08 11:44 - 2016-11-09 05:57 - 00000000 ____D C:\Program Files\Youtube AdBlock
    2016-11-08 11:44 - 2016-11-08 11:46 - 00000000 ____D C:\Users\pc\AppData\Local\Anamay
    2016-11-08 11:37 - 2016-11-08 11:46 - 00000000 ____D C:\Program Files\Nik Software
    2016-11-08 11:37 - 2016-11-08 11:37 - 00000000 ____D C:\Users\pc\AppData\Local\Nik Software
    2016-11-08 11:37 - 2016-11-08 11:37 - 00000000 ____D C:\ProgramData\Nik Software
    2016-11-05 09:55 - 2016-11-05 09:55 - 00000000 ____D C:\Users\pc\AppData\Local\Tempzxpsigna669486a06e2828d
    2016-11-05 09:54 - 2016-11-05 09:54 - 00000000 ____D C:\Users\pc\AppData\Local\Tempzxpsignd4ce459a2c29c1de
    2016-11-05 09:53 - 2016-11-05 09:53 - 00000000 ____D C:\Users\pc\AppData\Local\Tempzxpsigne2cef61f47c551b5
    2016-11-05 09:53 - 2016-11-05 09:53 - 00000000 ____D C:\Users\pc\AppData\Local\Tempzxpsign04cd0a75be99a254
    HKLM\...\Providers\kcbahm9l: C:\dvbdream1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\lw206h2b: C:\Users\pc\AppData\LocalLow\Youtube AdBlock1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\lyl921fv: C:\Windows\Temp1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\mspuasb4: C:\Users\pc\AppData\Roaming\Opera Software\Opera Stable\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\nmd0qptj: C:\Empire Earth 1 Gold Edition1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\o2rst54a: C:\Users\pc\AppData\LocalLow\Youtube AdBlock1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\o8fv5hkv: C:\Windows\Temp\local32spl.dll
    HKLM\...\Providers\p4uomspw: C:\Program Files\Mozilla Firefox\browser\features1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\p8jhooi6: C:\build-MDVRPTW_bis-Desktop_Qt_5_5_1_MinGW_32bit-Release1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\pdtqczgx: C:\dvbdream\\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\pud6zkry: C:\Users\pc\AppData\Roaming\Opera Software\Opera Stable\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\qdb7j9gg: C:\Program Files\Mozilla Firefox\browser\features\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\qohg9zo9: C:\Users\pc\AppData\Roaming\Opera Software\Opera Stable\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\rchthkaq: C:\Users\pc\AppData\Roaming\Opera Software\Opera Stable1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\rm7mp43q: C:\Windows\Temp\local32spl.dll
    HKLM\...\Providers\rrqh5718: C:\Windows\Temp\local32spl.dll
    HKLM\...\Providers\sjq64duw: C:\UsbFix\\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\t0mvczaq: C:\Program Files\Youtube AdBlock\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\t1def400: C:\Users\pc\AppData\Local\Google\Chrome\User Data\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\t41900hu: C:\Windows\Temp1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\t59edtkq: C:\Users\pc\AppData\LocalLow\Youtube AdBlock\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\t86qhlb8: C:\1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\twapedzi: C:\Users\pc\AppData\Local\Temp\local32spl.dll
    HKLM\...\Providers\uo68ui6x: C:\Program Files\Mozilla Firefox\browser\features1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\uy8igtoo: C:\Users\pc\AppData\Local\Temp\local32spl.dll
    HKLM\...\Providers\wvfsojkf: C:\\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\x7vg2hkq: C:\dvbdream\\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\xuecrlvc: C:\Program Files\Youtube AdBlock\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\yqojjsed: C:\Users\pc\AppData\LocalLow\Youtube AdBlock\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\z27t95u3: C:\Empire Earth 1 Gold Edition\\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\ze17dg2e: C:\Users\pc\AppData\Local\Google\Chrome\User Data1\local32spl.dll [145408 2016-11-08] ()
    HKLM\...\Providers\zpfg5qv3: C:\Program Files\Youtube AdBlock\local32spl.dll [145408 2016-11-08] ()
    ShellExecuteHooks:  - {807CDEA6-9EC1-11E6-913B-64006A5CFC23} - C:\Users\pc\AppData\Roaming\Rukisyreitse\Anedidom.dll Pas de fichier [ ]
    Hosts:
    EmptyTemp:
    RemoveProxy:
    Reboot:


    Une fois, le texte collé dans le Bloc-notes,
    Menu "Fichier" puis "Enregistrer sous",
    A gauche, place toi sur le Bureau,
    Dans le champs en bas, nom du fichier mets : fixlist.txt
    Clique sur "Enregistrer", cela va créer fixlist.txt sur le Bureau.

    Relance FRST et clique sur le bouton "Corriger / Fix"
    Un redémarrage sera peut-être nécessaire ( pas obligatoire )
    Un fichier texte apparait, copie/colle le contenu ici dans un nouveau message.

    Redémarre l'ordinateur.

    2°)
    Réinitialise manuellement tes navigateurs (Pas de nettoyage zoek ou ZHPCleaner) :

    0

Discussions similaires

Virus Amisites
Claude13006 -
Malekal_morte- -

5 réponses