Mon Pc plante quand j'utilise adwCleaner
Résolu
Bonjour,
J'ai un problème comme dit dan le titre, je vais tout vous expliquer depuis le début.
Mon Pc est infecté par un virus parasite (des appli tel que big farm et big bang empire s'installent toute seuls, ma page d'accueil de mon navigateur a changé, j'ai beau essayer de la remettre, elle rechange, mon pc es devenu lent...), j'ai donc décidé de télécharger adwcleaner mais je ne peux pas lancer de programme en mode administrateur, j'ai donc effectué un redémarrage avec"mode sans échec", une fois cela fait je blanc adwcleaner, je fais le scan, et quand je fais nettoyer, mon Pc crash...
Je ne sais pas quoi faire..
Cordialement
J'ai un problème comme dit dan le titre, je vais tout vous expliquer depuis le début.
Mon Pc est infecté par un virus parasite (des appli tel que big farm et big bang empire s'installent toute seuls, ma page d'accueil de mon navigateur a changé, j'ai beau essayer de la remettre, elle rechange, mon pc es devenu lent...), j'ai donc décidé de télécharger adwcleaner mais je ne peux pas lancer de programme en mode administrateur, j'ai donc effectué un redémarrage avec"mode sans échec", une fois cela fait je blanc adwcleaner, je fais le scan, et quand je fais nettoyer, mon Pc crash...
Je ne sais pas quoi faire..
Cordialement
6 réponses
-
ModérateurSalut,
Suis le tutoriel FRST. ( prends le temps de lire attentivement - tout y est bien expliqué ).
Télécharge et lance le scan FRST, 3 rapports FRST seront générés :- FRST.txt
- Shortcut.txt
- Additionnal.txt
Envoie ces 3 rapports sur le site http://pjjoint.malekal.com/ et en retour donne les 3 liens pjjoint qui mènent aux rapports ici dans une nouvelle réponse afin que l'on puisse les consulter.
-
Merci de ta réponse,
Voici les 3 rapports:
FRST: http://pjjoint.malekal.com/files.php?id=FRST_20170527_s14i7b14s15b11
Shortcut: http://pjjoint.malekal.com/files.php?id=20170527_w14x10c10y11m8
Additional: http://pjjoint.malekal.com/files.php?id=20170527_m12l7l7m10x15 -
Modérateuril est complètement infecté ton ordinateur.
Compte tenu de tous les parasites installés et tous les programmes inutiles (IOBit, Reimage etc), ce serait peut-être plus judicieux de réinitialiser Windows au lieu de tenter de le désinstaller...
=> Comment réinitialiser Windows 10.
~~
Sinon :
Désinstalle tous les programmes IOBit, sert à rien, ça encombre et ralentit Windows
Advanced SystemCare Ultimate
IObit Uninstaller
IOBit MalwareFighter
Java
MEGAsync (utile?)
Reimage Repair
WildTangent Games
WiperSoft
Voici la correction à effectuer avec FRST. Tu peux t'aider de cette note explicative avec des captures d'écran.
Ouvre le bloc-notes : Touche Windows + R,
Dans le champs "Exécuter", saisir notepad et OK.
Copie/Colle dedans ce qui suit :
CreateRestorePoint:
CloseProcesses:
2017-05-25 14:23 - 2017-05-25 14:23 - 00000000 ____D C:\Program Files (x86)\Hippig
2017-05-25 14:23 - 2017-05-25 14:23 - 00000000 ____D C:\Program Files (x86)\Firefox
2017-05-25 14:21 - 2017-05-25 14:21 - 00000000 ____D C:\WINDOWS\system32\log
2017-05-25 14:21 - 2017-05-25 14:21 - 00000000 ____D C:\Users\arthu\AppData\Roaming\Elex-tech
2017-05-25 14:21 - 2017-05-25 14:21 - 00000000 ____D C:\Program Files (x86)\Elex-tech
2017-05-25 14:19 - 2017-05-25 14:19 - 00000000 ____D C:\Users\arthu\AppData\Local\background_fault
2017-05-25 14:11 - 2017-05-25 14:11 - 00002632 _____ C:\WINDOWS\System32\Tasks\Milimili
2017-05-25 14:05 - 2017-05-25 14:05 - 00000000 ____D C:\Cosusp
2017-05-24 21:28 - 2017-05-27 11:56 - 00000195 _____ C:\Users\arthu\BullseyeCoverageError.txt
2017-05-24 21:20 - 2017-05-24 21:21 - 00000176 _____ C:\Users\Default\BullseyeCoverageError.txt
2017-05-24 17:27 - 2017-05-24 17:31 - 63035592 _____ (Malwarebytes ) C:\Users\arthu\Desktop\mb3-setup-consumer-3.1.2.1733.exe
2017-05-24 16:57 - 2017-05-24 16:57 - 04110280 _____ C:\Users\arthu\Downloads\adwcleaner_6.047.exe
2017-05-24 16:22 - 2017-05-24 17:11 - 04110280 _____ C:\Users\arthu\Desktop\adwcleaner_6.047.exe
2017-05-24 16:15 - 2017-05-24 16:27 - 00000000 ____D C:\ProgramData\miaA804.tmp
2017-05-24 16:15 - 2017-05-24 16:15 - 00000000 ____D C:\Users\arthu\AppData\Local\IIIQF
2017-05-24 16:15 - 2017-05-24 16:15 - 00000000 ____D C:\ProgramData\Solvusoft
2017-05-24 16:15 - 2017-05-24 16:15 - 00000000 ____D C:\ProgramData\{B96EB44A-7860-4F13-BC9A-0A73CA5F11C2}
2017-05-24 16:14 - 2017-05-24 16:14 - 08932000 _____ (Solvusoft Corporation ) C:\Users\arthu\Downloads\Setup_WinThruster_2016.exe
2017-05-22 19:09 - 2017-05-22 19:09 - 02903912 _____ C:\WINDOWS\system32\Drivers\netboostmaster.sys
2017-05-18 20:11 - 2017-05-24 16:29 - 00001282 _____ C:\Users\arthu\Desktop\cmd.lnk
2017-05-18 19:57 - 2017-05-18 19:57 - 00000000 ____D C:\Users\arthu\AppData\Roaming\Wireshark
2017-05-18 19:54 - 2017-05-18 19:54 - 00001569 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark Legacy.lnk
2017-05-18 19:50 - 2017-05-25 22:54 - 00001289 _____ C:\Users\arthu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-05-18 19:50 - 2017-05-25 22:54 - 00001167 _____ C:\Users\arthu\Desktop\Mozilla Firefox.lnk
2017-05-18 17:42 - 2017-05-24 17:17 - 00000000 ____D C:\Program Files (x86)\MIO
2017-05-18 17:42 - 2017-05-18 17:42 - 00000000 ____D C:\Users\arthu\AppData\Roaming\SNARER
2017-05-18 17:42 - 2017-05-18 17:42 - 00000000 ____D C:\Program Files (x86)\SNARE
2017-05-18 17:36 - 2017-05-25 14:05 - 00000000 ____D C:\Program Files (x86)\Qerbeckarefeph
2017-05-18 17:19 - 2017-05-24 15:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-05-18 17:19 - 2017-05-24 15:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-05-17 22:51 - 2017-05-24 16:59 - 00002456 _____ C:\WINDOWS\wininit.ini
2017-05-17 22:42 - 2017-05-17 22:42 - 00000000 ____D C:\ProgramData\XLiPlatform
2017-05-17 22:39 - 2017-05-27 11:49 - 02785584 _____ C:\WINDOWS\netboostmasterHelp.dll
2017-05-17 22:39 - 2017-05-17 22:39 - 02941800 _____ C:\WINDOWS\system32\Drivers\F785D4AC4C7B.dat
2017-05-17 22:19 - 2017-05-17 22:39 - 00000000 ____D C:\ProgramData\Cache
2017-05-17 22:19 - 2017-05-17 22:30 - 00002648 _____ C:\WINDOWS\System32\Tasks\UCBrowserUpdaterCore
2017-05-17 22:19 - 2017-05-17 22:23 - 00003476 _____ C:\WINDOWS\System32\Tasks\UCBrowserSecureUpdater
2017-05-17 22:19 - 2017-05-17 22:19 - 00016780 _____ C:\WINDOWS\System32\Tasks\Exalizer
2017-05-17 22:19 - 2017-05-17 22:19 - 00003494 _____ C:\WINDOWS\System32\Tasks\UCBrowserUpdater
2017-05-17 22:19 - 2017-05-17 22:19 - 00000000 ____D C:\Users\arthu\AppData\Local\UCBrowser
2017-05-17 22:18 - 2017-05-17 22:49 - 00000000 ____D C:\Program Files (x86)\WindowsTM
2017-05-17 22:18 - 2017-05-17 22:18 - 00454440 _____ C:\WINDOWS\SysWOW64\Auhardwaregl.dll
2017-05-17 22:18 - 2017-05-17 22:18 - 00196640 _____ C:\WINDOWS\system32\Drivers\Uefochubsrv.sys
2017-05-17 22:16 - 2017-05-17 22:16 - 00002297 ___RS C:\Users\Public\Desktop\Нeаrthstоnе.lnk
2017-05-17 22:16 - 2017-05-17 22:16 - 00002200 ___RS C:\Users\Public\Desktop\Оvеrwatch.lnk
2017-05-17 22:16 - 2017-05-17 22:16 - 00002116 ___RS C:\Users\Public\Desktop\Lеaguе of Lеgends.lnk
2017-05-17 22:16 - 2017-05-17 22:16 - 00002097 ___RS C:\Users\arthu\Desktop\Мinecraft.lnk
2017-05-17 22:16 - 2017-05-17 22:16 - 00001269 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firеfоx.lnk
2017-05-17 22:16 - 2017-05-17 22:16 - 00001232 ___RS C:\Users\arthu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Сhromium.lnk
2017-05-17 22:15 - 2017-05-17 22:18 - 00000000 ____D C:\Users\arthu\AppData\Roaming\UCChannel
2017-05-17 22:15 - 2017-05-17 22:16 - 00000000 ____D C:\Users\arthu\AppData\Roaming\Browsers
2017-05-17 22:15 - 2017-05-17 22:15 - 00000000 ____D C:\Users\arthu\AppData\Roaming\SPI
2017-05-17 22:15 - 2017-05-17 22:15 - 00000000 ____D C:\Users\arthu\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk
2017-05-17 21:51 - 2017-05-17 21:51 - 00003524 _____ C:\WINDOWS\System32\Tasks\Reimage Reminder
2017-05-17 21:50 - 2017-05-17 21:50 - 00004340 _____ C:\WINDOWS\System32\Tasks\ReimageUpdater
2017-05-17 21:48 - 2017-05-17 22:51 - 00000140 _____ C:\WINDOWS\Reimage.ini
2017-05-17 18:49 - 2017-05-17 18:49 - 00002670 _____ C:\Users\Public\Desktop\Skype.lnk
2017-05-17 18:49 - 2017-05-17 18:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-05-17 16:33 - 2017-05-25 22:54 - 00002061 ____H C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-05-16 21:38 - 2017-05-16 21:38 - 00023032 _____ (Wiper Software) C:\WINDOWS\system32\wiperrm.exe
2017-05-16 21:38 - 2017-05-16 21:38 - 00003380 _____ C:\WINDOWS\System32\Tasks\WiperSoft Startup
2017-05-16 21:37 - 2017-05-17 17:46 - 00000000 ____D C:\Users\arthu\AppData\Roaming\WiperSoft
2017-05-16 21:34 - 2017-05-16 21:34 - 01979944 _____ (WiperSoft) C:\Users\arthu\Downloads\WiperSoft-installer.exe
2017-05-16 21:23 - 2017-05-16 21:23 - 00000000 ____D C:\Users\arthu\AppData\Local\Firefox
2017-05-16 20:33 - 2017-05-25 22:54 - 00002131 ____H C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-05-16 19:38 - 2017-05-16 19:59 - 00000000 ____D C:\Users\arthu\AppData\Roaming\ProductData
2017-05-16 19:28 - 2017-05-16 19:28 - 00000000 ____D C:\Users\arthu\AppData\Roaming\Firefox
2017-05-16 19:05 - 2017-05-25 12:38 - 00000000 ____D C:\ProgramData\BIT
2017-05-16 19:05 - 2017-05-24 16:49 - 00000000 ____D C:\Users\arthu\AppData\Roaming\WinSAPSvc
2017-05-16 19:05 - 2017-05-24 16:08 - 00000000 ____D C:\Users\arthu\AppData\Local\CWASRE
2017-05-16 19:02 - 2017-05-16 19:04 - 44309688 _____ (Mozilla) C:\Users\arthu\Desktop\Firefox Setup 53.0.2.exe
2017-05-16 18:55 - 2017-05-16 19:01 - 00000503 _____ C:\Users\arthu\Desktop\Nouveau document texte.txt
2017-05-16 18:43 - 2017-05-16 18:43 - 00000000 ____D C:\Users\Default\AppData\Local\AdvinstAnalytics
2017-05-16 18:43 - 2017-05-16 18:43 - 00000000 ____D C:\Users\Default User\AppData\Local\AdvinstAnalytics
2017-05-16 18:20 - 2017-05-16 18:20 - 00002052 _____ C:\WINDOWS\System32\Tasks\Au781tJlbX
2017-05-16 18:18 - 2017-05-16 18:18 - 00000000 ____D C:\ProgramData\Microleaves
2017-05-16 18:16 - 2017-05-16 19:17 - 00000000 ____D C:\Users\arthu\AppData\Local\TubeTime
2017-05-16 18:15 - 2017-05-16 19:10 - 00000402 _____ C:\WINDOWS\Tasks\Updater_Online_Application.job
2017-05-16 18:15 - 2017-05-16 19:10 - 00000370 _____ C:\WINDOWS\Tasks\Online Application V2G3.job
2017-05-16 18:15 - 2017-05-16 19:10 - 00000370 _____ C:\WINDOWS\Tasks\Online Application V2G2.job
2017-05-16 18:15 - 2017-05-16 19:10 - 00000370 _____ C:\WINDOWS\Tasks\Online Application V2G1.job
2017-05-16 18:15 - 2017-05-16 18:15 - 00003296 _____ C:\WINDOWS\System32\Tasks\Updater_Online_Application
2017-05-16 18:15 - 2017-05-16 18:15 - 00003260 _____ C:\WINDOWS\System32\Tasks\Online Application V2G3
2017-05-16 18:15 - 2017-05-16 18:15 - 00003260 _____ C:\WINDOWS\System32\Tasks\Online Application V2G2
2017-05-16 18:15 - 2017-05-16 18:15 - 00003260 _____ C:\WINDOWS\System32\Tasks\Online Application V2G1
2017-05-16 18:12 - 2017-05-16 18:12 - 00000062 _____ C:\WINDOWS\WeatherBuddy.INI
2017-05-16 18:10 - 2017-05-27 11:51 - 00624640 _____ C:\WINDOWS\system32\NetUtils2016.dll
2017-05-16 18:10 - 2017-05-16 19:33 - 00000000 ____D C:\Users\arthu\AppData\Local\AdvinstAnalytics
2017-05-16 18:10 - 2017-05-16 18:10 - 00907160 _____ C:\WINDOWS\system32\Drivers\NetUtils2016.sys
2017-05-16 18:10 - 2017-05-16 18:10 - 00000000 ____D C:\WINDOWS\system32\sstmp
2017-05-16 18:10 - 2017-05-16 18:10 - 00000000 ____D C:\Users\arthu\AppData\Roaming\devnull
2017-05-16 18:10 - 2017-05-16 18:10 - 00000000 ____D C:\ProgramData\089b7531-2527-0
2017-05-16 18:10 - 2017-05-16 18:10 - 00000000 ____D C:\ProgramData\089b7531-2133-1
2017-05-16 18:09 - 2017-05-16 18:09 - 00140800 _____ C:\Users\arthu\AppData\Local\installer.dat
2017-05-16 18:09 - 2017-05-16 18:09 - 00011568 _____ C:\Users\arthu\AppData\Local\InstallationConfiguration.xml
2017-05-16 18:08 - 2017-05-25 11:55 - 00000000 ____D C:\Program Files (x86)\SpeeDownloader
2017-05-16 18:08 - 2017-05-16 19:15 - 00000000 ____D C:\Users\arthu\AppData\Local\AppTrailers
2017-05-16 18:08 - 2017-05-16 19:15 - 00000000 ____D C:\Program Files (x86)\ProxyGate
2017-05-16 18:06 - 2017-05-16 18:06 - 00000000 ____D C:\Users\arthu\AppData\Roaming\InterStat
2017-05-16 18:05 - 2017-05-17 22:19 - 00000000 ____D C:\WINDOWS\SysWOW64\SSL
2017-05-16 18:05 - 2017-05-16 18:20 - 00000002 _____ C:\END
2017-05-16 18:05 - 2017-05-16 18:05 - 00006104 _____ C:\WINDOWS\System32\Tasks\Ghikilephufosy System
2017-05-16 18:04 - 2017-05-16 18:10 - 00000000 ____D C:\Users\arthu\AppData\Local\Jigerdrulerent
2017-05-16 17:45 - 2017-05-16 18:39 - 00000000 ____D C:\Users\arthu\.msf4
2017-05-15 18:36 - 2017-05-15 18:36 - 00998912 _____ C:\WINDOWS\232f0cb64e1b0a29c20f0a03564d8431.exe
2017-05-15 18:36 - 2017-05-15 18:36 - 00051627 _____ C:\WINDOWS\uninstaller.dat
2017-05-14 00:41 - 2017-05-16 21:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-05-14 00:41 - 2017-05-16 21:26 - 00000000 ____D C:\ProgramData\Avira
2017-05-14 00:03 - 2017-05-16 18:26 - 00002414 _____ C:\Users\arthu\.armitage.prop
2017-05-14 00:00 - 2017-05-14 00:00 - 00000000 ____D C:\Users\arthu\armitage-tmp
2017-05-13 19:59 - 2017-05-13 19:59 - 00000000 ____D C:\ProgramData\72921a6e-3371-0
2017-05-13 19:53 - 2017-05-16 19:24 - 00000000 ____D C:\ProgramData\{EBF30548-5C58-B2E3-C97C-5B4E3B05D8D2}
2017-05-13 19:53 - 2017-05-13 19:53 - 00004182 _____ C:\WINDOWS\System32\Tasks\{7B0E88DE-CCA5-3F75-0E84-AA5B70E4EC19}
2017-05-13 19:53 - 2017-05-13 19:53 - 00003882 _____ C:\WINDOWS\System32\Tasks\{EC2AD307-5605-7B3D-6E1A-9272DB3E5741}
2017-05-13 19:53 - 2017-05-13 19:53 - 00000000 ____D C:\ProgramData\72921a6e-2641-0
2017-05-13 19:52 - 2017-05-13 19:52 - 00000000 ____D C:\ProgramData\{445b761c-412c-1}
2017-05-13 19:52 - 2017-05-13 19:52 - 00000000 ____D C:\ProgramData\{179d346d-312c-0}
R2 Uefochubsrv; C:\WINDOWS\system32\drivers\Uefochubsrv.sys [196640 2017-05-17] ()
R1 netboostmaster; C:\WINDOWS\system32\drivers\netboostmaster.sys [2903912 2017-05-22] () [Fichier non signé]
R1 NetUtils2016; C:\WINDOWS\system32\drivers\NetUtils2016.sys [907160 2017-05-16] () <==== ATTENTION
S3 Amazon 1Button App Service; c:\Program Files (x86)\Amazon\Amazon1ButtonApp\Amazon1ButtonService64.Exe [436032 2016-02-17] (Amazon Inc.)
R2 Auhardwaregl; C:\Windows\SysWow64\Auhardwaregl.dll [454440 2017-05-17] ()
S2 pgt_svc; C:\Program Files (x86)\ProxyGate\MainService.exe [2285664 2017-02-22] (Gold Click Ltd) <==== ATTENTION
C:\Program Files (x86)\ProxyGate
Task: {761BDDA6-876A-414A-9216-ADE3CC5A4670} - \SoftUpgrade -> Pas de fichier <==== ATTENTION
Task: {77393353-130E-4C64-A9C8-F773717B31EC} - System32\Tasks\Ghikilephufosy System => C:\Program Files (x86)\Qerbeckarefeph\mdch.exe
Task: {16DA51AA-37E1-4875-9343-48EAC4E4BCE7} - System32\Tasks\Exalizer => Rundll32.exe "C:\Program Files\Exalizer\Exalizer.dll",OrETkmO
C:\Program Files\Exalizer
WMI_ActiveScriptEventConsumer_ASEC: <===== ATTENTION
Shortcut: C:\Users\arthu\Desktop\Мinecraft.lnk -> C:\Users\arthu\AppData\Roaming\Browsers\exe.rehcnualtfarcenim.bat ()
Shortcut: C:\Users\arthu\Desktop\Jeux\Моzillа Firеfоx.lnk -> C:\Users\arthu\AppData\Roaming\Browsers\exe.xoferif.bat ()
Shortcut: C:\Users\arthu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Сhromium.lnk -> C:\Users\arthu\AppData\Roaming\Browsers\exe.emorhc.bat ()
Shortcut: C:\Users\arthu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf\Оverwolf.lnk -> C:\Users\arthu\AppData\Roaming\Browsers\exe.rehcnualflowrevo.bat ()
Shortcut: C:\Users\arthu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Intеrnеt Ехplorer.lnk -> C:\Users\arthu\AppData\Roaming\Browsers\exe.erolpxei.bat ()
Shortcut: C:\Users\arthu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Gооglе Chrоmе.lnk -> C:\Users\arthu\AppData\Roaming\Browsers\exe.emorhc.bat ()
Shortcut: C:\Users\arthu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Сhrоmium.lnk -> C:\Users\arthu\AppData\Roaming\Browsers\exe.emorhc.bat ()
Shortcut: C:\Users\arthu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Мozilla Firеfox.lnk -> C:\Users\arthu\AppData\Roaming\Browsers\exe.xoferif.bat ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firеfоx.lnk -> C:\Users\arthu\AppData\Roaming\Browsers\exe.xoferif.bat ()
Shortcut: C:\Users\Public\Desktop\Lеaguе of Lеgends.lnk -> C:\Users\arthu\AppData\Roaming\Browsers\exe.rehcnual.lol.bat ()
C:\Users\arthu\AppData\Roaming\Browsers
Shortcut: C:\Users\Public\Desktop\Нeаrthstоnе.lnk -> C:\Users\arthu\AppData\Roaming\Browsers\exe.rehcnual ateb enotshtraeh.bat ()
Shortcut: C:\Users\Public\Desktop\Оvеrwatch.lnk -> C:\Users\arthu\AppData\Roaming\Browsers\exe.rehcnual hctawrevo.bat ()
ShortcutWithArgument: C:\Users\arthu\Desktop\Mozilla Firefox.lnk -> C:\Program Files (x86)\Firefox\Firefox.exe (Mozilla Corporation) -> hxxp://www.yeadesktop.com/
ShortcutWithArgument: C:\Users\arthu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromium.lnk -> C:\Users\arthu\AppData\Local\Chromium\Application\chrome.exe (The Chromium Authors) -> --load-extension="C:\Users\arthu\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" hxxp://www.yeadesktop.com/
ShortcutWithArgument: C:\Users\arthu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files (x86)\Firefox\Firefox.exe (Mozilla Corporation) -> hxxp://www.yeadesktop.com/
ShortcutWithArgument: C:\Users\arthu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.ourluckysites.com/?type=sc&ts=1495030955&z=83c5a871333b40ee80846f6g8z7tawaebc3e8t5wdo&from=che0812&uid=WDCXWD10JPVX-22JC3T0_WD-WXJ1AA5LXN15LXN15
ShortcutWithArgument: C:\Users\arthu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Chromium.lnk -> C:\Users\arthu\AppData\Local\Chromium\Application\chrome.exe (The Chromium Authors) -> --load-extension="C:\Users\arthu\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" hxxp://www.yeadesktop.com/
ShortcutWithArgument: C:\Users\arthu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Hippig\Application\chrome.exe (Google Inc.) -> --load-extension="C:\Users\arthu\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" hxxp://www.yeadesktop.com/
ShortcutWithArgument: C:\Users\arthu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Hippig\Application\chrome.exe (Google Inc.) -> --load-extension="C:\Users\arthu\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" hxxp://www.yeadesktop.com/
ShortcutWithArgument: C:\Users\arthu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Firefox\Firefox.exe (Mozilla Corporation) -> hxxp://www.yeadesktop.com/
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Hippig\Application\chrome.exe (Google Inc.) -> --load-extension="C:\Users\arthu\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" hxxp://www.yeadesktop.com/
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files (x86)\Firefox\Firefox.exe (Mozilla Corporation) -> hxxp://www.yeadesktop.com/
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Hippig\Application\chrome.exe (Google Inc.) -> --load-extension="C:\Users\arthu\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" hxxp://www.yeadesktop.com/
ShortcutWithArgument: C:\Users\Public\Desktop\Mozilla Firefox.lnk -> C:\Program Files (x86)\Firefox\Firefox.exe (Mozilla Corporation) -> hxxp://www.yeadesktop.com/
R2 WinAppSvr; C:\ProgramData\Microsoft\AppV\setup\install.dll [104448 2017-05-15] (TODO: <Company name>) [Fichier non signé] <==== ATTENTION
R2 WinSAPSvc; C:\Users\arthu\AppData\Roaming\WinSAPSvc\WinSAP.dll [1887232 2017-05-24] (TODO: <公司名>) [Fichier non signé] <==== ATTENTION
S2 1985670cc51c20cae480a47ce36581f9; C:\Program Files\1985670cc51c20cae480a47ce36581f9\01f76562ee3824f61939ac6dd6b1c722.exe [X]
S2 AdBlockerService; C:\Program Files (x86)\AdBlocker\AdBlockerService.exe [X]
S2 BIT; C:\ProgramData\BIT\BIT.dll [X] <==== ATTENTION
S2 CWASRE; C:\Users\arthu\AppData\Local\CWASRE\Snare.dll [X] <==== ATTENTION
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]
S3 MozillaMaintenance; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [X]
S2 OtherSearch; rundll32.exe C:\Program Files (x86)\0RCPDfZpIg\kl.dll,Svc [X] <==== ATTENTION
S2 ReimageRealTimeProtector; C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [X]
S3 TMService; C:\Program Files (x86)\WindowsTM\TMService.exe [X]
S2 UCBrowserSvc; C:\Program Files (x86)\UCBrowser\Application\UCService.exe [X] <==== ATTENTION
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Run: [cacaoweb] => C:\Users\arthu\AppData\Roaming\cacaoweb\cacaoweb.exe [568624 2017-04-09] ()
C:\Users\arthu\AppData\Roaming\cacaoweb
Task: C:\WINDOWS\Tasks\Online Application V2G1.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
C:\Program Files (x86)\Microleaves
Task: C:\WINDOWS\Tasks\Online Application V2G2.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\Online Application V2G3.job => C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\Updater_Online_Application.job => C:\Program Files (x86)\Microleaves\Online Application\Online Application Updater.exe <==== ATTENTION
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Run: [251721] => C:\Users\arthu\AppData\Roaming\885155\717520.exe
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Run: [253112] => C:\Users\arthu\AppData\Roaming\306434\839688.exe
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Run: [JXXZPILFKF216F2] => C:\Program Files\U5QOTH7G86\U5QOTH7G8.exe
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Run: [B0O4HQZIF3UJP12] => C:\Program Files (x86)\SpeeDownloader\OGP91.exe <===== ATTENTION
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Run: [7986] => C:\Users\arthu\AppData\Roaming\431321\219166.exe
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Run: [891181] => C:\Users\arthu\AppData\Roaming\502473\254766.exe
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Run: [NBKUNPHXOEB1ZO1] => C:\Program Files\99KO28RXG7\3N2VUCGGB.exe
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Run: [00Q9VPNYNA3JZZ8] => C:\Program Files\Q2HEDV9GEP\Q2HEDV9GE.exe
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Run: [359388] => C:\Users\arthu\AppData\Roaming\215114\572013.exe
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Run: [622265] => C:\Users\arthu\AppData\Roaming\293740\440399.exe
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Run: [AY0QIW0M2AXONOJ] => C:\Program Files\G4YIBZC2DO\G4YIBZC2D.exe
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Run: [DGKK47ZEG3RSFX9] => C:\Program Files\3PD3O6N2CQ\3PD3O6N2C.exe
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Run: [381026] => C:\Users\arthu\AppData\Roaming\149080\96723.exe
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Run: [830212] => C:\Users\arthu\AppData\Roaming\289609\104449.exe
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Run: [4YGIDS5P5AFJ4G4] => C:\Program Files\OO8U88YRQ7\OO8U88YRQ.exe
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Run: [5A9WLT0CEA71X3H] => C:\Program Files\7249EFZA1O\QVYAMH2VU.exe
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Run: [IKQR0W6MFCOJ496] => C:\Program Files\WZLA8M58SR\GRGBGP7TL.exe
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Run: [LXDW0O7L655XZ78] => C:\Program Files\64M97A3TBB\D8AW7EZD5.exe
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Run: [781256] => C:\Users\arthu\AppData\Roaming\633610\80210.exe
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Run: [msiql] => C:\Users\arthu\AppData\Local\Temp\is-RE4F8.tmp\PopWnd.exe /RUNNING <===== ATTENTION
HKU\S-1-5-21-1953995666-1205412789-2726256390-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKLM\...\Providers\vaqe36k6: C:\Program Files (x86)\Ghikilephufosy System\local64spl.dll
IFEO\BigUpgrade_IU.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\BlueStacksTV.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\BlueStacksUI.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\BSTGameLauncher.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\BstkVMMgr.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\COMScore.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\DSPut.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\Feedback.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\GameConsole-wt.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\GameConsole.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\GameLauncher.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\GameLicensing.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\GamesAppIntegrationService.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\GamesAppService.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\glcheck.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\GoogleUpdate.exe: [Debugger] 324095823984.exe
IFEO\GoogleUpdaterService.exe: [Debugger] 8736459873644.exe
IFEO\HD-BlockDevice.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\HD-BlockDeviceTool.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\HD-ConfigHttpProxy.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\HD-CreateSymlink.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\HD-DataManager.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\HD-DeviceCaps.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\HD-Frontend.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\HD-GuestCommandRunner.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\HD-InstallChecker.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\HD-logCollector.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\HD-Network.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\HD-Plus-Tool-Native.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\HD-Quit.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\HD-Restart.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\HD-Service.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\HD-SharedFolder.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\HD-SslCertificateTool.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\HD-StartLauncher.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\HD-unzip.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\HD-Updater.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\HD-VmManager.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\HD-zip.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\Install_PintoStartMenu.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\IObitDownloader.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\IObitRegister.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\IUDM.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\IUPluginNotice.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\IUService.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\IU_InstallBeforWork.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\MUILink.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\NativeUserProxy.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\NoteIcon.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\PatchHelper.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\Restore.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\ScreenOrientationx64.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\ScreenShot.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
IFEO\SendBugReportNew.exe: [Debugger] C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\AutoReactivator.exe
ShellExecuteHooks: Pas de nom - {8460D312-3388-11E7-AD19-64006A5CFC23} - C:\Users\arthu\AppData\Roaming\Phamasp\Aralaphstigersy.dll -> Pas de fichier
Hosts:
EmptyTemp:
RemoveProxy:
Reboot:
Une fois, le texte collé dans le Bloc-notes,
Menu "Fichier" puis "Enregistrer sous",
A gauche, place toi sur le Bureau,
Dans le champs en bas, nom du fichier mets : fixlist.txt
Clique sur "Enregistrer", cela va créer fixlist.txt sur le Bureau.
Relance FRST et clique sur le bouton "Corriger / Fix"
Un redémarrage sera peut-être nécessaire ( pas obligatoire )
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.
Redémarre l'ordinateur.
2°)
Réinitialise/Répare les navigateurs WEB concernés par les problèmes :- Réparer Mozilla Firefox (premier paragraphe)
- Réparer Google Chrome (seulement le premier paragraphe).
- Réinitialiser et réparer Internet Explorer
3°)
Termine par un nettoyage Malwarebytes - Tutoriel Malwarebytes Anti-Malware version gratuite
4°)
Vois ce que cela donne et si des améliorations ont eu lieu.
Si ce n'est pas le cas, s itu as encore des pages de pubs intempestives, précise sur quel navigateur WEB.
Refais un scan FRST et donne les nouveaux rapports via pjjoint.
Veuillez appuyer sur une touche pour continuer la désinfection... -
Bonsoir,
Merci beaucoup de ta réponse, je fais ça tout de suite et je te réponds demain matin.
Bonne soirée -
Bonsoir,
Excuse moi d'avoir mis du temps a répondre.
Mon problème est règlé, merci, j'ai réinitialiser windows et grâce a ça, plus d'application indésirable qui s'installent, mon navigateur est redevenu ce que j'avais mis, etc...
Merci beaucoup d'avoir pris le temps de m'aider,
Bonne continuation -
Modérateurok je pense que c'est le mieux
évite les programmes de nettoyage (IOBit etc)
A la limite CCleaner et encore.
Ca n'apporte que des problèmes.
Evite les nettoyages AdwCleaner réguliers.
Fais seulement des analyses Malwarebytes.
Veuillez appuyer sur une touche pour continuer la désinfection...
