Delta Search
Résolu
Bonjour,
Je me retrouve avec le fameux Delta Search que j'ai pu supprimer de IE mais impossible de l'enlever de Mozilla.
Quelqu'un peut-il m'aider ?
Cordialement
Je me retrouve avec le fameux Delta Search que j'ai pu supprimer de IE mais impossible de l'enlever de Mozilla.
Quelqu'un peut-il m'aider ?
Cordialement
12 réponses
-
J'aurais du commencer par là :
un coup d'Adwcleaner et Delta Search a disparu ! -
salut poste ton rapport d'adwcleaner
ensuite , il en reste , fais ceci :
http://security-helpzone.com/gen-hackman/tutos-canneds/junkware-removal-tool/
-
Rapport Adwcleaner : https://www.cjoint.com/?0HqjUU5XJio
-
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.4.6 (08.15.2013:1)
OS: Windows 7 Enterprise x86
Ran by MARC on 16/08/2013 at 9:50:08,01
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs
~~~ Registry Keys
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\browserdefender"
Successfully deleted: [Folder] "C:\Users\MARC\Qtrax"
~~~ FireFox
Successfully deleted: [File] C:\Users\MARC\AppData\Roaming\mozilla\firefox\profiles\lvla1da4.default\searchplugins\babylon.xml
Emptied folder: C:\Users\MARC\AppData\Roaming\mozilla\firefox\profiles\lvla1da4.default\minidumps [106 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16/08/2013 at 9:53:09,29
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-
fais ce diagnostique :
http://security-helpzone.com/gen-hackman/tutos-canneds/otl-2/
-
passe Malwarebyte's tel que décrit ici :
https://www.security-helpzone.com/2013/04/17/malwarebytes-anti-malware-mbam-detecteur-generaliste-de-menaces/
-
j'ai demandé le rapport après suppression des eelements trouvés
-
va falloir arrêter de faire n'importe quoi sur internet
==
refais OTL sous les mêmes conditions
-
ATTENTION !!! : Script personnalisé pour cette machine uniquement , ne pas reproduire !!
si tu as XP => double clique
si tu as Vista ou windows 7 => clic droit "executer en tant que...."
sur OTL.exe pour le lancer.
▶Copie la liste qui se trouve en gras ci-dessous,
▶ colle-la dans la zone sous "Personnalisation" :
:processes
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
Teatimer.exe
:OTL
IE - HKCU\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
FF - user.js - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
[2013/08/15 09:30:27 | 000,000,000 | ---D | C] -- C:\Windows\System32\Extensions
[2013/08/15 09:30:26 | 000,000,000 | ---D | C] -- C:\Windows\System32\searchplugins
[2013/08/16 08:37:10 | 000,000,098 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat
[2013/08/08 19:18:50 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox.bak
:Reg
[-HKEY_CURRENT_USER\Software\Qtrax]
[-HKEY_LOCAL_MACHINE\Software\Eset]
:commands
[emptytemp]
▶ Clique sur "Correction" pour lancer la suppression.
▶ Poste le rapport qui logiquement s'ouvrira tout seul en fin de travail appres le redemarrage.
-
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: MARC
->Temp folder emptied: 43300653 bytes
->Temporary Internet Files folder emptied: 151313431 bytes
->FireFox cache emptied: 18736294 bytes
->Flash cache emptied: 2981 bytes
User: Public
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 11292797 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33298 bytes
RecycleBin emptied: 58014413 bytes
Total Files Cleaned = 270,00 mb
OTL by OldTimer - Version 3.2.69.0 log created on 08162013_165345
Files\Folders moved on Reboot...
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
-
-
je peux l'avoir entier ?
-
All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
No active process named iexplore.exe was found!
No active process named firefox.exe was found!
No active process named msnmsgr.exe was found!
No active process named Teatimer.exe was found!
========== OTL ==========
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found.
Folder C:\Windows\System32\Extensions\ not found.
Folder C:\Windows\System32\searchplugins\ not found.
File C:\Windows\DeleteOnReboot.bat not found.
Folder C:\Program Files\Mozilla Firefox.bak\ not found.
========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\Software\Qtrax\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Eset\ not found.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: MARC
->Temp folder emptied: 703 bytes
->Temporary Internet Files folder emptied: 855636 bytes
->FireFox cache emptied: 17768560 bytes
->Flash cache emptied: 492 bytes
User: Public
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1858 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 18,00 mb
OTL by OldTimer - Version 3.2.69.0 log created on 08162013_201401
Files\Folders moved on Reboot...
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
-
-
plus de soucis ?
-
Tout à l'air de bien se passer maintenant.
-
ok fais le menage final :
http://security-helpzone.com/gen-hackman/nettoyage-en-fin-de-desinfection/
¤¤¤¤¤¤¤¤¤¤_Pre_Scan_Concept_¤¤¤¤¤¤¤¤¤¤
Windows 8 => meme flop que Vista X 10...Tiranium Antivirus Attention => Fake
