encore go save Résolu

Question

bonjour

j'ai également des soucis avec GOSAVE... j'ai suivi bcp de forum sur le sujet et j'ai aussi téléchargé bcp d'appli pour l'éliminer mais rien n'y fait... dès que je rouvre chrome gosave revient.
je l'ai supprimé des programmes window, des extensions chrome, réinitialisé chrome, lancé adwcleaner, SpyHunter, ZHPCleaner, Malwarebytes Anti-Malware.....

un coup de main svp....

Malekal_morte- · Answer

Salut,

Sur quel navigateur WEB ?
Chrome ?

Désinstalle spyhunter.
 
 
Like the angel you are, you laugh creating a lightness in my chest,
Your eyes they penetrate me,
(Your answer's always 'maybe')
That's when I got up and left

rom00026 · Answer

salut

oui sur chrome....

spyhunter supprimé...

Malekal_morte- · Answer

Fais ceci :

Exporte tes favoris : https://support.google.com/chrome/answer/96816?hl=fr
Désinstalle Google Chrome en cochant la case pour supprimer les profils.
Réinstalle Google Chrome : https://telecharger.malekal.com/download/google-chrome/

puis :


Suis ce tutorial : https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
Cela va générer deux rapports FRST.
Envoie comme expliqué, ces deux rapports sur le site pjjoint et donne les deux liens pjjoint de ces rapports afin qu'ils puissent être consultés.

rom00026 · Answer

Voici les rapports
http://pjjoint.malekal.com/files.php?id=FRST_20141129_x13y6y5d5w14
et
http://pjjoint.malekal.com/files.php?id=20141129_6t15h5u11m8

Déja apres avoir desinstallé chrome mon PC a planté.... et quand je l'ai rallumé et réinstallé chrome gosave avait disparu des extensions....

Malekal_morte- · Answer

Voici la correction à effectuer avec FRST.
Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix

Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK.
Copie/colle dedans ce qui suit : 

HKU\S-1-5-21-152911911-3783976331-3591253923-1001\...\Run: [Optimizer Pro] => C:\Program Files (x86)\Optimizer Pro 3.11\OptProLauncher.exe [148048 2014-11-20] (PC Utilities Software Limited)
HKU\S-1-5-21-152911911-3783976331-3591253923-1001\...\RunOnce: [DigitalSites] => wscript /E:vbscript /B C:\Users\ROMAIN~1\AppData\Roaming\DigitalSites\UpdateProc\bkup.dat
HKU\S-1-5-21-152911911-3783976331-3591253923-1001\...\RunOnce: [WSE_Vosteran] => wscript /E:vbscript /B C:\Users\ROMAIN~1\AppData\Roaming\WSE_Vosteran\UpdateProc\bkup.dat 
SearchScopes: HKU\S-1-5-21-152911911-3783976331-3591253923-1001 -> DefaultScope {ABD646BB-502B-42AD-99AA-7B279276251B} URL = http://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_ggfc_14_48_ch&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0CtDzz0FtD0DyD0CzztCtN0D0Tzu0StCtDyCtAtN1L2XzutAtFyCtFyCtFtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDyEtD0AzyyBtA0DtGzzzzyEtCtG0CzzyEzztGyEyByEzztGyDyD0Ezy0C0A0A0B0D0E0EtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0ByDtC0DtDtCzytGtB0F0C0AtGyEtC0EzztGzytD0AtCtG0EtDyDyB0CyBzztD0CtB0C0A2Q&cr=1528585221&ir= [Pays US - 50.16.204.38]
SearchScopes: HKU\S-1-5-21-152911911-3783976331-3591253923-1001 -> {9081B7F4-CAA5-490A-8E3C-1A645CB04015} URL =
SearchScopes: HKU\S-1-5-21-152911911-3783976331-3591253923-1001 -> {ABD646BB-502B-42AD-99AA-7B279276251B} URL = http://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_ggfc_14_48_ch&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0CtDzz0FtD0DyD0CzztCtN0D0Tzu0StCtDyCtAtN1L2XzutAtFyCtFyCtFtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDyEtD0AzyyBtA0DtGzzzzyEtCtG0CzzyEzztGyEyByEzztGyDyD0Ezy0C0A0A0B0D0E0EtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0ByDtC0DtDtCzytGtB0F0C0AtGyEtC0EzztGzytD0AtCtG0EtDyDyB0CyBzztD0CtB0C0A2Q&cr=1528585221&ir= [Pays US - 50.16.204.38]
SearchScopes: HKU\S-1-5-21-152911911-3783976331-3591253923-1001 -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL = https://fr.search.yahoo.com/web?fr=mcafee{SearchTerms} [Pays - ] 
BHO-x32: Hold Page 1.0.0.4 -> {6c14185e-4de6-4a79-985b-19f23fd1e638} -> C:\Program Files (x86)\Hold Page\HoldPagebho.dll (Hold Page) 
 CHR HomePage: Default -> hxxp://Vosteran.com/?f=1&a=vst_ggfc_14_48_ch&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0CtDzz0FtD0DyD0CzztCtN0D0Tzu0StCtDyCtAtN1L2XzutAtFyCtFyCtFtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDyEtD0AzyyBtA0DtGzzzzyEtCtG0CzzyEzztGyEyByEzztGyDyD0Ezy0C0A0A0B0D0E0EtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0ByDtC0DtDtCzytGtB0F0C0AtGyEtC0EzztGzytD0AtCtG0EtDyDyB0CyBzztD0CtB0C0A2Q&cr=1528585221&ir= [Pays US - 54.235.99.6]
CHR StartupUrls: Default -> hxxp://Vosteran.com/?f=7&a=vst_ggfc_14_48_ch&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0CtDzz0FtD0DyD0CzztCtN0D0Tzu0StCtDyCtAtN1L2XzutAtFyCtFyCtFtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDyEtD0AzyyBtA0DtGzzzzyEtCtG0CzzyEzztGyEyByEzztGyDyD0Ezy0C0A0A0B0D0E0EtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0ByDtC0DtDtCzytGtB0F0C0AtGyEtC0EzztGzytD0AtCtG0EtDyDyB0CyBzztD0CtB0C0A2Q&cr=1528585221&ir= [Pays US - 54.235.99.6]
CHR DefaultSearchKeyword: Default -> vosteran.com
CHR DefaultSearchURL: Default -> http://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_ggfc_14_48_ch&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0CtDzz0FtD0DyD0CzztCtN0D0Tzu0StCtDyCtAtN1L2XzutAtFyCtFyCtFtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDyEtD0AzyyBtA0DtGzzzzyEtCtG0CzzyEzztGyEyByEzztGyDyD0Ezy0C0A0A0B0D0E0EtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0ByDtC0DtDtCzytGtB0F0C0AtGyEtC0EzztGzytD0AtCtG0EtDyDyB0CyBzztD0CtB0C0A2Q&cr=1528585221&ir= [Pays US - 54.235.99.6] 
S2 51cdb72; c:\Program Files (x86)\Optimizer Pro 3.11\OptProCrash.dll [3105792 2014-11-29] () [File not signed] 
 R2 Update Hold Page; C:\Program Files (x86)\Hold Page\updateHoldPage.exe [525552 2014-11-29] () 
 2014-11-29 15:39 - 2014-11-29 15:39 - 00002658 _____ () C:\WINDOWS\System32\Tasks\WSE_Vosteran
2014-11-29 15:39 - 2014-11-29 15:39 - 00002658 _____ () C:\WINDOWS\System32\Tasks\Digital Sites
2014-11-29 15:39 - 2014-11-29 15:39 - 00000320 _____ () C:\WINDOWS\Tasks\WSE_Vosteran.job
2014-11-29 15:39 - 2014-11-29 15:39 - 00000320 _____ () C:\WINDOWS\Tasks\Digital Sites.job
2014-11-29 15:39 - 2014-11-29 15:39 - 00000000 ____D () C:\Users\romain pc\AppData\Roaming\WSE_Vosteran
2014-11-29 15:39 - 2014-11-29 15:39 - 00000000 ____D () C:\Users\romain pc\AppData\Roaming\DigitalSites
2014-11-29 15:39 - 2014-11-29 15:39 - 00000000 ____D () C:\Program Files (x86)\WSE_Vosteran
2014-11-29 15:39 - 2014-11-29 15:39 - 00000000 ____D () C:\Program Files (x86)\Hold Page
2014-11-29 15:38 - 2014-11-29 15:38 - 00001122 _____ () C:\Users\romain pc\Desktop\Optimizer Pro.lnk
2014-11-29 15:38 - 2014-11-29 15:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2
2014-11-29 15:38 - 2014-11-29 15:38 - 00000000 ____D () C:\Program Files\PDFCreator
2014-11-29 15:38 - 2014-11-29 15:38 - 00000000 ____D () C:\Program Files (x86)\PDF Creator 
 2014-11-15 16:22 - 2014-11-15 16:22 - 00000000 ____D () C:\ProgramData\klhbfeahopdchgbgopbapolnbphalmkc 
 
Une fois, le texte coller dans le bloc-note.
Menu Fichier puis Enregistrer sous.
A gauche, place toi sur le bureau.
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

Relance FRST et clic sur le bouton Fix
Selon comment un redémarrage est nécessaire (pas obligatoire).
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

rom00026 · Answer

ok voila le resultat

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-11-2014 01
Ran by romain pc at 2014-11-29 16:16:14 Run:2
Running from C:\Usersomain pc\Desktop
Loaded Profile: romain pc (Available profiles: romain pc & Administrateur)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
HKU\S-1-5-21-152911911-3783976331-3591253923-1001\...\Run: [Optimizer Pro] => C:\Program Files (x86)\Optimizer Pro 3.11\OptProLauncher.exe [148048 2014-11-20] (PC Utilities Software Limited) 
HKU\S-1-5-21-152911911-3783976331-3591253923-1001\...\RunOnce: [DigitalSites] => wscript /E:vbscript /B C:\Users\ROMAIN~1\AppData\Roaming\DigitalSites\UpdateProc\bkup.dat 
HKU\S-1-5-21-152911911-3783976331-3591253923-1001\...\RunOnce: [WSE_Vosteran] => wscript /E:vbscript /B C:\Users\ROMAIN~1\AppData\Roaming\WSE_Vosteran\UpdateProc\bkup.dat 
SearchScopes: HKU\S-1-5-21-152911911-3783976331-3591253923-1001 -> DefaultScope {ABD646BB-502B-42AD-99AA-7B279276251B} URL = http://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_ggfc_14_48_ch&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0CtDzz0FtD0DyD0CzztCtN0D0Tzu0StCtDyCtAtN1L2XzutAtFyCtFyCtFtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDyEtD0AzyyBtA0DtGzzzzyEtCtG0CzzyEzztGyEyByEzztGyDyD0Ezy0C0A0A0B0D0E0EtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0ByDtC0DtDtCzytGtB0F0C0AtGyEtC0EzztGzytD0AtCtG0EtDyDyB0CyBzztD0CtB0C0A2Q&cr=1528585221&ir= [Pays US - 50.16.204.38] 
SearchScopes: HKU\S-1-5-21-152911911-3783976331-3591253923-1001 -> {9081B7F4-CAA5-490A-8E3C-1A645CB04015} URL = 
SearchScopes: HKU\S-1-5-21-152911911-3783976331-3591253923-1001 -> {ABD646BB-502B-42AD-99AA-7B279276251B} URL = http://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_ggfc_14_48_ch&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0CtDzz0FtD0DyD0CzztCtN0D0Tzu0StCtDyCtAtN1L2XzutAtFyCtFyCtFtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDyEtD0AzyyBtA0DtGzzzzyEtCtG0CzzyEzztGyEyByEzztGyDyD0Ezy0C0A0A0B0D0E0EtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0ByDtC0DtDtCzytGtB0F0C0AtGyEtC0EzztGzytD0AtCtG0EtDyDyB0CyBzztD0CtB0C0A2Q&cr=1528585221&ir= [Pays US - 50.16.204.38] 
SearchScopes: HKU\S-1-5-21-152911911-3783976331-3591253923-1001 -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL = https://fr.search.yahoo.com/search?fr=mcafee&type=B011FR501D20140810&p={SearchTerms} [Pays - ] 
BHO-x32: Hold Page 1.0.0.4 -> {6c14185e-4de6-4a79-985b-19f23fd1e638} -> C:\Program Files (x86)\Hold Page\HoldPagebho.dll (Hold Page) 
CHR HomePage: Default -> hxxp://Vosteran.com/?f=1&a=vst_ggfc_14_48_ch&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0CtDzz0FtD0DyD0CzztCtN0D0Tzu0StCtDyCtAtN1L2XzutAtFyCtFyCtFtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDyEtD0AzyyBtA0DtGzzzzyEtCtG0CzzyEzztGyEyByEzztGyDyD0Ezy0C0A0A0B0D0E0EtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0ByDtC0DtDtCzytGtB0F0C0AtGyEtC0EzztGzytD0AtCtG0EtDyDyB0CyBzztD0CtB0C0A2Q&cr=1528585221&ir= [Pays US - 54.235.99.6] 
CHR StartupUrls: Default -> hxxp://Vosteran.com/?f=7&a=vst_ggfc_14_48_ch&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0CtDzz0FtD0DyD0CzztCtN0D0Tzu0StCtDyCtAtN1L2XzutAtFyCtFyCtFtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDyEtD0AzyyBtA0DtGzzzzyEtCtG0CzzyEzztGyEyByEzztGyDyD0Ezy0C0A0A0B0D0E0EtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0ByDtC0DtDtCzytGtB0F0C0AtGyEtC0EzztGzytD0AtCtG0EtDyDyB0CyBzztD0CtB0C0A2Q&cr=1528585221&ir= [Pays US - 54.235.99.6] 
CHR DefaultSearchKeyword: Default -> vosteran.com 
CHR DefaultSearchURL: Default -> http://Vosteran.com/results.php?f=4&q={searchTerms}&a=vst_ggfc_14_48_ch&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtB0CtDzz0FtD0DyD0CzztCtN0D0Tzu0StCtDyCtAtN1L2XzutAtFyCtFyCtFtDtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDyEtD0AzyyBtA0DtGzzzzyEtCtG0CzzyEzztGyEyByEzztGyDyD0Ezy0C0A0A0B0D0E0EtB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyB0ByDtC0DtDtCzytGtB0F0C0AtGyEtC0EzztGzytD0AtCtG0EtDyDyB0CyBzztD0CtB0C0A2Q&cr=1528585221&ir= [Pays US - 54.235.99.6] 
S2 51cdb72; c:\Program Files (x86)\Optimizer Pro 3.11\OptProCrash.dll [3105792 2014-11-29] () [File not signed] 
R2 Update Hold Page; C:\Program Files (x86)\Hold Page\updateHoldPage.exe [525552 2014-11-29] () 
2014-11-29 15:39 - 2014-11-29 15:39 - 00002658 _____ () C:\WINDOWS\System32\Tasks\WSE_Vosteran 
2014-11-29 15:39 - 2014-11-29 15:39 - 00002658 _____ () C:\WINDOWS\System32\Tasks\Digital Sites 
2014-11-29 15:39 - 2014-11-29 15:39 - 00000320 _____ () C:\WINDOWS\Tasks\WSE_Vosteran.job 
2014-11-29 15:39 - 2014-11-29 15:39 - 00000320 _____ () C:\WINDOWS\Tasks\Digital Sites.job 
2014-11-29 15:39 - 2014-11-29 15:39 - 00000000 ____D () C:\Usersomain pc\AppData\Roaming\WSE_Vosteran 
2014-11-29 15:39 - 2014-11-29 15:39 - 00000000 ____D () C:\Usersomain pc\AppData\Roaming\DigitalSites 
2014-11-29 15:39 - 2014-11-29 15:39 - 00000000 ____D () C:\Program Files (x86)\WSE_Vosteran 
2014-11-29 15:39 - 2014-11-29 15:39 - 00000000 ____D () C:\Program Files (x86)\Hold Page 
2014-11-29 15:38 - 2014-11-29 15:38 - 00001122 _____ () C:\Usersomain pc\Desktop\Optimizer Pro.lnk 
2014-11-29 15:38 - 2014-11-29 15:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2 
2014-11-29 15:38 - 2014-11-29 15:38 - 00000000 ____D () C:\Program Files\PDFCreator
2014-11-29 15:38 - 2014-11-29 15:38 - 00000000 ____D () C:\Program Files (x86)\PDF Creator 
2014-11-15 16:22 - 2014-11-15 16:22 - 00000000 ____D () C:\ProgramData\klhbfeahopdchgbgopbapolnbphalmkc 
*****************

HKU\S-1-5-21-152911911-3783976331-3591253923-1001\Software\Microsoft\Windows\CurrentVersion\Run\Optimizer Pro => Value not found.
HKU\S-1-5-21-152911911-3783976331-3591253923-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce\DigitalSites => Value not found.
HKU\S-1-5-21-152911911-3783976331-3591253923-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce\WSE_Vosteran => Value not found.
HKU\S-1-5-21-152911911-3783976331-3591253923-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\DefaultScope => Value not found.
"HKU\S-1-5-21-152911911-3783976331-3591253923-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9081B7F4-CAA5-490A-8E3C-1A645CB04015}" => Key not found.
"HKCR\CLSID\{9081B7F4-CAA5-490A-8E3C-1A645CB04015}" => Key not found.
"HKU\S-1-5-21-152911911-3783976331-3591253923-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{ABD646BB-502B-42AD-99AA-7B279276251B}" => Key not found.
"HKCR\CLSID\{ABD646BB-502B-42AD-99AA-7B279276251B}" => Key not found.
"HKU\S-1-5-21-152911911-3783976331-3591253923-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77}" => Key not found.
"HKCR\CLSID\{DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77}" => Key not found.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6c14185e-4de6-4a79-985b-19f23fd1e638}" => Key not found.
"HKCR\Wow6432Node\CLSID\{6c14185e-4de6-4a79-985b-19f23fd1e638}" => Key not found.
Chrome HomePage deleted successfully.
Chrome StartupUrls deleted successfully.
Chrome DefaultSearchKeyword deleted successfully.
Chrome DefaultSearchURL deleted successfully.
51cdb72 => Service not found.
Update Hold Page => Service not found.
"C:\WINDOWS\System32\Tasks\WSE_Vosteran" => File/Directory not found.
"C:\WINDOWS\System32\Tasks\Digital Sites" => File/Directory not found.
"C:\WINDOWS\Tasks\WSE_Vosteran.job" => File/Directory not found.
"C:\WINDOWS\Tasks\Digital Sites.job" => File/Directory not found.
"C:\Usersomain pc\AppData\Roaming\WSE_Vosteran" => File/Directory not found.
"C:\Usersomain pc\AppData\Roaming\DigitalSites" => File/Directory not found.
"C:\Program Files (x86)\WSE_Vosteran" => File/Directory not found.
"C:\Program Files (x86)\Hold Page" => File/Directory not found.
"C:\Usersomain pc\Desktop\Optimizer Pro.lnk" => File/Directory not found.
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2" => File/Directory not found.
"C:\Program Files\PDFCreator" => File/Directory not found.
"C:\Program Files (x86)\PDF Creator" => File/Directory not found.
"C:\ProgramData\klhbfeahopdchgbgopbapolnbphalmkc" => File/Directory not found.

==== End of Fixlog ====

Malekal_morte- · Answer

Plus de go save en extension sur Google Chrome ?

rom00026 · Answer

non nickel !!!

merci bien !!!!!

Malekal_morte- · Answer

:)


Quelques conseils :

Installe Malwarebyte's Anti-Malware : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Fais des scans réguliers avec, il est efficace.



Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start=


Pour ne plus te faire avoir.
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/

Encore go save

9 réponses

Discussions similaires

Newsletters