Je recherche.org

Bonjour,

qui pourrait m'aider à supprimer je recherche.org

merci

14 réponses

  • Votes
  • Date
  • Date décroissante
  1. Contributeur sécurité
    Tu remets tes pages d'accueil et tes moteurs de recherche (si nécéssaire)

    A +
    1. All processes killed
      ========== FILES ==========
      File/Folder C:\Users\gigi\AppData\Local\Temp\racourci.vbe not found.
      File/Folder C:\Users\gigi\chat-land not found.
      File/Folder C:\Users\gigiappinfo.exe not found.
      ========== COMMANDS ==========

      [EMPTYTEMP]

      User: All Users

      User: Default
      ->Temp folder emptied: 0 bytes
      ->Temporary Internet Files folder emptied: 0 bytes

      User: Default User
      ->Temp folder emptied: 0 bytes
      ->Temporary Internet Files folder emptied: 0 bytes

      User: gigi
      ->Temp folder emptied: 45364 bytes
      ->Temporary Internet Files folder emptied: 35750217 bytes
      ->Java cache emptied: 3088757 bytes
      ->Google Chrome cache emptied: 23210892 bytes
      ->Flash cache emptied: 869 bytes

      User: Public

      %systemdrive% .tmp files removed: 0 bytes
      %systemroot% .tmp files removed: 0 bytes
      %systemroot%\System32 .tmp files removed: 0 bytes
      %systemroot%\System32 (64bit) .tmp files removed: 0 bytes
      %systemroot%\System32\drivers .tmp files removed: 0 bytes
      Windows Temp folder emptied: 25302 bytes
      %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
      RecycleBin emptied: 2255 bytes

      Total Files Cleaned = 59,00 mb

      OTM by OldTimer - Version 3.1.19.0 log created on 02122012_103837

      Files moved on Reboot...
      C:\Users\gigi\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
      File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

      Registry entries deleted on Reboot...
      1. lancement OTM

        message erreur

        exception EOleSystem in module OTM.exe at 0005E775
        classe non enregistrée

        que faire ?
        1. Contributeur sécurité
          re,

          1. Relance HijackThis > do a scan only
          Coche les cases suivantes :

          R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.jerecherche.org/keyword/%s 
          R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://jerecherche.org/ 
          O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - (no file) 
          O4 - HKCU\..\Run: [tempHome] C:\Users\gigi\AppData\Local\Temp\racourci.vbe 
          O4 - HKCU\..\Run: [lan] C:\Users\gigi\chat-land\Chat-Landmessenger.jar 
          O4 - HKCU\..\Run: [appinfo] C:\Users\gigiappinfo.exe\appinfo.exe 
          O4 - Startup: appinfo.lnk = gigi\appinfo.exe 

          Clique sur Fix Checked

          2. Télécharge OTM (de Old_Timer) sur le bureau

          ● Lance OTM
          - Sous XP double-clic sur l'icône pour lancer l'outil.
          - Sous Vista/Seven clic-droit sur l'icône et choisir "Exécuter en tant qu'administrateur" dans le menu contextuel.
          ● La fenêtre principale de l'outil s'ouvre :
          ● Copie la liste en citation ci-dessous et colle-la dans le cadre "Paste instructions for Items to be Moved"

          :Files 
          C:\Users\gigi\AppData\Local\Temp\racourci.vbe 
          C:\Users\gigi\chat-land
          C:\Users\gigiappinfo.exe
          :Commands 
          [emptytemp]

          ● Clique sur MoveIt ! pour lancer la suppression
          ● A la fin du processus le PC va redémarrer
          ● Poste le rapport dans qui se trouve dans le répertoire suivant C:\_OTM\MovedFile

          3. Reconfigure tes navigateurs et refait un scan Hijackthis, colle le rapport

          A +
          1. voilà

            Logfile of Trend Micro HijackThis v2.0.2
            Scan saved at 09:45:44, on 12/02/2012
            Platform: Unknown Windows (WinNT 6.01.3505 SP1)
            MSIE: Internet Explorer v9.00 (9.00.8112.16421)
            Boot mode: Normal

            Running processes:
            C:\Users\gigi\appinfo.exe
            C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
            C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe
            C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
            C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
            C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
            C:\Program Files\AVAST Software\Avast\AvastUI.exe
            C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
            C:\Program Files (x86)\Norton Internet Security\Engine\19.5.0.145\ccSvcHst.exe
            C:\Program Files (x86)\Internet Explorer\iexplore.exe
            C:\Program Files (x86)\Internet Explorer\iexplore.exe
            C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
            C:\Program Files (x86)\Internet Explorer\iexplore.exe
            C:\Program Files (x86)\Internet Explorer\iexplore.exe
            C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10q_ActiveX.exe
            C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

            R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.jerecherche.org/keyword/%s
            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr
            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.fr
            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr
            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr
            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/HPNOT/3
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
            R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://mivolo.com
            R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.jerecherche.org
            R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
            R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.google.fr
            R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
            F2 - REG:system.ini: UserInit=userinit.exe
            O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
            O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\19.5.0.145\coIEPlg.dll
            O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - (no file)
            O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\19.5.0.145\IPS\IPSBHO.DLL
            O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
            O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
            O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
            O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
            O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\19.5.0.145\coIEPlg.dll
            O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
            O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
            O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
            O4 - HKLM\..\Run: [HPQuickWebProxy] "C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe"
            O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
            O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
            O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
            O4 - HKLM\..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
            O4 - HKLM\..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
            O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
            O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
            O4 - HKCU\..\Run: [tempHome] C:\Users\gigi\AppData\Local\Temp\racourci.vbe
            O4 - HKCU\..\Run: [lan] C:\Users\gigi\chat-land\Chat-Landmessenger.jar
            O4 - HKCU\..\Run: [appinfo] C:\Users\gigiappinfo.exe\appinfo.exe
            O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
            O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL')
            O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE LOCAL')
            O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU')
            O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE RÉSEAU')
            O4 - Startup: appinfo.lnk = gigi\appinfo.exe
            O4 - Startup: OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
            O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
            O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
            O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
            O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
            O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
            O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
            O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
            O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
            O13 - Gopher Prefix:
            O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
            O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
            O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll
            O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
            O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
            O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
            O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
            O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
            O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe
            O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
            O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
            O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
            O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
            O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
            O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
            O23 - Service: HP Auto (HPAuto) - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe
            O23 - Service: HP Client Services (HPClientSvc) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
            O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
            O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
            O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
            O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
            O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
            O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
            O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
            O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\19.5.0.145\ccSvcHst.exe
            O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
            O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
            O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
            O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
            O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
            O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
            O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
            O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
            O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
            O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
            O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
            O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
            O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
            O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
            O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
            1. Contributeur sécurité
              ok

              Tu as lancé directement l'outil en mode Suppression mais il ne semble pas avoir trouvé tous les fichiers.
              C'est chat-land qui a changé tes paramètres de navigation car tu as accepté le conditions d'utilisation.

              Si ton problème n'est pas résolu, fait un scan avec HijackThis et colle le rapport.

              A +
              1. voici le rapport

                # AdwCleaner v1.408 - Rapport créé le 12/02/2012 à 09:11:33
                # Mis à jour le 29/01/2012 par Xplode
                # Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
                # Nom d'utilisateur : gigi - GIGI-HP (Administrateur)
                # Exécuté depuis : C:\Users\gigi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QQBC7ROO\adwcleaner.exe
                # Option [Suppression]

                ***** [Services] *****

                ***** [Fichiers / Dossiers] *****

                Fichier Supprimé : C:\Users\gigi\errorlog.tmp

                ***** [Registre] *****

                Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{557C21FE-7274-410D-853E-9ED4471BF193}
                Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\chat-land.org

                ***** [Registre (x64)] *****

                ***** [Navigateurs] *****

                -\\ Internet Explorer v9.0.8112.16421

                Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://jerecherche.org/?v=d --> hxxp://www.google.fr
                Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Default_Page_URL] = hxxp://jerecherche.org --> hxxp://www.google.fr
                Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Page] = hxxp://jerecherche.org/?nav=if&zon=Spie --> hxxp://www.google.fr
                Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://www.jerecherche.org/keyword/ --> hxxp://www.google.fr
                Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Default_Secondary_Page_URL] = hxxp://jerecherche.org --> hxxp://www.google.fr
                Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page_bak] = hxxp://jerecherche.org?nav=if&zon=Stbpie --> hxxp://www.google.fr
                Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - SearchMigratedDefaultName] = jerecherche.org --> hxxp://www.google.fr
                Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - SearchMigratedDefaultURL] = hxxp://www.jerecherche.org --> hxxp://www.google.fr
                Remplacé : [HKCU\Software\Microsoft\Internet Explorer\Main - Search Bar] = hxxp://www.search-web.net --> hxxp://www.google.fr

                -\\ Google Chrome v [Impossible d'obtenir la version]

                Fichier : C:\Users\gigi\AppData\Local\Google\Chrome\User Data\Default\Preferences
                1. Contributeur sécurité
                  Bonjour,

                  Tu as surement du installer un ou plusieurs programmes indésirables.
                  On va regarder cela ensemble :

                  Télécharge AdwCleaner ( d'Xplode ) sur ton bureau.
                  ● Lance AdwCleaner
                  - Sous XP double-clic sur l'icône pour lancer l'outil.
                  - Sous Vista/Seven clic-droit sur l'icône et choisir "Exécuter en tant qu'administrateur" dans le menu contextuel.
                  ● Clique sur Recherche
                  ● Patiente le temps du scan, le rapport doit s'ouvrir spontanément à la fin.
                  ● Clique sur Quitter

                  Le rapport est sauvegardé à la racine du disque C:\AdwCleaner[R1].txt

                  Poste le rapport, A +