[Résolu] Enlever Delta Search

[jeremai]

Bonjour a tous!

 

Voila comme pas mal de gens je me suis fais avoir avec delta search...

J'ai desinstaller les toolbar mais rien y fait il est toujours là...

Pourriez vous m'aider a enlever ce virus?

Merci d'avance!

 

Jeremai

[pear]

Bonjour,

 

1)Télécharger AdwCleaner

Sous Vista et Windows 7-> Exécuter en tant qu'administrateur

 

Cliquez sur Recherche et postez le rapport généré C:\AdwCleaner[R1].txt

 

NettoyageA faire sans délai

Relancez AdwCleaner avec droits administrateur

Cliquez sur Suppression et postez le rapport C:\AdwCleaner[s1].txt

 

2)Zhpdiag 1.34

 

Double-cliquer sur ZHPDiag.exe pour installer l'outil

Sur le bureau ,il devrait y avoir 3 icônes

 

Sous XP, double clic sur l'icône ZhpDiag

Sous Vista/7, faire un clic droit et Exécuter en tant qu'administrateur

 

 

Cliquez sur le bouton

en haut, à droite et choisissez Tous

Pour éviter un blocage, décochez 045 et 061

 

Clic sur la Loupe en haut, à gauche pour lancer le scan

Postez le rapport ZhpDiag.txt qui apparait sur le bureau

 

Comment poster les rapports

Cliquez sur ce bouton en haut, à droite

Appuyez sur Parcourir et chercher le rapport ,

Cliquer sur Envoyer

>> dans la page suivante -->

Cliquer Pjjoint Uploader ,,

une adresse http//.. sera créée

Copier /coller cette adresse dans votre prochain message.

[jeremai]

Merci pour cette reponse tres rapide!

 

J'ai fais les 3 etapes et voici les rapports:

 

ZHP Diag

 

 

adwcleaner R1:

 

 

# AdwCleaner v2.112 - Logfile created 02/17/2013 at 16:06:58

# Updated 10/02/2013 by Xplode

# Operating system : Windows 8 Pro (32 bits)

# User : jeremy - PC-DE-JEREMY

# Boot Mode : Normal

# Running from : E:\Téléchargements\adwcleaner0.exe

# Option [search]

 

 

***** [services] *****

 

Found : WajamUpdater

 

***** [Files / Folders] *****

 

Folder Found : C:\Program Files\Wajam

Folder Found : C:\Program Files\Yontoo

Folder Found : C:\ProgramData\Babylon

Folder Found : C:\ProgramData\BrowserProtect

Folder Found : C:\ProgramData\Tarma Installer

Folder Found : C:\Users\jeremy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp

Folder Found : C:\Users\jeremy\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc

Folder Found : C:\Users\jeremy\AppData\Local\Wajam

Folder Found : C:\Users\jeremy\AppData\LocalLow\Delta

Folder Found : C:\Users\jeremy\AppData\Roaming\Babylon

Folder Found : C:\Users\jeremy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam

 

***** [Registry] *****

 

Data Found : HKLM\..\Windows [AppInit_DLLs] = c:\progra~2\browse~1\261095~1.52\{c16c1~1\browse~1.dll

Key Found : HKCU\Software\aedc8fb56dba10

Key Found : HKCU\Software\DataMngr

Key Found : HKCU\Software\DataMngr_Toolbar

Key Found : HKCU\Software\InstallCore

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}

Key Found : HKCU\Software\Wajam

Key Found : HKLM\SOFTWARE\14919ea49a8f3b4aa3cf1058d9a64cec

Key Found : HKLM\SOFTWARE\aedc8fb56dba10

Key Found : HKLM\Software\Babylon

Key Found : HKLM\SOFTWARE\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}

Key Found : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}

Key Found : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}

Key Found : HKLM\SOFTWARE\Classes\AppID\priam_bho.DLL

Key Found : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL

Key Found : HKLM\SOFTWARE\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{5D64294B-1341-4FE7-B6D8-7C36828D4DD5}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}

Key Found : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}

Key Found : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}

Key Found : HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}

Key Found : HKLM\SOFTWARE\Classes\Prod.cap

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}

Key Found : HKLM\SOFTWARE\Classes\wajam.WajamBHO

Key Found : HKLM\SOFTWARE\Classes\wajam.WajamBHO.1

Key Found : HKLM\SOFTWARE\Classes\wajam.WajamDownloader

Key Found : HKLM\SOFTWARE\Classes\wajam.WajamDownloader.1

Key Found : HKLM\SOFTWARE\Classes\YontooIEClient.Api

Key Found : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1

Key Found : HKLM\SOFTWARE\Classes\YontooIEClient.Layers

Key Found : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1

Key Found : HKLM\Software\DataMngr

Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp

Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wajam

Key Found : HKLM\Software\Tarma Installer

Key Found : HKLM\Software\Wajam

Key Found : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater

Key Found : HKU\S-1-5-21-2480606611-1086660694-890410286-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

 

***** [internet Browsers] *****

 

-\\ Internet Explorer v10.0.9200.16384

 

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=a82f1afa0000000000005e85de754be0

 

-\\ Google Chrome v24.0.1312.57

 

File : C:\Users\jeremy\AppData\Local\Google\Chrome\User Data\Default\Preferences

 

Found [l.8] : homepage = "hxxp://www.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=a82f1afa0000000000005e85de754be0",

Found [l.12] : urls_to_restore_on_startup = [ "hxxp://www.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=a82f1afa0000000000005e85de754be0" ]

Found [l.43] : icon_url = "hxxp://www.delta-search.com/favicon.ico",

Found [l.46] : keyword = "delta-search.com",

Found [l.49] : search_url = "hxxp://www.delta-search.com/?q={searchTerms}&affID=119816&babsrc=SP_ss&mntrId=a82f1afa0000000000005e85de754be0",

Found [l.1832] : homepage = "hxxp://www.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=a82f1afa0000000000005e85de754be0",

Found [l.2166] : urls_to_restore_on_startup = [ "hxxp://www.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=a82f1afa0000000000005e85de754be0" ]

 

*************************

 

AdwCleaner[R1].txt - [6632 octets] - [17/02/2013 16:06:58]

 

########## EOF - C:\AdwCleaner[R1].txt - [6692 octets] ##########

 

 

adwcleaner S1:

 

 

# AdwCleaner v2.112 - Logfile created 02/17/2013 at 16:13:24

# Updated 10/02/2013 by Xplode

# Operating system : Windows 8 Pro (32 bits)

# User : jeremy - PC-DE-JEREMY

# Boot Mode : Normal

# Running from : E:\Téléchargements\adwcleaner0.exe

# Option [Delete]

 

 

***** [services] *****

 

 

***** [Files / Folders] *****

 

Deleted on reboot : C:\ProgramData\BrowserProtect

Folder Deleted : C:\Program Files\Wajam

Folder Deleted : C:\Program Files\Yontoo

Folder Deleted : C:\ProgramData\Babylon

Folder Deleted : C:\ProgramData\Tarma Installer

Folder Deleted : C:\Users\jeremy\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp

Folder Deleted : C:\Users\jeremy\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc

Folder Deleted : C:\Users\jeremy\AppData\Local\Wajam

Folder Deleted : C:\Users\jeremy\AppData\LocalLow\Delta

Folder Deleted : C:\Users\jeremy\AppData\Roaming\Babylon

Folder Deleted : C:\Users\jeremy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam

 

***** [Registry] *****

 

Data Deleted : HKLM\..\Windows [AppInit_DLLs] = c:\progra~2\browse~1\261095~1.52\{c16c1~1\browse~1.dll

Key Deleted : HKCU\Software\aedc8fb56dba10

Key Deleted : HKCU\Software\DataMngr

Key Deleted : HKCU\Software\DataMngr_Toolbar

Key Deleted : HKCU\Software\InstallCore

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}

Key Deleted : HKCU\Software\Wajam

Key Deleted : HKLM\SOFTWARE\14919ea49a8f3b4aa3cf1058d9a64cec

Key Deleted : HKLM\SOFTWARE\aedc8fb56dba10

Key Deleted : HKLM\Software\Babylon

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\priam_bho.DLL

Key Deleted : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5D64294B-1341-4FE7-B6D8-7C36828D4DD5}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}

Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D372567D-67C1-4B29-B3F0-159B52B3E967}

Key Deleted : HKLM\SOFTWARE\Classes\wajam.WajamBHO

Key Deleted : HKLM\SOFTWARE\Classes\wajam.WajamBHO.1

Key Deleted : HKLM\SOFTWARE\Classes\wajam.WajamDownloader

Key Deleted : HKLM\SOFTWARE\Classes\wajam.WajamDownloader.1

Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api

Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1

Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers

Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Layers.1

Key Deleted : HKLM\Software\DataMngr

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wajam

Key Deleted : HKLM\Software\Tarma Installer

Key Deleted : HKLM\Software\Wajam

Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater

 

***** [internet Browsers] *****

 

-\\ Internet Explorer v10.0.9200.16384

 

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=a82f1afa0000000000005e85de754be0 --> hxxp://www.google.com

 

-\\ Google Chrome v24.0.1312.57

 

File : C:\Users\jeremy\AppData\Local\Google\Chrome\User Data\Default\Preferences

 

Deleted [l.8] : homepage = "hxxp://www.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=a82f1afa00000000000[...]

Deleted [l.12] : urls_to_restore_on_startup = [ "hxxp://www.delta-search.com/?affID=119816&babsrc=HP_ss&mnt[...]

Deleted [l.43] : icon_url = "hxxp://www.delta-search.com/favicon.ico",

Deleted [l.46] : keyword = "delta-search.com",

Deleted [l.49] : search_url = "hxxp://www.delta-search.com/?q={searchTerms}&affID=119816&babsrc=SP_ss&mntrId=a[...]

Deleted [l.1832] : homepage = "hxxp://www.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=a82f1afa0000000000005e[...]

Deleted [l.2167] : urls_to_restore_on_startup = [ "hxxp://www.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId[...]

 

*************************

 

AdwCleaner[R1].txt - [6761 octets] - [17/02/2013 16:06:58]

AdwCleaner[R2].txt - [6858 octets] - [17/02/2013 16:13:19]

AdwCleaner[s1].txt - [331 octets] - [17/02/2013 16:07:42]

AdwCleaner[s2].txt - [6715 octets] - [17/02/2013 16:13:24]

 

########## EOF - C:\AdwCleaner[s2].txt - [6775 octets] ##########

[pear]

Vous devez trouver sur le bureau ou ,sinon, dans le dossier où vous avez installé Zhpdiag ces 3 icônes .

Cliquer sur l'icône Zhpfix

Sous Vista/7 clic-droit, "Exécuter En tant qu'Administrateur

Copiez/Collez les lignes vertes dans le cadre ci dessous:

pour cela;

Clic gauche maintenu enfoncé, Balayer l'ensemble du texte à copier avec la souris pour le mettre en surbrillance ,de gauche à droite et de haut en bas

Ctrl+c mettre le tout en mémoire

Ctrl+v pour inscrire le texte dans le Document ou, mieux, en cliquant le bouton Coller le presse papier au milieu,en haut, à gauche[1]

 

O42 - Logiciel: Bundled software uninstaller - (.Unknown owner.) [HKLM] -- bi_uninstaller => Infection Web (Adware.MegaSearch)

[HKCU\Software\BI] => Infection Web (Adware.MegaSearch)

O43 - CFD: 2/17/2013 - 3:12:29 PM - [0] ----D C:\ProgramData\BrowserProtect => Infection PUP (Toolbar.Babylon)*

O43 - CFD: 2/17/2013 - 3:12:35 PM - [0.220] ----D C:\Users\jeremy\AppData\Local\Bundled software uninstaller => Infection Web (Adware.MegaSearch)

[MD5.57BC8F4F1201610668773875A4484C1E] [sPRF][1/31/2013] (.Babylon Ltd. - Uninstaller Application.) -- C:\Users\jeremy\AppData\Local\Temp\uninst1.exe [392784] => Infection PUP (Toolbar.Babylon)*

C:\Users\jeremy\AppData\Local\Bundled software uninstaller => Infection Web (Adware.MegaSearch)

C:\Users\jeremy\AppData\Local\Temp\uninst1.exe => Infection BT (Toolbar.Babylon)

O20 - AppInit_DLLs: . (...) - C:\Program Files\nvidia~1\3dvisi~1\nvstinit.dll (.not file.) => Fichier absent

O44 - LFC:[MD5.8CF2B639F0324328B9902120198FF4AA] - 2/17/2013 - 4:13:31 PM ---A- . (...) -- C:\Windows\DeleteOnReboot.bat [97] => Xplode - AdwCleaner DeleteOnReboot

O44 - LFC:[MD5.86DCEFF691317BC73E3E69B549C9AEF1] - 2/17/2013 - 7:38:08 PM ---A- . (...) -- C:\Windows\DtcInstall.log [1720] => Fichiers de rapport (Log)

[MD5.11D751D299B9ABDC77BFF4156C75C4CF] [sPRF][2/17/2013] (...) -- C:\Users\jeremy\AppData\Local\Temp\bitool.dll [38480] => Temporary file not necessary

[MD5.3D7CDC3E67A97110321BF7453C649B1F] [sPRF][2/17/2013] (...) -- C:\Users\jeremy\AppData\Local\Temp\DeltaTB.exe [775664] => Temporary file not necessary

[MD5.285CF63517A9F3250115437C5DB11D1E] [sPRF][10/3/2012] (.NVIDIA Corporation - NVIDIA Stereo Initialization dll, Version 306.97.) -- C:\Users\jeremy\AppData\Local\Temp\nvStInit.dll [17288] => Temporary file not necessary

C:\Users\jeremy\AppData\Local\Temp\nsn579A.tmp => Temporary file not necessary

C:\Users\jeremy\AppData\Local\Temp\nsq84B5.tmp => Temporary file not necessary

[MD5.ED9C141309C79B1C87777AC62DAF92C3] [sPRF][2/17/2013] (...) -- C:\Users\jeremy\AppData\Local\Temp\wajam_install.exe [444056] => Toolbar.Wajam*

C:\Users\jeremy\AppData\Local\Temp\wajam_install.exe => Toolbar.Wajam*

EmptyFlash

EmptyTemp

EmptyClsid

FirewallRaz

Proxyfix

Hostfix

SysRestore

 

Cliquer sur "Go" |2]

 

Si vous ne voyez pas le boutonGo, cliquez sur le bouton du milieu, en haut, à gauche.[1]

Redémarrer pour achever le nettoyage.

 

Copier-coller,dans la réponse, le contenu du rapport ZHPFixReport.txt qui s'affiche .

Si besoin; il est enregistré sous C:\ZHP\ZHPFixReport.txt

[jeremai]

Voici le rapport:

 

Rapport de ZHPFix 1.3.16 par Nicolas Coolman, Update du 15/02/2013

Fichier d'export Registre : C:\ZHP\ZHPExportRegistry-2-17-2013-6-57-20 PM.txt

Run by jeremy at 2/17/2013 6:57:20 PM

High Elevated Privileges : OK

Windows 8 Business Edition, 32-bit (Build 9200)

 

Recycle Files Deleted

 

========== Software ==========

NOT FOUND Uninstall Process: c:\users\jeremy\local settings\application data\bundled software uninstaller\bi_client.exe

 

========== Memory Process ==========

DELETED Memory Process: C:\Users\jeremy\AppData\Local\Temp\wajam_install.exe

 

========== Registry Key ==========

DELETED Key: HKCU\Software\BI

 

========== Registry Value ==========

No Value in Standard Profile Register Key FirewallRaz :

No Value in Domain Profile Register Key FirewallRaz :

DELETED FirewallRaz (Domain) : {77C2D87D-0E8C-482E-A214-64BC5D93F597}

DELETED FirewallRaz (Domain) : {E87C4EB6-6F4C-4E7F-8385-633B5F0CA2DD}

DELETED FirewallRaz (None) : MCX-Prov-Out-TCP

DELETED FirewallRaz (None) : MCX-McrMgr-Out-TCP

DELETED FirewallRaz (Domain) : NetPres-In-TCP-NoScope

DELETED FirewallRaz (Domain) : NetPres-Out-TCP-NoScope

DELETED FirewallRaz (None) : NetPres-WSD-In-UDP

DELETED FirewallRaz (None) : NetPres-WSD-Out-UDP

DELETED FirewallRaz (Public) : NetPres-In-TCP

DELETED FirewallRaz (Public) : NetPres-Out-TCP

DELETED FirewallRaz (Private) : {EF57498A-5A23-4E9E-990D-420EBD1459EA}

DELETED FirewallRaz (Private) : {A0FFB694-C79E-42E3-BD03-4855BAD2BFB4}

DELETED FirewallRaz (Private) : TCP Query User{E15FB7F3-8836-41EA-9074-E662113EDC31}C:\program files\world of warcraft\temp\wow-4.3-5.0.15890-enus-downloader.exe

DELETED FirewallRaz (Private) : UDP Query User{AA7C769B-B036-4BB1-BD5F-ABB7794E4BDC}C:\program files\world of warcraft\temp\wow-4.3-5.0.15890-enus-downloader.exe

ProxyFix : Proxy killed successfully

DELETED ProxyServer Value

DELETED ProxyEnable Value

DELETED EnableHttp1_1 Value

DELETED ProxyHttp1.1 Value

DELETED ProxyOverride Value

 

========== Registry Data Items ==========

REMOVED AppInit: \Program Files\nvidia~1\3dvisi~1\nvstinit.dll

 

========== Repertory ==========

No Empty CLSID Directories

 

========== File ==========

NOT FOUND Folder/File: c:\users\jeremy\appdata\local\temp\uninst1.exe lbar.babylon)*

NOT FOUND Folder/File: c:\users\jeremy\appdata\local\bundled software uninstaller => infection web (adware.megasearch)

NOT FOUND Folder/File: c:\users\jeremy\appdata\local\temp\uninst1.exe => infection bt (toolbar.babylon)

DELETE on Reboot \program files\nvidia~1\3dvisi~1\nvstinit.dll

DELETED File: c:\windows\deleteonreboot.bat

DELETED File: c:\windows\dtcinstall.log

NOT FOUND Folder/File: c:\users\jeremy\appdata\local\temp\bitool.dll necessary

NOT FOUND Folder/File: c:\users\jeremy\appdata\local\temp\deltatb.exe necessary

NOT FOUND Folder/File: c:\users\jeremy\appdata\local\temp\nvstinit.dll necessary

NOT FOUND Folder/File: c:\users\jeremy\appdata\local\temp\nsn579a.tmp => temporary file not necessary

NOT FOUND Folder/File: c:\users\jeremy\appdata\local\temp\nsq84b5.tmp => temporary file not necessary

DELETED File*: c:\users\jeremy\appdata\local\temp\wajam_install.exe

NOT FOUND Folder/File: c:\users\jeremy\appdata\local\temp\wajam_install.exe => toolbar.wajam*

DELETED Flash Cookies

DELETED Window Temporary

 

========== Hosts file ==========

Hosts File not cleaned (Please Deactivate your Antivirus)

 

========== Restoration ==========

Restore System Point created succefully

 

 

========== Summary ==========

1 : Memory Process

1 : Registry Key

22 : Registry Value

1 : Registry Data Items

1 : Repertory

15 : File

1 : Software

1 : Hosts file

1 : Restoration

 

 

End of clean in 49mn AMs

 

========== Report File ==========

C:\ZHP\ZHPFix[R1].txt - 2/17/2013 6:57:20 PM [3688]

[pear]

C'est bon.

 

Autre chose ?

[jeremai]

En fait, j'ai toujours la recherche avec delta search, certes je peux la désactiver et mettre Google à la place, mais est-ce qu'il y a toujours des risques ?

[pear]

En fait, j'ai toujours la recherche avec delta search, certes je peux la désactiver et mettre Google à la place, mais est-ce qu'il y a toujours des risques ?

 

cela a semble-t-il été corrigé dans IE.

 

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=a82f1afa0000000000005e85de754be0 --> hxxp://www.google.com

 

Si Chrome fait problème , corrigez le.

[jeremai]

C'est tout bon merci beaucoup a la prochaine

[Dylav]

Le problème semble avoir trouvé sa solution.

Ainsi, afin de signaler clairement à ceux qui ont un problème similaire qu'ils ont peut-être une solution toute trouvée (s'ils pensent à utiliser la fonction Recherche en indiquant le mot-clé "résolu" auparavant), et afin de signaler aux autres contributeurs qu'il est inutile de continuer à se creuser la tête sur le problème (à moins d'avoir des suppléments d'informations à apporter pour mieux comprendre ce qui posait problème), un modérateur a préfixé le titre du topic avec la mention [Résolu].

Merci, à l'avenir, de bien vouloir prendre à votre charge cette mise à jour quand vous estimez que votre problème a été résolu de manière satisfaisante (et parallèlement, si le problème a disparu "mystérieusement", inutile d'induire les gens en erreur ) Pour cela, votre premier message