CHROMIUM fait toujours parler de lui !

SB -  
Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   -
Bonjour,

Merci pour toutes ces infos utiles mêmes 1000 ans après !!
Voici le rapport édita via AdwCleaner, je m'apprête à continuer les démarches selon vos explications.
Merci encore. SB

# -------------------------------
# Malwarebytes AdwCleaner 7.2.7.0
# -------------------------------
# Build: 01-30-2019
# Database: 2019-02-19.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 02-20-2019
# Duration: 00:00:24
# OS: Windows 10 Home
# Cleaned: 40
# Failed: 0
          • [ Services ] *****


No malicious services cleaned.
          • [ Folders ] *****


Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Tonic
Deleted C:\Program Files\Driver Tonic
Deleted C:\Program Files\WebDiscoverBrowser
Deleted C:\Windows\SysWOW64\config\systemprofile\AppData\Local\WebDiscoverBrowser
Deleted C:\Users\Sabrina\AppData\Local\WebDiscoverBrowser
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Win Tonic
Deleted C:\Program Files\Win Tonic
Deleted C:\ProgramData\pctonics.com
Deleted C:\Users\Sabrina\AppData\Roaming\pctonics.com
          • [ Files ] *****


Deleted C:\Users\Public\Desktop\Driver Tonic.lnk
Deleted C:\Users\Public\Desktop\Win Tonic.lnk
          • [ DLL ] *****


No malicious DLLs cleaned.
          • [ WMI ] *****


No malicious WMI cleaned.
          • [ Shortcuts ] *****


No malicious shortcuts cleaned.
          • [ Tasks ] *****


Deleted C:\Windows\System32\Tasks\Driver Tonic_Logon
Deleted C:\Windows\System32\Tasks\WebDiscover Browser Update Task
Deleted C:\Windows\System32\Tasks\WebDiscover Browser Launch Task
Deleted C:\Windows\System32\Tasks\Win Tonic_Logon
          • [ Registry ] *****


Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4C7CA6F1-4691-449D-B574-559726CDA825}_is1
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0D46970-7EA2-46FF-8814-8155648F85AA}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Tonic_Logon
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Run|WebDiscoverBrowser
Deleted HKU\S-1-5-18\Software\WebDiscoverBrowser
Deleted HKCU\Software\WebDiscoverBrowser
Deleted HKU\.DEFAULT\Software\WebDiscoverBrowser
Deleted HKLM\Software\Wow6432Node\WebDiscoverBrowser
Deleted HKLM\Software\WebDiscoverBrowser
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{fd13f4a2-b0d8-4cad-9ccf-d4128eaf25ff}_is1
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9499DC45-9537-4804-AA91-6766D161640F}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9499DC45-9537-4804-AA91-6766D161640F}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WebDiscover Browser Update Task
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DDE03427-2AC6-44BF-8182-99CB1649FF82}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WebDiscover Browser Launch Task
Deleted HKCU\Software\Microsoft\Internet Explorer\Main|Start Page
Deleted HKLM\Software\cGN0b25pY3MuY29t
Deleted HKCU\Software\pctonics.com
Deleted HKLM\Software\pctonics.com
Deleted HKLM\Software\wtc-pr
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{58C1E04C-4538-46EF-93C7-788C935E0031}_is1
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EBBFFB4A-702A-48C9-BED0-4B1645FAA06F}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Win Tonic_Logon
          • [ Chromium (and derivatives) ] *****


No malicious Chromium entries cleaned.
          • [ Chromium URLs ] *****


Deleted Vosteran
Deleted Softonic FR
          • [ Firefox (and derivatives) ] *****


No malicious Firefox entries cleaned.
          • [ Firefox URLs ] *****


No malicious Firefox URLs cleaned.


[+] Delete Tracing Keys
[+] Reset Winsock


AdwCleaner[S00].txt - [4835 octets] - [20/02/2019 09:40:22]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
A voir également:

1 réponse

Malekal_morte- Messages postés 180304 Date d'inscription   Statut Modérateur, Contributeur sécurité Dernière intervention   24 685
 
Salut,

Ca semble être des restes,

Pour vérifier ton ordinateur, pour d'éventuels infections et avoir un état général du système :

Suis le tutoriel FRST en cliquant sur ce lien bleu. ( prends le temps de lire attentivement - tout y est bien expliqué ).

Télécharge et lance le scan FRST,
Attendre la fin du scan, un message indique que l'analyse est terminée.

Trois rapports FRST seront générés :
  • FRST.txt
  • Shortcut.
  • Additionnal.txt


Envoie ces 3 rapports sur le site https://pjjoint.malekal.com/ et en retour donne les 3 liens pjjoint qui mènent aux rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.

(Les liens bleus mènent à des tutoriels explicatifs pas à pas, clic dessus pour avoir les instructions plus précises à suivre).


0