Ordinateur infecté Résolu

Question

Bonjour, 

J'ai un ordinateur infecté. J'ai sûrement téléchargé quelque chose de mauvais. 
J'ai déjà fait une analyse malwerbytes qui m'indique une série de fichiers infectés. 
Malwarebyteswww.malwarebytes.com-Détails du journal-Date de l'analyse: 03/09/2018Heure de l'analyse: 21:56Fichier journal: 7766bcc2-afb3-11e8-8d45-705a0f97456b.json-Informations du logiciel-Version: 3.5.1.2522Version de composants: 1.0.441Version de pack de mise à jour: 1.0.6629Licence: Essai-Informations système-Système d'exploitation: Windows 10 (Build 17134.228)Processeur: x64Système de fichiers: NTFSUtilisateur: LAPTOP-8HF96PIC\micha\u00c3\u00abl-Résumé de l'analyse-Type d'analyse: Analyse des menacesAnalyse lancée par: ManuelRésultat: TerminéObjets analysés: 316459Menaces détectées: 124Menaces mises en quarantaine: 124Temps écoulé: 8 min, 10 s-Options d'analyse-Mémoire: ActivéDémarrage: ActivéSystème de fichiers: ActivéArchives: ActivéRootkits: DésactivéHeuristique: ActivéPUP: DétectionPUM: Détection-Détails de l'analyse-Processus: 0(Aucun élément malveillant détecté)Module: 0(Aucun élément malveillant détecté)Clé du registre: 40Adware.Tuto4PC, HKU\S-1-5-21-4130371843-2247296076-805744698-1002\SOFTWARE\MICROSOFT\EWMON, En quarantaine, [2774], [411133],1.0.6629Trojan.Agent, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\btscService, En quarantaine, [397], [459290],1.0.6629Adware.Tuto4PC, HKLM\SOFTWARE\MICROSOFT\APreSam, En quarantaine, [2774], [451260],1.0.6629PUP.Optional.Tuto4PC, HKU\S-1-5-21-4130371843-2247296076-805744698-1002\SOFTWARE\MICROSOFT\wewewe, En quarantaine, [611], [339689],1.0.6629Adware.Tuto4PC, HKU\S-1-5-21-4130371843-2247296076-805744698-1002\SOFTWARE\MICROSOFT\BIGTIME, En quarantaine, [2774], [411132],1.0.6629Adware.Tuto4PC, HKLM\SOFTWARE\MICROSOFT\MPrForShutT, En quarantaine, [2774], [451257],1.0.6629Adware.Tuto4PC, HKLM\SOFTWARE\MICROSOFT\NSaveA, En quarantaine, [2774], [451259],1.0.6629Adware.Tuto4PC, HKLM\SOFTWARE\MICROSOFT\PrAmNP, En quarantaine, [2774], [451258],1.0.6629Adware.Tuto4PC, HKLM\SOFTWARE\MICROSOFT\PrIncub, En quarantaine, [2774], [451256],1.0.6629Adware.NeoBar, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\1655C0CA-7AE7-4012-8502-970C8675E5F8, En quarantaine, [1244], [540835],1.0.6629PUP.Optional.WhiteClick, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{A8223BF2-7B97-473A-B708-DB2548F80C0B}, En quarantaine, [5069], [538662],1.0.6629Adware.ICLoader, HKLM\SOFTWARE\MICROSOFT\DMUNVERSION, En quarantaine, [420], [518477],1.0.6629Trojan.Agent, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\MICROSERVICE, En quarantaine, [397], [522759],1.0.6629Adware.FileTour, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\{6AF1968E-5C0B-6FC6-4E66-A56857341CAC}, En quarantaine, [410], [511696],1.0.6629Adware.FileTour, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{B4B0F0E1-DC07-4067-B29D-A55EE06043D5}, En quarantaine, [410], [511696],1.0.6629Adware.FileTour, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\LOGON\{B4B0F0E1-DC07-4067-B29D-A55EE06043D5}, En quarantaine, [410], [511696],1.0.6629Adware.Neoreklami.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{1CE6A279-77AE-4B6C-97A4-452B990A98A6}, En quarantaine, [10804], [526590],1.0.6629Adware.Neoreklami.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\LOGON\{1CE6A279-77AE-4B6C-97A4-452B990A98A6}, En quarantaine, [10804], [526590],1.0.6629Adware.Neoreklami.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\TzltYpotJgryG2, En quarantaine, [10804], [526590],1.0.6629Adware.Neoreklami.TskLnk, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\xdbGJPONaKkXIL, En quarantaine, [1195], [510064],1.0.6629Adware.Neoreklami.TskLnk, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{F82FE13E-8147-41FD-AEC9-EB117744A5A2}, En quarantaine, [1195], [510064],1.0.6629Adware.Neoreklami.TskLnk, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{F82FE13E-8147-41FD-AEC9-EB117744A5A2}, En quarantaine, [1195], [510064],1.0.6629Adware.Neoreklami.TskLnk, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\xdbGJPONaKkXIL, En quarantaine, [1195], [-1],0.0.0Adware.Neoreklami.TskLnk, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F82FE13E-8147-41FD-AEC9-EB117744A5A2}, En quarantaine, [1195], [-1],0.0.0Adware.Neoreklami.TskLnk, HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F82FE13E-8147-41FD-AEC9-EB117744A5A2}, En quarantaine, [1195], [-1],0.0.0Adware.FileTour, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\{35FEEA6B-FE54-B431-452B-DB5DB0A5696B}, En quarantaine, [410], [511696],1.0.6629Adware.FileTour, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{AE0186C5-8DE6-462B-9999-1DC3144BB5E0}, En quarantaine, [410], [511696],1.0.6629Adware.FileTour, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{AE0186C5-8DE6-462B-9999-1DC3144BB5E0}, En quarantaine, [410], [511696],1.0.6629Adware.Neoreklami, HKLM\SOFTWARE\CLASSES\TYPELIB\{9C26DF5A-F874-4006-977C-E00AD46E47CD}, En quarantaine, [1355], [560826],1.0.6629Adware.Neoreklami, HKLM\SOFTWARE\CLASSES\INTERFACE\{2571A403-C3B5-45C3-845E-E27B523BB812}, En quarantaine, [1355], [560826],1.0.6629Adware.Neoreklami, HKLM\SOFTWARE\CLASSES\INTERFACE\{B1B07C3E-5F73-40AA-B238-1DBC7C2B9250}, En quarantaine, [1355], [560826],1.0.6629Adware.Neoreklami, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{2571A403-C3B5-45C3-845E-E27B523BB812}, En quarantaine, [1355], [560826],1.0.6629Adware.Neoreklami, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{B1B07C3E-5F73-40AA-B238-1DBC7C2B9250}, En quarantaine, [1355], [560826],1.0.6629Adware.Neoreklami, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{2571A403-C3B5-45C3-845E-E27B523BB812}, En quarantaine, [1355], [560826],1.0.6629Adware.Neoreklami, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{B1B07C3E-5F73-40AA-B238-1DBC7C2B9250}, En quarantaine, [1355], [560826],1.0.6629Adware.Neoreklami, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{9C26DF5A-F874-4006-977C-E00AD46E47CD}, En quarantaine, [1355], [560826],1.0.6629Adware.Neoreklami, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{9C26DF5A-F874-4006-977C-E00AD46E47CD}, En quarantaine, [1355], [560826],1.0.6629Generic.Malware/Suspicious, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\HDmfRrurnJamNWr, En quarantaine, [0], [392686],1.0.6629Generic.Malware/Suspicious, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{099680F2-1056-4698-8F2F-CEAA799AAF19}, En quarantaine, [0], [392686],1.0.6629Generic.Malware/Suspicious, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{099680F2-1056-4698-8F2F-CEAA799AAF19}, En quarantaine, [0], [392686],1.0.6629Valeur du registre: 7Adware.Tuto4PC, HKU\S-1-5-21-4130371843-2247296076-805744698-1002\SOFTWARE\MICROSOFT\EWMON|PARTNER, En quarantaine, [2774], [411133],1.0.6629Adware.Tuto4PC, HKU\S-1-5-21-4130371843-2247296076-805744698-1002\SOFTWARE\MICROSOFT\BIGTIME|PARTNER, En quarantaine, [2774], [411132],1.0.6629Adware.Neoreklami, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\1655C0CA-7AE7-4012-8502-970C8675E5F8|DISPLAYNAME, En quarantaine, [1355], [533741],1.0.6629PUP.Optional.WhiteClick, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{A8223BF2-7B97-473A-B708-DB2548F80C0B}|DISPLAYNAME, En quarantaine, [5069], [538662],1.0.6629Trojan.Agent, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\btscService|IMAGEPATH, En quarantaine, [397], [459303],1.0.6629Adware.ICLoader, HKLM\SOFTWARE\MICROSOFT\DMUNVERSION|VERSION, En quarantaine, [420], [518477],1.0.6629Trojan.Agent, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\MICROSERVICE|IMAGEPATH, En quarantaine, [397], [522759],1.0.6629Données du registre: 0(Aucun élément malveillant détecté)Flux de données: 0(Aucun élément malveillant détecté)Dossier: 13Adware.Tuto4PC, C:\USERS\MICHA\APPDATA\LOCAL\TEMP\I4W7QTUS1A, En quarantaine, [2774], [487472],1.0.6629Trojan.Agent, C:\USERS\MICHA\APPDATA\ROAMING\WIDMODULE, En quarantaine, [397], [492739],1.0.6629Trojan.Agent, C:\PROGRAMDATA\btscService, En quarantaine, [397], [459290],1.0.6629PUP.Optional.DiskPower, C:\PROGRAM FILES (X86)\DISKWMPOWER, En quarantaine, [2878], [405182],1.0.6629PUP.Optional.SuperFind, C:\Users\micha\AppData\Roaming\Mozilla\Firefox\Profiles\78sw3m35.default-1501781847061\extensions\mefhakmgclhhfbdadeojlkbllmecialg@chrome-store-foxified-1132576233\META-INF, En quarantaine, [1176], [450133],1.0.6629PUP.Optional.SuperFind, C:\Users\micha\AppData\Roaming\Mozilla\Firefox\Profiles\78sw3m35.default-1501781847061\extensions\mefhakmgclhhfbdadeojlkbllmecialg@chrome-store-foxified-1132576233\images, En quarantaine, [1176], [450133],1.0.6629PUP.Optional.SuperFind, C:\Users\micha\AppData\Roaming\Mozilla\Firefox\Profiles\78sw3m35.default-1501781847061\extensions\mefhakmgclhhfbdadeojlkbllmecialg@chrome-store-foxified-1132576233\js, En quarantaine, [1176], [450133],1.0.6629PUP.Optional.SuperFind, C:\USERS\MICHA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\78sw3m35.default-1501781847061\EXTENSIONS\mefhakmgclhhfbdadeojlkbllmecialg@chrome-store-foxified-1132576233, En quarantaine, [1176], [450133],1.0.6629Adware.Tuto4PC, C:\USERS\MICHA\APPDATA\LOCAL\TEMP\BESTDOWNLOADER, En quarantaine, [2774], [515829],1.0.6629Adware.Tuto4PC, C:\USERS\MICHA\APPDATA\LOCAL\TEMP\BOOSTPC, En quarantaine, [2774], [515830],1.0.6629Adware.Tuto4PC, C:\USERS\MICHA\APPDATA\LOCAL\TEMP\CLEANCOMPUTERNEW, En quarantaine, [2774], [515831],1.0.6629Adware.Tuto4PC, C:\USERS\MICHA\APPDATA\LOCAL\TEMP\PUBLICHOTSP, En quarantaine, [2774], [515832],1.0.6629Adware.Tuto4PC, C:\USERS\MICHA\APPDATA\LOCAL\TEMP\SHUTDOWNTIME, En quarantaine, [2774], [515833],1.0.6629Fichier: 64PUP.Optional.Booking, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\BOOKING.COM.LNK, En quarantaine, [777], [347183],1.0.6629Adware.Tuto4PC, C:\USERS\MICHA\APPDATA\LOCAL\TEMP\I4W7QTUS1A\up.exe.config, En quarantaine, [2774], [487472],1.0.6629Adware.Tuto4PC, C:\Users\micha\AppData\Local\Temp\I4W7QTUS1A\OneTwo.exe, En quarantaine, [2774], [487472],1.0.6629Adware.Tuto4PC, C:\Users\micha\AppData\Local\Temp\I4W7QTUS1A\OneTwo.exe.config, En quarantaine, [2774], [487472],1.0.6629Adware.Tuto4PC, C:\Users\micha\AppData\Local\Temp\I4W7QTUS1A\SecondL.exe, En quarantaine, [2774], [487472],1.0.6629Adware.Tuto4PC, C:\Users\micha\AppData\Local\Temp\I4W7QTUS1A\SecondL.exe.config, En quarantaine, [2774], [487472],1.0.6629Adware.Tuto4PC, C:\Users\micha\AppData\Local\Temp\I4W7QTUS1A\up.exe, En quarantaine, [2774], [487472],1.0.6629Adware.Neoreklami, C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\BROWSER\FEATURES\{A5FD4672-4D73-4F90-A1C0-2ABD39DB2565}.XPI, En quarantaine, [1355], [482896],1.0.6629Trojan.Agent, C:\USERS\MICHA\APPDATA\ROAMING\WIDMODULE\DATA.TXT, En quarantaine, [397], [492739],1.0.6629PUP.Optional.SystemTable.Generic, C:\USERS\MICHA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\78SW3M35.DEFAULT-1501781847061\EXTENSIONS\383882@modext.tech.xpi, En quarantaine, [4616], [509530],1.0.6629Adware.Wait3Sec, C:\USERS\MICHA\DOWNLOADS\PLAY CROSSOUT.ICO, En quarantaine, [4484], [526085],1.0.6629Adware.Linkury.Generic, C:\USERS\MICHA\APPDATA\LOCAL\SHAM.DB, En quarantaine, [3742], [516191],1.0.6629Adware.Wait3Sec, C:\USERS\MICHA\DOWNLOADS\PLAY WARFRAME.ICO, En quarantaine, [4484], [526086],1.0.6629Trojan.Agent, C:\PROGRAMDATA\btscService\btscService.exe, En quarantaine, [397], [459290],1.0.6629Adware.Wait3Sec, C:\USERS\MICHA\DOWNLOADS\WIN IPHONE X.ICO, En quarantaine, [4484], [526084],1.0.6629PUP.Optional.WhiteClick, C:\USERS\MICHA\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\STARTUP\SHORTCUT TO PRIMARY OUTPUT FROM START (ACTIVE).LNK, En quarantaine, [5069], [543347],1.0.6629PUP.Optional.DiskPower, C:\Program Files (x86)\DiskWMpower\uninstaller.exe, En quarantaine, [2878], [405182],1.0.6629PUP.Optional.DiskPower, C:\Program Files (x86)\DiskWMpower\uninstaller.exe.config, En quarantaine, [2878], [405182],1.0.6629PUP.Optional.SuperFind, C:\Users\micha\AppData\Roaming\Mozilla\Firefox\Profiles\78sw3m35.default-1501781847061\extensions\mefhakmgclhhfbdadeojlkbllmecialg@chrome-store-foxified-1132576233\images\icon-128.png, En quarantaine, [1176], [450133],1.0.6629PUP.Optional.SuperFind, C:\Users\micha\AppData\Roaming\Mozilla\Firefox\Profiles\78sw3m35.default-1501781847061\extensions\mefhakmgclhhfbdadeojlkbllmecialg@chrome-store-foxified-1132576233\images\icon-18.png, En quarantaine, [1176], [450133],1.0.6629PUP.Optional.SuperFind, C:\Users\micha\AppData\Roaming\Mozilla\Firefox\Profiles\78sw3m35.default-1501781847061\extensions\mefhakmgclhhfbdadeojlkbllmecialg@chrome-store-foxified-1132576233\images\icon-48.png, En quarantaine, [1176], [450133],1.0.6629PUP.Optional.SuperFind, C:\Users\micha\AppData\Roaming\Mozilla\Firefox\Profiles\78sw3m35.default-1501781847061\extensions\mefhakmgclhhfbdadeojlkbllmecialg@chrome-store-foxified-1132576233\images\icon-64.png, En quarantaine, [1176], [450133],1.0.6629PUP.Optional.SuperFind, C:\Users\micha\AppData\Roaming\Mozilla\Firefox\Profiles\78sw3m35.default-1501781847061\extensions\mefhakmgclhhfbdadeojlkbllmecialg@chrome-store-foxified-1132576233\js\background.js, En quarantaine, [1176], [450133],1.0.6629PUP.Optional.SuperFind, C:\Users\micha\AppData\Roaming\Mozilla\Firefox\Profiles\78sw3m35.default-1501781847061\extensions\mefhakmgclhhfbdadeojlkbllmecialg@chrome-store-foxified-1132576233\META-INF\manifest.mf, En quarantaine, [1176], [450133],1.0.6629PUP.Optional.SuperFind, C:\Users\micha\AppData\Roaming\Mozilla\Firefox\Profiles\78sw3m35.default-1501781847061\extensions\mefhakmgclhhfbdadeojlkbllmecialg@chrome-store-foxified-1132576233\META-INF\mozilla.rsa, En quarantaine, [1176], [450133],1.0.6629PUP.Optional.SuperFind, C:\Users\micha\AppData\Roaming\Mozilla\Firefox\Profiles\78sw3m35.default-1501781847061\extensions\mefhakmgclhhfbdadeojlkbllmecialg@chrome-store-foxified-1132576233\META-INF\mozilla.sf, En quarantaine, [1176], [450133],1.0.6629PUP.Optional.SuperFind, C:\Users\micha\AppData\Roaming\Mozilla\Firefox\Profiles\78sw3m35.default-1501781847061\extensions\mefhakmgclhhfbdadeojlkbllmecialg@chrome-store-foxified-1132576233\bg.jpg, En quarantaine, [1176], [450133],1.0.6629PUP.Optional.SuperFind, C:\Users\micha\AppData\Roaming\Mozilla\Firefox\Profiles\78sw3m35.default-1501781847061\extensions\mefhakmgclhhfbdadeojlkbllmecialg@chrome-store-foxified-1132576233\index.html, En quarantaine, [1176], [450133],1.0.6629PUP.Optional.SuperFind, C:\Users\micha\AppData\Roaming\Mozilla\Firefox\Profiles\78sw3m35.default-1501781847061\extensions\mefhakmgclhhfbdadeojlkbllmecialg@chrome-store-foxified-1132576233\main.js, En quarantaine, [1176], [450133],1.0.6629PUP.Optional.SuperFind, C:\Users\micha\AppData\Roaming\Mozilla\Firefox\Profiles\78sw3m35.default-1501781847061\extensions\mefhakmgclhhfbdadeojlkbllmecialg@chrome-store-foxified-1132576233\manifest.json, En quarantaine, [1176], [450133],1.0.6629PUP.Optional.SuperFind, C:\Users\micha\AppData\Roaming\Mozilla\Firefox\Profiles\78sw3m35.default-1501781847061\extensions\mefhakmgclhhfbdadeojlkbllmecialg@chrome-store-foxified-1132576233\style.css, En quarantaine, [1176], [450133],1.0.6629Adware.Linkury.TskLnk, C:\USERS\MICHA\APPDATA\LOCAL\INSTALLATIONCONFIGURATION.XML, En quarantaine, [14161], [444923],1.0.6629Adware.FileTour, C:\WINDOWS\SYSTEM32\TASKS\{6AF1968E-5C0B-6FC6-4E66-A56857341CAC}, En quarantaine, [410], [511696],1.0.6629Adware.Neoreklami.TskLnk, C:\PROGRAM FILES (X86)\WUNGYWHMEQNU2\RMTJEHBJWXQLH.DLL, En quarantaine, [1195], [510064],1.0.6629Adware.FileTour, C:\WINDOWS\SYSTEM32\TASKS\{35FEEA6B-FE54-B431-452B-DB5DB0A5696B}, En quarantaine, [410], [511696],1.0.6629Adware.Tuto4PC, C:\PROGRAM FILES\JA24EJBELK\JA24EJBEL.EXE, En quarantaine, [2774], [548720],1.0.6629Adware.Tuto4PC, C:\PROGRAM FILES\86MM85K001\86MM85K00.EXE, En quarantaine, [2774], [548720],1.0.6629Adware.Tuto4PC, C:\PROGRAM FILES\Z9WAHTT0CY\UNINSTALLER.EXE, En quarantaine, [2774], [548720],1.0.6629Adware.Neoreklami, C:\PROGRAM FILES (X86)\GKBUOIQGSIE\RAHODNZMCF.EXE, En quarantaine, [1355], [560826],1.0.6629Adware.Neoreklami.TskLnk, C:\PROGRAM FILES (X86)\GKBUOIQGSIE\RJB3MA.DLL, En quarantaine, [1195], [521622],1.0.6629Adware.Tuto4PC, C:\PROGRAM FILES (X86)\TUKPVPXMFJ3\8GV9T.EXE, En quarantaine, [2774], [548720],1.0.6629Adware.FileTour.BatBitRst, C:\$RECYCLE.BIN\S-1-5-21-4130371843-2247296076-805744698-1002\$RPN7XL1\KMSPICO-11-KMSPICO-INFO.EXE, En quarantaine, [412], [543564],1.0.6629Adware.Tuto4PC, C:\PROGRAM FILES\475W89YCAM\475W89YCA.EXE, En quarantaine, [2774], [548720],1.0.6629Adware.Tuto4PC, C:\PROGRAM FILES\JA24EJBELK\UNINSTALLER.EXE, En quarantaine, [2774], [548720],1.0.6629Adware.Tuto4PC, C:\PROGRAM FILES\Z9WAHTT0CY\WQXRXV1M5.EXE, En quarantaine, [2774], [548720],1.0.6629Spyware.Socelars, C:\USERS\MICHA\APPDATA\LOCAL\TEMP\USHZFATJH\SYSTEM.EXE, En quarantaine, [6281], [538184],1.0.6629Adware.Tuto4PC, C:\PROGRAM FILES\86MM85K001\UNINSTALLER.EXE, En quarantaine, [2774], [548720],1.0.6629Adware.Tuto4PC, C:\PROGRAM FILES\475W89YCAM\UNINSTALLER.EXE, En quarantaine, [2774], [548720],1.0.6629Adware.Neoreklami.TskLnk, C:\PROGRAM FILES (X86)\IQRJEPTXCJUN\HEZWKYUWLK.DLL, En quarantaine, [1195], [510064],1.0.6629Adware.Tuto4PC, C:\USERS\MICHA\APPDATA\LOCAL\TEMP\TEWICR4PQ\TEWICR4PQ.EXE, En quarantaine, [2774], [560922],1.0.6629Adware.Tuto4PC, C:\USERS\MICHA\APPDATA\LOCAL\TEMP\DPNU9GBKX\DPNU9GBKX.EXE, En quarantaine, [2774], [554557],1.0.6629Generic.Malware/Suspicious, C:\USERS\MICHA\APPDATA\ROAMING\RPDWRYJHFGG\B0TRVVEMPHU.EXE, En quarantaine, [0], [392686],1.0.6629Adware.Tuto4PC, C:\PROGRAM FILES (X86)\TUKPVPXMFJ3\ZYA.EXE, En quarantaine, [2774], [350731],1.0.6629Adware.Tuto4PC, C:\USERS\MICHA\APPDATA\LOCAL\TEMP\USHZFATJH\USHZFATJH.EXE, En quarantaine, [2774], [554557],1.0.6629Generic.Malware/Suspicious, C:\USERS\MICHA\APPDATA\ROAMING\QBKCAUOMK2R\4Y2DUR1JJHT.EXE, En quarantaine, [0], [392686],1.0.6629Adware.WhiteClick, C:\WINDOWS\INSTALLER\20F5C308.MSI, En quarantaine, [14615], [556015],1.0.6629Adware.Tuto4PC, C:\USERS\MICHA\APPDATA\LOCAL\TEMP\IS-2P2J6.TMP\ACHIEVEPARAM.EXE, En quarantaine, [2774], [551717],1.0.6629Adware.Linkury, C:\USERS\MICHA\APPDATA\LOCAL\TEMP\QEJIAOQFI\LINKER.EXE, En quarantaine, [1108], [475745],1.0.6629Adware.Tuto4PC, C:\USERS\MICHA\APPDATA\LOCAL\TEMP\IS-2P2J6.TMP\INS.EXE, En quarantaine, [2774], [554557],1.0.6629Adware.Tuto4PC, C:\USERS\MICHA\APPDATA\LOCAL\TEMP\RBHHYM9ZD\RBHHYM9ZD.EXE, En quarantaine, [2774], [548720],1.0.6629Generic.Malware/Suspicious, C:\USERS\MICHA\APPDATA\ROAMING\2ZMX13SP3V0\DXV3YUMEAPF.EXE, En quarantaine, [0], [392686],1.0.6629Generic.Malware/Suspicious, C:\WINDOWS\SECOH-QAD.EXE, En quarantaine, [0], [392686],1.0.6629Generic.Malware/Suspicious, C:\WINDOWS\TASKS\HDmfRrurnJamNWr.job, En quarantaine, [0], [392686],1.0.6629Generic.Malware/Suspicious, C:\USERS\MICHA\APPDATA\LOCAL\TEMP\NUFZXZUSNWQKDFDOH\LOUSIFRNFPWUNMDS\STZVCYW.DLL, En quarantaine, [0], [392686],1.0.6629Secteur physique: 0(Aucun élément malveillant détecté)WMI: 0(Aucun élément malveillant détecté)(end)
Pourriez-vous m'aider afin de supprimer tout cela?


Un grand merci,

Kevin


Configuration: Windows / Chrome 68.0.3440.106

Malekal_morte- · Accepted Answer

Salut,

Ce sont de vieilles infections.

Pour vérifier l'ordinateur, je t'invite à faire cette analyse FRST et donner les rapports en retour : 

Suis le tutoriel FRST. ( prends le temps de lire attentivement - tout y est bien expliqué ).

Télécharge et lance le scan FRST, 
Attendre la fin du scan, un message indique que l'analyse est terminée.

Trois rapports FRST seront générés :

 FRST.txt
 Shortcut.txt
 Additionnal.txt

Envoie ces 3 rapports sur le site https://pjjoint.malekal.com/ afin de les partager.
En retour donne les 3 liens pjjoint qui mènent aux rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.

didmed · Answer

Salut,

D'après le fichier joint, l'analyse et la mise en quarantaine (nettoyage) ont été effectués:






@ plus

amine-kouis · Answer

Bonjour 

Je vous recommande d'utiliser Malwarebytes c'est hyper cool je l'ai déjà testé et ça a marché pour moi 
tu peux le télécharger en cliquant sur ce lien  https://www.malwarebytes.com/lp/sem/pc/?affiliate=17877
et aprés tu fais un scan de ton ordi aprés il va supprimer automatiquement tous les malwares trouvés pour plus de détails je te recommande ce tuto http://waytolearnx.blogspot.com/2018/09/comment-supprimer-les-malwares-de-mon-pc.html

Malekal_morte- · Answer

il reste des trucs,

Voici la correction à effectuer avec FRST. Tu peux t'aider de cette note explicative avec des captures d'écran.
Relance FRST puis sur ton clavier appuyer sur la touche CTRL + Y.
Le bloc-note va s'ouvrir, copie/colle ceci.

CreateRestorePoint:
CloseProcesses:
2018-09-03 21:30 - 2018-09-03 21:30 - 000000000 ____D C:\Users\micha\AppData\Roaming\ChemTable Software
2018-09-03 21:30 - 2018-09-03 21:30 - 000000000 ____D C:\Users\micha\AppData\Local\D3DSCache
2018-09-03 21:29 - 2018-09-03 21:30 - 000000000 ____D C:\Users\micha\AppData\Local\ChemTable Software
2018-09-03 21:29 - 2018-09-03 21:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reg Organizer
2018-09-03 21:29 - 2018-09-03 21:29 - 000000000 ____D C:\ProgramData\Chemtable Software
2018-09-03 21:29 - 2018-09-03 21:29 - 000000000 ____D C:\Program Files (x86)\Reg Organizer
2018-09-03 21:28 - 2018-09-03 22:06 - 000000000 ____D C:\Program Files (x86)\wunGYWhMeqNU2
2018-09-03 21:28 - 2018-09-03 22:06 - 000000000 ____D C:\Program Files (x86)\WNVwerPrGBZQC
2018-09-03 21:28 - 2018-09-03 22:06 - 000000000 ____D C:\Program Files (x86)\JQNLggXpPPpITxfrDoR
2018-09-03 21:28 - 2018-09-03 21:49 - 000000000 ____D C:\Program Files (x86)\vEuomKaIU
2018-09-03 21:28 - 2018-09-03 21:28 - 000000000 ____D C:\ProgramData\vAtgRIojrOIejiVB
2018-09-03 21:27 - 2018-09-03 22:06 - 000000000 ____D C:\Users\micha\AppData\Roaming\2zmx13sp3v0
2018-09-03 21:27 - 2018-09-03 22:06 - 000000000 ____D C:\Program Files\86MM85K001
2018-09-03 21:27 - 2018-09-03 22:06 - 000000000 ____D C:\Program Files (x86)\IqRJEPTxCjUn
2018-09-03 21:26 - 2018-09-03 22:06 - 000000000 ____D C:\Users\micha\AppData\Roaming\rpdwryjhfgg
2018-09-03 21:26 - 2018-09-03 22:06 - 000000000 ____D C:\Program Files\JA24EJBELK
2018-09-03 21:26 - 2018-09-03 21:26 - 000140800 _____ C:\Users\micha\AppData\Local\installer.dat
2018-09-03 21:25 - 2018-09-03 22:06 - 000000000 ____D C:\Users\micha\AppData\Roaming\qbkcauomk2r
2018-09-03 21:25 - 2018-09-03 22:06 - 000000000 ____D C:\Program Files\Z9WAHTT0CY
2018-09-03 21:25 - 2018-09-03 22:06 - 000000000 ____D C:\Program Files\475W89YCAM
2018-09-03 21:25 - 2018-09-03 22:06 - 000000000 ____D C:\Program Files (x86)\tukpvpxmfj3
2018-09-03 21:25 - 2018-09-03 21:43 - 000000000 ____D C:\Users\micha\AppData\Local\XService
2018-09-03 21:25 - 2018-09-03 21:25 - 000000003 _____ C:\Users\micha\AppData\Local\wbem.ini
2018-09-03 21:25 - 2018-09-03 21:25 - 000000000 _____ C:\Program Files\a.exe 
 2018-09-03 21:25 - 2018-09-03 21:25 - 000000000 _____ () C:\Program Files\a.exe
1601-01-03 21:33 - 1601-01-03 21:33 - 000178688 ____N (Microsoft Corporation) C:\Program Files (x86)\BawEAO.exe
1601-01-03 21:33 - 1601-01-03 21:33 - 000060416 ____N (Microsoft Corporation) C:\Program Files (x86)\bqEUo.exe
2018-09-03 21:26 - 2018-09-03 21:26 - 000140800 _____ () C:\Users\micha\AppData\Local\installer.dat 
Task: {E7A1973E-362C-48A7-95EA-93A84EA3B827} - \gkNqfjNoNlLfJVmHB2 -> Pas de fichier <==== ATTENTION
Task: {A8E8DA73-D8E7-4F27-91EF-571BC68FD91E} - \eVSrriCnrZQlODxsGDB2 -> Pas de fichier <==== ATTENTION
Task: {C8CD9D66-EABC-4F21-9A30-A783ECE473D2} - \yKMtMHoPoUUExsP2 -> Pas de fichier <==== ATTENTION
Hosts:
EmptyTemp:
RemoveProxy:
Reboot:

Enregistre le contenu par le menu fichier puis enregistrer.

Ferme le bloc-note, retourne sur FRST et clique sur le bouton "Corriger / Fix"
Un redémarrage sera peut-être nécessaire et automatique.
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

Redémarre l'ordinateur.

Ordinateur infecté

4 réponses

Fin de Fixlog 21:56:26

Discussions similaires

Newsletters