Adw cleaner bloqué par administrateur

Dory -  
Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   -
Bonsoir,

Je suis sur l'ordinateur d'une amie qui a des soucis avec son ordinateur. Je suis dans l'incapacité d'utiliser adw cleaner. J'ai utilisé frst, voici le rapport.

Shorcut : https://pjjoint.malekal.com/files.php?id=20171104_y14e15d15v15t8
Additional : https://pjjoint.malekal.com/files.php?id=20171104_e8q14o13d10r6
FRST : https://pjjoint.malekal.com/files.php?id=FRST_20171104_s5j10b5n14y8

En espérant que l'un d'entre vous puisse m'aider. Merci d'avance

2 réponses

  1. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
     
    Voici la correction à effectuer avec FRST. Tu peux t'aider de cette note explicative avec des captures d'écran.

    Ouvre le bloc-notes : Touche Windows + R,
    Dans le champs "Exécuter", saisir notepad et OK.
    Copie/Colle dedans ce qui suit :

    CreateRestorePoint:
    CloseProcesses:
    ShortcutWithArgument: C:\Users\sainp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www%2dsearching.com/?prd=set_epf&s=hatzbcnbl1au,b5ecd20c-e998-4408-82b5-110cb14b2671,
    ShortcutWithArgument: C:\Users\sainp\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dsearching.com/?prd=set_epf&s=hatzbcnbl1au,b5ecd20c-e998-4408-82b5-110cb14b2671,
    ShortcutWithArgument: C:\Users\sainp\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> url,FileProtocolHandler "hxxp://www.mail.ru/cnt/20775012?gp=811008"
    ShortcutWithArgument: C:\Users\sainp\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome (2).lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dsearching.com/?prd=set_epf&s=hatzbcnbl1au,b5ecd20c-e998-4408-82b5-110cb14b2671,
    ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Booking.com.lnk -> C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe () -> hxxp://www.booking.com/index.html?aid=398438&label=square
    ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FullHD Editeur Vidéo LoiLoScope Télécharger.lnk -> C:\Program Files (x86)\LoiLo\LoiLoScope Download\WebShortcut.exe () -> hxxp://loilo.tv/product/20?partner_id=14
    ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dsearching.com/?prd=set_epf&s=hatzbcnbl1au,b5ecd20c-e998-4408-82b5-110cb14b2671,
    ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www%2dsearching.com/?prd=set_epf&s=hatzbcnbl1au,b5ecd20c-e998-4408-82b5-110cb14b2671,
    2017-11-03 11:54 - 2017-11-03 11:54 - 000023762 _____ C:\WINDOWS\System32\Tasks\{057E0A47-0A0B-0479-0D11-790F7A7A110F}
    2017-11-03 11:54 - 2017-11-03 11:54 - 000004182 _____ C:\WINDOWS\System32\Tasks\{DD08C813-6AA3-7FB8-F433-BA450B2EC8A1}
    2017-11-03 11:54 - 2017-11-03 11:54 - 000003882 _____ C:\WINDOWS\System32\Tasks\{6B976E81-E3FF-30E8-40F9-089325F68B2B}
    2017-11-03 11:54 - 2017-11-03 11:54 - 000000000 ____D C:\ProgramData\9308f940-0ae7-0
    2017-11-03 11:54 - 2017-11-03 11:54 - 000000000 ____D C:\ProgramData\50eadfd1
    2017-11-03 11:54 - 2017-11-03 11:54 - 000000000 ____D C:\ProgramData\{74803818-212c-0}
    2017-11-03 11:54 - 2017-11-03 11:54 - 000000000 ____D C:\ProgramData\{43A66E61-F40D-D9CA-C89A-1F3A6F302D1E}
    2017-11-03 11:54 - 2017-11-03 11:54 - 000000000 ____D C:\ProgramData\{163919f3-212c-1}
    2017-10-30 20:41 - 2017-10-30 20:41 - 000003214 _____ C:\WINDOWS\System32\Tasks\zjwPaeaadZaNwF
    2017-10-30 20:41 - 2017-10-30 20:41 - 000002864 _____ C:\WINDOWS\System32\Tasks\PjDfytumxbayONn2
    2017-10-30 20:40 - 2017-11-01 21:25 - 000000000 ____D C:\Program Files (x86)\ProxyGate
    2017-10-30 20:40 - 2017-10-30 20:44 - 000000320 _____ C:\WINDOWS\Tasks\PjDfytumxbayONn.job
    2017-10-30 20:40 - 2017-10-30 20:40 - 000002640 _____ C:\WINDOWS\System32\Tasks\PjDfytumxbayONn
    2017-10-30 20:40 - 2017-10-30 20:40 - 000000290 __RSH C:\ProgramData\ntuser.pol
    2017-10-30 20:40 - 2017-10-30 20:40 - 000000000 ____D C:\Users\sainp\AppData\Roaming\ChromeHelper
    2017-10-30 20:39 - 2017-11-02 06:58 - 000000000 ____D C:\Users\sainp\AppData\Local\WindowsSY
    2017-10-30 20:39 - 2017-10-30 20:39 - 000016808 _____ C:\WINDOWS\System32\Tasks\CadisTide PC
    2017-10-30 20:39 - 2017-10-30 20:39 - 000000000 ____D C:\WINDOWS\System32\Tasks\WindowsSY
    2017-10-30 20:38 - 2017-10-31 12:41 - 000003344 _____ C:\WINDOWS\System32\Tasks\IBUpd2
    2017-10-29 15:49 - 2017-10-29 15:49 - 000766464 _____ () C:\WINDOWS\system32\bi3.exe
    2017-10-29 12:14 - 2017-10-29 12:14 - 000016802 _____ C:\WINDOWS\System32\Tasks\MathPlugin
    2017-10-29 12:07 - 2017-10-31 12:17 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
    2017-10-29 11:46 - 2017-10-29 11:46 - 000016840 _____ C:\WINDOWS\System32\Tasks\GurtCopyshog Tool
    2017-10-29 11:40 - 2017-10-29 11:40 - 000000000 ____D C:\ProgramData\Microleaves
    2017-10-29 11:38 - 2017-10-29 11:42 - 000000414 _____ C:\WINDOWS\Tasks\Updater_Online_Application.job
    2017-10-29 11:38 - 2017-10-29 11:42 - 000000382 _____ C:\WINDOWS\Tasks\Online Application V2G3.job
    2017-10-29 11:38 - 2017-10-29 11:42 - 000000382 _____ C:\WINDOWS\Tasks\Online Application V2G2.job
    2017-10-29 11:38 - 2017-10-29 11:42 - 000000382 _____ C:\WINDOWS\Tasks\Online Application V2G1.job
    2017-10-29 11:38 - 2017-10-29 11:38 - 000003308 _____ C:\WINDOWS\System32\Tasks\Updater_Online_Application
    2017-10-29 11:38 - 2017-10-29 11:38 - 000003272 _____ C:\WINDOWS\System32\Tasks\Online Application V2G3
    2017-10-29 11:38 - 2017-10-29 11:38 - 000003272 _____ C:\WINDOWS\System32\Tasks\Online Application V2G2
    2017-10-29 11:38 - 2017-10-29 11:38 - 000003272 _____ C:\WINDOWS\System32\Tasks\Online Application V2G1
    2017-10-29 11:38 - 2017-10-29 11:38 - 000000000 ____D C:\Program Files (x86)\Microleaves
    2017-10-29 11:37 - 2017-10-29 11:37 - 000031449 _____ C:\WINDOWS\2bf43438a3957268e2baf49ea37f540b.ps1
    2017-10-29 11:37 - 2017-10-29 11:37 - 000000000 ____D C:\Users\sainp\AppData\Local\AdvinstAnalytics
    2017-10-29 11:36 - 2017-11-04 18:50 - 000000000 ____D C:\Program Files\Common Files\Noobzo
    2017-10-29 11:36 - 2017-10-29 11:36 - 000003674 _____ C:\WINDOWS\System32\Tasks\FastDataX Task
    2017-10-29 11:36 - 2017-10-29 11:36 - 000000000 ____D C:\Users\sainp\AppData\Roaming\Microleaves
    2017-10-29 11:35 - 2017-10-30 20:35 - 000187904 _____ C:\WINDOWS\rsrcs.dll
    2017-10-29 11:35 - 2017-10-30 20:35 - 000004252 _____ C:\WINDOWS\System32\Tasks\SMW_P
    2017-10-29 11:35 - 2017-10-29 11:36 - 000003300 _____ C:\WINDOWS\System32\Tasks\322467d30e22349d3b422fe073581bdc
    2017-10-29 11:35 - 2017-10-29 11:35 - 000000000 ____D C:\WINDOWS\SysWOW64\SSL
    2017-10-29 11:35 - 2017-10-29 11:35 - 000000000 ____D C:\Program Files (x86)\FastDataX
    2017-10-29 11:32 - 2017-10-29 11:32 - 000016838 _____ C:\WINDOWS\System32\Tasks\Earth Excel to PDF
    2017-10-29 11:24 - 2017-10-29 11:35 - 000000000 ____D C:\Users\sainp\AppData\Roaming\vnlgp
    2017-10-29 11:23 - 2017-10-29 11:23 - 000016824 _____ C:\WINDOWS\System32\Tasks\Deer Day Stylus
    2017-10-29 11:22 - 2017-10-29 11:31 - 000930816 _____ C:\Users\sainp\AppData\Local\po.db
    2017-10-29 11:22 - 2017-10-29 11:22 - 000140800 _____ C:\Users\sainp\AppData\Local\installer.dat
    2017-10-29 11:22 - 2017-10-29 11:22 - 000011568 _____ C:\Users\sainp\AppData\Local\InstallationConfiguration.xml
    2017-10-29 11:22 - 2017-10-29 11:22 - 000000000 ____D C:\Users\Public\Documents\XMUpdate
    2017-10-29 11:21 - 2017-10-31 20:57 - 000000000 ____D C:\Users\sainp\AppData\Local\AdService
    2017-10-29 11:21 - 2017-10-29 11:54 - 000000000 ____D C:\Users\sainp\AppData\Roaming\Event Monitor
    2017-10-29 11:20 - 2017-10-29 11:20 - 000000000 ____D C:\Program Files (x86)\pccleanplus
    2017-10-27 00:13 - 2017-10-27 00:13 - 000109144 _____ (L00OHO) C:\WINDOWS\system32\Drivers\e2cc13fcac7e1da6f6298ac5fd8c1a22.sys
    2017-10-27 00:13 - 2017-10-27 00:13 - 000039808 _____ C:\WINDOWS\uninstaller.dat
    R1 e2cc13fcac7e1da6f6298ac5fd8c1a22; C:\WINDOWS\system32\drivers\e2cc13fcac7e1da6f6298ac5fd8c1a22.sys [109144 2017-10-27] (L00OHO) <==== ATTENTION
    R1 wfcre; C:\WINDOWS\System32\drivers\wfcre.sys [132992 2017-09-15] ()
    S2 322467d30e22349d3b422fe073581bdc; C:\Program Files\322467d30e22349d3b422fe073581bdc\e9ffbc29729093cbe547ce25c4b972d4.exe [X]
    S2 pgt_svc; C:\Program Files (x86)\ProxyGate\MainService.exe [X] <==== ATTENTION
    HKU\S-1-5-21-2010164317-1706345433-2131707534-1002\...\Run: [uTorrent] => C:\Users\sainp\AppData\Roaming\uTorrent\uTorrent.exe [1982144 2017-09-29] (BitTorrent Inc.)
    HKU\S-1-5-21-2010164317-1706345433-2131707534-1002\...\Run: [rtsnx1Nl45kY.exe] => C:\ProgramData\7c47632bfce0488aa1178aa27d05c4c4\rtsnx1Nl45kY.exe
    HKU\S-1-5-21-2010164317-1706345433-2131707534-1002\...\Run: [kMK0H1sA.exe] => C:\Users\sainp\AppData\Roaming\8bba71386c76494098da047567084ac5\kMK0H1sA.exe
    HKU\S-1-5-21-2010164317-1706345433-2131707534-1002\...\MountPoints2: {3ef8a486-b949-11e5-9bd7-dc4a3e138e05} - H:\PMCsetup.exe
    GroupPolicy: Restriction - Chrome <==== ATTENTION
    GroupPolicy\User: Restriction <==== ATTENTION
    HKLM\...\Run: [vnlgp] => C:\Users\sainp\AppData\Roaming\vnlgp\vnlgp\start.cmd [214 2016-04-04] () <==== ATTENTION
    C:\Users\sainp\AppData\Roaming\vnlgp
    HKLM\ DisallowedCertificates: 03D22C9C66915D58C88912B64C1F984B8344EF09 (Comodo Security Solutions) <==== ATTENTION
    HKLM\ DisallowedCertificates: 0F684EC1163281085C6AF20528878103ACEFCAAB (F-Secure Corporation) <==== ATTENTION
    HKLM\ DisallowedCertificates: 1667908C9E22EFBD0590E088715CC74BE4C60884 (FRISK Software International/F-Prot) <==== ATTENTION
    HKLM\ DisallowedCertificates: 18DEA4EFA93B06AE997D234411F3FD72A677EECE (Bitdefender SRL) <==== ATTENTION
    HKLM\ DisallowedCertificates: 2026D13756EB0DB753DF26CB3B7EEBE3E70BB2CF (G DATA Software AG) <==== ATTENTION
    HKLM\ DisallowedCertificates: 249BDA38A611CD746A132FA2AF995A2D3C941264 (Malwarebytes Corporation) <==== ATTENTION
    HKLM\ DisallowedCertificates: 31AC96A6C17C425222C46D55C3CCA6BA12E54DAF (Symantec Corporation) <==== ATTENTION
    HKLM\ DisallowedCertificates: 331E2046A1CCA7BFEF766724394BE6112B4CA3F7 (Trend Micro) <==== ATTENTION
    HKLM\ DisallowedCertificates: 3353EA609334A9F23A701B9159E30CB6C22D4C59 (Webroot Inc.) <==== ATTENTION
    HKLM\ DisallowedCertificates: 373C33726722D3A5D1EDD1F1585D5D25B39BEA1A (SUPERAntiSpyware.com) <==== ATTENTION
    HKLM\ DisallowedCertificates: 3850EDD77CC74EC9F4829AE406BBF9C21E0DA87F (Kaspersky Lab) <==== ATTENTION
    HKLM\ DisallowedCertificates: 3D496FA682E65FC122351EC29B55AB94F3BB03FC (AVG Technologies CZ) <==== ATTENTION
    HKLM\ DisallowedCertificates: 4243A03DB4C3C15149CEA8B38EEA1DA4F26BD159 (PC Tools) <==== ATTENTION
    HKLM\ DisallowedCertificates: 42727E052C0C2E1B35AB53E1005FD9EDC9DE8F01 (K7 Computing Pvt Ltd) <==== ATTENTION
    HKLM\ DisallowedCertificates: 4420C99742DF11DD0795BC15B7B0ABF090DC84DF (Doctor Web Ltd.) <==== ATTENTION
    HKLM\ DisallowedCertificates: 4C0AF5719009B7C9D85C5EAEDFA3B7F090FE5FFF (Emsisoft Ltd) <==== ATTENTION
    HKLM\ DisallowedCertificates: 5240AB5B05D11B37900AC7712A3C6AE42F377C8C (Check Point Software Technologies Ltd.) <==== ATTENTION
    HKLM\ DisallowedCertificates: 5DD3D41810F28B2A13E9A004E6412061E28FA48D (Emsisoft Ltd) <==== ATTENTION
    HKLM\ DisallowedCertificates: 7457A3793086DBB58B3858D6476889E3311E550E (K7 Computing Pvt Ltd) <==== ATTENTION
    HKLM\ DisallowedCertificates: 76A9295EF4343E12DFC5FE05DC57227C1AB00D29 (BullGuard Ltd) <==== ATTENTION
    HKLM\ DisallowedCertificates: 775B373B33B9D15B58BC02B184704332B97C3CAF (McAfee) <==== ATTENTION
    HKLM\ DisallowedCertificates: 872CD334B7E7B3C3D1C6114CD6B221026D505EAB (Comodo Security Solutions) <==== ATTENTION
    HKLM\ DisallowedCertificates: 88AD5DFE24126872B33175D1778687B642323ACF (McAfee) <==== ATTENTION
    HKLM\ DisallowedCertificates: 9132E8B079D080E01D52631690BE18EBC2347C1E (Adaware Software) <==== ATTENTION
    HKLM\ DisallowedCertificates: 982D98951CF3C0CA2A02814D474A976CBFF6BDB1 (Safer Networking Ltd.) <==== ATTENTION
    HKLM\ DisallowedCertificates: 9A08641F7C5F2CCA0888388BE3E5DBDDAAA3B361 (Webroot Inc.) <==== ATTENTION
    HKLM\ DisallowedCertificates: 9C43F665E690AB4D486D4717B456C5554D4BCEB5 (ThreatTrack Security) <==== ATTENTION
    HKLM\ DisallowedCertificates: 9E3F95577B37C74CA2F70C1E1859E798B7FC6B13 (CURIOLAB S.M.B.A.) <==== ATTENTION
    HKLM\ DisallowedCertificates: A1F8DCB086E461E2ABB4B46ADCFA0B48C58B6E99 (Avira Operations GmbH & Co. KG) <==== ATTENTION
    HKLM\ DisallowedCertificates: A5341949ABE1407DD7BF7DFE75460D9608FBC309 (BullGuard Ltd) <==== ATTENTION
    HKLM\ DisallowedCertificates: A59CC32724DD07A6FC33F7806945481A2D13CA2F (ESET) <==== ATTENTION
    HKLM\ DisallowedCertificates: AB7E760DA2485EA9EF5A6EEE7647748D4BA6B947 (AVG Technologies CZ) <==== ATTENTION
    HKLM\ DisallowedCertificates: AD4C5429E10F4FF6C01840C20ABA344D7401209F (Avast Antivirus/Software) <==== ATTENTION
    HKLM\ DisallowedCertificates: AD96BB64BA36379D2E354660780C2067B81DA2E0 (Symantec Corporation) <==== ATTENTION
    HKLM\ DisallowedCertificates: B8EBF0E696AF77F51C96DB4D044586E2F4F8FD84 (Malwarebytes Corporation) <==== ATTENTION
    HKLM\ DisallowedCertificates: CDC37C22FE9272D8F2610206AD397A45040326B8 (Trend Micro) <==== ATTENTION
    HKLM\ DisallowedCertificates: D3F78D747E7C5D6D3AE8ABFDDA7522BFB4CBD598 (Kaspersky Lab) <==== ATTENTION
    HKLM\ DisallowedCertificates: DB303C9B61282DE525DC754A535CA2D6A9BD3D87 (ThreatTrack Security) <==== ATTENTION
    HKLM\ DisallowedCertificates: DB77E5CFEC34459146748B667C97B185619251BA (Avast Antivirus/Software) <==== ATTENTION
    HKLM\ DisallowedCertificates: E22240E837B52E691C71DF248F12D27F96441C00 (Total Defense, Inc.) <==== ATTENTION
    HKLM\ DisallowedCertificates: E513EAB8610CFFD7C87E00BCA15C23AAB407FCEF (AVG Technologies CZ) <==== ATTENTION
    HKLM\ DisallowedCertificates: ED841A61C0F76025598421BC1B00E24189E68D54 (Bitdefender SRL) <==== ATTENTION
    HKLM\ DisallowedCertificates: F83099622B4A9F72CB5081F742164AD1B8D048C9 (ESET) <==== ATTENTION
    HKLM\ DisallowedCertificates: FBB42F089AF2D570F2BF6F493D107A3255A9BB1A (Panda Security S.L) <==== ATTENTION
    HKLM\ DisallowedCertificates: FFFA650F2CB2ABC0D80527B524DD3F9FC172C138 (Doctor Web Ltd.) <==== ATTENTION
    Task: {01B43587-4EB4-4B4F-998D-2F7348D57DC4} - System32\Tasks\CadisTide PC => C:\WINDOWS\system32\rundll32.exe "C:\Program Files\CadisTide PC\CadisTide PC.dll",ezhDQrsNP <==== ATTENTION
    Task: {0B10B023-7B70-490C-911A-8E00D618EA87} - System32\Tasks\PjDfytumxbayONn => rundll32 "C:\Program Files (x86)\kqEuPYMaU\WpogKz.dll",#1
    Task: {15D248AB-6EF1-4CAF-9AE6-6F81BF96AA42} - System32\Tasks\GT-Adole => C:\WINDOWS\system32\rundll32.exe "C:\Program Files\GT-Adole\GT-Adole.dll",oUpNJvWaToLg <==== ATTENTION
    Task: {216CF197-C010-4693-AE8C-24A309E332DF} - System32\Tasks\Online Application V2G3 => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe [2017-02-07] (Microleaves LTD) <==== ATTENTION
    Task: {225DB607-32B4-451E-9138-9BEA40E38354} - System32\Tasks\Earth Excel to PDF => C:\WINDOWS\system32\rundll32.exe "C:\Program Files\Earth Excel to PDF\Earth Excel to PDF.dll",FzqzZP <==== ATTENTION
    Task: {37B32C67-1A2C-4079-B942-2F3FB0237A07} - System32\Tasks\Deer Day Stylus => C:\WINDOWS\system32\rundll32.exe "C:\Program Files\Deer Day Stylus\Deer Day Stylus.dll",MpWfXlYE <==== ATTENTION
    Task: {3DE291D2-3F21-48EC-9164-17A75B42E066} - System32\Tasks\Updater_Online_Application => C:\Program Files (x86)\Microleaves\Online Application\Online Application Updater.exe [2017-06-18] (Microleaves) <====
    Task: {4705E194-049F-4E18-BA9A-4FC51D87326D} - System32\Tasks\MathPlugin => C:\WINDOWS\system32\rundll32.exe "C:\Program Files\MathPlugin\MathPlugin.dll",bqHRRBJfYbhy <==== ATTENTION
    Task: {4BEDA75A-781F-4F38-A06D-D6A066501997} - System32\Tasks\{057E0A47-0A0B-0479-0D11-790F7A7A110F} => C:\WINDOWS\system32\WindowsPowershell\v1.0\powershell.exe -nologo -executionpolicy bypass -noninteractive -windowstyle hidden -EncodedCommand OwA7ACAAIAAgADsAIAA7ADsAOwA7ACAAIAAgADsAIAA7ADsAOwAgADsAIAAgACAAIAAkAEUAcgByAG8AcgBBAGMAdABpAG8AbgBQAHIAZQBmAGUAcgBlAG4AYwBlAD0AIgBzAHQAbwBwACIAOwAkAHMAYwA9ACIAUwBpAGwAZQBuAHQAbAB5AEMAbwBuAHQAaQBuAHUAZQAiADsAJABXAGEA (l'élément de données a 9644 caractères en plus). <==== ATTENTION
    Task: {50B5436A-9F27-4AE2-B2F7-16C175832D6D} - System32\Tasks\IBUpd2 => C:\Users\sainp\AppData\Local\BrowserAir\48.0.0.0\updater.exe <==== ATTENTION
    Task: {53E74B29-AFB5-4986-843E-DB1513FE7EA6} - System32\Tasks\PjDfytumxbayONn2 => rundll32 "C:\Program Files (x86)\kqEuPYMaU\WpogKz.dll",#1
    Task: {5754F7A2-BABB-4A34-A56A-7897F6E8BC70} - System32\Tasks\{6B976E81-E3FF-30E8-40F9-089325F68B2B} => C:\WINDOWS\system32\regsvr32.exe /s /n /i:"/rt" "C:\PROGRA~3\50eadfd1\3c66db1f.dll" <==== ATTENTION
    Task: {7EF7F727-0128-4580-A2B7-36EAE653D992} - System32\Tasks\SMW_P => C:\ProgramData\smp2.exe <==== ATTENTION
    Task: {8C1AB99E-17F2-4FDB-B848-A35DC8C5132A} - System32\Tasks\GurtCopyshog Tool => C:\WINDOWS\system32\rundll32.exe "C:\Program Files\GurtCopyshog Tool\GurtCopyshog Tool.dll",CQOsoKOxjI <==== ATTENTION
    Task: {902034BC-6BD0-4793-87EF-CCC84D037214} - System32\Tasks\zjwPaeaadZaNwF => rundll32 "C:\Program Files (x86)\JIdcnntTvnKU2\vWkpOocgSKhzQ.dll",#1
    Task: {91C06D22-D882-4978-8C8A-7F7D677FF45A} - System32\Tasks\WindowsSY\WindowsSY\WindowsSY => C:\Users\sainp\AppData\Local\WindowsSY\WindowsSY.exe [2017-10-23] () <==== ATTENTION
    Task: {D32E7FD8-5082-4F2B-BC9D-BA7EFE0F779C} - System32\Tasks\322467d30e22349d3b422fe073581bdc => sc start 322467d30e22349d3b422fe073581bdc <==== ATTENTION
    Task: {D843B665-05DF-4FCF-A024-41BD8DED5723} - System32\Tasks\FastDataX Task => C:\Program Files (x86)\FastDataX\fastdatax.exe [2017-10-27] () <==== ATTENTION
    Task: C:\WINDOWS\Tasks\Online Application V2G1.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
    Task: C:\WINDOWS\Tasks\Online Application V2G2.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
    Task: C:\WINDOWS\Tasks\Online Application V2G3.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
    Task: C:\WINDOWS\Tasks\PjDfytumxbayONn.job => C:\Program Files (x86)\kqEuPYMaU\WpogKz.dll
    Task: C:\WINDOWS\Tasks\Updater_Online_Application.job => C:\Program Files (x86)\Microleaves\Online Application\Online Application Updater.exe <==== ATTENTION
    Task: C:\WINDOWS\Tasks\WpsNotifyTask_Administrator.job => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5113\wtoolex\wpsnotify.exe
    Task: C:\WINDOWS\Tasks\WpsUpdateTask_Administrator.job => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5113\wtoolex\wpsupdate.exe

    EmptyTemp:
    RemoveProxy:
    Reboot:


    Une fois, le texte collé dans le Bloc-notes,
    Menu "Fichier" puis "Enregistrer sous",
    A gauche, place toi sur le Bureau,
    Dans le champs en bas, nom du fichier mets : fixlist.txt
    Clique sur "Enregistrer", cela va créer fixlist.txt sur le Bureau.

    Relance FRST et clique sur le bouton "Corriger / Fix"
    Un redémarrage sera peut-être nécessaire ( pas obligatoire )
    Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

    Redémarre l'ordinateur.

    2°)
    Réinitialise/Répare les navigateurs WEB concernés par les problèmes :

    3°)
    Termine par un nettoyage Malwarebytes - Tutoriel Malwarebytes Anti-Malware version gratuite

    4°)
    Vois ce que cela donne et si des améliorations ont eu lieu.
    Si ce n'est pas le cas, si tu as encore des pages de pubs intempestives, précise sur quel navigateur WEB.
    Refais un scan FRST et donne les nouveaux rapports via pjjoint.

    A désinstaller aussi, ça sert à rien ces programmes :
    CyberLink
    Jeux WildTangent
    Trojan Remover
    WildTangent Games App pour HP
    0
  2. Dorybis
     
    Bonjour,
    J'ai suivi l'étape du bloc notes et il me donne ça :
    https://pjjoint.malekal.com/files.php?id=20171106_i10v9p12x8f14

    Merci de ton aide.
    0
    1. Malekal_morte- Messages postés 178136 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 712
       
      ok fais le reste de la procédure.
      0