Searchnu 414

deja fait un cleaner malwarebytes zhpdiag ....

Bonjour,

Poste les rapports.

https://www.cjoint.com/?BKevRaABlOL
https://www.cjoint.com/?BKevHFpxySL

après avoir suivi exactement tous ce qui était dit dans un précédant sujet searchnu est toujours actif que faire

Il vient d'où le script utilisé avec ZHPFix ?

du sujet que j ai suivi https://forums.commentcamarche.net/forum/affich-24674518-supprimer-searchnu-com-414

Il faut éviter d'utiliser le script prévu pour un autre PC.

--> Télécharge et lance AdwCleaner (d'Xplode), choisis l'option "Suppression" et poste le rapport.

j'ai désinstaller et réinstaller google chrome fait toutes les manip et cette saloperie de searchnu résiste

https://www.cjoint.com/?BKewvbnvoTx

voila le lien du rapport adwcleaner

--> Copie tout le texte présent en gras ci-dessous (Sélectionne-le, clique droit dessus et choisis "Copier").

SysRestore
G0 - GCSP: Preference [User Data\Default][HomePage] http://www.searchnu.com
G0 - GCSP: Preference [User Data\Default] http://www.searchnu.com
G1 - GCS: Preference [User Data\Default] https://www.search.ask.com/web?l=dis&q=&o=APN10655A&apn_dtid=%5EBND101%5EYY%5EFR&shad=s_0048&gct=hp&apn_ptnrs=%5EAG5&d=101-0&lang=en&atb=sysid%3D101%3Auid%3D58c9331d816657ac%3Asrc%3Dhmp%3Ao%3DAPN10655A%3Atg%3D&p2=%5EAG5%5EBND101%5EYY%5EFR
M3 - MFPP: Plugins - [Romain] -- C:\Users\Romain\AppData\Roaming\Mozilla\Firefox\Profiles\s38czqzc.default\searchplugins\Search_Results.xml
M3 - MFPP: Plugins - [Romain] -- C:\Users\Romain\AppData\Roaming\Mozilla\Firefox\Profiles\s38czqzc.default\searchplugins\Web Search.xml
M3 - MFPP: Plugins - [Romain] -- C:\Program Files\Mozilla FireFox\searchplugins\Search_Results.xml
M0 - MFSP: prefs.js [Romain - s38czqzc.default] http://www.searchnu.com
M2 - MFEP: prefs.js [Romain - s38czqzc.default\cacaoweb@cacaoweb.org] [] cacaoweb v1.0.28 (.http://www.cacaoweb.org/
M2 - MFEP: prefs.js [Romain - s38czqzc.default\helperbar@helperbar.com] [] Snap.Do v1.0.28 (.Snap.Do.)
R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww1.bigseekpro.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = https://search.safefinder.com/?st=ds&q={searchterms}
O2 - BHO: (no name) - {31ad400d-1b06-4e33-a59a-90c2c140cba0} Clé orpheline
O2 - BHO: (no name) - {99079a25-328f-4bd4-be04-00955acaa0a7} Clé orpheline
O2 - BHO: (no name) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} Clé orpheline
O3 - Toolbar: (no name) - [HKLM]{338B4DFE-2E2C-4338-9E41-E176D497299E} . (...) -- (.not file.)
O3 - Toolbar: (no name) - [HKLM]{ae07101b-46d4-4a98-af68-0333ea26e113} . (...) -- (.not file.)
O3 - Toolbar: (no name) - [HKLM]{99079a25-328f-4bd4-be04-00955acaa0a7} . (...) -- (.not file.)
O4 - HKCU\..\Run: [Browser Infrastructure Helper] . (.Smartbar - Smartbar.) -- C:\Users\Romain\AppData\Local\Smartbar\Application\SnapDo.exe
O4 - HKUS\S-1-5-21-2210877300-1918626698-4132262208-1001\..\Run: [Browser Infrastructure Helper] . (.Smartbar - Smartbar.) -- C:\Users\Romain\AppData\Local\Smartbar\Application\SnapDo.exe
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\AutoKMS.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\AutoKMSDaily.job
[MD5.00000000000000000000000000000000] [APT] [{56485F57-A851-41A6-B5D2-9E518C85B662}] (...) -- C:\Program Files\Norton Internet Security\Engine\16.0.0.125\RunCmd.exe (.not file.)
O42 - Logiciel: Hyperionics DB Toolbar - (.Pas de propriétaire.) [HKLM] -- Hyperionics DB Toolbar
O42 - Logiciel: Snap.Do - (.ReSoft Ltd..) [HKLM] -- {02F88255-B4AC-43C9-AA47-B82C0DA00A24}
[HKCU\Software\AppDataLow\Software\searchqutoolbar]
[HKCU\Software\Datamngr]
[HKCU\Software\SMTTB2009]
[HKCU\Software\SmartbarBackup]
[HKCU\Software\SmartbarLog]
[HKCU\Software\Smartbar]
[HKCU\Software\cacaoweb]
O43 - CFD: 14/10/2011 - 18:45:18 - [3,626] ----D C:\Program Files\Hyperionics DB Toolbar
O43 - CFD: 04/11/2012 - 21:17:49 - [714,320] ----D C:\Users\Romain\AppData\Roaming\cacaoweb
O43 - CFD: 22/09/2012 - 19:09:59 - [16,166] ----D C:\Users\Romain\AppData\Roaming\OpenCandy
O43 - CFD: 27/09/2012 - 21:17:39 - [16,982] ----D C:\Users\Romain\AppData\Local\Smartbar
O69 - SBI: SearchScopes [HKCU] {006ee092-9658-4fd6-bd8e-a21a348e59f5} - (Web Search) - https://search.safefinder.com/?st=ds&q={searchTerms}
O69 - SBI: SearchScopes [HKCU] {96bd48dd-741b-41ae-ac4a-aff96ba00f7e} - (Search) - http://ww1.bigseekpro.com
O69 - SBI: SearchScopes [HKCU] {9BB47C17-9C68-4BB3-B188-DD9AF0FD2414} - (Search Results) - https://www.search.ask.com/web?l=dis&q=&o=APN10655A&apn_dtid=%5EBND101%5EYY%5EFR&shad=s_0048&gct=hp&apn_ptnrs=%5EAG5&d=101-0&lang=en&atb=sysid%3D101%3Auid%3D58c9331d816657ac%3Asrc%3Dhmp%3Ao%3DAPN10655A%3Atg%3D&p2=%5EAG5%5EBND101%5EYY%5EFR
O87 - FAEL: "TCP Query User{FAFE510D-C298-4656-A70A-3E9B7218E1DD}C:\windows\kmsemulator.exe" | In - Public - P6 - TRUE | .(...) -- C:\windows\kmsemulator.exe
O87 - FAEL: "TCP Query User{FAFE510D-C298-4656-A70A-3E9B7218E1DD}C:\windows\kmsemulator.exe" | In - Public - P6 - TRUE | .(...) -- C:\windows\kmsemulator.exe
O87 - FAEL: "TCP Query User{95DC62E1-94D2-4C49-AF03-0819709AF345}C:\users\romain\appdata\roaming\cacaoweb\cacaoweb.exe" |In - Public - P6 - TRUE | .(...) -- C:\users\romain\appdata\roaming\cacaoweb\cacaoweb.exe (.not file.)
O87 - FAEL: "UDP Query User{41B55597-C2C7-469D-8C4B-25D21F1E089D}C:\users\romain\appdata\roaming\cacaoweb\cacaoweb.exe" |In - Public - P17 - TRUE | .(...) -- C:\users\romain\appdata\roaming\cacaoweb\cacaoweb.exe (.not file.)
[HKLM\Software\Classes\AppID\TbCommonUtils.DLL]
[HKLM\Software\Classes\AppID\TbHelper.EXE]
[HKLM\Software\Classes\TbCommonUtils.CommonUtils]
[HKLM\Software\Classes\TbCommonUtils.CommonUtils.1]
[HKLM\Software\Classes\TbHelper.TbDownloadManager]
[HKLM\Software\Classes\TbHelper.TbDownloadManager.1]
[HKLM\Software\Classes\TbHelper.TbPropertyManager]
[HKLM\Software\Classes\TbHelper.TbPropertyManager.1]
[HKLM\Software\Classes\TbHelper.TbRequest]
[HKLM\Software\Classes\TbHelper.TbRequest.1]
[HKLM\Software\Classes\TbHelper.TbTask]
[HKLM\Software\Classes\TbHelper.TbTask.1]
[HKLM\Software\Classes\TbHelper.ToolbarHelper]
[HKLM\Software\Classes\TbHelper.ToolbarHelper.1]
[HKLM\Software\Classes\Toolbar3.ContextMenuNotifier]
[HKLM\Software\Classes\Toolbar3.ContextMenuNotifier.1]
[HKLM\Software\Classes\Toolbar3.CustomInternetSecurityImpl]
[HKLM\Software\Classes\Toolbar3.CustomInternetSecurityImpl.1]
[HKLM\Software\Classes\URLSearchHook.ToolbarURLSearchHook]
[HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook]
[HKLM\Software\Classes\urlsearchhook.toolbarurlsearchhook.1]
[HKLM\Software\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}]
[HKLM\Software\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8}]
[HKLM\Software\Classes\Interface\{2a42d13c-d427-4787-821b-cf6973855778}]
[HKLM\Software\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{338B4DFE-2E2C-4338-9E41-E176D497299E}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{338B4DFE-2E2C-4338-9E41-E176D497299E}]
[HKLM\Software\Classes\CLSID\{338B4DFE-2E2C-4338-9E41-E176D497299E}]
[HKLM\Software\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F}]
[HKLM\Software\Classes\Interface\{3d8478aa-7b88-48a9-8bcb-b85d594411ec}]
[HKLM\Software\Classes\TypeLib\{4509D3CC-B642-4745-B030-645B79522C6D}]
[HKLM\Software\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F}]
[HKLM\Software\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979}]
[HKLM\Software\Classes\Interface\{4897bba6-48d9-468c-8efa-846275d7701b}]
[HKLM\Software\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E}]
[HKLM\Software\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE}]
[HKLM\Software\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291}]
[HKLM\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}]
[HKLM\Software\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}]
[HKLM\Software\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29}]
[HKLM\Software\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC}]
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
[HKLM\Software\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
[HKLM\Software\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052}]
[HKLM\Software\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5}]
[HKLM\Software\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5}]
[HKLM\Software\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659}]
[HKLM\Software\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148}]
[HKLM\Software\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47}]
[HKLM\Software\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C}]
[HKLM\Software\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70}]
[HKLM\Software\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C}]
[HKLM\Software\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0}]
[HKLM\Software\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6}]
[HKLM\Software\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B}]
[HKLM\Software\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F}]
[HKLM\Software\Classes\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
[HKLM\Software\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
[HKCU\Software\cacaoweb]
[HKCU\Software\DataMngr]
[HKLM\Software\Minibar]
[HKCU\Software\AppDataLow\Software\searchqutoolbar]
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Hyperionics DB Toolbar]
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{99079A25-328F-4BD4-BE04-00955ACAA0A7}
C:\Users\Romain\AppData\Roaming\cacaoweb
C:\Users\Romain\AppData\Roaming\OpenCandy
C:\Users\Romain\AppData\LocalLow\searchquband
C:\Users\Romain\AppData\LocalLow\Toolbar4
C:\Users\Romain\AppData\Roaming\Mozilla\Firefox\Profiles\s38czqzc.default\Extensions\cacaoweb@cacaoweb.org
O4 - Global Startup: C:\Users\Romain\Desktop\avast! Free Antivirus.lnk . (...) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe (.not file.)
[HKCU\Software\AVAST Software]
[HKLM\Software\AVAST Software]
O43 - CFD: 08/04/2011 - 12:32:18 - [0,001] ----D C:\Program Files\AVAST Software
O43 - CFD: 03/08/2012 - 12:56:57 - [0] ----D C:\ProgramData\AVAST Software
EmptyCLSID
EmptyFlash
EmptyTemp

--> Puis lance ZHPFix depuis le raccourci situé sur ton Bureau.
(Sous Vista/Win7, il faut cliquer droit sur le raccourci de ZHPFix et choisir Exécuter en tant qu'administrateur)

--> Une fois ZHPFix ouvert, clique sur le bouton "Coller le presse-papier".

--> Dans l'encadré principal, tu verras donc les lignes que tu as copié précédemment apparaître. Vérifie que toutes les lignes que je t'ai demandé de copier (et seulement elles) sont dans la fenêtre.

--> Clique sur "GO" pour lancer le nettoyage. Laisse l'outil travailler et ne touche à rien.

--> Une fois terminé, copie-colle le rapport dans ton prochain message.

les lien aussi doivent y etre?

Oui.

voila le rapport https://www.cjoint.com/?BKewMu5pPr5 .

ensuite??

Je voudrais un nouveau rapport ZHPDiag.

ce sera le même non?

Non.

le voila https://www.cjoint.com/?BKexLXkx5sq

searchnu414 t'embête encore ?

oui dès que je lance chrome ou un autre navigateur il apparait