CHROMIUM fait toujours parler de lui ! Fermé

Question

Bonjour, 

Merci pour toutes ces infos utiles mêmes 1000 ans après !!
Voici le rapport édita via AdwCleaner, je m'apprête à continuer les démarches selon vos explications.
Merci encore. SB

# -------------------------------
# Malwarebytes AdwCleaner 7.2.7.0
# -------------------------------
# Build:    01-30-2019
# Database: 2019-02-19.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    02-20-2019
# Duration: 00:00:24
# OS:       Windows 10 Home
# Cleaned:  40
# Failed:   0

 [ Services ] *****

No malicious services cleaned.

 [ Folders ] *****

Deleted       C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Tonic
Deleted       C:\Program Files\Driver Tonic
Deleted       C:\Program Files\WebDiscoverBrowser
Deleted       C:\Windows\SysWOW64\config\systemprofile\AppData\Local\WebDiscoverBrowser
Deleted       C:\Users\Sabrina\AppData\Local\WebDiscoverBrowser
Deleted       C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Win Tonic
Deleted       C:\Program Files\Win Tonic
Deleted       C:\ProgramData\pctonics.com
Deleted       C:\Users\Sabrina\AppData\Roaming\pctonics.com

 [ Files ] *****

Deleted       C:\Users\Public\Desktop\Driver Tonic.lnk
Deleted       C:\Users\Public\Desktop\Win Tonic.lnk

 [ DLL ] *****

No malicious DLLs cleaned.

 [ WMI ] *****

No malicious WMI cleaned.

 [ Shortcuts ] *****

No malicious shortcuts cleaned.

 [ Tasks ] *****

Deleted       C:\Windows\System32\Tasks\Driver Tonic_Logon
Deleted       C:\Windows\System32\Tasks\WebDiscover Browser Update Task
Deleted       C:\Windows\System32\Tasks\WebDiscover Browser Launch Task
Deleted       C:\Windows\System32\Tasks\Win Tonic_Logon

 [ Registry ] *****

Deleted       HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4C7CA6F1-4691-449D-B574-559726CDA825}_is1
Deleted       HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0D46970-7EA2-46FF-8814-8155648F85AA} 
Deleted       HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Tonic_Logon
Deleted       HKLM\Software\Microsoft\Windows\CurrentVersion\Run|WebDiscoverBrowser
Deleted       HKU\S-1-5-18\Software\WebDiscoverBrowser
Deleted       HKCU\Software\WebDiscoverBrowser
Deleted       HKU\.DEFAULT\Software\WebDiscoverBrowser
Deleted       HKLM\Software\Wow6432Node\WebDiscoverBrowser
Deleted       HKLM\Software\WebDiscoverBrowser
Deleted       HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{fd13f4a2-b0d8-4cad-9ccf-d4128eaf25ff}_is1
Deleted       HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9499DC45-9537-4804-AA91-6766D161640F} 
Deleted       HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9499DC45-9537-4804-AA91-6766D161640F} 
Deleted       HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WebDiscover Browser Update Task
Deleted       HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DDE03427-2AC6-44BF-8182-99CB1649FF82} 
Deleted       HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WebDiscover Browser Launch Task
Deleted       HKCU\Software\Microsoft\Internet Explorer\Main|Start Page
Deleted       HKLM\Software\cGN0b25pY3MuY29t
Deleted       HKCU\Software\pctonics.com
Deleted       HKLM\Software\pctonics.com
Deleted       HKLM\Software\wtc-pr
Deleted       HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{58C1E04C-4538-46EF-93C7-788C935E0031}_is1
Deleted       HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EBBFFB4A-702A-48C9-BED0-4B1645FAA06F} 
Deleted       HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Win Tonic_Logon

 [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

 [ Chromium URLs ] *****

Deleted       Vosteran
Deleted       Softonic FR

 [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

 [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.



[+] Delete Tracing Keys
[+] Reset Winsock



AdwCleaner[S00].txt - [4835 octets] - [20/02/2019 09:40:22]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Malekal_morte- · Answer

Salut,

Ca semble être des restes,

 Pour vérifier ton ordinateur, pour d'éventuels infections et avoir un état général du système :

Suis le tutoriel FRST en cliquant sur ce lien bleu. ( prends le temps de lire attentivement - tout y est bien expliqué ).

Télécharge et lance le scan FRST, 
Attendre la fin du scan, un message indique que l'analyse est terminée.

Trois rapports FRST seront générés :

 FRST.txt
 Shortcut.
 Additionnal.txt

Envoie ces 3 rapports sur le site https://pjjoint.malekal.com/ et en retour donne les 3 liens pjjoint qui mènent aux rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.

(Les liens bleus mènent à des tutoriels explicatifs pas à pas, clic dessus pour avoir les instructions plus précises à suivre).

CHROMIUM fait toujours parler de lui !

1 réponse

Discussions similaires