Infecté

Résolu
Bonjour,
Qui pourrai me lire un rapport de ZHP Texte svp car je pense avoir des soucis merci de dire comment vous k'envoyer @+



--
NINI

5 réponses

  1. voici rapport merci

    --Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 23-11-2014 01
    Ran by Nicole at 2014-11-24 11:41:10 Run:1
    Running from C:\Users\Nicole\Desktop
    Loaded Profile: Nicole (Available profiles: UpdatusUser & Nicole)
    Boot Mode: Normal
    ==============================================

    Content of fixlist:
    *****************

    CHR HomePage: Default -> hxxp://istart.webssearches.com/?type=hp&ts=1416737059&from=obw&uid=HGSTXHTS541010A9E680_JD4000CHG9038PG9038PX [Pays US - 69.28.57.22]
    CHR StartupUrls: Default -> hxxp://istart.webssearches.com/?type=hp&ts=1416737059&from=obw&uid=HGSTXHTS541010A9E680_JD4000CHG9038PG9038PX [Pays US - 69.28.57.22]
    CHR DefaultSearchKeyword: Default -> webssearches
    ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
    ProxyServer: [.DEFAULT] => http=127.0.0.1:52612;https=127.0.0.1:52612
    ProxyServer: [S-1-5-21-3507101761-2711143210-323578003-1002] => http=127.0.0.1:60979;https=127.0.0.1:60979
    2014-11-23 11:05 - 2014-11-23 15:43 - 00000000 ____D () C:\Program Files (x86)\snipsmart
    2014-11-23 11:05 - 2014-11-23 15:16 - 00000000 ____D () C:\Program Files (x86)\SupTab
    2014-11-23 11:04 - 2014-11-23 15:17 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect

    *****************

    Chrome HomePage deleted successfully.
    Chrome StartupUrls deleted successfully.
    Chrome DefaultSearchKeyword deleted successfully.
    HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value deleted successfully.
    HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.
    HKU\S-1-5-21-3507101761-2711143210-323578003-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.
    C:\Program Files (x86)\snipsmart => Moved successfully.
    C:\Program Files (x86)\SupTab => Moved successfully.
    C:\ProgramData\WindowsMangerProtect => Moved successfully.

    ==== End of Fixlog ====
    NINI
    1. Modérateur
      Ouvre le bloc-notes : Menu Démarrer / Tous les programmes / Accessoires et Bloc-Notes.
      Copie/colle dedans ce qui suit :

      CHR HomePage: Default -> hxxp://istart.webssearches.com/?type=hp&ts=1416737059&from=obw&uid=HGSTXHTS541010A9E680_JD4000CHG9038PG9038PX [Pays US - 69.28.57.22]
      CHR StartupUrls: Default -> hxxp://istart.webssearches.com/?type=hp&ts=1416737059&from=obw&uid=HGSTXHTS541010A9E680_JD4000CHG9038PG9038PX [Pays US - 69.28.57.22]
      CHR DefaultSearchKeyword: Default -> webssearches
      ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
      ProxyServer: [.DEFAULT] => http=127.0.0.1:52612;https=127.0.0.1:52612
      ProxyServer: [S-1-5-21-3507101761-2711143210-323578003-1002] => http=127.0.0.1:60979;https=127.0.0.1:60979
      2014-11-23 11:05 - 2014-11-23 15:43 - 00000000 ____D () C:\Program Files (x86)\snipsmart
      2014-11-23 11:05 - 2014-11-23 15:16 - 00000000 ____D () C:\Program Files (x86)\SupTab
      2014-11-23 11:04 - 2014-11-23 15:17 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect

      Place toi sur le bureau.
      Dans le champs en bas, nom du fichier mets : fixlist.txt
      Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

      Relance FRST et clic sur le bouton Fix
      Selon comment un redémarrage est nécessaire (pas obligatoire).
      Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.